Bank of Ceylon REQUEST FOR PROPOSAL (RFP) FOR Design and implementation of Internet and Mobile Banking Solutions TENDER NO: P / PROC / 2014 / 27

Dated: 24th December, 2014

1 Definitions Following terms are used in the document interchangeably: Word / Phrase

Definition / Clarification

Bank

“Bank” means Bank of Ceylon

Bidder, Tenderer

"Bidder", “Tenderer” means Respondent to the RFP document and are used interchangeably in this document and carry the same meaning

Contractor

"Contractor" shall mean the party who (his tender having been accepted) duly furnishes the Performance Bond.

Principal Owner

"Principal Owner" refers to the party who has developed the software solution and holds the primary right to sell the product / solution

Branch, Branches

“Branch” or “Branches” means any office / branch of the Bank

RFP, Tender Document

“RFP” or “Tender Document” means this RFP document

Bid, Proposal, Offer

“Bid”, “Proposal” or “Offer” means response to this RFP by the bidder

Agreement, Contract

“Agreement” or “Contract” have the same meaning and have been used interchangeably in the document

2|Page

2 Disclaimer The information contained in this Request for Proposal (“RFP” or “Tender”) document or information provided subsequently to bidder(s) whether verbally or in documentary form by or on behalf of Bank of Ceylon (Bank), is provided to the bidder(s) on the terms and conditions set out in this RFP document and all other terms and conditions subject to which such information is provided. This RFP is neither an agreement nor an offer and is only an invitation by Bank to the interested parties for submission of bids. The purpose of this RFP is to provide the bidder(s) with information to assist the formulation of their proposals. This RFP does not claim to contain all the information each bidder may require. Each bidder should conduct its own investigations and analysis and should check the accuracy, reliability and completeness of the information in this RFP and where necessary obtain independent advice. Subject to any law to the contrary, and to the maximum extent permitted by law, Bank and its directors, officers, employees, representatives, agents, and advisers disclaim all liability from any loss, claim, expense (including, without limitation, any legal fees, costs, charges, demands, actions, liabilities expenses or disbursements incurred therein or incidental thereto) or damage (whether foreseeable or not) (“Losses”) suffered by any person acting on or refraining from acting because of any presumptions or information (whether oral or written and whether express or implied), including forecasts, statements, estimates, or projections contained in this RFP document or conduct ancillary to it whether or not the losses arises in connection with any ignorance, negligence, inattention, casualness, disregard, omission, default, lack of care, immature information, falsification or misrepresentation on the part of Bank or any of its directors, officers, employees, representatives, agents, or advisers. Bank may in its absolute discretion, but without being under any obligation to do so, update, amend or supplement the information in this RFP.

3|Page

3 Invitation to bid Bank of Ceylon, the leading Commercial Bank in Sri Lanka, provides services in the field of Corporate Banking, Offshore Banking, Treasury Operations, Trade Finance, Retail Banking, Development Banking, Investment Banking and Islamic Banking Activities through a network of more than 550 branches and 500 ATMs. The Bank has already implemented state of the art core banking operations and managed to create an online full fledged branch network. The Bank possesses a customer base exceeding 10 million accounts. The Bank is market leader in advances, deposits and total assets. The Bank is looking for state of the art digital banking solutions to maintain its position as a technology savvy bank and provide its customers best experience in internet and mobile banking. This request for proposal document is solely for the purpose of selecting a Digital Banking partner / partners for BOC for extending digital banking services to its customers. The Bank invites proposals from qualified bidders to participate in the bidding process for selecting a partner for implementing a digital banking solution for the Bank. The digital banking solution offered by the Bidder should be one or more of the following:  Internet Banking solution  Mobile banking solution  An integrated digital banking multi-channel solution that provides at least both internet and mobile banking services with seamless integration between multiple channels The bid proposals should include license, implementation, integration, customization and maintenance of the complete application(s). For mobile banking solution, the solution offered should work across all mobile technologies in Sri Lanka. Bidders, must in all respects, observe and conform to 'Instruction to Bidders' and ‘Terms and Conditions’ set out in this RFP. The Bank will shortlist bidders fulfilling eligibility criteria as detailed in this RFP. The decision of the Bank will be final and binding. Tender documents/RFP could be obtained from the Chief Manager, Properties & Procurement Dept., 14th Floor, Head Office, “BOC Square”, No.01, Bank of Ceylon Mawatha, Colombo 01 or downloaded from the Bank's website www.boc.lk from the Tender Notices section.

4|Page

4 Bid Details – Summary of Information Date of release of RFP

Dec 24th, 2014

Last date for requesting any clarification on Jan 6th, 2015 bids Pre-bid meeting for clarifications on RFP

Jan 7th, 2015 at 2 PM

Pre-bid meeting location

Conference room, 6th floor, Head Office, “BOC Square”, No.01, Bank of Ceylon Mawatha, Colombo 01

Last date and time for receipt of bids at Jan 14th, 2015 10:00 AM Bank of Ceylon (Address as given below) Address for communication submission of bids Contact Person

and Chief Manager, Properties & Procurement Dept., 14th Floor, Head Office, “BOC Square”, No.01, Bank of Ceylon Mawatha, Colombo 01 Chief Manager, Properties & Procurement Dept Contact number: +94 11 2430 268 / +94 11 2544 310 / +94 11 2434 786

Mailing address for sending clarifications Chief Manager, Properties & Procurement Dept., 14th Floor, Head Office, “BOC Square”, No.01, on bids Bank of Ceylon Mawatha, Colombo 01 E-mail : [email protected]

4.1.1

Please note that all the information requested in this RFP needs to be provided by the Bidder. Bids with incomplete information may lead to disqualification.

4.1.2

The Bank reserves the right to change the dates mentioned above or in the RFP, which will be communicated to the prospective bidders.

4.1.3

The Bank reserves the right of rejecting any or all bids and the right of accepting any portion of the bid without adducing any reason.

5|Page

5 Pre-qualification criteria for vendors Only Bidders who satisfy the below pre-qualification criteria will be considered for evaluation of technical and commercial bids. 

The Bidder should have registered a turnover of LKR 300 million or more for each year during the last 3 financial years and should have reported net profit for the last three financial years. In case the Bidder is not the Principal Owner for the solution offered, both the Bidder and the Principal Owner should have registered a turnover of LKR 300 million or more for each year during the last 3 financial years and should have reported net profit for the last three financial years. The Audited Balance Sheet and Profit & Loss Statement for last three financial years are to be submitted as documentary evidence.



The solution proposed (internet banking, mobile banking or an integrated digital banking multi-channel solution) should have been implemented in at least three commercial banks in the last 3 years.. The combined registered user base for the implemented solutions should be 300,000 or more. The Bidder should submit a copy of purchase orders as documentary evidence.



The bidder shall be the owner / certified or authorized agent / reseller / partner for the solution offered. The Principal / solution owners may choose to place multiple bids through different partners.



Bidder should not have been black listed at any time by the Government / Government agency in Sri Lanka in the past.

6 Requirements from the Digital Banking Solution 6.1

Introduction to the Bank's IT systems 

The Bank uses core banking solution from Fiserv



The Bank's ATM switch solution is Base24 from ACI



The Bank currently has an internet banking offering and an SMS based mobile banking offering. The scope of the proposed implementation would also include complete data migration from the existing systems to the newly implemented solution.

6|Page

6.2

Internet banking solution Bidders who have put in a proposal for Internet Banking solution or an Integrated Digital Banking Multichannel offering should provide the following functional and technical requirements in their Internet Banking offering.

6.2.1

Functional requirements for Retail Internet Banking The solution proposed by the Bidder should provide the below mentioned functionalities for retail internet banking. The list below is not exhaustive and Bidders who offer additional functionalities over and above the list mentioned below can indicate the same in Annexure V.

S. No

Functional requirements

1

ACCOUNT SUMMARY Account summary for all types of accounts. (savings accounts, current accounts, term deposits, foreign currency deposits, loans, credit cards, others) Mini statement (last 10 transactions) for all accounts Past transactions for a specified period Account statements for a chosen period (with option to view on screen or download in Excel/PDF formats) Transaction search based on different parameters FUNDS TRANSFER Register Payees Register own accounts Register third party BOC account Register third party other bank accounts Manage Payees Funds Transfer Own account Third party BOC account Third party other bank accounts (through SLIPS) Schedule funds transfer (one time / standing order) Own account Third party BOC account Third party other bank accounts (through SLIPS) CUSTOMER SERVICE REQUESTS Issue cheque book request

1.1 1.2 1.3 1.4 1.5 2 2.1 2.1.1 2.1.2 2.1.3 2.2 2.3 2.3.1 2.3.2 2.3.3 2.4 2.4.1 2.4.2 2.4.3 3 3.1

7|Page

Mandatory (M) / Desired (D) M

M M M M M M M M M M M M M M M M M M

S. No

Functional requirements

3.2 3.3 3.4 3.5 3.6 3.7 3.8 3.9 3.10 3.11 3.12 3.13 3.14 4 4.1 4.2 4.3 5 5.1 5.2 5.3 5.4 5.5 5.6 5.7 5.8 5.9 5.10 5.11 6 6.1 6.2 7 7.1 7.2

Stop cheque request Issue demand draft request Issue debit card request Apply for credit card Standing order request Account statement request Debit card PIN change request Internet banking PIN change request Mobile banking PIN change request Hotlist debit card Hotlist credit card Dispute credit card transaction Any other service requests the bank may wish to add INQUIRIES Cheque status Stop cheque inquiry Service request status BILL PAYMENTS Bill presentment Bill payment Register biller for payment Prepaid Mobile top-up Credit card bill presentment Credit card bill settlements. Institution fee payments. Insurance premium payment. Online booking. (Movie, Train, Air, Bus, etc) Provisions for adding any other utility bill payments. Set up donations OTHER SERVICES Open new term deposit Open new savings account LOANS & CREDIT CARDS Outstanding balance / repayment status View statement for loan account / credit card account

8|Page

Mandatory (M) / Desired (D) M M M M M M M M M M M M M M M M D M M M M M M M M M M M D M M

S. No

Functional requirements

7.3 7.4 7.5 7.6

EMI payment / Credit card bill payment Next payment due date Autopay / standing instruction for loan EMI / credit card bill payment Apply for loan / credit card PERSONALIZATION, CUSTOMIZATION & EASE OF NAVIGATION Choose landing screen post login Customizable quick access menus Customizable screens (e.g. widgets that can be closed, repositioned)

8 8.1 8.2 8.3

M M M

8.4

Customized offers

D

8.5

Different skins for different types of customers

D

8.6

Menu search functionality

D

9

TRANSACTION SECURITY FEATURES

9.1

Virtual keyboard for login

D

9.2

Security image and message for login

D

9.3

One Time password to registered mobile number for authenticating transactions

M

10

UPDATE PROFILE INFORMATION

10.1

Change PIN / password

M

10.2

Set / reset security questions and answers

M

10.3 11 11.1 11.2

Update other profile information USER REGISTRATION Online customer self registration and activation Registration of customers by bank administrators Pre-linked username and password for instant issuance of internet banking access to customers

M

11.3

6.2.2

Mandatory (M) / Desired (D) M M M M

M M M

Functional Requirements for Corporate Internet Banking

The solution proposed by the Bidder should provide the below mentioned functionalities for corporate internet banking. The list below is not exhaustive and Bidders who offer additional functionalities over and above the list mentioned below can indicate the same in Annexure V.

9|Page

S. No

Functional requirements

1 1.1 1.2

CORPORATE USER ADMIN MODULE Separate administrator login Creating, modifying and deleting logins Setting and modifying hierarchy/ workflows for access, transactions Customizing view screens for access categories Creating, modifying and deleting limits for access categories Provision for single log-on option for internet banking, trade finance, cash management, treasury and any other portals that customers have to login and use ACCOUNT SUMMARY Account summary for all types of accounts. (current accounts, term deposits, foreign currency deposits, loans, company issued credit cards, trade finance, forex, others) Mini statement (last 10 transactions) for all accounts Past transactions for a specified period Account statements for a chosen period (with option to view on screen or download in Excel/PDF formats) Transaction search based on different parameters Support display of multiple currencies FUNDS TRANSFER Register Payees Register own accounts Register third party BOC account Register third party other bank accounts (including international accounts) Manage Payees Funds Transfer Own account Third party BOC account Third party other bank accounts - through SLIPS (including international accounts) Schedule funds transfer (one time / standing order) Own account Third party BOC account Third party other bank accounts - through SLIPS (including

1.3 1.4 1.5 1.6 2 2.1 2.2 2.3 2.4 2.5 2.6 3 3.1 3.1.1 3.1.2 3.1.3 3.2 3.3 3.3.1 3.3.2 3.3.3 3.4 3.4.1 3.4.2 3.4.3

10 | P a g e

Mandatory (M) / Desired (D) M M M D M M

M

M M M M M

M M M M M M M

M M M

S. No

4 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8 4.9 4.10 5 5.1 5.2 5.3 5.4 5.5 6 6.1 6.2 6.3 7 7.1 7.2 7.3 7.4 7.5 7.6 7.7 7.8 7.9 7.10 7.11 8

11 | P a g e

Functional requirements international accounts) CUSTOMER SERVICE REQUESTS Issue cheque book request Stop cheque request Issue demand draft request Apply for credit card Standing order request Account statement request Internet banking PIN change request Mobile banking PIN change request Hotlist credit card Any other service requests the bank may wish to add LOAN REQUEST AND MANAGEMENT Creating requests for loans Installment calculator View limits, outstanding balances, balance limits of loan accounts Repayments, closure of loan accounts Transactions statements (including past statements) of loan accounts INQUIRIES Cheque status Stop cheque inquiry Service request status BILL PAYMENTS Bill presentment Bill payment Register biller for payment Prepaid Mobile top-up Credit card bill presentment Credit card bill settlements Institution fee payments. Insurance premium payment. Online booking Provisions for adding any other utility bill payments. Set up donations TREASURY / FOREX

