ESBD_383486_1732715885953_05 - 3202500034 Attachment 5 DCS.pdf

PDF 239 KB Posted

Attached to
3202500034 Visual Remote Access Services
Solicitation number
3202500034
Issued by
Travis County, Austin City, Texas

About this file

This document is Attachment 5 (Data Center Services and DCS Templates) for the Texas Workforce Commission's Visual Remote Access Services RFO #3202500034, which outlines the requirements for using the state's Data Center Services (DCS) program established by House Bill 1516. The document specifies that all hosted solutions offered in response to this RFO must be hosted in the DCS program using either public or private cloud compute and managed services, unless granted a DCS exemption from DIR for SaaS solutions that meet NIST standards. The document details the available service options including fully managed or semi-managed infrastructure hosting, sandbox environments, public/private cloud services through AWS, Azure, and Google Cloud, and database services including Oracle and other standard database platforms.

The document provides comprehensive technical specifications for the DCS infrastructure, including storage tiers, compute options, networking requirements, and support responsibilities between DCS Service Component Providers (SCPs) and customers. Infrastructure specifications include options for Enterprise Exadata configurations ranging from 4+4 cores to 8+8 cores with corresponding RAM and storage allocations, Fractional Oracle environments supporting 2-60 vCPUs, and various database service levels. The document outlines the division of responsibilities between DCS providers and customers for services like monitoring, security, provisioning, maintenance, and incident management, but does not specify pricing or funding details.

View the file

Other files

File Type Posted
ESBD_383486_1732715774687_01 - 3202500034 Attachment 1 VR Terms and Conditions.pdf PDF
ESBD_383486_1733772741821_3202500034 Addendum No 1.zip ZIP file
ESBD_383486_1732716060298_12 - 3202500034 Attachment 12 HSP Form.pdf PDF
ESBD_383486_1732715831578_03 - 3202500034 Attachment 3 VPAT.doc DOC document
ESBD_383486_1732716298650_06 - 3202500034 Attachment 6 Deliverables.docx DOCX document
ESBD_383486_1732715961922_09 - 3202500034 Attachment 9 Pricing Cost Worksheet.pdf PDF
ESBD_383486_1732716091634_13 - 3202500034 Attachment 13 Data Privacy and Cyber.docx DOCX document
ESBD_383486_1732716205904_AA - 3202500034 Appendix A VR Locations.pdf PDF
ESBD_383486_1732715694252_00 - 3202500034 RFO VRAS.pdf PDF
ESBD_383486_1732715909083_07 - 3202500034 Attachment 7 Requirements.docx DOCX document
ESBD_383486_1732715806259_02 - 3202500034 Attachment 2 Execution of Offer.pdf PDF
ESBD_383486_1732715858134_04 - 3202500034 Attachment 4 PDAA.xlsx XLSX spreadsheet
ESBD_383486_1732715934863_08 - 3202500034 Attachment 8 SLAs.docx DOCX document
ESBD_383486_1732715885953_05 - 3202500034 Attachment 5 DCS.pdf PDF
ESBD_383486_1732716022838_11 - 3202500034 Attachment 11 HSP Guide.pdf PDF
ESBD_383486_1732715989976_10 - 3202500034 Attachment 10 DED.pdf PDF
ESBD_383486_1732715774687_01 - 3202500034 Attachment 1 VR Terms and Conditions.pdf PDF
ESBD_383486_1732716298650_06 - 3202500034 Attachment 6 Deliverables.docx DOCX document
ESBD_383486_1732715831578_03 - 3202500034 Attachment 3 VPAT.doc DOC document
ESBD_383486_1732715909083_07 - 3202500034 Attachment 7 Requirements.docx DOCX document
ESBD_383486_1732716022838_11 - 3202500034 Attachment 11 HSP Guide.pdf PDF
ESBD_383486_1732716091634_13 - 3202500034 Attachment 13 Data Privacy and Cyber.docx DOCX document
ESBD_383486_1732715934863_08 - 3202500034 Attachment 8 SLAs.docx DOCX document
ESBD_383486_1732715858134_04 - 3202500034 Attachment 4 PDAA.xlsx XLSX spreadsheet
ESBD_383486_1732715961922_09 - 3202500034 Attachment 9 Pricing Cost Worksheet.pdf PDF
ESBD_383486_1732716060298_12 - 3202500034 Attachment 12 HSP Form.pdf PDF
ESBD_383486_1732715694252_00 - 3202500034 RFO VRAS.pdf PDF
ESBD_383486_1732715989976_10 - 3202500034 Attachment 10 DED.pdf PDF
ESBD_383486_1732716205904_AA - 3202500034 Appendix A VR Locations.pdf PDF
ESBD_383486_1732715806259_02 - 3202500034 Attachment 2 Execution of Offer.pdf PDF
Show all 30

