Template V7.0 – 02/2025

STATE OF NEW HAMPSHIRE

New Hampshire Department of Transportation:

RFP DoIT # 2025-067 Managed Security Service Provider (MSSP)

RFP ISSUED July 13, 2026, 11:00 AM ET

VENDOR CONFERENCE August 7, 2026, 10:00 AM ET

LOCATION DEPARTMENT OF TRANSPORTATION

JOHN O. MORTON BUILDING

7 HAZEN DRIVE

CONCORD, NH 03302

Room 114

STATE AGENCY POINT OF CONTACT Name: Nicholas King email: Nicholas.H.King@dot.nh.gov

Tel: 603-731-5973

CONTRACT TYPE Not to Exceed

PROPOSAL DUE DATE October 13, 2026 3:00 PM ET

STATE OF NEW HAMPSHIRE

DEPARTMENT OF TRANSPORTATION

RFP DoIT #2025-067 - Managed Security Service Provider (MSSP)

TABLE OF CONTENTS

Table of Contents

SECTION 1: OVERVIEW AND SCHEDULE OF EVENTS

SECTION 2: PROPOSAL SUBMISSION, DEADLINE, AND LOCATION INSTRUCTIONS

SECTION 3: PROPOSAL ORGANIZATION, CONTENT, AND REQUIRED ITEMS

SECTION 4: EVALUATION OF PROPOSALS

SECTION 5: TERMS AND CONDITIONS RELATED TO THE RFP PROCESS

SECTION 6: CONTRACT TERMS AND AWARD

APPENDIX A: VENDOR CONFERENCE REQUIREMENTS

APPENDIX B: BUSINESS/TECHNICAL REQUIREMENTS AND DELIVERABLES

APPENDIX C: TOPICS FOR MANDATORY RESPONSES

APPENDIX D: STANDARDS FOR DESCRIBING VENDOR QUALIFICATIONS

APPENDIX E: PRICING

APPENDIX F: DOIT INFRASTRUCTURE AND SECURITY

APPENDIX G: MERCHANT CARD SERVICES

APPENDIX H: TERMS AND DEFINITIONS

APPENDIX I: P-37 STATE OF NEW HAMPSHIRE GENERAL PROVISIONS AND EXHIBITS

Remainder of this page intentionally left blank

SECTION 1: OVERVIEW AND SCHEDULE OF EVENTS

1. Executive Summary

1.1. Introduction

No equipment or services on the State of New Hampshire's Foreign Adversaries and Prohibited

Technologies document found here: Foreign Adversaries and Prohibited Technologies and

No equipment or services on the FCC Covered List found here: FCC Section 2 List of

Equipment and Services

The New Hampshire Department of Transportation (NHDOT) is responsible for providing a safe, reliable, and efficient transportation system for the State of New Hampshire. As part of this mission, NHDOT manages the Intelligent Transportation Systems (ITS) infrastructure through its Bureau of Transportation Systems Management and Operations (TSMO), in coordination with the New Hampshire Department of Information Technology (NHDoIT).

The Transportation Management Center (TMC) oversees more than 350 ITS devices statewide, including closed-circuit television (CCTV) cameras, dynamic message signs (DMS), radar sensors, as well as associated communications equipment. These systems are critical for real-time traffic monitoring, incident management, and traveler information.

Project Overview/Justification: – The NHDOT intends, through this Request for Proposal (RFP), to seek proposals from qualified vendors to provide managed security services and field service to support NHDOT’s TSMO Bureau and TMC operations. The MSSP Vendor will supplement the current NHDoIT team assigned to the NHDOT TSMO Bureau by providing specialized cybersecurity services and field network support to ensure compliance with state and federal security requirements, maintain operational resilience, and protect critical ITS infrastructure and devices.

The MSSP will monitor, manage, and protect the TSMO Bureau network infrastructure at the

TMC and in the field in alignment with relevant federal and state requirements.

Objectives for Managed Security Service Provider (MSSP):

The objective of this RFP is to supplement NH DoIT's existing capabilities by securing a

Managed Security Service Provider (MSSP) that can deliver continuous expert cybersecurity monitoring, incident detection and response, and technical support for the TSMO Bureau’s network and ITS infrastructure. The selected MSSP will ensure 24/7 network oversight, maintain compliance with federal and state cybersecurity standards, and assist in the secure configuration and maintenance of office-based and field-deployed network equipment. The

MSSP will also be responsible for maintaining clear documentation and reporting, supporting federal audit and funding requirements, and enabling secure integration of ITS devices within the statewide transportation architecture.

Goals for Managed Security Service Provider (MSSP):

a. 24/7 Monitoring and Incident Response: Provide continuous monitoring of the TSMO network with rapid detection, notification, and remediation of security incidents.

b. Technical Expertise and Field Support: Deliver skilled personnel to supplement NHDOT and NH DoIT resources, including hands-on troubleshooting of field equipment and secure network configurations, preserving the continuity and safety of transportation operations.

c. Standards Compliance: Ensure compliance with applicable NIST cybersecurity frameworks, NHDOT and NH DoIT cybersecurity policies, and federal transportation security policies and regulations.

d. Documentation and Reporting: Maintain traceable security controls and provide regular performance metrics, risk assessments, and audit-ready documentation.

e. ITS Integration and Support: Facilitate secure integration of existing and future ITS devices and services into the statewide transportation network in alignment with the

New Hampshire Statewide ITS Architecture.

