(MUSL) Is Requesting a Proposal for a Security Assessment of Its Information Systems
Total Page:16
File Type:pdf, Size:1020Kb
MULTI-STATE LOTTERY ASSOCIATION 4400 NW Urbandale Drive Urbandale, Iowa 50322 Telephone: 515-453-1400 Fax: 515-453-1420 Request for Proposal The Multi-State Lottery Association (MUSL) is requesting a proposal for a security assessment of its information systems. MUSL is a non-profit government benefit association based in Urbandale, IA responsible for administration of multi-jurisdictional lottery games, including Powerball. MUSL is fully owned by its lottery members. Please direct correspondence to [email protected]. Bid requests sent out/posted: 07 May 2018 Question submission deadline: 14 May 2018 Bid submission deadline: 21 May 2018 Expected winner notification: 25 May 2018 Desired project start date: 04 Jun 2018 Desired project completion date: 29 Jun 2018 Status reports: weekly MUSL seeks the following services: External network vulnerability assessment and penetration test Internal network vulnerability assessment and penetration test Web application assessment All other services related to the above and commonly included in this type of assessment MUSL expects the following systems/networks/locations to be within scope: Approximately 20 computers used by staff, Urbandale, IA Approximately 100 servers, mostly virtual, Urbandale, IA and remote datacenter Approximately 5 computers used by staff, remote office All related network equipment MUSL will attempt to answer any questions submitted by 14 May 2018 and post those answers on its website. MUSL may elect to not post answers that could disclose sensitive information about MUSL’s systems – in this case, MUSL will disclose answers as deemed appropriate by MUSL security staff, which may include disclosure via email to parties that have expressed interest in bidding. Bidders on this project are expected to have experience with vulnerability testing for other organizations and to submit a proposal in line with current industry practices for vulnerability testing of an organization’s information resources. All staff who will interact with MUSL systems Arkansas Scholarship Lottery * Arizona Lottery * Colorado Lottery * Connecticut Lottery Corporation * D.C. Lottery and Charitable Games Control Board Delaware State Lottery * Florida Lottery * Hoosier Lottery * Idaho Lottery * Iowa Lottery Authority * Kansas Lottery * Kentucky Lottery Corporation Louisiana Lottery Corporation * Maine State Lottery * Minnesota State Lottery * Missouri Lottery * Montana Lottery * Nebraska Lottery * New Hampshire Lottery Commission New Mexico Lottery Authority * North Carolina Education Lottery * North Dakota Lottery * Oklahoma Lottery * Oregon Lottery * Pennsylvania Lottery * Loteria Electronica de Puerto Rico * Rhode Island Lottery * South Carolina Education Lottery * South Dakota Lottery * Texas Lottery * Tennessee Education Lottery Corporation * Vermont Lottery Virgin Islands Lottery * West Virginia Lottery * Wisconsin Lottery * Wyoming Lottery Corporation MULTI-STATE LOTTERY ASSOCIATION in ways not generally available to the public must pass a background check administered by MUSL or MUSL’s designee, as indicated below. We would also like included with the submission: -CVs of all persons assigned to the project -a named project manager who will be the point of contact for MUSL -any/all industry standards that will be used to determine vulnerabilities, scope, and risk -names and contact information for references A sample of terms and conditions is available at https://www.musl.com/opportunities.html or in this document. Terms from these documents may or may not be incorporated into the final agreement depending on the complexities of the project. The selected Vendor(s) may be subject to completion of background checks of the organization, its owners, and any staff assigned to work on the project. Any resulting contract will include requirements regarding confidentiality, insurance, security, intellectual property rights, and other provisions. Vendors are solely responsible for the costs associated with submission of proposals in response to this request; MUSL will not reimburse any Vendor costs incurred in the submission of a Proposal. By issuing this request, MUSL is not offering to enter into a contract with any interested Vendor, nor does acceptance of a Proposal or request for additional information constitute an agreement to enter into a contract with any interested Vendor. Arkansas Scholarship Lottery * Arizona Lottery * Colorado Lottery * Connecticut Lottery Corporation * D.C. Lottery and Charitable Games Control Board Delaware State Lottery * Florida Lottery * Hoosier Lottery * Idaho Lottery * Iowa Lottery Authority * Kansas Lottery * Kentucky Lottery Corporation Louisiana Lottery Corporation * Maine State