RFP for Data Classification Solution

Published Date: 24-July2023

Proposals Submission Deadline Date: 31- July-2023

Security and Exchange

Commission of Pakistan
 Procurement of Data Classification Solution

Table of Contents
1 SUBMISSION DETAILS.................................................................................2
2 ORGANIZATION PROFILE............................................................................3
3 ELIGIBILITY CRITERIA.................................................................................4
4 SCOPE OF WORK........................................................................................5
5 DETAILED REQUIREMENTS..........................................................................5
6 PROPOSAL..................................................................................................7
7 SUBMISSION TIMELINE & LOCATION...........................................................8
8 CLARIFICATION OF THE PROPOSAL.............................................................8
9 PROPOSAL EVALUATION CRITERIA..............................................................9
10 FORMAT FOR FINANCIAL BID......................................................................9
11 FORMAT FOR TECHNICAL BID...................................................................10
12 PAYMENT TERMS.......................................................................................11
13 BID DOCUMENTATION...............................................................................12
A. Technical BID Documentation...................................................................12
B. Financial BID Documentation...............................................................…..16
14 ANNEXURE’S.............................................................................................18

Request for Proposal Data Classification Solution Public Page 1

Procurement of Data Classification Solution

1 Submission Details

Submission Deadline
Submission will be valid if:
 Responses to RFP are submitted no later than (3:00pm) (15th June 2023) at
SECP Head Office 5th floor, AWT Plaza I.I. Chandigarh Road, Karachi.
 Bids are submitted in a single sealed envelope containing both proposals marked
Separately
“Technical and Financial Proposal” ͘.
 Soft copies of Proposals to be provisioned after openings of the bids.

Procurement Point of Contact

You may contact the following person if you have any questions or require clarification on
any topics covered in this Request for Proposal:

Name:
Email:
Phone:

For Technical Questions & Clarifications

Name:
Email:
Phone:

Request for Proposal Data Classification Solution Public Page 2

Procurement of Data Classification Solution

2 Organization Profile

Request for Proposal Data Classification Solution Public Page 3

Procurement of Data Classification Solution

3 Eligibility Criteria
The bidder MUST comply with the following minimum criteria. The bid document
shall be rejected if the vendor fails to meet the following minimum criteria and
submission of the required documents:

Descripti Means of
on Verification

Request for Proposal Data Classification Solution Public Page 4

Procurement of Data Classification Solution

4 Scope of Work
The scope of engagement for Data Classification Solution:
The vendor will be expected to provide Data Classification Solution, covering:
 Deployment of the Classification Solution
 Integration with Symantec Data Loss Prevention
 Implementation of rule set based on Data Classification along with the
support.
 Totals users :600-700

5 Data Classification Solution- Technical Compliance

Bidder shall provide the compliance for each

solution proposed Product Name & Version:

Sr. Requirem Response (C/NC)

No. ent
The solution should work and deploy on premise
1
2 Solution must support seamless integration with Active
Directory

Ability to choose more than one classification value

3
(multiple
selections)
4 Users can be prompted to classify by a pop-up
dialogue box
5 Ability to have a default classification or suggested
classification
User prompted to classify when saving, printing, or
6
sending an
email
Default (auto) labelling rules for Agent (all new or
7
modified files
and emails are classified by default, i.e. (Internal,
Confidential, etc.)
8 The solution should support automated, suggested,
and user-
driven classification.
9 The solution should evaluate the content, context,
identity and other attributes of unstructured data to
make classification and
policy decisions.
10 The solution should have a simple and flexible
policy engine to support the creation of rules. For
example, upon an event where the user clicks
'Send' on an email, under the condition one of the
email recipients had a specific email domain, to
take any
Request for Proposal Data Classification Solution Public Page 5
Procurement of Data Classification Solution
action to block the email from being sent.
11 The solution should trigger policy and classification
actions based on different events, such as Open,
Save, Print, Close, Send, or Classification Change.
12 The solution should enable administrators to
combine DLP policies to provide more fine-grained
control.
13 The solution should support policy nesting/hierarchy
to control the flow of policy execution, making it
easier to keep more advanced
use cases for classification and policy enforcement.
14 The proposed solution must support structured and
unstructured Data Classification

15 Solution should have the ability to discover and work with

archived data (even pre-existing data)

16 The proposed solution should be compatible with all

Office applications and can also classify PDF
documents.

17 Solution should be able to classify based on user role or

sensitive words and industry aware with the ability to
create customized policies.

