Request for Proposal to ( 2016 /ح ك/ 3 ) No. Tender General Response for All Raised Questions Taking into consideration the requirements outlined in the RFP and this Q&A document, bidders need to respond based on their experience in projects of similar size and scope Q1 A1 Q2 A2 Q3 A3 Q4 Page 14: Is the Public Key Infrastructure (PKI) ready to integrate with, and in case the PKI is not ready at the time of the delivery of the proposed solution, is the integration considered as out of scope? Yes, it is ready. All information about the PKI will be forwarded to the winning bidder, please refer to section 2.2.4 for PKI integration requirements. Page 17: The system shall support the following features: availability, scalability, continuity of operations, usability, maintainability, reliability, etc Is it required to provide a Disaster recovery site which includes an identical environment to the production environment? A complete disaster recovery solution is required to be provided by the winning bidder including physical site at NITC, processes, business continuity plans, backup systems and other deliverables as per the requirements of the RFP. The disaster recovery solution should be hot via failover switching, one node for each role, manual given that it should not exceed more than one hour of down time. Page17: Could you please clarify and provide more details about the required auditing functionalities. The proposed system should contain an audit log that will capture all information / logs necessary to follow any user interactions with the system. Page 17, 21: What is the 'Stepping engine'? A4 Please refer to Section 2.2.3 (Business Process Management System / Stepping engine; Page 15) for the definition and scope of this module Q5 Page 18: In the architecture diagram: E-Fawateercom is treated as a GSB shared services. Is this correct? E-Fawateercom is usually a public service available directly on the Internet. Please refer to Annex 5.16 for information about efawateercom integration guidelines, efawateercom system shall not be considered A5 as a GBS shared service but the integration with the central bank payment gateway efawateercom is done through Secured Government Network. Q6 Page 18: In the architecture diagram: What is the scope of utilizing the PKI shared services for this project? A6 Please refer to Shared services / Public Key Infrastructure (PKI) on page 19. Q7 Page 18,22: In the architecture diagram in Page 18 & 22: What is the Workflow Enabler? Is it currently functioning? What is the scope of utilizing the Workflow Enabler for this project? A7 The Bidder responsibility is to develop the needed screens for the stakeholder that having an issue in their system automation (or have no systems / automations at all) in order to complete the process cycle. Page 1 of 5
Q8 A8 Q9 A9 Q10 A10 Q11 A11 Page19, 20: It is required to integrate with PKI for: Verifying the identity of Applicants Verifying the identity of internal users and stakeholders employees Verifying the date and time of submission What are the details of these integrations from a scenario/process point of view especially for identity verification. Can you please provide some examples and developer guides for the digital signing? All needed information will be provided to the winning bidder. Page 20: The e-service solution should provide the end user interface, it should contain different interfaces for different system users, examples: - MoH employees - Applicants/customers - Contact Center agents - Stakeholders employees (web interface) What are the Contact Center agents required functionalities on the web site? Please refer to Annex 5.6 for details about National e-government Contact Center Required Information Design and build required interfaces for the various shared e-government infrastructure components (like e-gaf building blocks, Central Bank payment Gateway, National e-government Portal, e-government Contact Center, Notification gateway, etc ), legacy systems environment existing in stakeholders involved in the process of rendering the e-services where needed. Could you specify the required changes in the legacy systems existing at stakeholders? Is the source code exist and documented, and are there any technical documents describe the design and the functionalities? Are those legacy systems under support There is no required changes in the legacy systems existing in stakeholders however it is the winning bidder s responsibility to build the required web services on both sides (MOH side and Stakeholders side) to enable the integration and data exchange between the new proposed solution and the legacy systems. Page 31: Evaluate the existing infrastructure within the MoH including MoH directorates and other stakeholders (Refer to annex (5.7). - Is the bidder expected to provide hardware required for integration (if applicable) at MoH directorates & at stakeholders. Please confirm if end-user devices, i.e. Desktops, laptops, and/or printers that might be required for end users at MoH, MoH directorate, and stakeholders is out of scope. The bidder is expected to provide all needed infrastructure components that is necessary for the proposed solution in MoH headquarters, Stakeholders datacenters and the DR site at NITC. The required end user devices are (Please refer to annex 1 of this Q&A document for full details): a. (20) PCs. b. (4) Laptops. c. (4) Laser printers. d. (5) Scanners. Page 2 of 5
Q12 A12 Q13 A13 Q14 A14 Q15 A15 Q16 A16 Q17 A17 Q18 Page 31: As per the information provide in Section 5.7: - Existing ERP environment is based on products that has reach their EOL http://www.oracle.com/us/products/servers-storage/storage/previous-products/index.html http://www.oracle.com/us/products/servers-storage/servers/previous-products/index.html a. Would MoH still accept upgrade to such System? b) The existing systems are running on RISC servers, is it a preferred technology for MoH? Would MoH accept solution based on x86? c) Would MoH consider virtualization for the production environment? d) Please provide the definition for the required by Disaster recovery? Shall the bidder propose a full disaster recovery to a secondary site? Or manually moving the backup tape would be considered as acceptable DR? e) Should the bidder provide a testing environment at MoH site? If yes please confirm that virtualization would be accepted. a) The upgrade of the oracle licenses is out of this project s scope. b) There is no preferred technology for MOH, it is acceptable if the solution is based on x86. c) Virtualization is accepted given that redundancy on hardware is guaranteed. d) For DR specifications please refer to the answer of Q2 e) Testing environment should be provided by the winning bidder, and virtualization is accepted Page 64: It is required to comply with 'WSRP 1.0 specifications'. This is an extremely old standard