Loading...
HomeMy WebLinkAboutRFP - 10000 Unified Endpoint Management SolutionRFP 10000 Unified Endpoint Management Solution Page 1 of 48 REQUEST FOR PROPOSAL 10000 UNIFIED ENDPOINT MANAGEMENT SOLUTION RFP DUE: 3:00 PM MT (Mountain Time), June 25, 2024 The City of Fort Collins is requesting proposals from qualified Service Providers to acquire a next generation enterprise Unified Endpoint Management (“UEM”) solution, and professional services to implement the proposed solution. As part of the City’s commitment to sustainability, proposals must be submitted online through the Rocky Mountain E-Purchasing System (RMEPS) at http://www.bidnetdirect.com/colorado/city- of-fort-collins. Note: please ensure adequate time to submit proposals through RMEPS. Proposals not submitted by the designated Opening Date and Time will not be accepted by RMEPS. All questions should be submitted, in writing via email, to Ed Bonnette, CPM, CPPB, Senior Buyer at ebonnette@fcgov.com, with a copy to Joe King, Project Manager, at JKing@fcgov.com, no later than 3:00 PM MT on June 11, 2024. Please format your e-mail to include: RFP 10000 Unified Endpoint Management Solution in the subject line. Questions received after this deadline may not be answered. Responses to all questions submitted before the deadline will be addressed in an addendum and posted on the Rocky Mountain E-Purchasing System webpage. Rocky Mountain E-Purchasing System hosted by BidNet A copy of the RFP may be obtained at http://www.bidnetdirect.com/colorado/city-of-fort-collins. This RFP has been posted utilizing the following Commodity Code(s): 20800 Computer Software for Microcomputers, Systems, Including Cloud-Based (Preprogrammed) 20880 Software, Microcomputer (Not Otherwise Classified) 20900 Computer Software for Mini and Mainframe Computers (Preprogrammed) 20987 Software, Mini/Mainframe Computer (Not Otherwise Classified) 92045 Software Maintenance/Support Prohibition of Unlawful Discrimination: The City of Fort Collins, in accordance with the provisions of Title VI of the Civil Rights Act of 1964 (78 Stat. 252, 42 US.C. §§ 2000d to 2000d- 4) and the Regulations, hereby notifies all bidders that it will affirmatively ensure that any contract entered into pursuant to this advertisement, disadvantaged business enterprises will be afforded full and fair opportunity to submit bids in response to this invitation and will not be discriminated against on the grounds of race, color, or national origin in consideration for an award. The City strictly prohibits unlawful discrimination based on an individual’s gender (regardless of gender identity or gender expression), race, color, religion, creed, national origin, ancestry, age 40 years or older, marital status, disability, sexual orientation, genetic information, or other characteristics protected by law. For the purpose of this policy “sexual orientation” means a person’s actual or perceived orientation toward heterosexuality, homosexuality, and bisexuality. The City also strictly prohibits unlawful harassment in the workplace, including sexual harassment. Further, the City strictly prohibits unlawful retaliation against a person who engages Financial Services Purchasing Division 215 N. Mason St. 2nd Floor PO Box 580 Fort Collins, CO 80522 970.221.6775 970.221.6707 fcgov.com/purchasing RFP 10000 Unified Endpoint Management Solution Page 2 of 48 in protected activity. Protected activity includes an employee complaining that he or she has been discriminated against in violation of the above policy or participating in an employment discrimination proceeding. The City requires its Service Providers to comply with the City’s policy for equal employment opportunity and to prohibit unlawful discrimination, harassment and retaliation. This requirement applies to all third-party Service Providers/Professionals and their subcontractors/subconsultants at every tier. Public Viewing Copy: The City is a governmental entity subject to the Colorado Open Records Act, C.R.S. §§ 24-72-200.1 et seq. (“CORA”). Any proposals submitted hereunder are subject to public disclosure by the City pursuant to CORA and City ordinances. Service Providers may submit one (1) additional complete proposal clearly marked “FOR PUBLIC VIEWING.” In this version of the proposal, Service Providers may redact text and/or data that it deems confidential or proprietary pursuant to CORA. All pricing will be considered public records subject to disclosure under CORA and as such pricing cannot be redacted from the “FOR PUBLIC VIEWING” version of the proposal. Failure to provide a public viewing copy will be considered a waiver of any claim of confidentiality under CORA without regard to how the applicant’s proposal or certain pages of the proposal are marked confidential, proprietary, or similar. Such statement does not necessarily exempt such documentation from public disclosure if required by CORA, by order of a court of appropriate jurisdiction, or other applicable law. Generally, under CORA, trade secrets, confidential commercial information and financial data information may not be disclosed by the City. Proposals may not be marked “Confidential” or ‘Proprietary’ in their entirety. By responding to this RFP, Service Providers hereby waives any and all claims for damages against the City for the City’s good faith compliance with CORA. All provisions and pricing of any contract resulting from this request for proposal will be public information. Service Providers Registration: The City requires new Service Providers receiving awards from the City to submit IRS form W-9 and requires all Service Providers to accept Direct Deposit (Electronic) payment. If needed, the W-9 form and the Vendor Direct Deposit Authorization Form can be found on the City’s Purchasing website at www.fcgov.com/purchasing under Vendor Reference Documents. Please do not submit these documents with your proposal, however, if you take exception to participating in Direct Deposit (Electronic) payments please clearly note such in your proposal as an exception. The City may waive the requirement to participate in Direct Deposit (Electronic) payments at its sole discretion. Sales Prohibited/Conflict of Interest: No officer, employee, or member of City Council, shall have a financial interest in the sale to the City of any real or personal property, equipment, material, supplies or services where such officer or employee exercises directly or indirectly any decision-making authority concerning such sale or any supervisory authority over the services to be rendered. This rule also applies to subcontracts with the City. Soliciting or accepting any gift, gratuity favor, entertainment, kickback or any items of monetary value from any person who has or is seeking to do business with the City of Fort Collins is prohibited. Collusive or Sham Proposals: Any proposal deemed to be collusive or a sham proposal will be rejected and reported to authorities as such. Your authorized signature of this proposal assures that such proposal is genuine and is not a collusive or sham proposal. The City of Fort Collins reserves the right to reject any and all proposals and to waive any irregularities or informalities. RFP 10000 Unified Endpoint Management Solution Page 3 of 48 Utilization of Award by Other Agencies: The City of Fort Collins reserves the right to allow other state and local governmental agencies, political subdivisions, and/or school districts to utilize the resulting award under all terms and conditions specified and upon agreement by all parties. Usage by any other entity shall not have a negative impact on the City of Fort Collins in the current term or in any future terms. The selected Service Provider shall be required to sign the City’s Agreement prior to commencing services (see sample attached to this document). Sincerely, Gerry Paul Purchasing Director RFP 10000 Unified Endpoint Management Solution Page 4 of 48 I. BACKGROUND & OBJECTIVE / OVERVIEW A. Objective The City of Fort Collins is requesting proposals from qualified Service Provider to acquire a next generation enterprise Unified Endpoint Management (“UEM”) solution, and professional services to implement the proposed solution. . B. Background The City of Fort Collins provides municipal services to a population of 175,000. The IT department services approximately 2,700 employees and 500 non-employees. The City currently has a large computing environment consisting of a majority Microsoft Windows endpoints. The overall management of these is currently performed using a variety of different solutions and processes. As the environment has grown, so has the complexity and overhead of managing these devices. II. SCOPE OF PROPOSAL A. Scope of Work The purpose of the Request for Proposal (RFP) is to solicit proposals from, and seeks to collaborate with, qualified vendors or qualified reseller with strong manufacturer relationships, that can provide a next generation enterprise Unified Endpoint Management (“UEM”) solution, and professional services to implement the proposed solution, to manage the client and mobile computing environment of the City of Fort Collins and its sites. This would include supporting the management by the City IT staff and its sites across multiple operating systems (“OS”) platforms. The proposed UEM solution would be used to manage enterprise-owned devices in an effort to optimize the functionality and security of the City’s environment while minimizing cost and downtime. The proposed solution will be centrally managed and deployed to all enterprise-owned endpoints. For the purpose of this RFP and resulting contract, the following term shall mean: “Endpoint” an OS based computing device that communicates back and forth with a network, including but not limited to desktops, laptops, tablets, smartphones, and servers. The ideal solution will streamline current processes, provide actionable insights, and support regulatory compliance efforts. It should offer comprehensive management of endpoints, including patch and vulnerability management, and support application distribution and security management across all endpoints. Any submitted proposal must include information on all available deployment models, including any available on-premise options as well as any software-as-a-service (SaaS) options. In addition, proposer should include full details and unbundled pricing on all RFP 10000 Unified Endpoint Management Solution Page 5 of 48 available licensing models (enterprise, per device, user etc.) on the Pricing Worksheet included, services, maintenance and support, software hosting, installation, interface design, technical support, and training. Project scope includes all “managed” City endpoints, including clients and servers. The solution should support mobile endpoints (iOS, Android, and ChromeOS) but is not required for initial implementation. Proposals should include both the implementation costs and the first year of licensing any solution(s). It should also include cost estimates for years 2-5 for solution licensing. Below is a general overview of the current environment, in-scope. • 2,800 desktops/laptops (95%+ Windows, 5% macOS) • 750 Servers (90% Windows, 10% RHEL) • 30 Support Technicians • 3,300 Users • 4,300 Applications (distinct versions counted) B. Deliverables/Milestones • Project Planning and Management o Detailed project plan with timelines and milestones o Regular progress reports and status meetings • Needs Assessment and Solution Design o Comprehensive needs assessment and gap analysis o Custom UEM solution design tailored to organizational requirements • UEM Solution Implementation o Installation and configuration of UEM software o Integration with existing IT infrastructure and systems o Deployment strategy for all endpoints (desktops, laptops, mobile devices, servers, etc.) • Security and Compliance o Implementation of security policies and compliance controls o Regular security assessments and vulnerability scans o Documentation of security protocols and compliance measures • Training and Knowledge Transfer o Comprehensive training program for IT staff and end-users o Training materials and documentation o Knowledge transfer sessions for ongoing management and operations • Documentation o Detailed implementation and configuration documentation o User guides and technical manuals o Standard operating procedures (SOPs) for ongoing management • Support and Maintenance (during implementation) o Implementation support and maintenance plan • Handoff to Operations o Final handover of the UEM solution to the operations team RFP 10000 Unified Endpoint Management Solution Page 6 of 48 o Transition plan with a clear delineation of responsibilities o Post-handover support period for smooth transition • License and Compliance o Provision of all necessary licenses for the UEM solution o Compliance with all relevant legal and regulatory requirements o License management and renewal procedures • Evaluation and Feedback o Post-implementation evaluation and feedback sessions o Continuous improvement recommendations o Final project review and closure report C. Key Areas of Responsibility • IT Service Desk – Responsible for fulfilling IT services to the users, including support, training, and software deployments. • Client Device Team – Management of Client and Mobile devices • Systems Engineering – Management/Patching of Servers • InfoSec – Overall oversight and authority on patching • Information Technology Review Board (ITRB) – Intake and management of authorized software in the environment • Asset Management – Management and oversight of Software and Hardware assets in the environment. D. Anticipated Schedule The following represents the City’s target schedule for the RFP. The City reserves the right to amend the target schedule at any time. • RFP issuance: June 4, 2024 • Question deadline: 3:00 PM MT on June 11, 2024 • Final Addendum Issued: June 17, 2024 (on or before) • Proposal due date: 3:00 PM MT on June 25, 2024 • Interviews (tentative): Week of July 8, 2024 • Award of Contract (tentative): July 22, 2024 E. Budget The budget for this project is limited to a maximum of $250,000, to include implementation and year one solution licensing, therefore Service Providers are invited to submit proposals with the tasks prioritized to aid the City in working together with the selected firm