Request for Information (RFI) - BeyondTrust Privileged Access Management (PAM)

Notice of Intent to Designate Single Source: This Request for Information (RFI) Notice of Intent to Designate Single Source is to determine if the specified commodity or service is available from multiple providers, or if an alternate commodity or service is available that would meet the County's needs. This is not a request for pricing or a purchase commitment. The following commodity or service is thought to be available from only a single source (or reasonable source) and is the only commodity/services that meets the County's needs: The Aviation Department seeks to utilize software network infrastructure with Privileged Access Management (PAM) software from BeyondTrust Corporation to secure administrative accounts and passwords for maintenance of, and access to the County's network and Server infrastructure. These types of accounts are highly sensitive and contain elevated rights capable of severe destruction to the County network if released. Under proper protocols, it remains in the County's best interest to minimize knowledge of the specific type of PAM in use thereby reducing the opportunity of exploitation with a supply chain attack. BeyondTrust Corporation as the manufacturer and direct seller provides a singular source to limit communication of sensitive detail on product design, and support during initial configuration on a need-to-know basis. Federal mandate M-22-09 establishes a government-wide Zero Trust architecture strategy requiring enhanced protection for privileged access and administrative credentials. Additionally, the Florida Local Government Cybersecurity Act (F.S. 282.318 and F.S. 282.3815) requires local governments to implement cybersecurity practices aligned with the National Institute of Standards and Technology (NIST) Cybersecurity Framework.. This RFI will remain posted until closing date and time. Prospective Vendors are requested to provide information regarding their ability to provide the commodity or service described or written explanation or other documentation contesting the proposed RFI designation. If you are capable of meeting or exceeding the County's requirements for the specified commodity or service, respond to this RFI through the electronic bidding system. Vendor should upload any supporting information in the electronic bidding system as part of its response to assist the County in determining if commodity or service is comparable, is available from multiple suppliers, and meets the County's needs. The Director of Purchasing shall have sole authority in deciding what is comparable. The Director of Purchasing shall consider such submittals and notify all submitting vendors (thru the electronic bidding system) of the decision whether to designate as a Sole Source/Brand, which decision shall not be subject to objection, protest, or appeal.