The file's text, extracted by GovTribe without its formatting.
Attachment C Technical Requirements
| Competitive Solicitation: |
| No. RFP26-012 |
| Bidder: |
| _________________________________ |
Type/print full legal name of bidder company
Instructions:
Bidders submitting a proposal must complete and submit Attachment C for evaluation purposes.
Technical Requirements: Bidder must respond to each requirement as noted in the instructions below.
Review Sections C1 to C3 and provide answers to the questions posed in sections C2 and C3.
Review Section C4 requirements and provide level of compliance with the requirement as follows:
Using the Bidder’s Compliance column, Bidder must respond either “Compliant” or “C” (2 points), “Partially Compliant” or “PC” (1 point) or “Non-compliant” or “NC” (0 points) to indicate the Bidder's ability to meet the requirement. In order to respond “Compliant” a Bidder must meet the requirement as written in its entirety and the associated functionality be available at the start of the contract.; “Partially Compliant” – a Bidder must provide a written explanation as to the exceptions to the requirement and any functionality that will not ready in the initial release, but will be provided in future releases (i.e., after contract start but before contract end) is permissible.
Section C1: Introduction The objective of this project is to establish a data exchange hub to connect and make interoperable the CAD systems of participating agencies. The project’s intent is that the CAD-to-CAD system enables participating agencies to increase operational efficiency, enhance regional situational awareness, and decrease response times.
This RFP seeks proposals from qualified firms to implement a fully functional vendor hosted CAD-to-CAD solution. The application should be flexible and scalable in design and architecture. The application should also pass information without logging the contents of the messages being exchanged; logging should be at the syslog level for troubleshooting and auditing only.
The awarded contractor will be responsible for the following project components including but not limited to:
1. Providing a system that meets the technical and functional specifications of this RFP.
2. Interfacing and implementing each of the participating entities’ CAD systems into the CAD-to-CAD system in a planned approach.
3. Complying with all requirements and proper protocol concerning the collection of CAD information as well as abiding by the Criminal Justice Information Services (CJIS), National Information Exchange Model (NIEM), and other applicable public safety information security and data requirements. Providing professional project management services including developing and executing a detailed project schedule, and the delivery of regularly scheduled status reports and identifying and managing project risks and issues.
4. Implementing a system utilizing standard information technology project phases to include:
a. System design
b. System installation and configuration
c. Integration and testing of the CAD interfaces
d. System acceptance testing to include performance and load testing for all PSAPs
e. End-user training
f. Go-live planning and migration
g. Post go-live system reliability and maintenance
h. Development and delivery of non-proprietary technical and operational documentation to be used for new user orientation and training
Section C2: Solution Architecture (50 points) A. Describe the proposed solution’s ability to automatically transfer associated incidents to appropriate agencies based on geography, agency, business process, and incident type. (5 points) Enter Response Below:
B. Describe the system administration tools that are used to manage the application including any data archival tools, tools for managing application updates, online help management tools, etc. (5 points)
C. Proposers shall provide network connectivity requirements including recommended bandwidth, latency, and throughput utilization to ensure optimal performance of the proposed solution. (5 points)
D. Provide the response times for the proposed solution in the column labeled “Solution Response Time”:
| Transaction Time |
| Solution Response Time |
Processing time of data from: CAD A to CAD B (one to one transfer)
Processing time of data from: CAD A to CAD Many (one to many transfer)
(5 points)
E. Does the proposed solution utilize open APIs? (5 points)
F. Does the proposer provide API’s or other tools to build and support interfaces using utilities? (5 points)
G. Please indicate vendor’s preferred methodology utilized for third party interfaces. I.e., REST, .NET etc. (5 points)
H. Describe how the proposer’s solution complies with NENA’s ANSI-Approved Emergency Incident Data Object (EIDO) Standard (NENA-STA-021.1a EIDO JSON_20220419) that defines a standardized, industry-neutral format for exchanging emergency incident information between disparate manufacturer’s systems located within one or more public safety agencies. If the solution is not currently compliant, describe the proposer’s roadmap and timeline to support this standard. (5 points)
I. Describe how the proposer’s solution complies with NENA’s ANSI-Approved Conveyance of Emergency Incident Data Objects (EIDO) between Next Generation (NG9-1-1) Systems and Applications NENA-STA-024.1a-2023 that defines how EIDOs are conveyed between agencies. If the solution is not currently compliant, describe the proposer’s roadmap and timeline to support this standard. (5 points)
J. Identify any existing CAD systems (Vendor, model) for which the Bidder has already developed interfaces using the Bidders API. (5 points)
Section C3: Supplemental CAD-to-CAD Optional Offerings (20 points) The SECO and PSAPs seek to implement a system with initial functionality, but desire to have supplemental functionality as funding and participants grow. This supplemental functionality closely parallels the EIDO subscription and notification process described in the APCO and NENA standards.