1.2. Scope of Work (SOW) Overview

The State of New Hampshire, acting through the NHDOT has released this Managed Security

Service Provider (MSSP) RFP to support the cybersecurity, monitoring, and protection of the

Department’s operational technology (OT) environment and transportation technology assets.

These assets include, but are not limited to, Intelligent Transportation Systems (ITS) infrastructure, traffic signal infrastructure, construction technologies including Smart Work

Zones (SWZ) and hardware, communications networks (wired and wireless), field devices, and other operational systems deployed to support the safe and efficient operation of the State’s transportation network. The qualified and selected MSSP Vendor – through and in coordination with the NHDOT Bureau of Transportation Systems Management and Operations (TSMO) and the NH Department of Information Technology (NH DoIT) - shall be responsible for delivering comprehensive managed cybersecurity services including real-time network security monitoring, threat detection, network protection, incident response, and vulnerability assessments, and ongoing technical support and coordination with NH DoIT and NHDOT stakeholders.

The State of New Hampshire, acting through the NHDOT has released this Managed Security

Service Provider (MSSP) RFP to support the Bureau of Transportation Systems Management and Operations (TSMO) with the oversight, monitoring, and security of its Intelligent

Transportation Systems (ITS) infrastructure. The qualified and selected MSSP Vendor shall be responsible for delivering comprehensive managed cybersecurity services including real-time network security monitoring, threat detection, network protection, incident response, and vulnerability assessments, as well as ongoing technical support and coordination with NH

DoIT and TSMO stakeholders.

The MSSP Vendor shall operate across a diverse and evolving operational environment that includes both centralized data systems and a growing array of field-deployed devices such as dynamic message signs (DMS), closed-circuit television cameras (CCTV), radar sensors, weather stations, and traffic signal controllers. These devices operate across a communication network of fiber, wireless, and cellular VPN tunnels. As such, the MSSP

Vendor will be responsible for ensuring security across both the ITS enterprise network and edge network.

The MSSP Vendor’s responsibilities will include identifying and addressing vulnerabilities, securing remote access to field equipment, monitoring system events for anomalies, and supporting incident response efforts in close coordination with NHDOT personnel. The MSSP

Vendor will also be required to maintain a current inventory of network devices, including connectivity mapping and baseline traffic flow analysis, to assist in identifying intrusions or unauthorized activity.

In addition to work with network operations, the MSSP Vendor may be asked to provide compliance and governance support including federal, state, and local regulatory compliance.

This may include review and recommendations for policy and procedures as well as alignment with the NIST Cybersecurity Framework.

Hands-on support will be required for ITS network equipment in the field, and the MSSP Vendor will be expected to maintain field service readiness. While the TSMO Bureau will maintain a central inventory of network hardware, the MSSP Vendor must be able to respond to incidents within clearly defined service level agreements (SLAs), which may range from four-hour resolution for critical equipment failures to longer timelines for lower-priority issues. The MSSP

Vendor must be available to support network design, architecture, and consulting services at the direction of NHDOT. The MSSP Vendor will be expected to support the TSMO Bureau’s transition from a Layer 2 to a Layer 3 network. It will also assist with the integration of new traffic signal systems and connected vehicle infrastructure (V2I/V2X).

The MSSP vendor will not be responsible for operating and maintaining the ITS field devices themselves. The MSSP vendor’s responsibilities will be restricted to the network and communications infrastructure that connects these ITS field devices to the state system.

The qualified MSSP vendor shall demonstrate experience with state-level cybersecurity operations, and familiarity with transportation sector systems and security practices. The qualified MSSP vendor shall have expertise in working with various ITS hardware vendors and platforms. Additionally, the qualified MSSP vendor shall follow strict cybersecurity practices and possess staff with relevant credentials including but not limited to: CCNA, CompTIA

Network+, CompTIA A+, CISSP, CEH, GICSP. Field personnel are expected to hold or be supervised by staff with relevant industry certifications. The qualified MSSP vendor shall support log retention for a minimum of 365 days and offer optional pricing for longer retention periods. All work shall comply with federal and state cybersecurity standards and policies, including NIST, FedRAMP/StateRAMP, and will require close coordination with NH DoIT, including during any security incidents or investigations.

The MSSP Vendor will be required to provide security awareness and training to NHDOT and

NHDoIT personnel who are responsible for maintaining the NHDOT ITS network. This may include regular phishing simulations and on-line and in person security awareness training.

The MSSP will be expected to propose and operate within clear escalation protocols, deliver regular reporting and status updates, attend coordination meetings with NHDOT and NHDoIT leadership, coordinate change management procedures, and support future system upgrades and expansions. All services shall be delivered in alignment with NHDOT’s operational objectives, cybersecurity risk mitigation priorities, and support for uninterrupted transportation system operations.

2. Schedule of Events

The following table provides a Schedule of Events for this RFP through contract finalization and approval. The Agency reserves the right to amend this Schedule at its sole discretion and at any time through a published Addendum.

