Bidder QA - 190000000058 - Posted- 11.27.18.docx
DOCX document 83 KB Posted
- Attached to
- CMS Third Party Annual Assessment
- Solicitation number
- RFP 171 190000000058 2
- Issued by
- Grand Traverse County, Lansing City, Michigan
About this file
This is a Bidder Questions and Answers document issued by the State of Michigan Enterprise Procurement, Department of Technology Management and Budget, for RFP #190000000058 regarding a CMS Onsite Security Assessment. The document clarifies eligibility requirements, submission procedures, and project scope for international and domestic bidders. All work must be performed in the United States, with state data remaining within the continental United States. Contractors are required to attend meetings in the United States and must submit proposals electronically through Michigan's SIGMA system rather than via email. The assessment involves evaluation of security controls at three data center locations: CGI Primary Data Center in Phoenix, Arizona; CGI Backup Data Center in Philadelphia, Pennsylvania; and Maximus Data Center in Colorado. The assessment operates on three-year cycles, with evaluations scheduled for 2019, 2020, and 2022.
The State requests pricing presented with annual costs listed separately as well as a total contract price for all four years. Bidders may reference the MARS-E catalog of security controls and the CMS Security Assessment Report template to estimate assessment complexity, though the specific previous assessment report is available upon request from the Solicitation Manager due to file size constraints. The RFP included redlined and clean versions showing recent changes to the original solicitation document.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
STATE OF MICHIGAN
ENTERPRISE PROCUREMENT
Department Technology Management and Budget 525 W Allegan St.
Lansing, Michigan 48913
Bidder Questions & Answers
RFP # 190000000058
CMS Onsite Security Assessment **Please note that there have been a few changes made to the Request for Proposal (RFP). Please see the attached redlined and clean version to see changes.
| Q # |
| Document and Section |
| Page # |
| Bidder Question |
| Answer (to be completed by the State) |
| 1 |
| General |
Whether companies from Outside CANADA can apply for this?
(like, from India or USA) Companies from outside the United States can apply for this. However, there are requirements that must be met, see answers to questions 2 and 3.
| 2 |
| General |
| Whether we need to come over there for meetings? |
| Yes, Contractors would be required to attend meetings in the United States. Schedule A, Section 4.2. Meetings, states: “The Contractor must attend the following meetings…” |
| 3 |
| General |
Can we perform the tasks (related to RFP) outside CANADA (like, from India or USA) No, all tasks relating to this RFP must be completed in the United States; additionally, State data cannot reside outside the continental United States.
| 4 |
| General |
Can we submit the proposals via email?
No, all proposals must be posted electronically through the State of Michigan computer system, SIGMA at www.michigan.gov/SIGMAVSS Please see Proposal Instructions, Section 5 in RFP. (page 2 of RFP)
| 5 |
| Schedule A - Statement of Work - Scope |
| 13 |
| What are the locations of the CGI Datacenters and the Maximus Datacenter? |
| CGI Primary Data Center, Phoenix, AZ; CGI Backup Data Center, Philadelphia, PA; Maximus Data Center is in Colorado |
| 6 |
| Schedule A - Statement of Work - Scope |
| 13 and 14 |
| The Assessment Controls planned for Annual assessment states two "Year 3"s. One for 2019 and one for 2022. Is this an error? |
| The assessments run in 3-year cycles. The Assessment year in the heading on page 13 refers to which year of the cycle that assessment falls under. 2019 is the third year in a cycle, 2020 begins the first year of a new cycle. |
| 7 |
| Schedule A - Statement of Work - Scope |
| 13 |
| Is it possible for the State to make the Security Assessment from this year or a previous year available for review to allow us to estimate the complexity of the controls? |
| MARS-E catalog of security controls along with the CMS Security Assessment Report (SAR) template. **Due to system constraints, file is too large to post. Please email Solicitaion Manager at spitzleyL4@michigan.gov if you would like a copy. |
| 8. |
| Schedule B - Pricing |
| Would the State like to see pricing for all 4 years broken out separately or just the total for all 4 years? |
| The State is looking for set pricing, please list annual price as well as full contract price |
07/19/2016 image1.jpeg
File details come from the government source that posted it. Updated .