Department of Procurement Services - City of Chicago. July 30, Addendum No. 2 REQUEST FOR PROPOSAL ( RFP ) For

Transcription

1 Department of Procurement Services - City of Chicago July 30, 2018 Addendum No. 2 To REQUEST FOR PROPOSAL ( RFP ) For INFORMATION TECHNOLOGY ASSESSMENT AND STRATEGIC PLAN Specification No For which Proposals are scheduled to be received no later than 4:00 PM., Central Time on August 16, 2018 (pursuant to the Request for Proposal, Addendum 1 advertised July 23, 2018) in the Department of Procurement Services, Bid & Bond Room (Room 103 of City Hall). The following revisions/changes will be incorporated in the above referenced RFP document. All other provisions and requirements as originally set forth remain in full force and are binding. Respondent must acknowledge receipt of this Addendum No. 2 in its Proposal AND should complete and return the attached Acknowledgment by to: joseph.chan@cityofchicago.org Attn: Joseph Chan, Sr. Procurement Specialist This document contains: I. Answers to 104 Questions Submitted for Clarification of the RFP; and II. Addendum Receipt Acknowledgment. The information contained in this Addendum No. 2 is incorporated by reference into the original Request for Proposal (RFP) issued on June 11,

2 July 30, 2018 ADDENDUM NO. 2 FOR REQUEST FOR PROPOSAL (RFP) FOR INFORMATION TECHNOLOGY ASSESSMENT AND STRATEGIC PLAN SPECIFICATION NO For which proposals are due in the Department of Procurement Services, Bid & Bond Room, Room 103, City Hall, 121 N. LaSalle Street, Chicago, Illinois 60602, at 4:00 p.m., Central Time August 16, The following revisions/changes will be incorporated in the above-referenced Request for Proposal. other provisions and requirements as originally set forth remain in full force and are binding. All RESPONDENT SHOULD ACKNOWLEDGE RECEIPT OF THIS ADDENDUM IN THE COVER LETTER SUBMITTED WITH YOUR PROPOSAL. 2

3 SECTION I: Answers to 104 Questions Submitted for Clarification of the RFP Question 1: For a project of this magnitude, the Respondent suggest a longer timeline for the Assessment and the Strategic Plan. How firm is the City on the delivery dates? Answer: The project should be completed within six months or less from contract award date. Question 2: Will the City have resources committed to facilitate and manage scheduling of City resources and meeting locations? Answer: Yes. Question 3: Is the application portfolio available for review? Question 4: How big (no. of employees) are the departments to be assessed including IT? Answer: As noted in the Background section of the General Invitation to this RFP, the City of Chicago has over 30,000 employees. The Department of Innovation & Technology has over 100 staff, and Number of staff with a part-time or full-time IT-related role in departments is approximately 70. As also described in the Background section of the General Invitation to this RFP, each department has a primary and a backup IT Service Coordinator who perform some duties related to IT within their department. Larger departments may have a few staff dedicated to IT-related tasks. Question 5: Are all technology costs included in the IT budget? Can the total technology cost for the City be obtained? Answer: IT costs are not solely in the Department of Innovation & Technology's budget. Yes, this activity is part of the Assessment. Question 6: Has the City done previous IT Assessments or Plans? If so, are they available for review? Answer: The City released a Tech Plan in 2013, which may be found at techplan.cityofchicago.org. Other documents may be made available to the Selected Respondent. Question 7: Does the assessment include outside services? If so, can the Respondent expect their cooperation? Answer: City staff will be the primary points of contact for this engagement. All activities will be coordinated through City staff. Question 8: What are the major technology projects planned for the next 24 months? Question 9: Has the City identified benchmark cities? If so, is comparison data available for review now? 3

