OMES FORM CP011 (11/2024) AMENDMENT OF SOLICITATION | Page 1 of 4

Central Purchasing

AMENDMENT OF SOLICITATION

GENERAL INFORMATION

Date of issuance: 09/23/2026 Solicitation/Event #: EV00000978

Requisition # Amendment #: 1

Hour and date specified for receipt of offers is changed:

No Yes, to this date: and this time: CST

Pursuant to OAC 260:115-7-30(d), this document shall serve as official notice of amendment to the solicitation identified above. Such notice is being provided to all suppliers to which the original solicitation was sent.

Suppliers submitting bids or quotations shall acknowledge receipt of this solicitation amendment prior to the hour and date specified in the solicitation by doing one of the following:

1. Sign and return a copy of this amendment with the solicitation response being submitted.

2. If the supplier has already submitted a response, this acknowledgement must be signed and returned before the solicitation deadline. All amendment acknowledgements submitted separately shall have the solicitation number and bid opening date printed clearly in the subject line of the email.

Return to:

Contracting officer Benjamin Komolafe

Phone

Email Benjamin.Komolafe@omes.ok.gov

DESCRIPTION OF AMENDMENT

a. This is to incorporate the following:

On behalf of the State of Oklahoma, OMES gives notice of: Response to questions raised during the Q&A session.

Q1. Document:01_Bidder_Instructions_-_SW1100M (Section 7.7.5) Are we correct in stating that this event qualifies as an “IT Solicitation” and therefore, bidders are required to either submit an Authority to Operate (ATO) or confirm that an ATO has been requested?

A1. Yes, this solicitation is considered IT and you will need to complete the ATO process in the solicitation.

Those without all the required documentation will not be evaluated for possible awards.

Q2. (Section 7.7.6) This item indicates that vendors may submit a Standard Information Gathering (SIG) Per RFP- 7.7.6 Bidder may submit the Standardized Information Gathering (SIG), Consensus Assessment Initiative Questionnaire (CAIQ), FedRamp and/or State Ramp Certifications to the Government Service Portal and should not submit this documentation in their bid. workbook. Is this option something bidders can leverage in lieu of the ATO or is the SIG something required to apply for and pursue the ATO?

A2. No- SIG cannot be used in lieu of the required Authority to Operate (ATO). Bidders must still complete and submit the ATO application process. However, additional security certifications may be submitted as supplemental documentation in support of the ATO.

Upon completion of the questionnaire identified in the Bidder Instructions, the bidder will receive a confirmation ticket and/or email documenting completion of the questionnaire. Please attach the ATO or the confirmation email demonstrating completion of the required questionnaire to Bid Factor Exhibit 5, Sequence #12. Any additional security certification documentation should also be included with the submission at this location.

Q3. Document:02_Attachment_A_-_Purpose (Section 1.1) When does the State anticipate awarding this contract?

A3. After proper evaluation period is completed. Usually, 30-90 days after solicitation closes. (it can take longer for contract to be awarded)

OMES FORM CP011 (11/2024) AMENDMENT OF SOLICITATION | Page 2 of 4

Q4. Document: 08_Exhibit_3_-_References. We were unable to locate any instructions regarding how to process these surveys. Should vendors collect completed surveys form references and include them with our submissions or should references be instructed to send completed surveys directly to the State? If references are directly sending surveys to the State, what email address should they use?

A4. The required customer survey has been provided for completion. Upon receipt, the completed survey will be included with the solicitation response. Surveys should be attached to Bid Factor Exhibit 3, Sequence #16, as required.

Q5. Document:11_OMES_Form_CP076 (Section 5) A. Can bidders register with the Secretary of State after finalists have been announced but before a formal award is announced?

A5. You must be registered with the SOS before you can be awarded or finalized for this contract award

Q6. Or will there be a protest period between when the State makes their recommendation and the contract award becomes final during which the recommended bidder can register?

A6. No

Q7. Document: Attachment A Section: 3.2.1 The bid response must reflect for each requirement on Exhibit 1 whether the requirement is met by an out-of-the-box solution or whether it necessitates customization to the bidder’s proposed solution.

Question: Section 3.2.1 of Attachment A states that the bid response must identify for each requirement in Exhibit 1 whether it is met through an out-of-the-box solution or requires customization to the bidder's proposed solution.

However, Exhibit 1 contains numerous questions related to operational processes, service delivery capabilities, staffing, training, reporting, security practices, and organizational experience that do not appear to represent software or solution functionality requirements.

For requirements that are not solution-specific features or system capabilities, may bidders respond to the question as written without designating the response as either "out-of-the-box" or "customization required"?

A7. If it is not directly related to the system requirements then YES

Q8. Document: Attachment A Section: 3.2.2 The bid response shall show the ability of the bidder to meet or exceed the following mandatory specifications. Question: Attachment A, Section 3.2.2 states that our response must demonstrate how we meet or exceed the “following” mandatory specifications. However, no mandatory specifications are provided in the attachment. Please clarify which mandatory specifications we are required to address in our response.

