City of Jacksonville Beach, Beaches Energy Services
RFP #: 05-1314 CIP v5 Assessment Program
Date: 01/10/2014
City of Jacksonville Beach Purchasing Division: 1460A Shetter Ave., Jacksonville Beach, FL 32250 Tel: 904-247-6229 Fax: 904-270-1639
THIS IS NOT COMPLETE RFP To request a package via email, send us an email at
[email protected] or visit our website at www.jacksonvillebeach.org and signup for email notification.
REQUEST FOR PROPOSAL RFP #:
TITLE:
05-1314 CRITICAL INFRASTRUCTURE PROTECTION Version 5 ASSESSMENT PROGRAM
Proposal Submittal Deadline: Day: Date: Time:
Wednesday February 5, 2014 2:00 P. M.
Location: 1460-A Shetter Avenue Jacksonville Beach, FL 32250
Jason Phitides Jason Phitides, Purchasing Administrator 1460A Shetter Avenue, Jacksonville Beach, FL 32250 Page 1 of 7
City of Jacksonville Beach, Beaches Energy Services
RFP #: 05-1314 CIP v5 Assessment Program
Date: 01/10/2014
THIS IS NOT COMPLETE RFP REQUEST FOR PROPOSAL Sealed proposals in DUPLICATE plus one electronic file of the plan, subject to the terms and conditions specified in this Request For Proposal (RFP), will be received until 2:00 P.M., Wednesday, February 5, 2014, then opened publicly by the Purchasing & Procurement Division, 1460-A Shetter Avenue, 2nd Floor, Jacksonville Beach, Florida 32250 for furnishing the following: RFP No. 05-1314CRITICAL INFRASTRUCTURE PROTECTION Ver.5 ASSESSMENT PROG. On November 21, 2013, the Federal Energy Regulatory Commission (FERC) approved Version 5 of the Critical Infrastructure Protection Reliability Standards, submitted by the North American Electric Reliability Corporation (NERC). The CIP version 5 Standards (CIP-002-5 through CIP-011-1) adopt new cyber security controls and extend the scope of the systems that are protected by the CIP Reliability Standards. In order to comply with these standards, the City of Jacksonville Beach d/b/a Beaches Energy Services (BES) is soliciting responses from experienced consulting firms to: a) review physical security and electronic security/network design (including fiber communications) at specific locations; and b) identify deficiencies and recommend actions in a clear, readily understandable manner that can be implemented under the direction of BES. Proposal packages can be obtained from the Purchasing & Procurement Division, 1460-A Shetter Avenue, 2nd Floor, Jacksonville Beach, Florida 32250, telephone 904-247-6229. Please submit duplicate completed proposal packages including one electronic file in one sealed envelope clearly marked with proposal number and respondent name. It is incumbent upon the respondent(s) to ensure that all copies of the proposal package submittals are complete and exact replicas of each other. Packages received without the requested information or quantities may be rejected. Place the sealed envelope within another sealed envelope clearly marked in the same manner as the first envelope. This is done to prevent accidental opening of the sealed submittals in our mailroom. Submissions, received after the due date and time will not be considered. Modifications received after the due date and/or letters of withdrawal received after the due date or after contract award, whichever is applicable will not be considered. No verbal interpretations will be made of any documents. Requests for such interpretations shall be made in writing or via email at
[email protected] at least seven (7) days prior to the proposal opening date. Interpretation will be in the form of an addendum and issued to all respondents. CITY OF JACKSONVILLE BEACH Jason Phitides, Purchasing Administrator, Purchasing & Procurement Division Page 2 of 7
City of Jacksonville Beach, Beaches Energy Services
RFP #: 05-1314 CIP v5 Assessment Program
Date: 01/10/2014
INDEX
SECTION A:
SPECIFICATIONS
pages 4
…………………………………………………….. page
4
2. Scope of Services …………………………………………………….. page
5
3. Deliverables
…………………………………………………….. page
5
4. Evaluation
…………………………………………………….. page
5-6
5. RFP Response
…………………………………………………….. page
6-7
1. Overview
6. Proposal is not a bid………………………………………………….. page
Page 3 of 7
7
City of Jacksonville Beach, Beaches Energy Services
RFP #: 05-1314 CIP v5 Assessment Program
Date: 01/10/2014
SECTION “A” SPECIFICATIONS To provide contractual services for a project titled; CRITICAL INFRASTRUCTURE PROTECTION version 5 ASSESSMENT PROGRAM 1. OVERVIEW On November 21, 2013, the Federal Energy Regulatory Commission (FERC) approved Version 5 of the Critical Infrastructure Protection Reliability Standards, submitted by the North American Electric Reliability Corporation (NERC). The CIP version 5 Standards (CIP-002-5 through CIP-011-1) adopt new cyber security controls and extend the scope of the systems that are protected by the CIP Reliability Standards. In order to comply with these standards, the City of Jacksonville Beach d/b/a Beaches Energy Services (BES) is soliciting responses from experienced consulting firms to: c) review physical security and electronic security/network design (including fiber communications) at specific locations; and d) identify deficiencies and recommend actions in a clear, readily understandable manner that can be implemented under the direction of BES. The following sites have been identified by BES for the assessment: Neptune Beach Substation Penman Substation Jacksonville Beach Substation Backup Control Center at the O&M Building on Shetter Avenue Butler Substation The Marriott Transfer Switch Ft. Diego Substation Guano Substation Sampson Substation The measures initiated by this RFP are designed to satisfy compliance directives and raise the level of employee skills and awareness that regulatory standards and operations are not mutually exclusive; transforming the Beaches Energy Services operating environment into one of Best Practices.