Please describe the CAD-to-CAD system’s ability to support the following situations including any costs associated with the solution:
A. View only access of real time CAD-to-CAD incidents either across the region or with specific agencies and or non-Public Safety Agencies. (5 points)
B. The ability for an agency to receive real-time alerts and/or notifications if it has a CAD system that does not have the ability to support an API interface. (5 points)
C. The ability for a non-Public Safety agency to receive real time alerts or notifications if it does not have a CAD system. (5 points)
D. If an agency is in the middle of changing CAD vendors or conducting a major CAD upgrade and do not wish to create a bi-directional interface until its CAD project is complete. What are its options for CAD-to-CAD during this interim period? (5 points)
Notes: Washington State Patrol, Ambulance users, Department of Natural Resources, Washington Department of Transportation, and other dispatching centers need clearly defined ideas about what gets seen, by whom, (e.g. Public Utility District seeing CJIS info). System could dynamically change the shared view based on the changing type/nature of the incident or the types of units responding.
Section C4: Detailed System Requirements (252 points) Compliant = 2 points, Partially Compliant = 1 point, Non-Compliant = 0 points
| Category |
| Req. ID |
| Description |
| Bidder's Compliance (C, PC, or NC) |
| Written Response |
(PC requires a written response) Bidder's Score
| Global Portal |
| GPR1 |
| Hub-Based Architecture: The CAD-to-CAD System shall be architected as a centralized intelligent hub that supports connections to two (2) or more independent CAD systems through standard interfaces and/or the Bidders API. Adding an additional CAD system should not require any modifications to other CAD system interfaces; rather, all information and resource sharing logic shall be configurable in the central hub. |
| Global Portal |
| GPR2 |
| Security and Permissions - General: The CAD-to-CAD System shall use a GUI application with encryption between the application and the server. The GUI application shall use two-factor authentication, or an equivalent, industry-recognized standard for secure access. |
| Global Portal |
| GPR3 |
| Permissions - Agency: The CAD-to-CAD System shall have permissions specific to one or more agencies. Agencies and agency permissions will be defined by a system administrator, with rights, settings, and business rules applicable to the individuals assigned to each agency. Filters for the regional view of information (live shared incidents, vehicles/units, and call details) can be set on the agency level. |
| Global Portal |
| GPR4 |
| Permissions - Group: The CAD-to-CAD System shall have permissions specific to one or more groups. Groups and group permissions will be defined by a system administrator, with rights, settings, and business rules applicable to the individuals assigned to each group. Individuals will be able to be assigned to one or more groups. Filters for the regional view of information (live shared incidents, vehicles/units, and call details) can be set on the group level. |
| Global Portal |
| GPR5 |
| Permissions (User/Individual): The CAD-to-CAD system will only allow GUI system access to authorized individuals, with all of the permissions, settings, and business rules described for each group and/or agency applied to the user. This should include the ability to enable specific permissions to each individual at the discretion of the agency or system administrator. |
| Global Portal |
| GPR6 |