4 Answer: This activity is part of the Assessment. Question 10: How does the Assessment and Strategic Plan align to the Information Technology Infrastructure Services RFP currently being considered? Answer: The goal of the IT Infrastructure Services RFP is to enter into a new support contract for the services specified in that solicitation only and is an open procurement. The resultant plan from this RFP will highlight key strategies and provide a prioritized roadmap of initiatives for approximately the next three years. This latter plan will be a critical input to support the City's annual planning internally and with its contractors. Question 11: Is there any data or information on existing inventory, software/hardware, ticketing information that could made available? Question 12: Will participation in this proposal preclude the Selected Respondent from participating in any other City of Chicago Information Technology projects? Answer: The City will evaluate potential conflicts of interest, if any, on a case by case basis. The RFP requires Respondents to disclose conflicts of interest (Section V(B)(13)) and discusses how the City would evaluate those conflicts (Section VI(B)(9)). Respondents should also review the rest of Section , Conflicts of Interest, in Exhibit 9, City of Chicago Sample Professional Services Agreement in the RFP, for more information about conflicts of interest which states in part: If Contractor or any subcontractors ("Contracting Parties") assist the City in determining the advisability or feasibility of a project or in recommending, researching, preparing, drafting or issuing a request for proposals, bid specifications for a project, or other procurement solicitation document, the Contracting Parties must not participate, directly or indirectly, as a prime, subcontractor, subconsultant or joint venturer in that project or in the preparation of a proposal or bid for that project during the term of this Contract or afterwards. The Contracting Parties may, however, assist the City in reviewing the proposals or bids for the project if none of the Contracting Parties have a relationship with the persons or entities that submitted the proposals or bids for that project. Question 13: Does the City have an assigned budget for this project? If so, is it willing to share this information as it will assist us in determining the on-site vs. remote resources required for the proposal. Answer: The City has a budget for this project. No further information is available. Question 14: Does the City have a desired completion date for the assessment and associated strategic plan? Answer: The project should be completed within six months or less from contract award date. Question 15: Is the scope of the strategic plan to include departments applications and services that are supported by their own technical staff or just services that Department of Innovation and Technology (DoIT) provides? Answer: As noted in Exhibit 1, Scope of Services, the Scope includes all departments. Question 16: Approximately, how many stakeholders interviews would be necessary determining departments requirements? 4

5 Answer: The City has approximately 30 departments, which may be identified by visiting Some information has been gathered internally already to support the assessment/plan. The Respondent should describe their approach to collecting both qualitative and quantitative information to support the Scope of Services as defined in this RFP. Question 17: Can the Respondent use online surveys as an additional channel for data collection amongst stakeholders such as employees and/or the public? Answer: Yes. Existing City tools such chideas.org or SurveyMonkey may be used. Question 18: When determining short term and long-term risks, is the City requesting a security assessment/audit which may include elements such as penetration testing, governance review (policies, procedures, practices), social engineering, etc. as a part of this engagement? Answer: Yes, include pricing separately for these items. Question 19: Please clarify discrepancy between Section IV, B Proposals must be received no later than 4 pm Central on TBD and Section IV, D Procurement Timetable indicating proposals due July 27, Answer: This is a typographical error. The correct verbiage is, To be assured of consideration, Proposals must be received by the City of Chicago in the City s Bid & Bond Room (Room 103, City Hall) no later than 4:00 P.M. Central Time on July 27, The Bid & Bond Room can be reached at telephone number Refer to Addendum No. 1 which postponed the Proposal Due Date from July 27, 2018 to August 16, Question 20: Section IV, A, 2 Pre-Proposal Conference. Will there be a dial-in option for the nonmandatory pre-proposal conference? Answer: No. Question 21: Does the City currently have any specific challenges or issues that the City is looking to get addressed through this assessment? Answer: The goal of the Assessment is to identify and measure risks and opportunities and assist with prioritizing how these are addressed in the going-forward plan. Question 22: Does the City currently have an IT strategy and Business strategy that can be reviewed (during the engagement) while defining the refreshed strategies? Question 23: How well is the City s current-state (process, operating model, etc.) documented? Question 24: While the RFP asks for a strategy within 6 months of the assessment, if the Respondent were to do this faster, what is the appetite for a shorter timeframe, and the ability to participate in a shorter duration? 5

