Request for Proposal (RFP) For Cyber Security

Transcription

1 Request for Proposal (RFP) For Cyber Security Small Business Association of Michigan 120 N Washington Square Suite 1000 Lansing, MI

2 Introduction to the Small Business Association of Michigan (SBAM) I. Background A. Organizational Background The Small Business Association of Michigan (SBAM) is a 501(c) (6) not-for-profit, trade association organized for the exclusive interest and concern of small business in Michigan. SBAM was created to provide leadership in the promotion of free enterprise and other common interests of small businesses in Michigan. SBAM's primary mission is to help Michigan small businesses by advocating for small business, bringing business owners together to share knowledge, creating collaboration and partnerships, and delivering group buying power Membership More than 25,000 businesses are SBAM members. To be a member of SBAM a company must have fewer than 500 employees and must be a registered business in Michigan. Our typical member has 25 or fewer employees. Nearly all types of businesses are represented retail, service, professional, construction, manufacturing, agricultural, etc. Our membership comes from across the state and across the spectrum of SIC codes. Gross sales of the typical members range from $100,000 to $100,000,000. Do Not Confuse SBAM and SBA The Small Business Association of Michigan (SBAM) is a not-for-profit trade association funded by dues dollars and income from several other sources. The Small Business Administration (SBA) is an agency of the federal government. SBAM Products and Services Advocacy/Government Relations relating to issues that impact small business Employee Benefits including group health, life and disability, dental and vision insurance, Section 125, health savings account and health reimbursement arrangement administration, COBRA administration, and accident/critical illness insurance Consolidated billing and enrollment services for all sponsored group benefit plans Credit Card Processing Overnight shipping discounts Office supply discounts Tuition discounts HRIS/payroll IT Management Workers compensation HR and Legal Hotline Energy Office 2 P a g e

3 For more information on the Small Business Association of Michigan, as well as our products and services please visit our website at B. Project Background SBAM offers a rich (and unique) mix of member benefits. We determine categories of benefits and specific benefits primarily through member feedback, which we obtain through formal surveys and informal what keeps you up at night questions. SBAM has determined cybersecurity to be an area of concern for many members. This RFP seeks responses which articulate a customized solution for small businesses in Michigan this solution should include (at a minimum) prevention against threats and response to attacks. II. DELIVERABLES Cyber security and the information technology industry are in constant change emerging technologies, new laws and regulations, and the ever-changing needs of customers have altered the market environment. Many small businesses either do not believe their company could ever be a target of a cyber-breach or, if they understand that their business could be a target, they find the subject overwhelming or too complex for them to spend time trying to find remedies. At the same time, a breach of information can wipe out a small business. This RFP seeks experts to design a cyber-security program for small business, and to propel the program to the highest level through effective product development, integration with SBAM s current product offering (where possible), developing technology enhancements, sales and communications. The vendor we select will provide the best combination of a flexible product offering, innovative technology, network capability, marketing commitment, customer service and price. To this point, we have developed a list of administrative, marketing, communications, accounting and reporting requirements. In order for SBAM to conduct a fair and thorough review of your proposal, please provide detailed information on the following program components. At the end of some sections are specific questions. Please address these questions in detail if they have not been answered previously. Please organize your response with the same headers to aid in our evaluation; in addition, please communicate concisely and in a targeted fashion. Boilerplate marketing materials will not generate positive evaluations. 3 P a g e

4 A. Vendor Profile Through this section, you should describe your organization, your experts, your capabilities and your differentiators. 1. Are you a current SBAM Member? If so, for how many years? (If not, affirm your willingness to become an SBAM Member if you are selected for award, and your willingness to maintain your membership in good standing throughout the duration of the program.) 2. Who is your primary point of contact for this RFP? 3. Provide your current overall company product/service offering, strategy and positioning in the Michigan marketplace and within your industry as they relate to cyber-security. 4. Does your business cover the entire state? 5. Indicate the number of years your organization has been in business and provide a detailed description of your organization, including history. 6. Offer an overall view of the company s future strategy and goals. 7. Provide company financial data (to include, but not limited to, public vs. private status, capital investments, annual report). 8. Outline the number and location of employees, including headquarter location. 9. Outline the corporate management team, tenure and experience. 10. Outline the local management team, tenure and experience (if different). 11. Indicate the program manager you intend to assign to the SBAM program. Describe their experience and qualifications. (A resume is not necessary; however, your description should assure us this person will be responsive and knowledgeable.) 12. Outline how you attract talented employees to your organization. 13. Indicate your personnel turnover ratio. 14. Describe your quality management program and provide any reports which are available from the program. Please reply to the following questions. If already answered, you may simply refer us to the section each was addressed. (There is no need to be repetitive.) 15. What is your corporate philosophy toward group purchasing programs? 16. Are you currently administering any similar group purchasing programs? 17. What is the length of time those programs have been in effect? 18. How many employers participate in the programs? 19. What contractual relationships with other associations does your company maintain? Could any be considered as a conflict with SBAM? What solution would you propose to any conflict? 20. What would you describe as your core competencies? 21. What sets your company apart from your competition? 4 P a g e