EVENT DATE & TIME (ET)

RFP Released to Vendors / Inquiry Period

Begins (on or about)

July 13, 2026

Notification to the State of the Number of

Representatives Attending the Vendor

Conference (Mandatory)

August 5, 2026, 4:00 PM

Mandatory Vendor Pre-Proposal Conference

August 7, 2026, 10:00 AM

JOHN O. MORTON BUILDING

7 HAZEN DRIVE

CONCORD, NH 03302

Vendor Deadline to Request Confidential One-on-One Meeting

August 18, 2026, 4:00 PM

Anticipated One-on-One Meetings September 8-10, 2026

Vendor Inquiry Period Ends (Final Inquiries due)

September 22, 2026 4:00 PM

Final State Responses to Vendor Inquiries October 2, 2026

Final Date and Time for Proposal Submission October 13, 2026 3:00 PM

Invitations for Oral Presentations November 2, 2026

Vendor Presentations/Discussion

Sessions/Interviews (Mandatory or Optional)

Week of November 30, 2026

Estimated Date of Vendor Selection December 18, 2026

Anticipated Governor and Council Approval April 21, 2027

Anticipated Notice to Proceed April 26, 2027

SECTION 2: PROPOSAL SUBMISSION, DEADLINE, AND LOCATION INSTRUCTIONS

1. Proposal Submission

Physical Proposals and Electronic Proposals submitted in response to this RFP must be received no later than the time and date specified in the Schedule of Events, herein.

The Price Proposal must be labeled clearly and submitted separately from the Technical Proposal.

Late submissions will not be accepted. Delivery of the Proposals shall be the Vendor’s responsibility. The time of receipt shall be considered when a Proposal has been officially documented by the Agency, in accordance with its established policies, as having been received at the location or via email as designated below. The Agency accepts no responsibility for damaged, mislabeled, or undeliverable mailed or emailed Proposals.

2. Physical Proposals

Physical Proposals must be addressed to:

Shipped Federal Express (FedEx) or United Parcel Service (UPS)

BUREAU OF TRANSPORTATION SYSTEMS MANAGEMENT AND OPERATIONS

ATTN: Nicholas King

110 Smokey Bear Blvd

Concord, NH 03301

Shipped United States Postal Service (USPS)

BUREAU OF TRANSPORTATION SYSTEMS MANAGEMENT AND OPERATIONS

ATTN: Nicholas King

PO Box 483

Concord, NH 03302-0483

Proposals must be clearly marked as follows:

RESPONSE TO RFP: NHDOT - RFP DoIT #2025-067 Managed Security Service Provider (MSSP)

Physical Submissions shall include:

Package 1- Technical Proposal:

a) One (1) original and three (3) clearly identified copies of the Technical Proposal, including all required attachments.

b) One (1) copy of the Proposal Transmittal Form Letter (described in Section 3.1.2:

Transmittal Form Letter, herein) shall be signed by an official authorized to legally bind the

Vendor and shall be marked “ORIGINAL.”

c) One (1) portable digital media device (e.g. USB flash drive) with a Searchable PDF of the complete Technical Proposal. The flash drive will become the property of NHDOT and will not be returned to the vendor.

Package 2 – Price Proposal:

a) A separate Price Proposal must be labeled clearly and sealed separately from the

Technical Proposal.

b) One (1) original and two (2) clearly identified copies of the Price Proposal, including Pricing

Worksheets (as described in Appendix E), must be bound separately.

c) One (1) portable digital media device (e.g. USB flash drive) with the complete Pricing

Proposal, including all Pricing Worksheet files. The flash drive will become the property of

NHDOT and will not be returned to the vendor.

3. Electronic Proposals

Electronic Proposals must be addressed to:

TO: Nicholas.H.King@dot.nh.gov

CC: Charles.E.Blackman@dot.nh.gov

Proposals must be clearly marked as follows:

Subject: RESPONSE TO RFP: NHDOT - RFP DoIT #2025-067 Managed Security Service Provider

(MSSP)

Electronic Submissions must be submitted using the following criteria:

a. Searchable PDF Format

b. Submission shall have the same layout and formatting as the Physical Proposal. In the event of a discrepancy between the Electronic Proposal and the Physical Proposal, the original Physical Proposal shall be the official Proposal.

c. Files must be less than 10MB in size for the NHDOT email system. Additionally, the total size of all attachments must be less than 24MB for the NHDOT email system.

d. For proposals with a file size greater than 10MB or total attachments exceeding 24MB, NHDOT will make available a secure file transfer site for responding Vendors to upload

Proposal documents. It is anticipated the file transfer site will be identified and made available not later than the Final State Responses to Vendor Inquiries.

Electronic Submissions shall include:

Attachment 1: Technical Proposal:

a) The Technical Proposal, including all required attachments.

b) One (1) copy of the Proposal Transmittal Form Letter (described in Section 3.1.2:

Transmittal Form Letter, herein) shall be signed by an official authorized to legally bind the

Vendor and shall be marked “ORIGINAL.” (electronic signature is acceptable)

Attachment 2: Price Proposal:

a) The Price Proposal must be labeled clearly and delivered separately from the Technical

Proposal (i.e., a separate email or a separate folder on the secure file transfer site).

b) The Price Proposal must include the Pricing Worksheets (as described in Appendix E).

4. Number of Proposals

Vendors are permitted to submit up to One (1) Proposal each with a unique solution in response to this RFP.

The original and all copies shall be bound separately, delivered in sealed containers, and permanently marked as indicated above. A Vendor’s disclosure or distribution of its Proposal other than to the State will be grounds for disqualification.

