Payment Card Procesing and Intengration RFI PLT-21-8124-I.docx

University of Wisconsin - Platteville

Request for Information (RFI) PLT-21-8124-I

Payment Processing and Integration

Issued: 2/8/2020

Responses Due: 3/1/2021 at 4:00pm

This is not a bid or proposal.

This Request for Information is issued solely for informational purposes only and does not constitute a solicitation.

Questions concerning this RFI should be directed in writing to:

Mike Morris University of Wisconsin - Platteville Email: morrismi@uwplatt.edu

I. Introduction The University of Wisconsin Platteville is a regional public institute of higher education comprised of three campuses, and one of 11 comprehensive universities in the University of Wisconsin System. To learn more about our campus, visit: www.uwplatt.edu.

The University of Wisconsin Platteville serves over 8,000 students annually offering associates, undergraduate, and graduate degree programs.

The University of Wisconsin Platteville currently has 29 active merchant IDs among 17 different departments with an interest to expand. Annual volume exceeds $30 million and 70,000 transactions.

II. Purpose of the Request for Information A. The purpose of the Request for Information is to gather information regarding payment processing services including the following:

· Integration with Oracle Campus Solutions.

· Possible integration with other IT systems.

B. This information will be reviewed and may be used in the development of a Request for Bid or Request for Proposal solicitation document in the future.

C. The Request for Information is not intended to result in the purchase of payment processing services for the University of Wisconsin Platteville campus.

D. Respondents are solely responsible for all expenses associated with responding to this RFI.

E. All materials submitted in response to this RFI are the property of the University. Information received in response to this RFI that is marked “proprietary” (via the Designation of Confidential and Proprietary Information form) will be handled accordingly. Information will only be kept confidential to the extent allowed by State of Wisconsin Public Disclosure Law. A copy of the form needed to designate portions of your submission as proprietary can be found at the end of this request for information document.

III. Submitting a Response

Interested vendors should submit a response answering the questions in Section IV. Vendor Response. Responses should be no longer than 30 pages. Responses must be submitted electronically. The responses to the requested information and any supplemental materials should be submitted to morrismi@uwplatt.edu no later than 3/1/2021 at 4:00pm

The University of Wisconsin Platteville is not interested in receiving advertising or other material beyond the scope of this RFI. Elaborate responses (e.g., expensive artwork) beyond that sufficient to present a complete and effective response are not necessary or desired.

IV. Vendor Response Vendors submitting a response to this RFI should use the outline below. Responses should address each question in the following RFI sections.

A. Institution Information

1. Describe your organization and its qualifications to respond to this Request for Information.

2. Provide a brief description of your organization’s experience providing payment processing services to higher education organizations.

B. General Service Information

1. UW-Platteville currently facilitates credit card and electronic check transactions originating from both online and phone sources, the following table provides estimates.

Please list and or describe the payment methods supported by your solution (Visa, Mastercard, e-check, etc.).

1. Do you offer a phone in option for making payments? How would those payments get posted to the student’s account?

2. Describe how outages and other service impacting events (planned or unplanned) are communicated to customers. Please include both communication method and timeline information.

3. Please provide metrics related to reliability and up-time.

4. Describe your incident response methodology to UW-Platteville, including Root Cause Analysis, escalation, notification timeline, breach notification, etc...

5. Please describe your licensing model.

6. Please describe how you bill for your solution. Include a description of any processing or transaction fees.

7. What are the average and peak transactions per day for your typical customer?

8. Please describe any training you will provide to UW-Platteville staff.

9. Please describe support tiers available and costs associated with each support tier. Also provide a copy or link to available Service Level Agreements (SLAs).

10. Please describe any hardware, software, and network infrastructure requirements.

11. Please describe your system’s reporting capabilities and provide example reports. Are reports available for both credit cards and electronic checks including NSF and declined transactions? Can reports be downloaded into other formats (ex. Excel or PDF)? How are reports accessed?

C. Oracle Campus Solutions Support and Integration

1. Does your solution provide a real-time integration with Oracle Campus Solutions? Please describe the method of integration.

2. Please describe your level of support and continued development for Oracle Campus Solutions.

3. Please provide a list of the versions of Oracle Campus Solutions that are currently supported.

4. Please describe any integration and implementation services you provide for Oracle Campus Solutions.

5. UW-Platteville allows for payments by parents, and other third parties. A parent or third-party payor may make payments for one or more students with a single payment. Please describe if and how this functionality is supported in your service.