| CAD-to-CAD System Transparency to the CAD Users: The bi-directional CAD-to-CAD functionality of the System shall be transparent to the CAD system users. Transferred (pending and active) incidents and requests for resources should appear natively in the recipient and requestor’s CAD system and console in the language and codes of that system. CAD system dispatchers shall not need an additional console or software to be able to interact with the CAD-to-CAD System. |
| Global Portal |
| GPR7 |
| CAD-to-CAD System Transparency to other CAD Systems: Each CAD system interface shall be able to connect to the CAD-to-CAD System without knowledge of or customization for any other CAD system with which it may share information or resources. All codes translation and unit mappings shall be handled by the CAD-to-CAD interoperability platform and be totally transparent to each connected CAD system. |
| Global Portal |
| GPR8 |
| Data Transfer: The CAD-to-CAD System shall subscribe to and consume incident and resource information updates as they occur, in real-time, through the interface to each connected CAD system. The information shall be normalized to a common code set through unit mapping and codes translation tables. At a minimum the CAD-to-CAD System shall be able to process the types of incident and resource data as described in BDS1 to BDS12 inclusive. If EIDO is supported these data elements should be mapped to the equivalent EIDO elements. |
| Global Portal |
| GPR9 |
| System Response Time: The CAD-to-CAD System shall deliver sub-second response time when sending transaction data between connected CAD systems. |
| Global Portal |
| GPR10 |
| System Updates: The CAD-to-CAD System shall publish incident and resource information updates, in real-time, as triggered through business rules, filters, and sharing logic to each connected CAD system. At a minimum, the CAD-to-CADBDS1 to BDS12 inclusive. |
| Global Portal |
| GPR11 |
| Sharing Alerts through CAD Messaging System: The CAD-to-CAD System shall provide the ability to generate alerts to specified users through SMS or email notification based upon any of the configurable parameters identified in BDS1 to BDS12. |
| Global Portal |
| GPR12 |
| Resource Status Codes: The CAD-to-CAD System should be able to support as a common standard reference code set, such as the APCO standards for Resource Status codes. |
| Global Portal |
| GPR13 |
| Call Nature Codes: The CAD-to-CAD System should be able to support as a common standard reference code set, such as the APCO standard for Incident Nature Codes. |
| Global Portal |
| GPR14 |
| Call Type Code: The CAD-to-CAD System should be able to support as a common standard reference code set, such as the APCO standard for Incident Type Codes. |
| Global Portal |
| GPR15 |
| Redact Confidential Data: The CAD-to-CAD System shall provide the ability to redact confidential or sensitive data when sharing information between authorized and non-authorized user disciplines. For example a Law Enforcement agency may share incident information with a Fire/EMS agency, but the Fire/EMS agency is not authorized to see National Crime Information Center (NCIC) or criminal history information that may be included in the incident narrative. A discipline-specific filter shall be available to redact this information when sharing sensitive or restricted incident data between agencies. |
| Global Portal |
| GPR16 |
| Map Viewing Capabilities: The CAD-to-CAD System’s GUI user application shall include a map view which displays map data configured by the CAD-to-CAD System. It should include at a minimum the following capabilities: |
Capability 1: System will plot incidents on the map view with abbreviated description of the incident.
Capability 2: System will plot resources on the map view with abbreviated description of the resource.
