Administrative Appendix C – Supplier Profile Supplier Corporate Overview Business State Supplier’s core business, background, and experience in the relevant market, (not to exceed 3 pages).

Corporate Identity Provide the identity of any parent entity, including address, phone and fax numbers, FEIN or tax ID No., company web site and contact email. Provide the identity of any of Supplier’s subsidiaries, as applicable (not to exceed 3 pages).

Organization and Structure Provide an overview of Supplier’s organizational operating structure and describe the operational and functional relationships of the business units within the organization, as they relate to Supplier’s application and Agency’s stated needs and requirements. Organizational charts are helpful supplements to the descriptions.

Indicate whether Supplier expects to provide the Service with existing resources or plans to secure additional resources by partnering or subcontracting. If applicable, identify the additional resources required to provide the Service included in the application and the timetable for obtaining such resources. If Supplier expects to utilize a partnership or subcontracting relationship, any such partner or subcontractor shall comply with the requirements of RFA Section 4.B.4) Authorization to Transact Business in the Commonwealth – Code § 2.2-4311.2.

Locations Describe the geographical locations of Supplier at the national, regional, and local levels, as applicable. Identify all locations that will be used to support any contract resulting from this RFA and the operations handled from these locations. Clearly identify any overseas locations that may be used to support the resultant contract or any related data transactions.

Strategic Relationships Identify any and all strategic relationships with other related firms that Supplier has or anticipates having during the contract performance period. Other related firms may include but not limited to publishers/manufacturers, distributors, resellers, channel partners, etc. Please articulate the roles and responsibilities between entities and describe any agreements that Supplier has executed with named firms. Describe any definition of legal authority, liability transfer, etc. included in such executed agreements.

Specifically, identify all subcontractors expected to be utilized and any third-party service/solution to be utilized by Supplier in implementing its proposed Service/Solution. Agency reserves the right to request that Supplier provide all the information described in this section for any and all subcontractors proposed by Supplier. In addition to listing all subcontractors here and describing the services performed, Supplier must also complete Exhibit H Small Business (SWAM) Subcontracting Plan for all DSBSD-certified small or micro subcontractors (as defined in Exhibit H).

ISO 9001 Certification Indicate if Supplier is ISO certified. Yes or no is sufficient. If “yes”, identify the area(s) certified (e.g., services, manufacturing).

Financial Information Total Annual Revenue State Supplier’s total annual revenue and indicate the revenues associated with the provision of Service relevant to the application.

Dun and Bradstreet (“D&B”) Credit Report Include Supplier’s current full D&B Business Report, if D&B issues reports on Supplier.

Annual Reports Provide certified, audited financial statements (i.e., income statements, balance sheets, cash flow statements) for the most recent three years. (Any Supplier that has been in business for a shorter period of time is requested to submit any available certified, audited annual financial statements.) Agency may request copies of or access to current and historic annual reports. Agency reserves the right to access a Supplier’s publicly available financial information and to consider such information in its evaluation of such Supplier’s application.

Research and Development State the percentage of Supplier’s total revenue invested in Research and Development, if applicable.

Future, Long-Term Vision and Strategic Plans Provide information on Supplier’s future, long-term vision, and strategic plans as they relate to the direction of the proposed solution and describe a clear vision of how Supplier plans to support emerging technologies and industry standards.

Supplier Experience Level and Customer References Supplier should have a demonstrable, proven record of providing Service similar to those defined in Exhibit A: Requirements to customers of similar scope and complexity. Please provide three customer references, with contact names, email addresses, phone numbers, Solution descriptions, and dates implemented that Agency may use as a reference check in evaluating Supplier’s application. Agency will make such reasonable investigations as deemed proper and necessary to determine the ability of a Supplier to perform a resultant contract. These may include, but may not be limited to, reference checks and interviews. The references should be from organizations where Supplier is providing (or has provided) Services that are similar in type and scope to those identified in Exhibit A: Requirements.

Supplier Reference #1: Reference’s Organization Name _________________

E-mail Point of Contact Phone Number Reference’s Contract No.

Reference’s Project Manager Name Project Manager E-mail Project Manager

Project Description

Reference’s Contract Manager

Contract Manager E-mail Contract Manager

Contract Performance Period

Supplier Reference #2: Reference’s Organization Name _______________________

E-mail Point of Contact

Reference’s Contract No.

Reference’s Project Manager

Project Manager E-mail Project Manager

Project Description

Reference’s Contract Manager

Contract Manager E-mail Contract Manager

Contract Performance Period

Supplier Reference #3: Reference’s Organization Name __________________________

E-mail Point of Contact

Reference’s Contract No.

