Attachment B.xlsx

XLSX spreadsheet 39 KB Posted Mar 21, 2025

Attached to: STC DISASTER RECOVERY HOSTING SERVICES
Solicitation number: 5400028029
Issued by: South Carolina

About this file

Written by GovTribe AI · Mar 21, 2025

The document is a comprehensive scoring matrix for a Disaster Recovery (DR) contract opportunity with the State of South Carolina, designed to evaluate potential vendor proposals across multiple technical areas including general requirements, services, technologies, data center facilities, support, security, disaster recovery planning, and transition services. The scoring matrix is structured to assess vendor capabilities through a detailed evaluation process, with weighted scoring across nine distinct technical areas totaling 100%, covering aspects such as Net Promoter Score, customer satisfaction, service offerings, technological capabilities, data center infrastructure, support mechanisms, security compliance, and transition readiness.

The scoring methodology allows evaluators to rate vendor responses using a pulldown menu in the Solution Performance column, with weights assigned to each technical requirement ranging from 5% to 20%. Key evaluation criteria include compliance with specific regulatory requirements (IRS Publication 1075, CJIS), technological environment support (Windows, Unix, VMWare), data center facility specifications (location, infrastructure redundancy), support services (dedicated care teams, incident management), and security protocols. The comprehensive assessment aims to select a vendor capable of providing robust disaster recovery services with strong operational, technological, and security capabilities for state government systems, with particular emphasis on maintaining data confidentiality, system availability, and effective emergency response capabilities.

View the file

Other files

File	Type	Posted
Amendment 2.pdf	PDF	Aug 4, 2025
Amendment 1.pdf	PDF	Apr 21, 2025
Attachment A.xlsx	XLSX spreadsheet	Mar 21, 2025
Solicitation.pdf	PDF	Mar 21, 2025
Attachment E.docx	DOCX document	Mar 21, 2025

On GovTribe

Work with this file

Download the original file
Contacts named in this file
Similar government files
Ask GovTribe AI about this file

Try for free Login

Text version

The file's text, extracted by GovTribe without its formatting.

Instructions

Instructions to Scorers:

Scorers must complete each tab in this workbook.

Scorers must assign the value in the pulldown menu in the Solution Performance column that best meets the solution description provided by the offeror. Scores will automatically derive from the value chosen in the Solution Performance column.

Scorers must respond to each Technical Requirement in every tab. Each Offerors' final tally will be displayed on this sheet.

Scoring Totals

Offeror Name:

Scorer Name:

Tab	Score	Weight	Total
General	ERROR:#N/A	5%	ERROR:#N/A
Services	ERROR:#N/A	15%	ERROR:#N/A
Technologies	ERROR:#N/A	20%	ERROR:#N/A
Data Center	ERROR:#N/A	10%	ERROR:#N/A
Support	ERROR:#N/A	20%	ERROR:#N/A
Security	ERROR:#N/A	20%	ERROR:#N/A
DR Planning and Testing	ERROR:#N/A	5%	ERROR:#N/A
Transition	ERROR:#N/A	5%	ERROR:#N/A
TOTAL	ERROR:#N/A	100%	ERROR:#N/A

General

Technical Area	Item Reference	Disaster Recovery General Requirements	Solution Performance	Weight	Score
General	1	What is the Offeror's relative Net Promoter Score within the IT industry?		20%	ERROR:#N/A
	2	What is the Offeror's current Customer Satisfaction Score?		20%	ERROR:#N/A
	3	Offeror has a history of performing these services over multiple years at a high level of complexity.		10%	ERROR:#N/A
	4	Offers a tiered discount rate based on total state revenues.		15%	ERROR:#N/A
	5	Vendor has experience with similar projects in other states.		5%	ERROR:#N/A
	6	Vendor stated that it would comply with the state's requirements prohibiting offshoring of data and/or support.		15%	ERROR:#N/A
	7	Vendor has a documented set of privacy and security policies that explicitly address and provide guidance to employees and contractor personnel to ensure the confidentiality integrity, and availability of information and systems maintained or processed on behalf of the State.		15%	ERROR:#N/A
				100%	ERROR:#N/A

