How To Write An Application Cloud Hosting And Sharepoint For A County Bid Proposal

Transcription

1 Application Cloud Hosting and SharePoint Services Request for Proposal (RFP) Distributed by: Oakland County Information Technology 1200 N. Telegraph Road, Bldg. 49W Pontiac, MI April 13, 2012

2 Table of Contents 1.0 INTRODUCTION BACKGROUND INFORMATION OAKLAND COUNTY OVERVIEW PROJECT TEAM OVERVIEW INFORMATION TECHNOLOGY OVERVIEW RESPONSE SUBMISSION REQUIREMENTS PROPOSAL SUBMISSION DEADLINE LATE PROPOSALS, MODIFICATIONS, OR WITHDRAWAL PACKAGING EXCEPTIONS PRICE QUOTATIONS ACCEPTANCE OF RFP CONTENT PROPOSALS BINDING DULY AUTHORIZED SIGNATURE PROPOSAL COSTS ECONOMY OF PROPOSALS MULTIPLE PROPOSALS PRIME CONTRACTOR RESPONSIBILITY COMPLETE SERVICES/PRODUCTS PRICE PROPOSAL REQUIREMENTS PRICE PROPOSAL CONTENT PROPOSALS PROPOSAL FORMAT SELECTION CRITERIA TIMETABLE PROJECT CONTACT OTHER RELATED MATTERS SYSTEM REQUIREMENTS GENERAL BUSINESS OBJECTIVES TECHNICAL REQUIREMENTS IMPLEMENTATION AND SUPPORT SERVICES REQUIREMENTS APPENDIX A TECHNICAL REQUIREMENTS RESPONSE TABLE APPENDIX B COST RESPONSE TABLES ATTACHMENT 2 GLOSSARY OF TERMS ATTACHMENT 3 OAKLAND COUNTY PROFESSIONAL SERVICES AND LICENSING CONTRACT Oakland County Michigan i

3 1.0 INTRODUCTION The Oakland County Purchasing Department in conjunction with Oakland County s Department of Information Technology is issuing this Request for Proposal (RFP) to obtain SEALED BID proposal responses for the Application Cloud Hosting and SharePoint for Internet Services RFP, which will satisfy the requirements described in this RFP. The objective of this RFP is to provide sufficient information to enable qualified respondents to submit written proposals. This RFP is not a contractual offer or commitment to purchase services. Respondents must be bona fide providers of the products and services requested and working at customer sites that may be inspected by representatives of Oakland County. To respond to this RFP, proposals must conform to the procedures, format, and content requirements outlined in this document. Significant deviations may be grounds for disqualification. Oakland County reserves the right to waive, at its discretion, any irregularity or informality that Oakland County deems correctable or otherwise not warranting rejection of the RFP. Oakland County Michigan 1

4 2.0 BACKGROUND INFORMATION The following background information has been provided in support of the Application Cloud Hosting and SharePoint for Internet Services RFP. Oakland County, Michigan, is currently developing cloud solutions to improve government services by sharing technology with other government agencies, thereby reducing the cost of government. This is the first government-supported cloud service that makes these types of technology solutions available to other governments at little or no cost. The cloud solutions will be used by counties, cities, villages and townships located across the United States. Additional information can be found on Oakland County s website at Oakland County Overview Oakland County Michigan covers 910 square miles, has 62 cities, villages and townships (CVTs) and is located in southeast Michigan, immediately north of the City of Detroit. Located astride the Interstate 75 corridor and at the heart of Automation Alley, Oakland County is a world technology center. In 2010, Oakland County s population was 1,202,362 with approximately 426,000 parcels of property. Oakland County features one of the lowest operating tax rates in the state, has perennially been the highest job-producing county in Michigan, and is home to six Fortune 500 companies. Oakland County is one of two dozen counties in the nation with the coveted AAA bond rating. 2.2 Project Team Overview A review team has been assembled to guide in the selection of a cloud hosting vendor to host the Application and SharePoint for Internet Services, which the County will use for its business purposes and allow multiple counties, cities, villages and townships to use within the vendor s cloud environment. The team is comprised of staff from the Oakland County Information Technology department. The review team will be responsible for the evaluation of RFP responses and the selection of an appropriate cloud vendor. 2.3 Information Technology Overview The Department of Information Technology is a service bureau that provides IT services to 82 County Divisions, more than 100 local governmental units Oakland County Michigan 2

5 (assessors, treasurers, law enforcement, etc.), over 50 private sector customers, and over Oakland customers. IT is responsible for over 150 major applications consisting of more than 8,000 programs and provides systems support, maintenance, enhancements and new development for all major systems applications. The Department of Information Technology is under the administration of the County Executive and is comprised of the following four organizational divisions: Administration Internal Services Application Services CLEMIS Technical Systems and Networking The IT Department has 157 employees and contracts approximately professional services staff to meet the capacity and technical needs of its customers. Additional information about Oakland County Information Technology can be found on the web at Oakland County Michigan 3

