RFI No. DMS-2324-046, Securing Recursive DNS.pdf

4050 Esplanade Way Tallahassee, FL 32399-0950

Ron DeSantis, Governor

Pedro Allende, Secretary

Florida Department of Management Services

Request For Information (RFI)

Securing Recursive Domain Name System

RFI Advertisement Number: DMS-23/24-046

Begin Date: September 6, 2023 End Date: September 28, 2023

Refer ALL Inquiries to:

Pegah Bowman, Procurement Officer

Departmental Purchasing Department of Management Services

4050 Esplanade Way, Suite 260 Tallahassee, FL 32399-0950

DMS.Purchasing@dms.fl.gov

Pursuant to rule 60A-1.042, Florida Administrative Code (F.A.C.), an agency may request information by issuing a written Request for Information. Agencies may use Requests for Information in circumstances including, but not limited to, determining whether to competitively procure a commodity or contractual services, determining what solicitation process to use for a specific need, or researching general, special, and/or technical specifications for a solicitation.

RFI No. DMS-23/24-046 Page 2 of 5

I. INTRODUCTION

The Department of Management Services (Department) is issuing this Request for Information (RFI) to the vendor community to obtain information on Securing Recursive Domain Name Systems (DNS).

This RFI, as defined in section 287.012(22), Florida Statutes (F.S.), is for planning purposes only. This is not a solicitation for offers. The information gathered from this RFI may be used to develop a future solicitation. Please monitor the MyFloridaMarketPlace (MFMP) Vendor Bid System for any changes or notices prior to submitting a response.

II. PURPOSE OF A REQUEST FOR INFORMATION

Rule 60A-1.042, F.A.C., provides that an agency may request information by issuing a written RFI. Agencies are authorized to use an RFI in circumstances including, but not limited to, determining whether to competitively procure a commodity or contractual services, determining what solicitation process to use for a specific need, or researching general, special, and/or technical specifications for a solicitation.

A vendor’s response to an RFI is not an offer and the agency may not use the vendor’s submission to justify a contract with that vendor without otherwise complying with Chapter 287, F.S. and rule 60A-1.042, F.A.C. Vendors submitting a response to an agency’s RFI are not prohibited from responding to any related subsequent solicitation. Any future purchase of the commodity or services will be conducted in accordance with applicable law.

The Vendor’s response to this RFI may be used to prepare future solicitations and may result in subsequent vendor meetings.

III. GOAL

The State of Florida seeks information from experienced vendors to explore robust and scalable secure DNS solutions that accommodate present and anticipated needs. The overarching aim is to amplify the resilience and security of DNS infrastructure, especially against targeted DNS cyber threats.

The Department is interested in recursive servers for agencies to use as forwarders.

However, the solution should have the versatility to morph into a multi-agency, multi-tenant architecture, seamlessly integrating Dynamic Host Configuration Protocol (DHCP) and IP Address Management (IPAM). Responses must adhere to the specifications outlined in Section IV, Response Submission Guidelines.

IV. RESPONSE SUBMISSION GUIDELINES

The State of Florida requests detailed insights from prospective vendors. The vendor’s submission should include the following information within its submission:

1. The vendor’s Business Organization’s information, including the following:

a. Name of the Business Organization,

b. Primary Point of Contact,

c. Mailing Address,

d. Contact Phone number; and

e. Contact Email.

2. Comprehensive Overview of Offered Solutions:

a. Architectural Design - Cloud, virtual, appliance-driven, hybrid, etc.

b. Integration with Threat Intelligence Platforms or Services,

c. Reporting and Active Monitoring capabilities; and

d. Log Retention policy and duration, along with retrieval methods.

RFI No. DMS-23/24-046 Page 3 of 5

3. Compliance, Certification, and Data Sovereignty:

a. Relevant federal and state cybersecurity and privacy compliance documents.

b. Certifications held by the product, service, or organization.

c. Assurance on data storage, particularly if it remains within U.S. borders.

4. Local Presence & Experience:

a. Information about local offices or representatives within the State of Florida.

b. Availability and response times of local technical and account management support.

c. Case studies or references from previous or ongoing government agency implementations, with emphasis on state-level engagements.

5. Integration and Customization:

a. Integration capability with existing state systems or platforms.

b. Features that can be tailored specifically for Florida's requirements.

6. Training, Documentation, and Support:

a. Training programs tailored for government agencies.

b. Availability of comprehensive documentation, including user manuals.

c. Details on after-sales support, troubleshooting, and assistance.

7. Pricing & Scalability:

a. Pricing structures, highlighting any government-specific discounts or offers.

b. Information on the solution's scalability, especially for statewide adoption.

8. Disaster Recovery & Continuity:

a. Plans ensuring service continuity, considering Florida's unique geographical challenges.

b. Redundancy mechanisms for uninterrupted service.

9. Exit Strategy & Transition:

a. Clarity on processes should the State of Florida opt to transition to another provider, ensuring minimal service disruption.

Supplementary materials, such as brochures, whitepapers, or case studies that substantiate your offerings are encouraged. We prioritize clear, concise, and comprehensive responses.

PLEASE NOTE: Any submitted material is subject to the Public Records Act, section 119.07, Florida Statutes.

