South Dakota Department of Social Services Security and Vendor Questionnaire RFP 17760
South Dakota Department of Social Services | State of South DakotaState · Pierre, SDThe 30-second brief
The South Dakota Department of Social Services (DSS) is issuing a Security and Vendor Questionnaire as part of RFP 17760. This document is required for all vendors proposing technology solutions, whether hosted on-premises, State Cloud Hosted, or Vendor Hosted (e.g., AWS, Azure). The questionnaire covers critical procurement areas including cost itemization for software and licensing, infrastructure requirements (email, API access, VPN), Identity and Access Management (OIDC, OAuth, SSO), application development technologies (.NET, Java, React, Node, Python), and security posture (CVE/OWASP checks, SOC 2 Type II reports, penetration testing). Vendors must also detail their disaster recovery plans, data backup policies, and compliance with ADA/WCAG accessibility standards. The state requires information on whether the solution uses Artificial Intelligence (AI) and if the vendor is a banned entity under federal or state guidelines.
Security and Vendor Questionnaire, License information, Cost proposal, API documentation, Server configuration and hardening documentation, Disaster recovery plan, Privacy policy, Background check policy
Security posture, hosting solution compatibility, technical support, technical architecture, data ownership, regulatory compliance
Hear what South Dakota Department of Social Services | State of South Dakota plans next before it's posted.
Get alerts freeFree account · 30-second setup · No credit card
Summary
The South Dakota Department of Social Services (DSS) is issuing a Security and Vendor Questionnaire as part of RFP 17760.
This document is required for all vendors proposing technology solutions, whether hosted on-premises, State Cloud Hosted, or Vendor Hosted (e.g., AWS, Azure). The questionnaire covers critical procurement areas including cost itemization for software and licensing, infrastructure requirements (email, API access, VPN), Identity and Access Management (OIDC, OAuth, SSO), application development technologies (.NET, Java, React, Node, Python), and security posture (CVE/OWASP checks, SOC 2 Type II reports, penetration testing). Vendors must also detail their disaster recovery plans, data backup policies, and compliance with ADA/WCAG accessibility standards. The state requires information on whether the solution uses Artificial Intelligence (AI) and if the vendor is a banned entity under federal or state guidelines.
EVALUATION CRITERIA
6- Security posture
- Hosting solution compatibility
- Technical support
- Technical architecture
- Data ownership
- Regulatory compliance
REQUIRED DELIVERABLES
8- Security and Vendor Questionnaire
- License information
- Cost proposal
- API documentation
- Server configuration and hardening documentation
- Disaster recovery plan
- Privacy policy
- Background check policy
- Scope location
- South Dakota
- Reported agency
- South Dakota Department of Social Services
Questions about this RFP
How do I respond to this RFP from South Dakota Department of Social Services | State of South Dakota?
Review the full solicitation document for submission requirements, evaluation criteria, and deadlines. The solicitation specifies required deliverables that must be addressed in your response.
Can small businesses or minority-owned firms bid on this RFP?
Most government agencies, including South Dakota Department of Social Services | State of South Dakota in SD, encourage participation from small businesses, minority-owned, women-owned, and disadvantaged business enterprises (MBE/WBE/DBE). Check the full solicitation for any small business participation goals.
What happens after the RFP submission deadline?
After the deadline, the issuing agency reviews all submissions against the stated evaluation criteria. This typically includes a compliance check, technical evaluation, cost analysis, and may involve oral presentations with shortlisted vendors.
What are the key deliverables?
The solicitation specifies the following deliverables: Security and Vendor Questionnaire, License information, Cost proposal, API documentation, Server configuration and hardening documentation, Disaster recovery plan, Privacy policy, Background check policy. Proposals should clearly address how each deliverable will be met.
Show 4 more questions
What are the evaluation criteria for this solicitation?
This solicitation includes specific evaluation criteria that will be used to score proposals. The criteria include: "Security posture, hosting solution compatibility, technical support, technical architecture, data ownership, regulatory compliance" Vendors should carefully align their proposals with each criterion to maximize their score.
Where can I find more RFPs from South Dakota Department of Social Services | State of South Dakota?
All active and historical solicitations from South Dakota Department of Social Services | State of South Dakota are tracked and searchable. As a state agency, South Dakota Department of Social Services | State of South Dakota regularly publishes solicitations. Visit the agency profile to see current open bids, past contracts, vendor relationships, and decision-maker contacts.
What documents are required to bid on this RFP?
Requirements vary by solicitation, but common documents include a technical proposal, cost/price proposal, proof of insurance, relevant certifications, past performance references, and any forms specified in the solicitation. Review the full document from South Dakota Department of Social Services | State of South Dakota for the complete list.
What is the scope of this project?
This solicitation defines a specific project scope. The scope covers the following locations: South Dakota. Review the full solicitation for detailed scope requirements.