1545932658_UNISYS%20NASPO%20Cost%20Proposal%20Winter%202019%20(1).pdf

V2 11/28/2018

ATTACHMENT G – COST SCHEDULE

Solicitation Number CH16012 d

NASPO ValuePoint Cloud Solutions RFP

Cloud Solutions

Amazon Web Services

Microsoft Azure

Google Cloud

Oracle Cloud

Unisys Cloud Offerings

CloudForte – Cloud Managed Services and Broker

SIEM as a Service

Security Information and Event Management Service (SIEM)

Security Device Management as a Service

Vulnerability as a Service

Security as a Service Pricing

Unisys Public Sector Solutions

Digital Policing

Law Enforcement Switch and Justice Exchange (LEMS)

State/Local

Government

Enterprise

Regulatory System (AMANDA)

InfoImage

Stealth

VantagePoint

Unisys Cloud

Hosting

ServiceNow

Unisys ClearPath Forward!

Unisys White Label Offerings

Infrastructure Cloud Assessment with Tool Based Modeling

Infrastructure Cloud Assessment with Tool Based Modeling

Unisys Professional Services

Unisys Corporation: Labor Rates

Cloud Solutions

By Category. Specify Discount Percent % Offered for products in each category. Highest discount will apply for products referenced in detail listings for multiple categories. Provide a detailed product offering for each category.

Amazon Web Services

1. Unisys Partner: Amazon Web Services (AWS) Public and IaaS, PaaS, and SaaS

The AWS offerings below will be provided at a 1.5% discount off the AWS list price for AWS services and AWS

Premium support. AWS Premium Support will be provided directly by AWS as described on AWS’ support web page: https://aws.amazon.com/premiumsupport. The support fees will be calculated based on consumption. This offering will include:

• Any of the product, solution sets below

• Business Level Support to the buyer from AWS

• Unisys provided monthly billing and reporting as required by the Master Agreement (MA), Participating

Agreement (PA), and the requirements as stated in this RFP.

• Unisys provided customer enablement, contract management support, fee management, and fee disbursements as required by the MA, PA, and requirements as stated in this RFP.

Offering Details

Infrastructure as a Service (Iaas)

Platform as a Service (PaaS)

Software as a Service (SaaS)

Amazon Elastic Compute Cloud (Amazon EC2) is a web service that provides resizable computing capacity—literally, servers in Amazon’s data centers—that you use to build and host your software systems.

Amazon Relational Database Service (Amazon RDS) is a web service that makes it easier to set up, operate, and scale a relational database in the cloud. It provides cost efficient, resizable capacity for an industry-standard relational database and manages common database administration tasks.

Database engines available through Amazon RDS include Amazon Aurora, MySQL, Oracle, Microsoft SQL Server, and PostgreSQL.

AWS Identity and Access Management (IAM) is a web service that enables AWS customers to manage users and user permissions in AWS. The service is targeted at organizations with multiple users or systems that use AWS products such as Amazon EC2, Amazon SimpleDB, and the AWS Management Console. With AWS IAM, you can centrally manage users, security credentials such as access keys, and permissions that control which AWS resources https://aws.amazon.com/premiumsupport

Offering Details

Infrastructure as a Service (Iaas)

Platform as a Service (PaaS)

Software as a Service (SaaS) users can access.

Unisys Stealth is software defined security that delivers advanced protection for critical workloads in the Amazon Web Services cloud. Stealth is designed to create a secure communications tunnel, where the data is encrypted and split before transmission, and to cloak Stealth end points from users or devices except those who are preidentified as part of a secure community referred to as a Community of Interest (COI).

Management of COIs is easy with Stealth because access is defined by identity, not physical topology.

Amazon EC2 Container Service is a highly scalable, high-performance container management service that supports Docker containers and allows you to easily run distributed applications on a managed cluster of Amazon EC2 instances.

AWS Directory Service is a managed service that allows you to connect your AWS resources with an existing on-premises Microsoft Active Directory or to set up a new, stand-alone directory in the AWS cloud. Connecting to an on-premises directory is easy; once this connection is established, users can access AWS resources and applications with their existing corporate credentials.

Auto Scaling is a web service designed to launch or terminate Amazon EC2 instances automatically based on user defined policies, schedules, and health checks.

Amazon DynamoDB is a fully managed NoSQL database service that provides fast and predictable performance with seamless scalability. You can use Amazon DynamoDB to create a database table that can store and retrieve data, and serve many levels of request traffic. Amazon DynamoDB automatically spreads the data and traffic for the table over a sufficient number of servers to handle the request capacity specified by the customer and the amount of data stored, while maintaining consistent and fast performance.

AWS Service Catalog is a service that allows administrators to create and manage approved catalogs of resources that end users can then access at a personalized portal. You can control which users have access to which applications or AWS resources to enable compliance with your business policies, while users can easily browse and launch products from the catalogs you create.

Elastic Load Balancing automatically distributes your incoming application traffic across multiple Amazon EC2 instances. It detects unhealthy instances and reroutes traffic to healthy instances until the unhealthy instances are restored.

Elastic Load Balancing scales its request handling capacity automatically in response to incoming traffic.

Amazon Redshift is a fast, fully managed, petabyte scale data warehouse solution that makes it simple and cost-effective to efficiently analyze your data using your existing business intelligence tools.

