MINNESOTA DEPARTMENT OF HUMAN SERVICES REQUEST FOR INFORMATION FOR COMPLIANCE ANALYSIS IMPLEMENTATION

Transcription

1 MINNESOTA DEPARTMENT OF HUMAN SERVICES REQUEST FOR INFORMATION FOR COMPLIANCE ANALYSIS IMPLEMENTATION INTRODUCTION SECTION 1. PURPOSE The Minnesta Department f Human Services (hereinafter Department ) is issuing this Request fr Infrmatin (RFI) related t the need t implement a cmpliance analysis slutin that will accmplish the fllwing gals: Strengthen access cntrls Allw fr predictive analysis Capture and secure data Transfrm and centralize event lgs frm dissimilar and islated systems Allw fr faster analysis f event lg management T accmplish the previusly mentined gals, the department is lking t utilize several tls that it has already purchased, Oracle Data Integratr (ODI), Oracle Audit Vault, and Oracle Business Intelligence Enterprise Editin (OBIEE). The use f Oracle Data Integratr will functin t nrmalize event lgs frm a large variety f data surces, bth internal and external. After nrmalizing event lgs int a data mart, Oracle Business Intelligence will be utilized t develp reprts that will fcus n user behavir and activity. Fr example, we need the system t tell us: When an emplyee accessed the netwrk? What device was utilized t gain access? What server(s) were accessed? And what data was accessed? (This includes direct database access by system administratrs) The Department has a variety f data surces that the cmpliance analysis tl will access, thus the prpsed slutin must be flexible. In additin t the use f ODI and OBIEE fr this prject, the department will als require the functinality f Oracle Audit Vault t develp a surce f immutable infrmatin. This Request fr Infrmatin (RFI) regarding cmpliance analysis will assist the Department f Human Services in leveraging industry experiences and use industry best practices t define resurce requirements fr this prject. Respnses t this RFI will be used t familiarize the Department with the available slutins and firms that are cmpetent t prvide the prducts and services utlined in Attachment A Scpe f Services. 1

2 SECTION 2. CONDITIONS OF RFI The issuance f this RFI cnstitutes exclusively an invitatin t submit infrmatin t the Department. Any infrmatin submitted as prvided herein shall nt be cnstrued as an fficial and custmary Request fr Prpsal, Request fr Bid, r an ffer fr a future binding cntract. Nthing in this RFI shuld be cnstrued t imply an bligatin f any kind by the Department. At its sle and abslute discretin, the Department may decide t further pursue ne r mre slutins by methds including, but nt limited t: slicit further infrmatin frm ne r mre ptential vendrs; issue a Request fr Prpsals r Request fr Bid as the Department shall deem apprpriate; slicit infrmatin frm nnrespnding vendrs with r withut reference t this RFI; r take n actin at all. The Department reserves the right t evaluate, use and determine, in its sle and abslute discretin, whether any aspect f the Respnder s infrmatin satisfies the purpse and intent f the RFI. Under n circumstances shall the Department have any liability t any Respndent fr any cst incurred in cnnectin with this RFI r therwise. The Department is nt bligated t respnd t any Respndent s infrmatin nr is it legally bund in any manner whatsever by the submissin f infrmatin. The Department may upn request make all infrmatin in the respnses available t the public shrtly after the deadline fr submitting respnses. A respnder shuld nt submit infrmatin that it des nt want t becme public. Respnder agrees as a cnditin f submitting infrmatin that the Department will nt be held liable r accuntable fr any lss r damage that may result frm the Department s public disclsure f infrmatin cntained in a respnse. The Department reserves the right t accept r reject late respnses at its sle discretin. The Department reserves the right t cancel r amend this RFI at any time, either in part r in its entirety, and will ntify all knwn RFI Respnders accrdingly. The Department further reserves the right t extend the RFI due date. If a Respnder needs an extensin f time t prepare their submissin, a written r e mail request shuld be submitted n later than seven (7) days prir t the due date f this RFI and addressed t cntact infrmatin in Sectin 5. The Department reserves the right t extend the submissin deadline at the sle discretin f the Department and nt at the mere request f the Respnder. The Respnder will be ntified f the Department s decisin by letter r e mail. SECTION 3. NOTICE OF LIMITATIONS ON AVAILABLE RESOURCES As a cnsequence f the current ecnmic envirnment in Minnesta and the resulting fiscal/budgetary cnstraints, limits n resurces include: While n funds have been apprpriated r cmmitted fr the Prject, we anticipate that initial funding wuld be limited t $500,000. It is unknwn if r when any funds will be available. 2