5. Vendor Inquiries

All inquiries concerning this RFP, including but not limited to, requests for clarifications, questions, and any changes to the RFP, shall be submitted via email to the following RFP Points of Contact

(POC):

RFP POC: Nicholas H. King, TSMO Bureau Administrator>

Email: Nicholas.H.King@dot.nh.gov

RFP Secondary POC: Charles Blackman, PE, TSMO Assistant Administrator

Email: Charles.E.Blackman@dot.nh.gov

All inquiries submitted concerning this RFP should include both Mr. Nicholas King and Mr. Charles

Blackman at the email addresses provided. All inquiries submitted shall include the following on the subject line of email:

RFP DoIT # 2025-067 Managed Security Service Provider (MSSP) Inquiry

While not required, inquiries should use the Request for Information (RFI) form provided with the

RFP documents. Inquiries must be received by the RFP POC no later than the conclusion of the

Vendor Inquiry Period identified in the Schedule of Events. The State will respond to inquiries received by the Early Vendor Inquiry Deadline prior to the One-on-One Vendor Conferences.

Inquiries received later than the conclusion of the Vendor Inquiry Period shall not be considered properly submitted and may not be considered. The State assumes no liability for assuring accurate/complete email transmission/receipt and is not required to acknowledge receipt.

The Agency intends to issue official responses to properly submitted inquiries on or before the date specified in the Schedule of Events section, herein. Inquiry responses will be made available to all

Vendors who attend the Mandatory Pre-Proposal Conference with the exception of inquiries received related to the Confidential One-on-One meetings. The Agency may consolidate and/or paraphrase questions for sufficiency and clarity. Oral statements, representations, clarifications, or modifications concerning the RFP shall not be binding upon the Agency. Official responses by the Agency will be made only in writing by the process described above.

The Agency will require the selected Vendor to execute a Contract using the P-37 State of New

Hampshire General Provisions and any attached exhibits. To the extent that a Vendor believes that exceptions to the standard form contract will be necessary for the Vendor to enter into the

Agreement, the Vendor must submit those exceptions during the Vendor Inquiry Period.

6. Restriction of Contact with Agency Employees

From the date of release of this RFP until an award is made and announced regarding the selection of a Vendor, all communication with personnel employed by or under contract with NHDOT or NH

DoIT regarding this RFP is prohibited unless first approved by the RFP POC listed herein. Agency employees have been directed not to hold conferences and/or discussions concerning this RFP with any potential Vendor or Contractor during the selection process, unless otherwise authorized by the RFP POC. Vendors may be disqualified for violating this restriction on communications.

7. Validity of Proposal

Proposals must be valid for one hundred and eighty (180) days following the deadline for submission of Proposals in the Schedule of Events, or until the Effective Date of any resulting

Contract, whichever is later.

SECTION 3: PROPOSAL ORGANIZATION, CONTENT, AND REQUIRED ITEMS

1. Proposal Organization

Proposals should adhere to the following outline:

Cover Page

Transmittal Form Letter

Table of Contents

Section I: Executive Summary

Section II: Glossary of Terms and Abbreviations

Section III: Responses to Requirements and Deliverables

Section IV: Narrative Responses

Section V: Corporate Qualifications

Section VI: Qualifications of Key Vendor Staff

Section VII: Vendor Attachments

Section VIII: Price Proposal (sealed separately)

1.1. Cover Page

The first page of the Vendor’s Proposal should be a cover page containing the following text:

STATE OF NEW HAMPSHIRE

DEPARTMENT OF TRANSPORTATION

RESPONSE TO RFP: NHDOT - RFP DoIT #2025-067 MANAGED SECURITY SERVICE PROVIDER

The cover page should also include the Vendor’s name, contact person, contact telephone, contact email address, corporate physical address, city, state, and zip code.

1.2. Transmittal Form Letter

The Vendor shall submit a signed Transmittal Form Letter with their response using the

Transmittal Form Letter template provided on the following page (a Word template will be made available to all Vendors). Any electronic alteration to the content of this Transmittal

Form Letter template is prohibited. Any such changes shall result in a Proposal being rejected.

State of New Hampshire Proposal Transmittal Form Letter

Company Name: ________________________________________

Address: ________________________________________________

To: Nicholas King, Administrator – TSMO Bureau

603-731-5973

Nicholas.H.King@dot.nh.gov

RE: Proposal Invitation Name: Managed Security Service Provider (MSSP)

Proposal Number: RFP DoIT #2025-067

Proposal Due Date and Time: October 13, 2026, 3:00 PM ET

Mr. Nicholas King:

Company Name: ________________________________ hereby submits an offer to provide to the

State of New Hampshire the Services indicated in Procurement for Managed Security Service

Provider (MSSP) RFP DoIT #2025-067 at the Not to Exceed Price quoted in Vendor Response

Section VIII: Price Proposal, in complete accordance with all conditions of this RFP and all

Specifications set forth in the RFP and in the P-37 State of New Hampshire General Provisions and Exhibits, identified in Appendix I.

We attest to the fact that:

1. The company has reviewed and agreed to be bound by the RFP.

2. The company has not altered any of the language or other provisions contained in the RFP document.

3. The Proposal is effective for a period of 180 days from the RFP Closing Date or until the Effective Date of any resulting Contract, whichever is later.