6 Answer: The project should be completed within six months or less from contract award date. Question 25: What are the unique entities/agencies/departments in scope for the strategy? Approximately how many people in each entity/agency/department should the Respondent plan on interviewing for this assessment? Answer: The City has approximately 30 departments, which may be identified by visiting Some information has been gathered internally already to support the assessment/plan. The Respondent should describe their approach to collecting both qualitative and quantitative information to support the Scope of Services as defined in this RFP. Question 26: The RFP calls for a 25% participation for MBE s and a 5% participation of WMBE vendors. If the Selected Respondent were to secure the services of a WMBE sub-contractor, and they were provided with at least 30% of the overall contract would that satisfy the goal requirements or must a prime vendor have 2 distinct and separate sub-contractors (by designation) in order to achieve the goal and be considered compliant? Answer: The MBE/WBE participation goals are separate goals. If a firm is certified by the City of Chicago and/or Cook County as both an MBE and WBE in a particular area of specialty, that firm can receive credit towards either the MBE goal or WBE goal, not both. The Respondent must identify MBE/WBE firms proposed in order to achieve the separate MBE/WBE goals to be considered compliant. Question 27: Is the City looking for a strategy for the City (i.e. transforming the city capabilities), or an IT strategy to enable the City? Answer: The City seeks an IT strategy that aligns with policy and business strategies and identifies a prioritized roadmap of initiatives. These initiatives may also transform City capabilities but should be outcome-driven. Question 28: Does each department have an IT contact/leader or is the technology agenda set centrally? Answer: Enterprise initiatives are set centrally by DoIT. A citywide technology strategy group, comprised of all departments, and led by the CIO and Budget Director, will be actively engaged in reviewing the results of the Assessment and working with the Selected Respondent to build the Plan. Question 29: When was the last time an IT strategy was created for the City of Chicago? Answer: The City released a Tech Plan in 2013, which may be found at techplan.cityofchicago.org Question 30: How many applications does the City currently have within the landscape? Answer: Approximately 500 applications, interfaces, and services. Question 31: How well are the City s current business capabilities documented? Answer: The City has approximately 30 departments. It is likely that the departments will have varying degrees of their business capabilities documented. Question 32: Does the City have an up to date CMDB or IT asset repository? If yes, how well are the assets mapped to business capabilities? 6

7 Answer: Yes. Refer to Answer to Question 31. Question 33: Are there any specific deficiencies or remediation programs currently in place the Respondent need to know about? Answer: No. Question 34: Can the City share the current infrastructure architecture, including the technical stack for the existing infra/network? Question 35: Can the City provide an example of the depth into which you would like the technical assessment to go? E.g. to meet business availability/resiliency criteria vs. evaluation of age of network routers and switches and impact to performance etc. Answer: The depth of the technical assessment should meet the scope and deliverable requirements as outlined in the Exhibit 1 Scope of Services section of the RFP. Question 36: What level of detail does the City currently capture costs in? (e.g. is there a service chargeback model?) Answer: A chargeback model is not employed. Question 37: Exhibit 10 of the RFP indicates that a bid incentive of up to 4% of the contract base bid can be applied to utilization of BEPD subcontractors and includes an affidavit for BIDDER'S COMMITMENT TO UTTLTZE BUSTNESS ENTERPRTSES OWNED BY PEOPLE W TH DISABILITIES (BEPD). Guidance provided by the GUIDE TO BID INCENTIVES AND PROGRAMS published by the Department of Procurement Services at 17.pdf, indicates The Bidder must submit BEPD certification letters and an affidavit affirming the status of itself and/or its subcontractors as BEPDs and committing to the proposed percentages of work to be performed by BEPDs. The RFP does not instruct Respondents to submit BEPD certification letters. The affidavit itself requires the Name of Bidder but does not require naming the BEPD subcontractor in cases where BEPD subcontractor credit is to be claimed. In order to ensure the integrity of BEPD program provisions under this contract, and consistency with the Guide to Bind Incentives and Programs, we request that an addendum be published that requires BEPD certification letters and name(s) of BEPD subcontractors in order to claim the BEPD bid incentive. Answer: The Respondent should submit the name of the BEPD subcontractor and the certification letter to qualify for the 4% bid incentive credit. Question 38: While the RFP describes the BEPD bid incentive, MCC , referenced in the RFP and available at further indicates As part of the contract close-out procedure, if the chief procurement officer determines that the contractor has successfully met his or her B.E.P.D. utilization goals either as a prime contractor or with subcontractors, the chief procurement officer shall issue an earned credit certificate that evidences the amount of earned credits allocated to the contractor. The contractor may apply the earned credits as the bid incentive for any future contract bid. We request that an addendum be published that makes prospective Respondents aware of the BEPD earned credit incentive, in order to advance the City s aims for inclusion of BEPD firms in this opportunity. Additionally, can you provide guidance on procedures Prime contractors utilizing BEPD 7

