State Universities Retirement System. Managed Security Service (MSS) Proposal

Transcription

1 State Universities Retirement System Managed Security Service (MSS) Prpsal

2 Table f Cntents 1.0 Instructins t Bidders Prject Backgrund Overview Business Drivers Scpe f Wrk, Specificatins and Requirements Vendr Prvided Infrmatin - Required Cmpany Prfile Identifying Infrmatin Histry and Descriptin Cmpany Visin and Directin Prduct Visin and Directin Legal Matters References Prpsed Slutin Overview and Prpsed Slutin Cmpnent Descriptin Services and Supprt Prfessinal Services Training Maintenance Warranty EVALUATION PROCESS CONTRACT REQUIREMENTS General Warranties APPENDICES Certificate f Cmpliance With Illinis Human Rights Act (see attached) Certificate f Cmpliance with Illinis Drug-Free Wrkplace Act (see attached) Certificate f Eligibility t Cntract (see attached)

3 1.0 Instructins t Bidders 1) Fr the purpses f this RFP, the term "supplier" will refer t the bidder selected as a result f this RFP prcess. 2) This RFP is an invitatin t yur cmpany t submit a prpsal in accrdance with the requirements cntained herein. The RFP is nt a cmmitment by State Universities Retirement System t enter int a cntract with any vendr that submits a cmpliant prpsal. Csts fr develping prpsals are entirely yur respnsibility and will nt, under any circumstances, be transferred t State Universities Retirement System r any ther affiliated rganizatin. State Universities Retirement System assumes n liability fr any csts incurred by yu in preparing, presenting, demnstrating the prpsal evaluatin r award, r any ther aspect f the prcess. 3) Befre submitting yur prpsal and price qutatin, yu shuld carefully examine the scpe f the wrk t be dne and the difficulties invlved in its prper executin. This is s that yu include in yur bid all csts yu deem prper and sufficient t cver all cntingencies essential t the installatin f the prpsed system, ntwithstanding that every item r cntingency is nt specifically mentined herein. 4) Yur price qutatin must be cmprehensive. It must include all csts incidental t the successful prcurement, installatin and peratin f the prpsed system. Yu shall determine frm careful examinatin, the methds, materials, labr and equipment needed t perfrm the wrk in full and yu must reflect the same in yur prpsal and price qutatin. Any csts nt stated in yur prpsal will be brne by yu, unless specifically agreed t by State Universities Retirement System. 5) If yu fail either t include in the quted price, r t deliver t State Universities Retirement System, any cmpnents r features that are necessary t make the system perfrm as prpsed in yur respnse t the RFP, yu will be required t install the same at yur wn expense. 6) Yu may nt make any public annuncements r news releases pertaining t yur cmpany's intent t enter int an agreement withut State Universities Retirement System's prir written permissin. 7) During the evaluatin f yur prpsal, State Universities Retirement System may request that yu submit supplemental infrmatin. Any supplemental infrmatin that yu prvide must be in writing and will becme part f yur prpsal. 8) Yu will be required t supprt the pst cutver pricing fr each piece f equipment identified in yur prpsal, whether installed initially r nt, fr a perid f ne year frm the date f acceptance f the system. 9) Unless therwise stipulated, yu shall prvide and pay fr all materials, labr, tls, equipment, transprtatin and ther facilities necessary t perfrm and cmplete the wrk. 10) Yu must include a cpy f yur standard terms and cnditins as part f the system prpsal fr infrmatinal purpses nly. These terms and cnditins will have n bearing n the final cntract. 11) All materials submitted by yu in respnse t this RFP shall becme State Universities Retirement System's prperty n receipt. Ntwithstanding the freging, yu may request the return f an unsuccessful prpsal by nting the request in writing at the time yu submit yur prpsal. If s requested, State Universities Retirement System will return an unsuccessful prpsal prmptly after State Universities Retirement System executes a final agreement fr the system. 12) Yu must respnd t this RFP in the same frmat as it is presented. Each item in this RFP must be addressed. T make it easier t cmpare and evaluate respnses, yu must use the 2

