S000000354 Questions and Answers Final.pdf

QUESTION

NUMBER

QUESTION SUBJECT QUESTION TEXT ANSWER TEXT

1 1.4 Solicitation Schedule Will the state consider adding four additional weeks to the

Proposal Due Date?

No.

2 1.5 General Question Will DFA allow follow-up questions, once answers to vendor questions have been returned?

No.

2.3 Prospective

Contractor Minimum

Qualifications

Will the state accept vendor references from jurisdictions that use US-based central issuance facilities for card issuance in compliance with requirement 2.3.B? - The

Prospective Contractor shall have successfully implemented the proposed Solution for a minimum of five (5) or more states with a minimum annual volume of five hundred thousand (500,000) cards printed per State, per year.

No.

Section 2.5.B System

Access

RFP Text: The system must provide a user-friendly administrative interface with automated workflows for common functions (referrals, applications, eligibilities, plans, performance-data collection, reports, etc.).

Did the DFA intend to include referrals, eligibilities, and plans in the list of "common functions for this solution, as these functions are part of AIRS?

No.

Please see Section 2.5.B of the revised RFP.

Section 2.5.B System

Access

RFP Text: The system must provide a user-friendly administrative interface with automated workflows for common functions (referrals, applications, eligibilities, plans, performance-data collection, reports, etc.).

Please confirm that the common functions listed in this requirement are part of AIRS and not required for this solution.

No.

Please see Section 2.5.B of the revised RFP.

6 2.5.D Browser

Could the state please clarify that the GUI interface must be tested against all browsers listed, and on all front end system operating systems that they are supported on to show browser and operating system independence?

Yes

7 2.5.D Browser

Could the state please confirm that though browsers do not typically have direct access to peripherals for security, no plug-ins or drivers, such as USB drivers, will be allowed.

Confirmed.

Section 2.5.G System

Access

RFP Text: The system must allow users with multiple roles/accounts to switch between roles/accounts to view/update/create data under the same login ID.

Please define account vs login ID.

Roles set in the vendor solution for the issuance of the card.

Section 2.5.H System

Access

RFP Text: The system must allow users to reset passwords by email.

Since the agency wants to manage its users and passwords through Active Directory, we assume the agency is handling this function; please confirm.

Agency will handle this through active directory.

10 2.5.H PW Reset Does the state have concerns around password resets purely through email with no other identity confirmation?

No

11 2.6.D Windows 11

Could the state please clarify the ask for browser and operating system independence, such as support for Safari, given only Windows 11 will be supported.

Remove Safari

Please see Section 2.5.E of revised RFP.

12 2.6 General Question Please confirm the DFA users will be authenticated against the DFA Active Directory.

Yes

S000000354 Driver's License & State ID Card Printing Solutions Questions

Sec 2.6.H Image

Workstation Application

(IWA) & 2.17.F Reporting and Analytical

Requirements

Requirement: The Contractor's application must be integrated with Microsoft Active Directory services for user authentication; and The Issuance Solution must provide a detailed report of all security violations or attempts to gain access to the system.

Because the RFP requires the Contractor's system to be integrated with Active Directory, it is assumed that DFA will be generating its own reports of security violations and attempts to gain system access. Please confirm.

Yes

Please see Sections 2.6.H and 2.17 of the revised RFP.

Section 2.6.I Image

Workstation Application

(IWA)

RFP Text: The Contractor's application must be capable of multi-factor authentications.

Must the proposed solution include the hardware necessary to enable multi-factor authentication on the workstations, or just the capability to do it in the future?

Multi Factor Authentication is not required.

Please see Section 2.6.I of the revised RFP.

15 2.7.A.3 Monitors Could the state please detail the use of the two monitors, around customer or agent facing and planned uses?

One monitor is for processing the card, second for the customer to read the oaths and sign that they agree to the oaths

16 2.7.A.4 UPS

Could the state please clarify the expected runtime of the

UPS in the event of power failure.

60 minutes.

Please see Section 2.7.A.4 of the revised RFP

17 2.7.A.8 Photo Backdrop Can we assume that the photo backdrop is not within that space?

Backdrop will be adjacent to the workstation not within the flat surface area.

Section 2.8.G Image

Capture Camera

Requirements

RFP Text: The image capture camera must be capable of capturing images of applicants between heights of twelve

(12) to ninety (90) inches.

Please confirm that it is acceptable for applicants with a standing height of under 30 inches to be seated in a chair.

if the customer is 30 inches and less, DFA will handle the seating

Please see Section 2.8.G of the revised RFP.

