Scope Statement for N. C. Department of State Treasurer. Information Technology Division. Disaster Recovery Plan

Transcription

1 AUTHORIZATION TO AWARD: JUNE 6, 2002 VENDOR: KEANE INCORPORATED Scope Statement for N. C. Department of State Treasurer Disaster Recovery Plan BCRS Contract Attachment #5 #ITS March 7, 2002

2 Table of Contents A. Scope Statement Purpose... 3 B. Description of Business Functions... 3 C. Scope/Objective... 3 D. Disaster Recovery Plan Requirements... 3 E. Project Methodology and Approach... 6 F. Response Requirements... 6 G. Vendor Proposal Costs... 7 H. Vendor Qualifications... 7 I. Proposal Presentation and Content... 7 J. Length of Contract... 8 K. Contract Change Procedures... 8 L. Evaluation Criteria... 8 M. Administrative Items... 9 N. Execution of Scope Statement... 9 Page 2

3 Department/Agency: North Carolina Department of State Treasurer (NCDST/ITD) Issue Date: March 7, 2002 Short Description: Due Date for Scope Statement Responses: BCRS Umbrella Contract Manager: Project Sponsor: Project Manager: Deadline for Vendor Questions: DST/IT Disaster Recovery Plan March 28, 2002, 2:00 p.m. Joan Mize, N.C. Statewide IT Procurement Office Bill Golden, CIO, NCDST/ITD Frank Godwin, Computer Operations Manager NCDST/ITD March 15, 2002, 4:00 p.m. Send questions to the address listed above no later than the date and time specified. Questions will not be accepted by telephone. All questions will be answered and submitted to vendors by 5:00 p.m. on March 20, 2002, or soon thereafter. A. Scope Statement Purpose The purpose of this scope statement is to solicit proposals to procure the services of a firm for the development of a Disaster Recovery Plan for the North Carolina Department of State Treasurer,, (NCDST/ITD). NCDST/ITD currently has a designated Hot-Site established, including mobile remote services, with IBM located at Sterling Forest, NY. This facility will be the focal point of recovery of NCDST/ITD Computer Operations and is to be inclusive to the subject proposed plan for the first six (6) weeks of a declaration of an event. Thereafter, extension of the primary Hot-Site will be opted and/or plans for an alternate site is to be addressed in the subject plan. B. Description of Business Functions NCDST/ITD supports critical computer applications that are provided on diverse distributed platforms for the NCDST. NCDST/ITD operates an enterprise server as well as many other client-based LAN/WAN server class machines and Imaging technology applications and associated equipment. C. Scope/Objective Create a Disaster Recovery Plan that in the event, due to various reasons, the Albemarle Building and/or the NCDST/ITD Operations Center becomes inaccessible, the objective of the proposed plan is to re-establish a Computer Operations Center. The subject center will be reestablished at the designated hot site and/or alternate, and provide electronic communication and access to the distributive computing environment, with full service level and some acceptable reduced processing capacity to ensure NCDST/ITD customers can proceed with the required daily operational functions of the NCDST. D. Disaster Recovery Plan Requirements The proposed Disaster Recovery Plan, as a minimum, shall include components to address recovery of all aspects of the mainframe enterprise server, the client-based applications/systems including LAN/WAN, Imaging technology and overall all services provided by NCDST/ITD. Services and equipment located and available at the hot-site to be considered critical by NCDST/ITD and to the continued operation of the IT Division in support of the North Carolina Department of State Treasurer are specified below. Page 3

