New Erie County Medical Center Corporation · 2018. 1. 15. · Erie County Medical Center Corporation RFP # 21801 Addendum Number 3 ... Network Services available (DHP, DNS, AD, etc…),

1 | P a g e

Erie County Medical Center Corporation RFP # 21801 Addendum Number 3

Erie County Medical Center Corporation

Addendum Number 3 to RFP # 21801

VIRTUAL DESKTOP INFRASTRUCTURE DESIGN

The deadline for submission has been extended to:

Monday, February 5, 2018 AT 11 A.M. EST.

Section 6, Evaluation Criteria, is hereby amended in its entirety as follows: The Overall Solution fitness evaluation (number 3) has been amended from 40 points to 35 points. Diversity Practices Questionnaire (number 4) has been added for a total of 5 points. Final point allocation is as follows:

1. Total solution cost (20 points).

2. Solution Integrator Evaluation (40 points). Each submission should describe the

company’s experience with VDI implementation on a scale similar to or larger than that

outlined in this RFP (i.e. several thousand users over several thousand EUC devices). The

preferred integrator will have performed VDI implementations in hospital environments.

Two references of VDI implementations as described in this criterion should be included

in each submission.

3. Overall Solution fitness evaluation (35 points). The following is a non-inclusive list of

critical aspects of the solution that will factor into this analysis:

i. Technical evaluation and financial stability of the primary VDI vendor(s)

proposed in the design;

ii. Location-based printing solution;

iii. Integration with Dragon Medical for voice recognition;

iv. Specifics of the application delivery mechanism;

v. Operational efficiency for IT administration; overall system manageability

vi. EMM solution.

4. Diversity Practices Questionnaire (5 points).

2 | P a g e

The following questions were submitted to the Designated Contact:

1. I was following a project a couple of years ago for Virtual Desktop Infrastructure Design (#21509), and I was just wondering, is RFP # 21801 a re-release of #21509? If not, to whom was it awarded, when, and for how much? This is a new RFP for Virtual Desktop Infrastructure Design.

2. Can you kindly send me the VDI assessment data from 2015 that was referenced on the call? We are not releasing the assessment due to its age and concern that it is outdated.

3. If the VDI platform is used across multiple campuses, what is the bandwidth available between sites? All of ECMCC’s remote locations are connected with 1Gbe. However, there will be a subset of VDI users who will be accessing VDI from private locations (i.e. home, remote office, etc.)

4. Are there a list of applications that require the use of GPU cards? Currently none of the applciations will require the use of GPU cards.

5. Is there a list of applications that are required to be launched from the VDI Desktop environment? The core applications are: Meditech Dragon Medical Allscripts Dentrix Medent Ottr IBM Watson Health PACS IBM Watson Health Cardio 3m coding Office 365

6. Are there a list peripherals that need a direct attach to the endpoint running VDI? E.g. scanners, printers, etc. Nuance PowerMic II and III Wasp Barcode scanners iClass/RFID badge readers

7. Is there currently any Virtualized Desktops deployed in the environment, or will the solution be introduced as a completely new solution? This solution should be treated as a completely new solution.

8. Will ECMCC provide network diagrams or logical representations of existing environment where solution will be deployed, tested and brought to production? Including Network Diagram, Network Services available (DHCP, DNS, AD, etc…), inter-site and Internet bandwidth resources,

3 | P a g e

DR/ BC locations, Backup / Recovery Data Protection environment, deployed security components Additional information beyond what was included in the RFP will not be provided.

9. If Backup / Recovery of new VDI environment is desired to be integrated with existing systems / practices will ECMCC provide details on the existing environment? This VDI deployment is a new implementation at ECMC and should include it’s own HA and backup strategies.

10. Can ECMCC provide details on Change Control requirements and / or defined Maintenance Windows that may need to be considered while providing integration plans? This is a new VDI deployement therefore maintenance plans will be developed prior to go-live. Additionally, ECMC’s change control requirements will be implemented upon a production launch.

11. Do your run Microsoft Active Directory? If so what version? Microsoft AD 2012

12. What versions of Microsoft operating systems are running your XenApp/XenDesktop farms? This is a new implementation of VDI for the environment and therefore can use recommended Microsoft Operating Systems as part of the design.

13. How do you handle printing in the environment? Printing is currently handled based on the physical location of the end users workstation. As part of this design please describe how the solution would handle location based printing as outlined in the RFP.