6 3.0 RESPONSE SUBMISSION REQUIREMENTS The administrative rules and procedures that guide the proposal process are described in this section. Failure of the respondent to adhere to them may result in elimination of the respondent from further consideration in the proposal selection process. 3.1 Proposal Submission Deadline Two hardcopies and two copies on CDs in Adobe Reader PDF format of your proposal, clearly marked Oakland County Department of Information Technology Application Cloud Hosting Proposal must be received and stamped by the Oakland County Purchasing Division no later than Tuesday, May 3, 2012 at 2PM. 3.2 Late Proposals, Modifications, or Withdrawal Proposals received after the date and time indicated will not be considered and will be returned unopened if the respondent is identified on the proposal envelope. Proposals may be withdrawn or modified in writing prior to the proposal submission deadline. Proposals that are resubmitted or modified shall be resealed and submitted to the previously identified Oakland County Purchasing Division prior to the proposal submission deadline. 3.3 Packaging Each proposal must be sealed to provide confidentiality of the information prior to the submission date and time. Oakland County will not be responsible for premature opening of proposals not properly labeled. Clearly mark one proposal copy as the Master Proposal and enclose originals of the required forms. Each proposal set shall be accompanied by a transmittal letter signed in ink by an authorized company representative, empowered with the right to bind the respondent. 3.4 Exceptions Any exceptions to the attached specifications or RFP objectives must be clearly stated in the formal quote letter under a separate section entitled Exceptions. If any exceptions are taken, an explanation must be made giving in detail the extent of the exception and the reason for it. Failure on the part of the respondent to list exceptions as instructed above will be interpreted that the respondent has taken no exceptions and that the offering is in complete conformance to the specifications and RFP objectives contained herein. Any exceptions or deviations discovered after the closing date will be to the Vendor s Oakland County Michigan 4

7 account and, consequently, will not be negotiated. 3.5 Price Quotations All prices shall be quoted in U.S. dollars. Fixed prices for software, services, and hardware should be quoted, wherever possible. Where uncertainty exists, quote estimated costs or a range of costs. Unless respondents specifically note otherwise, prices quoted will be considered firm. If any additional purchases are required through one year from award date of the contract, they shall be at the contract unit price. In case of error in the extension of prices in the proposal, the unit prices shall govern. 3.6 Acceptance of RFP Content Provisions of the RFP and the contents of the successful response will be used for establishment of the final contractual obligations. Oakland County retains the option of canceling the award if the selected respondent fails to accept such obligations. Oakland County and the selected respondent shall enter into a written contract for the work to be performed. It is expressly understood that this RFP and the respondent s proposal may be attached and included in an agreement signed by Oakland County and the selected respondent. 3.7 Proposals Binding All proposals submitted shall be binding upon the respondent, if accepted by Oakland County, for 180 calendar days from the proposal submission deadline. No proposals may be withdrawn during this 180-day period. Negligence upon the part of the respondent in preparing the proposal confers no right of withdrawal after the time fixed for the submission of proposals. 3.8 Duly Authorized Signature The proposal must contain the signature of a duly authorized officer of the respondent empowered with the right to bind the respondent. 3.9 Proposal Costs The respondent shall be responsible for all costs incurred in the development and submission of this proposal. Oakland County assumes no contractual obligation as a result of the issuance of the RFP, the preparation or submission of a proposal by a respondent, the evaluation of an accepted proposal, or the selection of finalists. Oakland County shall not be contractually bound until Oakland County and the selected respondent have executed a written contract Oakland County Michigan 5

8 for performance of work. Appendix B Cost Response Tables contains cost response forms. The forms must be used to document the cost for hardware, software and services in the respondent s proposal Economy of Proposals Proposals and presentations should be prepared simply and economically, providing a straightforward and concise description of the respondent s capabilities to satisfy the requirements of the RFP. Special bindings, colored displays, etc. are not necessary. Emphasis should be placed on completeness and clarity of content Multiple Proposals Multiple proposals or substitutions will be considered and are defined as the submission by the same respondent of two or more responsive proposals offering variations in the hardware and software configurations each of which meet the requirements of the RFP. Multiple proposals shall be submitted separately, clearly noted as alternatives and will be evaluated as independent proposals Prime Contractor Responsibility Respondents have an option of subcontracting for products and services they propose. If any products or services are to be subcontracted, the respondent shall provide, within the proposal, a description of the subcontracting organization and the contractual arrangements made therewith. All subcontractors will be subject to approval by Oakland County. The selected respondent will also furnish the corporate or company name and the names of officers or principals of said companies proposed as subcontractors. Oakland County will consider the prime contractor to be solely responsible in all contractual matters, including payment of any and all charges resulting from such subcontractor arrangements. The selected respondent shall cause appropriate provisions of its proposal to be inserted in all subcontracts ensuing to insure fulfillment of all contractual provisions by subcontractors Complete Services/Products The selected respondent shall be required to (1) furnish all tools, equipment, supplies, supervision, transportation, and other accessories, services, and facilities necessary to complete the work (2) furnish all materials, supplies, and equipment specified and required to be incorporated in and form a permanent part of the completed work (3) provide and perform all necessary labor; and (4) Oakland County Michigan 6

9 perform and complete the work in accordance with good technical practice, with due diligence, and in accordance with the requirements, stipulations, provisions, and conditions of this RFP and the resultant agreement. Oakland County Michigan 7

