4-QUO 07 County Technology Standards.pdf

County Technology Standards Requirements for On-Premise, Hybrid, or Cloud/Hosted Solutions Questionnaire

The following Los Alamos County Technology Standards are required and shall be supported by the vendor, contractor, reseller henceforth in this document called “Operator”, for any County solicitation requiring technology or integration to the County network and incorporated into any resultant agreement. Standards are listed with the expectation that the Operator will provide software updates to allow Los Alamos County to stay on supported versions of hardware, underlying software and protocols as outlined below.

Respondents must provide documentation that they meet the requirements in respect to the solution that they are responding with. On premise respondents do not need to comply with hosted requirements. Hosted solution respondents do not need to comply with on-premise requirements. If the solution is a hybrid of both categories of solution, then both on-premise and hosted requirements apply as applicable to the response.

For each standard requirement in the table below, check “YES” to indicate compliance, “NO” to indicate non-compliance, or “N/A” to indicate that the requirement is not applicable. In the cell beneath each standard requirement, briefly describe how Offeror will comply or why a standard requirement is not applicable. If Offeror can comply, but not exactly in the way described in the standard, please describe the substantial equivalent offered or alternate method for conforming to the requirement.

Where other County policies or documents are referenced, County will provide these documents upon request.

STANDARD REQUIREMENT YES NO N/A

Server Operating system (OS) (On-Premises)

Microsoft (MS) Windows Server 2019, 64 bit or current (Standard and Datacenter). Contractor software must be maintained to run on a supported platform service level as defined by Microsoft at the latest stable patch level. Departments will be responsible for licensing costs and must request cost estimates from Information Management (IM) Division.

Briefly describe how Offeror will comply, alternate methods, or why a standard requirement is not applicable.

Server Hardware (On-Premise)

Preferred: Use of County VMware server platform.

Environment design must be submitted and reviewed by IM Division for acceptance. Proposals shall include required hardware and licensing of VMware, operating system, and proposed application-based requirements.

Application with a proven Virtual installation template is preferred.

Physical Server minimum hardware specifications consist of: Multi Socket/Multi Core processor Intel or AMD based server (standalone or blade server as determined by Los Alamos County IM Division with a minimum 64 GB RAM and RAID capability. Contractor software must be maintained to run on a supported platform service levels as defined by Microsoft at the latest stable patch level.

Network Infrastructure See LAC Standards and Specifications for Building and Campus Distribution Systems Version 3 (Primarily used for building construction purposes).

Network

Supported network protocol is TCP/IP (IPv4).

Standards based NIC rated at 100/1000/10G copper or fiber is supported. If considering a 10G connection County IT network group shall be consulted to ensure equipment compatibility and availability at proposed site. Additional hardware cost, may be required of the project, based on project requirements, equipment and availability. The County uses Cisco technology as its default network equipment standard. Solutions shall be compatible with Cisco Network Technology.

Remote Network Access (On- Premise)

Direct remote access to the County network and server environment shall be done using the County’s Cisco AnyConnect SSH VPN. Once a VPN connection is established end-point connections are supported via Microsoft RDP. Operator support accounts shall be set up in accordance with the adopted Los Alamos County IT Usage and Security Policy #1210.

LAC Network Account Privilege (On-Premise & Hosted)

Desktop Client Software shall function for end users with standard user privileges; user cannot install software and shall not have administrative rights.

Desk Hardware (On-Premise & Hosted)

Physical unit minimum hardware requirements consist of: Intel core i5 based processor, minimum 8 GB RAM, Intel integrated graphics 1280 capable video minimum, display port, input or HDMI, 4 USB 2/3 ports.

Support deployment onto Azure Virtual Desktop (AVD) platform, specifically cloud-based platforms from Microsoft Azure, Amazon Web Service (AWS),Google Cloud Platform or Oracle Cloud Infrastructure (OCI)

Desktop OS

Microsoft Windows 10 & 11 at current Service Pack

(SP).

Internet Browser

Internal County Network: Google Chrome and Edge, at its latest version, are the installed browsers on county devices. Google Chrome is the county standard. New web Applications must be based on HTML5.

Applications requiring Internet Explorer, Microsoft Silverlight, Java and Flash are not supported. IM Division shall be consulted for compatibility issues prior to considering new application purchases requiring Java.

Database Software Products

Supported database software is Microsoft (MS) SQL server version 2019 and above. New MS SQL Server product installations will require review, purchasing of licenses, appropriate hardware, and maintenance in support of proposed project or instance install to the County MS SQL Server Environment. MS SQL server software for new implementations shall be at within the Microsoft certified support release level or current.

Server components for proposed projects require review and purchasing as part of the project initiative.

Operator software must be maintained to run on a supported platform service level as defined by Microsoft.