18 The proposed solution must work smoothly and offers a

seamless and uniform user experience in any application
- (e .g. from Adobe Acrobat, not just MS Office utilities)

19 The solution must allow classification and labelling of

emails and attachments to remain once the email is
transferred to an email archive.

20 The solution must support 'user warning' messages, e.g.

ability to warn/prevent users when trying to send
documents/files to an external email address where the
attachment has specific markings such as INTERNAL.

21 The solution must ensure that the information

classification assigned to an email is no lower than the
classification assigned to any of its attachments (e.g., if
an attachment is RESTRICTED, then the covering email
must also be at least RESTRICTED)

22 The solution must support role-based security for

individual users and groups of users and provide the
ability to restrict and customize available functionality
based on a user's profile and/or user group.

23 The solution must allow monitoring, user alerting, auditing

Request for Proposal Data Classification Solution Public Page 6
Procurement of Data Classification Solution
of whether information classifications have been applied
appropriately or showing when a document/file/email has
been downgraded/ reclassified and by whom.

24 The solution must prevent a recipient of a document or e-

mail from changing the information classification of a
document

25 The solution must enable a user to easily assign, amend

or delete an information classification to a digital file (e.g.
via a simple toolbar/options box/pull-down menu) from
within MS Windows Explorer

26 It must be possible to ensure that a covering email has

the same classification as the highest classification of any
attachment.

27 The solution must enable a user to apply information

classifications to generic digital file types, including MS-
Outlook and others as below:

A. MS Word
B. MS Excel
C. MS PowerPoint
D. MS Visio
E. MS Project
F. Adobe Reader/Acrobat (PDF)
G. Audio-visual files
(e.g.JPEG/GIF/BMP/WAV/MP3/MP4/AVI/MOV)."

Request for Proposal Data Classification Solution Public Page 7

Procurement of Data Classification Solution

6 Proposal
This is single stage two envelope bidding procedure. The bidders shall submit their proposals
in sealed
envelope for all proposals containing both “Technical Proposal” as well as “Financial Proposal”

Successful bidder who qualifies for the combined evaluation, shall be meeting with
the SECP management to discuss in detail the exact requirements and procedures
to be followed in conducting this assignment.

After the finalization of combined evaluation, the qualifying organization shall be issued
“Letter of Intent”
which shall be followed by the Service agreement and Service order.

SECP reserves the right to accept and /or reject any proposal without assigning any reason.

Request for Proposal Data Classification Solution Public Page 8

Procurement of Data Classification Solution

7 Submission Timeline & Location

SECP reserves the right to modify below timeline at any time. If the due date for
proposals be changed, all prospective respondents shall be notified. The proposal
must follow as per the following high-level schedule.

7.1 Location and Timing

Mileston Date &

e Time
RFP Released 24TH July 2023

RFP Bid Submission Time and Date 3pm. 31st July 2023

RFP Bid Opening Time and Date 3:30 pm 31st July 2023

Locations

As a result of this Request for Proposal, SECP may do one of the following at its discretion:
1. Award a contract for this Request for Proposal on the basis of prescribed evaluation
criteria.
2. Cancel the whole process.

8 Clarification of the Proposal

The SECP shall have the right, at his exclusive discretion, to require, in writing,
further information or clarification of the Proposal, from any or all the Vendor(s). No
change in the price or substance of the Proposal shall be sought, offered or
permitted except as required to confirm the corrections of arithmetical errors
discovered in the Proposal. Acceptance of any such correction is sole discretion of
the SECP.

Request for Proposal Data Classification Solution Public Page 9

Procurement of Data Classification Solution

9 Proposal Evaluation Criteria

Evaluation of the firms shall be based on information provided in the Proposals and
evaluate by SECP evaluation Committee.

10 Format for Financial BID

The financial bid should be quoted as per the format. The financial bid should be
accompanied by Financial bid cover letter. The Bidder shall bear all costs associated
with the preparation and submission of its bid, including cost of presentation for the
purposes of clarification of the bid, if so desired by the organization. The
organization will in no case be responsible or liable for those costs, regardless of the
conduct or outcome of the tendering process, the financial bid shall include the
following:

 Technical Bid - Commercial Bid Cover Letter (Format is available)

 Financial Bid - Financial Bid for Letter (Format is available)
 Payment Terms

10.A.1 Bid Currency and Validity

 All prices must be quoted in Pak Rupees including all applicable taxes.
 Bid validity shall be 90 days after the submission of proposals

10.A.2 Pre-award Presentations

SECP reserves the right to require presentations and /or demonstrations / Interview
from any or all of the bidders, in which they may be asked to provide additional
information.

