Transcription
ADDENDA #2IT-RFP-2016-01: INFORMATION TECHNOLOGY SERVICESThe following questions were provided before, during and after the Pre-Proposal meeting held onMonday, March 7, 2016. Due to our vacant IT department, we answered these questions to the best ofour abilities.Q1:A1:Size of backups?Full backups of 4 servers can be completed with four 1.6 TB tapes0.44 TB Exchange1.10 TB GIS1.59 TB File Share0.022 TB Primary Domain ControllerQ2:A2:Remote desktop?We do not telecommute, though approximately 21 staff use Citrix Go to My PC remotely andhave licenses.Q3:A3:GIS Integration/Transportation Modeling?4-step modeling process with many zones (for entire region)/thousands of links (entire regionalroadway system)/multi-modal: runs on separate workstationsCiti Labs Q: runs on three separate workstations: Cube Program w/feedback logisticsRest of GIS runs on certain workstationsTrans modeling has its own server: Cluster Program that segments the model to runsimultaneously on multiple cores7 concurrent GIS licenses: 3 ARCVIEW; 4 ARCINFO (Versions: 10.1; 10.2; 10.3)Q4:A4:Technology Architecture (Is it an Oracle shop)?We are NOT an Oracle shopWe have Transportation modeling – SQL databasesThere is No centralized SQL serverQ5:A5:Any Regional governmental integrations/interfaces?No (are just starting to work on a regional GIS initiative with 7-10 data layers)Q6:A6:Any mobile needs/Apps/etc.?Currently using Citrix. Employees access email through personal cell phones/mobile devices.Q7:A7:Any SQL backups? Any profile redirection?No. We are unaware of any profile redirection.Q8:A8:Any other home-grown apps?Not currently. Potential for some in the future.Q9:A9:Issues with Helpdesk?Desktops are fairly new, purchased with long service agreements. UPSs’ batteries have beenfailing, resulting in some hard drive failures. There have been occasional memory issues.IT-RFP-2016-01 IT SERVICES ADDENDA #2Page 1
Q10:A10:Telephone Support?Not looking for telephone support at this time. Have a contract with another vendor (Carousel).Q11:A11:24-7 expected volume outside normal work hours?Need to see price points with various support options. Usually only would need between 6:30AM – 9:00 PM M-F, which would be the critical times.Q12:A12:Sensitive Information-security requirements?We’re not in the HIPAA business, but do have personnel data (social security numbers, etc.); andhomeland security data layers, etc.Q13: Total SQL licenses?A13:MS SQL Server NameDesktop 1Desktop 1Domain ControllerDomain ControllerBackup Domain ControllerBackup ServerBackup ServerGIS ServerGIS ServerDesktop 2Desktop 2Desktop 3Desktop 4Desktop 4Desktop 5Desktop ESS10.50.4000.0Q14:A14:How do four offsite servers interact with internal system?Outside servers do not interact with internal servers. They will not be included in this process.Q15:A15:Are they Co-Located?YesQ16:A16:Managed here?Monitored by co-location vendor.Q17:A17:Any architecture diagrams?The ones inherited are not up to date. Old diagrams with edits will be available to selectedvendor.IT-RFP-2016-01 IT SERVICES ADDENDA #2Page 2
Q18:A18:Internal assessment?Network Detective was run on serversQ19:A19:Organizational size/data growth?No major staff changes in the foreseeable future, from the current 47-52 staff/workstations.Data driven organization – lots of data that is kept indefinitelyQ20:A20:Interface with external systems?Some: in Econ and Transportation, both manual and automatedQ21:A21:Looking for pricing for?Costs associated with Assessment/Strategic PlanCosts for Managed ServicesCosts associated with migration to Cloud environment, based on your experience with previousclientsQuestions to consider include:Potential cost efficiencies in CloudWould it be appropriate to go to Cloud for GIS, Traffic Modeling?Is a Hybrid approach more feasible?Q22:A22:Provide server warranty/aging details?Server Warrantee / Aging DetailsShipdateComputerDell Pro SupportExpiration DateNext Business Day SupportExpiration DateDomain ControllerDELLApr-10Apr-17Apr-17Backup Domain Apr-17GISDELLApr-10Apr-17Apr-17File DELLFeb-13Feb-17Feb-17IT-RFP-2016-01 IT SERVICES ADDENDA #2Page 3
Q23:A23:Firewall/Security?Barracuda spam and web filter on wired internetWireless internet is not filteredSymantec anti-virus end-point protectionFirewall at edge of network at routerQ24:A24:Any pre-existing vendor agreements?Other than routine applications, no.Q25:A25:Microsoft License agreements?Assume we’re compliant, bought at time of purchase of computers, with long serviceagreementsQ26:A26:Did you have an IT Team?At one time we had two (manager and assistant). Manager was very conservative. Assistant didnot have total access: he was a network engineer, managed servers, updates, etc.Q27:A27:Backup and retention policy?No formal policy. Regular backups of all internal servers are done using Backup ExecHP tape drivesNo virtual serversQ28:A28:Financial package?GMS (Grants Management System):4 licenses, on four separate workstationsAccess is backend10-year financial data, grows each yearIncludes payroll, benefits, VRS, ICMA, taxes, etc.All payroll, A/P, A/R are done in houseGMS is backed up nightlyBoth current and new upgrade is Cloud compatibleQ29:A29:Any other external security solutions? URL content filtering?BarracudaIT-RFP-2016-01 IT SERVICES ADDENDA #2Page 4
