Revised Attachment C - Technical Proposal Revised.pdf
PDF 218 KB Posted
- Solicitation number
- RFP-08712
- Issued by
- Florida
About this file
This is a Revised Technical Proposal Instructions and Evaluation Criteria document for the Digital Security Solutions RFP (RFP No. 24-43230000-RFP) issued by the State of Florida, Department of Management Services. The document provides instructions for respondents to prepare and submit a Technical Proposal for each proposed solution, which will be evaluated based on the respondent's experience and the proposed solution's ability to meet the Scope of Work requirements across seven service categories: Endpoint-Based Asset Discovery, Network-Based Asset Discovery, Endpoint Detection and Response, External-Facing Asset Discovery, Email Security, Content Delivery Network, and Security Operations Platform. Respondents are limited to 20 pages per solution, and solutions will be scored on a 560-point scale.
The document details the evaluation criteria for each service category, including specific requirements such as integration, authentication support, compliance, reporting, data security, and disaster recovery. Respondents can also propose value-added services to enhance the scope of work. Interested vendors must submit responses through the MyFloridaMarketPlace Sourcing Event via the SAP Business Network. Any protests regarding this procurement must be filed with the Department of Management Services in accordance with Florida Statutes.
View the file
Other files
Show all 11
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Attachment C Revised Technical Proposal Instructions and Evaluation
Criteria
The Respondent shall prepare and submit a Technical Proposal for each proposed Solution according to the criteria and instructions provided in this attachment. The Respondent should submit only one Technical Proposal per Solution and combine all Technical Proposals into one PDF document per Solution submission with fully searchable text and image features throughout the document. Respondents that propose multiple Solutions should combine all Technical Proposals into one file prior to submission.
Each Solution Technical Proposal The document should include a cover sheet with the following information:
• Technical Proposal – Digital Security Solutions
• RFP No. 24-43230000-RFP
• Respondent Name
• Proposed Service Categories
• Proposed Solution Name(s)
The electronic file containing the combined Technical Proposals should be labeled Respondent Name_Technical_Proposal_Solution.
Do not submit more than 20 pages in aggregate for Experience and Proposed Solution, including cover page and table of contents, per Solution. If the Technical Proposal for a Solution exceeds 20 pages, only the first 20 pages will be provided to the Evaluators (Note:
cover pages and tables of contents are included in the 20-page limit).
Evaluation Criteria
The following criteria will be utilized by evaluators to score each Solution proposed:
Technical Proposal Available Points
1. Experience 160
2. Proposed Solution 400
Total Available Points for Technical Proposal 560
1. Experience – 160 Available Points
For each Solution proposed, the Respondent shall provide a narrative on the Respondent’s relevant experience providing the products and services set forth in the Scope of Work for the proposed Service Category.
The Evaluator will evaluate the quality, depth, and relevance of the experience (including any demonstrated experience in providing services relevant to governmental entities) in providing Digital Security Solutions in accordance with the following guidelines and must base his or her score on the information provided in the Technical Proposal. The Evaluator will assign a score between 0 and 160 to each Solution proposed.
2. Proposed Solution – 400 Available Points Per Solution
For each Solution proposed, the Respondent shall fully describe how its proposed Solution will carry out the Scope of Work requirements by referencing each corresponding section number in the applicable Service Category table below. For example, Technical Proposals for proposed Solutions for Service Category 1: Endpoint-Based Asset Discovery, shall provide responses to each section cited in the table below titled “Service Category 1: Endpoint-Based Asset Discovery.” The Respondent may demonstrate its proposed Solution by providing relevant information for consideration for each requirement outlined in the applicable Service Category table below.
