RFI_S-83900-00012033_Att C_Questions Template.xlsx
XLSX spreadsheet 161 KB Posted
- Attached to
- RFI Case Management System
- Solicitation number
- S-83900-00012033
- Issued by
- Multnomah County, Oregon
About this file
This document is a Request for Information (RFI) from the State of Oregon, Bureau of Labor and Industries (BOLI) regarding a Case Management System. The RFI requests information from vendors on technical, security, and pricing details for a cloud-based or on-premises solution that can integrate with BOLI's Azure Government Cloud and meet federal regulatory standards. The RFI asks about the vendor's company background, experience, and proposed implementation methodology. It also inquires about integration capabilities, disaster recovery, data migration, security features like single sign-on and multifactor authentication, and ongoing technical support and maintenance.
The pricing section requests estimates for initial setup and implementation, licensing/subscription fees, maintenance and support, customization, and other costs over a 5-year term. Vendors are asked to provide hourly rates for implementation services and indicate if there are any rebate structures or pricing differences between cloud, vendor-hosted, and client-hosted options. The RFI seeks to gather information to inform a future procurement for these services, so it asks vendors to identify any contract terms or conditions that would incentivize or discourage participation.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Cover Page
| State of Oregon (OR), Bureau of Labor and Industries (BOLI) | |
| Case Management System | |
| Request for Information (RFI) Attachment C - Questions | |
| Due Date: | 12/12/24 |
| Note: Please defer to the enclosed word document for instructions and information pertinent to this RFI. | |
| Tab | Description |
| Cover Page | |
| 1. Company Background | Information requested about the Respondent's organization. |
| 2. Technical | Information requested detailing technical aspects of the solution. |
| 3. Security | Information requested on security and controls. |
| 4. Regulatory | Information requested regarding compliance with Federal and State regulation. |
| 5. Miscellaneous | Additional questions regarding the proposed solution and implementation methodology. |
| 6. Pricing Questions | Information requested about proposed solution pricing. |
| 7. Pricing Estimate Template | Template for providing pricing estimate. |
1. Company Background
| ID | Category | BOLI Question | Vendor Response |
| 1 | Company Background | Company Name | |
| 2 | Company Background | Company Size (# of employees) | |
| 3 | Company Background | Public or Private | |
| 4 | Company Background | Year Company Founded | |
| 5 | Company Background | Office Locations | |
| 6 | Company Background | Relevant Experience | |
| 8 | Company Background | Current list of public sector clients | |
| 9 | Company Background | Who is the primary contact for questions regarding this submission? Please include name, title, and contact information. | |
| 10 | Company Background | What efforts does your company employ to promote diversity and inclusion? | |
| 11 | Company Background | When was your last successful implementation for a public sector agency case management system and who was it for? | |
| 12 | Company Background | Does your proposed solution include any subcontractors or teaming partners? If so, who? |
2. Technical
| ID | Category | BOLI Question | Vendor Response |
| 1 | Technical | Is the solution offered as a cloud-based solution? | |
| 2 | Technical | If cloud-based, on what cloud platforms can the solution be hosted? | |
| 3 | Technical | If cloud-based, does the solution operate and store all data within the Continental United States (CONUS)? | |
| 4 | Technical | If cloud-based, is the solution StateRAMP authorized? | |
| 5 | Technical | If the solution is not FedRAMP authorized, is the vendor willing to pursue FedRAMP or StateRAMP authorization? If so, how long does the vendor expect it will take to obtain authorization? | |
| 6 | Technical | Can the solution be hosted on BOLI's Azure Government Cloud and be hardened to Federal regulatory standards? | |
| 7 | Technical | Can the solution be hosted on-premises and be hardened to Federal regulatory standards? | |
| 8 | Technical | Does the product have Service Level Agreements (SLA)? Please submit any standard SLAs. | |
| 9 | Technical | What is the maximum number of concurrent users? | |
| 10 | Technical | Does the solution support an uptime of 99.9% (three nines)? | |
| 11 | Technical | What disaster recovery processes are built into the solution(s) or offered as part of the solution(s)? Have these protocols been tested? | |
| 12 | Technical | With what software does your solution have native integration capabilities? | |
| 13 | Technical | For software that does not have native integration capabilities, what type of APIs, data feeds, or other integration methods does your solution support? | |
| 14 | Technical | Does your solution have an out-of-the box document management solution? Please describe. | |
| 15 | Technical | What is the total number of solutions proposed in your solution? | |
| 16 | Technical | What integration services are required to integrate the solutions composing your solution? Does your company offer the required integration services? | |
| 17 | Technical | Does your solution offer configuration capability? Will your solution include configuration services? | |
| 18 | Technical | How do you securely configure your network infrastructure? | |
| 19 | Technical | How do you employ network segregation? | |
