ESBD_374289_1727450416138_RFIADD_1_CRD202408130827.pdf

ADDENDUM OF REQUEST FOR INFORMATION (RFI)

1. RFI NO.

CRD202408130827

2. ADDENDUM NO.

3. EFFECTIVE DATE

09/25/2024

4. ISSUED BY

Department of Public Safety Procurement and Contract Services 5805 North Lamar Blvd. Bldg. A 1st floor Austin, Texas 78752

5. NAME AND ADDRESS OF OFFEROR

6. The above numbered RFI is amended as set forth in Item 8. The hour and date specified for receipt of Offers is extended, is not extended.

Offers must acknowledge receipt of this addendum prior to the hour and date specified in the RFI or as amended, by one of the following methods:

(a) By completing Items 5 and 8 and returning the addendum; (b) By acknowledging receipt of this addendum on each copy of the offer submitted; or (c) By separate e-mail which includes a reference to the solicitation and addendum numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by e-mail, provided each e-mail makes reference to the RFI and this addendum, and is received prior to the opening hour and date specified.

7. DESCRIPTION OF ADDENDUM:

Questions and Answers: Reference Page 2 through 6

Updates to the RFI: Reference CRD202408130827 Multimodal Biometric Identification System (MBIS)v2 PDF

• Under 3. General Requirements, updated #10 to Securely create, receive and send NIST quality and non-NIST quality images and data to and from other sources as directed by

TXDPS.

• Updated numbering from 2.1 to 3.1 under Additional Information

• Added question 25 to Additional Information - Does your solution have a card scan process to scan hard cards and create NIST files for automated processing? If so, please describe the process.

Except as provided herein, all terms and conditions of the RFI, as heretofore changed, remain unchanged and in full force and effect.

8a. NAME AND TITLE OF SIGNER (Type or Print)

8b. OFFEROR

(Signature of Person Authorized to Sign) Date Signed

RFI #CRD202408130827 / Multimodal Biometric Identification System (MBIS)

Question: 1: Under modalities, you have: "Will implement at least fingerprints, palm prints, SMT, iris, and face matching. Respondents are encouraged to identify other matching modalities available in their solution".

Is it a requirement that all of those modalities be part of the solution, or can we offer a portion of them?

Question 1 Answer: DPS is seeking information in this RFI so please include narratives regarding which of the above, and any other modalities, your system can match.

Question: 2: For the Multimodal Biometric Identification System environment, will cloud environments with only SOC 2 Type II and ISO 27001 attestations and certifications be considered?

Question 2 Answer: No.

Question: 3: Does Texas DPS have a preference with regards to Cloud Provider (Azure Gov, AWS Gov, or other)?

Question 3 Answer: DPS does not have a cloud provider preference.

Question: 4: Can the TXDPS please confirm that Section 2.1 Additional Information should be titled Section 3.1 Additional Information?

Question 4 Answer: This section is misnumbered and should reflect Section 3.1 Additional Information.

See Addendum 1 for the correction.

Question: 5: Can TXDPS further describe what your deconfliction process is and the related workflow?

Question 5 Answer: DPS seeks information on a mechanism to alert identified user roles (primarily system administrators) when multiple users query data on the same individual or the response to the query identifies the same individual.

Question: 6: RFI states current “remote devices placed at various medical examiner’s offices, police departments, and sheriff’s offices throughout Texas”.

a. How many buildings are currently anticipated to use the proposed software solution?

b. How many workstations are currently anticipated to use the proposed software solution?

i. Will all workstations be Owner-furnished, Owner-Installed?

ii. Are you requesting a cloud solution to offset the need or burden for hardware upgrades across all facilities?

iii. Will the proposed solution require browser-based access, or a application/client based access?

Question 6 Answer: Per section 7 of the RFI, THIS IS A REQUEST FOR INFORMATION (RFI) ONLY; its intent is to identify sources that can provide a solution for biometrics matching. If TXDPS does pursue a solicitation in the future, all specifications will be identified in the statement of work.

Question: 7: Please provide PDF or link to the most recent version of TXDPS Information Technology and Cybersecurity contract requirements.

Question 7 Answer: Per section 7 of the RFI, THIS IS A REQUEST FOR INFORMATION (RFI) ONLY; its intent is to identify sources that can provide a solution for biometrics matching. If TXDPS does pursue a

Question: 8: What are the specific compliance requirements (e.g., GDPR, HIPAA, ISO)?

Question 8 Answer: Per section 7 of the RFI, THIS IS A REQUEST FOR INFORMATION (RFI) ONLY; its intent is to identify sources that can provide a solution for biometrics matching. If TXDPS does pursue a

Question: 9: RFI states solution must be capable of “ingesting and storing up to 75 million alternate biometric images for use as enrolled data in multiple galleries”. Is this the current storage requirements, or based on future growth?

a. How much data (MB, TB, PB, etc.) do you anticipate needing to store and manage in the next 5 years?

b. How much data (MB, TB, PB, etc.) do you anticipate needing to store and manage in the next 10 years?

c. What is the retention period for stored material (days, months, years, etc.)?

i. What are your data backup (frequency, etc.) and recovery requirements (active storage vs. archived storage)?

d. What are your existing requirements for Data encryption

i. At rest

ii. During processing

iii. In motion/in transit

Question 9 Answer: Per section 7 of the RFI, THIS IS A REQUEST FOR INFORMATION (RFI) ONLY; its intent is to identify sources that can provide a solution for biometrics matching. If TXDPS does pursue a

Question: 10: What existing operating systems (i.e. Windows, Linux, etc.), software, and/or applications does the software need to integrate with?

