WIXLIB

State of FloridaDepartment of TransportationCentral Procurement Office605 Suwannee Street, Mail Station 20Tallahassee, Florida 32399-0450REQUEST FOR ***************************************RFI Number:Title:DOT-RFI-21-9072-SDPermit Application SystemResponse Due Date & Time (On or Before): Wednesday, April 28, 2021 @ 5:00PM ESTREQUEST FOR INFORMATION (RFI) from the Florida Dept. of TransportationREQUEST FOR INFORMATION (RFI)Florida Department of TransportationOffice of Information TechnologyIntroductionPursuant to Rule 60A-1.042, Florida Administrative Code (F.A.C.), an agency may use a Request for Information (RFI) toresearch (i) whether to competitively procure particular commodities or contractual services; (ii) which solicitationprocess to use for a particular need; and/or (iii) general, special, or technical specifications to be included in asolicitation. A RFI is not a solicitation, and an agency issuing a RFI is not required to utilize any information gatheredfrom the RFI, nor is a vendor who responds to a RFI excluded from participating in any resulting solicitation. A vendor’sresponse to a RFI is not an offer and the agency may not use a vendor’s submission to justify a contract with that vendorwithout otherwise complying with Chapter 287, Florida Statutes, and Rule 60A-1.042, F.A.C.It is not necessary to prepare responses using elaborate brochures and artwork, expensive paper and bindings, or otherexpensive visual presentation aids. The Florida Department of Transportation (Department) is not responsible for andwill not reimburse any costs incurred in the preparation or submission of information in response to this RFI. This isstrictly a RFI, and this request does not bind FDOT to solicit bids or proposals in the future. In addition, submittal ofinformation pursuant to this RFI does not give any Respondent any advantage in any solicitation if FDOT elects to solicitbids/proposals in the future. No confidential information should be submitted in response to this RFIBackgroundThe Florida Department of Transportation (FDOT), Office of Information Technology (OIT) is exploring solutions fromvendors pertaining to the development of a permit application system that enables customers to apply foroversized/overweight vehicle permits and process permit payments. Questions asked as part of this RFI shall be relatedto the development or procurement of a new permit application system.FDOT PAS RFI Page 1

Request for InformationThe department is requesting information from prospective vendors concerning a permit application systemas described above. The department desires to understand the abilities that shall be provided within aproposed application including, but not limited to: Managing Profiles, GIS, Reporting, and Interfacing as itrelates to a permit application system along with the technology necessary to provide the solution,Specifically, the department is requesting information regarding the following:The new system is anticipated to include: A web-based, cloud application to manage/maintain permit applications;A user dashboard;Azure Active Directory to authenticate Employees and Contractors and Azure Active Directory B2C toauthenticate Department Customers.The final product must be accessible to people with disabilities and meet all stipulations/guidelines in Section 508of the Rehabilitation Act of 1973. For detailed requirements and more information, visit http://www.accessboard.gov/508.htm;All data stored in the application must be stored in the United States without exception and this must beverifiable by the Department;The requirements of Florida Administrative Code .asp?Chapter 60GG-1), Project Management and Oversight,must be followed;The requirements of 69C-4.004 Standard Contracts with Electronic Payment Service sp?id 69C-4.004) must be adhered to;Development must be in adherence with the Department’s development standards which can be viewed onthe FDOT website (https://www.fdot.gov/it/appdevstandards);A restful API service must be provided;Tier 1 Stabilization (paid deliverable), Tier 2 Support (paid deliverable), and Warranty (non-paid deliverable)periods must be provided:o Tier 1 Stabilization is 60 calendar days: Contractor provides support and resolution of all issuesreported related to the implemented application or discovered post implementation that are withinthe scope of the project. Contractor identifies the problem within the agreed upon resolutionresponse timeframe for critical and non-critical items;o Tier 2 Support is to begin after Tier 1 Stabilization 30 calendar days immediately following the 60calendar day stabilization period;o Warranty Period is for 1 year to begin after Tier 2 Support; andAll functionality listed below.The new system shall provide the following functionality: The ability to create and manage/maintain application profiles;The ability to create and manage/maintain permit applications;The ability to create, secure, manage and maintain bridge and vehicle information;The ability to create and manage/maintain static bridge restrictions;The ability to create and manage/maintain code tables and rules tables;The ability to create and manage/maintain roadway restrictions;FDOT PAS RFI Page 2