Mandatory (M) / Desired (D)

M M M M M M M M M M M D M M M

M M M D M M M M M M M M M M

S. No 8.1 8.2 8.3 8.4 8.5 9 9.1 9.2 9.3 9.4 9.5 9.6 9.7 9.8 9.9 9.10 9.11 9.12 9.13 10 10.1 10.2 10.3 10.4 10.5 11 11.1 11.2 11.3 11.4 12 12.1

12 | P a g e

Mandatory (M) / Desired (D) Information about current rates, forward rates M Request for purchase and sale of forex/ spot contracts M Request for opening and closing of forward contracts D Request for purchase, sale, viewing facility for Repos, Treasury D Bills, Treasury Bonds, other forex contracts Account status, transaction statements for forex contracts M TRADE FINANCE [Both Import & Export] – CUSTOMER REQUESTS Application, amendment, closure of Letter of credit M Advising, confirmation, transfer of Letter of credit M Application, amendment, closure of Guarantees M Application, amendment, closure of Acceptances M Import bills settlement and collection M Export bills purchase, negotiation and collection M Documentary collection M Application, amendment, closure of Shipping Guarantees M Application, management, repayment, closure of short-term loans M Link to SWIFT, with facility to forward SWIFT instructions M Outstanding balances, limits, transaction statements for Trade M Finance products Service requests regarding Trade Finance products M Linking of Trade Finance to customers Current Accounts M CASH MANAGEMENT Collections - cash, cheque, online M Payments (bulk file upload) – cash, cheque, online M Bulk cash requests M Transaction statements, MIS, reconciliation for collections, M payments accounts Multiple logins and authorization hierarchy for cash management M OTHER SERVICES Open new term deposit M Open new savings account D Confirmation of balances D Request call back facility D PERSONALIZATION, CUSTOMIZATION & EASE OF NAVIGATION Choose landing screen post login M Functional requirements

12.4

Mandatory (M) / Desired (D) Customizable quick access menus M Customizable screens (e.g. widgets that can be closed, repositioned) M D Customized offers

12.5

Different skins for different types of customers

D

12.6

Menu search functionality

D

13

TRANSACTION SECURITY FEATURES

13.1

Virtual keyboard for login

D

13.2

Security image and message for login

D

13.3

One Time password to registered mobile number for authenticating transactions

M

14

UPDATE PROFILE INFORMATION

14.1

Change PIN / password

M

14.2

Set / reset security questions and answers

M

14.3 15 15.1 15.2

Update other profile information USER REGISTRATION Online customer self registration and activation Registration of customers by bank administrators Pre-linked username and password for instant issuance of internet banking access to customers

M

S. No 12.2 12.3

15.3

6.2.3

Functional requirements

M M M

Technical requirements for Retail & Corporate Internet Banking

The solution proposed by the Bidder should provide the below mentioned technical capabilities and features. S. No

Feature

1

Interface to core banking system for financial and non-financial transactions / updates

M

2

Interface to ATM switch in ISO 8583 message format

M

3

Interface through middleware to Bank's systems

D

4

Interface through payment gateway to credit card transactions.

M

5

Interface for online merchant transaction payment using internet banking

M

6

Should support web services / XML through http/https.

M

13 | P a g e

Mandatory (M) / Desired (D)

S. No

Feature

7

System should support multiple institutes (overseas branches) and multiple countries

M

8

System should support multi currencies

M

9

System should support multiple languages including English, Sinhala and Tamil

M

10

Compatible with all major browsers (including but not limited to different versions of IE, Chrome, Firefox, Opera and Safari)

M

11

Integrate with existing DBMS & Hardware.

M

12

Application should support online replication of data at the Bank's backup site for disaster recovery

M

13

Data backup and archiving

M

14.

Solution should have a separate test environment

M

15.

Supports levying transaction / registration charges such as; Registration fee Annual fee Variable commission per transaction (% of transaction) Fixed fee per transaction Slab based transaction fee The system should provide the functionality to configure these for different transaction types and customer categories.

M

16.

The solution should support the following security features;

M

16.1

Username and password for accessing internet banking

M

16.2

Auto blocking/locking of internet banking upon reaching maximum number of tries with invalid/incorrect PIN. The maximum number of incorrect tries should be configurable by the Bank.

M

16.3

Termination of internet banking session and log off after lapse of configurable time period; Pop-up alert intimating customer that session is about to expire.

M

17.

The solution should support the following transaction level security;

M

17.1

End to End encryption of data transmission. (Symmetric or Asymmetric)

M

17.2

Minimum two factor authentication (with provision for a second factor like transaction OTP, transaction password, debit card grid panel, RSA token etc)

M

17.3

System should support multiple authentication based bank's preferences

M

14 | P a g e

Mandatory (M) / Desired (D)

S. No

Feature

18.

The solution to support following platform security & reliability;

M

18.1

Data stored is encrypted in the platform database.

M

18.2

Audit trails and logging features available in Web Server, application server and database server.

M

18.3

It should be possible to assign specific rights to platform administrators for secure and restricted access.

M

18.4

Platform to be able to support external certifying authority.

M

18.5

To have secure interfaces to various hosts systems according to prevailing security standards.

M

18.6

The solution should comply with OWASP guidelines.

M

18.7

Standard algorithms like AES with RSA should be supported.

M

18.8

Minimum encryption strength of 128 bit for end to end transaction.

M

18.9

Platform to support PKI scheme.

M

19.

The transactions through the system should be reliable and auditable – The platform should have the intelligence to handle cases like:

M

19.1

Internet connection drops during transaction

M

19.2

Back-end host system down.

M

19.3

Offline transaction handling

M

20.

The system should provide the following functionalities with respect to transaction Logs

M

20.1

Should maintain detailed transaction logs to enable processing audit trails to be reconstructed in the event of any disputes or errors.

M

20.2

The retention period of logs should be parameterized.

M

20.3

Security safeguards should also be implemented to protect the information from unauthorized modification or destruction.

M

20.4

System should facilitate maintaining a log of the reasons for unsuccessful transactions.

M

21.

Application to support multiple channels for registration such as;

M

21.1

Registration through bank branch.

M

21.2

Web portal registration

M

21.3

An audit trail of all the registrations done with details of the mode of request, who activated, date, time, etc, should be stored in the

M

15 | P a g e

Mandatory (M) / Desired (D)

S. No

Feature

Mandatory (M) / Desired (D)

database 22.

Provision for setting limits such as;

M

22.1

Per User/Group

M

22.2

Per Transaction

M

22.3

Per Day

M

22.4

Support for creation of users through bulk file upload should be available. The file upload should support fixed length and delimiter separated file format.

M

23.

Provision for advertisement of products of the bank.

M

24.

Provision to generate detailed reports, logs, audit trails, regarding all transactions

M

25.

The internet banking solution should be scalable to meet future enhancements/upgrades.

M

26.

The platform should provide the functionality for the administrator to create and modify different end-user and administrator-user groups with different set of rights/permissions (through the administrator portal)

M

27.

The administrator portal should have the capability for;

M

27.1

Approving users.

M

27.2

Blocking users.

M

27.3

Enable or disable functionalities.

M

27.4

Terminate the users.

M

27.5

Maintenance of activation requests.

M

27.6

All administrator activities shall be logged to indicate the creation, modification and deletion of data.

M

28.

The administrator portal should have;

M

28.1

The capability to add new products and services easily as per bank’s need.

M

28.2

Provision for various types of alerts such as SMS campaign, system down alert, customized campaign management etc.

M

28.3

Interfaces should be provided to generate reports according to bank requirements using data model provided by the internet banking application.

M

28.4

The capability to define the frequency of reports as per bank’s

M

16 | P a g e

S. No

Feature

Mandatory (M) / Desired (D)

need. 28.5

Detailed audit logs. There should be support for storing the logs in a detachable WORM device. The audit logs should be capable of being used for forensic evidence.

M

28.6

The capability to upload advertisements of various banking products so as to be displayed within the internet banking application.

M

29.

The administrative portal to have various reporting capabilities such as;

M

29.1

User-wise reports.

M

29.2

Merchant-wise reports.

M

29.3

Transaction-wise reports

M

29.4

Channel-wise reports

M

29.5

Number of registered users

M

29.6

Reports based on filters such as user activity, customer status, range of date/time etc.

M

29.7

Provision to search for customers based on different search filters like name, mobile number, address, age, status etc.

M

29.8

Other MIS reports: - Banking transactions (Intra-bank funds transfer, inter-bank funds transfer, bill payments, others) - Service requests - Biller wise payment reports - Registration reports (user registration, biller registration, intrabank payee registration, inter-bank payee registration) - Branchwise summary reports - Any other report that the bank identifies as mandatory before start of implementation

M

29.9

Custom MIS reports – Provision to easily create custom MIS report by selecting fields to be added to the report and specifying other parameters (e.g. date range for which data has to be extracted)

M

29.10

Activity log reports.

M

30.

Solution to support Call Center log-in or API to integrate with bank’s CRM/Call Center for various activities such as;

M

30.1

Block internet banking access

M

30.2

Issue unlocking code.

M

17 | P a g e

6.3

Mobile banking solution Bidders who are submitting a proposal for Mobile Banking solution or an Integrated Digital Banking Multichannel offering should provide the following functional and technical requirements in their Mobile Banking offering.

6.3.1

Functional requirements for retail mobile banking The solution proposed by the Bidder should provide the below mentioned functionalities for retail mobile banking. The list below is not exhaustive and Bidders who offer additional functionalities over and above the list mentioned below can indicate the same in Annexure V. Mandatory (M) / Desired (D)

S. No

Functionalities

1

ACCOUNT SUMMARY

M

Account summary for all types of accounts. (savings accounts, current accounts, term deposits, foreign currency deposits, loans, credit cards, others)

M

1.1 1.2

Mini statement (last 10 transactions) for all accounts

M

1.3

Past transactions for a specified period

M

1.4

Account statements for a chosen period (with option to view on screen or download/email to self)

M

1.5

Transaction search based on different parameters

M

2

FUNDS TRANSFER

M

2.1

Register Payees

M

2.1.1

Register own accounts

M

2.1.2

Register third party BOC account

M

2.1.3

Register third party other bank accounts

M

2.2

Manage Payees

M

2.3

Funds Transfer

M

2.3.1

Own account

M

2.3.2

Third party BOC account

M

2.3.3

Third party other bank accounts (through SLIPS)

M

Schedule funds transfer (one time / standing order)

M

2.4 2.4.1

18 | P a g e

Own account

M

S. No

Functionalities

Mandatory (M) / Desired (D)

2.4.2

Third party BOC account

M

2.4.3

Third party other bank accounts (through SLIPS)

M

3

CUSTOMER SERVICE REQUESTS

M

3.1

Issue cheque book request

M

3.2

Stop cheque request

M

3.3

Issue demand draft request

M

3.4

Issue debit card request

M

3.5

Apply for credit card

M

3.6

Standing order request

M

3.7

Account statement request

M

3.8

Debit card PIN change request

M

3.9

Internet banking PIN change request

M

3.10

Mobile banking PIN change request

M

3.11

Hotlist debit card

D

3.12

Hotlist credit card

D

3.13

Any other service requests the bank may wish to add

M

4

INQUIRIES

4.1

Cheque status

M

4.2

Stop cheque inquiry

M

4.3

Service request status

M

5

BILL PAYMENTS

5.1

Bill presentment

D

5.2

Bill payment

M

5.3

Register biller for payment

M

5.4

Prepaid Mobile top-up

M

5.5

Credit card bill presentment

D

5.6

Credit card bill settlements.

M

5.7

Institution fee payments.

M

5.8

Insurance premium payment.

M

5.9

Online booking (Movie, Train, Air, Bus, etc)

M

19 | P a g e

Mandatory (M) / Desired (D)

S. No

Functionalities

5.10

Provisions for adding any other utility bill payments.

M

5.11

Set up donations

D

6

OTHER SERVICES

6.1

Open new term deposit

M

6.2

Open new savings account

D

7

LOANS & CREDIT CARDS

7.1

Outstanding balance / repayment status

M

7.2

View statement for loan account / credit card account

M

7.3

EMI payment / Credit card bill payment

M

7.4

Next payment due date

M

7.5

Autopay / standing instruction for loan EMI / credit card bill payment

D

7.6

Apply for loan / credit card

D

8

PERSONALIZATION, NAVIGATION

8.1

Quick access menus

M

8.2

Customizable screens (e.g. widgets that can be closed, repositioned)

D

8.3

Push notifications on alerts, customized offers etc

M

8.4

Different skins for different types of customers

D

9

UPDATE PROFILE INFORMATION

9.1

Change PIN / password

M

9.2

Set / reset security questions and answers

M

9.3

Update other profile information

M

10

USER REGISTRATION

10.1

Instant customer self registration and activation

M

10.2

Registration of customers by bank administrators

M

10.3

Pre-linked login credentials for instant issuance of mobile banking access to customers

M

20 | P a g e

CUSTOMIZATION

&

EASE

OF

6.3.2

Optional module requirements for retail mobile banking Bidders who are submitting a proposal for Mobile Banking solution or an Integrated Digital Banking Multichannel offering should also indicate whether their solution can provide the following optional modules in their Mobile Banking offering. The upfront cost and AMC for these optional modules should be indicated separately in Annexure IX. The Bank reserves the right to include / exclude the optional modules in the solution implementation at the time of contracting.

6.3.3

S. No

Functional requirements

1

Optional Module 1 - NON ACCOUNT HOLDER SERVICES - VIRTUAL WALLET

1.1

Cash deposit (at CDM, through merchant / other methods)

1.2

Cash withdrawal (at ATM, POS or Merchant)

1.3

Third party fund transfers (Mobile to Account, Mobile to Mobile).