to identify and implement core tasks within the budget available for this project F. Interviews RFP 10000 Unified Endpoint Management Solution Page 7 of 48 In addition to submitting a written proposal, the top-rated Service Providers may be interviewed by the RFP assessment team and asked to participate in an oral presentation to provide an overview of the company, approach to the project and to address questions. The evaluation criteria for the oral interviews will be the same as the criteria for the written evaluations and is included in Section IV. Because of recent events involving COVID-19, the City may use non-traditional methods for the optional interview phase of the assessment process. The City will receive and score written proposals. However, instead of traditional in-person interviews for the optional interview session, the City may opt to use alternate methods including, but not limited to remote interviews through a platform such as Microsoft Teams or Zoom. G. Subcontractors/Subconsultants Service Provider will be responsible for identifying any subcontractors and/or subconsultants in their proposal. Please note that the City will contract solely with the awarded Service Provider; therefore, subcontractors and/or subconsultants will be the responsibility of the Service Provider. H. Current standards All work and/or materials must meet current standards in force by recognized technical and professional societies, trade and materials supply associations, institutes and organizations, bureaus and testing laboratories, and national, federal, state, county, and local laws, codes and ordinances. I. Fees, Licenses, Permits The successful Service Provider shall be responsible for obtaining any necessary licenses, fees or permits without additional expense to the City. All vehicles and equipment shall be properly licensed and insured, carry the appropriate permits and be placarded as required by law. J. Laws and Regulations The Service Provider agrees to comply fully with all applicable local, State of Colorado and Federal laws and regulations and municipal ordinances to include American Disabilities Act (ADA). K. Invoicing and Payment Invoices should be emailed monthly to invoices@fcgov.com with a copy to the Project Manager. The cost of the work completed shall be paid to the Service Provider each month following the submittal of a correct invoice by the Service Provider indicating the project name, Purchase Order number, task description, hours worked, personnel/work type category, hourly rate for each employee/work type category, date of the work performed specific to the task, percentage of that work that has been completed by task, 3rd party supporting documentation with the same detail and a brief progress report. Payments will be made using the prices stated in the Agreement. In the event a service is requested which is not stated in the Agreement, the Service Provider and the City will negotiate an appropriate unit price for the service prior to the Service Provider initiating such work. The City pays invoices on Net 30 terms. RFP 10000 Unified Endpoint Management Solution Page 8 of 48 L. COVID-19 Compliance The Service Provider and its subcontractors/consultants shall comply with all state, county, and local laws, ordinances, and public health orders established to reduce the spread of COVID-19, as applicable. The Service Provider shall ensure employees and subcontractors/subconsultants with COVID-19 symptoms do not report to the job site. Service Provider must organize work to ensure individuals minimize contact and maximize social distancing. Individuals must wear all standard worksite personal protective equipment (PPE). In addition, individuals should wear a mask or cloth face covering consistent with local public health recommendations and other applicable safety requirements. III. PROPOSAL SUBMITTAL Please limit the total length of your proposal to a maximum of fifty (50) 8 ½ x 11” pages (excluding cover pages, table of contents, dividers and Acknowlegement form). Font shall be a minimum of 10 Arial and margins are limited to no less than .5” for sides and top/bottom. Extended page sizes, such as 11” x 17”, count as a single page and may be used for detailed pricing. Links to other files or websites shall not be permitted. Proposals that do not conform to these requirements may be rejected. Service Providers are required to provide detailed written responses to the following items in the order outlined below. The responses shall be considered technical offers of what Service Providers propose to provide and shall be incorporated in the contract award as deemed appropriate by the City. A proposal that does not include all the information required may be deemed non-responsive and subject to rejection. Responses must include all the items in the order listed below. It is suggested that the Service Providers include each of the City’s questions with their response. The City of Fort Collins shall not reimburse any firm for costs incurred in the preparation and presentation of their proposal. A. Cover Letter / Executive Summary The Executive Summary should highlight the content of the proposal and features of the program offered, including a general description of the program and any unique aspects or benefits provided by your firm. Indicate your availability to participate in the interviews/demonstrations on the proposed dates as stated in the Schedule section. B. Service Provider Information 1. Describe the Service Provider’s business and background 2. Number of years in the business 3. Details about ownership 4. An overview of services offered and qualifications 5. Size of the firm 6. Location(s) of offices. If multiple, please identify which will be the primary for our account. RFP 10000 Unified Endpoint Management Solution Page 9 of 48 7. Primary contact information for the company including contact name(s) and title(s), mailing address(s), phone number(s), and email address(s). C. Scope of Proposal 1. Provide a detailed narrative of the services proposed if awarded the contract per the scope above. The narrative should include any options that may be beneficial for the City to consider. 2. Describe how the project would be managed and who would have primary responsibility for its timely and professional completion. 3. Briefly describe the approach to execute the scope of work to include the methods and assumptions used, and any exceptions and/or risks. 4. Describe the methods and timeline of communication your firm will use with the City’s Project Manager and other parties. 5. Include a description of the software and other analysis tools to be used. 6. Identify what portion of work, if any, may be subcontracted or outsourced to subconsultants. Include all applicable information herein requested for each Service Provider. 7. Are other qualified personnel available to assist in meeting the project schedule if required? 8. Is the project team available to attend meetings as required by the Scope of Work? 9. Provide an outline of the schedule for completing tasks. 10. Fill out the Functional Requirement Matrix in Appendix A and submit it as part of your Proposal. 11. Fill out Appendix B Cyber Vendor Questionnaire and return it as part of your Proposal. 12. Include Uptime and Availability metrics (MTBF): 1, 2, and 3 year. D. Firm Capability and Assigned Personnel Provide relevant information regarding previous experience related to this or similar projects, to include the following: 1. Provide an Organization Chart/Proposed Project Team: An organization chart containing the names of all key personnel and subconsultants with titles and their specific task assignment for this Agreement shall be provided in this section. 2. Provide resumes for each professional and technical person to be assigned to the project, including partners, subconsultants, and subcontractors. Please limit resumes to one page. The résumés shall include at least three individual references from previous assignments. 3. A list of qualifications for your firm and qualifications and experience of the specific staff members proposed to perform the services described above. 4. References. Provide a minimum of three similar projects with public agencies in the last 5 years that have involved the staff and subcontractors/subconsultants proposed to work on this project. Include the owner’s name, title of project, beginning price, ending price, contact name, email and phone number, subconsultants on the team RFP 10000 Unified Endpoint Management Solution Page 10 of 48 and a brief description of the work and any change orders. The Service Provider authorizes the City to verify any and all information contained herein and hereby releases all those concerned providing information as a reference from any liability in connection with any information provided. 5. Provide any information that distinguishes Service Provider from its competition and any additional information applicable to this RFP that might be valuable in assessing Service Provider’s proposal. E. Cost and Work Hours In your response to this proposal, please provide the following: 1. Estimated Hours by Task: Provide estimated hours for each proposed task by job title and employee name, including the time required for meetings, conference calls, etc. 2. Cost by Task: Provide the cost of each task identified in the Scope of Proposal section. Provide a total not to exceed cost for the Scope of Proposal. Price all additional services/deliverables separately. 3. Schedule of Rates: Provide a schedule of billing rates by category of employee and job title to be used during the term of the Agreement. This fee schedule will be firm for at least one (1) year from the date of the Agreement. The fee schedule will be used as a basis for determining fees should additional services be necessary. Include a per meeting rate in the event additional meetings are needed. A fee schedule for subconsultants/subcontractors, if used, shall be included. 4. All direct costs (i.e., travel, printing, postage, etc.) specifically attributed to the project and not included in the billing rates must be identified. Reasonable expenses may be reimbursable as per the current rates found at www.gsa.gov. Service Provider/Consultant will be required to provide original receipts to the City for all travel expenses. 5. Fill out Appendix C Total Cost of Ownership Spreadsheet and include it as part of your Proposal. Include any applicable recurring annual costs for support & maintenance for 5 years. F. Sample Agreement Included with this request for proposals is a sample Agreement that the City intends to use for obtaining the services of the Service Provider. The Service Provider is required to review this Agreement and indicate any objections to the terms of the contract. If revisions to the contractual terms are requested, provide suggested revisions. G. Acknowledgement The Acknowledgement form is attached as Section V. Complete the attached form indicating the Service Provider hereby acknowledges receipt of the City of Fort Collins Request for Proposal and acknowledges that the Service Provider has read and agrees to be fully bound by all of the terms, conditions and other provisions set forth in the RFP. H. The Byrd Anti-Lobbying Certification and the Buy America Certification (Section VI) must be signed, dated and returned as part of your Proposal. RFP 10000 Unified Endpoint Management Solution Page 11 of 48 IV. REVIEW AND ASSESSMENT CRITERIA A. Proposal and Interview Criteria Service Providers will be evaluated on the following criteria. This set of criteria will be the basis for review and assessment of the written proposals and optional interview session. At the discretion of the City, interviews of the top-rated Service Providers may be conducted. The rating scale shall be from 1 to 10, a rating of 1 doesn’t meet minimum requirements, a rating of 5 means the category fulfills the minimum requirements, and 10 exceeds minimum requirements in that category. WEIGHTING FACTOR CATEGORY STANDARD QUESTIONS 2.0 Scope of Proposal Does the proposal address all elements of the RFP? Does the proposal show an understanding of the project objectives, methodology to be used and results/outcomes required by the project? Are there any exceptions to the specifications, Scope of Work, or agreement? Are other qualified personnel available to assist in meeting the project schedule if required? Is the project team available to attend meetings as required by the Scope of Work? 2.0 Firm Capability & Assigned Personnel Does the firm have the resources, financial strength, capacity and support capabilities required to successfully complete the project on- time and in-budget? Has the firm successfully completed previous projects of this type and scope? Do the persons who will be working on the project have the necessary skills and qualifications? Are sufficient people of the requisite skills and qualifications assigned to the project? 2.0 Technical Suitability How well does the proposed solution meet the technical requirements outlined? Demonstration of deployment -- configuration, scheduling, automation, “software store”, and rollback. Integration with FreshService ITSM. If applicable, integration with Snow Software. Network bandwidth/throughput required. Uptime and Availability metrics (MTBF): 1, 2, and 3 year. RFP 10000 Unified Endpoint Management Solution Page 12 of 48 1.0 Support & Training Evaluation of the support structure and training programs offered by the vendor. Initial training and refresher training as product develops. 