AWS Config is a fully managed service that provides you with an AWS resource inventory, configuration history, and configuration change notifications to enable security and governance.

With AWS Config you can discover existing AWS resources, export a complete inventory of your AWS resources with configuration details, and determine how a resource was configured at a point in time. These capabilities enable compliance auditing, security analysis, resource change tracking,and troubleshooting.

Infrastructure as a Service (Iaas)

Platform as a Service (PaaS)

Software as a Service (SaaS)

Amazon Virtual Private Cloud (Amazon VPC) enables you to launch AWS resources into a virtual network that you defined.

This virtual network closely resembles a traditional network that you would operate in your own data center, with the benefits of using the scalable infrastructure of AWS.

Amazon ElastiCache is a web service that makes it easy to set up, manage, and scale distributed, in-memory cache environments in the cloud. It provides a high performance, resizable, and cost-effective in-memory cache, while removing the complexity associated with deploying and managing a distributed cache environment.

AWS CloudHSM provides you with secure cryptographic key storage by making Hardware Security Modules (HSMs) available in the AWS cloud.

Amazon Route 53 is a highly available and scalable Domain Name System (DNS) web service.

Amazon Elastic MapReduce (Amazon EMR) is a web service that makes it easy to process large amounts of data efficiently. Amazon EMR uses Hadoop processing combined with several AWS products to perform tasks such as web indexing, data mining, log file analysis, machine learning, scientific simulation, and data warehousing.

AWS Key Management Service (KMS) is a managed service that makes it easy for you to create and control the encryption keys used to encrypt your data and uses Hardware Security Modules (HSMs) to protect the security of your keys. AWS KMS is integrated with other AWS cloud services including Amazon EBS, Amazon S3, and Amazon Redshift. AWS KMS is also integrated with AWS CloudTrail to provide you with logs of key usage to help meet your regulatory and compliance needs.

Infrastructure as a Service (Iaas)

Platform as a Service (PaaS)

Software as a Service (SaaS)

AWS Direct Connect links your internal network to an AWS Direct Connect location over a standard 1 GB or 10 GB Ethernet fiber optic cable. One end of the cable is connected to your router and the other to an AWS Direct Connect router. With this connection, you can create virtual interfaces directly to the AWS cloud and Amazon VPC, bypassing Internet service providers in your network path.

Amazon Kinesis is a managed service that scales elastically for real-time processing of streaming big data. The service takes in large streams of data records that can then be consumed in real time by multiple data processing applications that can be run on Amazon EC2 instances. The data processing applications use the Amazon Kinesis Client Library and are called Amazon Kinesis applications.

With AWS CloudTrail, you can get a history of AWS API calls for your account, including API calls made via the AWS Management Console, the AWS Software Development Kits (SDKs), the command line tools, and higher level AWS cloud services. You can also identify which users and accounts called AWS APIs for services that support AWS CloudTrail, the source IP address the calls were made from, and when the calls occurred. You can integrate AWS CloudTrail into applications using the API, automate trail creation for your organization, check the status of your trails, and control how administrators turn AWS CloudTrail logging on and off.

Amazon Simple Storage Service (Amazon S3) is storage for the Internet. You can use Amazon S3 to store and retrieve data from anywhere on the web. You can accomplish these tasks using the simple and intuitive web interface of the AWS Management Console.

AWS Data Pipeline is a web service that helps you reliably process and move data between different AWS compute and storage services as well as on premises data sources at specified intervals. With AWS Data Pipeline, you can regularly access your data where it’s stored, transform and process it at scale, and efficiently transfer the results to AWS cloud services such as Amazon S3, Amazon RDS, Amazon DynamoDB, and Amazon EMR.

Amazon CloudWatch is a web service that enables you to collect, view, and analyze metrics. Amazon CloudWatch lets you programmatically retrieve your monitoring data, view graphs, and set alarms to help you troubleshoot, spot trends, and take automated action based on the state of your cloud environment.

Amazon Glacier is a storage service optimized for infrequently used data (“cold data”). The service provides secure, durable, and extremely low-cost storage for data archiving and backup.

With Amazon Glacier, you can store your data cost effectively for months, years, or decades.

Amazon Glacier enables you to offload the administrative burdens of operating and scaling storage to AWS, so you don’t have to worry about capacity planning, hardware provisioning, data replication, hardware failure detection and recovery, or time consuming hardware migrations.

Amazon Mobile Analytics is a service that lets you easily collect, visualize, and understand application usage data at scale. Many mobile application analytics solutions deliver usage data several hours after the events occur. Amazon Mobile Analytics is designed to deliver usage reports within 60 minutes of receiving data from an application so that you can act on the data more quickly.

AWS provides API-based cloud computing services with multiple interfaces to those services, including SDKs, IDE Toolkits, and command line tools for developing and managing AWS resources.

Amazon Elastic Block Store (Amazon EBS) provides block level storage volumes for use with Amazon EC2 instances.

Amazon EBS volumes are highly available and reliable storage volumes that can be attached to at least one running instance that is in the same Availability Zone.

Amazon EBS volumes that are attached to an Amazon EC2 instance are exposed as storage volumes that persist independently from the life of the instance. With Amazon EBS, you only pay for what you use.