A8. Please refer to Tech Response Sections 1-8 and provide best answers to complete Meet or exceed requirements. These answers will provide the content needed for this question since all 71 questions are mandatory in response.

All answers to questions are considered meet or exceed. Results will also be found from the customer surveys.

Q9. Document: Bidder Instructions Section: 7.3.4 Disclosure Question: Please confirm where in the portal we should provide our response to the disclosures required under Solicitation Cover Page, Section 7.3.4 - Disclosures.

A9. Please attach response to the disclosures Attach Bid Factor Exhibit 1 SEQUENCE # 2

Q 10. Document: Bidder Instructions Section: 7.7.5 For all IT solicitations, bidders are required to submit an Authority to Operate (ATO) or confirmation that an ATO has been requested using the steps below with their response.

Question: Section 7.7.5.6 of the Bidder Instructions specifies that, "A copy of the ATO or confirmation of

OMES FORM CP011 (11/2024) AMENDMENT OF SOLICITATION | Page 3 of 4 submission must be included in the bidder's response," however, the portal does not include a corresponding question to upload this attachment. Can the State clarify whether the ATO or confirmation of a submitted ATO Request Form is required with the our response?

A10. Upon completion of the questionnaire identified in the Bidder Instructions, the bidder will receive a confirmation ticket and/or email documenting completion of the questionnaire.

Please attach the ATO or the confirmation email demonstrating completion of the required questionnaire to Bid Factor Exhibit 5, Sequence #12. Any additional security certification documentation should also be included with the submission at this location.

Q 11. Document: Bidder Instructions Section: 7.7.5 For all IT solicitations, bidders are required to submit an Authority to Operate (ATO) or confirmation that an ATO has been requested using the steps below with their response.

Question: If the ATO or confirmation of a submitted ATO Request Form is required with our response, can the State clarify where bidders should include this with our response?

A11. Upon completion of the questionnaire identified in the Bidder Instructions, the bidder will receive a confirmation ticket and/or email documenting completion of the questionnaire.

Please attach the ATO or the confirmation email demonstrating completion of the required questionnaire to Bid Factor Exhibit 5, Sequence #12. Any additional security certification documentation should also be included with the submission at this location.

Q 12. Document: Exhibit 1 Section: Section 1, Item 12 - Provide your daily transaction visibility solution Question: Item 12 in Exhibit 1 asks bidders to, "Provide your daily transaction visibility solution," and then states, "Refer to dashboard requirements in Item 43." However, Item 43 in Exhibit 1 does not detail dashboard requirements and instead asks bidders to, "Describe web/call center security ensuring biographic/demographic capture meets State & Federal confidentiality standards."

Can the State clarify where the dashboard requirements are that Item 12 refers to?

A12. The daily transaction report is so agencies (such as Dept. of Health, Education, etc.) can see how many applicants have been fingerprinted, date time and Status (accepted or rejected).

Item 43 – refer to a biographic/demographic data capture in the dashboard. It needs to meet CJIS security confidential policy.

Q13. Document: Exhibit 1 Section: Section 2, Item 25 - Provide your quarterly reporting method for site location compliance aligned with B.5.1.

Question: Item 25 in Exhibit 1 asks bidders to, "Provide your quarterly reporting method for site location compliance aligned with B.5.1." Can the State please clarify which document and section B.5.1 refers to?

A13. Please disregard B.5.1 in reference to last RFP

Q14. Document: Exhibit 1 Section: Section 2, Item 26 - Service Level Agreements (SLAs) Question: Item 26 in Exhibit 1 asks bidders to provide an "Outage notification process to OSBI & the State" then specifies that this item is "(Consolidated with Items 38 & 55 below for platform availability & notifications.)" However, neither of these items are related to platform availability or notifications.

Item 38 asks bidders to, "Describe procedures when fraudulent/improper ID is suspected," and Item 55 asks bidders to, "Provide SOC 2 / PCI DSS / equivalent audit summaries."

Can the State please clarify which item(s) Item 26 is intended to consolidate with or cross-reference regarding platform availability and notification requirements?

A14 This “(Consolidated with Items 38 & 55 below for platform availability & notifications.)” should be removed from #26

OMES FORM CP011 (11/2024) AMENDMENT OF SOLICITATION | Page 4 of 4

Q15. Final Question: Document: Exhibit 2 Question: The RFP requests firm fixed pricing for individual solution components. Our pricing approach is based on a comprehensive price-per-fingerprint model that bundles all required services, software, support, maintenance, hardware, implementation, and training into a single transaction fee. To facilitate a solution pricing model consistent with our service delivery approach, would the State permit bidders to submit pricing on a firm fixed price-per-fingerprint basis, provided that all required solution components and services are included? If yes, can the State revise Exhibit 2: Price to be consistent with this approach?

A15. Please submit pricing using the provided pricing template. Any alternate format will need to be standardized to ensure consistency across all responses.

b. All other terms and conditions remain unchanged.

SIGNATURES

Supplier company name

Date

Authorized representative name

Authorized representative signature