14. Do you have a KMS server in your environment? Yes.

15. If a KMS server is present, what operating systems are currently being licensed? Windows Server 2012 and Windows 7

16. If a KMS server is present, what versions of Microsoft Office are currently being licensed? KMS is not beign used for Office. Office licenses are part of an Office 365 subscription.

17. What version of Citrix XenDesktop/XenApp/VMware View do you have? This implementation is being treated as a new implementation of VDI and both Citrix and VMWare options will be considered.

18. How many VDI farms do you have? This project is a new implementation of VDI.

19. Do you have a VDI DR site? We do not currently have a DR site for VDI but would like to see options for a DR environment in the overall solution.

4 | P a g e

20. How many Gold Images to you use in your VDI environment?

This is a new design and implementation of VDI. We would like to have the minimum amount of gold images and use an app layering technology to stream applications.

21. Is there any profile management software as a part of the VDI environment? Please provide user profile management as part of the response if applicable to your solution.

22. Are any of the VDI environments available to the internet? As part of the solution, a portion of virtual desktops will be available for access remotely.

23. If available on internet, do you use multifactor authentication? Yes, Duo Security.

24. How many data center locations do you have that would need to host the virtual desktop/published application environment? Currently it is a single data center design, however the design should have options for redundancy.

25. Do you utilize non-persistent technologies? If so, where? The majority of the virtual desktops will be utilized as a non-persistent workstation with a certain level of persistency (e.g. an 8 hour shift).

26. How is user data handled (redirected, mapped drives, etc.)? Please provide an answer to how the data will be handled as part of the response.

27. Do you have some basic documents describing your company’s network topology? ECMC has a relatively flat network topology with all remote sites connecting back via dedicated fiber connections.

28. Are there any Application Delivery Controllers or load balancers as a part of the VDI environment? Please provide appropriate load balancers and delivery controllers if required as part of your design.

29. Are you using a 1gb or 10gb to interconnect the server infrastructure to the core Networking equipment? Our Core infrastructure equipment has support for 10gb.

30. What is the latency between those data centers? At this time we are in a single data center.

31. What latency do you typically see from your end users? Not available.

5 | P a g e

32. How many datacenter locations do you have that would need to host virtual desktops or applications? Currently there is one primary datacenter. Please include options for a redundant vdi configuration.

33. Do you have any existing application virtualization technologies? No we currently do not utilize application virtualiation.

34. What types of applications will run in your VDI environment? The core applications are: Meditech Allscripts Dragon Medical Dentrix Medent Ottr IBM Watson Health PACS IBM Watson Health Cardio 3m coding Office 365

35. What software do you have installed on your VDI instances? This is a new implementation of VDI. The core applications expected to run in VDI are listed above (question 34).

36. Of the applications that are available in VDI, what are the most used? This is a new implementation of VDI.

37. How many applications are published on your XenApp/XenDesktop/VMware View farms? This is a new implementation of VDI.

38. Can you provide a list of applications available in your VDI farms? This is a new implementation of VDI.

39. What format is used for application distribution? This is a new implementation of VDI. We expect to deliver applications through an App layering technology into the virtual desktop with some of the core apps being installed directly on the image.

a. Installed to base image

This is not a question.

b. Installed via software delivery (e.g. SCCM,) ECMCC does use SCCM and this can be used if required as part of the design.

c. Application publishing (e.g. XenApp, RDSH)

6 | P a g e

ECMCC does not do any application publishing.

d. Application layering (e.g. Unidesk, VMware App Volumes) ECMCC would like to use an app layering technology as part of the overall design.

e. Application virtualization (e.g. VMware ThinApp, App-V) ECMCC prefers to use application layering in place of application virtualization.

40. Is ECMC subject to any PCI DSS compliance related to this RFP?

The RFP states that the system must support credit card readers so we wanted to confirm if we need to design for PCI compliancy\auditing.

41. Is ECMCC open to the possibility of the VDI environment being cloud-based (backed by Citrix and Microsoft Azure) or is this strictly an on-premise engagement? ECMCC is open to a cloud-based design offereing.

42. Is this a Single Site or Multi-Site engagement? Single site.

43. How many data centers does ECMCC have? One.

44. Where is the central/main datacenter? On Campus.

45. Who is the internet service provider for ECMCC? ECMCC has redundant BGP connections via different service providers.

46. What is the services provider's link speed for ECMCC? 150 Mbps.

47. Is there a Backup Link? - if so, who is that internet service provider and what is their speed to ECMCC? Yes, 150Mbps.