1.0 Security & Compliance Ability to secure sensitive data and comply with relevant Local, State, and Federal regulations. Firewall port requirements for accessibility. Push, pull or both? Encryption and authenticity verification method used. 2.0 Cost & Work Hours Does the proposal included detailed cost break- down for each cost element as applicable and are the line-item costs competitive? Does the proposed cost compare favorably with the Project Manager's estimate? Are the work hours presented reasonable for the effort required by each project task or phase? RFP 10000 Unified Endpoint Management Solution Page 13 of 48 V. ACKNOWLEDGEMENT Service Provider hereby acknowledges receipt of the City of Fort Collins Request for Proposal and acknowledges that it has read and agrees to be fully bound by all of the terms, conditions and other provisions set forth in the RFP 10000 Unified Endpoint Management Solution and sample Agreement except as otherwise noted. Additionally, Service Provider hereby makes the following representations to City: a. All of the statements and representations made in this proposal are true to the best of the Service Provider’s knowledge and belief. b. Service Provider commits that it is able to meet the terms provided in this proposal. c. This proposal is a firm and binding offer, for a period of 90 days from the date hereof. d. Service Provider further agrees that the method of award is acceptable. e. Service Provider also agrees to complete the proposed Agreement with the City of Fort Collins within 10 days of notice of award. If contract is not completed and signed within 10 days, City reserves the right to cancel and award to the next highest rated firm. f. Service Provider acknowledges receipt of addenda. g. Service Provider acknowledges no conflict of interest. h. Service Provider acknowledges that the City is a governmental entity subject to the Colorado Open Records Act, C.R.S. §§ 24-72-200.1 et seq. (“CORA”). Any proposals submitted hereunder are subject to public disclosure by the City pursuant to CORA and City ordinances. Service Providers may submit one (1) additional complete proposal clearly marked “FOR PUBLIC VIEWING.” In this version of the proposal, Service Providers may redact text and/or data that it deems confidential or proprietary pursuant to CORA. All pricing will be considered public records subject to disclosure under CORA and as such pricing cannot be redacted from the “FOR PUBLIC VIEWING” version of the proposal. Failure to provide a public viewing copy will be considered a waiver of any claim of confidentiality under CORA without regard to how the applicant’s proposal or certain pages of the proposal are marked confidential, proprietary, or similar. Such statement does not necessarily exempt such documentation from public disclosure if required by CORA, by order of a court of appropriate jurisdiction, or other applicable law. Generally, under CORA, trade secrets, confidential commercial information and financial data information may not be disclosed by the City. Proposals may not be marked “Confidential” or ‘Proprietary’ in their entirety. By responding to this RFP, Service Provider hereby waives any and all claims for damages against the City for the City’s good faith compliance with CORA. All provisions and pricing of any contract resulting from this request for proposal will be public information. Legal Firm Name: Physical Address: Remit to Address: Phone: Name of Authorized Agent of Firm: Signature of Authorized Agent: RFP 10000 Unified Endpoint Management Solution Page 14 of 48 Primary Contact for Project: Title: Email Address: Phone: Cell Phone: NOTE: ACKNOWLEDGMENT IS TO BE SIGNED & RETURNED WITH YOUR PROPOSAL. RFP 10000 Unified Endpoint Management Solution Page 15 of 48 VI. BYRD ANTI-LOBBYING AMENDMENT (31 U.S.C. 1352) CERTIFICATION The Contractor attests that it has filed the required certification under the Byrd Anti-Lobbying Amendment. The Contractor attests that it has certified that it will not and has not used Federal appropriated funds to pay any person or organization for influencing or attempting to influence an officer or employee of any agency, a member of Congress, officer or employee of Congress, or an employee of a member of Congress in connection with obtaining any Federal Contract, grant or any other award covered by 31 U.S.C.1352. The Contractor further attests that it has disclosed, and will continue to disclose, any lobbying with non-Federal funds that takes place in connection with obtaining any Federal award. The undersigned certifies, to the best of his or her knowledge and belief, that: (1) No Federal appropriated funds have been paid or will be paid, by or on behalf of the undersigned, to any person for influencing or attempting to influence an officer or employee of an agency, a Member of Congress, an officer or employee of Congress, or an employee of a Member of Congress in connection with the awarding of any Federal contract, the making of any Federal grant, the making of any Federal loan, the entering into of any cooperative agreement, and the extension, continuation, renewal, amendment, or modification of any Federal contract, grant, loan, or cooperative agreement. (2) If any funds other than Federal appropriated funds have been paid or will be paid to any person for making lobbying contacts to an officer or employee of any agency, a Member of Congress, an officer or employee of Congress, or an employee of a Member of Congress in connection with this Federal contract, grant, loan, or cooperative agreement, the undersigned shall complete and submit Standard Form--LLL, "Disclosure Form to Report Lobbying," in accordance with its instructions [as amended by "Government wide Guidance for New Restrictions on Lobbying," 61 Fed. Reg. 1413 (1/19/96). (3) The undersigned shall require that the language of this certification be included in the award documents for all subawards at all tiers (including subcontracts, subgrants, and contracts under grants, loans, and cooperative agreements) and that all subrecipients shall certify and disclose accordingly. This certification is a material representation of fact upon which reliance was placed when this transaction was made or entered into. Submission of this certification is a prerequisite for making or entering into this transaction imposed by 31, U.S.C. § 1352 (as amended by the Lobbying Disclosure Act of 1995). Any person who fails to file the required certification shall be subject to a civil penalty of not less than $10,000 and not more than $100,000 for each such failure. The Contractor, ________________ ___, certifies or affirms the truthfulness and accuracy of each statement of its certification and disclosure, if any. In addition, the Contractor understands and agrees that the provisions of 31 U.S.C. A 3801, et seq., apply to this certification and disclosure, if any. __________________________ Entity Name __________________________ Signature of Authorized Official __________________________ Name and Title of Authorized Official __________________________ Date RFP 10000 Unified Endpoint Management Solution Page 16 of 48 BUY AMERICA CERTIFICATION Procurement of Steel, Iron, or Manufactured Products Applies to contracts exceeding $150,000 The contractor agrees to comply with 49 U.S.C. 5323(j) and 49 C.F.R. Part 661, and any later amendments, which provide that Federal funds may not be obligated unless steel, iron, and manufactured products used in FTA-funded projects are produced in the United States, unless a waiver has been granted by FTA or the product is subject to a general waiver. General waivers are listed in 49 C.F.R. 661.7. A bidder or offeror must submit to the FTA recipient, the City of Fort Collins, the appropriate Buy America certification (below) with all bids or offers on FTA-funded contracts, except those subject to a general waiver. Bids or offers that are not accompanied by a completed Buy America certification will be rejected as nonresponsive. 1) Certification required for procurement of steel, iron, or manufactured products. Certificate of Compliance with 49 U.S.C. 5323(j) The bidder or offeror hereby certifies that it will meet the requirements of 49 U.S.C. 5323(j), as amended, and FTA regulations, “Buy America Requirements”, 49 C.F.R. Part 661, to the extent consistent with 49 U.S.C 5323(j). Date: ___________________________________________ Signature: _______________________________________ Company: _______________________________________ Name: __________________________________________ Title: ___________________________________________ 2) Certificate of Non-Compliance with 49 U.S.C. 5323(j). Certificate of Non-Compliance with 49 U.S.C. 5323(j) The bidder or offeror hereby certifies that it cannot comply with the requirements of 49 U.S.C. 5323(j), as amended, and FTA regulations, “Buy America Requirements”, 49 C.F.R. Part 661, to the extent consistent with 49 U.S.C 5323(j). Date: ___________________________________________ Signature: _______________________________________ Company: _______________________________________ Name: __________________________________________ Title: ___________________________________________ Official Purchasing Document Last updated 2/1/2023 Services Agreement RFP 10000 Unified Endpoint Management Solution Page 17 of 48 VII. SAMPLE AGREEMENT (FOR REFERENCE ONLY – DO NOT SIGN ) SERVICES AGREEMENT THIS AGREEMENT made and entered into the day and year set forth below by and between THE CITY OF FORT COLLINS, COLORADO, a Municipal Corporation, hereinafter referred to as the "City" and , a(n) [Enter State] Corporation, hereinafter referred to as "Service Provider". WITNESSETH: In consideration of the mutual covenants and obligations herein expressed, it is agreed by and between the parties hereto as follows: 1. Scope of Services. The Service Provider agrees to provide services in accordance with the scope of services attached hereto as Exhibit A, consisting of ( ) page and incorporated herein by this reference. 2. The Work Schedule. [Optional] The services to be performed pursuant to this Agreement shall be performed in accordance with the Work Schedule attached hereto as Exhibit , consisting of ( ) page,and incorporated herein by this reference. 3. Time of Commencement and Completion of Services. The services to be performed pursuant to this Agreement shall be initiated within ( ) days following execution of this Agreement. Services shall be completed no later than . Time is of the essence. Any extensions of the time limit set forth above must be agreed upon in a writing signed by the parties. 4. Contract Period. This Agreement shall commence , 2023, and shall continue in full force and effect until , 2024, unless sooner terminated as herein provided. In addition, at the option of the City, the Agreement may be extended for additional one year periods not to exceed four (4) additional one year periods. Renewals and pricing changes shall be negotiated by and agreed to by both parties only at the time of renewal. Written notice of renewal shall be provided to the Service Provider and mailed no later than thirty (30) days prior to contract end. 5. Delay. If either party is prevented in whole or in part from performing its obligations by unforeseeable causes beyond its reasonable control and without its fault or negligence, then the party so prevented shall be excused from whatever performance is prevented by such cause. To the extent that the performance is actually prevented, the Service Provider must provide written notice to the City of such condition within ten (10) days from the onset of such condition. Official Purchasing Document Last updated 2/1/2023 Services Agreement RFP 10000 Unified Endpoint Management Solution Page 18 of 48 6. Early Termination by City. Notwithstanding the time periods contained herein, the City may terminate this Agreement at any time without cause by providing written notice of termination to the Service Provider. Such notice shall be delivered at least ten (10) days prior to the termination date contained in said notice unless otherwise agreed in writing by the parties. In the event of early termination by the City, the Service Provider shall be paid for services rendered to the date of termination, subject only to the satisfactory performance of the Service Provider's obligations under this Agreement. Service Provider shall submit a final invoice within ten (10) days of the effective date of termination. Undisputed invoices shall be paid Net 30 days of the date of the invoice. Such payment shall be the Service Provider's sole right and remedy for such termination. 7. Notices. All notices provided under this Agreement shall be effective immediately when emailed or three (3) business days from the date of the notice when mailed to the following addresses: Service Provider: City: Copy to: Attn: Email Address City of Fort Collins Attn: PO Box 580 Fort Collins, CO 80522 Email Address City of Fort Collins Attn: Purchasing Dept. PO Box 580 Fort Collins, CO 80522 purchasing@fcgov.com 8. City Representative. The City will designate, prior to commencement of the work, its representative who shall make, within the scope of his or her authority, all necessary and proper decisions with reference to the services provided under this agreement. All requests for contract interpretations, change order, and other clarification or instruction shall be directed to the City Representative. The initial City Representative for this agreement is [Enter Name] and can be reached at [Enter Email] or [Enter Phone]. The Representative is subject to change by the City. 9. Compensation. The City shall pay the Service Provider for the performance of this Contract, subject to additions and deletions provided herein, ($ ) as per the attached Exhibit , consisting of ( ) page and incorporated herein by this reference. Invoices shall be emailed to invoices@fcgov.com with a copy to the City Representative. The cost of the work completed shall be paid to the Service Provider following the submittal of a correct itemized invoice by the Service Provider. The City is exempt from sales and use tax. The City’s Certificate of Exemption license number is 09804502. A copy of the license is available upon written request. The City pays invoices on Net 30 days from the date of the invoice. 10. Appropriation. To the extent this Agreement or any provision in it constitutes a multiple fiscal year debt or financial obligation of the City, it shall be subject to annual appropriation by City Council as required in Article V, Section 8(b) of the City Charter, City Code Section 8-186, Official Purchasing Document Last updated 2/1/2023 Services Agreement RFP 10000 Unified Endpoint Management Solution Page 19 of 48 and Article X, Section 20 of the Colorado Constitution. The City shall have no obligation to continue this Agreement in any fiscal year for which no such supporting appropriation has been made. 11. Independent Service Provider. The services to be performed by Service Provider are those of an independent service provider and not of an employee of the City of Fort Collins. The City shall not be responsible for withholding any portion of Service Provider's compensation hereunder for the payment of FICA, Workmen's Compensation or other taxes or benefits or for any other purpose. 