Contact: Gerri Hill, Manager of Purchasing and Contract Administration
Virginia Railway Express, 1500 King Street, Suite 202, Alexandria, VA 22314
Main Office: (703) 684-1001 Direct/Fax: (703) 838-5427 Email: ghill@vre.org
Page 1 of 71

_____________________________________________________________________
PART I
A
RFP INFORMATION
Purpose/Background
B
C
PART II SCHEDULE
Procurement Schedule
Notices for Offerors
4
D
E
Scope of Work
Special Terms and Conditions
5
11
12
14
15
20
PART III GENERAL INFORMATION, INSTRUCTIONS
AND CONDITIONS FOR OFFERORS
F
G
General Information About the RFP
General Instructions for Offerors
H General Conditions for Offerors
PART IV UTILIZATION OF DISADVANTAGED BUSINESS
ENTERPRISES AND SMALL BUSINESS CONCERNS
I
J
Disadvantaged Business Enterprises Policy
Small Business Concerns Policy
23
24
26
29
32
33
35
PART V PROPOSAL REQUIREMENTS
Proposal Content
Cost Information
Submission of Proposal
38
39
46
47
K
L
M
RFP No. 016-020
Risk and Security Assessment of VRE’s
Bandwidth and Network Infrastructure
Virginia Railway Express
2

__________________________________________________________________
______________________________________________________________________
PART VI EVALUATION OF PROPOSALS, CONTRACT AWARD 50
AND CONTRACT EXECUTION
P Contract Execution
PART VII CONTRACT DELIVERABLES
N
O
Q
R
S
Evaluation of Proposals
Contract Award
Certificate of Insurance
Surety Bond
Invoices
51
53
55
56
57
58
59
61 T Project Reports/Documents
PART VIII DOCUMENTS, EXHIBITS AND OTHER
ATTACHMENTS
63
U
V
Exhibits
List of Attachments
64
71
RFP No. 016-020
Risk and Security Assessment of VRE’s
Bandwidth and Network Infrastructure
Virginia Railway Express
3

A Purpose/Background
B Procurement Schedule
C Notices for Offerors
RFP No. 016-020
Risk and Security Assessment of VRE’s
Bandwidth and Network Infrastructure
Virginia Railway Express
4

A.1 PURPOSE
The purpose of this Request for Proposals (RFP) is to establish a Contract with one (1) qualified and experienced Contractor to perform a risk and security assessment of VRE’s bandwidth and network infrastructure. The Contractor shall also develop a plan to optimize and enhance VRE’s critical network infrastructure, as well as provide security training for VRE’s end users.
A.2 VRE BACKGROUND
A.
The Virginia Railway Express (VRE) is a commuter rail service linking the District of Columbia and Northern Virginia. The Northern Virginia Transportation
Commission (NVTC) and the Potomac and Rappahannock Transportation
Commission (PRTC) are transportation districts established under Virginia law and jointly own this service. An Operations Board consisting of members from each of the jurisdictions within the VRE service area governs the development and operation of VRE and serves as an advisory board to the NVTC and PRTC governing boards. Use of the term VRE in this RFP refers to NVTC and PRTC.
B.
VRE began operations in 1992 and carries an average of approximately 19,000 weekday trips on two (2) lines. In January 2014, VRE’s Operations Board adopted System Plan 2040 which calls for expansion of service, requiring the addition of railcars, expansion of station and yard facilities, as well as expanding operations to meet the goal of doubling ridership by 2040. VRE’s multi-prong program addresses short term growth needs, as well as longer term capacity improvements and investments in maintaining and servicing VRE’s equipment and facilities.
C.
The primary mission of VRE is to provide commuter-oriented passenger rail service between outlying suburbs and the Washington-Arlington-Alexandria urban core. Some tourists and “day-trippers” also ride the trains. The service is heavily oriented towards that core area in the morning peak and in the opposite direction in the evening peak.
RFP No. 016-020
Risk and Security Assessment of VRE’s
Bandwidth and Network Infrastructure
Virginia Railway Express
5

A.3 PROJECT BACKGROUND
A.
A risk and security assessment of this scope and magnitude has never been undertaken by VRE.
B.
VRE’s Information Technology (IT) Department provides service to all physical locations within the service area, as identified in Section A.3E
.
C.
VRE presently utilizes Verizon, Verizon Wireless, COX and Comcast as service providers.
D.
VRE’s current IT infrastructure encompasses approximately one hundred and thirty-six (136) routers, firewalls and switches to include, but not limited to, the following:
1.
Six (6) ASA-5500 series, each with two (2) interfaces
2.
Three (3) Sonicwall 3600 series as follows: a.
Disaster Recovery Facility – five (5) interfaces b.
Alexandria Headquarters – six (6) interfaces c.
Alexandria Office of Development – six (6) interfaces
3.
Four (4) Sonicwall NSA 220 series as follows: a.
b.
Fredericksburg Facilities Office – five (5) interfaces
Broad Run Yard – two (2) interfaces c.
Broad Run Service and Inspection (S&I) Building – two (2) interfaces d.
Crossroads Yard – four (4) interfaces
4.
Approximately twenty-two (22) physical servers
5.
Approximately five (5) virtual hosts
6.
Approximately twenty-four (24) virtual servers
RFP No. 016-020
Risk and Security Assessment of VRE’s
Bandwidth and Network Infrastructure
Virginia Railway Express
6