48. If there are other sites, what is the bandwidth/link speed between the remote offices and ECMCC? 1Gbe Fiber.

49. If there are other sites, are they linked internally, (i.e. Private MPLS, Point to Points) or are they routed through internet traffic? All linked through dedicated fiber.

50. If there are remote sites, is there a diagram of how they are all connected? Remote sites are connected via a dedicated 1Gbe fiber connection to the main data center.

51. Do you have any virtualization in place today? Server virtualiation and VDI for offisite users.

7 | P a g e

52. If so, what is/are the underlying Hypervisor(s) (VMware, XenServer, Hyper-V, Nutanix)?

ECMC’s currently runs VMWare ESXi Hypervisors.

53. How many servers does ECMCC have? Not a relevant question to this RFP.

54. How many servers are virtualized? Not a relevant question to this RFP.

55. How many servers are physical? Not a relevant question to this RFP.

56. How many servers are Windows-Based? Not a relevant question to this RFP.

57. What is the operating system for the majority of Windows Servers in ECMCC? (Windows 2008 R2 / Windows 2012 R2 / Windows 2016) Windows 2012 R2

58. Is ECMCC already using some sort of centralized computing (e.x. Windows terminal servers)? No.

59. It was discussed on the call that there was a previous engagement for VDI at ECMCC and that there was some associated paper work with that engagement. The IT rep who took our questions said he would have to provide that information later because he needed to check if they had the documents. If the paperwork/documents from that previous engagement are available, we would like to have the opportunity to view them. ECMC will not be providing the information from the 2015 assessment.

60. Can you provide a list of all applications that would be installed on virtual desktops. a. The core applications are (not all applications can be listed): b. Meditech c. Allscripts d. Dragon Medical e. Dentrix f. Medent g. Ottr h. IBM Watson Health PACS i. IBM Watson Health Cardio j. 3m coding k. Office 365

61. Are all the applications installed on desktops today based on client-server architecture? Where

are application servers hosted and how are the desktops connected to App servers for network connectivity?

8 | P a g e

Applications today are currently installed directly on physical desktops in a client server nature. Workstations are connected via 1Gbe wired or 802.11g/n wireless.

62. What is the total amount of Storage required for Virtual Desktops & File servers? This needs to be determined as part of the overall design.

63. Is two factor authentication required for administrative users only or for all VDI users as well? All users will be expected to use two factor authentication. Exceptions might be made for users coming from a trusted device.

64. How is the application “Imprivata” integrated & extended to current infrastructure? Is it being offered as PaaS by vendor or you have servers hosted internally that support this application? Imprivata SSO is hosted internally at ECMCC on dedicated appliances.

65. Can Imprivata be extended/integrated with VDI solutions hosted out of our data centers? Potentially. This should be detailed in your design.

66. What all feature sets are currently being used in “Imprivata”? For the scope of VDI, single sign-on. We also use Cortext secure texting.

67. What all compliance controls are required for HIPAA and PCI? We are a healthcare organization and are therefore governed by HIPAA and HITECH law. We are required in a limited scope to verify PCI DSS compliance for a small number of systems which process credit payments.

68. Do you need facial recognition sign on for the login to physical desktops/TC/ZC or the VDI? We do not need it but are interested in this technology and your recommendation.

69. What feature sets of SCCM are you using currently? Do you need same feature sets for virtual machine management?

a. We are using it for: i. Application deployment

ii. Patch management iii. Imaging

b. We do not expect to use it for application deployment (due to layering technology), or imaging for obvious reasons. We would take your recommendations on this, however.

70. What objectives need to be achieved with EMM? Device management is paramount. Eventually we may need to be able to provide application provisioning and management. At this time, however, we do not have any core applications with native mobile apps.

71. Do you need Hot or Cold DR site for VDI? What are RPO & RTO requirements? a. We would take your recommendation but require a highly available setup. Our aim

would be to survive the loss of either VDI infrastructure (in a multi-datacenter environment):

9 | P a g e

i. Ideally: without any loss of sessions ii. Not ideal, but pragmatic: without any significant downtime or delays (e.g.

sessions to workstations may be lost for a short time (a few minutes) but reconnect without loss of session information)

iii. Unacceptable – significant downtime, or downtime with loss of session. b. In the event of a disaster that requires the entire environment to be restored, our RTO

would be about 48 hours. The RPO would be determined by a forensic analysis, so we would require backups with airgapping at various intervals to ensure that we could safely restore to a clean environment that was outside of the compromise window.