The ability to interface with other, related department applications through a restful API service provided bycontractor as a paid deliverable;The ability to interface with external vendor applications (financial institutions);The ability to navigate applications through various queues;Application reporting including but not limited to usage of Microsoft Power Business Intelligence (BI);Accounting reporting; andGIS functionality using ESRI GIS Mapping Software.Specific Information RequestedThe department is seeking information from vendors having experience in developing permit application systems andpermit payment processing regarding possible solutions for the department’s need for a new permit application system,from concept to completion, to achieve the functionality described above.Specifically, the department is seeking the following information. Please answer each of the following questions inorder by question number for your response based on your current or proposed available system abilities, as theyapply to the items listed below:General1. The department is interested in innovative, field-proven concepts and approaches for the fast-tracked “made forhire” system development as described above. Please provide your recommendations on the approach.Methodology2. What are your company’s recommendations as to software and system development methodology ormethodologies, (e.g., waterfall, Agile, SCRUM, etc.), and the Software Development Life Cycle (SDLC) pertainingto Change Requests and Operations and Maintenance?a. What does your company view as the pros and cons of its methodology, considering the breadth ofdevelopment and timeframe for development?b. Please provide your change management approach.3. Please describe the ideal development team, to include the number and type of each resource/role and alsoinclude the working location of resources.4. Please describe how you typically engage with the business customer, to validate requirements have been metand that testing is successful?5. How would your company provide support services to FDOT Project Managers related to compliance of Chapter60GG-1 F.A.C., to ensure that all project documentation is managed and kept current throughout the lifecycle ofthe project?Technical Coordination6. What technologies does your company recommend, allowing the Department to automate business processesand reduce its operations and maintenance costs?7. Is the recommended solution currently in production? If so:a. What agencies are utilizing your product, and how long has your product been in production?b. Please provide client references for production instances.c. If the solution is available on one or more app stores, please list each store and provide the currentcustomer ratings and sources of the rating for your product.d. What are the typical transaction volumes? What is the average frequency of use per customer?e. How many concurrent users is the system capable of handling? Is the system scalable?FDOT PAS RFI Page 3

f. How many users do you currently have in the US and specifically in Florida?g. Please explain how you have worked/operated in an environment where there are multiple alternativepayment providers.i. Does your company have the ability to find, identify and report on PCI data in files at rest onmanaged endpoints, in compliance with 69C-4.004 Standard Contracts with Electronic PaymentService Providers?8. How long is the estimated implementation process of your product? What are the factors driving that timeline?9. What are the biggest challenges/risks in deploying your solution?10. What innovative idea(s) and/or approach(es) does your company recommend for testing a new permitapplication system while simultaneously operating a current system in parallel?Technical Solution11. What is your company’s recommendations for cloud-based offerings for infrastructure, applications or both?a. How should the department consider the acquisition of such services that are secure, reliable,sustainable, and available?b. Clearly describe your company’s methods and practices for ensuring a smooth data migration fromexisting data source(s).System & Data Security12. What methodology and measures does your company take to ensure robust data security architecture to satisfyall Federal and State law, rule, and statutory requirements including but not limited to the critical areas of:a. Payment Card Industry Data Security Standard (PCI DSS);b. Personally Identifiable Information (PII) and exempt data (i.e., data considered sensitive or confidential);c. Privacy including test data masking and de-identification;d. Vulnerability and penetration assessments of database systems;e. Data security maintenance (e.g., access management, encryption);f. Legal requirements and protocols (e.g., interaction with risk management and legal, identity and accessmanagement, breach response processes); andg. Data segmentation to manage costs while maximizing data security.13. How would your company ensure that all personal data is stored in the United States?a. How could this be verified?Future Solution Capabilities14. If applicable:a. What is the current frequency of new releases/patches to your product?b. Please discuss enhancements currently under development, any future planned enhancements, and alsoprovide a product roadmap.15. What are your company’s recommendations as to the best practices for software that is “work made for hire”that will be taken over by an agency at the completion of the development process?16. What are your company’s recommendations as to the best practices for software that is “Software as a Service(Saas)” that will be maintained by a company after completion of the development process?Accessibility17. Are all interfaces (both for administrators and end-users) that are part of your product compliant with Section508 and/or WCAG 2.0 AA to be accessible to persons with disabilities?18. Describe your accessibility conformance testing process for persons with disabilities.19. Have you ever worked with accessibility as a functional requirement?FDOT PAS RFI Page 4