Question 10 Answer: Per section 7 of the RFI, THIS IS A REQUEST FOR INFORMATION (RFI) ONLY; its intent is to identify sources that can provide a solution for biometrics matching. If TXDPS does pursue a

Question: 11: What is TXDPS current IT infrastructure? (e.g., on-premises systems, existing cloud solutions, hybrid)?

a. What is the current network bandwidth capacity between sites?

b. Is there one centralized storage location?

Question 11 Answer: Per section 7 of the RFI, THIS IS A REQUEST FOR INFORMATION (RFI) ONLY; its intent is to identify sources that can provide a solution for biometrics matching. If TXDPS does pursue a

Question: 12: Who are the end users, and what are their technical capabilities?

a. What is your anticipated growth in users over the next 5 years?

b. What is your anticipated growth in users over the next 10 years?

Question 12 Answer: Per section 7 of the RFI, THIS IS A REQUEST FOR INFORMATION (RFI) ONLY; its intent is to identify sources that can provide a solution for biometrics matching. If TXDPS does pursue a

Question: 13: What security protocols and measures are currently in place?

Question 13 Answer: Per section 7 of the RFI, THIS IS A REQUEST FOR INFORMATION (RFI) ONLY; its intent is to identify sources that can provide a solution for biometrics matching. If TXDPS does pursue a

Question: 14: Who will have access to the data, and how do you manage user permissions?

Question 14 Answer: Per section 7 of the RFI, THIS IS A REQUEST FOR INFORMATION (RFI) ONLY; its intent is to identify sources that can provide a solution for biometrics matching. If TXDPS does pursue a

Question: 15: Are there any performance metrics that are critical for your operations (MTBF, MTTR, “four nines”, etc.)?

Question 15 Answer: Per section 7 of the RFI, THIS IS A REQUEST FOR INFORMATION (RFI) ONLY; its intent is to identify sources that can provide a solution for biometrics matching. If TXDPS does pursue a

Question: 16: RFI states the system must be “based on user need and role”. How many roles (user, administrator, technician, etc.) are anticipated to be needed?

a. Will each operator within the system(s) be tasked with using all peripheral devices, or will these roles be segregated?

Question 16 Answer: Per section 7 of the RFI, THIS IS A REQUEST FOR INFORMATION (RFI) ONLY; its intent is to identify sources that can provide a solution for biometrics matching. If TXDPS does pursue a

Question: 17: Will training(s) be performed by vendor on each system-wide site, or will documentation and/or produced training videos suffice?

a. How do you plan to drive user adoption within your organization (LMS, on site trainers, “train the trainer”, etc.)?

i. Will those receiving training(s) be in new roles within your organization or currently already staffed?

Question 17 Answer: Per section 7 of the RFI, THIS IS A REQUEST FOR INFORMATION (RFI) ONLY; its intent is to identify sources that can provide a solution for biometrics matching. If TXDPS does pursue a

Question: 18: In terms of audit capabilities, what information is required to be pulled from reports within the system?

a. What is the anticipated cadence of audits?

Question 18 Answer: Per section 7 of the RFI, THIS IS A REQUEST FOR INFORMATION (RFI) ONLY; its intent is to identify sources that can provide a solution for biometrics matching. If TXDPS does pursue a

Question: 19: RFI states system must have “active support mechanisms”.

a. What level of support do you expect from the solution provider?

b. What level of support do you expect from the installer of the solution?

c. How do you envision handling ongoing maintenance and updates?

Question 19 Answer: The solution is a mission critical system that must be operational 24x7x365 and the awarded vendor would be expected to provide responsive services.

Question: 20: What is the anticipated timeline for implementation?

a. Will this be a phased approach (i.e. will the system be commissioned site-by-site, system-wide, per workstation, etc.)?

b. What is the allowable downtime of workstations while the proposed solution is implemented?

Question 20 Answer: Per section 7 of the RFI, THIS IS A REQUEST FOR INFORMATION (RFI) ONLY; its intent is to identify sources that can provide a solution for biometrics matching. If TXDPS does pursue a

Question: 21: Is it required for any part of the solution to interface with an existing Air gap system?

Question 21 Answer: Per section 7 of the RFI, THIS IS A REQUEST FOR INFORMATION (RFI) ONLY; its intent is to identify sources that can provide a solution for biometrics matching. If TXDPS does pursue a

Question: 22: RFI states the ability for the system to “track to include transaction lifecycle”. Will the dashboard be dynamic or static (i.e. will operators within the system need to interface with the dashboard, or is it static for information only display)?

Question 22 Answer: Per section 7 of the RFI, THIS IS A REQUEST FOR INFORMATION (RFI) ONLY; its intent is to identify sources that can provide a solution for biometrics matching. If TXDPS does pursue a