72. How is location based printing currently implemented? If you are using any third party products, please provide more details on these products. It is implemented through actual physical location of the desktops. We currently use physical desktops, so these machine names can be entered into a “location dictionary” within our EHR. When accessing the EHR, the application can check the machine name which is connecting against the machine name in the location dictionary, and determine printers that should be visible.

73. Do you need persistent desktop for all the users or session based for some users? Could you also provide separation on the total count for each? Almost all users will be session based, but require persistence lasting 8-12 hours to cover a normal clinical shift. A small number of users (less than 100) are expected to possibly need a full desktop.

74. M/WBE is a highlighted to be critical. As this is a technology solution, there is not much outsourcing that would occur. Can you clarify the percentage of business that MUST go to a M/WBE organization? As stated in the RFP documents and in the mandatory call, the required M/WBE utilization is 20% M and 10% W.

75. Please provide a complete list of existing anti-malware, endpoint protection and next-gen AV

solutions in use today, plus any additional security technologies that you would like to integrate with the proposed solution. Symantec ATP is currently in use for servers and desktops. DUO MFA is also used and expected to be integrated. Potentially we will integrate Imprivata OneSign for SSO.

76. Would the capability to provide automated quarantine and remediation be a required component of the proposed solution? It isn’t a required component but would appreciate your recommendation.

77. Is ECMC considering policy-based East-West traffic controls as a required component of security for the proposed solution, to eliminate virtual desktop-to- virtual desktop traffic? Yes, and would take your recommendation on how to achieve this.

10 | P a g e

78. Is there a requirement for the proposed solution to provide identity-based security, thus limiting the systems end users can access to only systems required by job role and AD group membership? Yes.

79. Please provide a copy of the 2015 assessment. We are not releasing the assessment due to its age and concern that it is outdated.

80. Is this project fully approved for purchase within the first 6 months of the calendar year 2018? The project is not fully approved until we complete the RFP process.

81. How much has been budgeted for the entire VDI project? There is no official budget number. Budget will be set based on responses.

82. Please provide the detailed internal approval process for this project? This project is approved; the specific vendor will be chosen based on the evaluation criteria published within the RFP documents.

83. Based on experience with similar RFP’s, would you consider moving the final response date out to January 31, 2018? (Based on responses to the answers not being responded to until January 9th, in order to provide the best details, a longer timeframe would be helpful) Please see the revised timeline at the beginning of this document.

84. From a deployment perspective, do you have a timeline for deploying the 2500 users? (For example, 500 deployed by 7/1/18, 1000 deployed by 12/31/18, 2000 by 7/1/19, 2500 by 12/31/19) What is the planned rollout target for the following years:

a. 2018? b. 2019? c. 2020?

We are expecting the entire environment to be implemented in 2018.

85. Are you looking for the partner to fully deploy all 2500 desktops, or will ECMC be taking over

deployment after a certain amount of desktops have been deployed? We are expecting the partner to work with ECMC IT to deploy all 2500 desktops.

86. Can you provide a list of uses cases for the 2500 desktops by position/department?

The VDI desktop will be primary desktop for almost all positions/departments.

87. How many remote users does ECMC plan on having (4.4 iii)? Total number of remote users will be in the 900-1000 range. These are not concurrent users, however.

88. Regarding the requirement for the solution to be highly available and recoverable – will the

solution in totality be implemented within one site, or across two or more sites?

11 | P a g e

It is possible it will be implemented across 2 sites. If this is the case, the sites will be connected with dark fiber.

89. Will ECMC consider partnering with provider to just provide the architecture, design and

implementation of a VDI solution? Yes, this is the intent of this RFP. A BOM of what hardware/software/licensing to acquire,however, is also required.

90. Does the customer have a load balancer today which could be used for the VDI project, or does

the customer expect to purchase net new load balancers for the initiative? New load balancers are needed for this project.

91. Does the customer have a preferred antivirus today, and do they expect to use this antivirus

vendor with their VDI implementation? We currently use Symantec ATP. We would likely use this, but are open to recommendations.