| Global Portal |
| GPR17 |
| Messages Retention: The CAD-to-CAD System shall retain all message transactions for a configurable length of time for diagnostic and analytical purposes. It shall also provide the ability to purge expired messages automatically according to a retention policy set by system administrator. |
| Global Portal |
| GPR18 |
| System Clock Synchronization: The CAD-to-CAD System shall detect differences in system clocks between connected CAD systems and block messages that are more than a few seconds out of synchronization as possible security threats and generate appropriate error messages. The CAD-to-CAD System clock shall be based on UTC and adjusted to the local offset time. |
| Global Portal |
| GPR19 |
| Transfer of Transactional Information: The CAD-to-CAD System shall have the ability to transfer transactional information at regular intervals to an external data warehouse, regional Intelligence (fusion) center, EOC, or DOT. |
| Global Portal |
| GPR20 |
| Send and Receive Third-Party Data: The CAD-to-CAD System shall have the ability to send and receive data with a third-party Move-Up system so that regional move-ups across connected CAD systems can be supported. |
| Incident Command (Functionality) |
| IC1 |
| The CAD-to-CAD System shall be capable of supporting the NIEM and APCO incident and resource sharing standards. |
| Incident Command |
| IC1a |
| Incident Command Functionality: The CAD-to-CAD System shall provide, through the GUI user application, basic Incident Command functionality for authorized users. At the minimum it shall provide the ability to: |
| Incident Command |
| IC1b |
| Functionality 1: View all relevant incident and resource information for shared incidents under commander's jurisdiction |
| Incident Command |
| IC1c |
| Functionality 2: View pending resource and capability requests associated with a shared incident that are not yet granted or denied by the requested agency (CAD). |
| Incident Command |
| IC1d |
| Functionality 3: View the location of resources in the map view |
| Incident Command |
| IC1e |
| Functionality 4: Share comments in real-time with dispatchers from other agencies (CADs) |
| Incident Command |
| IC1f |
| Functionality 5: Create GEO-fenced areas and monitor movement in and out by resources |
| Incident Command |
| IC1g |
| Functionality 6: Place markers and information on the shared map view for other users to see |
| Configuration Management |
| CM1 |
| Single Administrator Application: All setup, configuration, and management of the CAD-to-CAD System shall be controlled through a single GUI administrator application with a single secure login, providing a single point of administration. |
| Configuration Management |
| CM2a |
| Configuration of Business Rules, Filters, and Decision Logics: The CAD-to-CAD System shall be configurable through the GUI administrator application to create business rules, filters and decision logic that triggers information and resource sharing events. This configurability shall enable the automation of Automatic Aid and Mutual Aid agreements as well as define other applicable standard operating procedures regarding cross-jurisdictional information sharing events by non-programmers. |
| Configuration Management |
| CM2b |
| Combination of Filters/Business Rules: The CAD-to-CAD System shall provide, as part of the GUI administrator application, the ability to logically combine (AND or OR) two or more filter/business rules mechanisms to create a complex trigger to sharing information (e.g.., share incident information with a specific agency if the incident zone is in a specific location or area and nature code is X). |
| Configuration Management |
| CM3 |
| Configuration Changes: The CAD-to-CAD System shall support changes to information and resource sharing filters, and business rules by a non-programmer through the GUI administrator application while the CAD-to-CAD System is operational. The ability to disable or enable filters and business rules by date and time should be supported. |
| Configuration Management |
| CM4 |
| Resource Sharing Definition: The CAD-to-CAD System shall be capable, through the GUI administrator application, to define capabilities for resources from connected CAD systems to facilitate a resource sharing request by capability (i.e.; send K-9 or Bomb Squad). |
| Configuration Management |
| CM5 |
| Map Configuration: The CAD-to-CAD System GUI administrator application shall include the ability to load map files (layers) of different formats (State Plane, etc.) into the CAD-to-CAD System and configure the map data layers for use by the users of the CAD-to-CAD System. |
| Configuration Management |
| CM6 |
| Diagnostic Tools: The CAD-to-CAD System shall provide, as part of the GUI administrator application, a diagnostic tool to analyze system log files and message transactions to trace and rapidly diagnose unexpected or erroneous behavior. |
| Configuration Management |
| CM7 |
| System Upgrades with Near-Zero Downtime: The CAD-to-CAD System shall be able to support system upgrades (hardware or operating system software) with near-zero down time by providing redundant system components (application servers, database servers, etc.) so that an upgrade on the primary or replicated systems can be done independently and subsequently synchronized. |
| Configuration Management |
| CM8 |
| Single Update File: The CAD-to-CAD System updates shall be packaged into a single distribution file that can be installed or uninstalled with a “single click” operation and can be done while system is operational. System updates shall also include any corresponding client modifications. |
| Configuration Management |
| CM9 |
| Automatic Adjustment of Software Revision: When a user logs into separate test, training, or production environments, the revision level of the GUI administrator/user application shall automatically adjust to the software version level of the logged-into system environment. |
| Configuration Management |
| CM10 |
| Expansion without Taking System Down: The CAD-to-CAD System shall be expandable without taking system down by providing the ability to add additional redundant components (application servers, database servers, etc.) that can be installed, added, and synchronized for improved scalability. |
Basic Data Set (Minimum)
While use of the NENA EIDO is the desired mechanism to exchange data, the following generic elements are required. Bidder should map to the equivalent EIDO element/description if EIDO is supported.