6. UW-Platteville has multiple Oracle Campus Solutions test instances (Development, Test, Quality Assurance). Please describe your support for multiple test instances to ensure payment processing will work with our student information system following upgrades.

7. Describe your capabilities of providing a live demonstration of how your service integrates with Oracle Campus Solutions.

D. Support for other Integrations or Devices

1. Please describe other software integration methods supported by your solution.

2. UW-Platteville currently has payment Integration with the following applications (Radius, Ungerboeck, StarRez, Salesforce, and T2). Please Indicate If your product/solution provides Integrations with these applications and other higher ed products/solutions.

3. Describe other merchant/e-commerce solutions and services you provide.

E. Security

1. The payment processing system must comply with UW-System Policy 350 Including links to related materials in section 7 found here:

https://www.wisconsin.edu/uw-policies/uw-system-administrative-policies/payment-card-compliance-policy/ Please review and identify any sections in the above documents where you are unable to meet the requirements.

2. Is your solution PCI-DSS validated? Please include the expiration date of the PCI-DSS validation.

3. Please provide/complete the following:

· Data Flow Diagram

· PCI Responsibility Matrix

· Completed cloud vendor assessment.

· Recommended industry standard assessments: Cloud Security Alliance (CSA) self-assessment (https://cloudsecurityalliance.org/artifacts/consensus-assessments-initiative-questionnaire-v3-1/ ) or the EDUCAUSE Higher Education Cloud Vendor Assessment Tool (HECVAT) Assessment (https://library.educause.edu/resources/2020/4/higher-education-community-vendor-assessment-toolkit)

4. Please list any hosting providers and documents referenced in E.3 for each hosting provider.

5. Describe your data breach notification timeline and process and notification to affected customers.

6. The State of Wisconsin requires purchased contractual services to be performed in the United States (Wis Stats 16.705 (1r)). Can you warrant that the services provided to the University will be performed in the United States? The inability to perform services in the United States shall be grounds for disqualifying your company from consideration.

7. Please provide a list of all PCI Validated Point of Sales devices, include those that are P2PE validated.

8. Provide link to all validated components included on the PCI Council website.

9. Please describe the available roles and authentication methods available for each role.

10. If Single Sign-on is supported, please describe the authentication methods available.

11. Describe your support for Multi-Factor Authentication. Please list supported methods, solutions and/or devices.

Designation of Confidential and Proprietary Information Section 1: Information

Phone Number:

Toll Free Phone:

Fax:

Address:

Section 2: Designation of Confidential and Proprietary Information

The attached material submitted in response to this request for information includes proprietary and confidential information which qualifies as a trade secret, as provided in s. 19.36(5), Wis. Stats., or is otherwise material that can be kept confidential under the Wisconsin Open Records Law. As such, we ask that certain pages, as indicated below, of this request for information response be treated as confidential material and not be released without our written approval.

Prices always become public information when bids/proposals are opened, and therefore cannot be kept confidential.

Other information cannot be kept confidential unless it is a trade secret. Trade secret is defined in s. 134.90(1)(c), Wis. Stats., as follows: “Trade Secret” means information, including a formula, pattern, compilation, program, device, method, technique or process to which all of the following apply:

1. The information derives independent economic value, actual or potential, from not being generally known to, and not being readily ascertainable by proper means by, other persons who can obtain economic value from its disclosure or use.

2. The information is the subject of efforts to maintain its secrecy that are reasonable under the circumstances.

We request that the following pages not be released:

Using the boxes below, indicate your agreement with the following statements:

|_| |_| In the event the designation of confidentiality of this information is challenged, the bidder/proposer hereby agrees to provide legal counsel or other necessary assistance to defend the designation of confidentiality and agrees to hold the state harmless for any costs or damages arising out of the state’s agreeing to withhold the materials.

|_| The state considers other markings of confidential in the bid/proposal document to be insufficient. The bidder/proposer agrees to hold the state harmless for any damages arising out of the release of any materials unless they are specifically identified above.

1 University Plaza | Platteville WI 53818-3099 | www.uwplatt.edu

1 University Plaza | Platteville WI 53818-3099 | www.uwplatt.edu image1.emf