92. Regarding section 4.1(C) – Could the customer possibly expound with some details on the

goals of the following:Control of applications. Ensure appropriate EUC controls are enforced throughout the ECMCC enterprise. This is referring to consistent user experience – ensuring that appropriate applications are delivered to the correct user on the correct machine .

93. Are there any circumstances that ECMC will work with a non-Minority/Women/Veteran owned organization for this project, especially if the infrastructure portion is potentially going to be procured separately? Non-M/WBE’s and non-SDVOB’s are welcome and encouraged to respond to this RFP. M/WBE and SDVOB utilization in the form of subcontracting is only required in the percentages indicated in Exhibit A to the document. If you have further questions regarding M/WBE utilization, you are strongly encouraged to reach out to our M/WBE compliance officer at the contact indicated in Exhibit A.

94. What challenges is ECMC currently facing with the existing desktop infrastructure today?

This is identified in the RFP document. Listed are the goals of the project, which should help you identify where our current challenges lie.

95. Can we get a detailed list of applications?

The following is not a comprehensive list but represents the majority of critical apps: a. MEDITECH C/S 5.5x b. Allscripts Touchworks EHR c. Office365- provisioned office d. IBM Watson Health PACS e. IBM Watson Health Cardio f. 3M medical coding software g. MEDENT h. OTTR i. Dragon Medical

12 | P a g e

96. Any need for graphic accelerators? Newer capabilities are available now for graphic intensive

workloads. Not at this time.

97. List of peripheral devices?

This list will possibly expand, but here are the most significant: a. RFID readers (iClass badge readers) b. Fingerprint readers c. Dragon PowerMic II, III Microphones d. WASP barcode scanners

98. Will there be a PoC required?

No POC is required.

99. If so, can you share the success criteria? See above.

100. What are the plans for keeping existing hardware for VDI while transitioning to Thin Clients? We would like to keep viable hardware and allow it to access VDI via licensing model (e.g. MS VDA subscription or upgrade to SA with virtualization rights)

101. Are we expected to recommend a solution for these devices?

Yes.

102. Are we to assume ECMC is staying Windows 7 with Horizon Client? We are using Windows 7 today, but we have not settled on a technology for the client.

103. What are the plans for Windows 10 and is that being factored in?

We recognize that we will need to upgrade to Windows 10 at some point in the forseeable future. Currently our images run Windows 7. We believe the design should account for an upgrade to windows 10 in its lifecycle (5-7 years).

104. What version of Microsoft Exchange are you currently running today? Office365 with exchange online.

105. On average, how long does it typically take for a user to login to their desktops today? Performance varies. We would like this to be standardized to a duration deemed acceptable by users (i.e. as short as possible).

106. Is EMM being considered for this project?

Yes, it is listed in the RFP.

107. What is the total number of Mobile Device Users expected to be managed by EMM vs the Concurrent user totals being considered for VDI?

13 | P a g e

We expect 2500 concurrent desktops to cover both.

108. Are there any EMM products in production today? No.

109. What types of devices are being considered for EMM?

Any mobile device: tablet, phone, etc. Major OS (apple iOS and Android).

110. Does your organization support BYOD? Yes, but would take recommendations on how to best manage BYOD through the EMM of this RFP.

111. What applications are granted access on mobile devices? Today, none. We would offer VDI through a mobile device via the results of this RFP.

112. Does your organization issue mobile devices to patients, nurses, clinicians, etc?

In a limited deployment, yes. We issue roughly 300-500 devices to clinicians and office workers.

113. Does your organization have ruggedized devices in production? A limited number of Panasonic toughbooks are used. Less than 100 devices like this.

114. What is the existing VPN solution at ECMC?

Cisco ASA, but it is not widely used for remote access.

115. What is your vision for secure remote access for your users? Today, use VDI through a secure portal/gateway on any device. In the future, use VDI on devices for which the UI is appropriate, use a native mobile experience for smaller mobile devices.

116. Would you provide a portal of applications?

We do not have an application portal.

117. Would you support both desktop and mobile device for remote access? Yes.

118. What products do you currently leverage today for single sign on?

Imprivata OneSign.

119. How many critical apps are non-published (Mobile or SaaS apps)? All are non-published. We do not use any published apps today.

120. Does ECMC use Office 365 or ADFS today?

Yes, both.

121. Does ECMC own any identity management solution today? No.

14 | P a g e

122. Have you decided which VDI (Citrix or VMWare) you would prefer? We can and will provide both options if not. We would request respondents’ recommentations on product.