8 subcontractors should follow in order to claim these earned credits for future bids? Answer: Refer to the following link with the current MCC : Question 39: Can the City tell the Respondent if the City has a budget for this project? Answer: See the Answer to Question 13. Question 40: Will the incumbent vendor Computer Aid Inc., of the existing City of Chicago contract 26835, Consolidated Application Support for Enterprise Applications be precluded from bidding in this RFP Specification as they are providing services in the City of Chicago since 2013 and have "unfair competitive advantage" as they will have of lot of internal information that is not available publicly? Answer: The City does not anticipate Computer Aid, Inc. participation in this RFP. Question 41: Has the City previously conducted a similar IT assessment? If yes, can the City provide information about when the study took place and any other information the City think would be useful. Question 42: Should the Selected Respondent reach out to sister agencies in order to see if they have any areas where they would like to coordinate with the City? Examples of coordination could be the use of the same technology or creating a common web platform for specific uses such as programs for children. Answer: Coordination with Sister Agencies should be managed by City points of contact. Question 43: Can the Respondent have a Word version of the forms within the PDF RFP? There is a fair amount of client forms the Respondent need to use and it will be helpful to have the Word file. Answer: No, use the pdf versions. Question 44: Is there a particular weighting of the decision criteria or will all of the outlined areas be considered equally? Answer: Refer to Section VI. Evaluating Proposals and Section VII. Selection Process in the RFP. The City s Evaluation Committee (EC) will adhere to the evaluation phases identified in the RFP and evaluate each proposal received utilizing the published Evaluation Criteria in the RFP. Specific weight and scoring values will be determined by the EC. Question 45: Does the City value prior experience in the commercial segment, federal government segment or state and local government equally or does the City prefer one over the other? Answer: Refer to Section V.B.3.b Company References / Client Profile Information (See Form in Exhibit 4) in the RFP. Respondents must provide at least three (3) references preferably from a municipality or government agency related to a contract of similar scope and magnitude as described in this RFP. The City seeks to access Respondent and Team experience evaluating and assessing public sector IT infrastructure, systems, and resources, developing strategic technology plans, and technical expertise related to IT management and operations. Respondents should also have experience in the primary government service domains: health and human services, public safety, infrastructure, and finance and administration. 8

9 Question 46: How important will it be to provide local staff? Should and travel costs be included in rates or outlined separately? Answer: Refer to Section V.B.3 Professional Qualifications and Specialized Experience of Respondent and Team Members Committed to this Project and Section V.B.4 Professional Qualifications, Specialized Experience and Local Availability of Key Personnel who will be dedicated to the Services described in this RFP for details. The Evaluation Committee will consider the quality, comprehensiveness and adequacy of the proposed plan for implementing and managing the Information Technology Assessment and Strategic Plan including the staffing plan, local availability and commitment of personnel who will manage and oversee the City of Chicago account. Question 47: Does the City have any specific goals for cost savings or particular areas of risk reduction the City would like to focus on? Answer: The City values the Respondents experience/expertise related to this initiative and welcomes any insight, lessons learned, and best practices they can provide related to these areas. Question 48: What is the timeline for communicating RFP review status and announcing the Selected Respondent? Is there an anticipated project start date? Answer: RFP status may be found on Bid Tracker: gencyid=city. The selection process timeline will depend upon the outcome of proposal evaluation and contract negotiations with Selected Respondent. Project start date will occur shortly after the contract is awarded. Question 49: Will the City provide a copy of the current IT strategy to participants of the RFP process? Who is the owner of the future strategy? Answer: A citywide technology strategy group, comprised of all departments, and led by the CIO and Budget Director, will be actively engaged in reviewing the results of the Assessment and working with the Selected Respondent to build and maintain the Plan. The overall plan will be managed by the Department of Innovation & Technology; some agencies will be responsible for either implementing, or participating in, certain initiatives. Question 50: Can the City provide additional clarification regarding the scope of the assessment related to businesses and residents/visitors? Answer: Chicago's residents, businesses, and visitors are the audiences or users of many of the City's digital products and services. As a result, input from these audiences should be considered in developing the Plan. Question 51: The RFP requests that Respondent provide financial statements. Consistent with the practices of other large, privately held companies our policy prohibits the release of our financial information. Would the City consider other evidence of financial stability (Such a letter of financial strength, bank reference or Dun & Bradstreet report)? Answer: Refer to Section V.B.9 Financial Statements of the RFP for details. Question 52: Will the City hold financial information required by the RFP in confidence, and withhold from public disclosure? Answer: Refer to Section IV.E. Transparency Website: Trade Secrets for details. The financial information may be excluded in the redacted copy. 9

