Third_Party_Questionnaire.xlsx

XLSX spreadsheet 1 MB Posted

Attached to
Advanced Traffic Management System Design Continuing Services State and local contract opportunity
Solicitation number
26-18SS
Issued by
Sarasota County, Siesta Key CDP, Florida

About this file

This is a Third Party Questionnaire form for the City of Sarasota, Florida's Advanced Traffic Management System (ATMS) Design Continuing Services procurement conducted under the Consultant's Competitive Negotiation Act (CCNA) pursuant to Florida Statute 287.055. The City seeks registered and qualified professional engineers to provide engineering services on an as-needed basis for the Regional ATMS serving Sarasota and Sarasota County, with potential coordination involving Sarasota County, Manatee County, the City of Bradenton, the Florida Department of Transportation, Breeze Transit, and the Sarasota-Manatee Metropolitan Planning Organization. Services include design and engineering support for the existing ATMS system, preliminary studies, working drawings, specifications, scale and detail drawings, cost estimates, consultation and analysis services, fiber optic communication infrastructure design, project conference attendance, and construction engineering and inspection services. Proposals are limited to 150 single-sided pages, must be submitted electronically in PDF format through the City's online solicitation system, and are due by March 24, 2026, at 2:30 p.m. The solicitation was posted on January 29, 2026. The resulting contract will have a default term of one year with two optional one-year renewal periods for a total potential duration of three years, with the City intending to make multiple awards to establish a qualified engineering firm pool.

Pricing will be evaluated as a component of the overall proposal using a proportional scoring formula, with specific dollar values or budget ranges for individual task orders not disclosed in solicitation materials. Construction costs are restricted to projects not exceeding $7,500,000 and planning and study activities capped at $500,000, adjusted annually by the Bureau of Labor Statistics Consumer Price Index beginning July 1, 2025. The procurement is federally funded through FEMA and requires compliance with federal requirements including Davis-Bacon prevailing wage provisions, equal employment opportunity standards, and other mandated federal contract provisions. Required qualifications include a minimum of five continuous years of experience providing signalization services, active Florida professional engineer registration, proof of drug-free workplace certification (preferred), and submission of four contractor references with a minimum of three confirmed references required. The evaluation criteria consist of four equally weighted categories (25 points each): Qualifications of Company, Personnel Qualifications, Relevant Project Experience and References, and Approach and Methodology. Professional liability insurance of no less than one million dollars is required, and the consultant must perform at least 51 percent of total contract work with its own organization, though this requirement may be waived by the Purchasing General Manager under special circumstances. Liquidated damages will be assessed for project delays ranging from $12 per day for projects under $5,000 to $1,000 plus incremental charges for projects exceeding $700,000.