1.4

Payment at merchants

1.5

Bill presentment & payment

1.6

Mobile top-up

1.7

Credit card settlements

1.8

Institution fee payments

1.9

Insurance premium payment

1.10

Online booking (Movie, Train, Air, Bus etc)

1.11

Provisions for adding any other utility bill payments

2

Optional Module 2 - CARDLESS CASH WITHDRAWAL

2.1

Cardless cash withdrawal at ATMs

Functional requirements for corporate mobile banking The solution proposed by the Bidder should provide the below mentioned functionalities. The list below is not exhaustive and Bidders who offer additional functionalities over and above the list mentioned below can indicate the same in Annexure V.

21 | P a g e

S. No

Functional requirements

1 1.1 1.2

CORPORATE USER ADMIN MODULE Separate administrator login Creating, modifying and deleting logins Setting and modifying hierarchy/ workflows for access, transactions Customizing view screens for access categories Creating, modifying and deleting limits for access categories Provision for single log-on option for internet banking, trade finance, cash management, treasury and any other portals that customers have to login and use ACCOUNT SUMMARY Account summary for all types of accounts. (current accounts, term deposits, foreign currency deposits, loans, company issued credit cards, trade finance, forex, others) Mini statement (last 10 transactions) for all accounts Past transactions for a specified period Account statements for a chosen period (with option to view on screen or download in Excel/PDF formats) Transaction search based on different parameters Support display of multiple currencies FUNDS TRANSFER Register Payees Register own accounts Register third party BOC account Register third party other bank accounts (including international accounts) Manage Payees Funds Transfer Own account Third party BOC account Third party other bank accounts - through SLIPS (including international accounts) Schedule funds transfer (one time / standing order) Own account Third party BOC account Third party other bank accounts - through SLIPS (including international accounts) CUSTOMER SERVICE REQUESTS

1.3 1.4 1.5 1.6 2 2.1 2.2 2.3 2.4 2.5 2.6 3 3.1 3.1.1 3.1.2 3.1.3 3.2 3.3 3.3.1 3.3.2 3.3.3 3.4 3.4.1 3.4.2 3.4.3 4

22 | P a g e

Mandatory (M) / Desired (D) M M M D M M

M

M M D M M

M M M M M M M

M M M

S. No

Functional requirements

4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8 4.9 4.10 5 5.1 5.2 5.3 5.4

Issue cheque book request Stop cheque request Issue demand draft request Apply for credit card Standing order request Account statement request Internet banking PIN change request Mobile banking PIN change request Hotlist credit card Any other service requests the bank may wish to add LOAN REQUEST AND MANAGEMENT Creating requests for loans Installment calculator View limits, outstanding balances, balance limits of loan accounts Repayments, closure of loan accounts Transactions statements (including past statements) of loan accounts INQUIRIES Cheque status Stop cheque inquiry Service request status BILL PAYMENTS Bill presentment Bill payment Register biller for payment Prepaid Mobile top-up Credit card bill presentment Credit card bill settlements Institution fee payments. Insurance premium payment. Online booking Provisions for adding any other utility bill payments. Set up donations TREASURY / FOREX Information about current rates, forward rates Request for purchase and sale of forex/ spot contracts

5.5 6 6.1 6.2 6.3 7 7.1 7.2 7.3 7.4 7.5 7.6 7.7 7.8 7.9 7.10 7.11 8 8.1 8.2

23 | P a g e

Mandatory (M) / Desired (D) M M M M M M M M M M M D M M M

M M M D M M M M M M M M M M M M

S. No 8.3 8.4 8.5 9 9.1 9.2 9.3 9.4 9.5 9.6 9.7 9.8 9.9 9.10 9.11 9.12 9.13 10 10.1 10.2 10.3 10.4 11 11.1 11.2 11.3 11.4 11.5 12 12.1 12.2 12.3 12.4

24 | P a g e

Mandatory (M) / Desired (D) Request for opening and closing of forward contracts D Request for purchase, sale, viewing facility for Repos, Treasury D Bills, Treasury Bonds, other forex contracts Account status, transaction statements for forex contracts M TRADE FINANCE [Both Import & Export] – CUSTOMER REQUESTS Application, amendment, closure of Letter of credit D Advising, confirmation, transfer of Letter of credit D Application, amendment, closure of Guarantees D Application, amendment, closure of Acceptances D Import bills settlement and collection D Export bills purchase, negotiation and collection D Documentary collection D Application, amendment, closure of Shipping Guarantees D Application, management, repayment, closure of short-term loans D Link to SWIFT, with facility to forward SWIFT instructions D Outstanding balances, limits, transaction statements for Trade M Finance products Service requests regarding Trade Finance products M Linking of Trade Finance to customers Current Accounts M OTHER SERVICES Open new term deposit M Open new savings account D Confirmation of balances D Online Chat feature, call back facility D PRE-LOGIN SERVICES ATM locator M Branch locator M FD rates M Loan interest rates, processing charges rates M Open new account D PERSONALIZATION, CUSTOMIZATION & EASE OF NAVIGATION Choose landing screen post login M Customizable quick access menus M Customizable screens (e.g. widgets that can be closed, repositioned) M D Customized offers Functional requirements

Mandatory (M) / Desired (D) D

S. No

Functional requirements

12.5

Different skins for different types of customers

12.6

Menu search functionality

13

TRANSACTION SECURITY FEATURES

13.1

Virtual keyboard for login

D

13.2

Security image and message for login

D

13.3

One Time password to registered mobile number for authenticating transactions

M

14

UPDATE PROFILE INFORMATION

14.1

Change PIN / password

M

14.2

Set / reset security questions and answers

M

14.3 15 15.1 15.2

Update other profile information USER REGISTRATION Online customer self registration and activation Registration of customers by bank administrators Pre-linked username and password for instant issuance of internet banking access to customers

M

15.3

6.3.4

D

M M M

Technical requirements for retail and corporate mobile banking Technical specifications of the Bidder's mobile banking solution should meet the following requirements. S. No

Technical requirement

1

Interface to core banking system (CBS) for financial and nofinancial transactions / updates

M

2

Interface through ATM switch in ISO8583 message format

M

3

Interface through middleware to Bank's systems

D

4.

Interface through payment gateway to credit card transactions / merchant transactions

D

5.

Should support web services/XML through http/https.

M

6.

System should support multiple institutes (overseas branches) and multiple countries

M

7.

System should support multi currencies

M

8.

System should support multiple languages including English,

M

25 | P a g e

Mandatory (M) / Desired (D)

S. No

Technical requirement

Mandatory (M) / Desired (D)

Sinhala and Tamil 9.

Integrate with existing DBMS & Hardware.

M

10.

Online replication of data at our backup site for disaster recovery

M

11.

Data backup and archiving

M

12.

Solution should have a separate test environment.

M

13.

Supports all mobile operator technologies in Sri Lanka (GSM, WCDMA, others)

M

14.

Supports both downloadable mobile applications and browser based mobile solutions

M

15.

Supports mobile handset and tablet operating systems IOS, Android and Windows through downloadable apps. Other OS-es to be supported through downloadable apps or a web browser version.

M

16.

Supports all mobile handset and tablet models Iphone, Ipad, Android phones and tablets and other phones / tablets from Nokia, Sony Ericson, Motorola, Samsung , Blackberry etc.

M

17.

Supports levying transaction / registration charges such as Registration fee Annual fee Variable commission per transaction (% of transaction) Fixed fee per transaction Slab based transaction fee The system should provide the functionality to configure these for different transaction types and customer categories.

M

18.

The solution to support following handset level security;

M

18.1

Username and/ or PIN for opening mobile banking application.

M

18.2

Access credentials should not be stored on the customer’s handset

M

18.3

Auto blocking/locking of mobile banking upon reaching maximum number of tries with invalid/incorrect PIN. The maximum number of incorrect tries should be configurable by the Bank.

M

18.4

Termination of mobile application session and logs off after lapse of configurable time period.

M

18.5

A handset device that does not meet industry standard should be denied access.

M

19.

The solution to support following transaction level security;

M

26 | P a g e

S. No

Technical requirement

19.1

End to End encryption of data transmission. (Symmetric or Asymmetric)

M

19.2

Option to have two factor authentication (with provision for a second factor like transaction PIN, debit card grid panel, RSA token etc in addition to mPIN)

M

19.3

Authentication based on device registration and PIN No

M

19.4

System should support multiple authentication based user preferences

M

20.

The solution to support following platform security & reliability;

M

20.1

Data stored is encrypted in the platform database.

M

20.2

Audit trails and logging features available in Web Server, application server and database server.

M

20.3

It should be possible to assign specific rights to platform administrators for secure and restricted access.

M

20.4

Platform to be able to support external certifying authority.

M

20.5

To have secure interfaces to various hosts systems according to prevailing security standards.

M

20.6

The solution to comply with OWASP guidelines.

M

20.7

Standard algorithms like AES with RSA should be supported.

M

20.8

Minimum encryption strength of 128 bit for end to end transaction.

M

20.9

Platform to support PKI scheme.

M

21.

The transactions are reliable and auditable – platform to have the intelligence to handle cases like;

M

21.1

Call/SMS received while performing transactions.

M

21.2

Battery runs out while performing transactions.

M

21.3

Connection drops (Mobile network, GPRS or Network Switching)

M

21.4

Back-end host system down.

M

21.5

Offline transaction handling

M

22.

Transaction Logs;

M

22.1

Should maintain detailed transaction logs to enable processing audit trails to be reconstructed in the event of any disputes or errors.

M

22.2

The retention period of logs should be parameterized.

M

27 | P a g e

Mandatory (M) / Desired (D)

S. No

Technical requirement

22.3

Security safeguards should also be implemented to protect the information from unauthorized modification or destruction.

M

22.4

System should facilitate maintaining a log of reasons for unsuccessful transactions.

M

23.

Application to support multiple channels for registration such as;

M

23.1

Registration through bank branch.

M

23.2

Registration through internet banking system.

M

23.3

Web portal registration.

M

23.4

Registration through bank’s call center.

M

24.

An audit trail of all the registrations done with details of the mode of request, who activated, date, time, etc, should be stored in the database.

M

25.

Provision for setting limits such as;

M

25.1

Per User/Group.

M

25.2

Per Transaction.

M

25.3

Per Day.

M

26.

Support for creation of users through bulk file upload should be available. The file upload should support fixed length and delimiter separated file format.

M

27.

Provision for advertisement of products of the bank.

M

28.

To generate detailed reports, logs, audit trails, regarding all transactions

M

29.

The mobile banking solution should be scalable to meet future enhancements / upgrades.

M

30.

The platform should provide the functionality for the administrator to create and modify different end-user and administrator-user groups with different set of rights/permissions (through the administrator portal)

M

31.

The administrator portal should have the capability for;

M

31.1

Approving users.

M

31.2

Blocking users.

M

31.3

Enable or disable functionalities.

M

31.4

Change handset / mobile number of users.

M

31.5

Terminate the users.

M

28 | P a g e

Mandatory (M) / Desired (D)

S. No

Technical requirement

31.6

Maintenance of activation requests.

M

31.7

All administrator activities shall be logged to indicate the creation, modification and deletion of data.

M

32.

The administrator portal should have;

M

32.1

The capability to add new products and services easily as per bank’s need.

M

32.2

Provision for various types of alerts such as SMS campaign, system down alert, customized campaign management etc.

M

32.3

Interfaces should be provided to generate reports according to bank requirements using data model provided by the mobile application.

M

32.4

The capability of defining the frequency of reports as per bank’s need.

M

32.5

Detailed audit logs. There should be support for storing the logs in a detachable WORM device. The audit logs should be capable of being used for forensic evidence.

M

32.6

The capability to upload advertisements of various banking products so as to be displayed within the downloaded mobile banking application.

M

33.

The administrative portal to have various reporting capabilities such as;

M

33.1

User-wise reports.

M

33.2

Merchant-wise reports.

M

33.3

Transaction-wise reports.

M

33.4

Channel-wise reports.

M

33.5

Number of registered/downloaded users.

M

33.6

Reports based on filters such as user activity, customer status, range of date/time etc.

M

33.7

Provision to search for customers based on different search filters like name, mobile number, address, age, status etc.

M

33.8

Other MIS reports: - Banking transactions (Intra-bank funds transfer, inter-bank funds transfer, bill payments, others) - Service requests - Biller wise payment reports - Registration reports (user registration, biller registration, intra-

M

29 | P a g e

Mandatory (M) / Desired (D)

S. No

Technical requirement

Mandatory (M) / Desired (D)

bank payee registration, inter-bank payee registration) - Branchwise summary reports - Any other report that the bank identifies as mandatory before start of implementation

7

33.9

Custom MIS reports – Provision to easily create custom MIS report by selecting fields to be added to the report and specifying other parameters (e.g. date range for which data has to be extracted)

M

33.10

Activity log reports.

M

34.

Solution to support Call Center log-in or API to integrate with bank’s CRM/Call Center for various activities such as;

M

34.1

Block stolen handset.

M

34.2

Issue unlocking code.

M

34.3

Reissue activation code.

M

34.4

Change handset.