Section 2.11.A REAL ID

Requirements

RFP Text: The Contractor shall provide the State with a

Design Security Features Report to be submitted to the U.S.

Department of Homeland Security.

Question: Please confirm that this report is a requirement during the delivery phase of the contract.

Yes

2.12 Card Printing and

Card Designs

Will Arkansas consider AAMVA's recently recommended card technologies such as Polycarbonate substrate with laser engraved black and white primary photos for its credentials?

Yes

2.12 Card Printing and

Card Designs

The security advantages and cost/resource savings of central issuance vs over-the-counter issuance has driven states to transition to central issuance. Will Arkansas consider proposals offering this alternative central issuance solution?

No

2.12 Card Printing and

Card Designs

Please confirm if central issuance of any kind is required for

Arkansas' online renewals? If so, is the vendor's secure central issuance production facility required to be in the continental US and does this requirement apply to a disaster recovery facility as well?

No

2.12 Card Printing and

Card Designs Please provide the annual volume for online renewals. Arkansas does not process online renewals

2.12 Card Printing and

Card Designs

What is the cost-per-card price in the current contract for this solution?

This information is not relevant to responding to this

RFP.

25 2.12.F Offsite

Could the state please confirm if a workstation's inability to verify against active directory would be sufficient to prevent printing, or if nefarious use by a validated employee, outside of the office, must also be prevented?

Yes

Section 2.12.G Card

Printing and Card

Designs

RFP Text: The Contractor shall have an existing ANSI

NCITS 322 test report from an independent testing laboratory for the same type of printing system (printer plus laminator) being quoted to the State. A copy of the report must be submitted by the selected Contractor.

Please confirm that this report is to be provided by the selected contractor after award.

Yes

27 2.15 Card Stock

Could the state expand on how the blank stock cards are kept securely at each office and how it expects the stock's use is inventoried & audited within the stock control system?

Card stocks are kept in a secured location. All offices have inventory level and the inventory solution will re-order the stocks if the office locations is below the threshold.

28 2.17.C File Formats Does the state expect other specific formats will be required to be supported?

No

Section 2.24.A Data

Conversion Plan

RFP Text: The Contractor shall develop a proposed

Comprehensive Customer Image and Data Conversion Plan for processing existing State files to create the initial Facial

Recognition System database.

Please confirm this plan is due post award.

Yes

Section 2.24.B Data

Conversion Plan &

Section 2.27.B Data

Security Requirements

RFP Text: (Section 2.24) The Comprehensive Customer

Image and Data Conversion Plan must accommodate the transfer of approximately twenty-three (23) million records.

The photos will be in AAMVA standards, demographic information, and the rest of the fields from the front of the card; and

(Section 2.27) The Contractor shall not store any personally identifiable applicant information or driver's license information for any time longer than necessary to issue a card.

These two requirements seem to contradict each other. Can the State explain how a Contractor can comply with both of these requirements?

2.24 is for Facial recognition and 2.27 is for issuance of the card

31 2.29 Disaster Recovery Could the state estimate the maximum allowable time for the

DR site to come into operation?

4 hours

Please see Section 2.29.G of the revised RFP.

32 2.29 Disaster Recovery Does the state have any minimum geographic distances expected to separate a primary and DR site?

Will discuss this in discussion phase with the top vendor

Section 2.30.A Optional

State Hosting (Not

Scored)

RFP Text: Proposals for Optional State Hosting should include at minimum:

1. The number of required web servers and recommended minimum specifications

2. The number of required application servers and recommended minimum specifications

3. The number of required SQL database servers and recommended minimum specifications

4. Recommended load balancing (if any)

Please confirm that the State will be supplying the servers, software, and networking equipment that will be required for the State Hosting option?

State will only host the equipment and software provided by the vendor. State will not provide any servers, software, or networking equipment.

Section 2.30.A Optional

State Hosting (Not

Scored)

RFP Text: DFA is interested in the possibility of hosting the

Contractor's system on site in Little Rock, Arkansas at a

State Datacenter. Contractors may include as part of their proposal an optional scenario for a State Hosted Solution.

If the DFA is providing the servers, software, and networking hardware necessary for the on-site hosting option, will the

DFA also be managing the implementation as well?

See above

35 4.2.I.2 Services Contract

We assume that any clauses that are not marked as nonnegotiable can be negotiated prior to contract award.

Please Confirm.

4.2.I.2 - A Prospective Contractor's proposal may be rejected if a Prospective Contractor takes exception to any terms, conditions, or Requirements in this RFP.

Negotiations on any clauses may be discussed on a case-by-case basis.