4 EQUIPMENT: Client-Server-Based Equipment: Quantity / Machine Model / Product / Units / Product Description ================================================== DASD Gigabytes: 941.2GB IBM Provided Equipment: 13 CPQML570A BASE Compaq Server ML570A P3-700 Item: Compaq Proliant ML570 Server Includes: PCI Architecture (6 Slots) 1 700MHZ Pentium III XEON Processor 512MB Memory GB SCSI Hard Drive 3.5" Diskette Drive CD-ROM Drive 1 NC3134 Dual 10/100MB PCI Ethernet Adapter 1 IBM 16/4 Token Ring PCI Adapter 1 Dual Wide-Ultra2 SCSI Adapter 1 Smart Array 4200 RAID Controller 1 Adaptec 2940UW SCSI Adapter 8 CPQML570A MEM1 Add'l CPQML570A 512MB Memory 20 CPQML570A PRC1 Add'l CPQML570A P3-700 Proc. Network Lines: 1 LINE 000 Analog Dial Line Non-IBM Equipment: 1 SURESTORE 1200 HP Surestore 1200EX Optical 6 drives, 238 slots, 5.2GB Platters, GB Capacity A BASE EMC Symmetrix Storage Unit Includes: 3Gb Cache, GB drives, 289.6GB raw (unprotected) storage A DISK 72.4GB storage increment Includes: GB drives, 72.4GB raw (unprotected) storage SF ESC 2 Port ESCON Channel Director Includes 2 ports of ESCON Channel Host Connectivity SF FSCS 4 Port FW SCSI Chnl Director Includes: 4 ports of SCSI FW Differential Host Connectivity SF USCS 4 Port Ultra SCSI Chnl Dir Includes: 4 Ports of Ultra SCSI Differential Host Connectivity 1 EXABYTE 690D Exabyte 690D Library TP Drive 5 QUDLT Quantum DLT Ext 35/70GB TpDr. Enterprise Server Mainframe Environment: Quantity / Machine / Model / Product / Units / Product Description ================================================== IBM Equipment: Parallel Enterprise Server This CPU will be supported on an ES/ or 9672 processor STOR MBS 9672 Main Stor - 1st 9672 Available on G5 or older 9672 processors Tape Reel Unit 1600/6250 BPI Includes: /002 Control Unit per /006 Page 4

5 X40 Tape Cartridge Unit E-Series Includes: /A10 Control Unit per /X40 Each unit of X40 contains (4) 36-Track Drives Printer LPM L Local Terminal Control Unit H10 Operator Console NWAYS Multiaccess Connector Includes: NWAYS 8-Slot Multiaccess Connector With: 200Mhz System Card 128MB System Memory / Port Ethernet Adapter / Port ESCON Adapter / Port V.35/V.36 Adapter OSA2 DUAL 9672 Eth/TR Adapter 8 PCWS-550 BASE P3-550 Desktop With Wkspace Item: PC Desktop With Workspace, Phone, Chair, LAN Connectivity (token ring/ethernet), & Power For Office Equipment Includes: ISA/PCI Architecture Pentium III 550mhz Processor 64MB Memory, 100Mhz Bus 13.5 GB IDE Hard Drive 32 X CD-ROM 17" Color Monitor, Keyboard and Mouse Serial and Parallel Port 10/100 Ethernet and Token Ring Adapter Included Retirement Imaging System: 2 each: Pentium III 833 MHz, Dual Processors, 1GB RAM, 1 Dual channel RAID Controller, 2 x 9GB (RAID 1) for Operating System, 3 x 36GB (RAID 5) for data storage, Windows 2000 Advance Server 3 each: Pentium III 833 MHz, Single Processor, 1GB RAM, 1 Dual channel RAID Controller, 2 x 9GB (RAID 1) for Operating System, 3 x 36GB (RAID 5) for data storage, Windows 2000 Advance Server 1 each: HP 2400MX Optical Jukebox. Note: One of the dual Pentium machines must have an Ultra Wide SCSI adapter for connection to the jukebox. SERVICES: NCDST/ITD requires the vendor to provide, as a minimum but not limited to, a disaster recovery plan that provides the following functions (including plan components): 1. All critical business functions identified and inclusive to the plan. 2. Perform an evaluation and identification to reflect the risks and impacts involved with the plan including, but not limited to, a procedure to identify NCDST/ITD s organizational and operational risks that have the potential to affect the ability of NCDST/ITD to meet its mission. A method to evaluate the potential geopolitical, financial and physical impact of threats and vulnerabilities in relation to current and proposed safeguards and countermeasures. A process to assess the sensitivity and criticality of NCDST/ITD s data, systems and supporting assets of NCDST/ITD s mission-critical operations; 3. All key activities addressed and prioritized. 4. Recovery time objectives identified for each critical function/system/processes. 5. Each critical function is to be tied back to a supporting application or IT system. 6. Procedures for replacing critical equipment. Page 5