The point designations for each Service Category are designated below:
Service Category Maximum Score
Weight Maximum Points
Service Category 1: Endpoint-Based Asset Discovery 240 400/240 400 Service Category 2: Network-Based Asset Discovery 190 400/190 400 Service Category 3: Endpoint Detection and Response 190 400/190 400 Service Category 4: External-Facing Asset Discovery 250 400/250 400 Service Category 5: Email Security 220 400/220 400 Service Category 6: Content Delivery Network 310 400/310 400 Service Category 7: Security Operations Platform 240 400/240 400
Evaluators will consider the following information when scoring the Proposed Solution section:
Service Category 1: Endpoint-Based Asset Discovery
Criteria Max Score
Score Notes
1 How well does the Solution meet the Standard Requirement 3.1.1, Integration?
(Scoring Range: 0-10)
2 How well does the Solution meet the Standard Requirement 3.1.2, Integration with IAM Systems?
(Scoring Range: 0-10)
3 How well does the Solution meet Standard Requirement 3.1.3, Support for Advanced Authentication Methods?
(Scoring Range: 0-10)
4 How well does the Solution meet the Standard Requirement 3.1.4, Solution Architecture?
(Scoring Range: 0-10)
5 How well does the Solution meet Standard Requirement 3.1.5, Compliance and Third-Party Certification?
(Scoring Range: 0-10)
6 Does the Solution meet Standard Requirement 3.1.6, Role-Based Access Control (RBAC)?
(Scoring Range: 0-10)
7 How well does the Solution meet Standard Requirement 3.1.7, Configuration Tools and Customization?
(Scoring Range: 0-10)
8 How well does the Solution meet Standard Requirement 3.1.8, Reporting and Documentation?
(Scoring Range: 0-10)
9 How well does the Solution meet Standard Requirement 3.1.9, Data Security Encryption?
(Scoring Range: 0-10))
10 How well does the Solution meet Standard Requirement 3.1.10, Disaster Recovery?
(Scoring Range: 0-10)
11 How well does the Solution meet Standard Requirement 3.1.11, Data Export?
(Scoring Range: 0-10)
12 How well does the Solution meet Standard Requirement 3.1.12, Comprehensive Metadata and Tagging?
(Scoring Range: 0-10)
13 How well does the Solution meet Standard Requirement 3.1.13, Change Management Integration?
(Scoring Range: 0-10)
14 How well does the Solution meet the description in Solution Requirement 3.2, Endpoint-Based Asset Discovery?
(Scoring Range: 0-30)
15 How well does the Solution meet Solution Requirement 3.2.1, Software Agent?
16 How well does the Solution meet Solution Requirement 3.2.2, Endpoint Analysis?
(Scoring Range: 0-10)
17 How well does the Solution meet Solution Requirement 3.2.3, Centralized Management Console?
(Scoring Range: 0-10)
18 How well does the Solution meet Solution Requirement 3.2.4, Product Usability?
(Scoring Range: 0-10)
19 How well does the Solution meet Solution Requirement 3.2.5, Client Management?
(Scoring Range: 0-10)
20 How well does the Solution meet Solution Requirement 3.2.6, Operating System Management?
(Scoring Range: 0-10)
21 How well does the Solution meet Solution Requirement 3.2.7, Performance Management?
(Scoring Range: 0-10)
22 Did the Respondent provide Value-Added Services in accordance with 3.10 that would be beneficial to enhance the scope of work?
(Scoring Range: 0-10)
Total: 240
Service Category 2: Network-Based Asset Discovery
Criteria Max
Score Score Notes
1 How well does the Solution meet the Standard Requirement 3.1.1, Integration?
(Scoring Range: 0-10)
2 How well does the Solution meet the Standard Requirement 3.1.2, Integration with IAM Systems?
(Scoring Range: 0-10)
3 How well does the Solution meet Standard Requirement 3.1.3, Support for Advanced Authentication Methods?
4 How well does the Solution meet the Standard Requirement 3.1.4, Solution Architecture?
(Scoring Range: 0-10)
5 How well does the Solution meet Standard Requirement 3.1.5, Compliance and Third-Party Certification?
(Scoring Range: 0-10)