With AWS Elastic Beanstalk, you can quickly deploy and manage applications in the AWS cloud without worrying about the infrastructure that runs those applications. AWS Elastic Beanstalk reduces management complexity without restricting choice or control. You simply upload your application, and AWS Elastic Beanstalk automatically handles the details of capacity provisioning, load balancing, scaling, and application health monitoring.

Amazon CloudFront is a content delivery web service.

It integrates with other AWS cloud services to give developers and governments an easy way to distribute content to end users with low-latency, high data transfer speeds and no commitments.

Infrastructure as a Service (Iaas)

Platform as a Service (PaaS)

Software as a Service (SaaS)

AWS Import/Export accelerates transferring large amounts of data between the cloud and portable storage devices that you mail to AWS. AWS transfers data directly onto and off your storage devices using Amazon’s high speed internal network. Your data load typically begins the next business day after your storage device arrives at AWS.

After the data export or import completes, AWS returns your storage device. For large data sets, AWS Import/Export is significantly faster than Internet transfer and more cost effective than upgrading your connectivity.

AWS CloudFormation offers developers and system administrators an easy way to create and manage a collection of related AWS resources, provisioning and updating them in an orderly and predictable way.

You can use AWS CloudFormation’s sample templates or create your own templates to describe the AWS resources, and associated dependencies or runtime parameters, required to run your application.

AWS CodePipeline is a continuous delivery and release automation service that aids smooth deployments. You can design your development workflow for checking in code, building the code, deploying your application to staging, testing it, and releasing it to production.

You can integrate third-party tools into the steps of your release process, or you can use AWS CodePipeline as an end-to-end solution.

AWS Storage Gateway is a service that connects an onpremises software appliance with cloud-based storage to provide seamless and secure integration between your on-premises IT environment and the AWS storage infrastructure.

AWS CodeDeploy is a service that automates code deployments to Amazon EC2 instances. AWS CodeDeploy makes it easier for you to rapidly release new features, helps you avoid downtime during deployment, and handles the complexity of updating your applications.

You can use AWS CodeDeploy to automate deployments, eliminating the need for error-prone manual operations, and the service scales with your infrastructure so you can easily deploy applications to one Amazon EC2 instance or thousands.

The Amazon AppStream web service deploys your application on AWS infrastructure and streams input and output between your application and devices such as personal computers, tablets, and mobile phones.

Your application’s processing occurs in the cloud, so it can scale to handle vast computational loads. Devices need only display output and return user input, so the client application on the device can be lightweight in terms of file size and processing requirements.

Access and manage Amazon cloud services at a simple and intuitive web-based user

AWS CodeCommit is a secure, highly scalable, managed source control

Amazon CloudSearch is a fully managed service in the cloud that makes it easy to

Infrastructure as a Service (Iaas)

Platform as a Service (PaaS)

Software as a Service (SaaS) interface. You can also use the AWS Console mobile app to quickly view resources on-thego.

service that hosts private Git repositories. AWS CodeCommit eliminates the need for you to operate your own source control system or worry about scaling its infrastructure. You can use AWS CodeCommit to store anything from code to binaries, and it supports the standard functionality of Git, allowing it to work seamlessly with your existing Git-based tools.

set up, manage, and scale a search solution for your website. Amazon CloudSearch enables you to search large collections of data such as web pages, document files, forum posts, or product information. With Amazon CloudSearch, you can quickly add search capabilities to your website without having to become a search expert or worry about hardware provisioning, setup, and maintenance. As your volume of data and traffic fluctuates, Amazon CloudSearch automatically scales to meet your needs.

The AWS Command Line Interface (CLI) is a unified tool used to manage your AWS cloud services. With just one tool to download and configure, you can control multiple AWS cloud services from the command line and automate them through scripts.

AWS OpsWorks provides a simple and flexible way to create and manage stacks and applications. With AWS OpsWorks, you can provision AWS resources, manage their configuration, deploy applications to those resources, and monitor their health.

Amazon Simple Workflow Service (Amazon SWF) makes it easy to build applications that coordinate work across distributed components. In Amazon SWF, a task represents a logical unit of work that is performed by a component of your application.

Coordinating tasks across the application involves managing intertask dependencies, scheduling, and concurrency in accordance with the logical flow of the application.

Amazon SWF gives you full control over implementing tasks and coordinating them without worrying about underlying complexities such as tracking their progress and maintaining their state.

Offering Details

Infrastructure as a Service (Iaas)

Platform as a Service (PaaS)

Software as a Service (SaaS)

Amazon WorkDocs is a fully managed, secure enterprise storage and sharing service with strong administrative controls and feedback capabilities that improve user productivity. Users can comment on files, send them to others for feedback, and upload new versions without having to email multiple versions of their files as attachments.

Amazon Elastic Transcoder lets you convert media files that you stored in Amazon S3 to media files in the formats required by consumer playback devices.

For example, you can convert large, high-quality digital media files to formats that users can play back on mobile devices, tablets, web browsers, and connected TV sets.

Amazon WorkSpaces is a fully managed desktop computing service in the cloud. Amazon WorkSpaces allows you to easily provision cloud-based desktops that allow end users to access the documents, applications, and resources you need with the device of your choice, including laptops, iPad, Kindle Fire, or Android tablets. With a few clicks in the AWS Management Console, you can provision a high-quality cloud desktop experience for users at a cost that is highly competitive with traditional desktops and half the cost of most Virtual Desktop Infrastructure (VDI) solutions.