Services

Technical Area	Item Reference	Disaster Recovery Services	Solution Performance	Weight	Score
Services	1	Provides legacy mainframe Disaster Recovery Services		10%	ERROR:#N/A
	2	Provides traditional Colocation Services for Disaster Recovery		10%	ERROR:#N/A
	3	Provides managed Data Backup and Recovery Services		5%	ERROR:#N/A
	4	Provides Managed Infrastructure as a Service for Disaster Recovery		10%	ERROR:#N/A
	5	Provides a fully-featured cloud service with replication to another cloud zone for disaster recovery.		5%	ERROR:#N/A
	6	Provides personnel to recover state systems if agency personnel are not available.		10%	ERROR:#N/A
	7	Supports non-windows server environments (Unix, RHEL, IBM AIX, etc.)		10%	ERROR:#N/A
	8	Provides on-site facilities for agency recovery teams during disasters.		10%	ERROR:#N/A
	9	Provides transition services from current vendor.		10%	ERROR:#N/A
	10	Provides a multi-tenancy managed service environment in which state entities are logically and/or physically separated.		10%	ERROR:#N/A
	11	Protects the services provided to the state against external cybersecurity threats to the provider's environment, including DDOS attacks.		10%	ERROR:#N/A
				100%	ERROR:#N/A

Technologies

Technical Area	Item Reference	Disaster Recovery Technology Requirements	Solution Performance	Weight	Score
Technologies	1	Already has a mainframe DR solution in place.		5%	ERROR:#N/A
	2	Supports Windows server environments.		10%	ERROR:#N/A
	3	Supports non-windows server environments (Unix, RHEL, IBM AIX, etc.)		5%	ERROR:#N/A
	4	Supports VMWare and Hyper-V.		10%	ERROR:#N/A
	5	Supports Zerto, Veeam, and other industry-leading backup, recovery, and disaster recovery tools.		5%	ERROR:#N/A
	6	Interconnectivity between provider environments is available.		5%	ERROR:#N/A
	7	Provides redundant 20Gbps network connectivity between the State MetroNet and the Provider's service at no cost to the State for SSA UGUs.		5%	ERROR:#N/A
	8	Provides 24x7x365 operational monitoring, logging, and alerting on all systems and network circuits in use for the State for up/down status and for error conditions.		5%	ERROR:#N/A
	10	Upon detecting of an alert or event, validate, triage, assign, dispatch, and escalate issues as appropriate to the customer and/or third party support resources.		5%	ERROR:#N/A
	11	Resolve alerts or events. Coordinate with the customer, 3rd party maintenance, hardware manufacturer's or software providers as appropriate to bring resolution. Open support tickets and manage all communication with 3rd parties in the resolution of incidents.		5%	ERROR:#N/A
	12	Create and track incidents for any critical monitoring alerts using the service provider's incident management process.		5%	ERROR:#N/A
	13	Generate monthly monitoring event reports.		5%	ERROR:#N/A
	14	Perform service and/or system shutdowns and restarts as required.		5%	ERROR:#N/A
	15	Provide break/fix and incident management support for the network environment.		5%	ERROR:#N/A
	16	Provide operating system, firmware, and hardware support for the network environment		10%	ERROR:#N/A
	17	Manage and support all systems and networks providing managed services to include applying patches and upgrades from the manufacturer as required to maintain the environment in a secure, current configuration as required by the State.		10%	ERROR:#N/A
				100%	ERROR:#N/A