10 4.0 PRICE PROPOSAL REQUIREMENTS Respondents are required to submit separate and distinct price information for their primary system proposal and any alternatives in a separate section. All price quotations shall be valid for 180 days from the proposal due date. The respondent will be responsible for achieving an operational configuration for the cost quoted. The cost of any items determined to be missing from the quote but essential to fulfilling the configuration shall be borne by the respondent. 4.1 Price Proposal Content Every respondent shall provide an itemized Price Proposal including Appendix B Cost Response Tables. Quote costs for all hardware and software and services described in Section 9, and Appendix A of this RFP. Each major component, including integrated software and hardware elements, shall be identified by both common names. Both unit prices and extensions (if applicable) shall be quoted for each component or basic subsystem. Any and all items (such as software interfaces, cables, connectors etc.) needed to achieve the proposed configuration shall be identified and priced. Any and all additional charges (i.e., shipping, installation, insurance etc.) shall be quoted. In addition: 1. The cost of system documentation must be included in the total cost. 2. Quote annual costs for the proposed maintenance agreement where applicable. In addition, list cost of training increments included with the system purchase. Quote the cost of additional training increments along with any conditions attached to their purchase (Appendix B-Table B3 Summary of Implementation and Support Services Costs Table). 3. Quote a lump sum and hourly rates for implementation services and consulting services that could be enlisted for the implementation of the cloud hosting system. (Appendix B-Table B3 Summary of Implementation and Support Services Costs Table). 4. List separately any optional features price, but do not include these optional features in the total system price (Appendix B-Table B2 Summary of Desirable System Costs Table). 5. Specify any discount options associated with the proposal(s). If applicable, State Bulletin prices should be included for reference. Oakland County Michigan 8

11 5.0 PROPOSALS To expedite and simplify proposal evaluation and to assure that each proposal receives the same orderly review, all proposals must comply with Section 3 Response Submission Requirements of the RFP and adhere to the format described in this section. Proposals must contain the elements of information specified. Proposal sections and pages should be appropriately numbered. Any variances from specifications, which may be proposed, must be specifically noted. To assist respondents in completing their proposals, Oakland County has included Attachment 2 Glossary of Terms to define Oakland County specific terminology. 5.1 Proposal Format Proposals must include a table of contents listing all sections, figures, and tables. Major sections and appendices should be separated by labeled ring binder index tabs. Pages may be double-sided, and must be numbered. The respondent must include a copy of their organization s standard Software Licensing and/or Services Agreement(s) as an Appendix to the Proposal. This agreement shall cover the licensing details for all aspects of proposed system including the licensing costs for consumers of the cloud solution Proposals must address the requirements completely and accurately using the required format. The proposals shall be organized according to the following outline: Transmittal Letter Division 1: Division 2: Division 3: Division 4: Division 5: Division 6: Appendix: Introduction and Executive Summary Experience Response to Commercial Questions Response to Application Cloud Hosting system Requirements Price Proposal Technical Proposal Software Licensing and Services Agreements Division 1: Introduction and Executive Summary 1. Submit a brief executive summary of the major facts or features of the proposal, including any conclusions, assumptions, and recommendations the respondent desires to make. The executive summary should be designed specifically for review by a non-technical audience and senior management. 2. Submit the following information relative to the respondent. If a joint venture, Oakland County Michigan 9

12 similar information must be provided for each member of the joint venture. Company name and business address, including telephone number, fax number and Internet address. Year established (include former firm names and year established, if applicable). Type of ownership and parent company if any. Respondent s contact name, address, and phone number, if different than Item 1. Brief statement of the firm s background demonstrating longevity and financial stability. Provide breakdown of the organization size indicating the number employees, and the number of employees qualified to support the Application cloud hosting and SharePoint for Internet Services system. Provide the breakdown at the state (Michigan only), and Oakland County area (Oakland and surrounding counties). Clearly identify the size of your professional staff in terms of experience, skills and number of employee resources. 3. Review Attachment 3 Oakland County Professional Services and Licensing Contract. Acknowledge review and submit itemized descriptions of exceptions with response to RFP. 4. Submit a brief description of respondent s corporate and other organizational history and experience in developing, installing, and supporting cloud hosted services for government Information Technology offices of comparable or larger sizes. 5. Include discussion of respondent s corporate vision and strategy for addressing the needs of the Application Cloud Hosting market. Division 2: Experience 1. Submit a description of at least three relevant cloud hosting installations Relevant is defined as installations using the hardware and software products similar to those proposed for the Oakland County Application Cloud Hosting and SharePoint for Internet Services system and installations exhibiting the functional and integration components set forth in the RFP. The description must provide the following information at minimum: Organization Name, Contact Person with Address, Telephone Number and Address, Participating Organization, Hardware and Software Environment, Discussion Oakland County Michigan 10