Amazon Cognito is a simple user identity and data synchronization service that helps you securely manage and synchronize application data for your users across their mobile devices. You can create unique identities for your users through a number of public login providers (Amazon, Facebook, and Google) and support unauthenticated guests.

Amazon Simple Queue Service (Amazon SQS) is a messaging queue service that handles messages or workflows between other components in a system.

Amazon Flexible Payments Service facilitates the digital transfer of money between two entities – be they humans or computers.

Amazon Web Services Offering Details

Infrastructure as a Service (Iaas)

Platform as a Service (PaaS)

Software as a Service (SaaS)

Amazon Simple Email Service (Amazon SES) is an outbound-only email-sending service that provides an easy, cost-effective way for you to send email.

AWS Marketplace is an online store that helps you find, buy, and immediately start using the software and services you need to build products and run your business.

Amazon Simple Notification Service (Amazon SNS) is a web service that enables applications, end users, and devices to instantly send and receive notifications from the cloud.

AWS Lambda is a compute service that runs your code in response to events and automatically manages the compute resources for you, making it easy to build applications that respond quickly to new information.

AWS Lambda starts running your code within milliseconds of an event such as an image upload, an in-app activity, a website click, or output from a connected device.

Notes • This entire set of offerings is consumption driven.

• All AWS native services are available through this contract.

• List price costs can be estimated using a live calculator available here:

http://calculator.s3.amazonaws.com/index.html

• A description of AWS Business level support information is available here:

https://aws.amazon.com/premiumsupport/business-support/

Microsoft Azure

2. Unisys Partner: Microsoft Corporation Public and IaaS, PaaS, and SaaS:

The Microsoft offerings below will be provided at a 1.5% discount off the Microsoft list price including support. All support, maintenance costs and discounts will be determined based on the level and the scope of the support services requested. This offering will also include:

• Any of the product, solution sets below

• Unisys provided monthly billing and reporting as required by this contract

• Unisys provided customer enablement, contract management support, fee management, and fee disbursements

Microsoft Corporation Infrastructure as a Service (Iaas)

Platform as a Service (PaaS)

Software as a Service (SaaS)

Offering Details

Microsoft IaaS includes network services and virtual machines.

These services can be combined with PaaS services.

Microsoft Azure PaaS is a growing collection of integrated services – compute, storage, data, application, and networking.

Office 365: Enterprise Cloud productivity and collaboration services: Office, Exchange, SharePoint, Lync, Skype for Business, One Drive for Business, and Project

Virtual Network: Provision and manage virtual networks in Azure and securely link to your on-premises IT infrastructure.

Azure Web Apps: Build websites with l.Net, PHP, Python, Java, or Node.js and deploy them in seconds.

Microsoft Dynamics:

Enterprise Cloud customer relationship management

Express Route: Connects on premises infrastructure directly to Azure data centers without using the public Internet (will require telco connectivity).

Azure Storage: Massively scale storage in difference types.

Microsoft Intune: Enterprise Cloud PC and mobile device management

Virtual Machines: Create new virtual machines or create and upload your own to create preconfigured virtual machines.

SQL Database as a Service Azure Active Directory:

Provides access and identity management solutions, directory services, identity governance, security, and application access and management.

Traffic Manager: Load balance incoming global traffic across multiple services running in the same or different data centers.

Azure Compute: Quickly deploy and manage multi-tier apps, achieving continuous availability.

Azure Multifactor Authentication; Used with Azure Active directory, it allows you to safeguard access to data and applications while deploying a simple sign in process

Microsoft Corporation Infrastructure as a Service (Iaas)

Platform as a Service (PaaS)

Software as a Service (SaaS)

Azure Media Services:

Encode, store, and stream video and audio at scale.

Azure Mobile Services:

Create highly functional mobile apps that can access backend capabilities.

Azure Stream Analytics:

Perform real-time stream processing in the cloud for IoT solutions. Create dashboards and alerts.

Azure Logic Apps: Develop powerful integration solutions with SaaS and enterprise applications.

Azure API Apps: Expose your application’s AP’s to your SaaS and enterprise applications.

Notes • This entire set of offerings is consumption driven.

• List price costs can be estimated using a live calculator available here:

https://azure.microsoft.com/en-us/pricing/calculator/

Google Cloud

3. Unisys Partner: Google Public and SaaS

The Google offerings below will be provided at a 1.5% discount off the Google list price. Support will be provided by Google under the terms and conditions available here:

https://www.google.com/apps/intl/en/terms/tssg.html. Additional support options are available and priced based on the scope of the engagement. This offering will also include:

• Any of the product, solution sets below

• Unisys provided monthly billing and reporting as required by the Master Agreement (MA), Participating

Agreement (PA), and the requirements as stated in this RFP

• Unisys provided customer enablement, contract management support, fee management, and fee disbursements

Google Software as a Service (SaaS) Notes:

The entire set of offerings is consumption driven.

List price costs can be located and estimated using a live calculator available here:

https://cloud.google.com/products/calculator/

Google Apps Auth User includes the ability to define your Google Apps user identities for managing Android Applications and devices only.