| 20 | Technical | What options do you offer for data migration? Including data clean-up, planning, extract/transfer/load, testing, etc. BOLI intends to migrate useful information from the legacy system into the new system. |
3. Security
| ID | Category | BOLI Question | Vendor Response |
| 1 | Security | Can the solution support users working remotely via SaaS, over BOLI's virtual private network (VPN), and within BOLI's internal network? | |
| 2 | Security | Each division needs to be able to manage the security of their own division/section’s data. How can the integrity of division data be preserved while allowing information to be shared and compiled across the Enterprise? | |
| 3 | Security | Can the solution work with Microsoft Entra ID (Azure Active Directory)? | |
| 4 | Security | What single sign-on (SSO) methods are compatible with the solution? | |
| 5 | Security | Does the solution support multi-factor authentication (MFA)? | |
| 6 | Security | If the solution supports MFA, does it support Microsoft Authenticator? | |
| 7 | Security | Does the solution support role based access and control? | |
| 9 | Security | Does the solution have the ability to identifiy, monitor, and track types/levels of access? | |
| 11 | Security | Is there a Security Alert & Advisories Process for the solution? | |
| 12 | Security | Has your organization ever experienced a significant cybersecurity incident? Please define and describe it. | |
| 13 | Security | When was last time you had a cybersecurity assessment performed by a third-party of the solution? What were the results of that? | |
| 14 | Security | Is the solution code routinely tested dynamically and statically? | |
| 15 | Is the solution routinely pen tested? Do pen tests include customer-involved instances? What were the results? | ||
| 16 | Security | Do you blacklist or whitelist communications to the solution? | |
| 17 | Security | If the solution is supported by the vendor, do you have automated tools that continuously monitor to ensure malicious software is not deployed? | |
| 18 | Security | How do you monitor privileged accounts? | |
| 26 | Security | How do you monitor your network to alert to cybersecurity events? | |
| 28 | Security | What partners or subcontractors are used in the solution, and how are they managed? | |
| 31 | Security | What security measures are in place for partners or subcontractors? |
4. Miscellaneous
| ID | Category | BOLI Question | Vendor Response |
| 1 | Miscellaneous | Does the vendor / solution provide data conversion assistance (tools, on-site assistance, etc.)? | |
| 2 | Miscellaneous | What are key differentiators that set the vendor's product apart from other leaders in the market? | |
| 3 | Miscellaneous | How long would it take to implement the solution? Please include a high-level timeline and key activities. | |
| 4 | Miscellaneous | What implementation methodology would the vendor suggest for the implementation of the new, end-to-end solution? | |
| 5 | Miscellaneous | What additional information would the vendor provide that may be useful for a future solicitation or for the program team to consider? | |
| 6 | What additional information could BOLI provide in a future solicitation that would be helpful to you in developing a response? | ||
| 7 | Miscellaneous | Please describe the plans to enhance / maintain the solution in the future? | |
| 8 | Miscellaneous | Does the vendor provide ongoing technical support or mentoring? | |
| 9 | Miscellaneous | What levels of help desk support does the vendor provide? What support is provided at each level? | |
| 10 | Are there any contract terms and conditions that would generally incentivize or encourage your company to bid on a future procurement for these services? | ||
| 11 | Are there any contract terms, conditions, and/or performance requirements that would generally disincentivize or prohibit your company from bidding on a future procurement for these services? | ||
| 12 | Is there anything that would encourage more interest, participation, and/or competition in a potential procurement for these services? |
5. Pricing Questions
| ID | Category | BOLI Question | Vendor Response |
| 1 | Pricing | Does the vendor include maintenance in their annual fee structure or is it separate? | |
| 2 | Pricing | If separate, how are the maintenance fees structured? | |
| 3 | Pricing | Please provide a typical hourly rate card for implementation service resources, if you offer this type of service (inclusive of any travel costs). | |
| 4 | Pricing | Does the vendor offer any rebate structures based on volume of licenses? | |
| 5 | Pricing | Is there a pricing difference between a cloud option, a vendor hosted option and client hosted option? | |
| 6 | Pricing | Is pricing based on modules or a core and optional services basis? Please provide a copy of your pricing structure, along with any tiering. |
6. Pricing Estimate Template
| Pricing Estimate Template | |||||||
| Year 1 | Year 2 | Year 3 | Year 4 | Year 5 | |||
| Estimate | |||||||
| Initial setup and implementation | |||||||
| Licensing and subscription (if applicable) | |||||||
| Maintenance and support fees | |||||||
| Customization costs, if required | |||||||
| Other (describe in assumptions) | |||||||
| Total Cost | $ - 0 | $ - 0 | $ - 0 | $ - 0 | $ - 0 | ||
| Assumptions | |||||||
| # | Assumption | ||||||
| 1 | |||||||
| 2 | |||||||
| 3 | |||||||
| 4 | |||||||
| 5 | |||||||
| 6 | |||||||
| 7 | |||||||
| 8 | |||||||
| 9 | |||||||
| 10 | |||||||
| 11 | |||||||
| 12 | |||||||
| 13 | |||||||
| 14 | |||||||
| 15 | |||||||
| 16 | |||||||
| 17 | |||||||
| 18 | |||||||
| 19 | |||||||
| 20 |
image1.png
File details come from the government source that posted it. Updated .