13 of activities and applications. The respondent agrees that Oakland County may contact the references given and visit installed sites if desired. 2. Submit job descriptions and qualifications for each team member that will be assigned to the Oakland County Application Cloud Hosting and SharePoint for Internet Services project. Vendor staff qualifications must include longevity with firm, relevant certifications, brief project/assignment history with your company, educational background, and employment history. Division 3: Response to Commercial Questions Please answer the following questions directly and specifically, and cite the question before each answer. 1. Provide insurance information for Worker s Compensation, Comprehensive General Liability. Contact Oakland County s Purchasing Department with questions in this regard. 2. Who will be the respondent s authorized negotiator? (Provide name, title, address, telephone number, and address. The person identified shall be empowered to make binding commitments for the respondent). 3. What is the current financial status and conditions of the respondent? (Provide a copy of the respondent s most current financial annual report and statement of financial condition, or equivalent). 4. Is the respondent an equal opportunity employer? 5. Will the respondent contractually agree to the following: a. Provide onsite (e.g., at Oakland County) staff for training? b. Knowledge transfer to Oakland County staff regarding implementation, integration, etc. c. Guarantee 1-2 hour response time for critical situations reported to your service desk? d. Non-performance holdbacks? e. Source code provided to Oakland County? To escrow? f. Allow Oakland County to approve vendor staff assigned to project? g. Provide a Statement of Work that includes, in detail, all deliverables, costs, change control and project management procedures, etc.? h. Provide Oakland County with system documentation for all application modules, including custom modifications and interfaces? i. Indemnify Oakland County for claims asserted by third parties alleged to have been caused by the acts, errors or omissions of your employees. Oakland County Michigan 11

14 6. If selected as a short-list finalist, respondent must agree to conduct a demonstration and bid response discussion with staff that will be assigned to the Oakland County project. The sessions will be conducted in May 2012 at Oakland County s Department of Information Technology. Division 4: Response to Application Cloud Hosting and SharePoint for Internet Services System Requirements The purpose of this section is to describe the required solution for the Application Cloud Hosting and SharePoint for Internet Services system and give the respondent the opportunity to describe how their proposed solution will support the current and future application requirements of Oakland County. Section 9 of this RFP provides a detailed description of system requirements and identifies questions and/or issues that must be addressed by the respondent. The respondent is requested, where appropriate, to include supporting literature describing the details of system capabilities, commands, and utilities. If included, this supporting literature must be referenced in the response to the specification and included in an appendix to the respondent s proposal. The inclusion of supporting literature or standard software alone will not satisfy the terms of this RFP. 1. Describe how the respondent s solution helps Oakland County meet its general business objectives as set forth in Section 9.1 of this RFP. 2. Describe the proposed functionality as set forth in Section 9.2 of this RFP. 3. Describe the implementation and support services as set forth in Section 9.3 of this RFP. Include prices for these services in your Price Proposal, (Section 5, Section 6.1 Division 5, and Appendix B Cost Response Tables). Oakland County reserves the right to negotiate all system acceptance testing procedures, warranties, and terms of software maintenance. Division 5: Price Proposal 1. Respondents must complete and include Appendix B Cost Response Tables in their Price Proposal. All prices shall be quoted in U.S. dollars. Where possible, quote a fixed price for the software, services, and extended warranty described in this RFP. Where uncertainty exists, quote estimated costs or a range of costs. The Price Proposal shall include the price for shipping, crating, insurance, duties, and other costs related to the delivery and installation of the proposed Oakland County Michigan 12

15 hardware and software. The Price Proposal shall include the price for all software licenses and software updates, including enhancements and Oakland County customizations (including subsequent updates to customizations), training programs and materials, and onsite application development support. Respondents are cautioned to avoid placing components in an optional category. Only components which provide an enhancement over and above that required to meet the detailed specifications may be included as optional. Oakland County reserves the right to selectively choose items that the respondents propose. Oakland County intends to make use of the existing hardware insofar as these units meet the proposed specifications of the vendor. During the process of negotiations, Oakland County reserves the right to exercise this privilege in determining the final amount and type of hardware, software, and services intended for purchase. Division 6: Technical Proposal Section 9 of this RFP provides a detailed description of technical requirements and identifies questions and/or issues that must be addressed by the respondent. 1. Describe the proposed technical solution as set forth in Section 9 of this RFP. 5.2 Selection Criteria In order to be considered, bidding respondents must complete the following minimum requirements: Return the SOL which is the purchasing solicitation document, enclosed with respondent s proposal, signed by a legal representative of respondent s organization. Complete the information required as described in this RFP. Submit one (1) Master Proposal; (1) printed copy; and (2) CD s for a TOTAL of 4 proposals. Proposals shall be delivered to the address listed in the purchasing solicitation document SOL in a sealed package with the wording Application Cloud Hosting and SharePoint for Internet Services clearly marked on the outside of the envelope/package. The wording Master Proposal is to appear on the outside of the binder containing the original signed proposal. Proposals may not be delivered via facsimile or . Oakland County will use the following criteria to evaluate respondents RFP proposal responses meeting the minimum requirements described above. This Oakland County Michigan 13