Data Center

Technical Area	Item Reference	Disaster Recovery Data Center Facility Requirements	Solution Performance	Weight	Score
Data Center	1	Provide data center location of operations farther than 75 miles from Columbia, SC, in the State of South Carolina, area preferred, but not required. Define City and State where located.		20%	ERROR:#N/A
	2	Provide concurrently maintainable infrastructure (consistent with an Uptime Institute Tier III or a TIA-943 Rating III standard)		10%	ERROR:#N/A
	3	Provide rack and configuration support to install IT equipment in cabinets and connect to storage and network equipment as requested.		5%	ERROR:#N/A
	4	Provide shipping and receiving support to receive shipments and/or pack and ship IT equipment on behalf of customer.		5%	ERROR:#N/A
	5	Provide facility monitoring of electrical and cooling infrastructure to ensure consistent and acceptable environment for computing assets		5%	ERROR:#N/A
	6	Facilities implement a Data Center Infrastructure Management tool to monitor and manage temperature, power distribution, power allocation, electrical component and load, mechanical component and load, and fire system status and alarms.		5%	ERROR:#N/A
	7	Provide diverse telecommunications carrier infrastructure (multiple physical points of entry) of at least two carriers, please list all current network carriers present at your location		10%	ERROR:#N/A
	8	Electrical sourcing is provided from two separate substations.		10%	ERROR:#N/A
	9	Redundant emergency power generation is on-site and operational.		10%	ERROR:#N/A
	10	Provider is the sole tenant of the data center facility.		5%	ERROR:#N/A
	11	Facility has adequate, redundant cooling capacity for the data center floor.		8%	ERROR:#N/A
	12	Facility has adequate, redundant UPS capacity for the data center floor.		8%	ERROR:#N/A
				100%	ERROR:#N/A

Support

Technical Area	Item Reference	Disaster Recovery Support Requirements	Solution Performance	Weight	Score
Support	1	Vendor support teams are all located within the Continental US. Vendor will not use overseas support for this contract.		5%	ERROR:#N/A
	2	Data Center personnel are all vendor-badged, not sub-contracted.		5%	ERROR:#N/A
	3	Provides a care team dedicated to the state which includes the positions laid out in the RFP.		5%	ERROR:#N/A
	4	Conduct a service provider-administered Customer Satisfaction Survey on an annual basis. Vendor will share the results with the customer and develop action plans to improve service where applicable.		5%	ERROR:#N/A
	5	Provide an on-line customer portal that provides all customer related SLA reporting, billing, and monthly operating metrics.		5%	ERROR:#N/A
	6	Create and maintain a Customer Run Book, which contains any and all operating procedures that are specific to customer's environment.		5%	ERROR:#N/A
	7	Provide an IT Service Management (ITSM) tool to capture all customer incident, change, and asset information for all IT users		5%	ERROR:#N/A
	8	Provide single contact number (i.e. Service Desk) for coordination of all incident activity.		5%	ERROR:#N/A
	9	Log and classify reported incidents in an incident tracking tool.		5%	ERROR:#N/A
	10	Provide monthly reporting and metrics on incident activity.		5%	ERROR:#N/A
	11	Implement a communication process to notify end users and business leadership of key outages		5%	ERROR:#N/A
	12	Track reoccurring incidents (problems) and perform Root Cause Analysis to remediate chronic issues.		5%	ERROR:#N/A
	13	Provides a care team dedicated to the state which includes the positions laid out in the RFP.		10%	ERROR:#N/A
	14	Provides each UGU with one free disaster recovery test annually.		10%	ERROR:#N/A
	15	Sets up, participates in, and supports each UGUs annual disaster recovery testing procedures.		10%	ERROR:#N/A
	16	Remediates disaster recovery testing issues/findings revealed within Provider's environment during testing.		10%	ERROR:#N/A
				100%	ERROR:#N/A