3 Limitatins n resurces fr additinal staffing, if any, required fr utilizatin, peratin r maintenance f any technlgy that may be deplyed by the Department. SECTION 4. INFORMATION REQUESTED The Respnder shuld respnd t the infrmatin requested in Attachment A Scpe f Services. The Department may make all infrmatin in the respnses available t the public shrtly after the deadline fr submitting respnses. A respnder shuld nt submit infrmatin that it des nt want t becme public. SECTION 5. RFI SUBMISSION INSTRUCTIONS 5.1 KEY DATES KEY ACTIVITY DEADLINE Request fr Infrmatin Issued April 4, 2011 Written Questins Due April 18, 2011 Agency Respnses by May 17, 2011 Respnses Due June 3, 2011 Presentatins by Respnders / Dems (if applicable) After June 10, 2011 (tentative) 5.2 PROPOSAL FORMAT Respnses t this RFI must cnsist f all f the fllwing cmpnents: Descriptin f the Respnding Organizatin: Brief histry f the rganizatin Experience and examples f past wrk relevant t the scpe f wrk described in this RFI; describe the rganizatin s experience with similar cmplex data structures, including experience with ther large rganizatins, especially including ther states r majr lcal gvernments Skill and experience f the staff that wuld be invlved in implementing such a prject, either during the develpment phase r n an n ging basis Identificatin f a Prject Manager with experience in planning and executin f the prpsed services Prject gals and bjectives: Define and discuss the gals and bjectives f the Prject. Prpse and describe specific milestnes and utcmes that will be used t demnstrate the prgram s prgress and effectiveness. 3

4 Descriptin f Prpsed Deliverables and Scpe f Wrk: In this sectin, the respnder shuld describe the scpe f services and functinality the rganizatin is prepared t prvide. If the respnder is unable t prvide the full scpe f services as cntemplated in this RFI, Respnder must delineate the specific services and functinality that the rganizatin is prepared t prvide, and suggest appraches t achieve the additinal deliverables excluded frm the respnse. Specific functins t be addressed are set frth in Attachment A. Implementatin Plan: This sectin shuld detail hw the Prject wuld be carried ut in an effective and efficient manner, including: Wh wuld be invlved Milestnes as indices f prgress Human resurces required, including existing Department staff, if any, and additinal Department staff, if any, and the skill sets required Target dates r timelines fr prject activities and the timeframe fr cmpletin Training prcesses Operatinal Transitin: Prvide detail n shift f day t day peratins t DHS staff. Include the minimum number f individuals needed t assume day t day functins in additin t a descriptin f rles. Pricing / Budget Infrmatin: Respnder shuld prvide pricing fr slutin cmpnents if available, clearly describing the services and the pricing methdlgy included in each price cmpnent. 5.3 DEADLINE FOR SUBMISSION OF RFI The Department must receive the respnse n later than June 3, 2011 by 4:00PM at the fllwing address: Minnesta Department f Human Services Internal Audits 444 Lafayette Rad St. Paul, MN Attentin: Sanjay Raval Respnders must submit ne (1) riginal and three (3) paper cpies f their respnse, tgether with an electrnic PDF cpy n cmputer disk. Respnses shuld be prepared in such a way as t prvide a straightfrward, cncise explanatin f prpsed slutins. Published materials t supprt yur respnse t the RFI may be included with yur respnse. Demnstratin r presentatin f yur prpsed slutin may be required. If demnstratin media f yur prpsed prduct is available, submit them with yur respnse. 4