6 Does the Solution meet Standard Requirement 3.1.6, Role-Based Access Control (RBAC)?
(Scoring Range: 0-10)
7 How well does the Solution meet Standard Requirement 3.1.7, Configuration Tools and Customization?
(Scoring Range: 0-10)
8 How well does the Solution meet Standard Requirement 3.1.8, Reporting and Documentation?
(Scoring Range: 0-10)
9 How well does the Solution meet Standard Requirement 3.1.9, Data Security Encryption?
(Scoring Range: 0-10)
10 How well does the Solution meet Standard Requirement 3.1.10, Disaster Recovery?
(Scoring Range: 0-10)
11 How well does the Solution meet Standard Requirement 3.1.11, Data Export?
(Scoring Range: 0-10)
12 How well does the Solution meet Standard Requirement 3.1.12, Comprehensive Metadata and Tagging?
(Scoring Range: 0-10)
13 How well does the Solution meet Standard Requirement 3.1.13, Change Management Integration?
(Scoring Range: 0-10)
14 How well does the Solution meet the description in Solution Requirement 3.3, Network-Based Asset Discovery?
(Scoring Range: 0-30)
15 How well does the Solution meet Solution Requirement 3.3.1, Agentless Discovery?
(Scoring Range: 0-10)
16 How well does the Solution meet Solution Requirement 3.3.2, Remote Management and Data Security?
(Scoring Range: 0-10)
17 Did the Respondent provide Value-Added Services in accordance with 3.10 that would be beneficial to enhance the scope of work?
(Scoring Range: 0-10)
Total: 190
Service Category 3: Endpoint Detection and Response
Criteria Max
Score Score Notes
1 How well does the Solution meet the Standard Requirement 3.1.1, Integration?
(Scoring Range: 0-10)
2 How well does the Solution meet the Standard Requirement 3.1.2, Integration with IAM Systems?
(Scoring Range: 0-10)
3 How well does the Solution meet Standard Requirement 3.1.3, Support for Advanced Authentication Methods?
(Scoring Range: 0-10)
4 How well does the Solution meet the Standard Requirement 3.1.4, Solution Architecture?
(Scoring Range: 0-10)
5 How well does the Solution meet Standard Requirement 3.1.5, Compliance and Third-Party Certification?
(Scoring Range: 0-10)
6 Does the Solution meet Standard Requirement 3.1.6, Role-Based Access Control (RBAC)?
(Scoring Range: 0-10)
7 How well does the Solution meet Standard Requirement 3.1.7, Configuration Tools and Customization?
8 How well does the Solution meet
Standard Requirement 3.1.8, Reporting and Documentation?
(Scoring Range: 0-10)
9 How well does the Solution meet Standard Requirement 3.1.9, Data Security Encryption?
(Scoring Range: 0-10)
10 How well does the Solution meet Standard Requirement 3.1.10, Disaster Recovery?
11 How well does the Solution meet Standard Requirement 3.1.11, Data Export?
(Scoring Range: 0-10)
12 How well does the Solution meet Standard Requirement 3.1.12, Comprehensive Metadata and Tagging?
(Scoring Range: 0-10)
13 How well does the Solution meet Standard Requirement 3.1.13, Change Management Integration?
(Scoring Range: 0-10)
14 How well does the Solution meet the description in Solution Requirement 3.4, Endpoint Detection and Response?
(Scoring Range: 0-30)
15 How well does the Solution meet Solution Requirement 3.4.1, Detection and Response?
(Scoring Range: 0-10)
16 How well does the Solution meet Solution Requirement 3.4.2, Endpoint Protection Platform Suite?
(Scoring Range: 0-10)
17 Did the Respondent provide Value-Added Services in accordance with 3.10 that would be beneficial to enhance the scope of work?