4. The prices quoted in the Proposal were established without collusion with other vendors.

5. The Vendor has read and fully understands this RFP.

Further, in accordance with RSA 21-I:11-c, the undersigned Vendor certifies that neither the

Vendor nor any of its subsidiaries, affiliates or principal officers (principal officers refers to individuals with management responsibility for the entity or association):

a) Has, within the past 2 years, been convicted of, or pleaded guilty to, a violation of

RSA 356:2, RSA 356:4, or any state or federal law or county or municipal ordinance prohibiting specified bidding practices, or involving antitrust violations, which has not been annulled.

b) Has been prohibited, either permanently or temporarily, from participating in any public works project pursuant to RSA 638:20.

c) Has previously provided false, deceptive, or fraudulent information on a vendor code number application form, or any other document submitted to the state of

New Hampshire, which information was not corrected as of the time of the filing a bid, proposal, or quotation.

d) Is currently debarred from performing work on any project of the federal government or the government of any state.

e) Has, within the past 2 years, failed to cure a default on any contract with the federal government or the government of any state.

f) Is presently subject to any order of the department of labor, the department of employment security, or any other state department, agency, board, or commission, finding that the applicant is not in compliance with the requirements of the laws or rules that the department, agency, board, or commission is charged with implementing.

g) Is presently subject to any sanction or penalty finally issued by the department of labor, the department of employment security, or any other state department, agency, board, or commission, which sanction or penalty has not been fully discharged or fulfilled.

h) Is currently serving a sentence or is subject to a continuing or unfulfilled penalty for any crime or violation noted in this section.

i) Has failed or neglected to advise the division of any conviction, plea of guilty, or finding relative to any crime or violation noted in this section, or of any debarment, within 30 days of such conviction, plea, finding, or debarment: or

j) Has been placed on the debarred parties list described in RSA 21-I:11-c within the past year.

This document shall be signed by a person who is authorized to legally obligate the responding

Vendor. A signature on this document indicates that all State of New Hampshire terms and conditions are accepted by the responding Vendor and that any and all other terms and conditions submitted by the responding Vendor are null and void, even if such terms and conditions have terminology to the contrary. The responding Vendor shall also be subject to

State of New Hampshire terms and conditions as stated on the reverse of the purchase order, if any.

Our official point of contact is: ___________________________________

Title: __________________________________________________________

Telephone: _____________________________________________________

Email: _________________________________________________________

Authorized Signature Printed: ____________________________________

Authorized Signature: ___________________________________________

1.3. Table of Contents

The Vendor must provide a table of contents with corresponding page numbers relating to its

Proposal.

1.4. Section I: Executive Summary

Section I shall provide an executive summary, not to exceed three (3) pages, identifying how the

Vendor satisfies the goals of this RFP. The executive summary will also provide an overview of the

Vendor’s proposed Solution and Services highlighting those factors that they believe distinguish their Proposal. The Executive Summary shall also identify any major Partners, Subcontractors, Subconsultants or Vendors.

1.5. Section II: Glossary of Terms and Abbreviations

Section II shall provide a glossary of all terms, acronyms, and abbreviations used in the Vendor’s

Proposal.

1.6. Section III: Responses to System Requirements and Deliverables

Section III shall include the response tables from the Business/Technical Requirements and

Deliverables referenced in Appendix B. This section shall include the completed Table B-2.1

System Requirement. This Section shall include verification that the Vendor will provide and meet all Deliverables indicated in Table B-3 Deliverables. The Vendor must document the ability to meet the Business Requirements and Deliverables of this RFP.

1.7. Section IV: Narrative Responses

Section IV solicits narrative responses describing the Software, Technical, Services and Project

Management topics defined for this RFP Project. A ppendix C Topics for Mandatory Responses is organized into sections, which correspond to the different aspects of the scoring process of the

Proposal. Discussion of each topic must begin on a new page.

1.8. Section V: Corporate Qualifications

Section V shall provide the corporate qualifications of the Vendor, and any Subcontractors proposed to participate in the Project. Specific information to be provided is described in the

Standards for Describing Vendor Qualifications under Appendices D-1 and D-2.

1.9. Section VI: Qualifications of Key Vendor Staff

Section VI shall be used to provide required information on the Vendor’s Key Project Staff. Specific information to be provided is described in Appendix D Standards for Describing Vendor

Qualifications under Appendix D-3.

1.10. Section VII: Vendor Attachments

Section VII provides for extra materials as referenced in Appendix C Topics for Mandatory responses such as Product Literature, Federal Reporting, Typical and Ad Hoc Reporting, Interface

Standards, Testing (For UAT Plan) and Status Meetings and Reports.

1.11. Section VIII: Price Proposal (sealed separately)

Section VIII shall include the Price Proposal, which shall describe the proposed price for the

Vendor’s Proposed Solution Proposal based on and reflected by the inclusion of the completed tables listed in Appendix E Pricing. The Price Proposal shall include the response tables from Appendix E-1, Tables E-1.1 and E-1.3 through E-1.7. Section VIII shall also include the response tables from Appendix E-2, Tables E-2.1 and E-2.2 to provide information for the

State.

The Price Proposal and all related pricing details shall be submitted concurrently and independently of the Technical Proposal. No pricing information shall be included in the Technical

Proposal submission. As outlined in Section 2: Proposal Submission, Deadline, and Location

Instructions, this price proposal must be labeled clearly and sealed separately from the Technical

Proposal.

SECTION 4: EVALUATION OF PROPOSALS

1. Criteria for Evaluation and Scoring

Each responsive Proposal will be evaluated and considered with regard to the Solution and

Services proposed, qualifications of the Vendor and any Subcontractors, experience and qualifications of proposed candidates, and price.

If the Agency determines to make an award, the Agency will begin negotiations with a Vendor based on these evaluations. Should the Agency be unable to reach agreement with the high scoring

Vendor during Contract discussions, the Agency may then undertake Contract discussions with the next high scoring Vendor and so on; or the Agency may reject all Proposals, cancel this RFP, or solicit new Proposals under a new acquisition process.