With Google Apps for Work, Education, or Unlimited, you can add on this service to set policies to route your outbound email to an encryption server for external recipients to have a way to securely receive and send email to your end users.

Google Apps No Gmail includes Google Drive, Mobile Device Management, Groups, G+, Sites (unlimited), Videoconferencing, and VoIP.

Google Apps for Work includes Mail, (30 GB of storage), Calendar, Google Drive, Mobile Device Management, Groups, G+, Sites (unlimited), Videoconferencing, and VoIP.

Google Apps for EDU Unlimited, for qualifying K-12 and higher education organizations, includes Mail, Google Vault eDiscovery and Archiving (unlimited storage), Calendar, Google Drive, Mobile Device Management, Groups, G+, Sites (unlimited), Videoconferencing, and VoIP.

Google Apps Deskless includes the same services and is intended for nontechnical workers and infrequent users.

Google Apps Unlimited includes Mail, Google Vault eDiscovery and Archiving (unlimited storage), Calendar, Google Drive, Mobile Device Management, Groups, G+, Sites (unlimited), Videoconferencing, and VoIP Google Apps Unlimited Deskless customers can blend this product into their contract. This offering includes the same services and is intended for nontechnical workers and infrequent users.

Google Vault eDiscovery and Archiving (unlimited storage) Google Apps Vault Deskless customers can blend this product into their contract.

This offering includes the same services and is intended for nontechnical workers and infrequent users.

Oracle Cloud

4. Unisys Partner: Oracle Public and Community IaaS, PaaS and SaaS

The Oracle offerings below will be provided at a 1.5% discount off the Oracle list price. Support will be provided by Oracle under the terms and conditions available here:

https://cloud.oracle.com/en_US/saas-support. Additional support options are available and priced based on the scope of the engagement. This offering will also include:

• Any of the product, solution sets below

• Unisys provided monthly billing and reporting as required by the Master Agreement (MA), Participating

Agreement (PA), and the requirements as stated in this RFP

• Unisys provided customer enablement, contract management support, fee management, and fee disbursements

Oracle Infrastructure as a Service (Iaas)

Platform as a Service (PaaS)

Software as a Service (SaaS)

Notes:

The entire set of offerings is consumption driven.

List price costs can be located and estimated using a live calculator available here:

https://cloud.oracle.com/en_US/cost-estimator

Cloud Compute Instances - Cloud compute instances are available in two main groups: virtual machines (VMs) and bare metal machines. Both groups have a DenseIO option for high performance local NVMe SSD storage. Both groups are also available with NVIDIA Tesla GPU's (Pascal or Volta) for HPC workloads. All instances run on the same virtual cloud networks, with up to 1 PB per instance, and accessible through the same console and API set.

Oracle Cloud Platform is a comprehensive, standards-based combination of Oracle and open source technologies to enable you to more efficiently build, deploy, integrate, secure and manage all your enterprise applications.

Oracle Cloud Platform is also optimized for hybrid and multi-cloud environments. For organizations with strict data residency, compliance, or latency requirements, Oracle Cloud Platform is available within your data center, fully managed by Oracle, so that you can take advantage of the agility, innovation, and subscription-based pricing of Oracle Cloud Platform even for on-premise and private cloud deployments.

Applications (SaaS):

Oracle offers the most complete, innovative, and proven cloud suite of SaaS applications that enable customers to transform their business with the latest intelligent technologies such as AI and machine learning.

Low Latency Block Storage - Reliable and High Performance Highly available, persistent, network-attached storage volumes optimized to deliver low latency and high IOPS.

Backup and Restore Volumes can be backed up to highly durable, highly available object storage, and can even be restored to new volumes.

Boot Volumes

With the largest PaaS portfolio of any cloud vendor, Oracle gives you a rich palette of technically integrated platform solutions designed to increase agility, lower costs, and reduce IT complexity. Integrate your data, processes, and applications, migrate workloads to the cloud, Data (DaaS): Oracle Data Cloud provides data from a wide variety of Oracle and third-party sources, which can be used by sales and marketing to produce better business outcomes.

https://cloud.oracle.com/en_US/saas-support https://cloud.oracle.com/en_US/cost-estimator https://cloud.oracle.com/en_US/cost-estimator

Manageable, durable, and versatile system boot disks are provided with Oracle Block Volumes.

and implement unified management and security-all with a single robust platform.

Secure and Flexible Network - Virtual Cloud Networks (VCN) Fully customizable private networks enable you to easily move your existing network topology to the cloud.

Network Isolation An isolated virtual cloud network, combined with dedicated physical servers ensure strong isolation, even from Oracle.

Extension of On-Premises Connect to your VCN over an encrypted IPsec Virtual Private Network (VPN), or use FastConnect for a private, direct connection.

Oracle is committed to offering choice and flexibility for customers to adapt to rapidly changing business requirements, promote interoperability and avoid lock-in. To enable you to easily build, deploy, integrate and extend applications in the cloud, Oracle Cloud Platform supports numerous open standards (SQL, HTML5, REST, and more) open-source solutions (such as Kubernetes, Hadoop, and Kafka) and a wide variety of programming languages, databases, and integration frameworks.

Oracle CX Cloud Suite enables leading organizations to deliver great customer experiences throughout their customers' journey.