6 7. Procedural directions for shifting telecommunications links to the alternate site(s). 8. Procedural directions on emergency procurement procedures including travel and lodging for staff members. 9. Procedural directions for conducting damage assessment. 10. Procedural directions for transferring critical functions to the designated alternate site. 11. Procedural directions for contacting vendors, delivery services, and postal services to ensure delivery at the alternate site. 12. Description and procedures on the control and how the Plan will be maintained, exercised/tested, reviewed, and updated to ensure it is current and accurate and per established industry standards and guidelines. 13. Procedures associated with establishing a crisis management center and associated operational procedures. 14. Procedural coordination with local emergency services as applicable. 15. Procedures on declaration of event and procedural instructions and specific details on activating and deactivating the alternate site with checklist and call out mechanisms. 16. Procedures and controls for pre-staged equipment and supplies. 17. Proceduralize controlled methodology for listing of critical staff emergency team members, vendors, other state and local emergency response agencies/entities and their alternates with contact numbers, etc. 18. Methodology for communicating with non-essential staff and remote locations with options. 19. Proposed Recovery Leadership Team training methodology with proposed refresher/recertification training and proposed schedule. Identify via a training matrix, whom within NCDST, should attend as a minimum in the plan and what training is required. 20. Identify all back-up media required by system for recovery of the same. 21. Identify all documents, forms, preprinted forms as warrants required to support business functions. 22. Procedural mechanism for activation of the mobile recovery site with seats. E. Project Methodology and Approach The vendor shall describe the approach to developing the Disaster Recovery Plan including systematic specifics of how the approach will be implemented. This will include: 1. A method to identify NCDST/ITD s manual and automated business processes, including related applications, platforms, connectivity, departmental interdependencies and recovery time objectives; 2. A method for addressing media relations and overall communications with NCDST/ITD staff; 3. A technique to develop multiple recovery strategies that will provide the foundation for Business Continuity/Recovery Plan development that will support NCDST/ITD s continued revenue stream; 4. A process for developing recovery strategies for the critical business processes that incorporates existing IT recovery strategies; 5. A process to develop provisions within the Business Continuity/Recovery Plan that will provide scaleable organizational and operational recovery, including emergency management of NCDST/ITD s internal and external associates; and, 6. A process for Business Continuity/Recovery Plan maintenance and training, for key members for all associated recovery teams. F. Response Requirements 1. Review and Acceptance The Vendor will provide information to define procedures that will ensure NCDST/ITD s evaluation and approval of project deliverables before final delivery. Procedures should include details defining final deliverable acceptance or non-approval and deliverable resubmission, if necessary. 2. Project Staffing The vendor will identify all project staff members, including roles, responsibilities, and areas of industry expertise. Page 6