The Agency will use a scoring scale of five hundred (500) Points. Points will be distributed as set forth in the table below.

Table 4.1: Scoring of Proposal

CATEGORIES POINTS

Technical Proposal with the following potential maximum scores for each Technical Proposal category listed below:

Three Hundred and Fifty (350)

Proposed Solution One Hundred and Fifty (150)

Vendor’s Technical, Service and Project Management

Experience Sixty-Seven (67)

Vendor Company Forty (40)

Staffing Qualifications Forty (40)

FedRAMP/StateRAMP Authorization Status Fifty-Three (53)

Price Proposal Potential Maximum Points One Hundred and Fifty (150)

TOTAL POTENTIAL MAXIMUM POINTS AWARDED five hundred (500)

The Agency will select a Vendor based upon the criteria and standards contained in this RFP and from applying the weighting in this section. Oral interviews and reference checks, to the extent they are utilized by the Agency, will be used to refine and finalize technical scores.

2. Scoring Detail

2.1. Scoring of the Proposed Solution

The Vendor’s Proposed Solution will be allocated a maximum score One Hundred and Fifty

(150) Points. The main purpose of this section is to measure how well the Solution meets the business needs of the Agency.

Scoring is primarily measured using vendor responses in the following sections, though

NHDOT reserves the right to incorporate information from any part of the Proposal in scoring this section:

a) Vendor must be qualified in accordance with Section 1.1.2 (Scope of Work

Overview)

b) Proposal Section III: Responses to Requirements and Deliverables

c) Proposal Section IV: Narrative Responses, Topics 1-6 and 9-11,

d) Vendor Presentation and Demonstration (if applicable)

2.2. Scoring of Vendor’s Technical Service, and Project Management Experience

The Vendor’s Technical Service and Project Management Experience will be allocated a maximum score of Sixty-Seven (67) Points. In this section, the State will score the technical merits of how the Vendor will carry out the implementation and maintenance of the Solution.

Technical details of the System including security and protection of data, proposed training administrative procedures, how the Vendor manages its team and the Project will be critical.

How compatible the Vendor’s procedures and technologies are with the State contribute to an assessment of risk both in the short and long term.

Scoring is primarily measured using vendor responses in the following sections:

a) Proposal Section III: Responses to Requirements and Deliverables

b) Proposal Section IV: Narrative Responses, Topics 7, 8, 12, 13, and 15-22

c) Proposed Work Plan (Section IV: Narrative Responses, Topic 14)

d) References

2.3. Scoring of Vendor Company

Vendor Company qualifications will be allocated a maximum score of Forty (40) points. It must be established that the Vendor Company is capable of carrying out the Project through implementation, operations and the maintenance period.

Scoring is primarily measured using vendor responses in the following sections:

a) Proposal Section V: Corporate Qualifications

b) References

2.4. Scoring of Vendor Staffing Qualifications

Vendor’s Staff qualifications will be allocated a maximum score of Forty (40) points. Vendor’s

Staff must have the training and experience to support the Vendor’s plans to implement and support the System.

Scoring is primarily measured using vendor responses in the following sections:

a) Proposal Section VI: Qualifications of Key Staff

b) Vendor Presentations & Demonstrations (if applicable)

c) References

2.5. Scoring of Solution FedRAMP/StateRAMP Authorization Status.

If the vendor’s solution (Hosting and Product) is fully FedRAMP or StateRAMP authorized, and within periodicity, the Vendor score for this section shall be awarded at 15% of the total possible points for the technical solution (equivalent to 53 points). If only the Vendor’s Hosting environment is FedRAMP/StateRAMP authorized the vendor will be awarded 5% of the total possible points for the technical solution (equivalent to 18 points). No points will be awarded in this section if the Vendor’s FedRAMP or StateRAMP authorization is incomplete.

2.6. Scoring the Price

The Vendor’s price will be allocated a maximum score of One Hundred and Fifty (150) points.

The State will only consider Pricing provided in Appendix E - Pricing Tables E-1.1 through E-1.8

The price information required in a Proposal is intended to provide a sound basis for comparing costs. The Vendor’s Price Score formula described in the Price Proposal Review and Scoring section will be utilized for this scoring portion.

3. Planned Evaluations

The Agency plans to use the following process:

a) Initial screening to ensure that the Proposals are in compliance with submission requirements.

b) Preliminary evaluation of the Proposals.

c) Oral interviews and Product Demonstrations (if applicable).

d) Reference and background checks.

e) Final Evaluation of Technical Proposals and scoring.

f) Review of Price Proposals and scoring.

g) Select the highest scoring Vendor and begin contract negotiation.

3.1. Initial Screening

The Agency will conduct an initial screening step to verify Vendor compliance with the submission requirements set forth in the RFP and the minimum content set forth in the

Proposal Format, Content and Required Items within this RFP. The Agency may waive or offer a limited opportunity to cure immaterial deviations from the RFP requirements if it is determined to be in the best interest of the State. A Proposal that fails to satisfy either submission requirements or minimum standards may be rejected without further consideration.

3.2. Preliminary Technical Scoring of Proposals

The Agency will establish an evaluation team. This evaluation team will review the Technical

Proposals and give a preliminary score. Should a Vendor fail to achieve Fifty (50) minimum points in the preliminary Technical Proposal scoring, that Vendor will receive no further consideration from the evaluation team and the Vendor’s Price Proposal will remain unopened. Price Proposals will remain unopened throughout the preliminary technical review, Oral Interviews and Product Demonstrations.