Q30:A30:Printers/Document Management Systems to handle scans?Xerox 4112;Xerox EX700 Print/server powered by FIERY;Xerox Phaser 3300MFP;HP4200/4300 Laserjet PCL 6; (2)HP4250 Laserjet8;HP4015 Laserjet;HP LAS2679;HP Laserjet P2035 UPD PCL 5;HP Laserjet P4014/P4015 PCL 6; (5)HP Deskjet 6122; (2)HP Laserjet P4015 UPD PCL 6;HP Universal Printing PCL 5; (2)HP Color Laserjet 4600 PCL 6;HP Designjet 800 PS 42 by HP;HP Color Laserjet CP4520 PCL 6;HP Laserjet P4015N PCL 5;HP Laserjet 4250 PCL 6;HP Color Laserjet CP2025;HP Ethernet Multienvironment (4)Q31:A31:List of printers for compatibility with Cloud?See #30Q32:A32:Can we get copies of your Financial statements?/ Any upcoming IT audits?IT audit is part of annual financial statements audit, testing done in-houseAudited Financial Statements can be found s-/To go directly to the DC%202015%20Final.pdfTo go directly to the Report to the irements for using VITA?We’re not required to use VITA, currently using VITA for wired internet through Windstream,Contract ended October 2015Two internet connections: Cox wireless and VITA/Windstream wiredQ34:A34:Are you currently using Share Point?Share-point solution not being used currently. Share Point will not be part of this process.Q35:A35:Email hosting?Exchange server is in-houseAll incoming email coming through WHRO, who has a Barracuda filter but is not using it for usAll outgoing email not going through WHROWe use a Barracuda filter once email has come in-house from WHROIT-RFP-2016-01 IT SERVICES ADDENDA #2Page 5
Q36:A36:Is this a new or existing contract? If it is existing, who is the incumbent?This is a new contract. We lost our staff member in a one-person department.Q37:A37:Can you share the budget or budget range for this project?As a public agency, with budget challenges, we need to be good stewards of the public’s money.This RFP is testing the waters for us to see if Cloud computing is an affordable option for us. Weare seeking expertise to determine if there are more cost effective approaches for our IT system.Q38:A38:What is the level of effort in terms of labor categories and number for FTE’s expected?Dependent on selected vendor’s IT assessment.Q39:A39:How many key personnel resumes are expected?Resumes of key personnel who will be directly assigned to our account.Q40:A40:What is the place of performance? Can part of the contract be performed remotely?Our office is located at 723 Woodlake Drive, Chesapeake, VA 23320.We anticipate that most managed services can be provided remotely.Q41:A41:Will you release the names of attendees to the event, and their companies for this RFP?See Addenda #1Q42:A42:Would you please provide the makes, models, configurations, and ages of your existing ITinfrastructure to include, but not limited to Servers, Routers, Switches, Firewalls, Desktops, andLaptops?This information will be provided to the selected vendor.Q43:A43:What is the existing hardware lifecycle?Every 4-5 years, on a rotating basis.Q44:A44:How much data do you currently manage in your infrastructure?See #1. No information available on data on user/clients personal systems.Q45:A45:How much of the data is structured – i.e., in databases, Exchange, etc.?See #69.Q46:A46:How much is unstructured – i.e., file servers, end user client systems, media files?See #1. No information available on data on user/clients personal systems.Q47:A47:What are the organization’s existing policies for backup, recovery, archiving, and disasterrecovery?See Addenda #3 – IT Policy. Other information will be provided to selected vendor.Q48:A48:What is your data retention policy?We follow Virginia records retention policy.Q49:A49:What is the recovery point objective (RPO) – i.e., how much data can you lose?All data is critical and essential to our operations.IT-RFP-2016-01 IT SERVICES ADDENDA #2Page 6