7 3. Change Control Management The vendor will provide procedures that will be used to manage any changes in project scope, tasking, level of effort, deliverables, or approach. 4. References The vendor will supply as a minimum three, (3), references of past-completed similar projects within the past 2 years addressing disaster recovery plan development and implementation. These references shall include company name, contact personnel, contact phone number, address and U.S. postal service mailing address. G. Vendor Proposal Costs Vendor services must be priced to include and show all estimated related travel and associated living costs for staff to be inclusive with proposal. Costs must cover all requirements set forth in this document, unless otherwise noted. All services must be priced independently. H. Vendor Qualifications Qualifications to be addressed and included are the vendor s company background, size, resources, and details of the vendor s corporate experience relevant to the proposed contract. The proposal as a minimum shall include: 1. Date that vendor s services were established. 2. Ownership (i.e.; public company, partnership. subsidiary, etc.). 3. Total number of full time employees. 4. Client bases served. 5. Annual growth over the past five years. 6. Primary and specialty services offered by the vendor. 7. Vendor Certifications (i.e.; ISO9000, Subject Matter Expertise, DR, etc.). 8. Business Partners from past and current DR initiatives and identify any proposed in this submittal. 9. Executive summary detailing experience developing Recovery Plans within State or Federal government IT environments. 10. Vendor has a formal Disaster Recovery Methodology. 11. Vendor adheres to the industry best practices endorsed by the Disaster Recovery Institute International (DRII). 12. Staff proposed as the vendor team have all received the DRII Certified Business Continuity Professional (CBCP) designation. 13. Vendor has experience working with a multitude of Recovery services vendors (IBM, SunGard, Strohl, etc.) and is aware of the variety of recovery strategies available. 14. Vendor has a number of years of experience as an organization in developing Disaster Recovery Plans specifically within State and Federal government environments. 15. Any software products proposed must be compatible to the NCDST/ITD environment. I. Proposal Presentation and Content Proposal shall be formatted and structured as follows: 1. Executive overview of vendor and background including requirements as set forth in section H.) (Limit 1 page) 2. Proposal (Plan itself w/requirement matrix as referenced in section J.) (Limit 7 pages) 3. Project Methodology Approach (Limit 2 pages) 4. Vendor Team Staffing table (Limit 1/2 page) 5. Proposal Cost Schedule (Limit 1 page) 6. References ( Limit 1/2 page) NOTE: The State requires proposal not to exceed 12 pages total, front to back, including attachments/addendums, etc. Page 7

8 J. Length of Contract Responses must be submitted for a contract term not to exceed 60 calendar days with the option to renew for an additional 10 calendar days. This contract will begin when an award is made. K. Contract Change Procedures Consistent with Section VIII (A)(13) of the BCRS Convenience Contract, the State may amend this Scope Statement, the terms and conditions incorporated herein, attachments issued pursuant to this Scope Statement, or any action dates set forth herein when such amendments: (i) further the State s need or requirements for business continuity and recovery specialty areas, (ii) may be required to incorporate applicable state or federal statutory or regulatory changes, (iii) may be required to incorporate changes or enhancements under applicable industry standards, or (iv) are deemed advantageous by the State to further the purpose of this Scope Statement. Future amendments may address other similar changes and requirements that will be defined as a part of the amendment. The State and eligible Offerors shall mutually agree upon amendments to this contract in writing. Eligible Offerors will be notified in writing when the contract has been amended and will be allowed seven (7) calendar days from the issue date of the written notification to accept or reject the amendment in writing. A signature is required. The effective date of any amendment shall be as agreed upon by both parties from the date of notification. If an eligible Offeror rejects an amendment, the State shall have the option to cancel the contract with that Offeror for cause upon the earlier of (i) three (3) days after receipt of the Offeror s rejection, or (ii) seven (7) days from the issue date of the amendment. If an eligible Offeror fails to respond in writing to a notification of amendment to this scope statement, said eligible Offeror shall be issued a notification for termination for convenience to be effective within seven (7) days of the amendment s effective date. Scope statements in process shall be subject to the terms of the amended contract on the effective date of amendment. L. Evaluation Criteria The selection criteria will be based on the best value concept rather than on lowest cost. Source selection will be in accordance with the trade-off method as described in the North Carolina Administrative Code, Title 9, Chapter 06B For this scope statement, the evaluation criteria shall be: Item # Criteria Description Completely Supported Partially Supported Not Supported % Weight D DISASTER RECOVERY PLAN 45 (Requirements including Components/Deliverables) E Project Methodology and Approach 15 F Response Requirements 10 G Vendor Proposal Costs 20 H Vendor Qualifications 5 I Proposal Presentation and Content 5 Page 8