M

Digital banking multichannel solution In addition to the functional and technical requirements mentioned for internet and mobile banking, Bidders who are submitting a proposal for an integrated Digital Banking multichannel solution should offer the below functionalities: The solution proposed by the Bidder should provide the below mentioned functionalities. The list below is not exhaustive and Bidders who offer additional functionalities over and above the list mentioned below can indicate the same in Annexure V. Mandatory (M) / Desired (D)

S. No

Functionalities

1

SEAMLESS INTEGRATION BETWEEN MOBILE BANKING PLATFORMS

1.1

One time registration for both channels (internet and mobile banking)

M

1.2

Option to use the same username and password for both internet and mobile banking

M

1.3

Beneficiaries and billers added in one channel to be reflected in the other

M

1.4

Transactions initiated in one channel to be reflected in the other

M

30 | P a g e

INTERNET

AND

S. No

Functionalities

Mandatory (M) / Desired (D)

along with the provision to complete it (e.g. Funds transfer initiated in internet banking should be reflected in the mobile app and the user should be able to complete the transaction on the mobile app)

8 8.1

Common look and feel across the platforms including User interface Menu options

M

1.5 1.6

Common admin module for all platforms

M

1.7

Upgrade of features / functionalities in one platform to reflect in other channels also

M

2

PROVISION TO INTEGRATE OTHER CHANNELS TO THE DIGITAL BANKING PLATFORM

2.1

Call center

M

2.2

Bank Branch modules for customer service requests

M

2.3

Self service machine modules for customer service requests

M

Instructions to Bidders General Instructions

8.1.1

No Bid will be considered unless it is prepared as per the formats mentioned in this RFP by the Bank. Bids must be made in duplicate and must include all documents required as part of technical and commercial bids and the Annexures

8.1.2

Bidders must acquaint themselves fully with all the Terms and Conditions of this tender. No plea of insufficient information or lack of information will be entertained at any time after the closing of the tender at the specified date and time.

8.1.3

The Bidder must furnish all the particulars called for in Technical and Commercial bids along with all other details and information expected to be submitted with the Bid. Additional information or technical details should not be submitted after closing the Tender unless otherwise the Bank requested in writing to do so.

8.1.4

No modifications or alterations with respect to the submitted documents will be permitted after closing of bid submissions.

31 | P a g e

8.1.5

In the absence of a written request to do so by the Bank, submission of written or verbal clarifications to the Bank will be considered as a disqualification.

8.1.6

The signatory from the Bidder who signs on the bid response forms may be either the Principal Officer or his duly Authorized Representative, in which case he shall submit a certificate of authority. All certificates and documents (including any clarifications sought and any subsequent correspondences) received hereby, shall, as far as possible, be furnished and signed by the representative and the principal.

8.1.7

The power of authorization or any other document consisting of adequate proof of the ability of the signatory to bind the Bidder shall be annexed to the Bid. Bank may reject outright, any bid not supported with adequate proof of the signatory’s authority.

8.1.8

Each page of the Bid should be stamped and signed by appropriate authority.

8.1.9

Every Bidder must be prepared to submit documents and other evidence of his ability to execute the contract if called upon to do so, by the Bank

8.1.10

Private companies who submit a Bid should declare the names of current Directors of the Company, Public Companies should declare the names of current Directors and the Proprietorship/Partnership should declare the names of Proprietors/Partners.

8.1.11

The Bidder should be the Principal Owner and have property rights, or be authorized by the Principal Owner to sell the product. In case the Bidder is an authorized partner / reseller for the particular offer of item, authorization from the developer / manufacturer should be submitted to ensure that the regular upgrades and support services requested by the Bank will be made available to the Bank from time to time.

8.1.12

Any company or its related entities involved in the preparation of this tender document cannot bid for this tender.

8.2 8.2.1

Procedure for Submission of Bids A Two Envelopes Bidding Process will be followed for this tender.  Technical Bid (2 copies) in one cover.  Commercial Bid (2 copies) in one cover.

32 | P a g e

 The Technical and Commercial bids must be submitted in duplicate. and should be submitted in separate sealed covers super-scribing the words "Technical Bid" and “Commercial Bid” respectively.  One copy each of the Technical and Commercial Bid should be marked as "Original" and the other as "Copy". 8.2.2

The Bid Covers, prepared as above, are to be further placed in a single sealed cover superscribed with the Tender Number for submission.

8.2.3

The cover thus prepared should also indicate clearly the name and address of the Bidder to enable the Bid to be returned unopened in case it is declared "Late".

8.2.4

Each copy of the tender should be a complete document and should be bound as a volume. The document should be page numbered and appropriately flagged and contain the list of contents with page numbers. Different copies must be bound separately. Deficiency in documentation may result in rejection of the Bid.

8.2.5

Bidder should also provide the Technical bid in soft copy format, in the form of a non-rewriteable CD (Compact Disc) as follows: a. Two copies of CD each containing only the technical bid - The CDs containing technical bid should be sealed along with the hard copies of the respective technical bids. b. All CDs submitted by the Bidder must be in sealed covers. The sealed covers as well as the CD media must be duly signed by the Bidder using a “Permanent Pen/Marker”, should be super scribed with “Technical Bid” and should bear the name of the Bidder. c. Bidder must ensure that the information furnished by him in respective CDs is identical to that submitted by him in the original paper bid document. In case of any discrepancy observed by the Bank in the contents of the CDs and original paper bid documents, the information furnished on original paper bid document will prevail over the soft copy.

8.2.6 8.3 8.3.1

The Technical Bid (in both hard copies and CDs) must not contain any price information. Format for Technical Bid Technical Bid must be made in an organized and structured manner in the following form:

33 | P a g e

a. Table of Contents b. Technical Bid – Bid particulars for Tender (Annexure I) c. Technical Bid Cover Letter (Annexure II) d. Bidder/Consortium Members’ Profile (Annexure III) e. Bidder’s Financial Details (audited financial statements for 2011, 12 and 13) and other supporting documents (including proof of prior experience) as asked in the RFP f.

Methodology and detailed project plan (Annexure IV)

g. Technical Bid – Functional & Technical Requirements (Annexure V) h. Specifications for Hardware and other licensing requirements (Annexure VI) Technical Bid – Details of Prior Experience (Annexure VII)

i. 8.3.2

8.4 8.4.1

All claims made by the Bidder in the response will have to be backed by documentary evidence. Format for Commercial Bid The commercial offer should be quoted as per the format given in Annexure IX. Quotations will be entertained only in currencies as follows: 

All locally supplied goods and services must be quoted in Sri Lankan Rupees only



All foreign supplied goods and services may be quoted in USD/EURO/ GBP

For commercial evaluation and comparison purposes, any cost item quoted in foreign currencies will be converted to Sri Lankan Rupees at the selling rate published by the Central Bank of Sri Lanka. 8.4.2 8.5 8.5.1

The commercial bid should be accompanied by commercial bid cover letter. (Annexure VIII). Cost of Tender The Bidder shall bear all costs associated with the preparation and submission of its bid, including cost of presentation for the purposes of clarification of the bid, if so desired by the Bank. The Bank, will in no case be responsible or liable for those costs, regardless of the conduct or outcome of the Tendering process.

34 | P a g e

8.6

Amendment of RFP document

8.6.1

At any time prior to the last date for receipt of bids, the Bank, may, for any reason, whether at its own initiative or in response to a clarification requested by a prospective Bidder, modify the RFP document by an amendment.

8.6.2

Any amendments to the RFP will be notified on the Bank's website www.boc.lk in the Tender Notices section

8.6.3

In order to afford prospective Bidders reasonable time in which to take the amendment into account in preparing their bids, the Bank may, at its discretion, extend the last date for the receipt of Bids.

8.6.4

Bank may at any time during the tendering process request the Bidder to submit revised Technical / Commercial Bids and/or Supplementary commercial bids without thereby incurring any liability to the affected Bidder or Bidders.

8.7 8.7.1

8.8

Language of Bids The Bids prepared by the Bidder and all correspondence and documents relating to the bids exchanged by the Bidder and the Bank, shall be written in the English language. Period of Validity of Bids

8.8.1

Bids shall remain valid for 180 days after the date of opening of Technical Bids prescribed by the Bank. No bidder shall be entitled to withdraw, cancel or revoke their offer within the said period.

8.8.2

The Bank may request the Bidder(s) for an extension of the period of validity. The request and the responses thereto shall be made in writing (or by fax).

9 Terms and Conditions 9.1 9.1.1

Obligation of the Contractor The design, supply, delivery, installation, commissioning and maintenance of Internet Banking / Mobile Banking / Digital Banking Multichannel solution conforming to requirements given in project scope and Annexure V hereto, shall at all times and in all respects be effected to the entire satisfaction of the Bank, and the decision of its authorized

35 | P a g e

representative, that any work or service or supply is essential for the due and successful execution of the Contract, shall be final and binding on the Contractor. 9.1.2

The Contractor shall also be responsible for complete migration of data from the Bank's existing internet and mobile banking solutions to the new solution implemented. The migration should be effected to the entire satisfaction of the Bank, and the decision of its authorized representative, that any work or service or supply is essential for the due and successful execution of the Contract, shall be final and binding on the Contractor.

9.1.3

The Contractor should be responsible for carrying out any upgrade, changes/modifications which may be required from time to time.

9.1.4

If software and utilities enhancement is available such new versions of software should be provided and installed free of charge.

9.1.5

The Contractor shall exercise all due care and diligence in the execution of the Contract, and shall also ensure that the normal work and business of the office of the Bank are not interfered with, interrupted or suspended, due to any fault of the Contractor, during the period of design, supply, delivery, installation, commissioning and maintenance of Internet Banking / Mobile Banking / Digital Banking Multichannel solution for BOC.

9.1.6

Neither the Contract nor any part of it shall be assigned or sub contracted without the written authority of the General Manager of Bank of Ceylon who reserves the further right to refuse to recognize any power of attorney granted by the Contractor, to any person authorizing him to carry out the Contract on the Contractor's behalf.

9.1.7

The Contractor or his agents shall observe and comply with all the by-laws or regulations of all statutory authorities in force in Sri Lanka, and shall be responsible for payment of all fees, charges, penalties etc. levied by such authorities for any purpose whatsoever, and shall indemnify the Bank against any claims arising out of his failure or neglect in observing or complying with such laws and regulations.

9.2 9.2.1

Delivery Time The Contractor should be ready to commence work on site within 3 weeks of the order. The design phase for all the areas should be completed within 3 weeks from the date of signing of the contract. The implementation phase including supply, customization, installation, UAT, training, documentation and deployment of the proposed systems for Internet Banking / Mobile Banking / Digital Banking Multichannel solution should be completed within 4

36 | P a g e

months from the date of signing of the contract. Phase-wise implementation timelines should be agreed and signed off with the Bank at the time of contracting. 9.2.2

9.3

The Contractor shall execute the order within the specified time and shall at all time keep the Bank duly informed of arrangements for installation, testing, commissioning etc. Guarantees and Warranties

9.3.1

All expenses and risks in the execution of the Contract shall be borne by the Contractor or his agents who shall indemnify the Bank in respect of all claims including those under the Workmen's Compensation Ordinance and Employees Provident Fund Act.

9.3.2

The Contractor should indemnify the Bank against claims from third parties for the use of material subject to patents/copyrights / IP rights of the software developer incorporated in any goods and services offered by them.

9.4

Support & maintenance

9.4.1

9.5

After completion of implementation of the solution, the Contractor should arrange for onsite and offsite service support for the live solutions as per the requirements of the Bank. The Contractor shall enter into a Service Level agreement for the same with the Bank at the time of contracting. Payment Terms

S.No.

Milestone

Payment

1

On award of the contract, submission of detail Project Plan, completion of design and acceptance of design plan by bank

10% of the total cost of contract (on submission of Advance Payment Guarantee)

2 3 4

37 | P a g e

After completion of implementation including development, UAT sign-off, training for all areas and 100% roll out of the solution Three months after commencement of live operation of the complete solution Resolving all identified post implementation audit issues and completion of 1 year of warranty for all the software systems implemented

50% of the total cost of contract 30% of the total cost of contract 10% of the total cost of contract

Annual Maintenance Contract (AMC) cost will be paid annually after warranty period.

9.6 9.6.1

Liquidation If the Contractor or his agents shall become bankrupt or insolvent or have a receiving order made against him or compound with his creditors or being a Corporation commence to be wound up, not being a member's voluntary winding up for the purpose of amalgamation or reconstruction or carry on its business under receiver for the benefit of his creditors, or any of them, the Bank shall be at liberty a. to terminate the contract forthwith by notice in writing to the Contractor or to the Receiver, or Liquidator or any person, in whom the Contract may become vested, or b. to give such Receiver or Liquidator or other person the option of carrying out the Contract subject to his providing a guarantee for the due and faithful performance of the contract at the contract value.

9.7 9.7.1

9.8 9.8.1

Escrow The Bidder shall agree to have the most current software (source and object code) and documentation including but not limited to database structures, functional specifications, Data Flow Diagrams, Source Libraries in CD or similar common industry accepted media in an escrow, giving access to the Bank (BOC) to be used in case of liquidation. The Bidder shall also ensure that the media will contain adequate clear instructions for the Bank (BOC) to retrieve and compile such source code and execute without the assistance of the Bidder, in case of liquidation. Adequate documentary evidence should also be provided with the proposal as proof of same. Performance Bond On a tender or any part thereof being accepted, the bank shall notify such acceptance to the Bidder whose tender or part thereof has been accepted and by such notification will require the successful Bidder as security for the due fulfillment of his contract, to furnish at his own cost and expense, a Performance Bond from a recognized bank, other than Bank of Ceylon, acceptable to the bank on or before the time and date specified in such notification (not being later than the 10th day after dispatch of such notification) in a sum of 15% of the contract value valid for one year.

38 | P a g e

9.9

Warranty Against Benefits

9.9.1

The Contractor shall warrant that he has not given or promised to give any money or gift to any official or employee of the Bank or any Government institution or employee thereof with the intent or objective of securing the contract. Any violation of this warranty shall be sufficient grounds for cancellation or revocation of the contract without any claims against the Bank.

9.10 Default 9.10.1

In the event of failure or default on the part of the Contractor to execute the Contract at the time and place required by the authorized representative of the Bank, or in the event of his failure or default to execute the contract or part of it in any other respect, the Bank reserves to itself the right (without prejudice to any other right) to engage at the risk and expense of the Contractor, the services of any other person to execute the contract, or any part thereof, and the Bank shall be entitled to recover from the Contractor all losses, costs and damages, which it may sustain in consequence of such failure or default.

