RFP D12PS00041 - page 81 as REVISED with Amendment 0002.pdf

RFP D12PS00041

REVISED with Amendment 0002 02/19/2012

Government will also evaluate to the extent to which proposals indicate anticipated or potential problem areas and proposes creative, feasible solutions that address problems resulting from the future integration of new processes and technology enhancements.

B. Usability and Functionality

1. System features, functionality and capabilities that meet industry performance and interoperability standards and utilize best practices as indicated in the SOO.

2. Service offerings’ interoperability with the Government’s installed base of standard software and hardware, including mobile devices

3. Service Offering’s standard mailbox size and collaborative services capacity.

4. Demonstrates service offering’s capabilities to meet objectives and improve user experience and productivity.

C. Information Security and Regulatory Compliance Approach

1. The degree to which the proposal defines a secure computing environment that complies with all required federal regulations and DOI specific security requirements as indicated in the SOO, its attachments, and referenced Information Security and regulatory compliance documents;

2. The extent to which the proposal demonstrates a design specification and Concept of Operations that fully addresses the Government’s Information Security, Privacy, and Regulatory requirements as outlined in the SOO and its attachments, and referenced Information Security and regulatory compliance documents including. These include, but are not limited to: an interconnection architecture that supports Trusted Internet Connection (TIC) 2.0 and Data Loss Prevention (DLP) requirements with the least burden to the Government; services that support federal IPv6 mandates for externally facing services; a FISMA “Moderate” security categorization security control requirements, in addition to the security control enhancements as specified by FedRAMP and in the DOI Security Control Standards; and services that support HSPD-12 PIV card two factor authentication

3. The Offeror’s experience achieving successful Assessment and Authorization (A&A) on projects of similar size and scope determined acceptable by other organizations with similar requirements;

4. The Offeror’s Service Level Agreements related to Information Security and other regulatory compliance requirements;

5. Documentation of risk mitigation strategies as appropriate.