10 Question 53: During the Pre-Proposal Q&A session, it was confirmed that 25% MBE and 5% WBE must be used. What is the expect participation requirement for BEPD? Answer: Refer to Exhibit 10, Local and Other Preferences: Adjustments to Cost Proposal and Affidavits. Section D. Commitment Regarding Business Enterprise Owned By People with Disabilities (BEPD) in the RFP for more details. Question 54: If the primary is not a MBE/WBE, can a single, secondary company fill both the MBE and WBE requirements? Answer: See the Answer to Question 26. Question 55: There is a requirement that all work papers, including interview notes, are required to be turned in as a part of the program. Typically, interviews are conducted in confidence allowing the interviewee to provide open and honest feedback. Will the City consider allowing excepting interview notes from the required materials to be turned into the City? Answer: Interviews conducted in confidence may be anonymized. Question 56: Would the City be willing to share the RFP in.doc format? Answer: No. Question 57: Can the City please provide an estimated number of applications to be included in the review of application portfolio? Answer: Approximately 500 applications, interfaces, and services. Question 58: The letter to vendor defines the Mentor-Protégé program. In the second paragraph of the letter the following statement is made: The mentor and protégé must enter into a formal, written agreement that must be approved by the Chief Procurement Officer and that describes how the mentorprotégé relationship will develop the capacity of the MBE/WBE protégé form to become self-sufficient, competitive, and profitable. Can you define the timeframe that the formal agreement must be entered into, as well as when that written agreement must be approved by the Chief Procurement Office? Answer: Refer to the mentor-protégé link: df Question 59: Will the City assist with scheduling of interviews? If so, can the interviews be scheduled consecutively during a specific period of time? Answer: Yes, the City will assist with scheduling of interviews. Question 60: What is the City s estimated number of interviews for completing the assessment? Answer: The City has approximately 30 departments, which may be identified by visiting Some information has been gathered internally already to support the assessment/plan. The Selected Respondent should describe their approach to collecting both qualitative and quantitative information to support the Scope of Services as defined in this RFP 10

11 Question 61: Does the City have any other IT assessment reports that they would be able to share? Question 62: Does the City have an existing IT Strategic Plan that they would be able to share? Question 63: Can the City provide any information about its current technology infrastructure, such as architecture, network components, etc.? Question 64: Are there any critical events, such as contract renewals or anticipated RFPs, that will require us to complete a portion of the assessment before the expected due date? Question 65: Will the City allow modifications to the contract issued with the RFP? Answer: The City of Chicago will assess the degree to which Respondent can accept the City s terms and conditions including in the Scope of Services and in the Sample Professional Services Agreement in Exhibit 9 of the RFP. A Respondent that takes material objections to the City s terms and conditions may be found to be non-responsive and its Proposal may be rejected. Question 66: Does the City desire a smart cities implementation roadmap as part of the strategic plan? Answer: The plan should include strategies and initiatives that enable the City to continue to use data and technology to achieve meaningful outcomes, and align with sustainability, resiliency and other "smart city" goals. Question 67: Does the City have a budget for the IT Assessment and Strategic Planning project that can be shared? If so, please provide. Answer: See the Answer to Question 13. Question 68: Does the City currently have a dedicated Project Management Office (PMO) resource? Answer: The City's Department of Innovation & Technology has a PMO. Question 69: Is the City IT Department responsible for managing/administering any non-city Department IT resources? Answer: The City's Department of Innovation and Technology manages City IT resources and awarded IT contracts. Question 70: Does the City desire a separate assessment of the existing cybersecurity function/environment or envision this being encompassed into the overall IT Risk Assessment component of the deliverable? Answer: This should be included in the overall IT Risk Assessment component. 11

