ITEMS IN GREEN=AGENCY COMPLETE
ITEMS IN YELLOW=OPS WILL COMPLETE
proposal SUBMISSION CHECKLIST
The vendor MUST include the following with the proposal submission.
If the items highlighted below are not submitted with the proposal submission,
the Commonwealth MUST deem the proposal non-responsive and
SHALL NOT consider for award.
All other items MUST be submitted prior to award.
ð FACE OF SOLICITATION - SIGNED [see Section 60.4]
ð *PROPOSED TECHNICAL SOLUTION UNDER SEALED COVER AND BY CLOSING DATE AND TIME [see Sections 60.5 – 60.7]
ð *PROPOSED COST SOLUTION UNDER SEALED COVER AND BY CLOSING DATE AND TIME [see Section 60.8 Attachment B]
ð TRANSMITTAL LETTER [see Section 60.6(A)]
ð REVENUE FORM 10A100 KENTUCKY TAX REGISTRATION APPLICATION (see Section 60.6 (C)]
ð CERTIFICATE OF AUTHORITY- REGISTRATION WITH SECRETARY OF STATE BY A FOREIGN ENTITY [see Section 60.6 (D)]
ð REQUIRED AFFIDAVIT(S) [see Attachment C]
ð EEO FORMS IF APPLICABLE [see Section 40.21]
*The Commonwealth defines SEALED as “a closure that must be broken to be opened and that thus reveals tampering”. (Merriam-Webster Dictionary, http://www.merriam-webster.com/dictionary/seal)
*Please see Attachment E - The Protection of Personal Information Security and Breach Investigation Procedures and Practice Act (KRS 61.931), et seq.
effective January 1, 2015.
ATTACHMENT A
Commonwealth of Kentucky
Request for Proposal (RFP)
For
INFORMATION TECHNOLOGY TRAINING
RFP 758 1500000003
Release Date: XXXX
CLOSING DATE AND TIME: XXXX at 3:30pm EST
(See Section 10.9 of this RFP for the Estimated Schedule of RFP Activities)
Issued by
The Finance and Administration Cabinet
On Behalf Of
Commonwealth Office of Technology (COT)
Commonwealth Buyer:
OPS Buyer
Buyer Title
COMMONWEALTH OF KENTUCKY
FINANCE AND ADMINISTRATION CABINET
Office of Procurement Services
New Capitol Annex
702 CAPITOL AVE RM 096
FRANKFORT KY 40601
(502) 564- xxxx
Fax: (502) 564-6013
TABLE OF CONTENTS
Proposal Submission Checklist
Section 10 – Introduction and Overview
Section 20 – Background and Present System Summary
Section 30 – Commonwealth Office of Technology Requirements
Section 40 – Procurement Requirements
Section 50 – Scope of Work
Section 60 – Proposal Submission
Section 70 – Proposal Evaluation
Section 80 – Negotiations
Section 90 – Attachments
SECTION 10 – Introduction and Overview
10.1 Purpose
The purpose of this Request for Proposal (RFP) is to solicit proposals for competitive negotiations pursuant to 200 KAR 5:307. Description of what the Agency is looking for.
10.2 Issuing Office
The Commonwealth of Kentucky, Finance and Administration Cabinet, Office of Procurement Services, is issuing this RFP on behalf of the Agency. The Finance and Administration Cabinet is the only office authorized to change, modify, amend, alter, or clarify the specifications, terms and conditions of this RFP.
A contract, based on this RFP, may or may not be awarded. Any contract award from this RFP is invalid until properly approved and executed by the Finance and Administration Cabinet.
10.3 Access to Solicitation, RFP, and Addenda
The Commonwealth wants each prospective vendor to have full and complete information on which to base a proposal response. Only information presented or referred to in this RFP and any additional written information that is supplied by the Commonwealth Buyer shall be used by vendors in preparing the response.
The solicitation, addenda, and attachments shall be posted to the Kentucky Vendor Self Service site at https://emars.ky.gov/webapp/vssonline/AltSelfService
It is not necessary to register to access the solicitation. Unregistered vendors can access solicitations by clicking on public access.
In the event of any conflict or variation between the solicitation or modification as issued by the Commonwealth and the vendor’s response, the version as issued shall prevail.
10.4 RFP Terminology
For the purpose of this RFP, the following terms may be used interchangeably:
o Proposer, Offeror, Contractor, Provider, or Vendor
o Commonwealth Buyer, Buyer, Purchaser, or Contract Officer
o RFP, Solicitation, or Procurement
o Bid, Proposal, or Offer
o Commonwealth of Kentucky, Commonwealth, or State, Agency, AGENCY
o Fiscal Year will be defined as the Commonwealth fiscal year: July 1 through June 30
o Biennium will be defined as the Commonwealth biennium: July 1 of each even numbered year through June 30 of the next even numbered year
o Requirements that include the words “Shall”, “Will”, “Must” indicate a mandatory requirement
10.5 Restrictions on Communications
The Commonwealth Buyer named on the Cover Sheet of this RFP shall be the sole point of contact throughout the procurement process. All communications, oral and written (regular, express, or electronic mail, or fax), concerning this procurement shall be addressed to the Buyer.