5 5.4 QUESTIONS Questins regarding this RFI shuld be submitted by electrnic mail r writing t the cntact listed belw, n later than the written questins due date identified in Sectin 5.1, abve. Telephne inquiries will nt be accepted. Answers t questins that pertain t all Respnders r that materially affect the RFI will be issued as an Addendum. Respnses t written questins will be available by May 17, 2011 by cmpleting the nndisclsure agreement n the DHS website at Sanjay Raval Minnesta Department f Human Services 444 Lafayette Rad St. Paul, MN sanjay.raval@state.mn.us 5.4 ADDENDA The Department reserves the right t add, change, r delete any prvisin r statement in the RFI at any time prir t the requested due date. If it becmes necessary t revise any part f the RFI, addenda t the RFI will be prvided t all knwn Respnders wh received a cpy f the RFI. Addenda will be psted n the Department s website at: 5

6 ATTACHMENT A SCOPE OF SERVICES The Department f Human Services seeks t establish a cmprehensive cmpliance analysis slutin utilizing Oracle Intelligence Enterprise Editin (OBIEE) and Oracle Audit Vault that will serve as a resurce fr users fr tracking and evaluating data access related t infrmatin systems access. 1. The first phase f this effrt wuld likely include a limited prject designed t achieve the fllwing: Enable nn technical users t btain and analyze relevant access data frm at least three existing data surces. This capability shuld enable the ability t authr analytical cntent and cllabrate independent frm technical resurces Prvide custmized reprt templates fr DHS staff Initially implement t a limited user ppulatin f 5 10 DHS users 2. The desired slutin wuld have these minimal attributes: Creatin f reprting data structures (data mart) based n available and relevant surce data The slutin shuld accmmdate relevant changes t data surces allwing fr the inclusin f additinal data surces frm internally and externally. In respnse t changing data surces, the slutin shuld prvide efficient tls t add r remve data surces Autmated script develpment and deplyment wuld update the reprting database autmatically n an apprpriate schedule (daily, weekly,) Initial deplyment wuld demnstrate the fllwing: dashbards, interactive data cntent, query supprt, OLAP, charting, grids, alerts, Menu and flder system fr strage f existing reprt cntent created by the vendr as well as new reprt cntent created by trained end users Training fr end users t build additinal dashbards and reprt templates Prject management frm initial needs analysis thrugh design, develpment, testing and implementatin t final custmer sign ff and apprval 6

7 Demnstrated ability t leverage Enterprise Service Bus cmputing. A prject cmpletin meeting t discuss success f the implementatin, additinal mdules/features, and csts related t additinal implementatins r supprt and finalizatin fr required prcess t include upgrades r actins required t accmmdate majr platfrm changes within the state IT prtfli In respnding t this RFI, the Vendr shuld: Prvide a brief verview f the underlying data structure and verall architecture envisined fr the slutin Prvide a brief verview f required hardware and any additinal sftware bth at the server layer and the user layer: Describe clearly if any additinal sftware including any dwnladed cntrls r applets is needed n the desktp fr each majr feature and functinality including: Administratin f sftware Develpment, design, authring and/r publishing f end user reprt templates End user functinality Required security access t databases r netwrks describe the prcess fr data inclusin (Pull v. push, prcess t cpy data, batch prcessing). Describe what hardware is needed bth initially and in the future if the user audience wuld increase in size dramatically. Prvide sme histrical representatins t include user cunt and bandwidth utilizatin Include a descriptin f user functinality that can be supprted: with existing vendr sftware prvided with the slutin as described; with functinality that must be built thrugh additinal develpment as prpsed in the prject scpe; r, as part f additinal wrk utside f the initial prject deliverable. Prvide a brief verview f prpsed functinality Prvide a brief verview f prpsed Service / maintenance and include a descriptin f the prcess invlved in prviding updates r patches t any sftware Prvide a brief verview f electrnic and/r telephnic access t resurces fr trubleshting and user supprt Designate a Prject Manager fr develpment and implementatin perid. 7