12. Subcontractors. Service Provider may not subcontract any of the Work set forth in the Exhibit A, Statement of Work without the prior written consent of the City, which shall not be unreasonably withheld. If any of the Work is subcontracted hereunder (with the consent of the City), then the following provisions shall apply: (a) the subcontractor must be a reputable, qualified firm with an established record of successful performance in its respective trade performing identical or substantially similar work, (b) the subcontractor will be required to comply with all applicable terms of this Agreement, (c) the subcontract will not create any contractual relationship between any such subcontractor and the City, nor will it obligate the City to pay or see to the payment of any subcontractor, and (d) the work of the subcontractor will be subject to inspection by the City to the same extent as the work of the Service Provider. Irrespective of any subcontractors named in Exhibit A, Service Provider shall be solely responsible for performance of all duties hereunder. 13. Personal Services. It is understood that the City enters into the Agreement based on the special abilities of the Service Provider and that this Agreement shall be considered as an agreement for personal services. Accordingly, the Service Provider shall neither assign any responsibilities nor delegate any duties arising under the Agreement without the prior written consent of the City. 14. Acceptance Not Waiver. The City's approval or acceptance of, or payment for any of the services shall not be construed to operate as a waiver of any rights or benefits provided to the City under this Agreement or cause of action arising out of performance of this Agreement. 15. Warranty. a. Service Provider warrants that all work performed hereunder shall be performed with the highest degree of competence and care in accordance with accepted standards for work of a similar nature. b. Unless otherwise provided in the Agreement, all materials and equipment incorporated into any work shall be new and, where not specified, of the most suitable grade of their respective kinds for their intended use, and all workmanship shall be acceptable to City. c. Service Provider warrants all equipment, materials, labor and other work, provided under this Agreement, except City-furnished materials, equipment and labor, against defects and nonconformances in design, materials and workmanship/workwomanship for a period, the Official Purchasing Document Last updated 2/1/2023 Services Agreement RFP 10000 Unified Endpoint Management Solution Page 20 of 48 longer of; i.) The original manufacturer’s warranty term; or ii.) beginning with the start of the work and ending twelve (12) months from and after final acceptance under the Agreement, regardless whether the same were furnished or performed by Service Provider or by any of its subcontractors of any tier. Upon receipt of written notice from City of any such defect or nonconformances, the affected item or part thereof shall be redesigned, repaired, or replaced by Service Provider in a manner and at a time acceptable to City. 16. Default. Each and every term and condition hereof shall be deemed to be a material element of this Agreement. In the event either party should fail or refuse to perform according to the terms of this agreement, such party may be declared in default thereof. 17. Remedies. In the event a party has been declared in default, such defaulting party shall be allowed a period of ten (10) days within which to cure said default. In the event the default remains uncorrected, the party declaring default may elect to (a) terminate the Agreement and seek damages; (b) treat the Agreement as continuing and require specific performance; or (c) avail themselves of any other remedy at law or equity. If the non-defaulting party commences legal or equitable actions against the defaulting party, the defaulting party shall be liable to the non-defaulting party for the non-defaulting party's reasonable attorney fees and costs incurred because of the default. 18. Entire Agreement; Binding Effect; Order of Precedence; Authority to Execute. This Agreement, along with all Exhibits and other documents incorporated herein, shall constitute the entire Agreement of the parties regarding this transaction and shall be binding upon said parties, their officers, employees, agents and assigns and shall inure to the benefit of the respective survivors, heirs, personal representatives, successors and assigns of said parties. Covenants or representations not contained in this Agreement shall not be binding on the parties. In the event of a conflict between terms of the Agreement and any exhibit or attachment, the terms of the Agreement shall prevail. Each person executing this Agreement affirms that they have the necessary authority to sign on behalf of their respective party and to bind such party to the terms of this Agreement. 19. Indemnity/Insurance. a. The Service Provider agrees to indemnify and save harmless the City, its officers, agents and employees against and from any and all actions, suits, claims, demands or liability of any character whatsoever brought or asserted for injuries to or death of any person or persons, or damages to property arising out of, result from or occurring in connection with the performance of any service hereunder. b. The Service Provider shall take all necessary precautions in performing the work hereunder to prevent injury to persons and property. c. Without limiting any of the Service Provider's obligations hereunder, the Service Provider shall provide and maintain insurance coverage naming the City as an additional insured under this Agreement of the type and with the limits specified within Exhibit , consisting Official Purchasing Document Last updated 2/1/2023 Services Agreement RFP 10000 Unified Endpoint Management Solution Page 21 of 48 of one (1) page attached hereto, and incorporated herein by this reference. The Service Provider before commencing services hereunder, shall deliver to the City's Purchasing Director, purchasing@fcgov.com or P. O. Box 580, Fort Collins, Colorado 80522, one copy of a certificate evidencing the insurance coverage required from an insurance company acceptable to the City. 20. Law/Severability. The laws of the State of Colorado shall govern the construction, interpretation, execution, and enforcement of this Agreement. The Parties further agree that Larimer County District Court is the proper venue for all disputes. If the City subsequently agrees in writing that the matter may be heard in federal court, venue will be in Denver District Court. In the event any provision of this Agreement shall be held invalid or unenforceable by any court of competent jurisdiction, such holding shall not invalidate or render unenforceable any other provision of this Agreement. 21. Utilization by Other Agencies. [Optional] The City of Fort Collins reserves the right to allow other state and local governmental agencies, political subdivisions, and/or school districts to utilize the resulting award under all terms and conditions specified and upon agreement by all parties. Usage by any other entity shall not have a negative impact on the City of Fort Collins in the current term or in any future terms. Nothing herein shall be deemed to authorize or empower the Agency to act as an agent for the City of Fort Collins in connection with the exercise of any rights hereunder, and neither party shall have any right or authority to assume or create any obligation or responsibility on behalf of the other. The other Agency shall be solely responsible for any debts, liabilities, damages, claims or expenses incurred in connection with any agreement established between them and the Service Provider. The City’s concurrence hereunder is subject to the Service Provider’s commitment that this authorization shall not have a negative impact on the work to be completed for the City. 22. Prohibition Against Unlawful Discrimination. The City, in accordance with the provisions of Title VI of the Civil Rights Act of 1964 (78 Stat. 252, 42 US.C. §§ 2000d to 2000d-4) and the Regulations, affirmatively ensures that for all contracts entered into with the City, disadvantaged business enterprises are afforded a full and fair opportunity to bid on the contract and are not to be discriminated against on the grounds of race, color, or national origin in consideration for an award. The City strictly prohibits unlawful discrimination based on an individual’s gender (regardless of gender identity or gender expression), race, color, religion, creed, national origin, ancestry, age 40 years or older, marital status, disability, sexual orientation, genetic information, or other characteristics protected by law. For the purpose of this policy “sexual orientation” means a person’s actual or perceived orientation toward heterosexuality, homosexuality, and bisexuality. The City also strictly prohibits unlawful harassment in the workplace, including sexual harassment. Further, the City strictly prohibits unlawful retaliation against a person who engages in protected activity. Protected activity includes an employee complaining that he or she has been discriminated against in violation of the above policy or participating in an employment discrimination proceeding. Official Purchasing Document Last updated 2/1/2023 Services Agreement RFP 10000 Unified Endpoint Management Solution Page 22 of 48 The City requires its vendors to comply with the City’s policy for equal employment opportunity and to prohibit unlawful discrimination, harassment and retaliation. This requirement applies to all third-party vendors and their subcontractors at every tier. 23. Governmental Immunity Act. No term or condition of this Agreement shall be construed or interpreted as a waiver, express or implied, of any of the notices, requirements, immunities, rights, benefits, protections, limitations of liability, and other provisions of the Colorado Governmental Immunity Act, C.R.S. § 24-10-101 et seq. and under any other applicable law. 24. Colorado Open Records Act. The City is subject to Sec. 24-72-201 et seq. of the Colorado Revised Statute (CORA). This Agreement is subject to public disclosure in whole pursuant to CORA. 25. Dust Control. [Optional] The Service Provider shall abide by the City of Fort Collins “Dust Control and Prevention Manual,” which is available for public download at https://www. fcgov.com/airquality/pdf/dust-prevention-and-control-manual.pdf, and is incorporated herein by this reference. The City of Fort Collins has implemented this manual for all projects performed for the City of Fort Collins or located within the City of Fort Collins City limits. 26. Force Majeure. No Party hereto shall be considered in default in the performance of an obligation hereunder to the extent that performance of such obligation is delayed, hindered, or prevented by force majeure. Force majeure shall be any cause beyond the control of the defaulting Party which could not reasonably have been foreseen and guarded against. Force majeure includes, but is not limited to, acts of God, fires, riots, pandemics, incendiarism, interference by civil or military authorities, compliance with regulations or orders of military authorities, and acts of war (declared or undeclared), provided such cause could not have been reasonably foreseen and guarded against by the defaulting Party. Force majeure shall not include increases in labor, commodity, utility, material, supply, fuel, or energy costs, or compliance with regulations or orders of civil authorities. To the extent that the performance is actually prevented, the Service Provider must provide written notice to the City of such condition within ten (10) days from the onset of such condition. 27. Special Provisions. Special provisions or conditions relating to the services to be performed pursuant to this Agreement are set forth in Exhibit - Confidentiality, consisting of one (1) page, attached hereto, and incorporated herein by this reference. [Signature Page Follows] Official Purchasing Document Last updated 2/1/2023 Services Agreement RFP 10000 Unified Endpoint Management Solution Page 23 of 48 THE CITY OF FORT COLLINS, COLORADO By: Gerry Paul, Purchasing Director Date: ATTEST: APPROVED AS TO FORM: SERVICE PROVIDER By: Printed: Title: Date: Official Purchasing Document Last updated 2/1/2023 Services Agreement RFP 10000 Unified Endpoint Management Solution Page 24 of 48 EXHIBIT A SCOPE OF SERVICES Official Purchasing Document Last updated 2/1/2023 Services Agreement RFP 10000 Unified Endpoint Management Solution Page 25 of 48 EXHIBIT BID SCHEDULE/ COMPENSATION The following pricing shall remain fixed for the initial term of this Agreement. Any applicable price adjustments may only be negotiated and agreed to in writing at the time of renewal. Official Purchasing Document Last updated 2/1/2023 Services Agreement RFP 10000 Unified Endpoint Management Solution Page 26 of 48 EXHIBIT INSURANCE REQUIREMENTS The Service Provider will provide, from insurance companies acceptable to the City, the insurance coverage designated hereinafter and pay all costs. Before commencing work under this bid, the Service Provider shall furnish the City with certificates of insurance showing the type, amount, class of operations covered, effective dates and date of expiration of policies. In case of the breach of any provision of the Insurance Requirements, the City, at its option, may take out and maintain, at the expense of the Service Provider, such insurance as the City may deem proper and may deduct the cost of such insurance from any monies which may be due or become due the Service Provider under this Agreement. Insurance certificates should show the certificate holder as follows: City of Fort Collins Purchasing Division PO Box 580 Fort Collins, CO 80522 The City, its officers, agents and employees shall be named as additional insureds on the Service Provider 's general liability and automobile liability insurance policies by marking the appropriate box or adding a statement to this effect on the certificate, for any claims arising out of work performed under this Agreement. Insurance coverages shall be as follows: A. Workers' Compensation & Employer's Liability. The Service Provider shall maintain during the life of this Agreement for all of the Service Provider's employees engaged in work performed under this agreement. Workers' Compensation & Employer’s Liability insurance shall conform with statutory limits of $100,000 per accident, $500,000 disease aggregate, and $100,000 disease each employee, or as required by Colorado law. B. General Liability. The Service Provider shall maintain during the life of this Agreement such General Liability as will provide coverage for damage claims of personal injury, including accidental death, as well as for claims for property damage, which may arise directly or indirectly from the performance of work under this Agreement. Coverage for property damage shall be on a "broad form" basis. The amount of insurance for General Liability, shall not be less than $1,000,000 combined single limits for bodily injury and property damage. C. Automobile Liability. The Service Provider shall maintain during the life of this Agreement such Automobile Liability insurance as will provide coverage for damage claims of personal injury, including accidental death, as well as for claims for property damage, which may arise directly or indirectly from the performance of work under this Agreement. Coverage for property damage shall be on a "broad form" basis. The amount of insurance for Automobile Liability, shall not be less than $1,000,000 combined single limits for bodily injury and property damage. In the event any work is performed by a subcontractor, the Service Provider shall be responsible for any liability directly or indirectly arising out of the work performed under this Agreement by a subcontractor, which liability is not covered by the subcontractor's insurance. Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 27 of 48 EXHIBIT CONFIDENTIALITY IN CONNECTION WITH SERVICES provided to the City of Fort Collins (the “City”) pursuant to this Agreement (the “Agreement”), the Service Provider hereby acknowledges that it has been informed that the City has established policies and procedures with regard to the handling of confidential information and other sensitive materials. In consideration of access to certain information, data and material (hereinafter individually and collectively, regardless of nature, referred to as “information”) that are the property of and/or relate to the City or its employees, customers or suppliers, which access is related to the performance of services that the Service Provider has agreed to perform, the Service Provider hereby acknowledges and agrees as follows: That information that has or will come into its possession or knowledge in connection with the performance of services for the City may be confidential and/or proprietary. The Service Provider agrees to treat as confidential (a) all information that is owned by the City, or that relates to the business of the City, or that is used by the City in carrying on business, and (b) all information that is proprietary to a third party (including but not limited to customers and suppliers of the City). The Service Provider shall not disclose any such information to any person not having a legitimate need-to-know for purposes authorized by the City. Further, the Service Provider shall not use such information to obtain any economic or other benefit for itself, or any third party, except as specifically authorized by the City. The foregoing to the contrary notwithstanding, the Service Provider understands that it shall have no obligation under this Agreement with respect to information and material that (a) becomes generally known to the public by publication or some means other than a breach of duty of this Agreement, or (b) is required by law, regulation or court order to be disclosed, provided that the request for such disclosure is proper and the disclosure does not exceed that which is required. In the event of any disclosure under (b) above, the Service Provider shall furnish a copy of this Agreement to anyone to whom it is required to make such disclosure and shall promptly advise the City in writing of each such disclosure. In the event that the Service Provider ceases to perform services for the City, or the City so requests for any reason, the Service Provider shall promptly return to the City any and all information described hereinabove, including all copies, notes and/or summaries (handwritten or mechanically produced) thereof, in its possession or control or as to which it otherwise has access. The Service Provider understands and agrees that the City’s remedies at law for a breach of the Service Provider’s obligations under this Confidentiality Agreement may be inadequate and that the City shall, in the event of any such breach, be entitled to seek equitable relief (including without limitation preliminary and permanent injunctive relief and specific performance) in addition to all other remedies provided hereunder or available at law. Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 28 of 48 Appendix A Functional Requirements Functional Requirements: The following section details the functional requirements for the system solution. The City is looking for a comprehensive and best practice solution for Unified Endpoint Management Solution. Respond with “Yes”, “No”, “NA”, or “Future Release” in the column titled “Included” to indicate if the feature is present in the current proposed release. REQUIRED FUNCTIONALITY Description Included: “Yes” “No” “NA” “Future Release” Alternate Proposal, Comments SaaS Cloud Deployment: Solution should be SaaS/Cloud, minimizing the need for on-premise infrastructure. Implementation Services: Implementor should provide full implementation services for deployment, configuration, and training. Either on-site or remote. Ongoing support/training: Solution should have continuing education support for staff turn-over and ongoing training needs. End Point Support – Client/Server: The solution should support software deployment and patching for Windows, macOS, RHEL. Software Deployment – Self-Service: Ability for users to self-serve software installations beyond the standard build. The solution should function as a centralized “Software Store”, allowing IT administrators to manage and distribute software installations and updates. Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 29 of 48 Software Deployment – Push: Solutions should provide the ability for technicians to push software to individuals, groups, or enterprise-wide. It should be able to schedule and automate the deployment of software updates to minimize disruption during business hours or during optimal times for different groups or departments. Patch Management – Identification: Ability to identify threats to the endpoint. Both patching needs, and zero- day. Patch Management – Environment Support: Solution should have capability to enforce different deployment and patching policies for various user and device groups, particularly distinguishing between production and non- production environments, ranging from small to large scale deployments across the environment. Patch Management – Common Software: Solution should support automated patch management for a large library of common software, including detection of available patches for all applicable software in the City environment. Patch Management – Non-Common Software: Solution should support the ability to build/customize updates/patches for non-common software contained in the vendor’s library. Patch Management – Automation: Ability to apply patching automation to completely remove human intervention or configuration. Vulnerability Management – Identification: Solution should provide vulnerability assessment of all managed endpoints (Via Agent or Agentless method) Vulnerability Management – Management: Solution should provide a single “pane of glass” dashboards to manage vulnerabilities, and provide criticality insights into vulnerabilities, based on industry standard categorizations. Vulnerability Management – Remediation: Solution should provide tight integration between vulnerability identification and patching remedial actions, ideally one- click. Security – SSO Support: Solution should support Azure Entra AD SAML for Single Sign-On (SSO). Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 30 of 48 Endpoint Security – Rouge Software: The solution shall provide the capability to manage and control the installation and execution of applications on endpoints to prevent the use of unauthorized, malicious, or rouge software. Technician Features – No Client Tools: Technician’s UI should be completely accessible via a web-based interface, without the need for a client tool. Reporting/Analytics – Built In: Solutions should provide out-of-the-box and ad-hoc reporting capabilities for patches, vulnerabilities and deployments to analyze the scope and impact of risks and opportunities in the environment. Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 31 of 48 Additional Desired Features: The following section details the Additional Desired Features for the system solution. The City is looking for a comprehensive and best practice solution for Unified Endpoint Management Solution.. Respond with “Yes”, “No”, “NA”, or “Future Release” in the column titled “Included” to indicate if the feature is present in the current proposed release. DESIRED ADDITIONAL FUNCTIONALITY Description Included: “Yes” “No” “NA” “Future Release” Alternate Proposal, Comments End Point Support – iOS: The solution should support software deployment for iOS. End Point Support – Android: The solution should support software deployment for Android. End Point Support – ChromeOS: The solution should support software deployment for ChromeOS ITSM Integration – Agent Support: Solution should provide tight integration with FreshService ITSM for agent interactions (e.g. Remote Control, Software Push, etc). ITSM Integration – Task Management: Solution should integrate with FreshService ITSM for task management or include a similar tasking mechanism/API. Software Development – OS: Ability to deploy OS to Bare Metal client/server. Software Development -Rollback: In the event of a failed update or deployment, the solution should offer robust rollback capabilities to revert systems to their previous stable state. This feature is crucial to minimize downtime and maintain operational continuity. Patch Management – Software Library: Solution should support either hosted or direct source downloading for patch/update files instead of hosting them locally (on city network). This repository should automatically update to include the latest, patched versions of software, thereby reducing the administrative burden of manual updates. Software Licensing: The solution will ideally integrate with our Software License Management solution (Snow Software, https://docs.snowsoftware.com/commander/rest- api/V3/index.html). Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 32 of 48 Security – Data Encryption: The solution shall provide support for data encryption mechanisms to protect sensitive data stored on endpoints. Security – Authenticity: The solution should include feature to verify the authenticity of distributed applications and prevent the distribution of malicious software. Endpoint Security – Enforcement: The solution shall provide granular control over endpoint devices to manage access permissions including USB ports, enforce security policies, and prevent unauthorized devices from connecting to the network. Reporting/Analytics – Data Portability: Data from tool, should be consumable into Business Intelligence Solutions (e.g. PowerBI, Azure). Reporting/Analytics – Compliance: The solution shall provide the capability to monitor endpoint compliance with security policies and regulatory requirements, generate compliance reports, and take corrective actions as needed. Technician Features – Remote Control: Should have ability for Technicians to remote to the user’s desktop, in the user’s security context (aka screen sharing). Non-PROD UEM Environment: Solution should provide a sandbox/testbed for testing configurations and to support patching and software pushes to a test endpoint environment. Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 33 of 48 Appendix B SaaS Cyber Vendor Questionnaire 1. Data Ownership: The City of Fort Collins will own all rights, title and interest in its data that is related to the services provided. All data obtained by the vendor regarding the performance of these services shall become and remain the property of the City. The vendor will not share or distribute any City data to any other entity without the City's written consent. Can you comply with this? Answer: 2. Data Protection: Describe how you safeguard the confidentiality, integrity, and availability of City information, including encryption of personal data in transit and at rest, and access control. Do you have a privacy and security policy, and does the policy apply to customers’ private data including personal identifiable information? Answer: 3. Data destruction: What procedures and safeguards does the vendor have in place for sanitizing and disposing of City data according to prescribed retention schedules or following the conclusion of a project or termination of a contract to render it unrecoverable and prevent accidental and/or unauthorized access to City data? Answer: 4. Data Location: Are the data centers where City data may be stored or processed located exclusively in the United States? Do you allow your personnel or contractors to store City data on portable devices? Do your personnel and contractors access City data remotely? Answer: 5. Security Incidents or Data Breaches: Describe your data breach and incident response communication plans. Has the company experienced any security breaches? If yes, explain. Answer: 6. Breach Responsibilities: In addition to data breach communication, what additional responsibilities do you have to your customers in the event of a data breach involving private data that is in your control, or in the control of your contractors/subsidiaries, at the time of breach? Do you have cybersecurity insurance? If yes, provide an overview of the coverage. Answer: 7. Background Checks: Do you conduct criminal background checks on all staff, including subcontractors? Do you employ people convicted of any crime of dishonesty? Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 34 of 48 Answer: 8. Access to Security Logs and Reports: The vendor shall provide reports to the City in a format specified in the SLA agreed to by the vendor and the City. Reports shall include latency statistics, user access, user access IP address, user access history and security logs for all City files related to this contract. Can you comply with this? Answer: 9. Risk Assessments and Audits: Do you conduct periodic risk assessments to identify cybersecurity threats, vulnerabilities, and potential business consequences? Do you have regular independent assessments of your cybersecurity processes? Do you perform independent audits of your data center? How often? What level of audit is performed (e.g., SOC2)? Would you be willing to share redacted versions of your most recent risk assessment and audit report with the City? Answer: 10. Change Control and Advance Notice: How do you communicate upgrades (e.g., major upgrades, minor upgrades, system changes) that may impact service availability and performance to your customers? Answer: 11. Upgrades: Are technology systems (e.g., servers, network devices, operating systems, applications, malware definitions) regularly updated/patched? Do you have any systems in production that are past end of life or that can no longer be patched? Answer: 12. Non-disclosure and Separation of Duties: Describe how you enforce separation of job duties and limit staff knowledge of City data to that which is necessary to perform job duties. Answer: 13. Import and Export of Data: Describe the data import and export processes from the customer’s perspective. Answer: 14. Subcontractor Disclosure: Identify all your strategic business partners related to services provided under this arrangement, including but not limited to all subcontractors or other entities or individuals who may be a party to a joint venture or similar agreement with the you, and who shall be involved in any application development and/or operations. Answer: 15. Right to Remove Individuals: The City shall have the right at any time to require that the vendor remove from interaction with the City any vendor representative who the City Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 35 of 48 believes is detrimental to its working relationship with the vendor. Can you comply with this? Answer: 16. Encryption of Data at Rest: Can you ensure hard drive encryption consistent with validated cryptography standards as referenced in FIPS 140-2, Security Requirements for Cryptographic Modules for all personal data? Answer: 17. Internet-Facing Security: We may use BitSight (like a credit report for cyber security) to assess your internet-facing security. Do you subscribe to BitSight or a similar service, and if so, are you willing to provide a sanitized report? Answer: 18. Service Interruption: In the event of an interruption of your service, what is your process for notifying customer operations of the circumstances of the interruption or outage and the expected recovery time? Answer: 19. Backup and Recovery: What is your backup & recovery SLA? What are the actual results/metrics vs. the SLA for the last 12 months? Is your backup data encrypted and, if so, to what standard? Answer: 20. Authentication: Do you have an internal password policy? Do you have complexity or length requirements for passwords? Can employees/contractors remotely connect to your production systems? (i.e., VPN. Is multi-factor authentication available? Do you require MFA for administration of your service (local or remote)? Do you support SSO/SAML ADFS for customer access? Answer: 21. Cyber Insurance: Does your firm carry cyber insurance? If so, what are your insurance levels? Answer: 22. CAIQ Questionnaire: Lack of security control transparency is a leading inhibitor to the adoption of cloud services. As part of the City of Fort Collin’s Information Security program we are requesting that all our Cloud Service Providers complete and submit the Cloud Security Alliance (CSA) CONSENSUS ASSESSMENTS INITIATIVE QUESTIONNAIRE (CAIQ). This will enable Utilities to have greater confidence that the information is being appropriately protected, and that processes are in place for appropriate action to be taken where any areas of concern emerge. The City will request that the Vendor of Choice complete the CAIQ to assess the maturity of policies, systems and controls that are in place related to services you provide. The questionnaire is available here or www.cloudsecurityalliance.org. The question set was developed by CSA in partnership with industry groups to provide an agreed question set that can be used across the supply chain and is focused on providing industry-accepted ways to document what security controls exist in IaaS, Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 36 of 48 PaaS, and SaaS offerings, providing greater security control transparency. Describe Vendor familiarity with the CAIQ questionnaire. Answer: Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 37 of 48 Appendix C Total Cost of Ownership Spreadsheet Total Cost of Ownership Vendor ____________ Yr1 Yr2 Yr3 Yr4 Yr5 Cost ITEM Summary 2024 2025 2026 2027 2028 One time Costs Ongoing costs Total One Time Costs $0.00 $0.00 $0.00 $0.00 $0.00 Total On Going Costs $0.00 $0.00 $0.00 $0.00 $0.00 TOTAL $0.00 $0.00 $0.00 $0.00 $0.00 Include spreadsheet of all costs for implementation, licensing, training, maintenance & support, etc. with your proposal so that we can see all one-time and recurring costs for your solution for Years 1-5. Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 38 of 48 ATTACHMENT A AMERICAN RESCUE PLAN ACT (ARPA) FEDERALLY REQUIRED CONTRACT CLAUSES 1. NO FEDERAL GOVERNMENT OBLIGATION TO THIRD PARTIES Applies to all FTA-Assisted Third-Party Contracts and Subcontracts. No Obligation by the Federal Government. 1. The Purchaser and Contractor acknowledge and agree that, notwithstanding any concurrence by the Federal Government in or approval of the solicitation or award of the underlying contract, absent the express written consent by the Federal Government, the Federal Government is not a party to this contract and shall not be subject to any obligations or liabilities to the Purchaser, Contractor, or any other party (whether or not a party to that contract) pertaining to any matter resulting from the underlying contract. 2. The Contractor agrees to include the above clause in each subcontract financed in whole or in part with Federal assistance provided by FTA. It is further agreed that the clause shall not be modified, except to identify the sub-contractor who will be subject to it provisions. 2. RECORDS RETENTIONS AND ACCESS TO SITES OF PERFORMANCE Applies to all FTA-Assisted Third-Party Contracts and Subcontracts. 1. For a period of three years following Contract closing, the Contractor and its subcontractors shall maintain, preserve and make available to the City, the FTA Administrator, the Comptroller General of the United States, and any of their authorized representatives, access at all reasonable times to any books, documents, papers and records of Contractor which are directly pertinent to this Contract for the purposes of making audits, examinations, excerpts and transcriptions. Contractor also agrees, otherwise comply with 49 U.S.C. § 5325(g), and federal access to records requirements as set forth in the applicable U.S. DOT Common Rule. 2. The Contractor shall maintain and the City shall have the right to examine and audit all records and other evidence sufficient to reflect properly all prices, costs or rates negotiated and invoiced in performance of this Contract. This right of examination shall include inspection at all reasonable times of the Contractor’s offices engaged in performing the Contract. 3. If this Contract is completely or partially terminated, the Contractor shall make available the records relating to the work terminated until 3 years after any resulting final termination settlement. The Contractor shall make available records relating to appeals under the Disputes clause or to litigation or the settlement of claims arising under or relating to this Contract until such appeals, litigation, or claims are finally resolved. 4. Access to Records and Reports” applies with equal force and effect to any subcontractors hired by the Contractor to perform Work under this Contract. The Contractor shall insert this provision in all subcontracts under this Contract and require subcontractor compliance therewith. Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 39 of 48 5. Access to the Sites of Performance. The Recipient agrees to permit, and to require its Third Party Participants to permit, FTA to have access to the sites of performance of its Award, the accompanying Underlying Agreement, and any Amendments thereto, and to make site visits as needed in compliance with the U.S. DOT Common Rules. 6. Closeout. Closeout of the Award does not alter the record retention or access requirements of this section of this Master Agreement. 3. FEDERAL CHANGES Applies to all FTA-Assisted Third-Party Contracts and Subcontracts. Federal Changes - Contractor shall at all times comply with all applicable FTA regulations, policies, procedures and directives, including without limitation those listed directly or by reference in the Master Agreement between Purchaser and FTA, as they may be amended or promulgated from time to time during the term of this contract. Contractor's failure to so comply shall constitute a material breach of this contract. 4. CIVIL RIGHTS (EEO, TITLE VI & ADA) Applies to all FTA-Assisted Third-Party Contracts and Subcontracts. The following requirements apply to the underlying contract: a) The Recipient agrees that it must comply with applicable federal civil rights laws, regulations, requirements, and guidance, and follow applicable federal guidance, except as the Federal Government determines otherwise in writing. Therefore, unless a Recipient or a federal program, including the Tribal Transit Program or the Indian Tribe Recipient, is specifically exempted from a civil rights statute, FTA requires compliance with that civil rights statute, including compliance with equity in service. b) Nondiscrimination in Federal Public Transportation Programs. The Recipient agrees to, and assures that it and each Third-Party Participant, will: (1) Prohibit discrimination based on the basis of race, color, religion, national origin, sex, disability, or age. (2) Prohibit the: (a) Exclusion from participation in employment or a business opportunity for reasons identified in 49 U.S.C. § 5332, (b) Denial of program benefits in employment or a business opportunity identified in 49 U.S.C. § 5332, or (c) Discrimination, including discrimination in employment or a business opportunity identified in 49 U.S.C. § 5332. (3) Follow: (a) The most recent edition of FTA Circular 4702.1, “Title VI Requirements and Guidelines for Federal Transit Administration Recipients,” to the extent consistent with applicable federal laws, regulations, requirements, and guidance, and other applicable federal guidance that may be issued, but (b) FTA does not require an Indian Tribe to comply with FTA program- specific guidelines for Title VI when administering its Underlying Agreement supported with federal assistance under the Tribal Transit Program. c) Nondiscrimination – Title VI of the Civil Rights Act. The Recipient agrees to, and assures that each Third Party Participant, will: (1) Prohibit discrimination based on race, color, or national origin, (2) Comply with: (a) Title VI of the Civil Rights Act of 1964, as amended, 42 U.S.C. § 2000d et seq., (b) U.S. DOT regulations, “Nondiscrimination in Federally-Assisted Programs of the Department of Transportation – Effectuation of Title VI of the Civil Rights Act of 1964,” 49 C.F.R. part 21, and (c) Federal transit law, specifically 49 U.S.C. § 5332, and (3) Follow: (a) The most recent edition of FTA Circular 4702.1, “Title VI Requirements and Guidelines for Federal Transit Administration Recipients,” to the extent consistent with applicable Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 40 of 48 federal laws, regulations, requirements, and guidance, (b) U.S. DOJ, “Guidelines for the enforcement of Title VI, Civil Rights Act of 1964,” 28 C.F.R. § 50.3, and (c) All other applicable federal guidance that may be issued. d) Equal Employment Opportunity. (1) Federal Requirements and Guidance. The Recipient agrees to, and assures that each Third Party Participant will, prohibit discrimination on the basis of race, color, religion, sex, or national origin, and: (a) Comply with Title VII of the Civil Rights Act of 1964, as amended, 42 U.S.C. § 2000e et seq., (b) Facilitate compliance with Executive Order No. 11246, “Equal Employment Opportunity,” as amended by Executive Order No. 11375, “Amending Executive Order No. 11246, Relating to Equal Employment Opportunity,” 42U.S.C. § 2000e note, (c) Comply with Federal transit law, specifically 49 U.S.C. § 5332, as stated in section a, and (d) Comply with FTA Circular 4704.1other applicable EEO laws and regulations, as provided in Federal guidance, including laws and regulations prohibiting discrimination on the basis of disability, except as the Federal Government determines otherwise in writing, (2) General. The Recipient agrees to: (a) Ensure that applicants for employment are employed and employees are treated during employment without discrimination on the basis of their: 1 Race, 2 Color, 3 Religion, 4 Sex, 5 Disability, 6 Age, or 7 National origin, (b) Take affirmative action that includes, but is not limited to: 1 Recruitment advertising, 2 Recruitment, 3Employment, 4 Rates of pay, 5 Other forms of compensation, 6 Selection for training, including apprenticeship, 7 Upgrading, 8 Transfers, 9 Demotions, 10 Layoffs, and 11 Terminations, but (b) Indian Tribe. Title VII of the Civil Rights Act of 1964, as amended, exempts Indian Tribes under the definition of "Employer". (3) Equal Employment Opportunity Requirements for Construction Activities. In addition to the foregoing, when undertaking “construction” as recognized by the U.S. Department