Backup/DRAAS

"STATE OF NEW HAMPSHIRE\n\nDoIT\n2024-074 - Backup/DRAAS\nTABLE OF CONTENTS\nContents\nSECTION 1: OVERVIEW AND SCHEDULE OF EVENTS............esssesseesseessnessnnenneesnnennnennnnnen nennen 7\n1.1. ExXECUHVE SUHHTH A an 7\n1.2. Sched\u00fcle of Bvents.....:::::5:5:65555443552555050020052008022 02008008025 0008 7\nSECTION 2: PROPOSAL SUBMISSION, DEADLINE, AND LOCATION INSTRUCTIONS .....................- 9\n2.1. Proposal Submission ............uss022040ssssnenneeesnnnnennennnnennennnnnnennnnenennnnnensennnnneennnnnneenennsesnenanen 9\n2.2. Physical Proposals ..............00s0022neeeesnnnenesennneensnnnnennsnnnnnnnennnnenennnnnennennnnneennnnneeennnnnesennnene 9\n2.3. Eleetr\u00f6nie Prop6sAls......,::4u:uu0uuu0usu0us00u00000n00una0unasnnaenaannsenn 9\n2.4. Number of Proposals...............00u000224sneesnnnneessnnnnennennnnennennnnennnnnnnennennnnnnnnnnnnnsennnnnensnnnenen 10\n2.5. Vendor Inquiries

......ueensssesssssnnnssnnnnennennnnennennnnenennnnnennennnnenssnnnnnnsensnnnnensnnnenensnsnenssnnsnensennnn 10\n2.6. Restriction of Contact with Agency Employees.......unesssssneesssnnnneeeennnneenennnnnnennnnenennnen 11\n2.7. Validity of Proposal .........ueeeneeeesennsneesennnneensnnnneenennnnnenssnnnnenssennnnnsennnnensennnnnnnensnnnensenssnensennn 11\nSECTION 3: PROPOSAL ORGANIZATION, CONTENT, AND REQUIRED ITEMS... 12,\n3.1 Proposal Organization.........uessesesessneessennnenessnnnnnnnnnnnennennnnnnnnnnneneennnnnnnsnnnnnnnsnennnenssnnnnnnsesnnnnnnsensnsnsensnnnn 12\n3.1.1. Cover Page .......cueessssneesssnnnensennnnennennnnnennnnnneneennnnennenennnnennnnnenensnnnnsenesnnnsenssnnnsennsnnsssnssnanen 12\n3.1.2. Transmittal Form Letter...........u...uussssssssseesssnessnnensnnensnnnensnnennnnnensnnnensnnnnsnnnensnnennnnensnnennnnn 12\n3.1.3. Table of Contents..................220022200snsnessnnesnnnensnnennsnnensnnnensnnennnnnensnnensnnannnnnensnnnnnnnensnnensnnn 15\n3.1.4. Sesti\u00f6i Il: Exeritive SH a \u2014\u2014\u2014\u2014n 15\n3.1.5. Section II: Glossary of Terms and Abbreviations...............eeseesenesenenneenennenennnneennenene 15\n3.1.6. Section III: Responses to System Requirements and Deliverables..................... 15\n3.1.7. Section IV: Narrative Responses .....ueesesnssnnsssnsnensesnnnneneenennennennnnnenennnnneneennnnneennnnnnnennenanen 15\n3.1.8. Section V: Corporate Qualifications .........eesssensneeessneneessnnnnennennnnenennnnneneennnnneennnnnnen nennen 15\n3.19. Section VI: Qualifications of Key Vendor Staff..............eeeesseneneeesennnneenennnnenn sense 15\n3.1.10. Section VI: Price Proposal..u.uuu.uuuuuuuuuuueuuu0nn0uuneauunasunasnnaensenn 15\n3.1.11. Section VIII: Vendor Attachments...................200002200ssssessssnnnsnensnnnnsnnensnnnensnnennnnnnnnnennnnnnn 16\nSECTION 4 EVALUATION OF PROPOSALS.........uuuuesseesseesssensnnesnnensnennnennnennnennnnennennnnnnnennennnennnnnnnn 17\n4.1 Criteria for Evaluation and Scoring ......cueeeeenseeessnsessennnenennnnenennnnnennennnneeennnnneeenennes essen 17\n42 Scoring Detail ...........uueesesssneeensnenessnnnenensnnnnnnnennnnennennnnnnsnnnnnennennsnensenennennensnnnnnenssnnnnensnsnannn 18\n4.3 Planned Eralvatioit .,.,u.u.uuuuuuu., menu 19\n4.4 No Best and Final Offer ..................2.00222002200ussnsenssnensnnensnnensnnnensnnnnnnnnensnnnensnnnennnnennnnennnnnn 20\n4.5 Rights ofthe Agency in Accepting and Evaluating Proposals .............u..2u00eeseenneenenneeneennnn 20\nSECTION 5: TERMS AND CONDITIONS RELATED TO THE RFP PROCESS .................eeen 21\n5.1 RFP-Addendin \u201eu... 21\n\nPage 3 of 117\n" "STATE OF NEW HAMPSHIRE\n\nDoIT\n2024-074 - Backup/DRAAS\nTABLE OF CONTENTS\n5.2 Non-Collusion ..............2202220022200ssssnssnnensnnenssnnensnnnensnnennsnnensnnnensnnnnnnnensnnnensnnnennnensnsnonsnnen 21\n5.3 Property ofthe State.......neseessnsseeesssnnnensennnnennennnnenennnnensnnnnnnnennnnnnneennnnensensnnnsennsnnnennnen 21\n5.4 Confidentiality ofa Proposal................sssssunseeesnnneesssnnneenennnnenennnnnennennnnneennnnnnesennnnn seen 21\n5.5 P\u00fcblie Diselos\u00fcre ..,,:u.uu.uu.u.uee menu 21\n5.6 Electronic Posting of Resulting Contract .........ueeesssesssssnneessnnnnenssnnennennnnneneennnneneennnnnneenennn 23\n5.7 Non-Commitment ......uuecsssessssnsnnnssnnensnnnennnensnnnensnneennnnensnnnensnnennnnnsnnnensnsnennnensnnnensnnon 23\n5.8 Proposal Preparation Cost .....eeeesesssssessssnnnensssnnnensennnnnnnnnnenennnnnensennnnnnennennensenennnsensnnnnensnnnnn 23\n5.9 Ethical Requirements .......ueensesesssssnesssennnenesnnennennnnenennnnnennennnnnsennnnnesennnnennennnnnsennsnnenennnnnn 23\n5.10 DEATH nn 11a UI 24\n5.11 Challenges on Form or Process ofthe RFP...................nsssensnnnenenneneneeennenennenneennn ne 24\nSECTION 6: CONTRACT TERMS AND AWARD ......uuuesssessssssnessnessnensnennnnnnnennnennennennnnennnnnnnennnnnnn 25\n6.1. Non-Exclusive Contract ........uusecsssenssssenssnnesnnnssnnensnnnnnnnensnnnensnnennsnnensnnnennnnennnnnensnnnensnnnen 25\n6.2. Award......useessssesssssesssnensnnnnsnnennnnensnnensnnnensnnnnnsnnensnnnensnnensnnensnnnensnnesnnnensnnensnnennnnensnnensnn 25\n6.3. Anticipated Contract Term.......uuueessseesssnsneesssnnnensennnnennnnnnnsnnnnnnnsnennnensnennnnensennnnnenensnennennn 25\n6.4. Standard Contact TEMs. u. 25\n6.5. Related Documents Required .........uuusssessseesssnnnensssnnnenesnenennnnnennennnnennennnnnnennnnnennennnnennennnnnn 26\nAPPENDIX A: VENDOR CONFERENCE REQUIREMENTS...........ussssssessssessessnensnnennennnennnenne nennen 27\nAPPENDIX B: BUSINESS / TECHNICAL REQUIREMENTSAND DELIVERABELES................ee. 28\nB-1 Statement of Work ........u.uuecessseesssnssnsnensnnenssnnensnnnensnnensnnnennnnnsnnnensnnnnnnnensnnnensnnensnnesnsnnsnnnnnnnensnnnensnnon 28\nB>2. B\u00fcsiniess and, Technical Reg\u00fcirements une \u2014 28\nB-2,2 Technical Reguirem\u00e4its....:.u::40u::40ss02us00us00s00000na0una00n00RB ERBE 33\nB-2.3. Statewide Technical Requirements - Statewide Information Security Manual (SISM) ........................ 36\nB-2.4. Service Level Agreement (SLA)...........uusesesnseessennnnsennenennnnnenennnnnensnnnnnnnennnnnnnsenennensenennnnenensnenennnnnn 36\nB-3 Activity, Deliverable, or Milestone............uussusseessesnnenssnneessennnnnenennnennennnnnnnensnnnnennnnnensennsnnseensnnensennnn 38\nB4 D\u00e4t\u00e4 L66\u00e4ti6f .u...::::4::0n6565:54444048422 020020000020, 20, 88000000 39\nB-5 Background Checks .......uuseensssesessnnnesssnnnnenesnnenesnnnnnnnnnnnnenennnnnennennnnnnennnnenennnnnnssnsnnnsennennnn 40\nAPPENDIX C: TOPICS FORMANDATORY RESPONSES..........usesssessessseenneessnnsnennennnnnnnenn nenne 41\nC-1. Proposed Solution ............ess0sssssosonssssonsnnsssensonsensnnsnnsnsnnsonssssnssnssssensnnssnsnsansssssnnsnssssonssnsnsene 42\nC2. Vendor\u2019s Technical, Service and Project Management Experience ......scsssrsesensersonsonernens 43\nC-2.1 Security and Protection \u00f6f. Data.....s..ess000rs000000000000000000R00RHeR RER nn nn nennen ernennen 43\nC-2.2 State Personnel and Training .:-....:::+::.:0:0s0s0s0#000s0x00000s0000000n00000n Rn 0000ER ER 0 HER BR H HERR ERER HERR ERTE RE EREH HERE 44\nC-23 Project Execution.:.....::...0:00s00000400000000 0000ER nn nn nenn ne nennen one aaa 45\nC-2.4 Project Management........rsesssssssessonssssssnssssennnsssensonssnsnsonssnsnssnnsnsnnsonssssssonsssssssnnssssnsonssssssenssnssssnnene 48\nC-2.5 Ongoing Operations For Vendor Hosted Solution ................s00sss0ss0ssss00snsensnnsnnsnsnnsonssssnsonssnsnnsnnene 50\n\nPage 4 of 117\n" "STATE OF NEW HAMPSHIRE\n\nDoIT\n2024-074 - Backup/DRAAS\nTABLE OF CONTENTS\n\nC-2.6 Ongoing Operations For State Hosted Solution .........erssssossssosnessnenee Error! Bookmark not defined.