| Basic Data Set |
| BDS1 |
| Data Type 1: Call Type (Fire, Police, EMS) |
| Basic Data Set |
| BDS2 |
| Data Type 2: Geographical location of incident (e.g., address, city, intersection, mile marker, zone, Lat./Lon. coordinates) |
| Basic Data Set |
| BDS3 |
| Data Type 3: Call Origin (Caller Name, Phone, Address, ANI, ALI) |
| Basic Data Set |
| BDS4 |
| Data Type 4: Call Nature (Heart Attack, House Fire, Accident with Injuries) |
| Basic Data Set |
| BDS5 |
| Data Type 5: Call Status and Disposition |
| Basic Data Set |
| BDS6 |
| Data Type 6: Location of Signed-on resources |
| Basic Data Set |
| BDS7 |
| Data Type 7: Status of Signed-on resource |
| Basic Data Set |
| BDS8 |
| Data Type 8: Resources assigned to an active incident |
| Basic Data Set |
| BDS9 |
| Data Type 9: Timestamps of status changes to incident and resources |
| Basic Data Set |
| BDS10 |
| Data Type 10: Priority of incident |
| Basic Data Set |
| BDS11 |
| Data Type 11: Incident comments and narrative |
| Basic Data Set |
| BDS12 |
| Data Type 12: Dispatcher information associated with incident |
Mapping Data Set (Minimum)
While use of the NENA EIDO is the desired mechanism to exchange data, the following generic elements are required. Bidder should map to the equivalent EIDO element/description if EIDO is supported.
| Mapping Data Set |
| MDS1 |
| Mapping Data: The CAD-to-CAD System shall provide a method for mapping and translating data elements between each connected CAD system. At a minimum, this functionality shall include: |
| Mapping Data Set |
| MDS1a |
| Data Type 1: Call Type (Fire, Police, EMS) |
| Mapping Data Set |
| MDS1b |
| Data Type 2: Call Nature (Heart Attack, House Fire, Accident with Injuries) |
| Mapping Data Set |
| MDS1c |
| Data Type 3: Call Disposition |
| Mapping Data Set |
| MDS1d |
| Data Type 4: Call Priority |
| Mapping Data Set |
| MDS1e |
| Data Type 5: Lat./Lon. Location of a Resource (North American Datum NAD83, or NAD27) |
| Mapping Data Set |
| MDS1f |
| Data Type 6: Resource Identifier |
| Mapping Data Set |
| MDS1g |
| Data Type 7: Resource Status |
| Mapping Data Set |
| MDS1h |
| Data Type 8: Resource Capabilities |
| Mapping Data Set |
| MDS1i |
| Data Type 9: City Name |
| Mapping Data Set |
| MDS1j |
| Data Type 10: Zone or Response Areas |
| Mapping Data Set |
| MDS1k |
| Data Type 11: Transport Destinations |
| Common Code Sets |
| CCS1 |
| Common Code Sets: The CAD-to-CAD System should have the ability to bulk load local codes tables from each connected CAD system. Subsequently, the local codes can be mapped to the common codes for both inbound and outbound translation. Code sets shall at a minimum include: |
| Common Code Sets |
| CCS1a |
| Data Type 1: Call Type (Fire, Police, EMS) |
| Common Code Sets |
| CCS1b |
| Data Type 2: Call Nature (Heart Attack, House Fire, Accident with Injuries) |
| Common Code Sets |
| CCS1c |
| Data Type 3: Call Disposition |
| Common Code Sets |
| CCS1d |
| Data Type 4: Call Priority |
| Common Code Sets |
| CCS1e |
| Data Type 5: Lat./Lon. Location of a Resource (North American Datum NAD83, or NAD27) |
| Common Code Sets |
| CCS1f |
| Data Type 6: Resource Identifier |
| Common Code Sets |
| CCS1g |
| Data Type 7: Resource Status |
| Common Code Sets |
| CCS1h |
| Data Type 8: Resource Capabilities |
| Common Code Sets |
| CCS1i |
| Data Type 9: City Name |
| Common Code Sets |
| CCS1j |
| Data Type 10: Zone or Response Areas |
| Common Code Sets |
| CCS1k |
| Data Type 11: Transport Destinations |
| Level 1: Notifications |
| N1 |
| The initial PSAP can create a message(s) for the intended PSAP to let them know of the request for service. |
| Level 2: Shared Incident |
| SI1 |
| Shared Incident Capabilities: The initial PSAP can create a message(s) for the incident and send it to the intended PSAP and subsequently see updates as the intended PSAP dispatches resources, adds notes, and updates the event. |
Based on agency/group/user permissions and filter settings, the CAD-to-CAD System GUI application shall be capable of showing the following real-time information:
1. Shared incident/calls (including assigned units, status, call comments/narrative based on opt-in by sharing agency)
2. Units (location based on AVL/GPS, availability, call assignment, status, pending requests)
