February 19, RE: Addendum No. 1 Request for Proposal No IT Asset Management Solution. Dear Offeror:

Transcription

1 February 19, 2016 RE: Addendum No. 1 Request for Proposal No IT Asset Management Solution Dear Offeror: This notice shall serve as Addendum No. 1 to the aforementioned Request for Proposal ( RFP ) and shall for all purposes become part of the original RFP. This Addendum should be considered when preparing your proposal for submission to the LCRA. The Proposal Deadline remains the same. Please find attached answers to all questions received on February 15, Sincerely, Veronica Frederick Sr. Category Manager Veronica.Frederick@lcra.org LCRA RFP #

2 Questions & Answers 1. Which vendors does LCRA want to focus on rolling out during the 1 st year, and during the 2 nd year? ANSWER: Hardware is primarily Cisco and Dell. Software titles are broad and the initial focus is server and infrastructure s software. 2. What hardware vendors' products is it essential for the solution to manage? ANSWER: Dell, Cisco UCS Blades and C series. 3. How many servers? ANSWER: In the Response Template Section 5: Cost Line Please use 40 users, 1700 servers, 600 network devices and 2300 client systems for pricing calculations. What hardware/operating systems are in use? ANSWER: Windows, Linux, UNIX, 2008, 2012, rh5, rh6. 5. Does "1700 servers" include all physical servers, clusters, virtual machines/servers, hard and soft partitions? If not, what is the approximate breakdown of each of these? ANSWER: Yes, includes all. We have ~1105 virtual servers. 6. How does LCRA define HAM (Hardware Asset Management)? ANSWER: LCRA follows ITIL processes, full lifecycle management of IT and service assets, from the point of acquisition through to disposal. 7. Does HAM include all servers, storage devices, network devices, mobile devices? ANSWER: Servers, storage, network devices, laptop, desktop, tablets. Mobile would be nice to have. 8. In your Discovery questions, you ask about Discovery tools. Are you looking for vendors to give you pricing on discovery, and if yes, to discover what type of information? ANSWER: Discovery for servers, appliances and network devices. 9. In the IT Security section Line 8 - The solution MUST adhere to any and all data retention/removal policies stipulated by LCRA. Scalable has robust security policies, but in order to respond a definitive YES, we will need to understand LCRA s policies. ANSWER: LCRA policies are based on the data which has different retention policies. Official records must adhere to one policy and log files have a different requirement. As long as the data retention of the solution is configurable, it will meet the requirement. 10. In the IT Security section Line 19 - The solution's mobile application and/or application wrapping solution MUST comply with LCRAs corporate security/network access policies (no inbound firewall ports). Scalable has robust security policies, but in order to respond a definitive YES, we will need to understand LCRA s policies. ANSWER: LCRA access policies are based on NIST SP r4. This requirement is focusing on no inbound firewall ports. LCRA RFP #

3 11. In the Response Template Line LCRA mentions that LanDesk and ServiceNow are in use. Are either or both systems used for service management? Do you have provisioning workflows set up in those systems? What tools are in use for software deployment and do you intend to continue using them? ANSWER: ServiceNow is used for service management and no provisioning workflows are setup. LANDesk is currently used for client software deployment and we plan to continue that use. 12. What databases/applications are running on them that need to be under management? ANSWER: Oracle, SQL 13. Are the 600 network devices routers/switches/network printers/ip Phones/Other? ANSWER: Yes. 14. How many qualified desktops? (Qualified Desktop definition: Qualified desktops are all computers (PCs, laptops, workstations, etc.) owned by the organization that is named in the license agreement or are made available to the organization through a leasing, rental, outsourcing or similar legal relationship on a long-term basis. Computers that function as servers and computers that are not used as part of a workstation (for example Web servers, mail servers, or mainframes) are not considered qualified desktops. Systems that are used exclusively for line-of-business software (special software, e.g. accounting or point of sale software, planning software, machine control or similar) and mobile systems which use embedded operating systems are also excluded from qualified desktop.) ANSWER: Does the client systems tablets and smart phones/mdm solution requirements? ANSWER: ipad, Surface Tablets 16. What is the breakdown between desktop/laptop and tablets/smart phones if MDM devices are to be managed? ANSWER: 1400 laptops, 900 desktops, No thin clients, no smart phones or MDM. 17. Are any of these devices thin clients or zero clients? If yes what types? ANSWER: Windows OS, MAC, Dell, 18. How many LCRA locations will be managed with this project? ANSWER: ~50 and all of our facilities are located in Texas and connected through a corporate network. 19. What is the geographic distribution of users / servers / data centers? ANSWER: Users and servers are located in Central and South Texas. We have 2 Data Centers in Austin. 20. How does LCRA expect and/or want to use data and reporting output to support hardware asset management and lifecycle? ANSWER: For maintenance renewals, location, components, status, and relationship to other assets 21. Does failure to meet a 'must have requirement' mean disqualification from the process or can they be addressed through planned roadmap delivery? ANSWER: Failure to meet any requirement is not automatic disqualification. The entire response and overall solution capability will be considered in the evaluation. LCRA RFP #