16 is not a comprehensive list, nor does the arrangement imply order of importance: Compliance with RFP Instructions: The proposal will be evaluated for compliance with the instructions set forth in Section 3 and Section 5.1 Division 1 of the RFP. Business Requirements: The Application Cloud Hosting and SharePoint for Internet Services system s compliance with the County s business requirements set forth in Section 9.1 General Business Objectives and Section 5.1 Division 4 of the RFP. System Functionality: The proposal will be evaluated for compliance with Section 9.2 Technical Requirements and Section 5.1 Division 4 of the RFP. Additional functionality not identified in the RFP will be considered as well. Implementation and Support Services: Professional services identified in the proposal will be evaluated for compliance with Section 9.3 Implementation and Support Services Requirements and Section 5.1 Division 4 of the RFP. Corporate Viability and Vision: The selected respondent must exhibit the vision and viability to assist Oakland County in the establishment of a world-class cloud hosting solution for local government. The respondent s cloud hosting system must have an existing installed user base that can be used to verify system functionality and support. Installed sites of similar size and complexity will be considered in this evaluation. Corporate Viability and Vision identified in the proposal will be evaluated for compliance with Section 5.1 Division 2 and Section 5.1 Division 3 of the RFP. System Cost: The proposal must be cost-effective to implement and preserve the technical and data resources that already exist in the County. The Price Proposal will be evaluated for compliance with Section 4.1 and Section 5.1 Division 5 of the RFP. Product Demonstrations: Oakland County will ask respondents with the highest written response evaluation scores to spend 2 hours at Oakland County demonstrating scripted software scenarios and discussing implementation approach, assumptions and key success factors. 6.0 TIMETABLE Request for Proposal Released 4/13/2012 Requests for Clarification Due Clarification Responses Issued Proposals Due Vendor Presentations (by short-listed vendors) Week of 5/14/12 Selection 05/31/ /24/2012 4:00 PM 4/27/2012 5:00 PM 05/03/2012 2:00 PM Oakland County Michigan 14

17 7.0 PROJECT CONTACT This RFP is being issued by the Oakland County Purchasing Department in conjunction with Oakland County s Department of Information Technology, located in Pontiac, Michigan. Bid request package contents can be obtained on the Michigan Intergovernmental Trade Network (MITN) web site accessed at Vendors are encouraged to register at the MITN web site. The package consists of the following: Solicitation Document Request for Proposal RFP and Attachments. Specific points of clarification must be sent via to [email protected] and [email protected] and include the specific section(s) of the RFP that is in question. In order to easily identify the , the subject line must be Question Event : Oakland County Department of Information Technology Application Cloud Hosting Proposal. All questions will be answered and submitted to the Respondents in the form of an amendment to the RFP made available on the Michigan Inter-governmental Trade Network (MITN) at at the time identified in section 6.0 Timetable. Oakland County Michigan 15

18 8.0 OTHER RELATED MATTERS Upon completion of the Department of Information Technology Application Cloud Hosting Project, the respondent must transfer the rights and use of all deliverable products. Oakland County will openly entertain any value-added alternative(s) provided by the respondent. 9.0 SYSTEM REQUIREMENTS The requirements set forth in this section of the RFP serve as a minimum guideline for the Department of Information Technology in its selection of a cloud hosting vendor capable of providing services for local government. The requirements have been grouped into five sections; General Business Objectives, Technical Requirements, and Implementation Services Requirements. The County proposes to host in the Cloud an application developed in-house. This application is developed using.net 4.0 and will use 3 rd party federated authentication services. The County would like to pursue the possibility of using the County s data center as a cloud hosting facility for the vendor for this application. This application will require a firewall that needs to be in place in order to restrict access to the application and should allow SSL and HTTP access. SSL certificates will be installed and daily full backups of the data are required. Appendix A Technical Requirements Response Table. Microsoft SharePoint 2010 for Internet services will also be required to be hosted within this cloud platform environment. The County intends that the SharePoint for Internet Services will be made available to and used for Internet site hosting for counties, cities, villages and townships located across the United States. For more details refer to Appendix A Technical Requirements Response Table. Since SharePoint 2010 for Internet Services will be hosting individual non- Oakland County web sites, we require different levels of access to the SharePoint 2010 for Internet Services. We will require non-oakland County content editors to be able to securely edit webpage content as well as administrators, public-named user and public anonymous accounts. All of these different user types should be able to log into the SharePoint server from any location. Oakland County Michigan 16

19 9.1 General Business Objectives The Department of Information Technology seeks to obtain a cloud hosting solution that satisfies the following business objectives as they relate to the performance of governmental functions and that are consistent with the statutory relationships between various levels and types of governmental entities that the County will permit to use the cloud for their business purposes: The cloud vendor must use multiple technologies to control network access, detect and prevent attacks and provide additional security capabilities like user identification, data loss prevention and protection from web-based threats. The cloud vendor will provide a Platform-as-a-Service (PaaS) service model. The cloud vendor will provide a platform that is portable and avoids vendor lock-in. The cloud vendor will provide operating system patching, security software, and other managed services such as capacity and utilization management. The cloud vendor will provide all potential charges related to the PaaS model. The cloud vendor will be responsible for executing and assuming all obligations of all licenses necessary to host all applications including SharePoint for internet services. The cloud vendor will have a strong disaster recovery and business continuity plan in place. The cloud vendor will provide a platform that will support Microsoft SharePoint 2010 for Internet sites hosting as well as a QA server hosting environment for testing SharePoint 2010 web sites. Respondents must describe how their system supports these business objectives as well as highlight the realizable tangible and intangible benefits Oakland County could expect to gain from selecting their solution. Respondents must address the general business objectives set forth in the RFP. 9.2 Technical Requirements 1. Appendix A Table A-1. The Technical Requirements Response Table Oakland County Michigan 17

