A04_SOW.pdf

RSA Professional Services

Background:

The Bureau of Indian Affairs (BIA), Office of Information Technologies (OIMT), Division of Information Operations (DIO) is seeking on site RSA SecureID professional services to design and develop a hybrid Multi Factor Authentication (MFA) solution to support MFA capabilities for custom .Net, VB6, and WebLogic applications.

Project Overview

This RSA Service Brief details the RSA SecurID Access On-site Services (5 days) service. This service provides product configuration support for ad-hoc assistance as prescribed by RSA Professional Services and to address implementation of the recommendations from other services (for example, such as Architecture Design & Planning Assessment (PS- BAS-SID-ASMNT), Migration Strategy & Planning (PS- BAS-SID-MIGR) and Health check & Strategy Roadmap (PS-BAS- SID-HEALTH).

Project Scope

An RSA Professional Services consultant, or authorized agent, will work closely with DIO staff to perform the various engagement tasks, which may include from amongst the following:

• Perform services as indicated in this Service Brief and subject to the Effort Estimate

• RSA SecurID Access implementation assistance planning, including:

o Manage the overall engagement and conduct pre-engagement teleconference to plan and schedule the engagement’s tasks.

o Confirmation of recommended configuration enhancements.

o Ensure that the environment and operational requirements for the implementation

(engagement logistics, hardware, software, and infrastructure) are met and if necessary, provide the Customer with a list of required or beneficial updates.

• Configuration tasks and activities relating to implementation support for a single environment, which may include:

o RSA SecurID Access Authentication Manager primary instance and replicas.

o Identity source server integration (LDAP v3 or Microsoft Active Directory).

o Licenses, token seed records and the RSA SecurID Access database.

o RSA SecurID Access agent system integrations.

o RSA SecurID Access Identity Router.

o RSA SecurID Authentication Manager web-tier.

o RSA SecurID Access and RSA Authentication Manager server, patching, upgrade, or migration.

o Professional Services solutions for RSA SecurID Access (e.g. such as “Prime” toolkit, Help

Desk Administration Portal and Self-Service Portal).

o Validation of the functionality of the configuration updates.

• Conduct basic Knowledge Transfer to familiarize the Customer with the solution, demonstrating the normal operations as installed in the Customer's environment.

SERVICE BRIEF

Deliverables

The following deliverables are provided in connection with this Service:

• Project Deployment Report, summarizing the RSA SecurID Access engagement activities.

• RSA Staffing

• RSA provides appropriate personnel to perform the Services specified in the “Project Scope” section. Some or all services may be delivered remotely.

• In addition to the Effort Estimate, RSA also provides remote assistance for engagement scheduling and coordination.

• Customer Responsibilities

• Provide at least one (1) technical contact with system administration responsibilities and appropriate system/ information access privileges.

• Reviewing and agreeing on engagement objectives.

• Make appropriate system maintenance window(s) available for RSA as needed to prepare equipment.

• Ensure that all environment and operational requirements are met prior to commencement of the Services.

• Provide access to the Customer’s systems and networks as necessary to perform the

Services during RSA’s normal business hours, or at mutually agreed times.

• Provide support from technical support teams for all vendors and third parties as necessary.

• Assume all responsibility for network connectivity, performance, and configuration issues.

• Verify that the equipment location (work site) is prepared to perform the engagement services.

• Respond in a timely fashion to questions posed by RSA regarding the project.

• Complete all planning and scheduling activities required by customer.

• Service Schedule

• The Services described in this Service Brief are delivered during RSA’s normal business hours

(M–F, excluding RSA/local holidays).

• Unless otherwise specified or agreed by RSA, the Services are performed on consecutive days.

• The anticipated Service start date is within thirty (30) days, or a mutually agreed upon start date, after receipt and approval by RSA of the Customer’s purchase order for this Service.

• Once the Deliverables have been met, RSA Project Manager will notify by e-mail the proof-of-delivery (POD) and the project will be considered complete.