3.3. Oral Interviews and Product Demonstrations

At the Agency’s discretion, Vendors may be invited to oral interviews and/or product demonstrations including demonstrations of any proposed automated monitoring systems.

The Agency retains the sole discretion to determine whether to conduct oral interviews and product demonstrations, with which Vendors, the number of interviews and the length of time provided for the interview and Product demonstration. The Agency may decide to conduct oral interviews and product demonstrations with less than all responsive Vendors.

The purpose of oral interviews and product demonstrations is to clarify and expound upon information provided in the written Proposals. Vendors are prohibited from altering the basic substance of their Proposals during the oral interviews and product demonstrations. The

Agency may ask the Vendor to provide written clarifications of elements in their Technical

Proposal regardless of whether it intends to conduct oral interviews.

Information gained from oral interviews and product demonstrations will be used to refine technical review scores assigned from the initial review of the Proposals. All costs associated with oral presentations/interviews shall be borne entirely by the Vendor.

3.4. Reference and Background Checks

The Agency may conduct reference checks and/or a background check on the Vendor, on the

Vendor’s proposed products and services, or on the Vendor’s Key Staff. Information gained from reference and/or background checks will be used to refine the Vendor scores from the initial review of the Proposals.

3.5. Final Scoring of Technical Proposals

Following Oral Interviews, Product Demonstrations, Reference Checks (if appropriate) and/or review of written clarifications of Proposals requested by the Agency, the evaluation team will determine a final score for each Technical Proposal.

3.6. Price Proposal Review and Scoring

Price Proposals will be reviewed upon completion of the final scoring of Technical Proposals.

The Vendor’s Price Proposal will be allocated a maximum potential score of <MAXIMUM

NUMBER OF POINTS> points. Vendors are advised that this is not a low bid award and that the scoring of the price Proposal will be combined with the scoring of the Technical Proposal to determine the overall highest scoring Vendor.

The following formula will be used to assign points for Price:

For the purpose of use of this formula, the lowest proposed price is defined as the lowest price proposed by a Vendor who has scored above the minimum necessary for consideration on the

Technical Score.

4. No Best and Final Offer

The Proposal should be submitted initially on the most favorable terms that the Vendor can offer. There will be no best and final offer procedure. The Vendor should be prepared to accept this RFP for incorporation into a contract resulting from this RFP. Contract negotiations may incorporate some or all of the entire Proposal, including Optional requirements (See Appendix

B and Appendix E for details).

5. Rights of the Agency in Accepting and Evaluating Proposals

The Agency reserves the right to:

a) Make independent investigations in evaluating Proposals;

b) Request additional information to clarify elements of a Proposal;

c) Waive minor or immaterial deviations from the RFP requirements, if determined to be in the best interest of the State;

d) Omit any planned evaluation step if, in the Agency’s view, the step is not needed;

e) At its sole discretion, reject any and all Proposals at any time; and

f) Open contract discussions with the second highest scoring Vendor and so on, if the Agency is unable to reach an agreement on Contract terms with the higher scoring Vendor(s).

SECTION 5 – TERMS AND CONDITIONS RELATED TO THE RFP PROCESS

SECTION 5: TERMS AND CONDITIONS RELATED TO THE RFP PROCESS

1. RFP Addendum

The Agency reserves the right to amend this RFP at its discretion, prior to the Proposal submission deadline. In the event of an addendum to this RFP, the Agency, at its sole discretion, may extend the Proposal submission deadline, as it deems appropriate.

2. Non-Collusion

The Vendor’s signature on a Proposal submitted in response to this RFP guarantees that the prices, terms and conditions, and Work quoted have been established without collusion with other

Vendors and without effort to preclude the Agency from obtaining the best possible competitive

Proposal.

3. Property of the State

All material received in response to this RFP shall become the property of the State and will not be returned to the Vendor. Upon Contract award, the State reserves the right to use any information presented in any Proposal.

4. Confidentiality of a Proposal

The substance of a Proposal must remain confidential until the Effective Date of any Contract resulting from this RFP. A Vendor’s disclosure or distribution of Proposals other than to the Agency without the Agency’s prior consent may be grounds for disqualification.

5. Public Disclosure

In general, the State is obligated to make public the information submitted in response to this RFP

(including all materials submitted in connection with it, such as attachments, exhibits, addenda, and presentations), any resulting contract, and information provided during the contractual relationship. The Right-to-Know law (RSA 91-A) obligates the State to conduct an independent analysis of the confidentiality of the information submitted, regardless of whether it is marked confidential.

In addition, the Governor and Council (G&C) contract approval process more specifically requires that pricing be made public and that any contract reaching the G&C agenda for approval be posted online.

5.1.Disclosure of Information Submitted in Response to RFP

Information submitted in response to this RFP is subject to public disclosure under the Right-to-Know law after the award of a contract by G&C. At the time of closing date for Proposals, the

State will post the number of responses received with no further information. Pursuant to RSA

21-G:37, the State will also post the name and rank or score of each Vendor pursuant to the timeliness requirements therein. Notwithstanding the Right-to-Know law, no information concerning the contracting process, including, but not limited to information related to proposals, communications between the parties or contract negotiations, shall be available until a contract is approved by G&C, or, if the contract does not require G&C approval, until the contract has been actually awarded. This means unsuccessful Vendors shall not be notified of the outcome until that time.