4 22. Do you have a documented and approved IT Asset Management Policy? If so, can you share this with us for formulating the response? ANSWER: Yes but that is not relevant to this RFP. 23. If you do not have a formal Asset policy, what is your plan for enforcing implementation of the asset management? ANSWER: That is not relevant to this RFP. 24. Does the solution cost need to include price of scanners? ANSWER: No, LCRA has scanning equipment. 25. The RFP questions, especially the security section, imply some form of Deployment and End Point Management. Our assumption is LCRA will leverage existing tools such as SCCM for deployments and existing security tools for End Point Management (including remote wipes). Please confirm if this is an accurate assumption. ANSWER: Your assumption is correct. 26. Request and Workflow management does not seem to be included in the RFP pricing section. Our Asset Management solution includes catalogs for hardware and software requests. How should setup of catalogs and supporting workflows be priced in the implementation section? ANSWER: We intend to use existing workflows in ServiceNow; however, you can provide pricing for this functionality as an optional component of the pricing provided. 27. The RFP does not include any procurement or finance management requirements. How does LCRA intend to address these functions? Some examples: Procurement & Contract examples, Leveraging our tool for end to end procurement or integration to existing procurement systems for tracking Purchase Orders, Leveraging our system for contract management or integration with external contract management to manage terms, especially items like maintenance dates, lease expiry, Integration with Vendor Systems (like HP, Cisco, etc.) for mapping purchase orders to specific devices. Financial Management examples (Either leveraging our tool or integration to external finance management tool) such as Tracking total cost of ownership, Tracking Depreciation, Tracking Fixed assets, Tracking Contract Rate Cards, Cost allocation or charge backs. ANSWER: We will use our existing financial solutions for this information. 28. Please provide specific IT Security policies and standards including existing Single Sign On, Encryption, Password management and Data Retention. For example, there are multiple ways to encrypt data in transit, while our tool supports most of the industry standard implementations; we need to ensure our solution meets LCRA standards. ANSWER: We cannot share this information; however, we would request that you provide best practice recommendations for this capability. 29. Please provide more information on current asset management implementation to estimate data migration efforts. What is the intended design for migration? What are the data retention requirements for previous tools, will the RFP responder need to estimate any data LCRA RFP #

5 retention efforts for existing data? ANSWER: Data to migrate will be minimal and come from more than one source. We do not have a design. 30. We will be jointly responding with an implementation partner. Line 172 mentions naming 2 implementation partners. Is it acceptable to include only our primary implementation partner selected for this response? ANSWER: Yes, one is acceptable. Please provide the name and contact for the partner. 31. Are there any restrictions on using offshore consultants for implementation? ANSWER: There may be depending on the activities the offshore resources will perform and whether data will be sent to an offshore location. Please provide the country for your resources and we will confirm if that country is acceptable. 32. Could LCRA award portions of this RFP to multiple vendors? For example, Discovery to one vendor and device management to another vendor? ANSWER: Yes, that is a possibility. 33. Can LCRA provide a network diagram? ANSWER: No. 34. Does LCRA need discovery tools? ANSWER: Yes for servers and network equipment. We are not using SCCM for discovery. 35. What integrations will be required? ANSWER: LCRA has many sources for information and we need to normalize the data. 36. What type of connectors is required? ANSWER: LCRA prefers Web services that can talk to the enterprise bus so you should include pricing for an API. LCRA RFP #