\nAPPENDIX D: STANDARDS FOR DESCRIBING VENDOR QUALIFICATIONS.................eeee: 53\nD-1. Vendor Qualifications ...........uesssseesesesseeeennessssnnnnnnnnnnnnnsssnnnnnnnnnnnnnsnnnnnnnnnnnnnnnssnnnsnnnnnnnnnnnnen 53\nD-. Required Information on Corporate Qualifications ....................2uunsussssnesnnnsnnessnnnsnnennnnn 53\nD-3. Team Organization and Designation of Key Vendor Staff.................uunnenenenenneennnn 54\nAPPENDIXE: PRICING................2.0ssesssessssessesnensnnennnennnensnnennnennnennnennennnensnennennnennnennnennnensnennennennnn 55\nE-1. Pricing ....uueeneeeseensnneessnnnenssnnnnennennnnnnnennnnenennnnnnennnnnenennnnnensnnnnnnsennnnnsennsnnnsenennnsenssnnsensnnan 55\nE-1.1. Activities / Deliverables / Milestones Pricing ...............02220040sssnnneeeesnnnneeeennnneenennnnne nenne 55\nE-1.2. Hardware Pricing ..........uuessessseessssnneesssnnnnennsnnnnennennnnennnnnnnnnnennnnnnennnnnennnnnnesensnnensensnesnenenan 56\nE-1.3. Software License Pfiels..u.u.uuuunuuunuuunununnnunnuunnunnnununununnnununenn 57\nE-1.4. Software Operations, Maintenance and Support Pricing...........eueeseesesnnneesennnneeennnnnee nennen 57\nE-1.5. Hosting Pricing ............uuseseenenesssnnneeennnnenssnnnnennnnnnnnnnnnnnensennnnennensnnnnnennnnneneennsnnsennsnnnnennn 57\nE-1.6. Other Pricing. .......uueeeseeeseessnnesssnnnenssnnnnennsennnennennnnnnenennnnnenennnnenennnnneseensnnneenssnnsenssnnsssnnnan 58\nE-1.7. Implementation Pricing Summary .....uusssesssssseessnnnnenssnnnneensnnnnnenennnnnennnnnnnnessnnnnnnensnennennn 58\nE-2. Addition\u00e4l Pricing Referefite...uu:nuunununnunnnnunnnununnnnnnunsnunne 59\nE-2.1 Vendor Staff, Resource Hours and Rates...............000000nnennnnnnnnennnenennnnnnnnnenennnennnennnnnennnnnenenenenennnn 59\nE-2.2 Future Vendor Rates..................20022200sssssssnessnnnsnnnensnnensnnnnnsnnnnnnnennnnnensnnennnnensnnnensnnnennnnennnnnensnnnennnen 59\nAPPENDIX F: DOIT INFRASTRUCTURE & SECURITY.............uesseesssesssssnesnensnennnnennennnennnennennennnn 61\nF-1. Technical Architecture.................uu0sssusssseesssnenssnnssnnensnnnensnnnnnsnnensnnensnnennnnnensnnensnnensnsennnen 61\nF-1.1. State Network Ey When 61\nF-12. Interiet ASc888,.-----555455555555505554525454520200202200 0.00 0 00 DEE 61\nF-1.3. VMware......uuuueessssneesssnnnnsssnnnnnnesnnnnnnssnnnnnnnennnnnensnnnnnanssnnnnnsennnnnesssnnnnansennnnenensnnnensensnnansenen 61\nF-1.4. Oracle............uuusnsenssssensssnessnnnssnnensnnensnnnnnsnnansnnnensnnennnnnensnnnensnnnensnnansnnnensnnensnnensnnnensnsnennnen 61\nF-2. Future Systems Environment......esessssssnenssensnessennneenennnennennnnnnensnnnenennnnnnssensnneneensnnensenenan 61\nF-2.1. SECUTIY 4004000000 unnnasunasunasnnaensannnensunasunasnnanennunn 62\nAPPENDIX G: MERCHANT CARD SERVICES ..........uusssssseessnessnessnesnnennnennnennennnennnnennennneennennnennennnn 63\nG-1. PCI DSS Payment Application Data Security Standard (PA DSS)......... Error! Bookmark not\ndefined.\n\nAPPENDIX H: TERMS AND DEFINITIONS...............2200s200ssssesseessnesseennnennnennnnennennnennnnennennnnennennnennnennnn 64\nAPPENDIX I: P-37 STATE OF NEW HAMPSHIRE GENERAL PROVISIONS AND EXHIBITS........... 