Request for Proposal Data Classification Solution Public Page

10
Procurement of Data Classification Solution

11 Format for Technical BID

The bidders are requested to submit the technical proposal, which at least shall
include the following sections in the format provided below and in Annexure - B.

1. Executive Summary
2. Company Profile
3. Proposed Data Classification Solution and Approach
4. Annexure - Evidences
a) GST/NTN Certificate
b) Organization's establishment SECP
c) Similar Assignments and References as per eligibility Criteria
d) Organizational Financial Strength
e) Audited Statement (Profit and Loss, Balance Sheet and Cash Flow
Statements)

Request for Proposal Data Classification Solution Public Page

11
Procurement of Data Classification Solution

12 Payment Terms

Payment Schedule

• Payment to be filled

Complete Pricing
The respondent / bidder should mention all the charges in financial bid deem
necessary to complete the scope of work, should include all incidental expenses in
the Insurance pricing.

SECP reserves the right to hold off / delay payments if service not up to the mark as
defined in SLA, Agreement, etc.

If the progress of the work is not up to the satisfaction of the SECP Management, the
management has the right to cancel the order, and get the work done from any
other selected third party.

Request for Proposal Data Classification Solution Public Page

12
Procurement of Data Classification Solution

13 Bid Documentation

13.1 Technical BID Documentation

13.1.1 Technical Bid Cover Letter

Request for Proposal Data Classification Solution Public Page

13
Procurement of Data Classification Solution

13.1.2 Bid Particulars

Name of the Bidder

Registered Address of the Bidder

Name and designation of the person to

whom all references shall be made
regarding this tender
Address of the person to whom all
references shall be made regarding this
tender
Telephone No. (With country and area
code)
E-Mail of the contact person
Fax Number (With country and area
code)

Name: _

Location: _

Date: _______________________
_____________________________
Company Seal & Bidder’s Signature

Request for Proposal Data Classification Solution Public Page

14
Procurement of Data Classification Solution

13.1.3 Bidder Profile:

Sr.
Name of the Company
No.
Indicate whether the Company is the lead Bidder
01 and whether the Company is the OEM Owner,
. Authorized Partner or Other consortium member

02 Year Established
.

03 Turnover (in PKR) [Previous 3 Years]

.

04 Profit After Tax (in PKR) [Previous 3 Years]

.
05 Proposed role of the member in the project
.
07 Head Office Address
.
08 Telephone No. (with country and area code)
.
09 Fax No. (with country and area code)
.
10 E-mail Address
.
11 Name of the Key representative for this project
.

As of this Date, the information furnished in all parts of this form is accurate and true
to the best of my knowledge.

Name: _

Location: _

Date: _______________________

_____________________________
Company Seal & Bidder’s Signature

Request for Proposal Data Classification Solution Public Page

15
Procurement of Data Classification Solution

13.1.4 Details of Prior Experience

Please provide details of prior experience of the Bidder in Data Classification Solution.

Request for Proposal Data Classification Solution Public Page

16
Procurement of Data Classification Solution

13.2 Financial BID Documentation

13.2.1 Financial Bid Cover Letter

Request for Proposal Data Classification Solution Public Page

17
Procurement of Data Classification Solution

13.2.2 Financial Bid

Bid for Data Classification Solutions

Sr. Total Cost Inclusive

No. ITEM DESCRIPTION Cost (PKR) Applicable Tax
Tax (PKR)
(PKR)

1 Description of Bid

Please Note:
1. Your proposal submissions shall be treated as Full and Final.
2. Any other Value-Added Services or related benefits over and above this RFP
needs to be explicitly made part of your submissions.

Rates will be quoted in Pak Rupees as per the format illustrated above. Bids quoted
in formats other than the illustrated format will be rejected. Any applicable local
taxes which are over and above, will be paid on actual basis on provisioning of
documentary evidence. Organization will not be making any other payment except
those mentioned in the commercial bid.

Name: _

Location: _

__________________________________
Company Seal & Bidder’s Signature & Date

Request for Proposal Data Classification Solution Public Page

18
Procurement of Data Classification Solution

14 ANNEXURE’S

To be attached

Request for Proposal Data Classification Solution Public Page

19