12 Question 71: Does the IT plan include the airport operations? Answer: This is a citywide plan and should cover all City operations. Question 72: Can you provide FTE information for the IT staff in other departments, including contractors? Question 73: Will the City please clarify the submission format requirements for the proposal? Page 6 states: and a separate redacted copy of the entire proposal or submission, with pricing/cost proposal completed in Excel, all on a USB drive or CD-ROM. Does this indicate that the redacted copy should be on its own USB, and the pricing/cost proposal should be on its own USB as well? Or does the City want these two items on the same USB? Answer: The redacted proposal and the pricing/cost proposal should be on separate USB drive or CD-ROM. Question 74: For clarification, does the City require 6 separate USBs containing electronic copies of the proposal? Answer: Yes, refer to Section IV.B.4 of the RFP. Question 75: Are Respondents to create their own pricing excel files based on Exhibit 2- Cost Proposal, or will the City provide its own excel file? Should vendors provide both the Excel and Exhibit 2 as it appears in the RFP, i.e., as a PDF? Answer: Respondent should provide the Cost Proposal in the format and content as outlined in the RFP. The Respondent may provide additional cost information if necessary. Question 76: Is the IT organization centralized or decentralized? Answer: Primarily centralized with the exception of public safety IT. Some departments manage their line of business specific technologies. Question 77: Has a security control framework been adopted? If yes, which one? Answer: To ensure that best-practices are woven into all elements of the City s technology infrastructure, the Information Security and Technology policy set is built off of the two primary industry standard frameworks; National Institute of Standards and Technology (NIST) and International Organization for Standardization (ISO) Furthermore, to satisfy multiple external legal and compliance requirements, such as the Payment Card Industry (PCI) standards, the federal Health Insurance Portability and Accountability Act (HIPAA), Criminal Justice Information Services (CJIS), and the State of Illinois Local Records Act, specific requirements have been included. Question 78: When was the last project of this nature performed? Answer: The City released a Tech Plan in 2013, which may be found at techplan.cityofchicago.org. Other documents may be made available to the Selected Respondent. Question 79: Are there documented policies, procedures, standards, and guidelines in place? If so, how 12

13 many? Answer: The City's Information Security and Technology Policies are available online at olicy_set_ver_rc_05.pdf. Question 80: Are detailed configuration analyses in scope (e.g., router/switch, firewall, server, VPN, Active Directory)? a. If so, what is the number of firewalls? b. Are the firewalls in HA mode? c. What is the approximate number of routers/switches? d. What are the types/brands of devices? e. How many VPN appliances? f. How many operating systems do the City s servers maintain, (e.g., Windows 2012, Windows 2016, Linux)? Answer: Standards information may be found online at Other information will be made available to the Selected Respondent. Question 81: Approximately how many staff/key personnel will require interview for this engagement? Answer: The City has approximately 30 departments, which may be identified by visiting Some information has been gathered internally already to support the assessment/plan. The Selected Respondent should describe their approach to collecting both qualitative and quantitative information to support the Scope of Services as defined in this RFP. Question 82: Approximately how many enterprise and departmental applications are included in the City s application portfolio? Answer: Approximately 500 applications, interfaces, and services. Question 83: Is penetration testing of applications in scope for this assessment? a. If so, how many applications? b. Of these, how many are web applications? Answer: Yes, include pricing separately for these services. Question 84: For the IT Risk Assessment listed on RFP page 25, is the City referring to technical security testing, e.g., internal and external network penetration testing, or is the deliverable for this project an IT risk matrix evaluating people, process, and technology risk? Answer: Include pricing separately for technical security services. Question 85: If the former, are an internal network vulnerability assessment and penetration testing in scope? External network? a. If so, what is the approximate number of active IPs for each network? Answer: Include pricing separately for technical security services. Question 86: Can the City share its budget for this engagement? 13