Page 4 of 7
Proposal Tender Form
City of Jacksonville Beach, Beaches Energy Services
RFP #: 05-1314 CIP v5 Assessment Program
Date: 01/10/2014
2. SCOPE OF SERVICES Scope of Work includes an on-site review of the facilities, identifying deficiencies, developing recommendations and preparing a detailed implementation plan that brings Beaches Energy Services in compliance with the new regulatory standards. Beaches Energy Services anticipates the total budget estimate will not exceed $25,000.
3.
DELIVERABLES: Deliverables include two written copies and one electronic file of the plan. The plan shall be developed in a manner with enough clarity that actions are readily understood and can be implemented by internal staff. The plan should address: 3.1
project approach/methodology,
3.2
recommendations for each site regarding physical security and electronic security/network design,
3.3
cost estimates for each recommendation/activity,
3.4
recommendations for operating the BES SCADA communications system with the City of Jacksonville Beach operations, and
3.5
recommendations to improve/sustain program initiatives.
4. EVALUATION: Evaluation includes the determination of a numeric score based on the values associated with the criteria identified below. Points will be totaled for a final score. The proposal with the most points will be recommended for award. Proposals that omit any of the items may be rejected as non-responsive. Each respondent submitting a response does so solely at the respondent’s cost, risk and expense. Beaches Energy Services’ will utilize internal staff members together with Purchasing and Procurement to evaluate the proposals. Qualified firm(s) must be able to demonstrate the following on their response: 4.1
Expertise in industry and governmental best practices, standards, and policies for cyber security;
4.2
Knowledge and understanding of the appropriate cyber security measures for sectors targeted in this RFP;
4.3
Extensive and specific experience successfully conducting projects similar in size, scope and complexity. Page 5 of 7
Proposal Tender Form
City of Jacksonville Beach, Beaches Energy Services
RFP #: 05-1314 CIP v5 Assessment Program
Date: 01/10/2014
Evaluation Factor
Score weight
Responsiveness to the RFP format, content and scope of work Must demonstrate a broad knowledge of conducting assessments and implementing corrective measures related to regulatory compliance directives
10%
40%
Must demonstrate a complete knowledge of NERC/FRCC CIP v5 regulatory standards
35%
Approach/methodology to the project
15%
It is anticipated that one vendor will be selected for this project. 5. RFP RESPONSE: RFP response requires a standard format to facilitate the review of the submittals. The intent of the proposal format is to expedite review and evaluation. It is not the intent to constrain firms with regard to content, but to assure that the specific requirements set forth in this RFP are addressed in a uniform manner amenable to review and evaluation. The RFP shall be signed by the firm’s representative who is authorized to contractually bind the firm. All proposal packages are to include the following components: 1. 2. 3. 4. 5. 6. 7. 8.
Form 1: Proposal Tender Form Table of Contents Letter of Transmittal Form 2: Award Notice Form Form 3: Required Disclosure Form Form 4: Drug-Free Workplace Compliance Form Form 5: Non-Collusion Affidavit Respondent’s Qualifications and Experience a) Briefly introduce your firm, providing a summary of the administration, organization and staffing of your firm, including multiple offices, if applicable. Provide an organizational chart indicating the positions and names of the core management team which will undertake this project. b) Describe the experience of the firm in the last thirty-six (36) months in performing consulting services in similar size and scope.
9. Project Timeline – provide a detailed timeline by task including milestones and payments. Page 6 of 7
Proposal Tender Form
City of Jacksonville Beach, Beaches Energy Services
RFP #: 05-1314 CIP v5 Assessment Program
Date: 01/10/2014
10. Methodology including technical approach and understanding of the scope of the project. a) Proposals must include a narrative description of the firms’ plan for accomplishing the work and services to be provided to Beaches Energy Services. b) Proposals must indicate a clear understanding of the scope of work, including a detailed project plan for this project outlying major tasks and responsibilities, time frames, and staff assigned for each category of the scope of work identified above. c) Proposals shall clearly distinguish the firms’ duties and responsibilities and those of Beaches Energy Services. Absence of this distinction shall mean the firm is assuming full responsibility for the tasks. 11. Any additional information to be determined by the firm.
Respondents may be requested to make a short presentation (no more than one hour) via conference call to assist in the evaluation of their proposal. Beaches Energy Services will notify respondents to schedule a time for the presentation.
6. PROPOSAL IS NOT A BID: This Request for Proposal is not to be considered a bid. BES will evaluate responses based on the criteria set forth in this RFP. The evaluation process is to consider all requested criteria to determine which firm is the most highly qualified to perform the required services.
THIS IS NOT COMPLETE RFP To request a package via email, send us an email at
[email protected] or visit our website at www.jacksonvillebeach.org and signup for email notification.
Page 7 of 7
Proposal Tender Form