9.10.2

Any sum of money which the Contractor or his agent is liable to pay to the Bank will be deducted by the Bank from the amount due to the Contractor or his agent or set off against the Performance Bond furnished to the Bank, without prejudice to any other right of the Bank. The balance of such monies, less such deductions will be paid to the Contractor on satisfactory execution of the Contract. If the Contractor or his agents fail to execute the Contract in a satisfactory manner, or if his conduct is considered improper or if he contravenes any of the laws and conditions of the contract, his name will be placed on the list of defaulting Contractors.

9.10.3

The Contractor and/or his duly appointed agent shall be responsible for the prompt design, supply, delivery, installation and commissioning of the Internet Banking / Mobile Banking / Digital Banking multichannel solution. In the event of a delay in delivery and commissioning, the Contractor will be liable to pay to the Bank by way of penalty a sum calculated at 0.1% of the total cost of contract value for each day of delay in deliveries. The penalty would be capped at a maximum of 10% of the contract value. The bank reserves the right to terminate the contract if the delivery and commissioning is delayed by more than 100 days.

9.10.4

If the delivery is delayed due to an explicit instruction from the Bank to the same effect or after a mutual agreement has been arrived at between the Contractor and the Bank to revise implementation timelines, no penalties shall be levied until the newly agreed delivery date. Final decision on penalties for delayed delivery shall rest with the bank.

39 | P a g e

9.11 Settlement of Disputes 9.11.1

If any dispute or difference shall arise between the parties as to the construction of this Agreement or as to any matter or thing of whatsoever nature arising there under or in connection therewith, then either party shall forthwith give to the other notice in writing of such dispute or difference which notice shall specify the matters which are in dispute and such dispute or difference of which such notice has been given and no other shall be and is hereby referred to a single Arbitrator in case the parties agreed upon one, otherwise to two (2) Arbitrators, one to be appointed by each party or in the event of disagreement between the Arbitrators, then to an Umpire to be appointed by the Arbitrators in writing before commencing the business of the reference and if either party shall refuse or neglect to appoint an Arbitrator within twenty days (20) after the other party shall have appointed an Arbitrator on its part and shall have given notice to the party in default requiring it to make such appointment, then the Arbitrator appointed as aforesaid shall at the request of the party appointing him proceed to hear and determine the matter in difference as if he were an Arbitrator appointed by both the parties in dispute. The decision or award of the Arbitrator, Arbitrators or Umpire (as the case may be) shall be binding upon the parties in dispute and each of them and the cost of the reference and award shall be in the discretion of the Arbitrator, Arbitrators or Umpire who may direct to any, by whom and in what manner same or any part thereof shall be borne and paid and the submission of the parties in dispute to the award of the Arbitrator, Arbitrators or Umpire and the award may, at the instance of either party, be made a rule or order of Court under the provision in that behalf contained in the Arbitration Act No. 11 of 1995 or any subsisting or future statutory modification thereof.

9.11.2

The Contractor shall, if he requests Arbitration, and if so required by the General Manager of the Bank, deposit with him prior to the appointment of Arbitrators, such sum as shall be fixed by him towards the cost of Arbitration.

9.11.3

Performance of the Contract shall continue during arbitration proceedings.

9.11.4

All proceedings and hearings by the Arbitrator, Arbitrators or Umpire shall (unless otherwise as and when only to the extent and for the purpose which may be mutually agreed) be held in Colombo.

9.11.5

In the event of the appointment of an Umpire, he shall sit with the Arbitrators and hear evidence in conjunction with them before the matters in dispute shall have been referred to him and the Umpire may base his award upon such evidence, and such other evidence (if any) as he may afterwards hear or take sitting alone.

40 | P a g e

Annexure I Bid Particulars for Tender No. P / PROC / 2014 /27

1

Name of the Bidder

2

Is the Bidder the Principal Owner of the solution or an Authorized Partner / Reseller

3

Address of the Bidder

4

Name of the person to whom all references shall be made regarding this tender

5

Designation of the person to whom all references shall be made regarding this tender

6

Address of the person to whom all references shall be made regarding this tender

7

Telephone No. (with country and area code)

8

E-Mail of the contact person:

9

Fax No. (with country and area code)

Name: Place: Date: Seal & Signature of the bidder

41 | P a g e

Annexure II Technical Bid Cover Letter Tender Reference No: Date: The Chief Manager Properties & Procurement Dept., 14th Floor, Head Office, “BOC Square” No.1, Bank of Ceylon Mawatha, Colombo 1 Dear Sir, Sub: Your RFP for “Design and Implementation of Internet & Mobile Banking Solutions” Ref No. P / PROC / 2014 /27 Dated 24th Dec, 2014 With reference to the above RFP, having examined and understood the instructions including all annexures, terms and conditions, project scope forming part of the RFP, we hereby enclose our Technical Bid for Design and Implementation of Internet Banking / Mobile Banking / Digital Banking platform as mentioned in the RFP document. In the event of acceptance of our bid by The Bank we undertake to design and implement an Internet Banking / Mobile Banking / Digital Banking platform as per your purchase orders. In the event of our selection by The Bank for design and implementation of Internet Banking / Mobile Banking / Digital Banking platform, we will submit a Performance Bond for a sum equivalent to 15% of the value of the contract to the Bank valid for a period of one year in favour of Bank of Ceylon. We agree to abide by the terms and conditions of this bid offer till 180 days from the date of opening of bids and our offer shall remain binding upon us which may be accepted by the Bank any time before expiry of 180 days.

42 | P a g e

Until a formal contract is executed, this tender offer, together with The Bank’s written acceptance thereof and Bank’s notification of award, shall constitute a binding contract between us. Dated this day of ______ 2015 Signature: (In the Capacity of)_________________________ Duly authorized to sign the tender offer for and on behalf of Seal. Place: Address:

43 | P a g e

Annexure III Bidder / Principle Owner / Authorized Partner / Other Consortium Member Profile The bidder should fill this Annexure for the Bidder and any other member of the consortium separately (including the Principal Owner, Authorized Reseller/ Partner & any other members of the consortium) 1

Name of the Company

2

Indicate whether the Company is the lead Bidder and whether the Company is the Principal Owner, Authorized Partner or Other consortium member

3

Year Established

4

Turnover (in LKR)

FY 2011: FY 2012: FY 2013:

4

Profit after tax (in LKR)

FY 2011: FY 2012: FY 2013:

5

Proposed role of the member in the project

6

Head Office Address

7

Telephone No. (with country and area code)

8

Fax No. (with country and area code)

9

E-mail Address

10

Name of the Key representative for this project

11

Any accreditations / Certifications (e.g. CMM, ISO, ITIL etc.)

44 | P a g e

Implementations in the last 3 years: (Jan 2012 – Dec 2014) No. of implementati ons

12

Previous experience in implementation of internet banking / mobile banking / digital banking multichannel solutions at commercial banks

Total no. of users

Internet banking Mobile banking Digital banking multi channel Implementations before last 3 years: (2011 and before) No. of implementati ons

Total no. of users

Internet banking Mobile banking Digital banking multi channel Please provide details for each past implementation in Annexure VII As of this date the information furnished in all parts of this form is accurate and true to the best of my knowledge. Name: Place: Date: Seal & Signature of the bidder

45 | P a g e

Annexure IV Methodology and Detailed Project Plan 1. Bidder should cover details of the methodology proposed to be adopted for providing services relating to Design and Implementation of Internet Banking / Mobile Banking / Digital Banking multichannel Solution. The methodology should include aspects such as a. Approach and methodology for Design phase b. Software/system implementation c. System roll out d. Training e. Project management f.

System maintenance and support including; i.

Bidder’s presence in Sri Lanka

ii.

Bidder’s support mechanism including dedicated support staff

iii.

Support centers (No. of support centers, locations, staffing etc.)

iv.

Call centers / Help desk

v.

Give details of business associates/affiliates/franchisees (if any) of the bidder who will perform support function

2. Bidder may give suggestions on improvement of the scope of work given in the RFP and may mention the details of any add on services related to services over and above what is laid down in the tender document. 3. Bidder is expected to provide details of the team structure proposed for the execution of this contract. This should cover the composition of the complete team including Lead Bidder and Consortium members including their escalation matrix. 4. A Detailed Project Plan covering break-up of each phase into the key activities, along with the start and end dates must be provided as per format given below.

46 | P a g e

S. No.

Item of Activity

Month wise Program 1

Project Plan 1

Activity 1

1.1

Sub-Activity 1

1.2

Sub-Activity 2

2 2.1 2.2 3 3.1 4

Name: Place: Date: Seal & Signature of the bidder

47 | P a g e

2

3

4

Annexure V Functional and Technical Requirements

The Bidder should fill the responses in the ‘Bidder Response’ column. This sheet should be a part of the Technical Bid. Responses should be filled in as indicated below S – Standard Feature (fully compliant), A – Alternative available, C-Customization required (at additional cost), U - Feature unavailable For items marked C, cost of customization should be clearly indicated in Annexure IX. The remarks column can be used to provide any clarifications that the Bidder wants to provide the Bank regarding the functionality offered by the Bidder's proposed solution. A. Internet banking solution Bidders who are submitting a proposal for Internet Banking solution or an Integrated Digital Banking Multichannel offering should complete and submit this annexure as part of the Technical Bid. Bidders who offer additional functionalities over and the above the lists mentioned below can append additional rows at the bottom of the table and provide details regarding these in the same format. (i) Functional requirements for retail internet banking

S. No

Functional requirements

1

ACCOUNT SUMMARY Account summary for all types of accounts. (savings accounts, current accounts, term deposits, foreign currency deposits, loans, credit cards, others) Mini statement (last 10 transactions) for all accounts Past transactions for a specified period Account statements for a chosen period (with option to view on screen or download in Excel/PDF formats) Transaction search based on different parameters

1.1 1.2 1.3 1.4 1.5

48 | P a g e

Mandatory Bidder (M) / Response Remarks Desired (S/A/C/U) (D) M

M M M M

S. No

Functional requirements

2 2.1 2.1.1 2.1.2 2.1.3 2.2 2.3 2.3.1 2.3.2 2.3.3 2.4 2.4.1 2.4.2 2.4.3 3 3.1 3.2 3.3 3.4 3.5 3.6 3.7 3.8 3.9 3.10 3.11 3.12 3.13 3.14 4 4.1 4.2 4.3 5

FUNDS TRANSFER Register Payees Register own accounts Register third party BOC account Register third party other bank accounts Manage Payees Funds Transfer Own account Third party BOC account Third party other bank accounts (through SLIPS) Schedule funds transfer (one time / standing order) Own account Third party BOC account Third party other bank accounts (through SLIPS) CUSTOMER SERVICE REQUESTS Issue cheque book request Stop cheque request Issue demand draft request Issue debit card request Apply for credit card Standing order request Account statement request Debit card PIN change request Internet banking PIN change request Mobile banking PIN change request Hotlist debit card Hotlist credit card Dispute credit card transaction Any other service requests the bank may wish to add INQUIRIES Cheque status Stop cheque inquiry Service request status BILL PAYMENTS

49 | P a g e

Mandatory Bidder (M) / Response Remarks Desired (S/A/C/U) (D) M M M M M M M M M M M M M M M M M M M M M M M M M M M M M M

S. No

Functional requirements

5.1 5.2 5.3 5.4 5.5 5.6 5.7 5.8 5.9 5.10 5.11 6 6.1 6.2 7 7.1 7.2 7.3 7.4

Bill presentment Bill payment Register biller for payment Prepaid Mobile top-up Credit card bill presentment Credit card bill settlements. Institution fee payments. Insurance premium payment. Online booking. (Movie, Train, Air, Bus, etc) Provisions for adding any other utility bill payments. Set up donations OTHER SERVICES Open new term deposit Open new savings account LOANS & CREDIT CARDS Outstanding balance / repayment status View statement for loan account / credit card account EMI payment / Credit card bill payment Next payment due date Autopay / standing instruction for loan EMI / credit card bill payment Apply for loan / credit card PERSONALIZATION, CUSTOMIZATION & EASE OF NAVIGATION Choose landing screen post login Customizable quick access menus Customizable screens (e.g. widgets that can be closed, repositioned)

7.5 7.6 8 8.1 8.2 8.3

Mandatory Bidder (M) / Response Remarks Desired (S/A/C/U) (D) D M M M M M M M M M M M D M M M M M M

M M M

8.4

Customized offers

D

8.5

Different skins for different types of customers

D

8.6

Menu search functionality

D

9

TRANSACTION SECURITY FEATURES

9.1

Virtual keyboard for login

D

9.2

Security image and message for login

D

50 | P a g e

S. No

9.3

Mandatory Bidder (M) / Response Remarks Desired (S/A/C/U) (D) One Time password to registered mobile number for M authenticating transactions Functional requirements

10

UPDATE PROFILE INFORMATION

10.1

Change PIN / password

M

10.2

Set / reset security questions and answers

M

10.3 11 11.1 11.2

Update other profile information USER REGISTRATION Online customer self registration and activation Registration of customers by bank administrators Pre-linked username and password for instant issuance of internet banking access to customers

M

11.3

M M M

(ii) Functional requirements for corporate internet banking

S. No

Functional requirements

1 1.1 1.2

CORPORATE USER ADMIN MODULE Separate administrator login Creating, modifying and deleting logins Setting and modifying hierarchy/ workflows for access, transactions Customizing view screens for access categories Creating, modifying and deleting limits for access categories Provision for single log-on option for internet banking, trade finance, cash management, treasury and any other portals that customers have to login and use ACCOUNT SUMMARY Account summary for all types of accounts. (current accounts, term deposits, foreign currency deposits, loans, company issued credit cards, trade finance, forex, others) Mini statement (last 10 transactions) for all accounts Past transactions for a specified period