(Scoring Range: 0-10)
Total: 190
Service Category 4: External-Facing Asset Discovery
Criteria Max Score
Score Notes
1 How well does the Solution meet the Standard Requirement 3.1.1, Integration?
(Scoring Range: 0-10)
2 How well does the Solution meet the Standard Requirement 3.1.2, Integration with IAM Systems?
(Scoring Range: 0-10)
3 How well does the Solution meet Standard Requirement 3.1.3, Support for Advanced Authentication Methods?
(Scoring Range: 0-10)
4 How well does the Solution meet the Standard Requirement 3.1.4, Solution Architecture?
(Scoring Range: 0-10)
5 How well does the Solution meet Standard Requirement 3.1.5, Compliance and Third-Party Certification?
(Scoring Range: 0-10)
6 Does the Solution meet Standard Requirement 3.1.6, Role-Based Access Control (RBAC)?
(Scoring Range: 0-10)
7 How well does the Solution meet Standard Requirement 3.1.7, Configuration Tools and Customization?
(Scoring Range: 0-10)
8 How well does the Solution meet Standard Requirement 3.1.8, Reporting and Documentation?
(Scoring Range: 0-10)
9 How well does the Solution meet Standard Requirement 3.1.9, Data Security Encryption?
(Scoring Range: 0-10)
10 How well does the Solution meet Standard Requirement 3.1.10, Disaster Recovery?
(Scoring Range: 0-10)
11 How well does the Solution meet Standard Requirement 3.1.11, Data Export?
12 How well does the Solution meet
Standard Requirement 3.1.12, Comprehensive Metadata and Tagging?
(Scoring Range: 0-10)
13 How well does the Solution meet Standard Requirement 3.1.13, Change Management Integration?
(Scoring Range: 0-10)
14 How well does the Solution meet the description in Solution Requirement 3.5, External-Facing Asset Discovery?
(Scoring Range: 0-30)
15 How well does the Solution meet Solution Requirement 3.5.1, Vulnerability Identification?
(Scoring Range: 0-10)
16 How well does the Solution meet Solution Requirement 3.5.2, Device Metadata?
(Scoring Range: 0-10)
17 How well does the Solution meet Solution Requirement 3.5.3, SSL/TSL Certificates?
(Scoring Range: 0-10)
18 How well does the Solution meet Solution Requirement 3.5.4, Service Identification?
(Scoring Range: 0-10)
19 How well does the Solution meet Solution Requirement 3.5.5, Scanning and Monitoring?
(Scoring Range: 0-10)
20 How well does the Solution meet Solution Requirement 3.5.6, Banner Grabbing?
(Scoring Range: 0-10)
21 How well does the Solution meet Solution Requirement 3.5.7, Policy?
(Scoring Range: 0-10)
22 How well does the Solution meet Solution Requirement 3.5.8, Asset Management and Ownership?
23 Did the Respondent provide Value-Added Services in accordance with 3.10 that would be beneficial to enhance the scope of work?
(Scoring Range: 0-10)
Total: 250
Service Category 5: Email Security
Criteria Max
Score Score Notes
1 How well does the Solution meet the Standard Requirement 3.1.1, Integration?
(Scoring Range: 0-10)
2 How well does the Solution meet the Standard Requirement 3.1.2, Integration with IAM Systems?
(Scoring Range: 0-10)
3 How well does the Solution meet Standard Requirement 3.1.3, Support for Advanced Authentication Methods?
(Scoring Range: 0-10)
4 How well does the Solution meet the Standard Requirement 3.1.4, Solution Architecture?
(Scoring Range: 0-10)
5 How well does the Solution meet Standard Requirement 3.1.5, Compliance and Third-Party Certification?
(Scoring Range: 0-10)
6 Does the Solution meet Standard Requirement 3.1.6, Role-Based Access Control (RBAC)?
(Scoring Range: 0-10)
7 How well does the Solution meet Standard Requirement 3.1.7, Configuration Tools and Customization?
(Scoring Range: 0-10)
8 How well does the Solution meet Standard Requirement 3.1.8, Reporting and Documentation?
(Scoring Range: 0-10)