Lottery * Maryland Lottery and Gaming Control Agency * Minnesota State Lottery * Missouri Lottery * Montana Lottery Nebraska Lottery * New Hampshire Lottery Commission * New Mexico Lottery Authority * North Carolina Education Lottery * North Dakota Lottery * Oklahoma Lottery Oregon Lottery * Pennsylvania Lottery * Loteria Electronica de Puerto Rico * Rhode Island Lottery * South Carolina Education Lottery * South Dakota Lottery Texas Lottery * Tennessee Education Lottery Corporation * Vermont Lottery * Virgin Islands Lottery * West Virginia Lottery * Wisconsin Lottery * Wyoming Lottery Corporation THIS IS A SAMPLE ONLY – PLEASE MAKE SURE YOU REQUEST FOR PROPOSAL The Multi-State Lottery Association (MUSL) is seeking a qualified vendor to provide XXXX services in connection with the Multi-State Lottery Association. Sealed proposals will be received until [Day, time] Central Time. Sealed bids are to be submitted to: CONTACT NAME MULTI-STATE LOTTERY ASSOCIATION 4400 NW Urbandale Drive Urbandale, IA 50322 Fax: (515) 453-1420 Multi-State Lottery Association Request for Proposals – XXXX Response Due Date: XXX Page 2 of 30 SECTION I GENERAL INFORMATION 1.1 PURPOSE The Multi-State Lottery Association (MUSL) is an association of governmental lotteries formed to allow those lotteries to conduct joint games such as POWERBALL. The purpose of this Request for Proposals (RFP) is to allow MUSL to choose a vendor to supply XXXX services. Obligations under this contract will commence on XXX, and continue through XXXX. MUSL can, at its sole option, extend the contract with up to XX (X) one year extensions through XXX. 1.2 CONTENT OF THE REQUEST FOR PROPOSAL (RFP) This RFP is designed to provide bidders with the information necessary for the preparation of competitive proposals. The RFP is not intended to be comprehensive, and each bidder is responsible for addressing all issues relevant to the proposal submitted. MUSL reserves the right to modify the RFP at any time. Any modification of the RFP will be clearly marked as a modification and provided to each bidder who received an original copy of the RFP. Proposals shall be based solely on the material contained in the RFP or in subsequent modifications to the RFP. Bidders are to disregard any draft material they may have received, any newspaper articles they may have read, and any other oral or written representations from any source. In submitting a proposal the bidder agrees that it will not bring any claim or have any cause of action against MUSL or its members based on any misunderstanding concerning the information provided or MUSL's or its members' failure, negligent or otherwise, to provide the bidder with pertinent information as intended under the terms of the RFP. Multi-State Lottery Association Request for Proposals – XXXX Response Due Date: XXX Page 3 of 30 1.3 BIDDING CONFERENCE AND BIDDER INQUIRIES A bidding conference will not be held. Bidders may submit written questions concerning this RFP by XXXX. MUSL will respond to the questions in writing by XXXX. All bidders who received copies of the RFP will receive copies of the written questions received and the written answers provided by MUSL. The questions and answers will not modify the RFP, unless MUSL specifically states that a modification is being made. All written questions and other inquiries regarding this RFP shall be directed to CONTACT NAME Multi-State Lottery Association 4400 NW Urbandale Drive, Urbandale, IA 50322 Telephone (515) 453-14xx Fax (515) 453-1420 [email protected]. Written questions may be mailed, delivered, emailed or telefaxed to the MUSL office. The bidder is responsible for timely delivery. The use of email is preferred. A bidder may be disqualified for attempts to contact any MUSL Board member or any member lottery employee, other than to obtain general information about this RFP process. Changes in applicable laws and rules may affect the award process or the resulting contract. Vendors are responsible for ascertaining pertinent legal requirements and restrictions. Multi-State Lottery Association Request for Proposals – XXXX Response Due Date: XXX Page 4 of 30 1.4 SUBMISSION OF PROPOSALS Only one proposal will be accepted from each bidder. Bidders must identify and address each requirement in this RFP by section number and in order. Two hard copies of the proposal, including the original, shall be submitted in a sealed envelope labeled "bid enclosed". Each proposal must also be accompanied by a signed copy of the bidder's certification included with the RFP (Appendix A). 1.5 TRANSMITTAL LETTER A transmittal letter must be submitted as part of the proposal. The transmittal letter must clearly indicate that it is the transmittal letter, identify the vendor submitting the proposal, and indicate the name, title, address, and telephone number of the person in