View the file

Other files for this state and local contract opportunity

Other files attached to Advanced Traffic Management System Design Continuing Services, newest first.
File Type Posted
Advanced_Traffic_Management_System_Design_Continuing_Services_(Addendum_#1_Revision).pdf PDF
Advanced_Traffic_Management_System_Design_Continuing_Services_(Addendum_#1_Revision).pdf PDF
Advanced_Traffic_Management_System_Design_Continuing_Services_(Addendum_#1_Revision).pdf PDF
Advanced_Traffic_Management_System_Design_Continuing_Services.pdf PDF
Third_Party_Questionnaire.xlsx XLSX spreadsheet
Third_Party_Questionnaire.xlsx XLSX spreadsheet
Attachment_4_FHWA-1273_-_Required_Contract_Provisions.pdf PDF
Attachment_4_FHWA-1273_-_Required_Contract_Provisions.pdf PDF
Attachment_4_FHWA-1273_-_Required_Contract_Provisions.pdf PDF
Attachment_4_FHWA-1273_-_Required_Contract_Provisions.pdf PDF
Appendix_A_Certification_Regarding_Lobbying.pdf PDF
Attachment_2_50A-_FEDERAL_GENERAL_TERMS_AND_CONDITIONS_.PDF PDF
Exhibit_B_Proposal_Requirements.pdf PDF
Exhibit_D_Titles_and_Position.pdf PDF
Exhibit_C_Scoring_Criteria.pdf PDF
Attachment_2_50A-_FEDERAL_GENERAL_TERMS_AND_CONDITIONS_.PDF PDF
Exhibit_A_Scope_of_Services.pdf PDF
Exhibit_B_Proposal_Requirements.pdf PDF
Exhibit_C_Scoring_Criteria.pdf PDF
Attachment_2_50A-_FEDERAL_GENERAL_TERMS_AND_CONDITIONS_.PDF PDF
Attachment_3_Supplemental_Instructions-Contract_Clauses_for_Federal_Awards.PDF PDF
Exhibit_B_Proposal_Requirements.pdf PDF
Appendix_C_CERTIFICATION_REGARDING_DEBARMENT.pdf PDF
Attachment_1_Forms_Packet.pdf PDF
Attachment_2_50A-_FEDERAL_GENERAL_TERMS_AND_CONDITIONS_.PDF PDF
Appendix_C_CERTIFICATION_REGARDING_DEBARMENT.pdf PDF
Attachment_3_Supplemental_Instructions-Contract_Clauses_for_Federal_Awards.PDF PDF
Exhibit_A_Scope_of_Services.pdf PDF
Appendix_A_Certification_Regarding_Lobbying.pdf PDF
Attachment_2_50A-_FEDERAL_GENERAL_TERMS_AND_CONDITIONS_.PDF PDF
Exhibit_B_Proposal_Requirements.pdf PDF
Exhibit_D_Titles_and_Position.pdf PDF
Appendix_C_CERTIFICATION_REGARDING_DEBARMENT.pdf PDF
Attachment_1_Forms_Packet.pdf PDF
Exhibit_D_Titles_and_Position.pdf PDF
Appendix_B_Foreign_Country_of_Concern_Attestation.pdf PDF
Attachment_3_Supplemental_Instructions-Contract_Clauses_for_Federal_Awards.PDF PDF
Exhibit_A_Scope_of_Services.pdf PDF
Appendix_B_Foreign_Country_of_Concern_Attestation.pdf PDF
Exhibit_C_Scoring_Criteria.pdf PDF
RFPCCNA_General_Terms_and_Conditions.pdf PDF
Appendix_C_CERTIFICATION_REGARDING_DEBARMENT.pdf PDF
Attachment_1_Forms_Packet.pdf PDF
Exhibit_A_Scope_of_Services.pdf PDF
Appendix_A_Certification_Regarding_Lobbying.pdf PDF
Appendix_B_Foreign_Country_of_Concern_Attestation.pdf PDF
RFPCCNA_General_Terms_and_Conditions.pdf PDF
Appendix_B_Foreign_Country_of_Concern_Attestation.pdf PDF
Appendix_C_CERTIFICATION_REGARDING_DEBARMENT.pdf PDF
Exhibit_A_Scope_of_Services.pdf PDF
Show all 50

Advanced Traffic Management System Design Continuing Services has more files on GovTribe.