4 same utline structure, indicating yur respnse immediately fllwing each questin in the apprpriate sequence. 13) Each prpsal must include an executive summary and a cver letter signed by an authrized cmpany executive. An verall summatin f the prduct(s) prpsed shuld be included. 14) Please submit supprting dcumentatin as appendixes t yur prpsal. All respnses that refer t prcedures, dcumentatin and technical manuals submitted with the prpsal must identify the specific page and paragraph in the referenced dcument. Hwever, this apprach des nt relieve the vendr frm describing its methd f cmpliance in the bdy f the prpsal. 15) The inability t meet any specific requirement must be clearly indicated and any alternative methd thrughly explained. Even if yu are able t meet a requirement, but feel that an alternative methd will satisfy the needs f the system better, yu shuld respnd with the requested methd. Alternative methds and appraches shuld be included in a separate sectin at the end f the prpsal. 16) Yu are advised t read this RFP carefully. Any and all exceptins t an item in this specificatin MUST be duly nted and explained in the respnse. Failure t make exceptin f any item shall be cnsidered as bth the ability and the intentin t fully cmply with that item at the quted price. 17) Althugh State Universities Retirement System reserves the right t negtiate pricing, understand that the price included in yur respnse will be used when evaluating yur prpsal. 18) Prpsals must be received by r befre 4:30 p.m. (CST/CDT) by date listed belw in #26 Prject Schedule. Prpsals received after this time and date will nt be cnsidered. 19) Prpsals will remain firm and valid fr ninety (90) days after the due date indicated in #26 Prject Schedule, Ntificatin f award, r any extensin granted theref. 20) Prpsals must be delivered as fllws: Electrnic cpy t bcampbell@surs.rg 21) Oral r telephne mdificatins r crrectins t submitted prpsals will nt be cnsidered. 22) Questins abut this RFP can nly be directed, via , t: bcampbell@surs.rg 23) Any vendr that discvers an ambiguity, incnsistency, errr r missin n examining the RFP shall prmptly ntify State Universities Retirement System by submitting a written ntificatin t bcampbell@surs.rg. Any interpretatin f, r crrectin r change t the RFP will be made by written addendum t the RFP. Addenda will be psted n SURS website Questins must be received by the Last date fr inquiries date listed belw in #26-b Prject Schedule r they may nt be answered. Answers t questins frm ptential bidders, if cnsidered infrmative, will be prvided t all bidders via SURS website 24) Bidders are advised that the selectin prcess may require an ral presentatin and site visits t headquarter facilities, perating lcatins and/r branch ffices. 25) The award f this RFP will be based n technical quality, ability t meet the required installatin schedule, financial capability, wrk histry, references, qutatin cmpliance, 3

5 price, qutatin cmpleteness and ther criteria as determined by State Universities Retirement System. Yu will be ntified regarding the dispsitin f yur prpsal within 45 days f receipt and after State Universities Retirement System has reviewed all prpsals. a) State Universities Retirement System will request any clarificatins r questins abut incnsistencies r missins frm yur prpsal via , unless the prpsal is rejected as nt being in cmpliance. State Universities Retirement System reserves the right t: b) Revise r recall this RFP. c) Reject any r all bids, t negtiate separately with cmpeting cntractrs and t award a cntract in the best interest f State Universities Retirement System. d) Accept any prpsal, irrespective f price, and waive any infrmality in a prpsal. e) Accept any prtin, the entire prtin r n prtin f a prpsal. Each prtin shuld be exclusive, t be used with any ther part f any ther prpsal frm any ther vendr. This dcument shall in n way be cnstrued t cnvey a guarantee f wrk fr any vendr. f) Add anytime (priced n a unit cst basis) t yur prpsal, negtiate additinal items t be included in yur prpsal r delete items frm yur prpsal. g) Extend the system cutver date. h) Slicit additinal bids fr any peripheral applicatins addressed in this RFP. 26) The Prjected Schedule fr this RFP prcess is as fllws (times are 4:30pm CST/CDT): a) RFP Psted 08/14/12 b) Last date fr inquiries 8/30/12 c) Prpsals due 09/04/12 d) Ntificatin f award nt befre 09/07/12 27) Prpsal Frmat Prpsals shuld cntain the fllwing minimum infrmatin: a) Intrductin b) Executive Summary c) Vendr Infrmatin d) Prpsed Slutin e) Services and Supprt 4