3. Pending resource and capability requests associated with a shared incident that have not yet been granted or denied by the requested agency or CAD
4. Live map view, based on Esri map layers (or other commercially available mapping system) of all shared calls and units/vehicles; the map display must conform to the same filters and sharing limitations established in the agency/group/user settings
| Level 2: Shared Incident |
| SI2 |
| Sharing Information Based on Incident Location: The CAD-to-CAD System shall provide the ability to trigger sharing of information based on incident location or proximity (e.g., share information to another agency if the incident is within a specified distance of their common jurisdictional border or a specific building). |
| Level 2: Shared Incident |
| SI3 |
| Sharing Information Based on Call Code: The CAD-to-CAD System shall provide the ability to trigger sharing of information based on incident Call nature (e.g., share incident information with EMS agency if Call nature is of a type that the need for medical help is likely.) |
| Level 2: Shared Incident |
| SI4 |
| Sharing Information Based on Call Priority: The CAD-to-CAD System shall provide the ability to trigger sharing of information to agencies based on incident priority (e.g., share incident information with neighboring Law Enforcement agency if the incident priority is high.) |
| Level 2: Shared Incident |
| SI5 |
| Sharing Information Based on Response Area: The CAD-to-CAD System shall provide the ability to trigger sharing of information to agencies based on incident zone or response area (e.g., share incident information with Highway Patrol agency if the incident is on an interstate highway). |
| Level 2: Shared Incident |
| SI6 |
| Sharing Information Based on GIS Location: The CAD-to-CAD System shall provide the ability to trigger sharing of information to agencies based on incident GIS location residing within a configurable GEO-fence (e.g., share incident information with a named agency if the incident is located within GEO-fence surrounding specific critical infrastructure). |
| Level 2: Shared Incident |
| SI7 |
| Sharing Information Based on Special Words in Narrative: The CAD-to-CAD System shall provide the ability to trigger sharing of information to several agencies simultaneously based on a special embedded keyword in an incident comment (e.g., share incident information with multiple neighboring Law Enforcement agencies if the keyword "**MCI" (Mass Casualty Incident) is entered). |
| Level 3: Shared Resources |
| SR1 |
| Resource Sharing Capabilities: The initial PSAP can see the available resources for the intended PSAP and assign them to the incident, which will in turn generate a notification to the responders of a call for service. |
| Application Programming Interface |
| API1 |
| API: A detailed and robust Application Programming Interface (API) shall be available to enable CAD providers that you have yet to develop an interface for, to develop their interface to the CAD-to-CAD System. The API shall be provided for inspection upon request. Developer assistance, including a separate developer test environment, should also be available. |
| Application Programming Interface |
| API2 |
| Bi-directional Messaging: The CAD-to-CAD System API shall support bi-directional non-incident message exchange through the CAD system interface, allowing both sides of the interface to publish and subscribe to the messages being exchanged. Incident related messaging shall be supported through comments added to shared narrative. |
| Application Programming Interface |
| API3 |
| Publish-only or Subscribe-Only Interfaces: The CAD-to-CAD System API shall support communication through publish-only or subscribe-only interfaces that can be used for connectivity to other types of systems. (e.g., incident-related information should be subscribable by an agency Records Management Systems for report generation). |
| Application Programming Interface |
| API4 |
| NIEM Conformant Data Model: The API shall also include a NIEM conformant Data Model so that the CAD providers can exchange data using this industry standard exchange package. |
| Application Programming Interface |
| API5 |
