Bidder QA - 190000000058 - Posted- 11.27.18.docx

DOCX document 83 KB Posted

Attached to
CMS Third Party Annual Assessment
Solicitation number
RFP-171-190000000058-2
Issued by
Grand Traverse County, Lansing City, Michigan

About this file

This is a Bidder Questions & Answers document for RFP #190000000058 issued by the State of Michigan Enterprise Procurement Department of Technology Management and Budget for a CMS Onsite Security Assessment. The document addresses eight questions regarding the scope and requirements of the security assessment project, which involves evaluating CGI datacenters in Phoenix, AZ (primary) and Philadelphia, PA (backup), as well as a Maximus datacenter in Colorado. The assessments are structured in 3-year cycles, with 2019 being the third year of one cycle and 2020 beginning a new cycle.

The pricing requirements specify that vendors must provide both annual pricing and total contract pricing for all four years. Key operational requirements stipulate that while companies from outside the United States can bid, all work must be performed within the continental United States, and contractors must attend meetings in person. The State requires all proposals to be submitted electronically through the SIGMA system at www.michigan.gov/SIGMAVSS, and no email submissions are permitted. The State offers access to previous security assessment documentation through the Solicitation Manager for bidders to better understand the scope complexity.

View the file

Other files

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

STATE OF MICHIGAN

ENTERPRISE PROCUREMENT

Department Technology Management and Budget 525 W Allegan St.

Lansing, Michigan 48913

Bidder Questions & Answers

RFP # 190000000058

CMS Onsite Security Assessment **Please note that there have been a few changes made to the Request for Proposal (RFP). Please see the attached redlined and clean version to see changes.

Q #
Document and Section
Page #
Bidder Question
Answer (to be completed by the State)
1
General

Whether companies from Outside CANADA can apply for this?

(like, from India or USA) Companies from outside the United States can apply for this. However, there are requirements that must be met, see answers to questions 2 and 3.

2
General
Whether we need to come over there for meetings?
Yes, Contractors would be required to attend meetings in the United States. Schedule A, Section 4.2. Meetings, states: “The Contractor must attend the following meetings…”
3
General

Can we perform the tasks (related to RFP) outside CANADA (like, from India or USA) No, all tasks relating to this RFP must be completed in the United States; additionally, State data cannot reside outside the continental United States.

4
General

Can we submit the proposals via email?

No, all proposals must be posted electronically through the State of Michigan computer system, SIGMA at www.michigan.gov/SIGMAVSS Please see Proposal Instructions, Section 5 in RFP. (page 2 of RFP)

5
Schedule A - Statement of Work - Scope
13
What are the locations of the CGI Datacenters and the Maximus Datacenter?
CGI Primary Data Center, Phoenix, AZ; CGI Backup Data Center, Philadelphia, PA; Maximus Data Center is in Colorado
6
Schedule A - Statement of Work - Scope
13 and 14
The Assessment Controls planned for Annual assessment states two "Year 3"s. One for 2019 and one for 2022. Is this an error?
The assessments run in 3-year cycles. The Assessment year in the heading on page 13 refers to which year of the cycle that assessment falls under. 2019 is the third year in a cycle, 2020 begins the first year of a new cycle.
7
Schedule A - Statement of Work - Scope
13
Is it possible for the State to make the Security Assessment from this year or a previous year available for review to allow us to estimate the complexity of the controls?
MARS-E catalog of security controls along with the CMS Security Assessment Report (SAR) template. **Due to system constraints, file is too large to post. Please email Solicitaion Manager at spitzleyL4@michigan.gov if you would like a copy.
8.
Schedule B - Pricing
Would the State like to see pricing for all 4 years broken out separately or just the total for all 4 years?
The State is looking for set pricing, please list annual price as well as full contract price

07/19/2016 image1.jpeg

File details come from the government source that posted it. Updated .