Organizations seeking a competitive advantage are looking to Oracle to help them effectively engage their customers across physical and digital channels to dramatically improve customer retention, up-sell, and brand advocacy.

High Availability Fault Isolation - You can deploy applications in mulit-region, multi- Availability Domain (AD, or multi-fault domain configurations. ADs are are built with fully independent infrastructure such as buildings, power generators, cooling equipment, network, and servers, while fault domains partition the compute resources within an AD for further protection.

High Availability Regions can contain multiple Availability Domains, connected by a high speed network backbone, And each AD contains three fault domains.

Low Latency High speed network backbones enable highly reliable applications running across ADs with minimum impact to application performance.

From development and integration to security and management, Oracle Cloud Platform unlocks the productivity of your employees through comprehensive automation covering provisioning, patching, backup, tuning, scaling, and more. Get the most complete, hassle-free provisioning and lifecycle management for your entire PaaS environment.

Modern HR differentiates the business with a talent-centric and consumer-based strategy that leverages technology to provide a collaborative, insightful, engaging, and mobile HR, employee, and executive experience.

Oracle HCM Cloud enables modern human resources to find and retain the best talent and increase global agility.

Flexible Image Management - Operating System Choice Support for an ever-growing list of Microsoft Windows Server and enterprise Linux operating systems such as Oracle Linux, CentOS, Ubuntu, and others.

Bring Your Own Image (BYOI) Flexibility to bring and run your own operating system or hypervisor on your compute instances. Use images across

Your business processes transcend SaaS and on-premises application boundaries. Oracle Cloud Platform eliminates application silos by making it easy to integrate data and processes across Oracle and non-Oracle SaaS and on-premises applications with hundreds of out-of-the-box adapters

Streamline your enterprise business processes with ERP Cloud. With ERP Cloud's Financials, Procurement, Project Portfolio Management, and more, you can increase productivity, lower costs, and improve controls.

compute shapes (see documentation for details).

Launch Images from Oracle and Partners Easily discover and launch images for Oracle Applications and third-party business applications from an expanding ecosystem of Oracle partners.

and connectors. Easily integrate and extend your SaaS applications to meet the evolving needs of your business without impacting the upgradability of your SaaS applications.

Get native access within the Oracle Cloud Infrastructure console to new container services for deploying container native applications. It includes both a managed Kubernetes service for creating and managing clusters and a private registry for storing and sharing container images, all powered by enterprise-grade cloud Infrastructure.

Leverage multi-layered security, data encryption by default and state-of-the-art data centers so you can deploy even your most high performant, mission-critical applications. Oracle Cloud Platform offers unmatched security, scalability, availability and performance by running on best-in-class Oracle Cloud Infrastructure and providing unified identity and security management across your entire hybrid cloud environment.

Built from the ground up for the cloud and for the modern supply chain, Oracle SCM Cloud delivers the visibility, insights, and capabilities you need to create your own intelligent supply chain. With capabilities that include product innovation, strategic material sourcing, outsourced manufacturing, integrated logistics, omni-channel fulfillment, and integrated demand and supply planning, Oracle SCM Cloud is the most comprehensive SCM suite in the cloud. Oracle SCM Cloud allows you to deploy functionality incrementally, with minimal risk, lower cost, and maximum flexibility—all with the benefit of ongoing functional innovation.

A developer friendly, container-native, and enterprise-ready managed Kubernetes service for running highly available clusters with the control, security, and predictable performance of Oracle’s Cloud Infrastructure. Get the latest Kubernetes updates and keep pace and compatibility with the CNCF ecosystem without the management and administrative overhead, all integrated with your Oracle Cloud Infrastructure tenancy.

Public cloud may not be a good fit for all your data and applications due to data residency, compliance, latency, or other business requirements. Oracle Cloud Platform can be deployed within a data center of choice while still offering you the same comprehensive cloud services and subscription-based pricing of public cloud, all managed and serviced by Oracle.

Oracle's market-leading EPM Cloud applications enable companies of any size to drive predictable performance, report with confidence, and connect the entire organization.

A highly available private container registry service for storing and sharing container images within the same regions as the deployments. An integrated, performant platform offering, where users can store their container images easily.

Access to push and pull images with the Docker CLI, or images

Oracle Internet of Things Applications deliver a world-class set of IoT apps for enterprise assets, production lines, transportation fleets, and mobile workers. Get smart with predictive, machine learning algorithms, and quickly extend core SCM, can be pulled directly into a Kubernetes deployment.

CX, HCM and ERP processes—with real-time IoT data and insights.

Adaptive Intelligent Apps Amplify value across your entire applications portfolio with Oracle Adaptive Intelligent Apps. Oracle's unique design approach harnesses prebuilt connectors, enriched 3rd-party data sources, dynamic decision science, and connected outcomes to improve your business results with minimal cost and effort.

Leverage the comprehensive Oracle product portfolio to address distinct industry-specific requirements. With solutions for financial services, communications, consumer goods and more.

Unisys Cloud Offerings

4. Unisys Corporation: Cloud Solution Offerings:

See itemized discounting below. Maintenance and support fees will be calculated and discounted based on the terms of the engagement with the Participating Entity.