On GovTribe

Work with this file on GovTribe

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Questionnaire

City of Sarasota – Vendor Software Security Questionnaire (Version 1.0)
The City of Sarasota requires all IT vendors to complete this questionnaire to ensure compliance with cybersecurity, privacy, and public sector standards.
This includes alignment with CJIS, HIPAA, PCI DSS, and the Florida Sunshine Law.
Please complete all questions and attach supporting documentation where requested.
Use dropdowns for consistency. If a question is not applicable, explain why.
For document requests, attach files directly or provide secure links in the comments.
ERROR:#VALUE!
Vendor Name
Vendor Contact
Vendor Email
Vendor Phone
Project Name
Hosting Type
Date Completed
#QuestionRisk LevelResponseCommentsDocument AttachedRisk ScoreAuto-Fail Reason
1. Authentication & Access Control
1.1Does your software integrate with a clients' Entra IdP for SSOHighYes0
1.2Does the solution integrate with Active Directory (on-prem or Azure AD)?Medium0
1.4Does the solution enforce least privilege and role-based access control (RBAC)?High0
1.5Are default passwords changed during installation and are complex or long (15+ characters) passwords enforced?High0
2. Data Protection & Encryption
2.1What encryption protocols are used to protect data in transit and at rest?High0
2.2Is encryption at rest implemented using AES-256 or better?High0
2.3Is TLS 1.2 or higher used for data in transit?High0
2.4Are encryption keys securely managed (e.g., HSM, KMS)?High0
3. Security Testing & Vulnerability Management
3.1Can you provide documentation of recent security testing or vulnerability assessments?High0
3.2Do you conduct regular vulnerability scans and penetration tests?High0
3.3Do you have a documented patch management process?Medium0
4. Incident Response & Breach Notification
4.1Do you have a documented incident response and disaster recovery plan?High0
4.2Will you notify the City of Sarasota within 72 hours of a confirmed data breach?High0
4.3Are forensic investigations conducted as part of incident response?Medium0
5. Compliance & Certifications
5.1What certifications or compliance standards has your software achieved (e.g., ISO, HIPAA, PCI DSS, CJIS)?High0
5.2Do you maintain cyber liability and professional liability insurance?Medium0
5.3Is your solution compliant with Florida Sunshine Law requirements for public records?High0
6. Privacy & Data Handling
6.1How do you manage and store user data, and what privacy protections are in place?Medium0
6.2Is any data stored or processed outside the continental United States?High0
6.3Do you have a data retention and secure deletion policy?Medium0
7. Logging & Monitoring
7.1Are security logs retained, protected from tampering, and reviewed regularly?Medium0
7.2Do you monitor privileged user activity for anomalies?High0
8. Business Continuity & Backup
8.1Do you have a tested disaster recovery and business continuity plan?High0
8.2Are backups encrypted and stored in geographically redundant locations?Medium0
8.3What is you backup policy, RTO and RPO?High0
8.4Can the client data be exported if the client discontinues using your service?High0
9. Third-Party Risk
9.1Do you assess the security posture of your subcontractors or third-party service providers?High0
10. Endpoint & Application Security
10.1Are any antivirus exceptions required for your software?Medium0
10.2What types of information does your application store (e.g., PII, PHI, CJIS)?High0
Total Risk Score0
Low Risk

Instructions 📋 City of Sarasota – Vendor Software Security Questionnaire Instructions

Purpose
This questionnaire is used to evaluate the security posture of vendors providing software or cloud-based services to the City of Sarasota. It ensures compliance with cybersecurity, privacy, and public sector standards.
Instructions
If you answer anything other than "Yes" on 1.1, the application Auto Fails
Complete all questions in the Questionnaire tab.
Use dropdowns for consistency.
If a question is not applicable, select “N/A” and provide an explanation in the Vendor Comments column.
If you answer “No” or “Partial”, you must explain why in the Vendor Comments column.
Attach supporting documentation where requested. You may:
Embed documents directly in the Vendor Comments cell, or
Provide a secure link to the document.
Use the Document Attached column to indicate whether documentation is included.
Florida Public Sector Compliance
Vendors must comply with the following:
CJIS Security Policy if Criminal Justice Information (CJI) is processed or stored.
HIPAA if Protected Health Information (PHI) is involved.
PCI DSS if payment card data is processed.
Florida Sunshine Law: Vendors must be aware that all records related to City business may be subject to public disclosure.
Data Residency: All data must be stored within the continental United States unless explicitly approved by the City.
Scoring
Each question is assigned a risk level (Low, Medium, High).
Responses are scored as follows:
Yes = 0 points
Partial = 1 point
No = 2 points
N/A = 0 points
The score is multiplied by the risk level weight:
Low = 1
Medium = 2
High = 3
A Total Risk Score is calculated at the bottom of the questionnaire.
Risk Categories
Score Range Risk Level
0–20 Low Risk
21–40 Medium Risk
41+ High Risk

Lists

Response OptionsRisk LevelsHosting TypesDocuments
YesLowOn-premAttached
No (Please Explain)MediumSaaSNot Attached (Please Explain)
N/A (Please Explain)HighIaaSNot Applicable
Partial (Please Explain)PaaS

File details come from the government source that posted it. Updated .