14 Answer: See the Answer to Question 13. Question 87: If a Respondent is part of the assessment team does that preclude them from bidding in the future if an RFP comes out based on the assessment? Answer: See the Answer to Question 12. Question 88: Is there a current list of technology projects that have been approved but not yet begun? Question 89: To help scope the effort, can total number of employees be provided for each department? Answer: A list of current employees may be found online at Finance/Current-Employee-Names-Salaries-and-Position-Title/xzkq-xp2w Question 90: Is the 2% City-based Business bid preference applicable for this RFP? Answer: Yes, if Respondent meets the eligibility requirements. Refer to Exhibit 10, Local and Other Preferences: Adjustment to the Cost Proposal, A. City-based Business (Chicago Business Preference) for details. Question 91: Can the City explain the factors that require the project to be completed within 3 months of contract execution? Answer: The project should be completed within six months or less from contract award date. The City desires to move forward with modern service delivery methods and address future IT requirements in an expeditious, efficient and cost-effective manner. Question 92: Is there a budget for this project, and if so can that budget be shared with Respondent? Answer: See the Answer to Question 13. Question 93: Has the City conducted a prior IT Strategic Planning effort, and can that be provided to Respondent? Question 94: Can the City please confirm our understanding of the proposal production requirements: 1 original copy, 6 electronic copies, pricing proposal submitted on a separate CD/Thumb-drive (with a redacted copy on the same thumb drive, if necessary). Answer: Refer to Section IV.B.4 of the RFP. Question 95: If you are a Minority subcontractor on this project, will you be excluded from participating in resulting projects in the future? Answer: See the Answer to Question 12. Question 96: Has the City finalized the budget for the initiative? If so, what is the pricing maximum? 14

15 Answer: See the Answer to Question 13. Question 97: Will the Respondent be precluded from bidding on additional work (i.e. implementation)? Answer: See the Answer to Question 12. Question 98: Will the City have any resources dedicated to support this project (i.e. project management, admin support, etc.)? Answer: Yes. Question 99: Would the City be willing to extend the submission deadline to August 10th to allow additional time to help solidify protégé partner agreements? Answer: See the Answer to Question 19. Question 100: What, if any, work opportunities will the Selected Respondent be precluded from bidding on / performing as a result of being awarded this contract to determine an Assessment and Strategic Plan? Answer: See the Answer to Question 12. Question 101: The Assessment phase describes Business Strategy as one of the areas to be included (RFP page 24). Is the scope of this task to develop a business strategy solely for DoIT or to include technology-related endeavors across all departments? Have any prior business strategies been developed for DoIT? If so, can these be shared with the Respondent? Answer: Business strategy refers to the City's organizational strategies not IT strategies. Question 102: Has the budget for this work already been allocated and approved? If not, what process will be used and what impact on timing should Respondent consider? Answer: See the Answer to Question 13. Question 103: Are penetration testing services part of the Assessment work in RFP? Answer: Yes, include pricing separately for technical security services. Question 104: Is it possible to respond to targeted sections of the RFP that aligns with our competencies compared to the entire RFP? Answer: It is the City s expectation that Respondent s proposal will be responsive and encompass all components of the RFP. CITY OF CHICAGO DEPARTMENT OF PROCUREMENT SERVICES JAMIE L. RHEE CHIEF PROCUREMENT OFFICER 15

16 CITY OF CHICAGO - DEPARTMENT OF PROCUREMENT SERVICES July 30, 2018 Addendum No. 2 to REQUEST FOR PROPOSAL ( RFP ) For INFORMATION TECHNOLOGY ASSESSMENT AND STRATEGIC PLAN SPECIFICATION NO Consisting of Sections I II including this Acknowledgment. II. ADDENDUM RECEIPT ACKNOWLEDGMENT I hereby acknowledge receipt of Addendum No. 2 to the RFP named above and further state that I am authorized to execute this Acknowledgment on behalf of the company listed below. Signature of Authorized Individual Title Name of Authorized Individual (Type or Print) Company Name Business Telephone Number Complete and Return this Acknowledgment by to: joseph.chan@cityofchicago.org Attn: Joseph Chan, Sr. Procurement Specialist 16