• Passwords are not permitted to be transported in clear\plain text.

• Vendor implementation shall not use the SA password for user level functions. SA passwords shall be maintained by the County

DBA.

• Only database instances can be installed on the County MS-SQL Environment. If a vendor software component install is necessary on the database server, a standalone installation will be required.

• Vendor software must use standard Access & Connection architecture for accessing databases on the County MS-SQL Environment.

• Applications based on Microsoft Access are not supported. Applications based on SQLEXPRESS version should be reviewed and the limitation understood by the customers and the vendor.

Hosted solutions shall be compliant with or provide a method to provide the County with database exports in the MS-SQL Server format.

Briefly describe how Offeror will comply, alternate methods, Internet: Collaboration and Web Publishing (On-Premise & Hosted)

Use of Internet apps or links shall be considered in collaboration with the Los Alamos Information Management Division Applications group for review to ensure that compatibility and Internet publishing protocols have been satisfied prior to formation of any agreement or installation.

Intranet: Collaboration and Web Publishing

Microsoft SharePoint Online is the basis for the County’s Intranet. Any products that will integrate or utilize the County’s Intranet site shall require a compatibility consultation with IM Division before purchase and implementation. Operator software shall be maintained to run on supported platform service levels as defined by Microsoft and/or the Intranet site vendor. Proposed Intranet software products shall be accompanied by roadmap for compatibility with MS SharePoint Online.

Productivity Software

Los Alamos County uses Microsoft M365 Office Suite at its most recent version and service pack. Operator software using the Office suite must be maintained to run on supported platform service levels as defined by Microsoft.

Email

Microsoft M365 with hub transport for relay. If SMTP relay access from on premise vendor specific software is necessary, permission to use the County Email exchange shall be obtained prior to contracting or purchase of the software or solution. If SMTP relay access from hosted vendor specific software is necessary, preference is for SMTP relay to be hosted by vendor. The vendor specific solution must be supported and maintained to relay off County email domain and directed to hand off the email message to another mail server that can get the message closer to its intended recipient in accordance with service levels as defined by Microsoft for the M365 product.

Geographic Information Standards (GIS)

The County uses strictly ArcGIS products by Esri for GIS. Desktop software for end users includes ArcGIS Desktop and ArcGIS Pro. GIS web services are provided as REST endpoints from ArcGIS Server using Internet Information Services (IIS). Our enterprise geodatabase is managed using ArcSDE with Microsoft SQL Server. Supported versions are one or two iterations behind the latest ESRI-supported release. The preferred method for applications to interact with GIS is via REST services. Web applications must be hosted in either ArcGIS Online or ArcGIS Portal.

Mobile Devices

Shall conform to Los Alamos County Mobile Policy #1240. Mobile devices requiring Intranet access must be secured through the County Mobile Device Management System.

Security & SSL

Intranet devices must be capable with multi-factor authentication (MFA) using the County’s current MFA systems. Any requirements for access to ports from the Internet into the County Network shall be approved via a technical review by the IM Division before product(s) purchase and implementation. Cisco Secure EndPoint Antivirus and Antispyware Enterprise software are used on all intranet computing devices; vendor solutions shall work in conjunction with stated antivirus products.

SSL (Secure Socket Layer) / TLS (Transport Layer Security) encryption is required for secure connection of both internal and external facing web applications.

Enterprise-wide applications shall be capable of Active Directory integration for user authentication and utilize County’s MFA.

Devices requiring wireless access must a) be domain integrated or b) have the ability to accept captive portal agreement (a web page that the user of a public-access network is obliged to view and interact with before access is granted).

Briefly describe how Offeror will comply, alternate methods, Records Shall conform to Los Alamos County Records and Information Governance Policy #0310

E-Signature Shall conform to Los Alamos County E-signature Policy #1220.

Hosted/Cloud Based Services

• Los Alamos County is interested in taking advantage of Anything as a Service (XaaS) opportunity available through Cloud Service Providers (CSP), in Government Cloud (GCC) where required. CSP data centers must be located within the United States.

• Enterprise-wide applications shall be capable of Active Directory integration for user authentication and utilize County’s MFA.

• SSL (Secure Socket Layer) / TLS (Transport Layer Security) encryption is required for secure connection.

• Data centers must be FedRAMP certified for SaaS solutions procured by departments if they also store or may store Los Alamos National Laboratory (LANL) critical infrastructure data for County operations. Departments must verify with LANL authority to confirm that this requirement is applicable to the LANL information to be stored.

• Ownership of County data held in the CSP solution shall remain with the County of Los Alamos.

County may have on-demand access to the data for export/download or have the data delivered by request by the CSP with a maximum 48-hour compliance window. Exports shall be in MS-SQL format.