Copy of Attachment 1 - C000989 RFI Questions & Vendor Responses Form.xlsx

XLSX spreadsheet 19 KB Posted

Attached to
C000989 - Spring Framework Vulnerability Support RFI
Solicitation number
2136046
Issued by
New York

About this file

This is a Request for Information (RFI) Questions and Vendor Responses Form issued by New York State Information Technology Services (NYS ITS) regarding enterprise-grade extended support for the Spring Framework, with particular emphasis on Spring Boot version 2.7.x and related dependent projects. The RFI seeks to solicit detailed information from qualified vendors concerning comprehensive vulnerability management, security patching, documentation access, and technical support capabilities. The document contains a standardized questionnaire addressing vendor qualifications and service delivery methodologies without specifying explicit response deadlines, site visits, bidders' conferences, or contract award dates in the provided content.

The RFI focuses on gathering vendor information regarding support scope, including which Spring Boot versions receive enterprise support, anticipated support duration for version 2.7.x, ticket management and documentation access capabilities, knowledge content delivery, security patch delivery processes, support hours, response time commitments across severity levels, escalation procedures, extended lifecycle management strategies, and prior experience with Spring Framework extended support. Additionally, the form requests information about current or previous vendor relationships with New York State, including any existing contract numbers. The RFI does not specify pricing structures, set-asides, incumbent vendors, funding amounts, or contract term lengths within the provided document; these details would be communicated through subsequent procurement phases or formal solicitation documents.

View the file

Other files

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Vendor Requirements

RFI C000989 - NYS ITS Spring Framework Vulnerability Support
Attachment 1 - ITS Questions & Vendor Responses

Company Name:

ITS Program QuestionsVendor Responses
What Spring Boot versions do you offer Enterprise Support for?
How long do you anticipate providing support for Spring Boot v2.7.x?
What features and functions do you typically include for managing support tickets, accessing documentation, and tracking issue resolution for Spring Framework components?
How does your organization provide knowledge content and user guidance related to Spring Framework support? Please detail the types of documentation, best practices, and training materials you make available to clients.
What is your approach to delivering timely security patches and critical updates? Please detail your processes for identifying, assessing, and remediating vulnerabilities within Spring Boot 2.7.x and related Spring projects.
What are your hours of support?
What are your response times for different severity levels (Critical, High, Medium)?
What are your escalation procedures for critical issues?
Please outline your approach to timely delivery of security patches and updates for Spring projects?
What is your strategy for Extended LTS Lifecycle Management for Spring Boot 2.7.x and related projects.
What is your organization's experience in providing extended support for the Spring Framework, particularly for Spring Boot version 2.7.x and older?
Are you currently a vendor with NYS? If so, please provide name and number of the contract(s).

File details come from the government source that posted it. Updated .