Q50:A50:What is the recovery time objective (RTO) – i.e., how long can you be down?Following the selected vendor’s assessment, we would be interested in their recommendationas to what would be feasible to our Organization.Q51:A51:What WAN/ISP subscriptions do you currently have?Cox: 3 mg wirelessVITA: 20mg wiredQ52:A52:What is the bandwidth of your WAN/ISP subscriptions?See #51Q53:Page 41, Item D, Sub-item a: This section states that HRPDC has 4 offsite servers that areseparate from your primary network and maintained by a 3rd party. Can you confirm that these4 servers are excluded from the scope of work and will not be part of the services 58:A58:Q59:A59:Page 42, Item A, Sub-item a: This section states that HRPDC contracts with a 3rd party formonitoring of the AVAYA IP Office phone system. Can you elaborate on what services arecovered by this monitoring contract? Can you also elaborate on the date to day management ofthe phone system that you expect to be done as part of this contract?See #10Page 44, Section “Communications,” Item a: This section states that HRPDC utilizes a 3rd partyvendor for support for telephone servers and handsets. Can you elaborate what activities the3rd party vendor would be responsible for and what activities the winning bidder would beresponsible for after the contract is awarded?See #10There seems to be some ambiguity in what is required to be priced out in the initial proposalsubmittal. For example, analysis of existing system page 7 section 2.7, are we pricing this outbased upon the specifications listed in the RFP or after the on-site assessment has been doneafter contract award?See #21Does the HRPDC want pricing line items in the proposals for assessment, evaluation,implementation, in addition to the stated IT managed services?(It is fairly clear that line items for IT managed services can be presented however, migrating tothe cloud, assessments and evaluations are unclear as to when these will take place and howthey should be p[riced out for contract evaluation.)See #21Could the HRPDC provide a line item chart or matrix that would represent all items to be pricedin the proposal to clarify these issues?See #21We are a privately owned company therefore our financial statements are not publicdocuments, may we submit Federal Tax Returns instead to meet the requirement?Yes. Be sure to designate these as confidential information (see RFP for form to so designate).IT-RFP-2016-01 IT SERVICES ADDENDA #2Page 7
Q60:A60:Are there going to be any upcoming IT audits?See #32Q61:A61:Will there be a technical person reading the proposals?There are several staff members with IT knowledge at the HRPDC/HRTPO, and we do haveaccess to external IT-knowledgeable staff from the localities should they be deemed necessaryin evaluating the proposals received.The eval committee consists of: Andrea Gayer IT Interim Manager, Bob Crum Executive Director,Randy Keaton & Camelia Ravanbakht Deputy Executive Directors of PDC and TPO, Nancy CollinsCFO/Procurement Officer, Sara Kidd (GIS), and Mike Kimbrel (Trans).Q62:We use high level engineers occasionally and they get paid on 1099 basis. Would this apply toour 1099’s?(“The successful vendor will provide the Organization with all of the following services. Thevendor shall not subcontract any portion of the services to be performed under the contractwithout the prior written agreement of the Organization.”)YesA62:Q63:A64:Is there a response time SLA implied with this statement?(“Remote support and on-site support must be provided during business hours as requested.”)See #50What is the current hardware and software or any associated equipment that may or may notneed to be upgraded?Dependent on selected vendor’s IT assessment.Q65:A65:What software is being utilized for GIS and the current version?See #3Q66:Q66:What does the network look like in reference to off-prim and on-prim?We are not able to provide this information at this time.Q67:A67:Timeline for award?See page 2 of the RFP. Goal is for June 1st, subject to change as needed.Q68:A68:Will there be a whittling down process?See page 2 of the RFP. Possible short-list selection with oral presentations.Q69:A69:How large is the MS Exchange environment (users and data)?There are 85 mailboxes. The backup of the exchange server is 0.44TB. The space utilized on theExchange Data drive is .39 TB.Q70:A70:Who is the vendor currently supporting the telecom side of the house?CarouselQ71:A71:Is the current amount of backup data confirmed up to roughly 4TB of all backups?See #1A63:Q64:IT-RFP-2016-01 IT SERVICES ADDENDA #2Page 8