20 contains an inventory of the functionality desired in the selected Application Cloud Hosting solution provider. Proposals that do not satisfy the mandatory requirements outlined in Appendix Table A will be rejected. Respondents must complete Appendix A Table A-1- Technical Requirements Response Table. In addition to completing Table A-1, Technical Requirements Response Table, respondents must provide responses to the requirements specified in the remainder of this section Business Model, Pricing Model and Service Level Agreement (SLA) Questions: 1. Describe in general terms each of your cloud services pricing models as it relates to CPU, memory, storage, bandwidth, data transfer capacity, and other relevant pricing. 2. Please describe all potential bandwidth charges that may occur in the respondent s cloud environment, including initial and ongoing rates, as well as any potential charges that could occur for exceeding in limits or restrictions. 3. Describe the respondent s capability to offer hosting services, including any capabilities for server provisioning, preconfigured system images and applications stacks, management, operating system patching, security software, and other managed services, including any special provisions relating to offering hosting services to governmental units. 4. Please describe the monitoring and management capabilities available to assist the County in managing its costs. Include any ability to place limits on scalability, set alarms, or other features that can proactively manage the environment. 5. Does the proposal include the assumption that the vendor, and not the County, will be responsible for all terms and conditions in any and all subcontractor licenses necessary to host all applications including SharePoint for internet services? Does the proposal require the County must execute any software licenses to acquire cloud services? If so they must be included in the proposal. 6. What SLAs does the respondent s company offer related to cloud hosting services? Do you offer the flexibility of negotiated customerspecific SLAs or only fixed offerings? Oakland County Michigan 18

21 7. What is the scope and nature of the respondent s cloud service model offerings, including software-as-a-service, infrastructure-asa-service, platform-as-a-service, and associated administration capabilities? Please identify and explain. 8. Please provide past performance information, to include recent and relevant contracts for the same or similar items and other references (including contract numbers, points of contact with telephone numbers and other relevant information). 9. Is the respondent s organization insured by a 3rd party for losses? 10. Do the respondent s organization service level agreements provide tenant remuneration for losses they may incur due to outages or losses experienced within the respondent s infrastructure? 11. Does the respondent have or will be willing to build a Cloud services model that could be hosted in Oakland County s Datacenter? 12. Will your hosting model allow the County to act as a sub-host for other governmental entities which it does not control, supervise, oversee and which are not County affiliates? Operational Support Questions: 13. Does the respondent have prior experience of providing any type of cloud solutions to any government entities? If so please provide examples. 14. Describe the core components of ensuring availability from the respondent s organizational perspective (e.g. # of locations, # of locations at Internet Exchange Points (IXP))? 15. How does the respondent s organization maintain effective levels of patch management on the Operating Systems, VMs and/or hypervisors in an open virtualization environment? 16. What types and combinations of CPU processors, virtualization formats, and operating systems are supported by the respondent s service? In addition, what capabilities are there for testing various combinations of these? 17. Please describe your system for IP address assignment and persistence in a virtual environment. Oakland County Michigan 19

22 18. Please identify which ports are allowed or accessible through your infrastructure (i.e. 25, 80, 139, and 443) and which we might assume would be blocked. Are any unique ports or API calls required? 19. Describe the respondent s organizational IP Management in a virtual environment. Can the respondent provide renewal capabilities, including level of support for static IP addressing? 20. Describe how the respondent s organization manages domain controllers in a Demilitarized Zone (DMZ). 21. Describe how the respondent manages remote administration for provisioning and Virtual Machine (VM) access. 22. Describe the respondent s handling of potential availability issues such as significant cloud computing outage, high network load or insufficient bandwidth access. What is the respondent s mitigation strategy in case of potential network outages, bandwidth shortages, or spikes in service demand? 23. What kind of trouble ticketing system does the respondent s organization have, and is it visible from our site? 24. Please describe the respondent s ability to support a.net 4.0 Framework. Describe your ability to support Web Forms applications written in Visual Basic or C# designed for an IIS 7 environment. 25. Please describe the ability to integrate the above environment with Active Directory and support for the.net Framework Role Provider architecture. 26. Please describe the application development training available for the above environment. 27. Please provide a table and description of the available application compute environments, their relative CPU processing power (Ghz), their memory allocation, and the cost per operational hour. 28. Please provide a table and description of the file storage options available for use by applications in the above environment. Please include all cost information related to the use of the file storage. 29. Please provide a table and description of the SQL Database storage options available for use by applications in the above Oakland County Michigan 20

23 environment. Please include all cost information related to the use of the SQL Databases. 30. Describe the respondent s ability to provide a sandbox and QA network environment for application and web site testing. 31. Describe the application life cycle management (ALM) services the respondent offers Data Management Questions: 32. Describe the respondent s handling of data isolation, data recovery and handling/security of data at rest and in transit, with particular emphasis on the management and security of non-public governmental information. 33. Can the respondent guarantee that data will remain within the continental United States, both in transit and at rest? If so, how? 34. Can the respondent provide the physical location/geography of storage of a tenant s data upon request? 35. Does the respondent allow tenants to define acceptable geographical locations for data routing or resource instantiation? 36. Are any of the respondent s data centers located in places which have a high probability/occurrence of high-impact environmental risks (floods, tornadoes, earthquakes, hurricanes, etc.)? 37. Describe the respondent s roles and responsibilities regarding data ownership, (logging data, etc.). Identify distinctions that will be made because this is governmental data. 38. Who owns the Intellectual Property for artifacts developed in or hosted in the respondent s cloud? 39. Describe the respondent s method for getting customer's data back in-house either on demand or in case of contract termination for any reason. 40. How would the respondent handle data remnants throughout their service lifecycle? 41. Please describe the respondent s data replication capabilities including cloud site to cloud site and cloud site to County site. Describe any estimating and monitoring tools for data replication Oakland County Michigan 21

