Copy of Attachment 2 - RFI C000989 ITS Response to Vendor Questions.xlsx

This is a vendor questions and responses document for Request for Information (RFI) C000989 issued by New York State Information Technology Services (ITS) regarding Spring Framework Vulnerability Support. The RFI seeks comprehensive information from qualified vendors on enterprise-grade extended support services for the Spring Framework, with particular emphasis on Spring Boot version 2.7.x and related dependent projects. The document functions as an attachment containing a question submission form that captures inquiries from vendors and corresponding responses from ITS, organized by RFI section to address vendor questions regarding the scope and requirements of the support services being solicited.

The RFI is designed to gather vendor capabilities and service offerings focused on critical support functions including proactive vulnerability management, timely security patching, access to vetted artifacts, and expert technical support. The State's objective is to enhance its ability to maintain secure, robust, and well-supported applications built on the Spring ecosystem while ensuring long-term stability and security posture of Spring-based applications. This document serves as a mechanism for clarifying requirements and expectations with potential vendors prior to any formal procurement process.