Service Name Service Description SaaS / Price

CloudForte –

Cloud

Managed

Services and

Broker

CloudForte™ is a comprehensive managed services offering to help federal agencies manage and govern their Amazon Web Services (AWS) and Azure public cloud environments to accelerate the secure adoption of cloud services and cloud-native modernization and development. CloudForte™ is developed and deployed by seasoned Unisys cloud experts with mission-focused clients in mind.

As State Governments look to strengthen their cyber posture, lower cost and provide better digital experiences, they are prioritizing cloud adoption as a fundamental way to achieve these goals and improve their ability to improve the lives of their Citizens. However, migration to the cloud presents its own unique set of challenges, especially around compliance and security.

With a security-first mindset, CloudForte™ addresses these issues head-on, providing the necessary governance, compliance and security to protect agencies’ sensitive data, without sacrificing speed and efficiency.

CloudForte’s services include:

Billing Portal

Automated governance and real-time compliance

Migration (priced per requirements)

Expert support

SaaS Only

SIEM as a

Service

Security Information and Event Management Service (SIEM)

The SIEM uses UNCAAP (Unisys Noise Cancellation Advanced Analytics Platform) to aggregate and correlate enterprise wide security events into actionable Incidents. The service consists of:

1. Log Collection – Collecting security and system event logs from Client Devices on Unisys managed SIEM Infrastructure.

2. Security Monitoring – Monitoring Client security event data from Client Devices for alerts that need further investigation.

3. Security Analytics – Analyze Client security events from Client Devices for security threats to the Client IT infrastructure under the contracted monitoring scope using Unisys SIEM Infrastructure for automated event correlation and Unisys technical resources.

4. Security Incident Response – Unisys will respond to qualified security Incidents from Client Devices as per the Incident response plan created during Transition.

5. Unisys Portal – Provide Client with access to a secure Unisys Portal. The Unisys Portal provides Client with a view of Client security data, deliverables and reports related to the Services. The portal also provides an interface to the Client to log and update service related Incidents and Change Requests.

6. Dedicated Client Security Analyst (CSA) – Provide a dedicated Client Security Analyst who is the Unisys appointed SPOC to the Client for technical service delivery of various aspects of the Services. The CSA will also be the highest point of technical escalation for matters relating to the Services.

7. Unisys Portal - Provide access to a secure portal enabling access to service related reports and provide an interface for service operations and management activities.

See Security as a

Service tables below

Security

Device

Management as a Service

Security device management as a service includes system monitoring of a device, including availability and system health. Unisys provides security monitoring via Unisys Security Information and Event Management (SIEM) services, which is a separate state-of-the-art service.

The security device management service offered by Unisys encompasses the following device types:

Firewall devices

IPS devices

IDS devices

UTM devices

VPN appliances

Web proxy appliances

Load balancer appliances.

Activity Sub-tasks

Incident Management Device up/down status updates Interface up/down status updates

Change Management Modify system settings Modify system policy Modify other device configuration Perform content updates Perform firmware/OS updates Perform user access management activities

Capacity Management Monitor throughput Monitor disk space Monitor resource utilization Alert on critical resource consumptions

Configuration Management Define configuration item Identify and register configuration item (CI) Perform CI Audits Configuration Management Database (CMDB) change control

Service level Management Perform service-level tracking Perform service-level reporting

Problem Management Identify problem or recurring incidents Perform root cause analysis If problem identified with Unisys managed device, work towards giving a permanent fix to the problem with vendor support

Knowledge Management Maintain knowledge base

Vendor Management Track and update support contracts Work with vendor to get bug fixes Escalate issues to vendors and follow up until a fix has been found

The main interface between the client and Unisys is the service portal providing secure access to service dashboards, incident and change management, reporting management and service management menus. The content varies depending on the services taken, however the Portal provides single or dual factor authentication of users, granular role based access controls and full audit functionality. The Portal supports all main internet browsers and is accessed over the internet.

Vulnerability as a Service

Unisys will deploy Qualys Virtual Scanner Appliances. These appliances will be used by the centralized cloud-based Qualys portal. Unisys will be responsible for management and monitoring of these virtual appliances. Additional appliances may be required if the existing infrastructure is not sufficient to scan the IP addresses or there are significant changes in the environment. Additionally, Unisys will provide remediation governance/support services by raising Changes/Incidents based on the results of quarterly vulnerability scans. Unisys will track, monitor and provide reporting for these Changes/Incidents.

Unisys will provide Vulnerability Management Services that may encompass a range of activities that include threat intelligence, scanning, vulnerability assessment, tracking, exception and review processes, and patch management. We understand that for this proposal, Vulnerability Management Services will be constrained to the following activities:

Integration of threat intelligence in vulnerability management

Scanning of network and end point vulnerabilities

Tracking and reporting of vulnerabilities.

Unisys will provide Vulnerability Management Services in compliance with client’s policies and standards. Unisys Vulnerability Management Services will help the client assess their infrastructure for known vulnerabilities. These devices can be either in the cloud or in the client’s own data center.

The following table provides information on each life cycle management phase of our approach.

Vulnerability Life Cycle

Management Phases

Description

Asset Identification

This is the first phase in vulnerability life cycle management. This phase involves identifying critical assets that need assessment.