69\nAPPENDIX : _CONTRACT TEMPLATE AND EXHIBITS FOR IT PROJECTS \u2014 V6.264... ............ 68\n\nPage 5 of 117\n" "STATE OF NEW HAMPSHIRE\nDoIT\n2024-074 - Backup/DRAAS\nTABLE OF CONTENTS\n\nRemainder of this page intentionally left blank.\n\nPage 6 of 117\n" "STATE OF NEW HAMPSHIRE\nDoIT\n2024-074 - Backup/DRAAS\nSECTION 1- OVERVIEW AND SCHEDULE OF EVENTS\n\nSECTION 1: OVERVIEW AND SCHEDULE OF EVENTS\n\nExecutive Summary\n\n1.1.1.\n\nIntroduction\n\nSoNH DoIT is responsible for managing Infrastructure, Operations, and enterprise backup\n\nsolutions for -48 executive branch agencies, boards and commissions. We are seeking proposals\n\nfrom integrators with experience implementing Commvault software and Pure Storage Technology\n\nto replace our enterprise backup solution in the following phases:\n\nPhase 1: Replace existing EMC Networker solution that utilizes on-prem Data Domain for -30\n\ndays then moves data sets to backup tape. New, proposed Solutions should be based on Commwvault\n\nand Pure Storage with the ability to leverage existing EMC Data Domains until they reach end of\n\nlife. The proposed solution must have the ability to backup to Pure disk storage, EMC Data Domain\n\nstorage, tape and/or Wasabi cloud targets or any combination thereof.\n\nPhase 2: Leveraging phase 1 solution to provide configuration based on SoNH prioritized\n\nworkloads for a DRaaS solution specific to the Commvault, Pure and Wasabi technology stack.\n\nQuoted separately, architectural drawings and budgetary quotes for a DRaasS solution that integrates\n\ntightly with the backup solution vendors.\n\nScope of Work (SOW) Overview\n\nThe State of New Hampshire, Department of Information Technology (DoIT), is requesting\n\nproposals for Backup and DRaasS services. The scope of this proposal encompasses a Backup and\n\nDRaaS environment, with services that support recovery from a DoIT data center outage including:\n\nPhase 1: Backup to Cloud target, disk, or tape to meet the following objectives:\n\ne Satisfy individual Agency varied compliancy and retention needs.\n\nImmutability.\n\nReduces cost per TB.\n\nDeprecates the current solution while leveraging existing equipment that has not reached EOL.\n\nReduces or eliminates dependency on tape as primary long-term backup medium.\n\nSupports disk, tape and tapeless and cloud target technology.\n\nData encrypted in transit and at rest.\n\ne Clear separation of data between Agencies (i.e.: FTI for one doesn\u2019t put another in scope for\naudits).\n\ne Supports Litigation Holds and Right to Know requests.\n\ne Supports Containers (Kubernetes, Docker).\n\ne Backups to include Enterprise messaging, file, VMWare, database and directory services.\n\nPhase 2: Implementation ofa scalable environment to restore and run production applications in\n\nthe event ofa disaster leveraging phase 1 solution with varying RTO\u2019s.\n\ne Data storage, backup and replication services.\n\ne Routing and logical network configuration capabilities to maintain functionality of DoIT\n\nserver-based applications and reduce configuration changes during a disaster event.\n\nDefined activation process with predictable recovery times supported by an SLA.\n\nAccess to Backup and DRaasS resources for monitoring and audit purposes.\n\nSecurity measures and capabilities to protect DoIT resources.\n\nAbility to remotely configure backup and DRaasS resources, including the requisite tools and\n\nsupport required to configure and monitor the environment.\n\nPage 7 of 117\n"