1.3 1.4 1.5 1.6 2 2.1 2.2 2.3

51 | P a g e

Mandatory Bidder Remarks (M) / Response Desired (S/A/C/U) (D) M M M D M M

M

M M

S. No

2.4 2.5 2.6 3 3.1 3.1.1 3.1.2 3.1.3 3.2 3.3 3.3.1 3.3.2 3.3.3 3.4 3.4.1 3.4.2 3.4.3 4 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8 4.9 4.10 5 5.1 5.2

Mandatory Bidder Remarks (M) / Response Functional requirements Desired (S/A/C/U) (D) Account statements for a chosen period (with option to M view on screen or download in Excel/PDF formats) Transaction search based on different parameters M Support display of multiple currencies M FUNDS TRANSFER Register Payees Register own accounts M Register third party BOC account M Register third party other bank accounts (including M international accounts) M Manage Payees Funds Transfer Own account M Third party BOC account M Third party other bank accounts - through SLIPS M (including international accounts) Schedule funds transfer (one time / standing order) Own account M Third party BOC account M Third party other bank accounts - through SLIPS M (including international accounts) CUSTOMER SERVICE REQUESTS Issue cheque book request M Stop cheque request M Issue demand draft request M Apply for credit card M Standing order request M Account statement request M Internet banking PIN change request M Mobile banking PIN change request M Hotlist credit card M Any other service requests the bank may wish to add M LOAN REQUEST AND MANAGEMENT Creating requests for loans M Installment calculator D

52 | P a g e

S. No

5.3 5.4 5.5 6 6.1 6.2 6.3 7 7.1 7.2 7.3 7.4 7.5 7.6 7.7 7.8 7.9 7.10 7.11 8 8.1 8.2 8.3 8.4 8.5 9 9.1 9.2 9.3 9.4

Mandatory Bidder Remarks (M) / Response Functional requirements Desired (S/A/C/U) (D) View limits, outstanding balances, balance limits of M loan accounts Repayments, closure of loan accounts M Transactions statements (including past statements) M of loan accounts INQUIRIES Cheque status M Stop cheque inquiry M Service request status M BILL PAYMENTS Bill presentment D Bill payment M Register biller for payment M Prepaid Mobile top-up M Credit card bill presentment M Credit card bill settlements M Institution fee payments. M Insurance premium payment. M Online booking M Provisions for adding any other utility bill payments. M Set up donations M TREASURY / FOREX Information about current rates, forward rates M Request for purchase and sale of forex/ spot contracts M Request for opening and closing of forward contracts D Request for purchase, sale, viewing facility for Repos, D Treasury Bills, Treasury Bonds, other forex contracts Account status, transaction statements for forex M contracts TRADE FINANCE [Both Import & Export] – CUSTOMER REQUESTS Application, amendment, closure of Letter of credit M Advising, confirmation, transfer of Letter of credit M Application, amendment, closure of Guarantees M Application, amendment, closure of Acceptances M

53 | P a g e

12.4

Mandatory Bidder Remarks (M) / Response Functional requirements Desired (S/A/C/U) (D) Import bills settlement and collection M Export bills purchase, negotiation and collection M Documentary collection M Application, amendment, closure of Shipping M Guarantees Application, management, repayment, closure of M short-term loans Link to SWIFT, with facility to forward SWIFT M instructions Outstanding balances, limits, transaction statements M for Trade Finance products Service requests regarding Trade Finance products M Linking of Trade Finance to customers Current M Accounts CASH MANAGEMENT Collections - cash, cheque, online M Payments (bulk file upload) – cash, cheque, online M Bulk cash requests M Transaction statements, MIS, reconciliation for M collections, payments accounts Multiple logins and authorization hierarchy for cash M management OTHER SERVICES Open new term deposit M Open new savings account D Confirmation of balances D Request call back facility D PERSONALIZATION, CUSTOMIZATION & EASE OF NAVIGATION Choose landing screen post login M Customizable quick access menus M Customizable screens (e.g. widgets that can be closed, M repositioned) D Customized offers

12.5

Different skins for different types of customers

D

12.6

Menu search functionality

D

S. No 9.5 9.6 9.7 9.8 9.9 9.10 9.11 9.12 9.13 10 10.1 10.2 10.3 10.4 10.5 11 11.1 11.2 11.3 11.4 12 12.1 12.2 12.3

54 | P a g e

Mandatory Bidder Remarks (M) / Response Desired (S/A/C/U) (D)

S. No

Functional requirements

13

TRANSACTION SECURITY FEATURES

13.1

Virtual keyboard for login

D

13.2

Security image and message for login

D

13.3

One Time password to registered mobile number for authenticating transactions

M

14

UPDATE PROFILE INFORMATION

14.1

Change PIN / password

M

14.2

Set / reset security questions and answers

M

14.3 15 15.1 15.2

Update other profile information USER REGISTRATION Online customer self registration and activation Registration of customers by bank administrators Pre-linked username and password for instant issuance of internet banking access to customers

M

15.3

M M M

(iii) Technical requirements for Retail and Corporate Internet Banking S. No

Feature

1

Interface to core banking system for financial and nonfinancial transactions / updates

M

2

Interface to ATM switch in ISO 8583 message format

M

3

Interface through middleware to Bank's systems

D

4

Interface through payment gateway to credit card transactions.

M

5

Interface for online merchant transaction payment using internet banking

M

6

Should support web services / XML through http/https.

M

7

System should support multiple institutes (overseas branches) and multiple countries

M

8

System should support multi currencies

M

9

System should support multiple languages including

M

55 | P a g e

Mandator Bidder y (M) / Response Desired (S/A/C/U) (D)

Remarks

S. No

Feature

Mandator Bidder y (M) / Response Desired (S/A/C/U) (D)

English, Sinhala and Tamil 10

Compatible with all major browsers (including but not limited to different versions of IE, Chrome, Firefox, Opera and Safari)

M

11

Integrate with existing DBMS & Hardware.

M

12

Application should support online replication of data at the Bank's backup site for disaster recovery

M

13

Data backup and archiving

M

14.

Solution should have a separate test environment

M

15.

Supports levying transaction / registration charges such as; Registration fee Annual fee Variable commission per transaction (% of transaction) Fixed fee per transaction Slab based transaction fee The system should provide the functionality to configure these for different transaction types and customer categories.

M

16.

The solution should support the following security features;

M

16.1

Username and password for accessing internet banking

M

16.2

Auto blocking/locking of internet banking upon reaching maximum number of tries with invalid/incorrect PIN. The maximum number of incorrect tries should be configurable by the Bank.

M

16.3

Termination of internet banking session and log off after lapse of configurable time period; Pop-up alert intimating customer that session is about to expire.

M

17.

The solution should support the following transaction level security;

M

17.1

End to End encryption of data transmission. (Symmetric or Asymmetric)

M

17.2

Minimum two factor authentication (with provision for a second factor like transaction OTP, transaction password, debit card grid panel, RSA token etc)

M

56 | P a g e

Remarks

S. No

Feature

17.3

System should support multiple authentication based bank's preferences

M

18.

The solution to support following platform security & reliability;

M

18.1

Data stored is encrypted in the platform database.

M

18.2

Audit trails and logging features available in Web Server, application server and database server.

M

18.3

It should be possible to assign specific rights to platform administrators for secure and restricted access.

M

18.4

Platform to be able to support external certifying authority.

M

18.5

To have secure interfaces to various hosts systems according to prevailing security standards.

M

18.6

The solution should comply with OWASP guidelines.

M

18.7

Standard algorithms like AES with RSA should be supported.

M

18.8

Minimum encryption strength of 128 bit for end to end transaction.

M

18.9

Platform to support PKI scheme.

M

19.

The transactions through the system should be reliable and auditable – The platform should have the intelligence to handle cases like:

M

19.1

Internet connection drops during transaction

M

19.2

Back-end host system down.

M

19.3

Offline transaction handling

M

20.

The system should provide the following functionalities with respect to transaction Logs

M

20.1

Should maintain detailed transaction logs to enable processing audit trails to be reconstructed in the event of any disputes or errors.

M

20.2

The retention period of logs should be parameterized.

M

20.3

Security safeguards should also be implemented to protect the information from unauthorized modification

M

57 | P a g e

Mandator Bidder y (M) / Response Desired (S/A/C/U) (D)

Remarks

S. No

Feature

Mandator Bidder y (M) / Response Desired (S/A/C/U) (D)

or destruction. 20.4

System should facilitate maintaining a log of the reasons for unsuccessful transactions.

M

21.

Application to support multiple channels for registration such as;

M

21.1

Registration through bank branch.

M

21.2

Web portal registration

M

21.3

An audit trail of all the registrations done with details of the mode of request, who activated, date, time, etc, should be stored in the database

M

22.

Provision for setting limits such as;

M

22.1

Per User/Group

M

22.2

Per Transaction

M

22.3

Per Day

M

22.4

Support for creation of users through bulk file upload should be available. The file upload should support fixed length and delimiter separated file format.

M

23.

Provision for advertisement of products of the bank.

M

24.

Provision to generate detailed reports, logs, audit trails, regarding all transactions

M

25.

The internet banking solution should be scalable to meet future enhancements/upgrades.

M

26.

The platform should provide the functionality for the administrator to create and modify different end-user and administrator-user groups with different set of rights/permissions (through the administrator portal)

M

27.

The administrator portal should have the capability for;

M

27.1

Approving users.

M

27.2

Blocking users.

M

27.3

Enable or disable functionalities.

M

27.4

Terminate the users.

M

27.5

Maintenance of activation requests.

M

58 | P a g e

Remarks

S. No

Feature

27.6

All administrator activities shall be logged to indicate the creation, modification and deletion of data.

M

28.

The administrator portal should have;

M

28.1

The capability to add new products and services easily as per bank’s need.

M

28.2

Provision for various types of alerts such as SMS campaign, system down alert, customized campaign management etc.

M

28.3

Interfaces should be provided to generate reports according to bank requirements using data model provided by the internet banking application.

M

28.4

The capability to define the frequency of reports as per bank’s need.

M

28.5

Detailed audit logs. There should be support for storing the logs in a detachable WORM device. The audit logs should be capable of being used for forensic evidence.

M

28.6

The capability to upload advertisements of various banking products so as to be displayed within the internet banking application.

M

29.

The administrative portal to have various reporting capabilities such as;

M

29.1

User-wise reports.

M

29.2

Merchant-wise reports.

M

29.3

Transaction-wise reports

M

29.4

Channel-wise reports

M

29.5

Number of registered users

M

29.6

Reports based on filters such as user activity, customer status, range of date/time etc.

M

29.7

Provision to search for customers based on different search filters like name, mobile number, address, age, status etc.

M

29.8

Other MIS reports: - Banking transactions (Intra-bank funds transfer, inter-bank funds transfer, bill payments, others)

M

59 | P a g e

Mandator Bidder y (M) / Response Desired (S/A/C/U) (D)

Remarks

S. No

Feature

Mandator Bidder y (M) / Response Desired (S/A/C/U) (D)

- Service requests - Biller wise payment reports - Registration reports (user registration, biller registration, intra-bank payee registration, inter-bank payee registration) - Branchwise summary reports - Any other report that the bank identifies as mandatory before start of implementation 29.9

Custom MIS reports – Provision to easily create custom MIS report by selecting fields to be added to the report and specifying other parameters (e.g. date range for which data has to be extracted)

M

29.10

Activity log reports.

M

30.

Solution to support Call Center log-in or API to integrate with bank’s CRM/Call Center for various activities such as;

M

30.1

Block internet banking access

M

30.2

Issue unlocking code.

M

Name: Place: Date: Seal & Signature of the bidder

60 | P a g e

Remarks

B. Mobile banking solution Bidders who are submitting a proposal for Mobile Banking solution or an Integrated Digital Banking Multichannel offering should complete and submit this annexure as part of the Technical Bid. Bidders who offer additional functionalities over and the above the lists mentioned below can append additional rows at the bottom of the same table and provide details regarding these in the same format (i) Functional requirements for retail mobile banking Mandatory Bidder (M) / Response Desired (D) (S/A/C/U)

S. No

Functionalities

1

ACCOUNT SUMMARY

M M

1.1

Account summary for all types of accounts. (savings accounts, current accounts, term deposits, foreign currency deposits, loans, credit cards, others)

1.2

Mini statement (last 10 transactions) for all accounts

M

1.3

Past transactions for a specified period

M

Account statements for a chosen period (with option to view on screen or download/email to self)

M

1.4

1.5

Transaction search based on different parameters

M

2

FUNDS TRANSFER

M

2.1

Register Payees

M

2.1.1

Register own accounts

M

2.1.2

Register third party BOC account

M

2.1.3

Register third party other bank accounts

M

2.2

Manage Payees

M

2.3

Funds Transfer

M

2.3.1

Own account

M

2.3.2

Third party BOC account

M

2.3.3

61 | P a g e

Third party other bank accounts (through SLIPS)

M

Remarks

S. No

Functionalities

2.4

Schedule funds transfer (one time / standing order)

Mandatory Bidder (M) / Response Desired (D) (S/A/C/U) M

2.4.1

Own account

M

2.4.2

Third party BOC account

M

2.4.3

Third party other bank accounts (through SLIPS)

M

3

CUSTOMER SERVICE REQUESTS

M

3.1

Issue cheque book request

M

3.2

Stop cheque request

M

3.3

Issue demand draft request

M

3.4

Issue debit card request

M

3.5

Apply for credit card

M

3.6

Standing order request

M

3.7

Account statement request

M

3.8

Debit card PIN change request

M

3.9

Internet banking PIN change request

M

3.10

Mobile banking PIN change request

M

3.11

Hotlist debit card

D

3.12

Hotlist credit card

D

3.13

Any other service requests the bank may wish to add

M

4

INQUIRIES

4.1

Cheque status

M

4.2

Stop cheque inquiry

M

4.3

Service request status

M

5

BILL PAYMENTS

5.1

Bill presentment

D

5.2

Bill payment

M

5.3

Register biller for payment

M

5.4

Prepaid Mobile top-up

M

62 | P a g e

Remarks

Mandatory Bidder (M) / Response Desired (D) (S/A/C/U)

S. No

Functionalities

5.5

Credit card bill presentment

D

5.6

Credit card bill settlements.