7.
Approximately forty-eight (48) mobile devices to include iPhone,
Android, Blackberry, Mifi and 4G LTE routers.
8.
Approximately five (5) wireless networks located at VRE’s Alexandria
Headquarters, Alexandria Office of Development, Disaster Recovery
Facility, Fredericksburg Facilities Office and Crossroads Yard.
9.
Approximately five (5) separate wide area networks with the following speeds: a.
MPLS (Frame) operating at speeds of 128k, 1.5M, 3M, 30M and
45M b.
Internet operating at speeds of 1.5M, 30M and 150M c.
3G/4G devices operating at 4G LTE speeds as available
E.
The Contractor shall have access to all VRE physical locations as part of the assessment. The locations include nineteen (19) stations, six (6) office locations, nine (9) Ticket Operating Machines (TOM) sales locations, two (2) mobile vans and the Disaster Recovery Facility. The Disaster Recovery Facility is located in the VRE service area; the exact location will be provided following contract award. All other physical locations are as follows:
1.
Station Locations: a.
Union Station - 50 Massachusetts Avenue, N.E., Washington, D.C.
20002 b.
L’Enfant – 650 Virginia Avenue, S.W., Washington, D.C. 20024 c.
Crystal City - 1503 South Crystal Drive, Arlington, VA 22202 d.
Alexandria - 110 Callahan Drive, Alexandria, VA 22301 e.
Backlick Road - 6900 Hechinger Drive, Springfield, VA 22151 f.
Rolling Road - 9016 Burke Road, Burke, VA 22015 g.
Burke Centre - 10399 Premier Court, Burke, VA 22015 h.
Manassas Park - 9300 Manassas Drive, Manassas Park, VA 20111
RFP No. 016-020
Risk and Security Assessment of VRE’s
Bandwidth and Network Infrastructure
Virginia Railway Express
7

i.
Manassas - 9451 West Street, Manassas, VA 20110 j.
Broad Run - 10637 Piper Lane, Bristow, VA 20136 k.
Franconia–Springfield - 6880 Frontier Drive, Springfield, VA
22150 l.
Lorton - 8990 Lorton Station Boulevard, Lorton, VA 22079 m.
Woodbridge - 1040 Express Way, Woodbridge, VA 22191 n.
Rippon - 15511 Farm Creek Drive, Woodbridge, VA 22191 o.
Quantico - 550 Railroad Avenue, Quantico, VA 22134 p.
Brooke - 1721 Brooke Road, Stafford, VA 22554 q.
Leeland Road - 275 Leeland Road, Falmouth, VA 22405 r.
Fredericksburg - 200 Lafayette Boulevard, Fredericksburg, VA
22401 s.
Spotsylvania - 9442 Crossroads Parkway, Fredericksburg, VA
22408
2.
Office Locations: a.
Alexandria Headquarters – 1500 King Street, Suite 202,
Alexandria, VA 22314 b.
Alexandria Office of Development – 127 South Peyton Street,
Suite 210, Alexandria, VA 22314 c.
Disaster Recovery Facility – located within the VRE service area d.
Crossroads Yard - 9400 Crossroads Parkway, Fredericksburg, VA
22408 e.
Broad Run Yard - 10637 Piper Lane, Bristow, VA 20136 f.
Fredericksburg Facilities Office – 400 Prince Edward Street,
Fredericksburg, VA 22401
RFP No. 016-020
Risk and Security Assessment of VRE’s
Bandwidth and Network Infrastructure
Virginia Railway Express
8