For violation of this provision, the Commonwealth shall reserve the right to disqualify the vendors’ proposal response.
10.6 Written Questions Regarding this RFP
Vendors are encouraged to submit written questions pursuant to Section 10.9 of this RFP. Written questions shall be submitted to the Commonwealth Buyer via email at or via fax at 502-564-6013. Vendors should submit questions on Attachment F-Vendors Question Form. No questions shall be accepted after the date(s) listed in Section 10.9 unless the question(s) is considered material to the procurement. The Commonwealth shall respond to salient questions in writing by issuing an addendum to the solicitation. The addendum shall be posted to the Kentucky Vendor Self Service site.
10.7 Notification of Award of Contract
The procurement process will provide for the evaluation of proposals and selection of the successful proposal in accordance with State law and regulations. KRS Chapter 45A of the Kentucky Model Procurement Code provides the regulatory framework for the procurement of services by State agencies.
All applicable statutes, regulations, policies and requirements shall become a part of an award as well as the Information Technology requirements.
To view the award of contract(s) and the contractor(s) receiving the award(s) for this solicitation, access the Kentucky Vendor Self Service site at https://emars.ky.gov/webapp/vssonline/AltSelfService.
Vendors can search for the solicitation title or number in the keyword search field, or can filter their search for only awarded solicitations by clicking on Advanced Search and changing the status to “Awarded”. The award(s) information can be accessed by clicking on the details button of the solicitation and clicking the “Notice of Award” tab. It is the vendor’s responsibility to review this information in a timely fashion. No other notification of the results of an award of contract will be provided.
10.8 Protest
Pursuant to KRS 45A.285, the Secretary of the Finance and Administration Cabinet, or his designee, shall have authority to determine protests and other controversies of actual or prospective offerors in connection with the solicitations or selection for award of a contract.
Any actual or prospective offeror or contractor, who is aggrieved in connection with solicitation or selection for award of a contract, may a file protest with the Secretary of the Finance and Administration Cabinet. A protest or notice of other controversy must be filed promptly and in any event within two (2) calendar weeks after such aggrieved person knows or should have known of the facts giving rise thereto. All protests or notices of other controversies must be in writing and shall be addressed and mailed to:
William M. Landrum III, Secretary
COMMONWEALTH OF KENTUCKY
FINANCE AND ADMINISTRATION CABINET
New Capitol Annex
702 CAPITOL AVE RM 383
FRANKFORT KY 40601
The Secretary of Finance and Administration Cabinet shall promptly issue a decision in writing. A copy of that decision shall be mailed or otherwise furnished to the aggrieved party and shall state the reasons for the action taken.
The decision by the Secretary of the Finance and Administration Cabinet shall be final and conclusive.
10.9 Estimated Schedule of RFP Activities
The following table presents the anticipated schedule for major activities associated with the RFP distribution, proposal submission, proposal evaluation process, and contract award. The Commonwealth reserves the right at its sole discretion to change the Schedule of Activities, including the associated dates and times.
Anticipated Schedule of Activities
NOTE TO AGENCY-YOU DO NOT HAVE TO ALLOW FOR
2ND SET OF QUESTIONS AND/OR VENDORS’ CONFERENCE
Release of RFP1st Set Of Vendors’ Written Questions due by 12:00 PM EST
(SUBMIT QUESTIONS ON ATTACHMENT D-VENDORS’ QUESTION FORM)
Commonwealth’s Response to 1st Set of Vendors’ Written Questions
2nd Set Of Vendors’ Written Questions due by 12:00 PM EST
(SUBMIT QUESTIONS ON ATTACHMENT D-VENDORS’ QUESTION FORM)
Commonwealth’s Response to 2nd Set of Vendors’ Written Questions
Vendors’ Conference (if Vendors’ conference held the agency can eliminate the 2nd set of questions. Please enter the location address and proposed date and time for vendors’ conference
Location:
Time:
Attendance is highly encouraged, as this will be the only opportunity to ask oral questions. The Commonwealth shall not be bound by oral answers to the questions presented at the Vendors’ Conference or oral statements made at any other time by any member of the Commonwealth’s staff. Salient questions asked at the Vendors’ Conference and the responses will be reduced to writing and issued in an Addendum that shall be posted to the E-Procurement Page.