Q72:A72:What is the latest version of the Symantec Endpoint, I suspect you are running 11.x which hadissues earlier on in life by resolved in later version. Also, what other similar security solutionsare implemented?We are using cloud based Symantec Endpoint Protection Small Business Edition. We have 85licenses.This is the version information:Q73:A73:Can you confirm the assessment tool ran in-house?Network DetectiveQ74:Could you please furnish an inventory (listing) of your current network infrastructure includingmake and model of the devices (i.e., servers, firewalls, switches, routers, etc.)?Will be available to selected vendor.A74:Q75:A75:Q76:A76:Q77:Is wireless considered part of this RFP? If so, could you please provide your current make andmodels for your wireless devices (i.e., Access Points, etc.)?Yes, wireless is part of the RFP. We only know the make and model of 1 of the Access Points. Itis a Sonic Wall, Sonic Point Ne. The other Access Points are not easily accessible to check themakes and models.Under the Scope of Work – Help Desk Support, you ask for on-line ticket submission,commenting and tracking. Does the vendor have to include an online ticketing system in itsquote, or is there one in use at the Organization?Selected vendor must provide. No in-house system.A77:Under the Scope of Work – Help Desk Support, do you have any historical data as to the numberof Help Desk Calls received either daily, weekly and/or monthly?No formal Help Desk system exists. Assistance is given on an as-needed basis.Q78:A78:Is there a particular format you are looking for in the Pricing Proposal?See #21Q79:A79:What is the contract duration?Initial period of one year, with up to four, one-year renewals.IT-RFP-2016-01 IT SERVICES ADDENDA #2Page 9
Q80:A80:For the support services, do you require full-time staff for the duration of the contract? If no,what are the anticipated work hours for a part-time or as needed staff person(s)?Dependent on selected vendor’s IT assessment.Q81:A81:Will background checks be required of the staff working remotely or onsite?YesQ82:A82:Is a current detailed inventory available? Including: make and model of switches, routers,firewalls, workstations, printers, servers, and respective operating systems?See #74Q83:A83:Could serial numbers be provided if this information is unobtainable?See #74Q84:A84:Is a current detailed logical and physical network diagram available?See #17Q85:A85:Can you provide the current bandwidth and circuit detail information for all sites?See #51Q86:Is hard drive encryption used on any of the laptops/workstations? If so, is a recoverymechanism in place?NoA86:Q87:A87:Number of remote users, methods of current remote access and applications accessedremotely?See #2Q88:A88:Is software licensing inventory information available?Will be available to selected vendor.Q89:A89:We would like to know is there any incumbent for this contract; if yes, can you provide us detailsfor the same?See #26 & #36Q90:A90:What is the value of the contract?See #37Q91:A91:What are the major issues that department is facing?See #26 & #36Q92:A92:Is there any preferred cloud service the department is looking for?Dependent on selected vendor’s IT assessment.Q93:A93:What is the function of the 4 offsite servers that are managed by another vendor?See #14IT-RFP-2016-01 IT SERVICES ADDENDA #2Page 10
Q94:A94:What is the interaction between these servers and the rest of the organization’s servers (If any)?See #14Q95:A95:How many users access the applications that house their data in the SQL Databases?All of the SQL databases are accessed by less than 5 users.Q96:A96:Which applications utilize the SQL Server Database(s)?See #13Q97:A97:How many users access the applications that house their data in the SQL Databases?See #95Q98:A98:The Software listing shows QuickBooks pro Server 2013 – Can you tell us which server (frompage 41 of the RFP) is running this application?The application is run on two desktops. The associated databases are located on the File Share.Q99:A99:Do you know roughly how much data is in use across the Organization at this time?See #1. No information available on data on user/clients personal systems.Q100: How much data is currently being backed up? (estimate total Gigabytes or Terabytes)A100: See #1.Q101: Does anyone in the organization need the ability to access the network while working remotely?A101: Yes.Q102: What type of Router/Firewall is currently in place (the make and model) ?A102: Cisco ASA 5510Q103: What sort of Firewall capabilities/licenses are enabled?A103: Barracuda webfilter 310Barracuda spam and virus firewall 300Q104: You list that there are 51 active workstations and 12 laptops:Does this mean there are a total of 63 desktop/laptop devices? Or, are the laptops counted inthe 51 active workstations?A104: There are 63 total devices.Q105: Under Proposal Preparation and Instructions – Required Forms (Page 7 item e: Brief descriptionof your organization structure - is an organization chart sufficient to answer this question?A105: YesIT-RFP-2016-01 IT SERVICES ADDENDA #2Page 11
MS SQL Server Name Instance Version Desktop 1 HAZUSPLUSSRVR 10.50.2500.0 Desktop 1 ROBSPCSQL2008R2 10.50.2500.0 Domain Controller ADMINDB 9.00.4035.00