Reference’s Project Manager

Project Manager E-mail Project Manager

Project Description

Reference’s Contract Manager

Contract Manager E-mail Contract Manager

Contract Performance Period

Past Contracts List all contracts, accounts, projects, and/or engagements that were lost or cancelled in the past three (3) years and the reason for the loss and cancellation.

Disclose any pending or expected litigation or any litigation to which the Supplier has been a party in the last three (3) years that may impact Supplier’s ability to deliver the required services if a contract is awarded as a result of this RFA. Also indicate if any pending or expected litigation is related to Supplier’s proposed services or services that are similar in scope to the solution proposed.

Performance Standards and Customer Satisfaction Describe the methodology used to develop Supplier’s internal performance standards, the processes and tools used to monitor and measure performance against those standards, and the management reporting systems that capture these data.

Indicate Supplier’s present customer satisfaction rating, summarize customer satisfaction criteria, and describe the methodology used to measure customer satisfaction. Please include any relevant publication ratings or articles.

Disclose any performance issues requiring escalation or requested corrective action by past or existing customers in the previous two years. Please explain in detail.

Governance and Compliance Management Describe Supplier’s management processes that ensure governance and compliance with all federally mandated laws and regulations used by the industry, and in provision of service offerings to Supplier’s customers. Also, provide a detailed description on how Supplier will provide governance and compliance with any of Agency’s or Authorized User’s required security and data privacy requirements, or any other requirements specified in this RFA, that are not currently managed by Supplier, but that Supplier will be willing to do should an award be made to Supplier.

Security Risk Management Overview Please provide an overview of Supplier’s comprehensive security risk management processes including the application, monitoring, and management of the controls used. Provide details as to how Supplier will establish the context for security risk-based decisions, how Supplier assess the risk, how Supplier responds to the risk once it’s determined, and how Supplier monitors the risk on an ongoing basis using communications and feedback for continuous improvement within the organization.

Disaster Recovery/Security Plan Describe in detail Supplier’s plans to mitigate against any disaster that would affect the ability to provide Agency with the proposed Service.

Agency reserves the right to seek additional information from Supplier regarding Supplier’s security infrastructure including, facility and information technology security. This may include Supplier providing its plans of action for the following security incidents, as applicable to the RFA:

a. Interruption of service including denial of service attacks

b. Vulnerability incidents

c. Data loss or compromise

d. Insider attacks

Service and Support Management

Post Implementation and Account Management Plan Provide a detailed description of the approach that Supplier would recommend in order to achieve maximum service levels within a minimal amount of time following service implementation.

Account Management Plan Provide a detailed description of the approach that Supplier would take in order to manage the business and performance aspects of an awarded contract.

Project Team

Provide the resumes of all key members of the project team as outlined in the instructions and table below. The Supplier is required to provide the appropriate team size and skillset required for this engagement. For each role, indicate if the role is a Key Personnel position, the minimum number of years of experience and any certifications required (e.g., PMP, MCSD). The below draft Supplier team composition can be used as a starting point. The Supplier will provide an updated team composition with the percentage each team member will be available to work on the project. Supplier is expected to justify the need for each resource and what role they will play.

1. Supplier must specify any additional skillsets and/or resources it expects to be allocated to enable the delivery of the scope defined in this RFA. In the application, Supplier will specify Authorized User staff that will be required to assist with the project and the percentage each is required to work on the project.

2. Describe the level of access the proposed project team members have within the organization and the authority they have to commit resources to meet unexpected surges in activity and/or to respond to service issues.

3. As applicable, describe Supplier’s vetting practices, including background checks, fingerprinting and citizenship verification, for employees and subcontractors who have access to Supplier’s security infrastructure and any federal vetting requirements that Supplier currently complies with/has complied with. Also, describe how Supplier would comply with a customer’s particular security vetting requirements.

4. Provide the time frame for the availability of project team members and the percentage of time these individuals are expected to be assigned to the Agency account. Agency may require a Supplier to involve Agency in the selection and rotation of any key account team members assigned to Agency.

K. Additional Value Please provide a synopsis or case study of results attributable to Supplier’s commitment to high quality and increased operating efficiency. This is requested to demonstrate the added value Supplier can offer and indicate the typical on-going cost reductions and service efficiencies Agency could expect to realize.

RFP Template Agency Confidential and Proprietary Page 1 of 35 Solicitation number BEN-25-048