RFP for Consultancy to Upgrade from CMMI Maturity Level 3 to CMMI Maturity Level 5 & Prism Certification

Transcription

1 Document Control Sheet Name of the Organisation StockHolding Document Management Services Limited RFP Reference No. SDMS/IT-Infra/ /019 Date of issue of RFP Document 21 st January 2017 Pre-bid Meeting 30 th January 2017 at 4:30 PM at Mahape Office Last Date and Time for submission of 6 th February 2017 on or before 3:00 PM Bids Address for Communication and Manager - IT Submission of Bids StockHolding Document Management Services Ltd SHCIL House, Plot No.51, T.T.C. Industrial Area M.I.D.C., Opp. L&T Infotech, Mahape, Navi Mumbai No of Pages in this RFP Document 06 (SIX) This Bid document is not transferable Page 1 of 6

2 DISCLAIMER The information contained in this Request for Proposal (RFP) document or information provided subsequently to bidder(s) or applicants whether verbally or in documentary form by or on behalf of Stockholding Document Management Services Ltd (SDMS), is provided to the bidder(s) on the terms and conditions set out in this RFP document and all other terms and conditions subject to which such information is provided. This RFP document is not an agreement and is not an offer or invitation by StockHolding Document Management Services Limited to any parties other than the applicants who are qualified to submit the bids ( bidders ). The purpose of this RFP is to provide the bidder(s) with information to assist the formulation of their proposals. This RFP does not claim to contain all the information each bidder may require. Each bidder should conduct its own investigations and analysis and should check the accuracy, reliability and completeness of the information in this RFP and where necessary obtain independent advice. SDMSL makes no representation or warranty and shall incur no liability under any law, statute, rules or regulations as to the accuracy, reliability or completeness of this RFP. SDMSL may in its absolute discretion, but without being under any obligation to do so, update, amend or supplement the information in this RFP. StockHolding Document Management Services Ltdreserves the right to cancel the RFP at any time without penalty and without incurring any financial obligation to the Bidder. Page 2 of 6

3 Stockholding Document Management Services Ltd. CIN U74140MH2006GOI Website SDMS, a company incorporated under the Indian Companies Act 1956 and having its registered office at Plot No. P -51, TTC Industrial Area, Mahape, Navi Mumbai , intends to upgrade from CMMI Maturity Level 3 to CMMI Maturity level 5. Hence, we need consultancy services for taking the organization from Level 3 to Level 5. Sealed offers in prescribed format (Price Bids) for upgrading to CMMI level 5 are invited directly from the reputed organizations. Prices shall include Excise Duty, Sales Tax, VAT, WCT, Service Tax, Octroi & road permit and other taxes, Transit Insurance and freight etc. The prices quoted by the bidder shall remain firm during the entire period of the Contract and shall not be subject to variation on any account. QUALIFYING / ELIGIBILITY CRITERIA The firm / company shall fulfill the following criteria: 1. The Firm should not have been debarred / blacklisted by any government, Semi Govt., P.S.U, Board/ Corporation or any Autonomous Body in last 1 year. 2. The firm /company should be the original Manufacturers or should be the authorized dealers/agent of the company. The following documents should be contained, in Bid submission. i) Covering letter stating the Bid Title, Bidders name, Address. ii) PAN card photocopy iii) Bid to meet the requirement and specifications as per annexure I& II, with one set of Product Brochure with precise technical information about particular product capabilities and features as per tender. iv) Further, the rates shall be fixed and shall remain unchanged, for a period of one year. Page 3 of 6

4 EVALUATION PROCESS: The bids shall be scrutinized by the committee, constituted for the purpose with right to inspection of manufacturing unit by the Committee. If the Bidders fulfill the Eligibility criteria, SDMS may call the bidder for presentation to understand the technical capability or skill to manufacture, supply and install the required equipment. The decision of the SDMS in this regard shall be final and binding. On conclusion, SDMS shall raise a Purchase Order with the successful bidder detailing the commercials, period and terms & conditions. Requirements & Specifications: Points on PRISM 1. The auditors should be PCI Qualified Security Assessor (QSA) and a licensed CPA firm, registered with the PCAOB, employing security specialists to conduct internal control audits, penetration testing and other information security services. 2. Should be able to report on controls placed in operation in accordance with the recognized American Institute of Certified Public Accountants (AICPA) auditing standard for Statements on Standards for Attestation Engagements No. 16 (SSAE 16) Type I Service Organization Control Reports (SOC). 3. Should be able to Use online /offline (web-portal) to assist in choosing control objectives for the audit and collecting documentation for review. 4. Should be able to deliver the following 5. Assurance reports on SSAE16 /SOC 1 Type 6. Assurance reports on ISAE Recommendation & Registration for PRISM Privacy + 8. The SSAE16 report should be as per the COSO(Committee of Sponsoring Organizations) and should cover the five COSO components as follows: 9. Control Environment 10. Risk Assessment 11. Information & Communication 12. Monitoring 13. Existing Control Activities 14. Ability to assess the 16 Control objectives across the five principles of effective control. Page 4 of 6

5 15. The auditing firm should have the ability for assessing the following domains if needed in the scope/ future upgrades. 16. SOC 2, PCI DSS 3.2, CFPB, DBA, ISO 27001, HIPAA/HITECH, FISMA Security Controls and other specialized frameworks. Points for CMMI ML5 1. The organization have done consulting / appraisals for organization with domain scope in DMS and allied services. 2. The organization should have the ability to deal with the newly released Learning Centered instructional methods for CMMI models. 3. The organization should have ability to deliver trainings for statistical methods through authorized sources/ experts in the industry to align with the requirements of high maturity for the model. 4. Should be able to integrate the process for PRISM Privacy + along with CMMI framework and should have adequate experience in both. 5. Should be able to support multiple domains including Agile, Services & Development as a part of the scope for SCAMPI appraisals. 6. Should have Lead Appraiser certified to deliver High Maturity Appraisals. Consultancy required for: Stabilizing & sustaining of CMMI Level 3 process set Enabling adaptable process deployment Process trainings and workshops Conducting Monthly QC Audits Enabling process mapping for CMMI L4 & L5 Launching of Statistical Management Module Deployment of L4 & L5 processes. Data mining & Upgrading of Organizational Processknowledge base (Prediction Modelling) Readiness Review (Pre-Assessment) Appraisal Registration, High Maturity Training SCAMPI Class A for ML5 Page 5 of 6

6 Terms and Conditions: MoU & NDA: The bidder shall sign MoU & NDA with SHCIL Projects Limited within 15 working days from the date of Purchase Order. Payment Terms: Within 30 days from the date of submission of original invoice. Page 6 of 6