| Heartbeat/Messaging Acknowledgement for Monitoring: The API shall support the implementation of both heartbeat as well as message acknowledgement mechanisms to continuously monitor the connections with all end-point systems. |
| Application Programming Interface |
| API6 |
| API Testing: The API for CAD system interfaces shall provide a method to unit test and regression test interfaces for conformance to system interoperability requirements. The method should test each functional area of the interface. |
| Application Programming Interface |
| API7 |
| Refresh after System Restart: The interface API shall support the ability for the interface to refresh the CAD-to-CAD System with all active incident and resource information in the event of an extended network outage or system restart has occurred. |
| Logging, Reporting and Maintenance |
| LRM1 |
| System Logs: The CAD-to-CAD System shall log all messages and actions taken into a secure system log that can be used for diagnostic as well as auditing purposes. The CAD-to-CAD System log shall not be modifiable by system administrator or any users. |
| Logging, Reporting and Maintenance |
| LRM2 |
| Audit Trial Functionality: The CAD-to-CAD System shall provide Audit Trail functionality to include: |
| Logging, Reporting and Maintenance |
| LRM2a |
| Functionality 1: Any system-wide configuration change |
| Logging, Reporting and Maintenance |
| LRM2b |
| Functionality 2: Any change that affects data exchange between connected CAD systems |
| Logging, Reporting and Maintenance |
| LRM2c |
| Functionality 3: Any changes to code mappings between system and a CAD system |
| Logging, Reporting and Maintenance |
| LRM2d |
| Functionality 4: Any changes to user accounts, passwords or password policies |
| Logging, Reporting and Maintenance |
| LRM2e |
| Functionality 5: Any changes to business rules, filters, and customizable scripts |
| Logging, Reporting and Maintenance |
| LRM2f |
| Functionality 6: The Audit trail shall include the following detail, at a minimum: |
| Logging, Reporting and Maintenance |
| LRM2g |
| Functionality 7: The user making the change |
| Logging, Reporting and Maintenance |
| LRM2h |
| Functionality 8: The changes that were made |
| Logging, Reporting and Maintenance |
| LRM2i |
| Functionality 9: Time and date of the change |
| Logging, Reporting and Maintenance |
| LRM2j |
| Functionality 10: The System ID of the CAD-to-CAD System making the change |
| Logging, Reporting and Maintenance |
| LRM3 |
| Analytical Reporting: The CAD-to-CAD System should have the ability to provide essential analytical reporting that includes, at a minimum, time-range reporting for all connected CAD system of total incidents, shared incidents, response times, number and type of shared resources. |
| Logging, Reporting and Maintenance |
| LRM4 |
| Configuration Monitoring: A real-time system health GUI dashboard shall be provided that monitors all essential system components - servers, CPU, memory, database, and message backlog. The CAD-to-CAD System shall be configurable to notify system administrators when configurable thresholds are exceeded. |
| Logging, Reporting and Maintenance |
| LRM5 |
| Record Error Detection and Notification to Connected CAD Systems: In the event any connected CAD system becomes unavailable as detected by the failure of regular heartbeat messages, The CAD-to-CAD System shall record a detailed error message in the CAD-to-CAD System log file, and notify all other connected CAD systems of its unavailability. |
| Logging, Reporting and Maintenance |
| LRM6 |
| Detailed Error Message Information: When sending informational or connectivity-related error messages, the CAD-to-CAD System shall include data elements and error numbers needed to ensure that the meaning is clear and unambiguous so that they may be properly displayed in each receiving CAD system. |
| Logging, Reporting and Maintenance |
| LRM7 |
| Error Message Recognition and Notification: The CAD-to-CAD System shall generate and record an error message in the system log and send an error message to the originating CAD system if it fails to recognize or translate any field in an incoming message. Simply discarding an unrecognized message is unacceptable. |
| Logging, Reporting and Maintenance |
| LRM8 |