of Labor (U.S. DOL), the Recipient agrees to comply, and assures the compliance of each Third Party Participant, with: (a) U.S. DOL regulations, “Office of Federal Contract Compliance Programs, September 2019 Equal Employment Opportunity, Department of Labor,” 41 C.F.R. chapter 60, and (b) Executive Order No. 11246, “Equal Employment Opportunity,” as amended by Executive Order No. 11375, “Amending Executive Order No. 11246, Relating to Equal Employment Opportunity,” 42U.S.C. § 2000e note. e) Disadvantaged Business Enterprise. To the extent authorized by applicable federal laws and regulations, the Recipient agrees to facilitate, and assures that each Third- Party Participant will facilitate, participation by small business concerns owned and controlled by socially and economically disadvantaged individuals, also referred to as “Disadvantaged Business Enterprises” (DBEs), in the Underlying Agreement as follows: (1) Statutory and Regulatory Requirements. The Recipient agrees to comply with: (a) Section 1101(b) of the FAST Act, 23 U.S.C. §101 note, (b) U.S. DOT regulations, “Participation by Disadvantaged Business Enterprises in Department of Transportation Financial Assistance Programs,” 49 C.F.R. part 26, and (c) Federal transit law, specifically 49 U.S.C. § 5332, as provided in section 12a of this Master Agreement. (2) DBE Program Requirements. A Recipient that receives planning, capital and/or operating assistance and that will award prime third-party contracts exceeding $250,000 in a federal fiscal year must have a DBE program meeting the requirements of 49 C.F.R. Part 26, which is approved by FTA, and establish an annual DBE participation goal. (3) Special Requirements for a Transit Vehicle Manufacturer (TVM). The Recipient agrees that: (a) TVM Certification. Each TVM, as a condition of being authorized to bid or propose on FTA-assisted transit vehicle procurements, must certify that it has complied with the requirements of 49 C.F.R. part 26, and (b) Reporting TVM Awards. Within 30 days of any third-party contract award for a vehicle Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 41 of 48 purchase, the Recipient must submit to FTA the name of the TVM contractor and the total dollar value of the third-party contract and notify FTA that this information has been attached to FTA’s electronic award and management system, the Recipient must also submit subsequent notifications if options are exercised in subsequent years to ensure the TVM is still in good standing. (4) Assurance. As required by 49 C.F.R. § 26.13(a): (a) Recipient Assurance. The Recipient agrees and assures that: 1 It must not discriminate on the basis of race, color, national origin, or sex in the award and performance of any FTA or U.S. DOT-assisted contract, or in the administration of its DBE program or the requirements of 49 C.F.R. part 26, 2 It must take all necessary and reasonable steps under 49 C.F.R. part 26 to ensure nondiscrimination in the award and administration of U.S. DOT- assisted contracts, 3 Its DBE program, as required under 49 C.F.R. part 26 and as approved by U.S. DOT, is incorporated by reference and made part of the Underlying Agreement, and 4 Implementation of its DBE program approved by U.S. DOT is a legal obligation and failure to carry out its terms shall be treated as a violation of this Master Agreement. (b) Subrecipient/Third Party Contractor/Third Party Subcontractor Assurance. The Recipient agrees and assures that it will include the following assurance in each subagreement and third party contract it signs with a Subrecipient or Third Party Contractor and agrees to obtain the agreement of each of its Subrecipients, Third Party Contractors, and Third Party Subcontractors to include the following assurance in every subagreement and third party contract it signs: 1 The Subrecipient, each Third Party Contractor, and each Third Party Subcontractor must not discriminate on the basis of race, color, national origin, or sex in the award and performance of any FTA or U.S. DOT-assisted subagreement, third party contract, and third party subcontract, as applicable, and the administration of its DBE program or the requirements of 49 C.F.R. part 26, 2 The Subrecipient, each Third Party Contractor, and each Third Party Subcontractor must take all necessary and reasonable steps under 49 C.F.R. part 26 to ensure nondiscrimination in the award and administration of U.S. DOT-assisted subagreements, third party contracts, and third party subcontracts, as applicable, 3 Failure by the Subrecipient and any of its Third Party Contractors or Third Party Subcontractors to carry out the requirements of this subparagraph 13.d(4)(b) is a material breach of this subagreement, third party contract, or third party subcontract, as applicable, and 4 The following remedies, or such other remedy as the Recipient deems appropriate, include, but are not limited to, withholding monthly progress payments; assessing sanctions; liquidated damages; and/or disqualifying the Subrecipient, Third Party Contractor, or Third Party Subcontractor from future bidding as non-responsible. (5) Remedies. Upon notification to the Recipient of its failure to carry out its approved program, FTA or U.S. DOT may impose sanctions as provided for under 49 C.F.R. part 26, and, in appropriate cases, refer the matter for enforcement under either or both 18 U.S.C. § 1001, and/or the Program Fraud Civil Remedies Act of 1986, 31 U.S.C. § 3801 et seq. f) Nondiscrimination on the Basis of Sex. The Recipient agrees to comply with federal prohibitions against discrimination on the basis of sex, including: (1) Title IX of the Education Amendments of 1972, as amended, 20 U.S.C. § 1681 et seq., (2) U.S. DOT regulations, “Nondiscrimination on the Basis of Sex in Education Programs or Activities Receiving Federal Financial Assistance,” 49 C.F.R. part 25, and (3) Federal transit law, specifically 49 U.S.C. § 5332. g) Nondiscrimination on the Basis of Age. The Recipient agrees to comply with federal prohibitions against discrimination on the basis of age, including: (1) The Age Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 42 of 48 Discrimination in Employment Act, 29 U.S.C. §§ 621 – 634, which prohibits discrimination on the basis of age, (2) U.S. Equal Employment Opportunity Commission (U.S. EEOC) regulations, “Age Discrimination in Employment Act,” 29 C.F.R. part 1625, (3) The Age Discrimination Act of 1975, as amended, 42 U.S.C. § 6101 et seq., which prohibits discrimination against individuals on the basis of age in the administration of Programs, Projects, and related activities receiving federal assistance, (4) U.S. Health and Human Services regulations, “Nondiscrimination on the Basis of Age in Programs or Activities Receiving Federal Financial Assistance,” 45 C.F.R. part 90, and (5) Federal transit law, specifically 49 U.S.C. § 5332. h) Nondiscrimination on the Basis of Disability. The Recipient agrees to comply with the following federal prohibitions against discrimination on the basis of disability: (1) Federal laws, including: (a) section 504 of the Rehabilitation Act of 1973, as amended, 29 U.S.C. § 794, which prohibits discrimination on the basis of disability in the administration of federally assisted Programs, Projects, or activities, (b) The Americans with Disabilities Act of 1990 (ADA), as amended, 42 U.S.C. § 12101 et seq., which requires that accessible facilities and services be made available to individuals with disabilities: 1 For FTA Recipients generally, Titles I, II, and III of the ADA apply, but 2 For Indian Tribes, Titles II and III of the ADA apply, but Title I of the ADA does not apply because it exempts Indian Tribes from the definition of “employer,” (c) The Architectural Barriers Act of 1968, as amended, 42 U.S.C. § 4151 et seq., which requires that buildings and public accommodations be accessible to individuals with disabilities, (d) Federal transit law, specifically 49 U.S.C. § 5332, which now includes disability as a prohibited basis for discrimination, and (e) Other applicable federal laws, regulations and requirements pertaining to access for seniors or individuals with disabilities. (2) Federal regulations, including: (a) U.S. DOT regulations, “Transportation Services for Individuals with Disabilities (ADA),” 49 C.F.R. part 37, (b) U.S. DOT regulations, “Nondiscrimination on the Basis of Disability in Programs and Activities Receiving or Benefiting from Federal Financial Assistance,” 49 C.F.R. part 27, (c) Joint U.S. Architectural and Transportation Barriers Compliance Board (U.S. ATBCB) and U.S. DOT regulations, “Americans With Disabilities (ADA) Accessibility Specifications for Transportation Vehicles,” 36 C.F.R. part 1192 and 49 C.F.R. part 38, (d) U.S. DOT regulations, “Transportation for Individuals with Disabilities: Passenger Vessels,” 49 C.F.R. part 39, (e) U.S. DOJ regulations, “Nondiscrimination on the Basis of Disability in State and Local Government Services,” 28 C.F.R. part 35, (f) U.S. DOJ regulations, “Nondiscrimination on the Basis of Disability by Public Accommodations and in Commercial Facilities,” 28 C.F.R. part 36, (g) U.S. EEOC, “Regulations to Implement the Equal Employment Provisions of the Americans with Disabilities Act,” 29 C.F.R. part 1630, (h) U.S. Federal Communications Commission regulations, “Telecommunications Relay Services and Related Customer Premises Equipment for Persons with Disabilities,” 47 C.F.R. part 64, Subpart F, (i) U.S. ATBCB regulations, “Electronic and Information Technology Accessibility Standards,” 36 C.F.R. part 1194, and (j) FTA regulations, “Transportation for Elderly and Handicapped Persons,” 49 C.F.R. part 609, and (k) Other applicable federal civil rights and nondiscrimination guidance. (i) Drug or Alcohol Abuse - Confidentiality and Other Civil Rights Protections. The Recipient agrees to comply with the confidentiality and civil rights protections of: (1) The Drug Abuse Office and Treatment Act of 1972, as amended, 21 U.S.C. § 1101 et seq., (2) The Comprehensive Alcohol Abuse and Alcoholism Prevention, Treatment and Rehabilitation Act of 1970, as amended, 42 U.S.C. § Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 43 of 48 4541 et seq., and (3) The Public Health Service Act, as amended, 42 U.S.C. §§ 290dd – 290dd-2. (j) Access to Services for Persons with Limited English Proficiency. The Recipient agrees to promote accessibility of public transportation services to persons with limited understanding of English by following: (1) Executive Order No. 13166, “Improving Access to Services for Persons with Limited English Proficiency,” August 11, 2000, 42 U.S.C. § 2000d-1 note, and (2) U.S. DOT Notice, “DOT Policy Guidance Concerning Recipients’ Responsibilities to Limited English Proficiency (LEP) Persons,” 70 Fed. Reg. 74087, December 14, 2005. (k) Other Nondiscrimination Laws, Regulations, Requirements, and Guidance. The Recipient agrees to comply with other applicable federal nondiscrimination laws, regulations, and requirements, and follow federal guidance prohibiting discrimination. (l) Remedies. Remedies for failure to comply with applicable federal Civil Rights laws, regulations, requirements, and guidance may be enforced as provided in those federal laws, regulations, or requirements. (m) Free Speech and Religious Liberty. The recipient shall ensure that Federal funding is expended in full accordance with the U.S. Constitution, Federal Law, and statutory and public policy requirements: including, but not limited to, those protecting free speech, religious liberty, public welfare, the environment, and prohibiting discrimination. 5. INCORPORATION OF FEDERAL TRANSIT ADMINISTRATION (FTA) TERMS (Per FTA C 4330.1F) Applies to all FTA-Assisted Third-Party Contracts and Subcontracts. Incorporation of Federal Transit Administration (FTA) Terms - The preceding provisions include, in part, certain Standard Terms and Conditions required by DOT, whether or not expressly set forth in the preceding contract provisions. All contractual provisions required by DOT, as set forth in FTA Circular 4220.1F, are hereby incorporated by reference. Anything to the contrary herein notwithstanding, all FTA mandated terms shall be deemed to control in the event of a conflict with other provisions contained in this Agreement. The Contractor shall not perform any act, fail to perform any act, or refuse to comply with any City requests which would cause the City to be in violation of the FTA terms and conditions. 6. ENERGY CONSERVATION REQUIREMENTS Applies to all FTA-Assisted Third-Party Contracts and Subcontracts. Energy Conservation - The contractor agrees to comply with mandatory standards and policies relating to energy efficiency which are contained in the state energy conservation plans under the Energy Policy and Conservation Act, as amended 42 U.S.C. § 6321, et. seq., and perform an energy assessment for any building constructed, reconstructed, or modified with federal assistance required under FTA regulations, “Requirements for Energy Assessments,” 49 CFR Part 622, subpart C. 7. PROHIBITION ON CERTAIN TELECOMMUNICATIONS AND VIDEO SURVEILLANCE SERVICES OR EQUIPMENT (2 CFR §200.216) Applies to all FTA-Assisted Third-Party Contracts and Subcontracts. Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 44 of 48 Contractor is prohibited from using equipment, services, or systems that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system. As described in Public Law 115-232, section 889, covered telecommunications equipment is telecommunications equipment produced by Huawei Technologies Company or ZTE Corporation (or any subsidiary or affiliate of such entities). a. For the purpose of public safety, security of government facilities, physical security surveillance of critical infrastructure, and other national security purposes, video surveillance and telecommunications equipment produced by Hytera Communications Corporation, Hangzhou Hikvision Digital Technology Company, or Dahua Technology Company (or any subsidiary or affiliate of such entities). b. Telecommunications or video surveillance services provided by such entities or using such equipment. c. Telecommunications or video surveillance equipment or services produced or provided by an entity that the Secretary of Defense, in consultation with the Director of the National Intelligence or the Director of the Federal Bureau of Investigation, reasonably believes to be an entity owned or controlled by, or otherwise connected to, the government of a covered foreign country. 