and no more supported by Portal vendors. Usually such integration is done via iframes. It s acceptable to comply with WSRP 2.0 or the latest version. Who is going to build the provider web services at the stakeholders side which is needed for the inter-entity workflow? Please refer to Q10 above. For non-governmental entities such as the Jordan Nurses and Midwives Council (JNMC): if changes, work and any development activities are required at the JNMC side, who will bear the cost of these activities? The winning bidder should list all costs associated with activities of integrating stakeholders systems to the proposed solution. Please refer to the answers of Q10 above. For connecting to JNMC aside from SGN: is standard HTTPS communication over public Internet sufficient or would there be a need for VPN (virtual private network). The winning bidder shall use the GSB to connect all stakeholders; SSL tunneling over the internet should be used for non-governmental entities. For stakeholders that do not have systems available for online integration or for those who will resist exposing their systems for online integration, would exposing verification screens as part of human task workflow be acceptable? The Bidder responsibility is to develop the needed screens for the stakeholder that having an issue in their system Automation (or have no systems / Automations at All) in order to complete the process cycle. Please confirm that integrations with egovernment Shared Services (The new GSB, Portal, PKI, etc.) will be based on the availability of these services during the lifetime of this project. Page 3 of 5
A18 Q19 A19 Q20 A20 Q21 A21 Q22 A22 Q23 All shared services are up and running. Are the Provider Web Services to be provided by MoE, MoHE, SSC, CSPD, already deployed and published on GSB? If not, is the winning bidder required to provide a wrapper for these services and then deploy it on GSB? Please refer to the answer of Q10 above. It is the winning bidder s responsibility to build all required web services from both sides (Stakeholders and MOH) to enable the integration and data exchange between the stakeholders systems and the new proposed solution. Please confirm that the Enterprise Architecture (e-transformation Strategy and Roadmap) scope is only bound to "Health Professions and Institutions License Directorate at MoH". It will not cover any other directorates and will not provide an overall strategy for MoH as a whole. Confirmed Please confirm that the BPR (Business Process Engineering) scope is only bound to"health Professions and Institutions License Directorate at MoH" and covering only the 2 eservices (General Pharmacy License & Registered Nurse Vocational License), policies & procedures, KPIs, organizational structure, etc. It will not cover any other directorates and will not provide an overall strategy for MoH as a whole. Confirmed Is it required to publish the 2 eservices on MoH portal/website or just in the egovernment Portal? What if the egovernment portal is not ready in time for this project? The e-services are to be published on MoH portal/website and integrated with the egovernment portal through WSRP standards. Can we conduct an initial site survey for the stakeholders? A23 There is no need for site surveys since all needed information is gven in Annex 5.7. Q24 Should the winning bidder also provide any required equipment and hardware for the stakeholder to enable the integration? Does this cover personal computing machines or just integration servers and network hardware? A24 Please refer to the answer of Q11 above. Note: The Winning Bidder must utilize existing hardware and already developed web services that serve the purpose of integration between stakeholders Q25 systems and MoH e-services Solution. How can we get official guarantees on re-using existing hardware available at MoH and stakeholders (if the models are still supported)? Can we get an official acceptance on the site survey / initial assessment report? A25 Not Clear. Q26 A26 Q27 How many free rack units can the MoH offer for the hardware? There are no free rack units at MoH datacenter. What is the possibility of installing new cabinet in the data center? A27 It is possible to install a new cabinet. Q28 Will it be acceptable to install the required services and application using virtual environment, or they should be installed on physical servers. This is because it affects the cabinet rack units that will be used for the solution A28 Virtualization is allowed, please refer to Q12, C. Page 4 of 5
Q29 A29 Q30 A30 Q31 A31 Q32 A32 Q33 A33 Q34 A34 Q35 A35 Q36 A36 Q37 A37 Is the Work Flow Enabler (WFE) solution ready to use. Please refer to the answer of Q7 For the proposed solution, could you advise and confirm the following: - Is Virtualization acceptable for testing environment? - Is Virtualization acceptable for production environment? - Is it the winning bidder responsibility to provide the testing environment? All questions answers is Yes, given that the redundancy on physical hardware servers is guaranteed (Business Continuity and zero downtime) Please confirm, it is the MOICT/MOH responsibility to allocate the training required resources (provision of training venue, site set-up, PCs, training material, standard office supplies, etc.) At the MOH there is training center equipped with PCs for 20 persons, all other needed resources should be provided by the winning bidder. Are there any requirements or preferred technology to implement the solution, programming language, database engine? No Is it possible to send a sample of the existing documentation for the reengineered business functions, services, process maps, information flows, data models, application systems, application integration Interfaces, infrastructure, network, hardware systems, and software products? Please refer to Annexes 5.3 and 5.4: High Level Workflow Diagram of the To-Be Services Delivery Processes and High Level Workflow Diagram of the To-Be Services Delivery Processes, and refer to annex 5.7 for infrastructure components Is the documentation of the enterprise architecture elements limited to the e-services within the scope of the proposal, or all of MoH? Please refer to the answer of Q20 above For the development of SOA integration standardization guidelines with other government agencies, will MoH provide any necessary information regarding the government agency systems? Not Clear All the hardware infrastructure required will be deployed on a single physical location or more locations? Please refer to the answer of Q10 Where it s required to deploy the new web services that will be developed for the shareholders? Is it required to provide the required hardware for these web services? Yes, it is required to provide the required hardware for these web services in stakeholders datacenters whenever they are needed. Page 5 of 5