This page uses extracted PDF text. Text can misread numbers, dates or table columns. Check the PDF before quoting or interpreting it. Redacted areas remain redacted.
RFP Name RFP 20-xxxx-xxxx
D.21 Does your solution require data transmission between ☐ Yes Describe methodology and requirements:
multiple solution provider networks? For example, data ☒ No The solution does not require data transmission
transmission requirements between City networks and between multiple solution provider networks or
Vendor-controlled networks, or Vendor and subcontractor between vendor and subcontractor networks. Data
networks? exchange occurs securely between the City and the
Vendor using HTTPS, but no system-to-system
integration or remote access between parties is
required.
D.22 Is there a requirement for organization to access system ☐ Yes Please describe remote access requirements and any
remotely from the internet? ☒ No built-in features:
Remote access from the internet is not required for
the organization to access the system.
D.23 For management and organization support, can the system ☒ Yes Please provide additional information below:
support secure remote access such as multi-factor ☐ No The system supports secure remote access with
authentication? multi-factor authentication (MFA) enabled by
default for both administrative and user accounts.
Supported MFA methods include Okta Verify, Duo,
Google Authenticator, and SMS.
D.24 Is the system compatible with mainstream anti-virus and ☐ Yes Please specify compatible products:
endpoint protection software? ☐ No SentinelOne is deployed as the primary endpoint
☒ N/A protection and antivirus solution across all devices.
There is no information confirming compatibility
with other mainstream anti-virus or endpoint
protection software. Only SentinelOne is being
used and supported.
D.25 For web application security, has the organization ☒ Yes Please provide additional information below:
implemented controls in the proposed solution to protect ☐ No Controls are implemented to protect against
against SQL injection, cross-site scripting, and other common SQL injection, cross-site scripting, and other
attacks? common attacks. Input validation and
sanitization are enforced, OWASP Top Ten
standards are followed, and security testing
(SAST/DAST) is conducted. Web application
firewalls, secure coding practices, and
Page 18 of 19Jump to an indexed page (163 of 163)