9 How well does the Solution meet Standard Requirement 3.1.9, Data Security Encryption?
10 How well does the Solution meet Standard Requirement 3.1.10, Disaster Recovery?
(Scoring Range: 0-10)
11 How well does the Solution meet Standard Requirement 3.1.11, Data Export?
(Scoring Range: 0-10)
12 How well does the Solution meet Standard Requirement 3.1.12, Comprehensive Metadata and Tagging?
(Scoring Range: 0-10)
13 How well does the Solution meet Standard Requirement 3.1.13, Change Management Integration?
(Scoring Range: 0-10)
14 How well does the Solution meet the description in Solution Requirement 3.6, Email Security?
(Scoring Range: 0-30)
15 How well does the Solution meet Solution Requirement 3.6.1, Content Disarm and Reconstruction?
(Scoring Range: 0-10)
16 How well does the Solution meet Solution Requirement 3.6.2, Multi- Source Mail Traffic Analysis?
(Scoring Range: 0-10)
17 How well does the Solution meet Solution Requirement 3.6.3, Display Name Spoof Detection?
(Scoring Range: 0-10)
18 How well does the Solution meet Solution Requirement 3.6.4, Anti- Phishing Capabilities?
(Scoring Range: 0-10)
19 How well does the Solution meet Solution Requirement 3.6.5, Domain-Based Message Authentication, Reporting and Conformance (DMARC) on Inbound Email?
20 Did the Respondent provide Value-Added Services in accordance with 3.10 that would be beneficial to enhance the scope of work?
(Scoring Range: 0-10)
Total: 220
Service Category 6: Content Delivery Network
Criteria Max
Score Score Notes
1 How well does the Solution meet the Standard Requirement 3.1.1, Integration?
(Scoring Range: 0-10)
2 How well does the Solution meet the Standard Requirement 3.1.2, Integration with IAM Systems?
(Scoring Range: 0-10)
3 How well does the Solution meet Standard Requirement 3.1.3, Support for Advanced Authentication Methods?
(Scoring Range: 0-10)
4 How well does the Solution meet the Standard Requirement 3.1.4, Solution Architecture?
(Scoring Range: 0-10)
5 How well does the Solution meet Standard Requirement 3.1.5, Compliance and Third-Party Certification?
(Scoring Range: 0-10)
6 Does the Solution meet Standard Requirement 3.1.6, Role-Based Access Control (RBAC)?
(Scoring Range: 0-10)
7 How well does the Solution meet Standard Requirement 3.1.7, Configuration Tools and Customization?
(Scoring Range: 0-10)
8 How well does the Solution meet Standard Requirement 3.1.8, Reporting and Documentation?
(Scoring Range: 0-10)
9 How well does the Solution meet Standard Requirement 3.1.9, Data Security Encryption?
10 How well does the Solution meet Standard Requirement 3.1.10, Disaster Recovery?
(Scoring Range: 0-10)
11 How well does the Solution meet Standard Requirement 3.1.11, Data Export?
(Scoring Range: 0-10)
12 How well does the Solution meet Standard Requirement 3.1.12, Comprehensive Metadata and Tagging?
(Scoring Range: 0-10)
13 How well does the Solution meet Standard Requirement 3.1.13, Change Management Integration?
(Scoring Range: 0-10)
14 How well does the Solution meet the description in Solution Requirement 3.7, Content Delivery Network?
(Scoring Range: 0-30)
15 How well does the Solution meet Solution Requirement 3.7.1, Security?
(Scoring Range: 0-10)
16 How well does the Solution meet Solution Requirement 3.7.2, Performance?
(Scoring Range: 0-10)
17 How well does the Solution meet Solution Requirement 3.7.3, Customization?
(Scoring Range: 0-10)
18 How well does the Solution meet Solution Requirement 3.7.4, User Management?
(Scoring Range: 0-10)
19 How well does the Solution meet Solution Requirement 3.7.5, Content Delivery?
(Scoring Range: 0-10)
