WEB APPLICATION & API PROTECTION (WAAP) SOLUTION

THE NEW YORK POWER AUTHORITY (HEREAFTER, THE "AUTHORITY" OR "NYPA") INVITES YOU TO SUBMIT A PROPOSAL TO FURNISH ALL SUPERVISION, LABOR, MATERIALS AND EQUIPMENT (EXCEPT FOR SERVICES, MATERIALS AND/OR EQUIPMENT TO BE FURNISHED BY OTHERS AS SPECIFICALLY REFERRED TO IN THE CONTRACT DOCUMENTS) FOR THE FOLLOWING PROJECT:
The Request for Proposal (RFP) seeks a more robust and comprehensive Web Application and API Protection (WAAP) solution. The Cyber Security Operations team currently uses cloud-native solutions and traditional network firewalls to protect external facing resources, which requires attention and can potentially result in coverage gaps. NYPA seeks a sophisticated software solution to consolidate and modernize its current approach to Web Application and API Protection. The goal is to transition to a more sophisticated software solution that reduces the risk of exposure and strengthens the security posture. This change is driven by the need for improved security and alignment with broader organizational goals of risk management.

This evaluation has a two step process:

1. NYPA will qualify the suppliers for Proof of Concept (POC)
   Once proposals have been received by the Authority, an evaluation team will review and make recommendations for the next phase of the project. The committee may schedule oral interviews and/or product demonstrations, either virtual or in person at the Authority’s White Plains Office with one or more responding vendors to gain clarification as needed. All key members must attend. The committee will shortlist qualified Suppliers and then conduct a 30 day proof of concept (PoC) trial. Initial cost may be provided. The committee will be performing the evaluation of the qualification proposals which will include but are not limited to the following evaluation criteria:
   A. Quality & Alignment to NYPA Needs of Proposed Web Application and API Protection Solution
   B. Project History – Including projects in NY State
   C. Qualifications
   D. Quality and Completeness of Submittal
   E. Results of solution presentations & Demonstrations
   F. Results of Reference Checks
   G. Result of 30 day proof of concept setup
   Please note the items above are not exhaustive and the detailed solution requirements are documented on the Attachment 2 Core Capabilities tab. Please respond to all business and technical questions in detail as they are critical considerations. All answers must be based on the capabilities of the current production release of your software and not based on functionality that is in development or scheduled for a future release. If so, please specify.
2. Upon Successful completion of the POC, NYPA will choose which supplier(s) to award or will conduct further negotiations as necessary. All bidders must provide a proposal for the following in connection with their proposed solution(s):
   • Trial/POC
   • Software/Software Licenses
   • Software Implementation & Professional Services
   • Training
   • Software Support/Maintenance

Location of Event: Enterprise wide NYPA
Proposed Term: (3) years
Bidders must have commensurate experience. Bidders are hereby directed to make use of the New York Power Authority's website at www.nypa.gov in order to obtain instructions on participating in the bidding process through Ariba. Bidders obtaining bid documents from sources other than NYPA Ariba do so at their own risk. Further details on qualifications/requirements can be found in the Bid Documents. This contract may be fulfilled by a Sub-Contract, Joint Venture or Co-Production arrangement.
Overall Goal MWBE 0%
SDVOB Goals 0%