6 2.0 Prject Backgrund 2.1 Overview External threats and ever changing regulatry standards such as HIPPA, ISO, PCI and thers, are requiring greater effrt t cntrl. SURS is lking t turn t a Managed Security Service t efficiently handle the rund-the-clck mnitring and management. Systems include Cisc ASA, Windws Servers, IBM iseries, SANS, and VMWare servers. SURS will award the cntract t the vender that can cst effectively and reliably deliver n the services as utlined belw in sectin 2.3 Scpe f Wrk, Specificatins and Requirements. 2.2 Business Drivers Key expectatins: Quality & Effectiveness - Ease f deplyment, quality and effectiveness f mnitring and alerting, and reprting and prblem reslutin. Service - Must be able t mnitr, analyze and respnd t security events arund the clck while preserving the cnfidentiality, availability and integrity f ur infrmatin. 2.3 Scpe f Wrk, Specificatins and Requirements Services/Supprt: Installatin Hardware & Sftware Netwrk Intrusin Preventin and Detectin (IDS/IPS) 24x7x365 mnitring Blcking f malicius Internet activity Signature tuning and maintenance Reprting Lg Mnitring Mnitring, crrelatin and incident respnse (crrelatin f up t 30 devices including Windws Servers and iseries, mnitr and incident respnse n up t 10 devices) Remediatin (up t 10 devices) Security and cmpliance reprting Firewall Management (high-availability pair) Device prvisining, deplyment, upgrades and patch management Tuning and cnfiguratin management/c-management Event mnitring and analysis 5

7 Maintenance, backup and recvery Backup and recvery Analysis and respnse t firewall security and health events Cmprehensive reprting Custmer Prtal 24/7/365 Service Cverage Warranty Cverage Supprt f any Hardware and Sftware 1 year pricing 3 year pricing 5 year pricing 6

8 3.0 Vendr Prvided Infrmatin - Required Sectins must be cmpleted by the vendr in rder fr yur RFP respnse t be cnsidered. The respnses may be included in this dcument r in a separate dcument as lng as the answers are prvided in the sequence shwn belw. 3.1 Cmpany Prfile Identifying Infrmatin Please prvide the fllwing: Cmpany name Address Telephne number Fax number Cntact name Cntact title Year cmpany funded Sales fr the prir 12 mnths Number f emplyees Number dedicated t custmer service Office lcatins Histry and Descriptin Please prvide a brief histry f yur cmpany and a descriptin f its current business fcus Cmpany Visin and Directin Please describe yur cmpany's strategy and hw it plans t achieve a market leadership psitin Prduct Visin and Directin Please describe yur prduct rad map and hw it reflects market trends and custmer needs. Explain hw frequently new prducts and upgrades are rlled ut. 7

9 3.1.5 Legal Matters Please list any active lawsuits r any ther litigatin pending against yur cmpany and include any settlements within the last 12 mnths. 3.2 References Prvide cntact infrmatin fr three references with installatins similar in size and scpe t that prpsed here. 8

10 4.0 Prpsed Slutin 4.1 Overview and Prpsed Slutin Please prvide an verall descriptin f the prpsed slutin that shws hw the cmpnents fit tgether. 4.2 Cmpnent Descriptin Please prvide a brief descriptin f the prpsed cmpnents. 9

11 5.0 Services and Supprt 5.1 Prfessinal Services Describe yur implementatin apprach, prject management tls and methdlgies fr the prpsed slutin. Are the staff members invlved in implementing the prpsed slutin emplyees f yur cmpany? If nt, prvide a prfile f the third-party partner, its financials and the number f emplyees. Describe yur market expertise in implementing VERTICAL MARKET slutin. 5.2 Training Describe the training that accmpanies the implementatin f the system. 5.3 Maintenance D yu have a supprt facility in the SPECIFY area? Describe facilities, staffing and s n. D yu have a 24/7 help desk? Where is it lcated? Is it staffed by yur wn emplyees r is it a third-party facility? Briefly discuss staffing numbers, backgrund f agents and s n. Discuss the maintenance prgrams available. D yu ffer n-site supprt? Highlight a prgram recmmended fr State Universities Retirement System. What are price differences between prgrams? D yu prvide maintenance/supprt n custmizatin implemented during the initial installatin? Des the maintenance prgram cver all future upgrades? Explain. Discuss yur service call escalatin plicy Level 1, Level 2 and s n. Histrically, what percentage f service/supprt calls can be reslved remtely? 5.4 Warranty Describe the warranty ffered with yur prpsed slutin. D the same supprt cmmitments apply during the warranty perid (that is, respnse time, and s n) as during the maintenance cntract perid? 10

12 6.0 EVALUATION PROCESS The evaluatin team will cnsist f State Universities Retirement System persnnel r ther individuals with the apprpriate expertise. The evaluatin team members will read and evaluate the prpsals and presentatins. The team will make a recmmendatin t the Executive Team f State Universities Retirement System. With the Executive Team s apprval, State Universities Retirement System will issue a Letter f Intent t the successful respndent. The negtiatin prcess, i.e. determinatin f final prject scpe, terms and cnditins and financial and legal issues, will begin immediately fllwing the issuance f the Letter f Intent. 11