20 How well does the Solution meet Solution Requirement 3.7.6, Caching?
(Scoring Range: 0-10)
21 How well does the Solution meet Solution Requirement 3.7.7, DDoS Protection?
22 How well does the Solution meet Solution Requirement 3.7.8, SSL Encryption?
(Scoring Range: 0-10)
23 How well does the Solution meet Solution Requirement 3.7.9, Load Balancing?
(Scoring Range: 0-10)
24 How well does the Solution meet Solution Requirement 3.7.10, Real-Time Monitoring?
(Scoring Range: 0-10)
25 How well does the Solution meet Solution Requirement 3.7.11, Content Optimization?
(Scoring Range: 0-10)
26 How well does the Solution meet Solution Requirement 3.7.12, Onboarding?
(Scoring Range: 0-10)
27 How well does the Solution meet Solution Requirement 3.7.13, Prevention?
(Scoring Range: 0-10)
28 How well does the Solution meet Solution Requirement 3.7.14, State CSOC Integration?
(Scoring Range: 0-10)
29 Did the Respondent provide Value-Added Services in accordance with 3.10 that would be beneficial to enhance the scope of work?
(Scoring Range: 0-10)
Total: 310
Service Category 7: Security Operations Platform
Criteria Max
Score Score Notes
1 How well does the Solution meet the Standard Requirement 3.1.1, Integration?
(Scoring Range: 0-10)
2 How well does the Solution meet the Standard Requirement 3.1.2, Integration with IAM Systems?
3 How well does the Solution meet Standard Requirement 3.1.3, Support for Advanced Authentication Methods?
(Scoring Range: 0-10)
4 How well does the Solution meet the Standard Requirement 3.1.4, Solution Architecture?
(Scoring Range: 0-10)
5 How well does the Solution meet Standard Requirement 3.1.5, Compliance and Third-Party Certification?
(Scoring Range: 0-10)
6 Does the Solution meet Standard Requirement 3.1.6, Role-Based Access Control (RBAC)?
(Scoring Range: 0-10)
7 How well does the Solution meet Standard Requirement 3.1.7, Configuration Tools and Customization?
(Scoring Range: 0-10)
8 How well does the Solution meet Standard Requirement 3.1.8, Reporting and Documentation?
(Scoring Range: 0-10)
9 How well does the Solution meet Standard Requirement 3.1.9, Data Security Encryption?
(Scoring Range: 0-10)
10 How well does the Solution meet Standard Requirement 3.1.10, Disaster Recovery?
(Scoring Range: 0-10)
11 How well does the Solution meet Standard Requirement 3.1.11, Data Export?
(Scoring Range: 0-10)
12 How well does the Solution meet Standard Requirement 3.1.12, Comprehensive Metadata and Tagging?
(Scoring Range: 0-10)
13 How well does the Solution meet Standard Requirement 3.1.13, Change Management Integration?
14 How well does the Solution meet the description in Solution Requirement 3.8, Security Operations Platform?
(Scoring Range: 0-30)
15 How well does the Solution meet Solution Requirement 3.8.1, Detection and Response?
(Scoring Range: 0-10)
16 How well does the Solution meet Solution Requirement 3.8.2, Automation?
(Scoring Range: 0-10)
17 How well does the Solution meet Solution Requirement 3.8.3, Incident Reporting?
(Scoring Range: 0-10)
18 How well does the Solution meet Solution Requirement 3.8.4, Cloud Reporting?
(Scoring Range: 0-10)
19 How well does the Solution meet Solution Requirement 3.8.5, Threat Intelligence?
(Scoring Range: 0-10)
20 How well does the Solution meet Solution Requirement 3.8.6, Incident Response?
(Scoring Range: 0-10)
21 How well does the Solution meet Solution Requirement 3.8.7, State CSOC Integration?
(Scoring Range: 0-10)
22 Did the Respondent provide Value-Added Services in accordance with 3.10 that would be beneficial to enhance the scope of work?
(Scoring Range: 0-10)
Total: 240
Attachment C
File details come from the government source that posted it. Updated .