RFI_Attachment_II_-_Vendor_Questionnaire.pdf

Attachment II: Vendor Questionnaire RFI # DCA OIS 24-25-006

Question: Vendor Response:

1. Are any of these requirements arduous? If so, please explain.

2. Would the requirements prevent you from bidding on a resulting solicitation? If so, please explain how you propose revising the requirements. Provide support for your suggestions

3. What is your proposed system(s) availability in production and non-production environments? Do you have standard service level agreements for system availability? If yes, please provide them.

4. Please describe if the proposed product/solution is a Commercial Off the Shelf (COTS), Modified Off the Shelf (MOTS), integrated product set (i.e., integration of multiple products), or custom solution. Since the solution could be a combination of products (e.g. those meeting specific business objectives and those supporting the abstraction layer), please outline clearly what products would be used to meet the requirements in Attachment I.

5. Please provide a high-level project schedule based on an agile development approach showing time needed for various sprints within the project and your solution to meet the business objectives. Please include time for deliverable reviews, project planning, end user acceptance testing, and regression testing. This response does not need to be an MS Project file.

6. Please provide a narrative on your approach to the simultaneous implementation of an online application portal and a data ‘abstraction’ layer along with any key dependencies to achieve completion of key milestones/phases.

7. Please describe the type of initial support (such as training) and ongoing support (such as Help Desk) that are included in your solution, and how much time you typically provide your customers with for each type of support on a new project?

8. Please describe your firm’s training offerings to both the program and technical support staff.

9. Please describe how your proposed product interfaces with third party credit card payment providers and relevant Payment Card Industry (PCI) compliance information specific to your product.

10. Please describe all implementation dependencies and or prerequisites (software, hardware, personnel, workstations, etc.) that are necessary for your solution service offering to be fully functional.

Attachment II: Vendor Questionnaire RFI # DCA OIS 24-25-006

11. Please describe any installation requirements necessary for your solution service offering to be fully functional.

12. Please describe the risks and/or issues that you foresee with implementing your solution for California.

13. Please describe risks and issues encountered on other implementation projects for this solution and how they were mitigated and/or addressed.

14. Please describe the experience/education for each of the principal staff who would potentially be working with the State in implementing this system.

15. Please describe your firm’s experience implementing your solution at each of the following levels of government (if applicable): Federal, State, and Local. Also, please state the number of licensees each implementation currently accommodates.

16. Please provide Rough Order of Magnitude (ROM) data to the nearest $25,000 for implementation and maintenance and operations ROM, including staffing, software, and any other associated ROM. If you are using multiple products, please clearly outline the pricing for each product.

Diagram the ROM on Attachment III.

17. Describe your solution’s custom modification development processes, including service fees in terms of the number of hours and staff used for custom development.

18. Describe your various maintenance and operations Service Level Agreement options including ROM.

19. Describe your solution’s infrastructure security safeguards and technologies as well as its user authentication system to protect agency data. Please describe your system’s ability to integrate with 3rd party authentication management such as Azure Active Directory, Okta, and or Premise Microsoft Active Directory for user authentication and role-based permissions.

20. Please describe your solution’s compliance with ADA accessibility for California State Government websites.

State entities are required to align with Web Content Accessibility Guideline (WCAG) 2.1 Level AA Standards in addition to the requirements of Section 508 (29 U.S.C.

794d).

21. We are seeking a solution that is built upon a responsive framework, enabling us to successfully deliver content on tablets, phones, laptops, and desktop computers. Please describe your solution’s supported platforms and if additional software or services are required to enable such support.

Attachment II: Vendor Questionnaire RFI # DCA OIS 24-25-006

22. Please describe your configuration development (design) processes and anticipated customer workload including overall timeline.

23. Describe any documented system performance metrics published for your proposed product.

24. Please describe your largest, current implementation.

Please describe how the proposed product scales for volume. How does your solution accommodate future scalability in terms of users, data volume, and system integrations? Please provide examples from past projects where scalability was successfully implemented. Please provide a reference name and contact information from your largest implementation.

25. While data conversion is intended to be limited, please describe how previous implementations using the proposed product successfully converted data from a legacy system to the proposed product. What tools were used to convert data? Are there any native tools to the product related to data conversion?

26. Disaster Recovery and Business Continuity: e.g. What is your approach to disaster recovery and business continuity for this system? Please include your backup and restoration procedures and the timeframes for full system recovery after an incident.

27. Please describe if the proposed COTS, MOTS, integrated product set, or custom solution or service include, or makes available, any GenAI including, GenAI from third parties or subcontractors off the shelf or out of the box

28. Please describe if the proposed product/solution is hosted in the vendor clouds. If yes, indicate if the vendor is FedRAMP High or Moderate compliant.

29. Please describe your typical support levels/tiers of support. What tiers is the vendor responsible for vs the State, For. E.g. Vendor will do Tier 3 & $ but the State is responsible for Tier 1 & 2 (password resets minor configuration etc.)

30. Please describe the tools used for Requirements Traceability Management?