Security

Technical Area	Item Reference	Disaster Recovery Security Requirements	Solution Performance	Weight	Score
Security	1	Vendor solutions meet IRS Publication 1075 requirements. Vendor provided date of most recent audit.		10%	ERROR:#N/A
	2	Vendor solutions meet CJIS requirements. Vendor provided date of most recent audit.		10%	ERROR:#N/A
	3	Provider allows on-site inspections for audit and assessments.		5%	ERROR:#N/A
	4	Vendor possesses an accepted attestation of compliance for PCI-DSS.Vendor provided date of most recent audit.		5%	ERROR:#N/A
	5	Vendor possesses a current SOC-2 Type II audit report. Vendor provided copy of report.		10%	ERROR:#N/A
	6	Vendor will certify their compliance status to OTIS annually.		10%	ERROR:#N/A
	7	Vendor committed to fully cooperating with UGU's to resolve/remediate any audit and/or assessment findings.		5%	ERROR:#N/A
	8	Vendor uses a formal Plan of Actions and Milestones procedure to address audit or assessment findings.		10%	ERROR:#N/A
	9	Vendor has a formal, internal security office and practice already in operation.		5%	ERROR:#N/A
	10	Provides 24x7x365 security monitoring, logging, and alerting on all systems and network circuits in use for the State for up/down status and for error conditions.		10%	ERROR:#N/A
	11	Vendor has a documented incident response plan which includes notification to the State upon detection of an actual event.		5%	ERROR:#N/A
	12	Vendor facility has appropriate access controls, access procedures, and video surveillance to meet the State's standards including multifactor and/or biometric access controls.		5%	ERROR:#N/A
	13	Where required, maintain all Confidential and Restricted data is encrypted at rest and in transmission on the network.		5%	ERROR:#N/A
	14	Facility has 24x7x365 security guards on duty.		5%	ERROR:#N/A
				100%	ERROR:#N/A

Contractor DR and BC Testing

Technical Area	Item Reference	Contractor Disaster Recovery and Business Continuity Requirements	Solution Performance	Weight	Score
Disaster Recovery	1	Provided proof of the Offeror's disaster recovery and business continuity planning for the services it is offering to the State.		20%	ERROR:#N/A
	2	Able to recover the services that are offered to the State for all the services provided.		20%	ERROR:#N/A
	3	Has tested its disaster recovery and COOP within the last year, and provided date of the most recent test.		15%	ERROR:#N/A
	4	Has documented Standard Operation Procedures for its facilities and operations.		15%	ERROR:#N/A
	5	Has documented Emergency Management Plans for the proposed facilities.		15%	ERROR:#N/A
	6	Vendor assumes liability for any loss of state data as a result of a disaster at its facilities.		15%	ERROR:#N/A
				100%	ERROR:#N/A

Transition

Technical Area	Item Reference	Contractor Transition Services	Solution Performance	Weight	Score
Transition Support	1	Ability to begin migration to contractor facilities within two months of contract execution		20%	ERROR:#N/A
	2	Complete initial disaster recovery testing in conjunction with the State of South Carolina's Department of Administration within two months of contract execution.		20%	ERROR:#N/A
	3	Provide appropriate insurance to ensure the recoverability of any damaged State of South Carolina assets or data during the migration phase.		20%	ERROR:#N/A
	4	Provided an example project plan for the transition in an industry-standard project management tool.		5%	ERROR:#N/A
	5	Developed "run book" documentation of service provider standard operating procedures related to State of South Carolina specific operating procedures prior to cutover of services.		15%	ERROR:#N/A
	6	Coordinates security monitoring and incident response procedures with State of South Carolina SOC.		20%	ERROR:#N/A
				100%	ERROR:#N/A

Tables

General	Score	Rating	Score
> 80	4	Did Not Meet	0
> 50 & <=80	3	Offerer Did Not Address	1
> 20 & <=50	2	Partially Meets	2
> 0 & <= 20	1	Meets	3
<= 0	0	Exceeds	4

File details come from the government source that posted it. Updated Mar 21, 2025.