9 The NCDST/ITD evaluation committee may request written clarifications of any offer received. However, the State may, at its sole discretion, refuse to accept in full or partially the response to a clarification request given by any vendor. Vendor is cautioned that the evaluators are not required to request clarification, nor is the State required to conduct negotiations; therefore, all offers should be complete and reflect the most favorable terms. The State may, at its sole discretion, conduct negotiations with one or more vendors after the bid opening. Any aspect of a vendor s bid, including price, may be subject to negotiation. The State may request vendors to revise either or both their technical and price responses for resubmission during negotiations. This request, if made, may be made in the form of requesting a Best and Final Offer setting forth the result of the negotiations. Final ranking of responses and award of the contract will be made after the State reviews all bids and completes its evaluation, or if negotiations are conducted, after all rounds of Best and Final Offers have concluded. Award will be made to the vendor providing the best overall value to NCDST. The State reserves the right to reject any bid failing to meet the required evaluation criteria. M. Administrative Items Important: Two (2) hardcopy originals and four (4) copies of your response, signed by an authorized officer of the corporation, shall be submitted. In addition, an electronic version of your response is required in PDF format either on floppy disk or CD ROM. Response should be placed in a sealed package and clearly labeled with your company name and NCDST/ITD No. ITS on the outside of the package. All responses are due in-house at NCDST/ITD by 2:00 p.m. on Thursday, March 28, 2002, at the following physical address: Attn: Frank Godwin, Operations/Disaster Recovery Manager North Carolina Department of State Treasurer 325 N. Salisbury Street Room 367B Raleigh NC Responses received after 2:00 p.m. on March 28, 2002, will not be accepted. U.S. Postal Service Date Stamp does not constitute receipt in house at NCDST offices. N. Execution of Scope Statement Responding vendors must include the signed Execution of Scope Statement form provided on the following page. Page 9

10 By signing below, the Offeror certifies that: EXECUTION OF SCOPE STATEMENT An authorized representative of the Offeror signed this scope statement response. This scope statement response was not derived through any acts of collusion as stated in NCGS The Offeror agrees to all the mandatory terms and conditions and agrees to pay the 2% administrative fee to ITS per Section I, Paragraph B, of the ITS Business Continuity and Recovery Services Contract. Therefore in compliance with the foregoing Scope Statement and subject to all terms and conditions of the ITS Business Continuity and Recovery Services Contract, including all exhibits, the undersigned offers and agrees to furnish the services set forth in the Scope Statement if the Scope Statement Response is accepted by the State. Failure to execute/sign scope statement prior to submittal shall render it invalid. Late bids are not acceptable. OFFEROR: FEDERAL ID OR SOCIAL SECURITY NO.: STREET ADDRESS: P.O. BOX: ZIP FOR P.O. BOX: CITY, STATE & ZIP: TELEPHONE NUMBER: ( ) FAX NUMBER ( ) TYPE OR PRINT NAME & TITLE OF PERSON SIGNING: TOLL FREE TELEPHONE NUMBER: ( ) AUTHORIZED SIGNATURE: DATE: Acceptance by Agency is contingent upon ITS approval of the Agency s recommendation of award. This contract award was approved by ITS on, 20, as indicated by attached certification letter from ITS. ACCEPTANCE OF SCOPE STATEMENT RESPONSE If any or all parts of this scope are accepted, an authorized representative of Contracting Agency shall affix their signature hereto and this document along with the provisions of the Umbrella Contract shall then constitute the written agreement between the parties. A copy of this acceptance will be forwarded to the successful offeror(s). FOR CONTRACTING AGENCY USE ONLY Offer accepted this day of, 20, as indicated on attached certification or purchase order, by (Authorized representative of Contracting Agency). Page 10