| Alerts for No Response from any of the CAD Systems: The CAD-to-CAD System GUI administrator application and the GUI user application shall include both configurable flashing icons and audible alerts to notify users when any single system is not responding or is unreachable. Alerts shall also be generated in the form of text messages or emails. |
| Security |
| S1 |
| Compliance with CJIS Security Policies: The CAD-to-CAD System shall comply with the Criminal Justice Information System (CJIS) security policies and procedures. The CAD-to-CAD System shall maintain compliance with current CJIS Security Policies as they are updated. |
| Security |
| S2 |
| Secure Encryption for Data Transfer: With regards to the CAD system interface, the CAD-to-CAD system shall provide secure encryption capabilities (a minimum of AES-256) for all data transferred between the CAD-to-CAD system and any connected CAD system using standard HTTPS or a secure tunnel mechanism. |
| Security |
| S3 |
| Access Control: The CAD-to-CAD system shall provide role-based access that also accommodates local CAD authentication from each connected entity. Describe how you plan to accomplish this. |
| Security |
| S4 |
| MFA: Will your solution support Multi-Factor-Authentication? |
| Security |
| S5 |
| Data Security: Describe your plan for securing data at rest, data in transit, and data in use. |
| Security |
| S6 |
| Patch Management: Describe your pan for patch management for your solution. |
| Security |
| S7 |
| Monitoring: Describe your plan for monitoring the CAD-to-CAD environment. |
| Security |
| S8 |
| SIEM: Do you have a SIEM that will support your solution? |
| Security |
| S9 |
| Assessment: How many years has it been since your last external security assessment? |
| Security |
| S10 |
| Cyber Incident Recovery Plan: Do you have a Cyber Incident Response Plan for your organization? |
| Security |
| S11 |
| Business Continuity Plan: Do you have a Business Continuity Plan for your organization? |
| Reliability |
| R1 |
| Up-time Availability: The CAD-to-CAD System shall be capable of providing 99.999% (‘five nines”) up-time availability to all connected CAD systems provided similar availability is delivered by the network infrastructure and connected CAD systems. |
| Reliability |
| R2 |
| Fault Tolerant if One Connection is Failed: The CAD-to-CAD System shall be fault tolerant so that if there is CAD system connection failure, it will continue to operate with the remaining connected systems. The system shall also be capable of automatically recovering when connectivity is restored. |
| Reliability |
| R3 |
| System Failover: The CAD-to-CAD System shall be fault tolerant so that if any server node of the distributed database cluster goes offline, the system will failover to a replicated database and continue to operate without system disruption or any data loss. |
| Reliability |
| R4 |
| Fault Tolerant if Application Server Fails: The CAD-to-CAD System shall be fault tolerant so that if any single application server fails, The CAD-to-CAD System will continue to operate in a reduced capacity mode without system disruption or any loss of data. |
| Reliability |
| R5 |
| Disaster Recovery: The CAD-to-CAD System shall provide a Disaster Recovery plan for maintaining a "Hot Standby" replica of the entire system that can be brought online immediately in the event of a catastrophe that disables the primary operational environment. |
| Reliability |
| R6 |
| Site License includes Disaster Recovery: System pricing shall provide options for site licensing for inclusion of Disaster Recovery sites without requiring a separate System license. |
| Reliability |
| R7 |
| CAD System Failover: The CAD-to-CAD System shall have, as part of the GUI administrator application, the capability to temporarily provide basic incident creation and dispatching functionality for an agency in the event of a complete CAD system failure. This includes, at a minimum, the ability to create incidents, dispatch resources to incidents, add comments to an incident, share incidents and resources with other agencies (CADs) and update status and basic information on incidents and resources. |
Return this attachment to Procurement Coordinator at:
contracts.office@mil.wa.gov