M

5.7

Institution fee payments.

M

5.8

Insurance premium payment.

M

5.9

Online booking (Movie, Train, Air, Bus, etc)

M

5.10

Provisions for adding any other utility bill payments.

M

5.11

Set up donations

D

6

OTHER SERVICES

6.1

Open new term deposit

M

6.2

Open new savings account

D

7

LOANS & CREDIT CARDS

7.1

Outstanding balance / repayment status

M

7.2

View statement for loan account / credit card account

M

7.3

EMI payment / Credit card bill payment

M

7.4

Next payment due date

M

7.5

Autopay / standing instruction for loan EMI / credit card bill payment

D

7.6

Apply for loan / credit card

D

8

PERSONALIZATION, CUSTOMIZATION & EASE OF NAVIGATION

8.1

Quick access menus

M

8.2

Customizable screens (e.g. widgets that can be closed, repositioned)

D

8.3

Push notifications on alerts, offers etc

customized

M

8.4

Different skins for different types of customers

D

9

UPDATE PROFILE INFORMATION

9.1

Change PIN / password

M

9.2

Set / reset security questions and answers

M

63 | P a g e

Remarks

Mandatory Bidder (M) / Response Desired (D) (S/A/C/U)

S. No

Functionalities

9.3

Update other profile information

10

USER REGISTRATION

10.1

Instant customer activation

10.2

Registration of administrators

10.3

self

M

registration

and

M

bank

M

Pre-linked login credentials for instant issuance of mobile banking access to customers

M

customers

Remarks

by

(Ii) Optional modules for retail mobile banking Bidders who are submitting a proposal for Mobile Banking solution or an Integrated Digital Banking Multichannel offering should indicate below whether their solution can provide the following optional modules in their Mobile Banking offering. The upfront cost and AMC for these optional modules should be indicated separately in Annexure IX.

S. No

Functional requirements

1

Optional Module 1 - NON ACCOUNT HOLDER SERVICES VIRTUAL WALLET

1.1

Cash deposit (at CDM, through merchant / other methods)

1.2

Cash withdrawal (at ATM, POS or Merchant)

1.3

Third party fund transfers (Mobile to Account, Mobile to Mobile).

1.4

Payment at merchants

1.5

Bill presentment & payment

1.6

Mobile top-up

1.7

Credit card settlements

64 | P a g e

Bidder Response (S/A/C/U)

Remarks

Bidder Response (S/A/C/U)

S. No

Functional requirements

1.8

Institution fee payments

1.9

Insurance premium payment

1.10

Online booking (Movie, Train, Air, Bus etc)

1.11

Provisions for adding any other utility bill payments

2

Optional Module 2 - CARDLESS CASH WITHDRAWAL

2.1

Cardless cash withdrawal at ATMs

Remarks

(iii) Functional requirements for corporate mobile banking

S. No

Functional requirements

1 1.1 1.2

CORPORATE USER ADMIN MODULE Separate administrator login Creating, modifying and deleting logins Setting and modifying hierarchy/ workflows for access, transactions Customizing view screens for access categories Creating, modifying and deleting limits for access categories Provision for single log-on option for internet banking, trade finance, cash management, treasury and any other portals that customers have to login and use ACCOUNT SUMMARY Account summary for all types of accounts. (current accounts, term deposits, foreign currency deposits, loans, company issued credit cards, trade finance, forex, others) Mini statement (last 10 transactions) for all accounts Past transactions for a specified period Account statements for a chosen period (with option to view on screen or download in Excel/PDF formats)

1.3 1.4 1.5

1.6 2 2.1

2.2 2.3 2.4

65 | P a g e

Mandatory Bidder (M) / Response Desired (S/A/C/U) (D) M M M D M M

M

M M D

Remarks

S. No 2.5 2.6 3 3.1 3.1.1 3.1.2 3.1.3 3.2 3.3 3.3.1 3.3.2 3.3.3 3.4 3.4.1 3.4.2 3.4.3 4 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8 4.9 4.10 5 5.1 5.2

66 | P a g e

Mandatory Bidder (M) / Response Functional requirements Desired (S/A/C/U) (D) Transaction search based on different parameters M Support display of multiple currencies M FUNDS TRANSFER Register Payees Register own accounts M Register third party BOC account M Register third party other bank accounts (including M international accounts) M Manage Payees Funds Transfer Own account M Third party BOC account M Third party other bank accounts - through SLIPS M (including international accounts) Schedule funds transfer (one time / standing order) Own account M Third party BOC account M Third party other bank accounts - through SLIPS M (including international accounts) CUSTOMER SERVICE REQUESTS Issue cheque book request M Stop cheque request M Issue demand draft request M Apply for credit card M Standing order request M Account statement request M Internet banking PIN change request M Mobile banking PIN change request M Hotlist credit card M Any other service requests the bank may wish to M add LOAN REQUEST AND MANAGEMENT Creating requests for loans M Installment calculator D

Remarks

S. No

5.3 5.4 5.5 6 6.1 6.2 6.3 7 7.1 7.2 7.3 7.4 7.5 7.6 7.7 7.8 7.9 7.10 7.11 8 8.1 8.2 8.3 8.4 8.5 9 9.1 9.2

67 | P a g e

Mandatory Bidder (M) / Response Functional requirements Desired (S/A/C/U) (D) View limits, outstanding balances, balance limits M of loan accounts Repayments, closure of loan accounts M Transactions statements (including past M statements) of loan accounts INQUIRIES Cheque status M Stop cheque inquiry M Service request status M BILL PAYMENTS Bill presentment D Bill payment M Register biller for payment M Prepaid Mobile top-up M Credit card bill presentment M Credit card bill settlements M Institution fee payments. M Insurance premium payment. M Online booking M Provisions for adding any other utility bill payments. M Set up donations M TREASURY / FOREX Information about current rates, forward rates M Request for purchase and sale of forex/ spot M contracts Request for opening and closing of forward D contracts Request for purchase, sale, viewing facility for D Repos, Treasury Bills, Treasury Bonds, other forex contracts Account status, transaction statements for forex M contracts TRADE FINANCE [Both Import & Export] – CUSTOMER REQUESTS Application, amendment, closure of Letter of credit D Advising, confirmation, transfer of Letter of credit D

Remarks

12.4

Mandatory Bidder (M) / Response Functional requirements Desired (S/A/C/U) (D) Application, amendment, closure of Guarantees D Application, amendment, closure of Acceptances D Import bills settlement and collection D Export bills purchase, negotiation and collection D Documentary collection D Application, amendment, closure of Shipping D Guarantees Application, management, repayment, closure of D short-term loans Link to SWIFT, with facility to forward SWIFT D instructions Outstanding balances, limits, transaction M statements for Trade Finance products Service requests regarding Trade Finance M products Linking of Trade Finance to customers Current M Accounts OTHER SERVICES Open new term deposit M Open new savings account D Confirmation of balances D Online Chat feature, call back facility D PRE-LOGIN SERVICES ATM locator M Branch locator M FD rates M Loan interest rates, processing charges rates M Open new account D PERSONALIZATION, CUSTOMIZATION & EASE OF NAVIGATION Choose landing screen post login M Customizable quick access menus M Customizable screens (e.g. widgets that can be M closed, repositioned) D Customized offers

12.5

Different skins for different types of customers

S. No 9.3 9.4 9.5 9.6 9.7 9.8 9.9 9.10 9.11 9.12 9.13 10 10.1 10.2 10.3 10.4 11 11.1 11.2 11.3 11.4 11.5 12 12.1 12.2 12.3

68 | P a g e

D

Remarks

Mandatory Bidder (M) / Response Desired (S/A/C/U) (D) D

S. No

Functional requirements

12.6

Menu search functionality

13

TRANSACTION SECURITY FEATURES

13.1

Virtual keyboard for login

D

13.2

Security image and message for login

D

13.3

One Time password to registered mobile number for authenticating transactions

M

14

UPDATE PROFILE INFORMATION

14.1

Change PIN / password

M

14.2

Set / reset security questions and answers

M

14.3 15 15.1 15.2

Update other profile information USER REGISTRATION Online customer self registration and activation Registration of customers by bank administrators Pre-linked username and password for instant issuance of internet banking access to customers

M

15.3

Remarks

M M M

(iv) Technical requirements for Retail & Corporate Mobile Banking

S. No

Technical requirement

1

Interface to core banking system (CBS) for financial and no-financial transactions / updates

M

2

Interface through ATM switch in ISO8583 message format

M

3

Interface through middleware to Bank's systems

D

4.

Interface through payment gateway to credit card transactions / merchant transactions

D

5.

Should support web services/XML through http/https.

M

69 | P a g e

Mandatory Bidder (M) / Response Desired (D) (S/A/C/U)

Remarks

S. No

Technical requirement

6.

System should support multiple institutes (overseas branches) and multiple countries

M

7.

System should support multi currencies

M

8.

System should support multiple languages including English, Sinhala and Tamil

M

9.

Integrate with existing DBMS & Hardware.

M

10.

Online replication of data at our backup site for disaster recovery

M

11.

Data backup and archiving

M

12.

Solution should have a separate test environment.

M

13.

Supports all mobile operator technologies in Sri Lanka (GSM, WCDMA, others)

M

14.

Supports both downloadable mobile applications and browser based mobile solutions

M

15.

Supports mobile handset and tablet operating systems IOS, Android and Windows through downloadable apps. Other OS-es to be supported through downloadable apps or a web browser version.

M

16.

Supports all mobile handset and tablet models Iphone, Ipad, Android phones and tablets and other phones / tablets from Nokia, Sony Ericson, Motorola, Samsung , Blackberry etc.

M

17.

Supports levying transaction / registration charges such as Registration fee Annual fee Variable commission per transaction (% of transaction) Fixed fee per transaction Slab based transaction fee The system should provide the functionality to configure these for different transaction types and customer categories.

M

18.

The solution to support following handset level security;

M

70 | P a g e

Mandatory Bidder (M) / Response Desired (D) (S/A/C/U)

Remarks

S. No

Technical requirement

18.1

Username and/ or PIN for opening mobile banking application.

M

18.2

Access credentials should not be stored on the customer’s handset

M

18.3

Auto blocking/locking of mobile banking upon reaching maximum number of tries with invalid/incorrect PIN. The maximum number of incorrect tries should be configurable by the Bank.

M

18.4

Termination of mobile application session and logs off after lapse of configurable time period.

M

18.5

A handset device that does not meet industry standard should be denied access.

M

19.

The solution to support following transaction level security;

M

19.1

End to End encryption of data transmission. (Symmetric or Asymmetric)

M

19.2

Option to have two factor authentication (with provision for a second factor like transaction PIN, debit card grid panel, RSA token etc in addition to mPIN)

M

19.3

Authentication based on device registration and PIN No

M

19.4

System should support multiple authentication based user preferences

M

20.

The solution to support following platform security & reliability;

M

20.1

Data stored is encrypted in the platform database.

M

20.2

Audit trails and logging features available in Web Server, application server and database server.

M

20.3

It should be possible to assign specific rights to platform administrators for secure and restricted access.

M

20.4

Platform to be able to support external certifying authority.

M

71 | P a g e

Mandatory Bidder (M) / Response Desired (D) (S/A/C/U)

Remarks

S. No

Technical requirement

20.5

To have secure interfaces to various hosts systems according to prevailing security standards.

M

20.6

The solution to comply with OWASP guidelines.

M

20.7

Standard algorithms like AES with RSA should be supported.

M

20.8

Minimum encryption strength of 128 bit for end to end transaction.

M

20.9

Platform to support PKI scheme.

M

21.

The transactions are reliable and auditable – platform to have the intelligence to handle cases like;

M

21.1

Call/SMS received while performing transactions.

M

21.2

Battery runs out while performing transactions.

M

21.3

Connection drops (Mobile network, GPRS or Network Switching)

M

21.4

Back-end host system down.

M

21.5

Offline transaction handling

M

22.

Transaction Logs;

M

22.1

Should maintain detailed transaction logs to enable processing audit trails to be reconstructed in the event of any disputes or errors.

M

22.2

The retention period of logs should be parameterized.

M

22.3

Security safeguards should also be implemented to protect the information from unauthorized modification or destruction.

M

22.4

System should facilitate maintaining a log of reasons for unsuccessful transactions.

M

23.

Application to support multiple channels for registration such as;

M

23.1

Registration through bank branch.

M

23.2

Registration through internet banking system.

M

72 | P a g e

Mandatory Bidder (M) / Response Desired (D) (S/A/C/U)

Remarks

S. No

Technical requirement

23.3

Web portal registration.

M

23.4

Registration through bank’s call center.

M

24.

An audit trail of all the registrations done with details of the mode of request, who activated, date, time, etc, should be stored in the database.

M

25.

Provision for setting limits such as;

M

25.1

Per User/Group.

M

25.2

Per Transaction.

M

25.3

Per Day.

M

26.

Support for creation of users through bulk file upload should be available. The file upload should support fixed length and delimiter separated file format.

M

27.

Provision for advertisement of products of the bank.

M

28.

To generate detailed reports, logs, audit trails, regarding all transactions

M

29.

The mobile banking solution should be scalable to meet future enhancements / upgrades.

M

30.

The platform should provide the functionality for the administrator to create and modify different end-user and administrator-user groups with different set of rights/permissions (through the administrator portal)

M

31.

The administrator portal should have the capability for;

M

31.1

Approving users.

M

31.2

Blocking users.

M

31.3

Enable or disable functionalities.

M

31.4

Change handset / mobile number of users.

M

31.5

Terminate the users.