Confidential, commercial, or financial information may be exempt from public disclosure under RSA 91-A:5, IV. If a Vendor believes any information submitted in response to this request for proposal should be kept confidential, the Vendor must specifically identify that information where it appears in the submission in a manner that draws attention to the designation and must mark/stamp each page of the materials that the Vendor claims must be exempt from disclosure as “CONFIDENTIAL.” Vendors must also provide a letter to the person listed as the point of contact for this RFP, identifying the specific page number and section of the information you consider to be confidential, commercial or financial and providing your rationale for each designation. Marking or designating an entire proposal, attachment or section as confidential shall neither be accepted nor honored by the State. Vendors must also provide a separate copy of the full and complete document, fully redacting those portions and shall note on the applicable page or pages that the redacted portion or portions are

“confidential.”

Submissions which do not conform to these instructions by failing to include a redacted copy

(if necessary), by failing to include a letter specifying the rationale for each redaction, by failing to designate the redactions in the manner required by these instructions, or by including redactions which are contrary to these instructions or operative law may be rejected by the

State as not conforming to the requirements of the proposal.

Pricing, which includes but is not limited to, the administrative costs and other performance guarantees in Proposals or any subsequently awarded contract shall be subject to public disclosure regardless of whether it is marked as confidential.

Notwithstanding a Vendor’s designations, the State is obligated under the Right-to-Know law to conduct an independent analysis of the confidentiality of the information submitted in a proposal. If a request is made to the State by any person or entity to view or receive copies of any portion of the proposal, the State shall first assess what information it is obligated to release. The State will then notify you that a request has been made, indicate what, if any, information the State has assessed is confidential and will not be released, and specify the planned release date of the remaining portions of the proposal. To halt the release of information by the State, a Vendor must initiate and provide to the State, prior to the date specified in the notice, a court action in the Superior Court of the State of New Hampshire, at its sole expense, seeking to enjoin the release of the requested information.

By submitting a proposal, Vendors acknowledge and agree that:

a. The State may disclose any and all portions of the proposal or related materials that are not marked as confidential and/or which have not been specifically explained in the letter to the person identified as the point of contact for this RFP;

b. The State is not obligated to comply with a Vendor’s designations regarding confidentiality and must conduct an independent analysis to assess the confidentiality of the information submitted in your proposal; and

c. The State may, unless otherwise prohibited by court order, release the information on the date specified in the notice described above without any liability to a Vendor.

6. Electronic Posting of Resulting Contract

RSA 91-A obligates disclosure of contracts resulting from responses to RFPs. As such, the Secretary of

State provides to the public any document submitted to G&C for approval, and posts those documents, including the contract, on its website. Further, RSA 9-F:1 requires that contracts stemming from RFPs be posted online. By submitting a Proposal, Vendors acknowledge and agree that, in accordance with the above-mentioned statutes and policies, (and regardless of whether any specific request is made to view any document relating to this RFP), any contract resulting from this

RFP that is submitted to G&C for approval will be made accessible to the public online via the State’s website.

7. Non-Commitment

Notwithstanding any other provision of this RFP, this RFP does not commit the Agency to award a

Contract. The Agency reserves the right, at its sole discretion, to reject any and all Proposals, or any portions thereof, at any time; to cancel this RFP; and to solicit new Proposals under a new acquisition process.

8. Proposal Preparation Cost

By submitting a Proposal, a Vendor agrees that in no event shall the Agency be either responsible for or held liable for any costs incurred by a Vendor in the preparation of or in connection with the

Proposal, or for work performed prior to the Effective Date of a resulting Contract.

9. Ethical Requirements

From the time this RFP is published until a contract is awarded, no vendor shall offer or give, directly or indirectly, any gift, expense reimbursement, or honorarium, as defined by RSA 15-B, to any elected official, public official, public employee, constitutional official, or family member of any such official or employee who will or has selected, evaluated, or awarded an RFP, or similar submission. Any vendor that violates RSA 21-G:38 shall be subject to prosecution for an offense under RSA 640:2. Any vendor who has been convicted of an offense based on conduct in violation of this section, which has not been annulled, or who is subject to a pending criminal charge for such an offense, shall be disqualified from applying to the RFP, or similar request for submission and every such vendor shall be disqualified from applying to on any RFP or similar request for submission issued by any State agency. A vendor that was disqualified under this section because of a pending criminal charge which is subsequently dismissed, results in an acquittal, or is annulled, may notify the Department of Administrative Services (DAS), which shall note that information on the list maintained on the State’s internal intranet system, except in the case of annulment, the information, shall be deleted from the list.

10. Debarment

Vendors who are ineligible to apply to proposals, bids or quotes issued by the Department of

Administrative Services, Division of Procurement and Support Services pursuant to the provisions of RSA 21-I:11-c shall not be considered eligible for an award under this proposal.

11. Challenges on Form or Process of the RFP

A vendor questioning the Agency’s identification of the selected Vendor may request that the

Agency review its selection process. Such request shall be made in writing and be received by the

Agency within 5 (five) business days after the rank or score is posted on the agency website. The request shall specify all points on which the vendor believes the Agency erred in its process and shall contain such argument in support of its position as the vendor seeks to present. In response, the issuing Agency shall review the process it followed for evaluating responses and, within 5 (five) business days of receiving the request for review, issue a written response either affirming its initial selection of a Vendor or canceling the application.