123. Regardless for each type of desktop we would like to know:

a. Number of vCPUs? b. Amount of RAM? c. CPU MHZ (if available)? d. IOPS (if available)? e. Persistent ? f. Full or linked clone for storage? g. Size of OS image? h. Size of User data? i. Storage protection for OS? j. Storage protection for User data?

We are not releasing the assessment due to its age and concern that it is outdated.

124. Please provide 2015 Liquidware Labs VDI assessment ASAP. Can this be provided before

the 1/9/17 question/answer response date? We are not releasing the assessment due to its age and concern that it is outdated.

125. Please confirm recommended HW Components for Servers/SAN/HCI/Networking/etc will not be quoted, but only need to provide BOMs. Erie County will purchase off Contract separately, correct? Correct.

126. Recommended SW solutions/components – should these be quoted, or just provide BOM? A BOM is required at this time. ECMC will procure items from the BOM separately from this RFP.

127. Can you explain how the hardware, software and licensing requested in a bill of material - section 4.2 Phase 1, item a will be procured? ECMC will procure via it’s group purchasing organizations.

128. Can you provide the output of the VDI Assessment?

We are not releasing the assessment due to its age and concern that it is outdated.

129. Can you provide additional output of Desktop Pools that came out of the Assessment? a. vCPU

b. RAM

c. Disk

d. Home Directories ( Private Storage based per user)

15 | P a g e

We are not releasing the assessment due to its age and concern that it is outdated.

130. Any App Publishing only or will it be a mix of VDI w/App Publishing? No app publishing is planned at this time.

131. All 2500 users ROAM? Any subset will require Full Desktop Clone?

There may be a small number of users who need a full desktop (likely less than 100). The rest will require “temporary persistence,” i.e. enough persistence to be able to roam during a shift that could last 8-12 hours.

132. You state that you need enough storage headroom for 3k users yet need a solution to support

2500 users. Is this because you want the headroom? Yes, we desire some leeway in case the need turns out to be greater, as well as having some room for growth early in the product lifecycle.

133. During the RFP call yesterday, the question was asked if you require a proposal for the VDI

Hardware infrastructure, ie. Compute, storage, network. I believe the answer was that ECMC is asking vendors to provide bill of materials without pricing. You intend to purchase hardware through your normal procurement process. Please confirm that my understanding is correct. Correct.

134. Is this Cluster/Storage specific to VDI or shared with any other applications? Storage for VM’s and any servers directly related to VDI will be specific to the VDI.

135. What is total Storage Capacity required for Hardware BOM?

We don’t have a total storage capacity, rather your design should account for the concurrent machines required from the RFP document. Note that it is possible that profile/static data would be stored separately from the VDI servers/machines. I.e. on lower cost storage. ECMC may choose to store this latter data on existing storage, but would depend on your recommendation.

136. How many servers are required? This would depend on your recommendation.

137. Are there any GPU requirements on VDI servers? Not currently.

a. Number of datacenters: 1, but we may leverage a second datacenter through a

partner for redundancy.

b. Location of datacenters (if multiple): local (same campus where VDI will be utilized) and possibly off campus but connected via dark fiber.

c. Active/active or active/passive (if multiple): We would take your recommendation but require a highly available setup. Our aim would be to survive the loss of either VDI infrastructure (in a multi-datacenter environment):

a. Ideally: without any loss of sessions

16 | P a g e

b. Not ideal, but pragmatic: without any significant downtime or delays (e.g. sessions to workstations may be lost for a short time (a few minutes) but reconnect without loss of session information

c. Unacceptable: significant downtime, or downtime with loss of session. d. Will there be a complete isolation of dev/test and prod environments or just image

isolation? a. Test and prod are preferred. Understanding the cost of infrastructure

for VDI is very high, we would take a recommendation on how to accomplish this efficiently at lower cost.

e. Number of applications to be layered List of the most common applications

o MEDITECH C/S 5.5x o Allscripts Touchworks EHR o Office365- provisioned office o IBM Watson Health PACS o IBM Watson Health Cardio o 3M medical coding software o MEDENT o OTTR o Dragon Medical

145. What will the EMM solution be used for?

a. Device management? b. App management? c. Both?

Mainly for device management as we do not currently package/virtualize apps. It may be used to provision applications to mobile devices in the future.

146. What kind of devices will the EMM solution be used to manage?

Both corporate devices and personal devices.