Asset Prioritization

The resources undergoing vulnerability assessment should be grouped and assigned priority levels to facilitate remediation efforts. Resource grouping and prioritization is helpful in assessing risk to systems and should be used to help identify which systems may require the special attention of the patch and vulnerability management program. Vulnerability assessment is a resource-intensive exercise for network and server resources that are assessed. Unisys recommends carefully planning this activity and prioritizing servers for scanning and subsequent remediation activities to avoid any unnecessary and unexpected service downtimes of most critical assets because of exploitation of vulnerabilities.

Environmental Changes

Unisys performs necessary changes in target infrastructure to support scan activity. These changes include modifying firewall rules, creating VPNs, and adding routing.

Vulnerability Assessment

This phase is preplanned and prescheduled. It consists of vulnerability scanners at the Unisys end that scan client target devices to look for symptoms of vulnerability.

Vulnerability Prioritization

This phase is initiated once system vulnerabilities are assessed. It involves prioritizing discovered vulnerabilities to start acting on them.

Vulnerability Reporting

This phase identifies and prioritizes various vulnerabilities to set the focus for the rest of the phases in the management life cycle.

Vulnerability Remediation (not included)

This is a key phase on any vulnerability management project; it involves remediating the vulnerabilities that were prioritized in the earlier phase. Unisys will provide the Remediation /Support as described below:

1.Preparation of Scan Environment: Before running a Scan, the Unisys Project Manager will open a Change Request (CR) to handle activities such as:

Opening Firewall ports Network changes needed for the Scan environment readiness for Unisys Provide network data to Client for VPN connectivity Client will provide the Network Access The Change Request (CR) will be kept open until the scan is completed.

2.Close “Preparation of Scan Environment” CR

The Project Manager will coordinate with resolver groups to close the CR upon completion of scan

3.Review of Report by Unisys Security Officer

Scan report will be reviewed by Security Officer. Severities will be identified and a recommendation report will be shared with Client.

4.Raising Incidents/Changes based on recommendations from Security officer

Client will push the Critical/High/Medium Vulnerabilities remediation via the mutually agreed “Incident/Change Processes”.

5.Incidents/Change Closure Tracking

The Unisys Project Manager maintain a tracking log of open incidents in the Qualys tool, and provide a summary reports for management review based on the timelines agreed between the client and Unisys.

*Step 1 to Step 5 are then repeated for a re-Scan to identify and report against remediation achieved in Client environment.

NOTE that remediation of the affected systems remains the responsibility of the Client.

Vulnerability Tracking

Once a vulnerability is identified, all efforts should be made to remediate it; because of the criticality of vulnerability and other organizational reasons, they do not get remediated. These vulnerabilities should be tracked for further action and may be masked to minimize ill effects that may arise.

Security as a Service Pricing Monitoring Packages (per year) - US Based Resource

MPS Volume (S) 100-250 (P1) 250-500 (P2) 501-

(P3) 751-

(P4) 1001-

(P5) 1251-

Total Package Price per Year $ 57,554 $ 90,681

116,968 $ 146,162 $ 174,595 $ 200,544

Packages Include

Labor Source 100% On-Shore (US based)

Log Archive Storage per Year 75GB 250GB 400 GB 500 GB 750 GB 1 TB

Standard Reports: 5 5 5 5 5 5

• Customer may select from standard available LogRhythm reports

• 1 compliance pack

Monitoring Agents Pro Agents – 1 Pro Agents –

Pro

Agents –

Pro Agents

– 5

Pro

Agents – 5 Pro Agents – 6

Lite Agents – 2 Lite Agents –

Lite

Agents –

Lite Agents

– 6

Lite

Agents – 9

Lite Agents –

Restrictions

Datacenters Up to 2 Client Sites

Average Number of Incidents per

Month 3 10 15 20 25 30

One-Time Price for Additional

Compliance Packs (up to two max) Not Available $ 50 $ 100 $ 150 $ 200 $ 250

Security Device Management (SDM) Firewall Packages

One-Time Set-up Cost

SDM Firewall Packages New Firewalls

Existing

Firewall

Takeover

Small (1 -150 rules) $ 5,357 $ 1,902

Medium (151-350 rules) $ 5,556 $ 2,101

Large (>350 rules) $ 6,264 $ 2,808

SDM Firewall Packages (US based resources)

On-Going Support

Description Price per

Month

Price per Year

Small (1 -150 rules) 2 Changes per

Month $ 1,761 $ 23,033

Medium (151-350 rules) 5 Changes per

$ 3,829 $ 48,045

Large (>350 rules) 8 Changes per

$ 6,138 $ 76,462

Price per Additional Change per Month $ 566 $ 6,796

Security Device Management (SDM) IDS/IPS Packages

One-Time Set-up Cost

SDM IDS/IPS Packages New IDS/IPS

Set-up

Existing

IDS/IPS

Takeover

Small (3 Changes/Month) $ 4,871 $ 1,415

Medium (10 Changes/Month) $ 5,092 $ 1,636

Large (18 Changes/Month) $ 5,191 $ 1,736

SDM IDS/IPS Packages (US based resources)

On-Going Support

Description Price per Month Price per

Year

Small (3 Changes/Month) $ 1,791 $ 21,489

Medium (10 Changes/Month) $ 4,977 $ 59,729

Large (18 Changes/Month) $ 8,785 $ 105,419

Price per Additional Change per

$ 441 $ 5,293.68

VMS Packages (US based…