M

31.6

Maintenance of activation requests.

M

31.7

All administrator activities shall be logged to

M

73 | P a g e

Mandatory Bidder (M) / Response Desired (D) (S/A/C/U)

Remarks

S. No

Technical requirement

Mandatory Bidder (M) / Response Desired (D) (S/A/C/U)

indicate the creation, modification and deletion of data. 32.

The administrator portal should have;

M

32.1

The capability to add new products and services easily as per bank’s need.

M

32.2

Provision for various types of alerts such as SMS campaign, system down alert, customized campaign management etc.

M

32.3

Interfaces should be provided to generate reports according to bank requirements using data model provided by the mobile application.

M

32.4

The capability of defining the frequency of reports as per bank’s need.

M

32.5

Detailed audit logs. There should be support for storing the logs in a detachable WORM device. The audit logs should be capable of being used for forensic evidence.

M

32.6

The capability to upload advertisements of various banking products so as to be displayed within the downloaded mobile banking application.

M

33.

The administrative portal to have various reporting capabilities such as;

M

33.1

User-wise reports.

M

33.2

Merchant-wise reports.

M

33.3

Transaction-wise reports.

M

33.4

Channel-wise reports.

M

33.5

Number of registered/downloaded users.

M

33.6

Reports based on filters such as user activity, customer status, range of date/time etc.

M

33.7

Provision to search for customers based on different search filters like name, mobile number, address, age, status etc.

M

33.8

Other MIS reports: - Banking transactions (Intra-bank funds transfer, inter-bank funds transfer, bill

M

74 | P a g e

Remarks

S. No

Technical requirement

Mandatory Bidder (M) / Response Desired (D) (S/A/C/U)

payments, others) - Service requests - Biller wise payment reports - Registration reports (user registration, biller registration, intra-bank payee registration, interbank payee registration) - Branchwise summary reports - Any other report that the bank identifies as mandatory before start of implementation 33.9

Custom MIS reports – Provision to easily create custom MIS report by selecting fields to be added to the report and specifying other parameters (e.g. date range for which data has to be extracted)

M

33.10

Activity log reports.

M

34.

Solution to support Call Center log-in or API to integrate with bank’s CRM/Call Center for various activities such as;

M

34.1

Block stolen handset.

M

34.2

Issue unlocking code.

M

34.3

Reissue activation code.

M

34.4

Change handset.

M

Name: Place: Date: Seal & Signature of the bidder

75 | P a g e

Remarks

C. Digital banking solution Bidders who are submitting a proposal for an Integrated Digital Banking Multichannel offering should complete and submit this annexure as part of the Technical Bid. Bidders who offer additional functionalities over and the above the lists mentioned below can append additional rows at the bottom of the same table and provide details regarding these in the same format

Mandatory Bidder (M) / Response Desired (D) (S/A/C/U)

S. No

Functionalities

1

SEAMLESS INTEGRATION BETWEEN INTERNET AND MOBILE BANKING PLATFORMS

1.1

One time registration for both channels (internet and mobile banking)

M

1.2

Option to use the same username and password for both internet and mobile banking

M

1.3

Beneficiaries and billers added in one channel to be reflected in the other

M M

1.4

Transactions initiated in one channel to be reflected in the other along with the provision to complete it (e.g. Funds transfer initiated in internet banking should be reflected in the mobile app and the user should be able to complete the transaction on the mobile app) Common look and feel across the platforms including User interface Menu options

M

1.5

1.6

Common admin module for all platforms

1.7

Upgrade of features / functionalities in one platform to reflect in other channels also

2

PROVISION TO INTEGRATE OTHER CHANNELS TO THE DIGITAL BANKING PLATFORM

2.1

Call center

M

2.2

Bank Branch modules for customer service requests

M

M

76 | P a g e

M

Remarks

S. No

Functionalities

2.3

Self service machine modules for customer service requests

Name: Place: Date: Seal & Signature of the bidder

77 | P a g e

Mandatory Bidder (M) / Response Desired (D) (S/A/C/U) M

Remarks

Annexure VI Specifications for hardware and other licensing requirements Please provide detailed specifications of the hardware and other licensing requirements for implementation of the proposed Internet Banking / Mobile Banking / Digital Banking solution to support 1 million retail users and 10,000 corporate entities. For Bidders submitting bids for Mobile Banking or Digital Banking Multichannel solutions, please also separately indicate the additional hardware and other licensing requirements for implementing Optional Module 1 to support 0.5 million users and Optional Module 2 to support unlimited number of users.

Name: Place: Date: Seal & Signature of the bidder

78 | P a g e

Annexure VII Details of Prior Experience Please provide details of prior experience of the Bidder / Principal Owner / Authorized Partner / other Consortium members in design and implementation of internet banking / mobile banking / digital banking platform solutions. For each prior experience reference that the Bidder wants to highlight, one sheet in the below template should be submitted in the proposal and should be supported by a copy of the purchase order as documentary evidence

Name of the Bidder / Principal Owner / Consortium Member for which client reference is being provided Name of the client bank Country Client address Assignment type (Internet Banking implementation / Mobile Banking implementation / Digital Banking platform implementation)

Description of the assignment and the scope of services delivered by the Bidder to the clients

Description of the solution implemented. Also indicate whether it is the same as the solution proposed to the Bank.

Assignment duration (in months) Assignment start date (Month & Year) Assignment end date (Month & Year) Total no. of staff months in the assignment Approximate value of contract (in LKR / USD) Client Reference 1

79 | P a g e

LKR / USD Name: Designation: Address:

Client Reference 2

Phone No: Mob No: Email ID: Name: Designation: Address:

Phone No: Mob No: Email ID:

Name: Place: Date: Seal & Signature of the bidder

80 | P a g e

Annexure VIII Commercial Bid Cover Letter Tender Reference No: P / PROC / 2014 / 27 Date: 24th Dec, 2014 The Chief Manager Properties & Procurement Dept., 14th Floor, Head Office, “BOC Square” No.1, Bank of Ceylon Mawatha, Colombo 1 Dear Sir, Sub: Your RFP for “Design and Implementation of Internet and Mobile Banking Solution” Ref No. P / PROC / 2014 / 27 Dated 24th Dec, 2014 Having examined the RFP (Ref. No. P / PROC / 2014 / 27) including all annexures, we, the undersigned, offer to deliver services in conformity with the said RFP and in accordance with our proposal and total cost indicated in the enclosed Commercial Bid for Design and Implementation of Internet Banking / Mobile Banking / Digital Banking Multichannel Solution as mentioned in the in the RFP document. All the prices mentioned in our bid are in accordance with the terms as specified in the bidding documents. We agree to abide by this bid for the period of 180 days from the date of bid opening and it shall remain binding upon us and may be accepted at any time before the expiration of that period. We hereby declare that our bid is made in good faith, without collusion or fraud and the information contained in the bid is true and correct to the best of our knowledge and belief. We further confirm that the prices stated in our bid are in accordance with your Instruction to Bidders included in bidding documents. If our bid is accepted, we will submit a Performance Bond (in the format prescribed by the Bank) for a sum equivalent to 15% of the value of the contract to the Bank valid for a period of one year in favor of Bank of Ceylon for the due performance of the Contract. Until a formal contract is prepared and executed, this bid, together with the bank’s written acceptance thereof and bank’s notification of award, shall constitute a binding Contract between us.

81 | P a g e

We understand that the bank is not bound to accept the lowest or any bid the bank may receive. Dated this day of ______ 2015 Signature: (In the Capacity of)_________________________

Duly authorized to sign the tender offer for and on behalf of Seal. Place: Address:

82 | P a g e

Annexure IX A. Commercial Bid for Internet Banking Solution Bidders who are submitting proposals only for internet banking should submit the commercial bids in the following format: The commercial bid indicated below should cover all costs to support a minimum of 1 million retail users and 10,000 corporate entities, for the solution with functionalities as indicated by the Bidder in Annexure V.

1. One-time cost for licenses



2. One time cost for customization (for items that have been marked as C by the Bidder in Annexure V)



3. One time cost for implementation, integration and migration



4. Annual Maintenance Charges for the solution (applicable for a period of 4 years from the second year after completion of implementation)



Rates should be quoted strictly in above format. Bids quoting rates in other than above formats will be rejected. Applicable local taxes shall be paid over and above on actual basis on production of documentary evidence. Bank will not be making any other payment except those mentioned in the commercial bid.

Name: Place: Date: Seal & Signature of the bidder

83 | P a g e

B. Commercial Bid for Mobile Banking Solution Bidders who are submitting proposals only for mobile banking should submit the commercial bids in the following format:

The commercial bid indicated below should cover all costs to support a minimum of 1 million retail users and 10,000 corporate entities, for the solution with functionalities as indicated by the Bidder in Annexure V. For Optional Module 1, the commercial bid indicated should cover all costs to support a minimum of 0.5 million users. For Optional Module 2, the commercial bid indicated should cover all costs to support unlimited number of users.

1. One-time cost for licenses



2. One time cost for customization (for items that have been marked as C by the Bidder in Annexure V)



3. One time cost for implementation, integration and migration



4. Annual Maintenance Charges for Mobile banking solution (applicable for a period of 4 years from the second year after completion of implementation)



Optional 1. One-time cost for licenses Module 1 – 2. One time cost for customization Non (for items that have been marked account as C by the Bidder in Annexure V) holder 3. One time cost for services implementation and integration (Virtual Wallet) 4. Annual Maintenance Charges for solution (applicable for a period of 4 years from the second year after completion of implementation)



84 | P a g e





Optional Module 2 – Cardless Cash Withdrawal

1. One-time cost for licenses



2. One time cost for customization (for items that have been marked as C by the Bidder in Annexure V)



3. One time cost for implementation and integration



4. Annual Maintenance Charges for solution (applicable for a period of 4 years from the second year after completion of implementation)



Rates should be quoted strictly in above format. Bids quoting rates in other than above formats will be rejected. Applicable local taxes shall be paid over and above on actual basis on production of documentary evidence. Bank will not be making any other payment except those mentioned in the commercial bid.

Name: Place: Date: Seal & Signature of the bidder

85 | P a g e

C. Commercial Bid for Multi-Channel Digital Banking Platform Solutions Bidders who are submitting proposals for an integrated multichannel solution should submit the commercial bids in the following format. The commercial bid indicated below should cover all costs to support a minimum of 1 million retail users and 10,000 corporate entities, for the solution with functionalities as indicated by the Bidder in Annexure V. For Optional Module 1, the commercial bid indicated should cover all costs to support a minimum of 0.5 million users. For Optional Module 2, the commercial bid indicated should cover all costs to support unlimited number of users.

1. One-time cost for licenses



2. One time cost for customization (for items that have been marked as C by the Bidder in Annexure V)



3. One time cost for implementation, integration and migration



4. Annual Maintenance Charges for Digital banking multi channel solution (applicable for a period of 4 years from the second year after completion of implementation)



Optional 1. One-time cost for licenses Module 1 – 2. One time cost for customization Non (for items that have been marked account as C by the Bidder in Annexure V) holder 3. One time cost for services implementation and integration (Virtual Wallet) 4. Annual Maintenance Charges for solution (applicable for a period of 4 years from the second year after completion of implementation)



Optional



86 | P a g e

1. One-time cost for licenses





Module 2 – 2. One time cost for customization Cardless (for items that have been marked Cash as C by the Bidder in Annexure V) Withdrawal 3. One time cost for implementation and integration



4. Annual Maintenance Charges for solution (applicable for a period of 4 years from the second year after completion of implementation)





Rates should be quoted strictly in above format. Bids quoting rates in other than above formats will be rejected. Applicable local taxes shall be paid over and above on actual basis on production of documentary evidence. Bank will not be making any other payment except those mentioned in the commercial bid.

Name: Place: Date: Seal & Signature of the bidder

87 | P a g e

D. Commercial Bid for separate Internet and Mobile Banking solutions (other than integrated multichannel solutions) Bidders who are submitting proposals for both internet and mobile banking where the solutions are separate (i.e., not an integrated multichannel solution) should submit the commercial bids in the following format. The commercial bid indicated below for internet banking should cover all costs to support a minimum of 1 million retail users and 10,000 corporate entities, for the solution with functionalities as indicated by the Bidder in Annexure V. The commercial bid indicated below for mobile banking should cover all costs to support a minimum of 1 million retail users and 10,000 corporate entities, for the solution with functionalities as indicated by the Bidder in Annexure V. For Optional Module 1 for mobile banking, the commercial bid indicated should cover all costs to support a minimum of 0.5 million users. For Optional Module 2 for mobile banking, the commercial bid indicated should cover all costs to support unlimited number of users.

Internet Banking

Mobile Banking

88 | P a g e

1. One-time cost for licenses



2. One time cost for customization (for items that have been marked as C by the Bidder in Annexure V)



3. One time cost for implementation, integration and migration



4. Annual Maintenance Charges for solution (applicable for a period of 4 years from the second year after completion of implementation)



1. One-time cost for licenses



2. One time cost for customization (for items that have been marked as C by the Bidder in Annexure V)



3. One time cost for implementation, integration and migration



4. Annual Maintenance Charges for solution (applicable for a period of 4 years from the second year after completion of implementation)



Optional Module 1 – Non account holder services (Virtual Wallet)

Optional Module 2 – Cardless Cash Withdrawal

1. One-time cost for licenses



2. One time cost for customization (for items that have been marked as C by the Bidder in Annexure V)



3. One time cost for implementation and integration



4. Annual Maintenance Charges for solution (applicable for a period of 4 years from the second year after completion of implementation)



1. One-time cost for licenses



2. One time cost for customization (for items that have been marked as C by the Bidder in Annexure V)



3. One time cost for implementation and integration



4. Annual Maintenance Charges for solution (applicable for a period of 4 years from the second year after completion of implementation)



Name: Place: Date: Seal & Signature of the bidder

89 | P a g e