8. TERMINATION PROVISIONS (APPENDIX II TO PART 200) Applies to all contracts except micro-purchases. a. Termination for Convenience. The City may terminate this Contract, in whole or in part, for any reason, upon five (5) days written notice to the Contractor. In such event, the City shall pay the Contractor its costs, including reasonable Contract close-out costs, and profit on Work performed up to the time of termination. The Contractor shall promptly submit its termination claim to the City to be paid the Contractor. If the Contractor has any property in its possession belonging to the City, the Contractor will account for the same, and dispose of it in a manner the City directs. b. Termination for Breach. Either Party’s failure to perform any of its material obligations under this Contract, in whole or in part or in a timely or satisfactory manner, will be a breach. The institution of proceedings under any bankruptcy, insolvency, reorganization or similar law, by or against Contractor, or the appointment of a receiver or similar officer for Contractor or any of its property, which is not vacated or fully stayed within thirty (30) days after the institution of such proceeding, will also constitute a breach. In the event of a breach, the non- breaching Party may provide written notice of the breach to the other Party. If the notified Party does not cure the breach, at its sole expense, within thirty (30) days after delivery of notice, the non-breaching Party may exercise any of its remedies provided under this Contract or at law, including immediate termination of the Contract. 9. GOVERNMENT-WIDE DEBARMENT AND SUSPENSION Applies to all contracts and subcontracts exceeding $25,000. Suspension and Debarment Executive. The contractor attests that it is not listed on the government-wide exclusions in the System for Award Management (SAM). Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 45 of 48 The Contractor agrees to the following: (a) It will comply with the requirements of 2 C.F.R. part 180, subpart C, as adopted and supplemented by U.S. DOT regulations at 2 C.F.R. part 1200, which include the following: (a) It will not enter into any arrangement to participate in the development or implementation of the Project with any Third Party Participant that is debarred or suspended except as authorized by: 1 U.S. DOT regulations, “Non-procurement Suspension and Debarment,” 2 C.F.R. part 1200, 2 U.S. OMB, “Guidelines to Agencies on Government wide Debarment and Suspension (Non-procurement),” 2 C.F.R. part 180, including any amendments thereto, and 3 Executive Orders Nos. 12549 and 12689, “Debarment and Suspension,” 31 U.S.C. § 6101 note, (b) It will review the U.S. GSA “System for Award Management,” https://www.sam.gov, if required by U.S. DOT regulations, 2 C.F.R. part 1200, and (c) It will include, and require each of its Third Party Participants to include, a similar provision in each lower tier covered transaction, ensuring that each lower tier Third Party Participant: 1 Will comply with Federal debarment and suspension requirements, and 2 Reviews the “System for Award Management” at https://www.sam.gov, if necessary to comply with U.S. DOT regulations, 2 C.F.R. part 1200, and (b) If the Recipient suspends, debars, or takes any similar action against a Third-Party Participant or individual, the Recipient will provide immediate written notice to the: (a) FTA Regional Counsel for the Region in which the Recipient is located or implements the Project, (b) FTA Project Manager if the Project is administered by an FTA Headquarters Office, or (c) FTA Chief Counsel. 10. NOTICE TO FTA AND U.S. DOT INSPECTOR GENERAL OF INFORMATION RELATED TO FRAUD, WASTE, ABUSE OR OTHER LEGAL MATTERS Applies to all contracts and subcontracts exceeding $25,000. The prime contractor is required to “flow down” this requirement to subcontractors. a. If a current or prospective legal matter that may affect the Federal Government emerges, the Recipient must promptly notify the FTA Chief Counsel and FTA Regional Counsel for the Region in which the Recipient is located. The Recipient must include a similar notification requirement in its Third Party Agreements and must require each Third Party Participant to include an equivalent provision in its subagreements at every tier, for any agreement that is a “covered transaction” according to 2 C.F.R. §§ 180.220 and 1200.220. 1. The types of legal matters that require notification include, but are not limited to, a major dispute, breach, default, litigation, or naming the Federal Government as a party to litigation or a legal disagreement in any forum for any reason. 2. Matters that may affect the Federal Government include, but are not limited to, the Federal Government’s interests in the Award, the accompanying Underlying Agreement, and any Amendments thereto, or the Federal Government’s administration or enforcement of federal laws, regulations, and requirements. 3. Additional Notice to U.S. DOT Inspector General. The Recipient must promptly notify the U.S. DOT Inspector General in addition to the FTA Chief Counsel or Regional Counsel for the Region in which the Recipient is located, if the Recipient has knowledge of potential fraud, waste, or abuse occurring on a Project receiving assistance from FTA. The notification provision applies if a person has or may have submitted a false claim under the False Claims Act, 31 U.S.C. § 3729, et seq., or Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 46 of 48 has or may have committed a criminal or civil violation of law pertaining to such matters as fraud, conflict of interest, bid rigging, misappropriation or embezzlement, bribery, gratuity, or similar misconduct involving federal assistance. This responsibility occurs whether the Project is subject to this Agreement or another agreement between the Recipient and FTA, or an agreement involving a principal, officer, employee, agent, or Third Party Participant of the Recipient. It also applies to subcontractors at any tier. Knowledge, as used in this paragraph, includes, but is not limited to, knowledge of a criminal or civil investigation by a Federal, state, or local law enforcement or other investigative agency, a criminal indictment or civil complaint, or probable cause that could support a criminal indictment, or any other credible information in the possession of the Recipient. In this paragraph, “promptly” means to refer information without delay and without change. This notification provision applies to all divisions of the Recipient, including divisions tasked with law enforcement or investigatory functions. b. Federal Interest in Recovery. The Federal Government retains the right to a proportionate share of any proceeds recovered from any third party, based on the percentage of the federal share for the Underlying Agreement. Notwithstanding the preceding sentence, the Recipient may return all liquidated damages it receives to its Award Budget for its Underlying Agreement rather than return the federal share of those liquidated damages to the Federal Government, provided that the Recipient receives FTA’s prior written concurrence. c. Enforcement. The Recipient must pursue its legal rights and remedies available under any third party agreement or any federal, state, or local law or regulation. 11. BYRD ANTI-LOBBYING AMENDMENT (31 U.S.C. 1352) Applies to all contracts exceeding $100,000. Byrd Anti-Lobbying Amendment (31 U.S.C. 1352). Contractor attests that it has filed the required certification under the Byrd Anti-Lobbying Amendment. Contractor attests that it has certified that it will not and has not used Federal appropriated funds to pay any person or organization for influencing or attempting to influence an officer or employee of any agency, a member of Congress, officer or employee of Congress, or an employee of a member of Congress in connection with obtaining any Federal Contract, grant or any other award covered by 31 U.S.C. 1352. Contractor further attests that it has disclosed, and will continue to disclose, any lobbying with non- Federal funds that takes place in connection with obtaining any Federal award. If contract exceeds $100,000 the contractor is required to sign the attached certification. 12. BUY AMERICA REQUIREMENTS Applies to contracts exceeding $150,000 (When tangible property of construction is acquired.) Buy America – The domestic preference requirements of 49 U.S.C. § 5323(j), and FTA regulations, “Buy America Requirements,” 49 CFR Part 661, to the extent consistent with 49 U.S.C. 5323(j) apply to this contract. Uniform Administrative Requirements. Compliance with FTA’s Buy America requirements shall be deemed to satisfy 2 CFR § 200.322, “Domestic Preference for Procurements”. Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 47 of 48 Limitations on Certain Rolling Stock Procurements. The contractor will comply with the limitations on certain rolling stock procurements at 49 U.S.C. § 5323(u). If contract exceeds $150,000, the contractor is required to sign the attached certification, except those subject to a general waiver. 13. CLEAN AIR AND FEDERAL WATER POLLUTION CONTROL ACT Applies to all contracts exceeding $150,000. Clean Air Act (42 U.S.C. 7401-7671q.) and the Federal Water Pollution Control Act (33 U.S.C. 1251-1387), as amended. a. All parties agree to comply with all applicable standards, orders or regulations issued pursuant to the Clean Air Act (42 U.S.C. 7401-7671q) and the Federal Water Pollution Control Act as amended (33 U.S.C. 1251-1387). All parties shall report violations to the Federal awarding agency and the Regional Office of the Environmental Protection Agency (EPA). b. The Contractor agrees to report each violation to the City and understands and agrees that the City will, in turn, report each violation as required to assure notification to the Federal Emergency Management Agency, and the appropriate Environmental Protection Agency Regional Office. c. The Contractor agrees to include these requirements in each subcontract exceeding $150,000 financed in whole or in part with Federal funds. 14. 6002 OF THE SOLID WASTE DISPOSAL ACT (2 CFR 200.322) Applies to all contracts except micro-purchases. Recovered Materials - All parties agree to comply with all applicable requirements of Section 6002 of the Solid Waste Disposal Act, as amended by the Resource Conservation and Recovery Act. The requirements of Section 6002 include procuring only items designated in guidelines of the Environmental Protection Agency (EPA) at 40 CFR part 247 that contain the highest percentage of recovered materials practicable, consistent with maintaining a satisfactory level of competition, where the purchase price of the item exceeds $10,000 or the value of the quantity acquired during the preceding fiscal year exceeded $10,000; procuring solid waste management services in a manner that maximizes energy and resource recovery; and establishing an affirmative procurement program for procurement of recovered materials identified in the EPA guidelines. a. In the performance of this contract, the Contractor shall make maximum use of products containing recovered materials that are EPA-designated items unless the product cannot be acquired: • Competitively within a timeframe providing for compliance with the contract performance schedule; • Meeting contract performance requirements; or • At a reasonable price. b. Information about this requirement, along with the list of EPA-designated items, is available at EPA’s Comprehensive Procurement Guidelines web site: Official Purchasing Document Last updated 2/1/2023 RFP 10000 Unified Endpoint Management Solution Page 48 of 48 https://www.epa.gov/smm/comprehensive-procurement-guideline-cpg-program 15. ASSIGNABILITY Applies to all contracts except micro-purchases. Neither the City nor the Contractor shall assign or transfer any of its rights or obligations hereunder without the prior written consent of the other. 16. CITY OF FORT COLLINS BID PROTEST PROCEDURES Applies to all contracts except micro-purchases. The City of Fort Collins has a protest procedure, covering any phase of solicitation or award, including but not limited to specification or award. The protest procedures are available from the Purchasing Department, City of Fort Collins, 215 N. Mason, Street, 2nd Floor, P. O. Box 580, Fort Collins, CO. 80522. You may also request a copy of the procedures by emailing: Purchasing@fcgov.com or calling 970-221-6775. 17. TITLE VI OF THE CIVIL RIGHTS ACT OF 1964 Applies to all contracts except micro-purchases. The sub-grantee, contractor, subcontractor, successor, transferee, and assignee shall comply with Title VI of the Civil Rights Act of 1964, which prohibits recipients of federal financial assistance from excluding from a program or activity, denying benefits of, or otherwise discriminating against a person on the basis of race, color, or national origin (42 U.S.C. § 2000d et seq.), as implemented by the Department of the Treasury’s Title VI regulations, 31 CFR Part 22, which are herein incorporated by reference and made a part of this contract (or agreement). Title VI also includes protection to persons with “Limited English Proficiency” in any program or activity receiving federal financial assistance, 42 U.S.C. § 2000d et seq., as implemented by the Department of the Treasury’s Title VI regulations, 31 CFR Part 22, and herein incorporated by reference and made a part of this contract or agreement. 18. INCREASING SEAT BELT USE IN THE UNITED STATES Applies to all contracts except micro-purchases. Pursuant to Executive Order 13043, 62 FR 19217 (Apr. 18, 1997), the City encourages its contractors to adopt and enforce on-the-job seat belt policies and programs for their employees when operating company-owned, rented, or personally owned vehicles. 19. REDUCING TEXT MESSAGING WHILE DRIVING Applies to all contracts except micro-purchases. Pursuant to Executive Order 13513, 74 FR 51225 (Oct. 6, 2009), the City encourages its employees, subrecipients, and contractors to adopt and enforce policies that ban text messaging while driving, and the City has established workplace safety policies to decrease accidents caused by distracted drivers.