24 that are available. Describe any optional feature or opt-out options that may be available. Describe the specific costs associated with all data replication options. 42. Does the respondent provide a capability to identify hardware via policy tags/metadata/hardware tags (ex. TXT/TPM, VN-Tag, etc.)? 43. Does the respondent have a capability to use system geographic location as an authentication factor? Security Questions (please emphasize distinctions and special practices that will be applied because the County is a governmental entity): 44. Describe the respondent s security architecture around the cloud services that the respondent provides, including Open Systems Interoperability (OSI) layers 1-4. Please provide an overview of the respondent s methods to limit data dispersal to unauthorized entities. 45. Please explain how the respondent provides physical security in a shared tenant environment. 46. Does the respondent allow its clients to provide their own "trusted" virtual machine image to ensure conformance to their own internal standards? 47. Describe the respondent s approach to addressing IT security challenges in cloud computing, in particular - dealing with hacker attacks, the potential for unauthorized access, and inappropriate use of proprietary data and IT applications. What are the respondent s processes and solutions for preventing these challenges from occurring? 48. Describe the cloud computing authentication models that the respondent thinks would be most effective for Oakland County administrative use. Describe how the respondent s service offering could enable federated directory services, ediscovery, forensic analysis, auditability, and other similar governance requirements. 49. Does the respondent have the ability to sanitize all computing resources of tenant data once a customer has exited the respondent s environment? 50. What certifications and compliance standards does the respondent support, have third party certification for, or comply with, such as ISO27001 HIPAA, PCI, SOX, and SSAE16? Oakland County Michigan 22

25 51. Does the respondent maintain a complete inventory of all of your critical assets which includes ownership of the asset? 52. Does the respondent support identity federation standards (SAML, SPLM, WS-Trust, SCIM, OPEN-ID, and OAuth) as a means of authenticating/authorizing users? 53. Does the respondent allow tenants to use third party identity assurance services? 54. Does the respondent specifically train your employees regarding their role vs. the tenant's role in providing information security controls? 55. Does the respondent document employee acknowledgment of training they have completed? 56. Does the respondent provide tenants with documentation describing your Information Security Management Program (ISMP?) 57. Does the respondent support use of, or integration with, existing customer-based Single Sign-On (SSO) solutions to your service? 58. Does the respondent have a Policy Enforcement Point capability (ex. XACML) to enforce regional legal and policy constraints on user access? 59. Does the respondent have an identity management system in place which enables both role-based and context-based entitlement to data and enables classification of data for a tenant?). Does the respondent provide self-registration and password management capabilities? 60. Does the respondent offer federated directory services? How is the federated directory services implemented? 61. Does the respondent provide tenants with strong (multifactor) authentication options (digital certs, tokens, biometric, etc.) for user access? 62. Does the respondent notify its tenants when the organization makes material changes to the organization s information security and/or privacy policies? Oakland County Michigan 23

26 63. For your IaaS offering, does the respondent provide customers with guidance on how to create a layered security architecture equivalence using the respondent s virtualized solution? 64. Does the respondent utilize a synchronized time-service protocol (ex. NTP) to ensure all systems have a common time reference? 65. Does the respondent conduct internal audits regularly as prescribed by industry best practices and guidance? 66. Does the respondent conduct external audits regularly as prescribed by industry best practices and guidance? 67. Are the results of the network penetration tests available to tenants at their request? 68. Are the results of internal and external audits available to tenants at their request? 69. Is the respondent s network dual homed? If so, with whom? 70. How is the respondent able to prioritize our traffic if need be? Interoperability and Portability Questions (please emphasize distinctions and special practices that will be applied because the County is a governmental entity): 71. Describe the respondent s recommendations regarding cloud-tocloud communication and ensuring interoperability of cloud solutions. 72. Describe the respondent s experience in weaving together multiple different cloud computing services offered by you, if any, or by other vendors. 73. As part of the respondent s service offering, describe the tools you support for integrating with other vendors in terms of monitoring and managing multiple cloud computing services. 74. Please explain application portability; i.e. the exit strategy for applications running in the respondent s cloud, should it be necessary to vacate. 75. Describe how the respondent prevents vendor lock in. Oakland County Michigan 24