Commonwealth’s Response to Oral Questions Presented at Vendors’ Conference
Proposals due by 3:30 PM EST
All bidders are cautioned to be aware of security in the Capitol Annex in Frankfort. In-person or courier delivered bids/proposals in response to a Commonwealth solicitation should be delivered a minimum of thirty (30) minutes to one (1) hour earlier than the published closing date and time to allow for a security check-in. Delays due to building security checks shall not be justification for acceptance of a late bid or proposal. Vendor attention to this advisory is encouraged.
section 20 – background and present system summary
20.1 Background
AGENCY TO ENTER INFORMATION HERE RELEVANT TO THIS SECTION
20.2
.
20.3
.
20.4
.
section 30 – Commonwealth office of technology (cot) requirements
30.1 Commonwealth Information Technology Policies and Standards
The vendor and any subcontractors shall be required to adhere to applicable Commonwealth policies and standards related to technology use and security.
30.2 Compliance with Kentucky Information Technology Standards (KITS)
A. The Kentucky Information Technology Standards (KITS) reflect a set of principles for information, technology, applications, and organization. These standards provide guidelines, policies, directional statements and sets of standards for information technology. It defines, for the Commonwealth, functional and information needs so that technology choices can be made based on business objectives and service delivery. The vendor shall stay knowledgeable and shall abide by these standards for all related work resulting from this RFP.
http://technology.ky.gov/Governance/Pages/KITS.aspx
B. The vendor and any subcontractors shall be required to submit a technology roadmap for any offered solution. Additional roadmaps will be submitted upon request of the Commonwealth. The Roadmap shall include, but is not limited to, planned, scheduled and projected product lifecycle dates and historical release/ patch or maintenance dates for the technology. In addition, any guidance on projected release/revision/patch/maintenance schedules would be preferred.
30.3 Compliance with Commonwealth Security Standards
The software deployment and all vendor services shall abide by security standards as outlined in the Commonwealth’s Enterprise Information Technology Policies.
Enterprise Security Policies
http://technology.ky.gov/ciso/Pages/InformationSecurityPolicies,StandardsandProcedures.aspx
Enterprise Policies
http://technology.ky.gov/policy/pages/policies.aspx
Finance and Administration Cabinet Commonwealth Office of Technology Enterprise IT Policies
http://finance.ky.gov/services/policies/Pages/default.aspx
30.4 Compliance with Industry Accepted Reporting Standards Based on Trust Service Principles and Criteria
The vendor must employ comprehensive risk and threat management controls based on defined industry standards for service organizations such as AICPA TSP section 100, Trust Services Principles and Criteria. The vendor must annually assert compliance and engage a third party to examine such assertions and controls to provide a Report, such as an AT101 SOC 2 type 2 Report on Controls at a Service Organization Relevant to Security, Availability, Processing Integrity, Confidentiality, and Privacy, which contains an opinion on whether the operating controls effectively support the assertions. All such reports, including publicly available reports (i.e. AT 101 SOC 3) shall be made available to the Commonwealth for review.
30.5 System Vulnerability and Security Assessments
The Commonwealth reserves the right to conduct external non-invasive vulnerability and security assessments of the software and infrastructure used to provide services prior to implementation and periodically thereafter. Upon completion of these assessments, the Commonwealth will communicate any findings to the vendor for action. Any cost relating to the alleviation of the findings will be the responsibility of the vendor. Mitigations will be subject to re-evaluation after completion. In cases where direct mitigation cannot be achieved, the vendor shall communicate this and work closely with the Commonwealth to identify acceptable compensating controls that will reduce risk to an acceptable and agreed upon level. An accredited third party source may be selected by the vendor to address findings, provided they will acknowledge all cost and provide valid documentation of mitigation strategies in an agreed upon timeframe.
30.6 Privacy, Confidentiality and Ownership of Information
The Commonwealth Office of Technology (COT) is the designated owner of all data and shall approve all access to that data. The vendor shall not have ownership of Commonwealth data at any time. The vendor shall be in compliance with privacy policies established by governmental agencies or by state or federal law. Privacy policy statements may be developed and amended from time to time by the Commonwealth and will be appropriately displayed on the Commonwealth portal (Ky.gov). The vendor should provide sufficient security to protect the Commonwealth and COT data in network transit, storage, and cache. All data, including backups and archives, must be maintained at all times within the contiguous United States. All sensitive data, as defined in Enterprise Standards, must be encrypted in-transit and at rest.
30.7 Software Development
Source code for software developed or modified by the vendor specifically for the Commonwealth shall become property of the Commonwealth. This is not meant to include minor modifications to the vendor software to configure the software for Commonwealth use. This is meant to include software written to add functionality to the vendor product specifically to meet the requirements of the Commonwealth where the Commonwealth bears the entire cost of creating that functionality.
30.8 License Agreements
Software provided by the vendor to the Commonwealth should contain a provision for perpetual licensing with all upgrade options. License agreements should also contain a provision for the Commonwealth to maintain a version of the software in escrow in the event the vendor is unable to continue business for financial or other business reasons.