3.
TOM Sales Locations: a.
Crystal City - 251 18th Street South, Arlington VA, 22202 b.
Arlington - 1501 Wilson Boulevard, Suite 1100, Arlington, VA
22209 c.
Broad Run - 10637 Piper Lane, Bristow, VA 20136 d.
Woodbridge - 1040 Express Way, Woodbridge, VA 22191 e.
Leeland Road - 327 Deacon Road, Falmouth, VA 22405 f.
Fredericksburg - 905 Lafayette Boulevard, Fredericksburg, VA
22401 g.
Quantico - 550 Railroad Avenue, Quantico, VA 22134 h.
Springfield - 6880 Frontier Drive, Springfield, VA 22150 i.
Spotsylvania - 4640 Lee Hill School Drive, Fredericksburg, VA
22408
4.
Mobile Van Locations: a.
L’Enfant - 6th & 7th Street at C Street S.W., Washington, D.C.
20024 b.
Alexandria - 110 Callahan Drive, Alexandria, VA 22301
F.
The following is the anticipated number of users by physical location:
1.
VRE’s nineteen (19) station locations – no employees
2.
Crossroads Yard – approximately four (4) employees along with several maintenance contractors
3.
Broad Run Yard - one (1) employee along with several maintenance contractors
4.
Alexandria Headquarters - approximately thirty-three (33) employees
5.
Alexandria Office of Development - approximately six (6) employees
RFP No. 016-020
Risk and Security Assessment of VRE’s
Bandwidth and Network Infrastructure
Virginia Railway Express
9

G.
VRE currently associates an internal data center with the Disaster Recovery
Facility, as well as the Alexandria Headquarters. The data centers are owned and operated by VRE.
H.
VRE currently has the following approximate IP Address space:
1.
Internal IP Addresses a.
Alexandria Headquarters – two hundred and fifty-six (256) b.
Alexandria Office of Development – forty (40) c.
Disaster Recovery Facility – sixty (60) d.
Fredericksburg Facilities Office – thirty (30) e.
f.
Crossroads Yard – twenty (20)
Broad Run Yard – twenty (20) g.
Each of the nineteen (19) station locations – fifteen (15)
2.
External IP Addresses a.
Alexandria Headquarters – fourteen (14) b.
Alexandria Office of Development – fourteen (14) c.
Fredericksburg Facilities Office – fourteen (14) d.
Disaster Recovery Facility – fourteen (14) e.
Long-Term Evolution (LTE) – two (2)
RFP No. 016-020
Risk and Security Assessment of VRE’s
Bandwidth and Network Infrastructure
Virginia Railway Express
10

RFP Issued March 17, 2016
Submission of Written Questions March 31, 2016 at 11:00 A.M. EST
(See Page 12)
Proposals Due (Closing Date and Time) April 25, 2016 at 2:00 P.M. EST
(See Page 49)
Interviews (Optional) May 11 , 2016 at 10:00 A.M. to 4:00 P.M. EST
(See Page 53)
_________________________________________________________________________ __ _
_________________________________________________________________________ __ _
RFP No. 016-020
Risk and Security Assessment of VRE’s
Bandwidth and Network Infrastructure
Virginia Railway Express
11

C.1
VRE INCLEMENT WEATHER POLICY
In the event of inclement weather conditions, such as heavy snowfall, icy streets and sidewalks, flooding, earthquakes, tornadoes, and other natural disasters, which result in the cancellation of VRE service operation, the Proposal due date will be extended to the next business day VRE service operates.
Notifications of service operation interruptions and the resumption of service are generally posted on VRE’s website. An official addendum to the solicitation will be posted on VRE’s website at the earliest opportunity once VRE service resumes operation.
C.2
AVAILABILITY OF SOLICITATION DOCUMENTS
The electronic versions of the solicitation documents are intended to provide convenience to prospective Offerors.
B e advised that it is the responsibility of prospective Offerors to monitor VRE’s website for any addenda, notices or postings. Failure to submit signed addenda may be grounds to declare a Proposal non-responsive.
C.3 SUBMISSION OF WRITTEN QUESTIONS
A.
Deadline : All questions and requests for clarifications regarding the meaning or interpretation of this RFP and other solicitation documents, or any ambiguities, discrepancies, inconsistencies, or conflicts in or between any of the technical, pricing, or contractual provisions, must be submitted no later than the date and time specified in
SECTION B – PROCUREMENT SCHEDULE of this RFP.
Questions and clarifications requested after such time will not be answered unless
VRE elects, in its sole discretion, to do so.
B.
Format for Questions : Questions must be submitted in Microsoft Word format and include the related
Section number and title
.
RFP No. 016-020
Risk and Security Assessment of VRE’s
Bandwidth and Network Infrastructure
Virginia Railway Express
12

C. VRE Points of Contact : Questions must be submitted in writing via electronic mail to the following persons:
Gerri Hill
Manager of Purchasing and Contract Administration ghill@vre.org
Kristin Nutter
Senior Contract Specialist knutter@vre.org
D.
No oral communication will be accepted .
VRE will not be bound by any oral communications, or written interpretations or clarifications that are not set forth in an addendum.
E.
Questions and responses will be posted on VRE’s website at www.vre.org.
F. Any interpretation of a question made by VRE will be responded to and distributed in the form of an addendum to the RFP and will be available to all interested Offerors through VRE’s website.
RFP No. 016-020
Risk and Security Assessment of VRE’s
Bandwidth and Network Infrastructure
Virginia Railway Express
13