27 Costs for technical requirements documented in Appendix A Technical Requirements Response Table will be itemized in Appendix B-Table B1- Summary of System Costs Table. Value added functions, not listed above as requirements, will be considered during the evaluation of all proposals. If a proposed solution contains any other features, which are not listed in Appendix A, the respondent is encouraged to include the description of the functionality in their Appendix A response. Respondents should indicate all optional equipment necessary for such valueadded functions. By including value-added functions in the Appendix A response, respondents will be able to clearly identify value-added functions that exist as part of their standard system functionality, rather than as options. Costs for system functionality must be documented in Appendix B-Table B1 Summary of Desirable System Costs Table. 9.3 Implementation and Support Services Requirements Respondents must provide responses to the implementation services requirements specified in this section of the RFP. 1. Respondents must provide the implementation services described below as part of the Application Cloud Hosting and SharePoint for Internet Services implementation. Respondents should describe the support services including assumptions and exclusions, approach and estimated effort for the following services: 24x7 immediate phone, remote, escalation, and call tracking support. Provide scheduled support including software upgrades, design review, co-managed services, and periodic health checks. Ability to provide catastrophic recovery services Costs for each of the above support services must be documented in Appendix B-3 Support Services Cost Table. Oakland County Michigan 25

28 APPENDIX A TECHNICAL REQUIREMENTS RESPONSE TABLE Table A-1. Functional Requirements Table Number Functional Requirement Support of compliance standards (i.e. ISO27001, HIPAA, PCI, SOX, and SSAE16) Application, SharePoint for Internet Services, DB Server: Microsoft Windows Server 2008 R2 64 bit Application and SharePoint for Internet Services: Microsoft SQL Server 2008 Application : Microsoft IIS 7.5 Application : SMTP services Application : Domain services Application: Types of users include - Admins, domain admin accounts, local admin, Content Editors, Public Named-User and Public Anonymous accounts. SharePoint for Internet Services 2010 SharePoint Central Admin SharePoint Management Shell (Power Shell) SharePoint: Registration, Password/Reset and Delegated Admin functionality Ability to host third party software such as itext, jquery, jquery mobile, MVC 3 Afilias Technologies - Device Atlas version 1.5 or latest Remote Desktop Access to SharePoint server Local Admin on SharePoint server Application : Microsoft ASP.NET 4.0 Automatic scalability in response to application load; capacity management Vendor-executed Licenses necessary to host all applications including SharePoint for internet services. Easy portability of applications and data Existing Ability (Yes, No) Planned Future Release (Release Number and Date) Custom Modification (Yes, No) Oakland County Michigan 26

29 Number Functional Requirement Active Directory Lightweight Directory Services and Active Directory Federation Services Provisioning, Self-Registration, delegated admin, reporting, password resets, auditing, and password expiration capabilities. Support of identity federation standards, support for SAML, SPLM, WS- Trust, SCIM, OPEN-ID, and OAuth. Daily Full Backups of Database High uptime and availability Disaster recovery plan/procedures Anti-virus, Anti-Spam on all servers SSL Certificate Installation 24x7x365 Customer Support DNS Configurations Security Policies and Procedures Secured managed firewall Full redundancy; DR and Business Continuity plans and procedures Administrative Privileges for County system administrators to the environment SharePoint Hardware: 8GB RAM, 100GB Disk Space Production SQL Server 2008 Hardware: 8GB RAM, 2TB Disk Space for DB. Expansion capability as required QA SQL Server 2008 Hardware: 8GB RAM, 2TB Disk Space for DB. Expansion capability as required Use of third party identity assurance services Unlimited users Pay-per-use model Ability to host audio, video, Microsoft office documents, Adobe PDF document Existing Ability (Yes, No) Planned Future Release (Release Number and Date) Custom Modification (Yes, No) Oakland County Michigan 27

30 APPENDIX B COST RESPONSE TABLES Respondents should identify inapplicable costs with an N/A. Table B-1 Summary of System Costs Table. Cost Description One-Time Cost On-Going Total Mandatory Costs Table B-2. Summary of Desirable System Costs Table. One-Time Cost Description Cost On-Going Total Desirable Costs Table B-3. Summary of Implementation and Support Services Costs Table. One-Time Cost Description Cost On-Going Total Support Services Costs Oakland County Michigan 28

31 ATTACHMENT 2 GLOSSARY OF TERMS Term Definition CLEMIS Abbreviation for Court and Law Enforcement Management Information System. CLEMIS provides state of the art computer technology and related services to criminal justice and public safety agencies (police, fire, emergency medical services). CLEMIS, a regional law enforcement consortium, provides solutions through a cooperative effort that are affordable and efficient for agencies of all sizes. Over 140 police, fire, and emergency medical services agencies in a five county region rely on CLEMIS for their records needs. By serving as a technical link among multiple agencies, the program promotes communication and sharing of criminal justice information. Customer Relationship Manager (CRM) Customer Support IT Application Services Division supervisors having direct responsibility to manage customer relationships. Identified staff member within each IT division that coordinates new work order service requests with customer liaisons. Infrastructure-as-a-Service (IaaS) A cloud service model where the cloud provider offers virtual machines, data storage, firewalls, load balancers, and network as an ondemand service. The cloud user installs the operating system and applications on these virtual machines and handles all patch management typically over a VPN connection. Platform-as-a-Service (PaaS) - A cloud service model where the cloud providers deliver a computing platform including the server hardware, operating system, programming language execution environment, database, and web server. The compute and storage resources should scale automatically to match application demand so that the cloud user does not have to allocate resources manually. Oakland County Michigan 29

32 ATTACHMENT 3 OAKLAND COUNTY PROFESSIONAL SERVICES CONTRACT Please refer to the purchasing web site contained in SOL. Oakland County Michigan 30