13 7.0 CONTRACT REQUIREMENTS 7.1 General Csts fr Prpsal Preparatin; State Universities Retirement System is nt liable fr any csts incurred by a respndent in preparing r submitting a prpsal, r in preparing the cntract r fr any finder s fee, regardless f whether we accept a prpsal. Right t Submitted Material; All respnses, inquiries r crrespndence relating t r in reference t the RFP, and all ther reprts, charts, displays, schedules, exhibits and ther material submitted as part f a prpsal will becme the prperty f State Universities Retirement System when received. Cmpetitive Offer; Pursuant t State law, and under penalty f perjury, the signer f any prpsal submitted in respnse t the RFP thereby certifies that this prpsal has nt been arrived at cllusively r therwise in vilatin f either Federal r State antitrust laws. 7.2 Warranties State Universities Retirement System expects all equipment used in the prject will have nrmal manufacturers r cnstructin warranties apprpriate t the prject. They d nt expect the extensin f additinal warranties beynd thse indicated unless the individual prject dictates such extensin. All dcuments are subject t review by the Executive Team f State Universities Retirement System and their legal cunsel befre apprval f a recmmendatin. 12

14 8.0 APPENDICES The respndent can request any existing dcuments r infrmatin that will assist them in the preparatin f the respnse t this RFP. Please frward any request t: Cntact Name: Byrn Campbell bcampbell@surs.rg Any dcuments we prvide were accurate at the time they were prepared. State Universities Retirement System des nt warrant that all physical specificatins reflect all interim mdificatins. 8.1 Certificate f Cmpliance With Illinis Human Rights Act (see attached) 8.2 Certificate f Cmpliance with Illinis Drug-Free Wrkplace Act (see attached) 8.3 Certificate f Eligibility t Cntract (see attached) 13

15 Certificate f Cmpliance With Illinis Human Rights Act, [cntractr], hereby certify pursuant t P.A , the Illinis Human Rights Act, that (he, she, it) has adpted a written sexual harassment plicy that includes at a minimum the fllwing infrmatin: (i) the illegality f sexual harassment; (ii) the definitin f sexual harassment under Illinis law; (iii) a descriptin f sexual harassment, utilizing examples; (iv) internal cmplaint prcess including penalty; (v) the legal recurse, investigative and cmplaint prcess available thrugh the Illinis Department f Human Rights and the Illinis Human Rights Cmmissin; (vi) directins n hw t cntact the Department and Cmmissin; and (vii) prtectin against retaliatin as prvided by Sectin f the Illinis Human Rights Act. By: Its: Date: 14

16 [Cntractrs with 25 r Mre Emplyees] CERTIFICATE OF COMPLIANCE WITH ILLINOIS DRUG-FREE WORKPLACE ACT, [cntractr], having 25 r mre emplyees, des hereby certify pursuant t sectin 3 f the Illinis Drug-Free Wrkplace Act (Ill. Rev. Stat. ch. 127, par ) that [he, she, it] shall prvide a drug-free wrkplace fr all emplyees engaged in the perfrmance f wrk under the cntract by cmplying with the requirements f the Illinis Drug- Free Wrkplace Act and, further certifies, that [he, she, it] is nt ineligible fr award f this cntract by reasn f debarment fr a vilatin f the Illinis Drug-Free Wrkplace Act. Date Cntractr SUBSCRIBED AND SWORN TO befre me This day f, 20 NOTARY PUBLIC 15

17 CERTIFICATE OF ELIGIBILITY TO CONTRACT, [cntractr], pursuant t sectin 33E-11 f the Illinis Criminal Cde f 1961 as amended, hereby certifies that neither [he, she, it] nr any f [his, her, its] partners, fficers, r wners f [his, her, its] business has been cnvicted in the past five (5) years f the ffense f bid-rigging under sectin 33E-3 f the Illinis Criminal Cde f 1961 as amended; that neither [he, she, it] nr any f [his, her, its] partners, fficers r wners has ever been cnvicted f the ffense f bid-rtating under sectin 33E-4 f the Illinis Criminal Cde f 1961 as amended; and that neither [he, she, it] nr any f [his, her, its] partners, fficers r wners has ever been cnvicted f bribing r attempting t bribe an fficer r an emplyee f the State f Illinis, r has made an admissin f guilt f such cnduct which is a matter f recrd. Date Cntractr SUBSCRIBED AND SWORN TO befre me This day f, 20 NOTARY PUBLIC 16