Posted Date : June 14,2019
Product (RFP/RFQ/RFI/Solicitation/Tender/Bid Etc.) ID : SW-25058
Government Authority located in Michigan; USA based organization looking for expert vendors for Verification System.
[A] Budget: Looking for proposal
[B] Scope of Service:
(1) Vendor needs to provide Verification System to move away from the Salesforce platform to an alternate externally hosted solution. can include an optional on-premise hosted solution for additional consideration. Bidder is encouraged to provide proposals for a Custom Software Development Solution. Contractor is required to complete the State Security Accreditation process for the solution. The State may scan the application using its application scanning tools. Contractor will need to provide the resources, at sole expense, to complete any analysis remediation and validation required by the results of the scan, Contractor is required to grant the right to the State to scan either the application code or a deployed version of the solution; or in lieu of the State performing a scan, Contractor will provide the State a vulnerabilities assessment after Contractor has used a State approved application scanning tool. These scans must be completed and provided to the State on a regular basis or at least for each major release.
- Types of scanning and remediation may include the following types of scans and activities
- Dynamic Scanning for vulnerabilities, analysis, remediation and validation
- Static Scanning for vulnerabilities, analysis, remediation and validation
- Third Party and Open Source Scanning for vulnerabilities, analysis, remediation and validation.
- Must provide a GovCloud Solution that is hosted in a FedRAMP certified facility.
- Must be encrypted in transit and at rest using AES 256 bit or higher encryption modules.
- Must have multi-factor authentication for privileged/administrative access, however this level does not require a hard token at this time. Some other method such as SMMS text with passcode, phone call with temporary passcode or other approved multi-factor authentication method must be used.
- Must remain compliant with FISMA and the NIST Special Publication 800.53 (most recent version) MOD controls using minimum control values as established in the applicable PSP
(2) All question must be submitted no later than June 25, 2019.
(3) The contract term will be for one year.
[C] Eligibility:
Onshore (USA Only)
[D] Work Performance:
Performance of the work will be Offsite. Vendor needs to carry work in their office location.
Budget :
Deadline to Submit Proposals: August 01,2019
Cost to Download This RFP/RFQ/RFI/Solicitation/Tender/Bid Document : 5 US$
Product (RFP/RFQ/RFI/Solicitation/Tender/Bid Etc.) ID : SW-25058
Government Authority located in Michigan; USA based organization looking for expert vendors for Verification System.
[A] Budget: Looking for proposal
[B] Scope of Service:
(1) Vendor needs to provide Verification System to move away from the Salesforce platform to an alternate externally hosted solution. can include an optional on-premise hosted solution for additional consideration. Bidder is encouraged to provide proposals for a Custom Software Development Solution. Contractor is required to complete the State Security Accreditation process for the solution. The State may scan the application using its application scanning tools. Contractor will need to provide the resources, at sole expense, to complete any analysis remediation and validation required by the results of the scan, Contractor is required to grant the right to the State to scan either the application code or a deployed version of the solution; or in lieu of the State performing a scan, Contractor will provide the State a vulnerabilities assessment after Contractor has used a State approved application scanning tool. These scans must be completed and provided to the State on a regular basis or at least for each major release.
- Types of scanning and remediation may include the following types of scans and activities
- Dynamic Scanning for vulnerabilities, analysis, remediation and validation
- Static Scanning for vulnerabilities, analysis, remediation and validation
- Third Party and Open Source Scanning for vulnerabilities, analysis, remediation and validation.
- Must provide a GovCloud Solution that is hosted in a FedRAMP certified facility.
- Must be encrypted in transit and at rest using AES 256 bit or higher encryption modules.
- Must have multi-factor authentication for privileged/administrative access, however this level does not require a hard token at this time. Some other method such as SMMS text with passcode, phone call with temporary passcode or other approved multi-factor authentication method must be used.
- Must remain compliant with FISMA and the NIST Special Publication 800.53 (most recent version) MOD controls using minimum control values as established in the applicable PSP
(2) All question must be submitted no later than June 25, 2019.
(3) The contract term will be for one year.
[C] Eligibility:
Onshore (USA Only)
[D] Work Performance:
Performance of the work will be Offsite. Vendor needs to carry work in their office location.
Budget :
Deadline to Submit Proposals: August 01,2019
Cost to Download This RFP/RFQ/RFI/Solicitation/Tender/Bid Document : 5 US$