5 B. Cyber Security Offering 1. Cybersecurity means different things to different businesses. Please describe your product offering, and articulate which of the following topics are included in your solution. Your description should help evaluators understand the benefits to SBAM and SBAM Members by using your solution. Cyber security education, Breach readiness/risk assessment, Systems monitoring, Legal response, Risk transfer/cyber insurance, Incident response. 2. Please describe what your business could offer to SBAM Members. Please address each of the following bullets in your description. What makes your offerings unique? Define your target market and size Provide customer demographics including prominent SICs Provide a typical product mix and usage profile of a generic small (under 20 employee), medium (21-49 employee) and larger ( employee) customer. Please reply to the following questions, if not answered previously: 3. How does the SBAM member base fit into your overall target market strategy? 4. What led your organization to develop your specific target market strategy? 5. What makes your marketing strategy effective? 5 P a g e

6 C. Sales, Marketing and Communication Program Critical to the success of the cyber security program is the planning and implementation of aggressive and comprehensive marketing and communications. Sales 1. Would you be willing to private label your program to SBAM? 2. Describe your company s overall sales strategy. 3. Provide an overview of your sales approach to small and mid-sized businesses. 4. What is the average level of experience of your representatives? 5. Would a specific sales representative be assigned to SBAM? 6. What makes your sales efforts and strategies effective? Marketing 7. Describe the overall organizational marketing strategy. 8. Specify your plans and commitments for the marketing of the program to SBAM member businesses, including any mass marketing, direct mail, telemarketing and direct sales plans. 9. What level of marketing support is your organization willing to commit to the program? 10. What makes your marketing efforts and strategies effective? Communications 11. Suggest the most effective and productive method of communicating with appropriate staff and members on changes (legislative, policy or regulatory) which may have an effect on our program and the small business community at large. Describe what type of resources would be available to develop strategies to deal with those changes. 12. What makes your communication efforts and strategies effective? 6 P a g e

7 D. Service 1. Describe your service operations. How will SBAM Members work with your team for implementation of this program and what service should they expect from you? 2. Outline the vehicles available to SBAM Members to receive service. 3. Do you maintain a toll free 24/7 service line? Is this answered by a person? If you do not offer 24/7 customer service, what are normal customer service business hours? 4. What are the five most common service issues your company faces and how do they get resolved? 5. What is the escalation process utilized to resolve issues? 6. What is the average response time from receipt to resolution? 7. What is unique about your service unit? 8. How do you gauge the effectiveness of your service? E. Reporting and Accounting and Management Information System Features In order to effectively track and market the cybersecurity program, it is necessary for us to acquire specific data regarding usage and demographics of the membership utilizing the program on a regular basis. The following reporting schedule is included in the requirements for vendor selection. Please affirm your company will be able to meet these requirements, describe your information collection approach and describe any concerns. Please elaborate as needed regarding additional information or reporting which shows value to SBAM in advancing this program. Depending upon the type of report requested, all reports must include the customer name and SBAM member number. All reports must be communicated to SBAM electronically and in a specified spreadsheet format. 1. On a monthly basis Usage reports: A rationally-based analysis, including member identification number, customer name, monthly charges (segmented in a mutually agreed upon format). Reason for any terminations of members from the program by vendor. 2. On a quarterly basis Service reports including actual number of calls, percent resolved on first call, average length of open issues, average length of time on hold, average length of call. 3. On an annual basis Marketing plan for following year. Annual competitive review and program enhancement review. F. Pricing 1. By product, option, or on a bundled basis, please provide detailed information on your product and pricing. Please also provide information on how your pricing may be different as a result of SBAM s involvement. 2. Outline any revenue sharing opportunities. 7 P a g e

8 III. QUESTIONS, DEADLINES, ADDITIONAL INFORMATION The SBAM Member Benefits Committee is a combination of small business owners and SBAM staff. They will evaluate responses and guide the selection process through the coming months. Questions Submit all questions in writing via to Scott Lyon at scott.lyon@sbam.org. Potential bidders should consider Scott to be their only point of contact in the solicitation process; they should not make contact with any member of the committee or any other SBAM staff member. Inappropriate communication threatens the integrity of the selection process and may result in disqualification for that bidder. If an interested bidder requests submits a question or requests additional information, the information will be provided to all potential bidders. Evaluation Selection of the finalists and the ultimate vendor will be made based on the organization which can significantly serve our member business with a best value program. The selection will not be based solely on financial considerations. Timeline Solicitation Release 7 July 2017 Questions Due 21 July 2017 Proposals Due 3 August 2017 at 3:00 pm EST Committee Evaluation 10 August 2017 Clarifications Due (If Needed) 17 August 2017 Notice of Award Published 24 August 2017 Program Rollout 1 November 2017 Submission Proposals should be prepared concisely, following the section headings for ease of evaluation. Submit your proposal via to Scott Lyon at scott.lyon@sbam.org. Submission best practices should request confirmation of receipt. 8 P a g e

9 IV. CONCLUSION This RFP requires detailed information and a customized approach; we understand the extended effort and time which is required for an effective response. With a potential customer pool of over 25,000 members, and over 100,000 prospects, we trust the time and energy your organization commits will prove beneficial. We appreciate your participation. Providing the best value for our membership is our primary concern and what makes the official RFP process important. In order to obtain the most comprehensive proposal, SBAM staff and members of the SBAM Member Benefits Committee are able, if required, to sign non-disclosure agreements (NDA) to protect the confidentiality of your offering. If this is required, please Scott Lyon with your request for an NDA. This request should be submitted on or before the deadline for questions to be submitted (21 July 2017). 9 P a g e