V. RESPONSE SUBMISSION

Responses shall be submitted as follows:

1. Responses shall be submitted to the Procurement Officer only by email at dms.purchasing@dms.fl.gov.

2. Responses should address each item in Section IV, point by point.

3. If applicable, a redacted copy must be submitted in accordance with Section X.

3. The email Subject Line should be titled: DMS-23/24-046.

4. Response Files should follow this naming convention:

Company Name_DMS-2324-046_RFI.

6. PLEASE NOTE: Any submitted material is subject to the Public Records Act, section

119.07 of the Florida Statutes.

mailto:dms.purchasing@dms.fl.gov

RFI No. DMS-23/24-046 Page 4 of 5

VI. PROCESS

Responses to this RFI will be reviewed by the Department for informational purposes only and will not result in the award of a contract.

The Department will review the responses to determine the feasibility of issuing a competitive solicitation for a Securing Recursive Domain Name System. Responding to the RFI does not prevent a vendor from being eligible to contract with an agency pursuant to section 287.057(19)(c), F.S.

VII. TIMELINE

Listed below are important dates and times when actions should be taken or completed. If the Department finds it necessary to update any of the dates and/or times noted, it will be accomplished by an addendum to the RFI. All times listed below are in Eastern Standard Time (EST).

Date Time September 6, 2023 Release of RFI September 14, 2023 4:00 p.m. Questions due to the email address in Section XII September 21, 2023 Answers to vendor questions, if any, posted to VIP September 28, 2023 4:00 p.m. Responses are due to the email address in Section V

VIII. CHANGES TO THE RFI

The Department will post addenda to the RFI on the Florida Vendor Information Portal (VIP) at https://vendor.myfloridamarketplace.com/search/bids. The vendor may view addenda by selecting “Department of Management Services” in the “Agency” drop down box. Each vendor is responsible for monitoring the VIP for new or changing information.

IX. RFI QUESTIONS AND CONTACT WITH DMS

Respondents shall address all questions regarding this RFI by email to the Procurement Officer identified in Section XII. The Department will post answers to questions on VIP as noted in Section VII, Timeline.

X. CONFIDENTIAL, PROPRIETARY, OR TRADE SECRET INFORMATION

If Respondent considers any portion of the documents, data or records submitted in response to this RFI to be confidential, proprietary, trade secret or otherwise not subject to disclosure pursuant to Chapter 119, Florida Statutes, the Florida Constitution or other authority, Respondent must mark the document as “Confidential” and simultaneously provide the Department with a separate redacted copy of its response and briefly describe in writing the grounds for claiming exemption from the public records law, including the specific statutory citation for such exemption. This redacted copy shall contain the Department’s RFI name, number, and the name of the Respondent on the cover, and shall be clearly titled “Redacted Copy.” The Redacted Copy should only redact those portions of material that the Respondent claims are confidential, proprietary, trade secret or otherwise not subject to disclosure.

In the event of a request for public records pursuant to Chapter 119, Florida Statutes, the Florida Constitution, or other authority, to which documents that are marked as confidential are responsive, the Department will provide the Redacted Copy to the requestor. If a requestor asserts a right to the Confidential Information, the Department will notify the vendor such an assertion has been made. It is the vendor’s responsibility to assert that the information in question is exempt from disclosure under chapter 119 or other applicable law. If the Department becomes subject to a demand for discovery or disclosure of the Confidential Information of the vendor in a legal proceeding, the Department shall give the vendor prompt notice of the demand prior to releasing the information (unless otherwise prohibited by applicable law). The vendor shall be responsible for defending its https://fldms.sharepoint.com/FandA/DeptPur/Procurements%20Being%20Developed/3.%20RFI's/DMS-2223-061%20Weight%20Management/RFI_Wellness%20Weight%20Management%207.12.22.doc

RFI No. DMS-23/24-046 Page 5 of 5 determination that the redacted portions of its response are confidential, proprietary, trade secret, or otherwise not subject to disclosure.

By submitting a response, the vendor agrees to protect, defend, and indemnify the Department for any and all claims arising from or relating to the vendor’s determination that the redacted portions of its response are confidential, proprietary, trade secret, or otherwise not subject to disclosure. If vendor fails to submit a redacted copy of information it claims is confidential, the Department is authorized to produce the entire documents, data, or records submitted to the Department in answer to a public records request for these records.

XI. VENDOR COSTS

Vendors are responsible for all costs associated with the preparation, submission, and any potential meeting to discuss their response to the RFI. The Department will not be responsible for any vendor-related costs associated with responding to this request.

XII. PROCUREMENT OFFICER

If you have administrative questions concerning this RFI, please contact:

Pegah Bowman DMS Departmental Purchasing Email: dms.purchasing@dms.fl.gov

**ALL EMAILS SHALL CONTAIN THE RFI NUMBER IN THE SUBJECT LINE OF THE

EMAIL**

XIII. SPECIAL ACCOMMODATIONS

Any person with a disability requiring special accommodations to participate in the RFI shall contact the Department contact person at the phone number above at least five working days prior to the submission deadline for Questions and/or Responses. If you are hearing or speech impaired, please contact this office by using the Florida Relay Services which can be reached at 1 (800) 955-8771 (TDD). Certified Business Enterprises are encouraged to participate in the RFI process.

END OF RFI NO. DMS-23/24-046

mailto:dms.purchasing@dms.fl.gov