8-Exceptions Form.pdf

PDF 176 KB Posted Dec 29, 2025

Attached to: Backup Disaster and Recovery (BDR) Solution
Solicitation number: RFP 2026-0003
Issued by: Chatham County, Georgia

About this file

Written by GovTribe AI · Dec 30, 2025

This is an Exceptions Form for RFP 2026-0003 issued by the Savannah Airport Commission (SAC) in Georgia for a comprehensive Backup and Disaster Recovery (BDR) Solution. The form serves as a structured template for proposing vendors to identify and document any exceptions or deviations from the stated requirements. Bidders must mark "No" to indicate full compliance with each requirement or "Yes" to propose exceptions, with detailed explanations required in the Additional Information section. The RFP solicits a solution that protects critical systems and data through local and cloud-based backups, rapid recovery capabilities, and integrated security and compliance features. The form encompasses requirements across four primary categories: Backup and Storage Architecture, Security and Compliance, Disaster Recovery and Testing, and Management and Support, along with Vendor Qualifications. All proposal preparation costs are the sole responsibility of the bidding firms, with no reimbursement from the Commission.

The Exceptions Form requires vendors to address specific technical and operational requirements, including an on-premises backup appliance with minimum 40 TB usable storage, immutable storage capabilities, offsite replication to compliant cloud environments, Multi-Factor Authentication (MFA) support, Zero Trust architecture principles, encryption standards, Disaster Recovery as a Service (DRaaS) coverage with enhanced capabilities including one-hour Recovery Time Objective (RTO) for critical systems, automated integrity testing, centralized management console with 24x7x365 vendor support, and scalable architecture for future expansion. Vendors must demonstrate relevant experience delivering BDR and DRaaS solutions to similarly-sized organizations, direct ownership or management of DRaaS cloud infrastructure, and provide client references. The form provides extensive space for vendors to document rationales for exceptions, propose alternative solutions, and disclose potential impacts on scope, cost, or timeline. Accurate disclosure of exceptions is critical, as failure to do so may result in proposals being deemed non-responsive or affecting subsequent contract negotiations.

View the file

Other files

File	Type	Posted
1-Addendum Acknowlegement Form - RFP.pdf	PDF	Dec 29, 2025
7-Pricing Form.pdf	PDF	Dec 29, 2025
6-Backup Disaster and Recovery Solution (RFP 2026-0003).pdf	PDF	Dec 29, 2025
3-Non-Collusion Affidavit.pdf	PDF	Dec 29, 2025
5-Vendor Reference Forms.pdf	PDF	Dec 29, 2025
4-Proposal Certification.pdf	PDF	Dec 29, 2025
2-Local Small Business Minority Business Form.pdf	PDF	Dec 29, 2025

On GovTribe

Work with this file

Download the original file
Contacts named in this file
Similar government files
Ask GovTribe AI about this file

Try for free Login

Text version

The file's text, extracted by GovTribe without its formatting.

SAVANNAH ARIPORT COMMISSION

EXCEPTIONS FORM

BACKUP DISASTER AND RECOVERY (BDR) SOLUTION

(RFP 2026-0003)

As part of your response, please indicate whether there are any exceptions or additions to the requirements outlined in this proposal. For each requirement, please mark “No” if you have no exception and agree to comply fully. Mark “Yes” next to any requirement for which you are requesting an exception or proposing an addition.

All exceptions or additions must be clearly explained in the “Additional Information” section of this form, including the rationale, any alternative solutions proposed, and any potential impact on scope, cost, or timeline. Failure to accurately disclose exceptions may result in the proposal being deemed non-responsive or may affect contract negotiations.

Backup and Storage Architecture

____ On-premises backup appliance with a minimum of 40 TB usable storage.

____ Immutable storage for all backup data, including on-premises, cloud, and SaaS workloads.

____ Offsite replication of backup data to a secure, vendor-managed cloud environment with appropriate compliance certifications (e.g., SOC 2 Type II).

____ Backup storage must be isolated from common network protocols (e.g., SMB/NFS) to reduce attack surface.

____ Backup infrastructure should not rely on traditional Windows or SQL Server components.

Security & Compliance

____ Multi-factor authentication (MFA) with support for time-based one-time passwords

(TOTP).

____ A secure approval mechanism that prevents unauthorized or accidental changes to data lifecycle policies.

____ Architecture should follow Zero Trust principles.

____ Encryption of data in transit and at rest.

____ Support for secure credential management, including integration with Group Managed Service Accounts (gMSA) or equivalent.

____ Time synchronization mechanisms should be resilient to tampering (e.g., NTP poisoning).

____ Ability to meet government or industry compliance standards (e.g., FedRAMP) upon request.

Disaster Recovery & Testing

____ Disaster Recovery as a Service (DRaaS) coverage for all protected systems.

____ Enhanced DRaaS capabilities (e.g., 1-hour RTO) for at least three critical systems.

____ Automated backup integrity testing to ensure recoverability.

____ Scheduled disaster recovery testing, including non-disruptive failover to cloud environments with detailed reporting.

Management & Support

____ Centralized management console for monitoring and managing backups and disaster recovery operations.

____ Unified visibility across all protected environments (on-premises, cloud, SaaS).

____ 24x7x365 vendor support.

____ Scalable architecture to accommodate future data growth and infrastructure expansion.

____ Access to cybersecurity expertise or incident response services, either included or available as an add-on.

Vendor Qualifications

____ Experience delivering BDR and DRaaS solutions to organizations of similar size and complexity.

____ Must own or directly manage the DRaaS cloud infrastructure.

____ Have relevant client references.

Additional Information

___________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________...

File details come from the government source that posted it. Updated Dec 30, 2025.