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

3202500034 – Visual Remote Access Services

Attachment 5: Data Center Services (DCS) and DCS Templates

1.0 DCS Infrastructure Requirements

The Texas Legislature, by action of House Bill 1516, 79th Legislature (Regular Session), established the foundation of a shared technology infrastructure and directed DIR to coordinate a statewide program to consolidate infrastructure services. Section 2054.391 requires state agencies included in the Data Center Services (DCS) program to use such services, unless otherwise approved by DIR through a Data Center Services Exemption. DIR currently has executed multi-vendor contracts to provide data center managed services for DIR Customers.

All hosted solutions offered in response to this RFO (including custom developed application, COTS, and Portal or Website managed content) must host the application or solution in the DCS program, using either public or private cloud compute and DCS managed services provided.

Respondents should comprehensively list their infrastructure or compute requirements, to be hosted in either a DCS public or private cloud, for financial review by the Texas Workforce Commission (TWC). The TWC will facilitate the process to request an estimate of the cost to host the solution within the DCS program.

If the Respondent intends to propose Software as a Service (SaaS), then the Respondent must demonstrate that the solution must clearly meets the NIST standard definition of SaaS (NIST Definition of Cloud Computing SP 800- 145). The TWC will be required to request and receive from DIR a DCS program exemption before a contract can be awarded to a Respondent.

More details about the DCS Vendor Contracts, MSAs and SOWs may be found on DIR’s website at: www.dir.texas.gov.

Respondents should provide one technical solution: either SaaS or DCS hosted and managed. If your proposal is for a hosted solution, it will need to be hosted in the State’s DCS program, which offers both public and private cloud hosting options. This program provides all server management functions including system administration, operating system management and patching, base security services, dedicated local area network connectivity, storage services, backup services and disaster recovery services. Respondents should indicate whether it is proposing fully managed or semi managed DCS infrastructure hosting and compute solutions required.

http://www.dir.texas.gov/

3202500034 - Visual Remote Access Services

Respondents are not required to estimate the cost to host within the DCS program, however, Respondents are required to provide complete technical specifications in order for the TWC to estimate.

Collectively, the DCS contracts provide participating Customers mainframe and server operations, both public and private cloud services, disaster recovery, and bulk print and mail services.

1.1 DCS Public and Private Cloud Compute and Software

Acquisition As a participating entity in the DCS program, TWC is required to acquire all in-scope infrastructure compute, services and software through the DCS program. Respondents must include complete compute and software infrastructure requirements in their response in order for TWC to estimate DCS costs.

The Successful Respondent is required to participate in the procurement process, including submitting the request for service into the DCS ServiceNow Tool, participating in the requirements gathering sessions, and validating the acquisition proposals received. Proper long-range planning is required in order to ensure compute is provisioned to meet project schedules.

1.2 DCS Process Management

The Successful Respondent will be required to participate in the defined DCS processes for incident management, problem management, change management, release management, configuration management, and request management.

1.3 DCS Public Cloud

Industry leading public cloud services available from DIR Shared Technology Services are hardened public cloud virtual data center solutions with a focus on aligning the DCS Operating Model with Industry Best Practices, technical and security assurances, and onboarding of public cloud services through AWS, Azure, and Google.

Leveraging Cloud Native tooling, the DCS Cloud Service model is poised to align to the value of Cloud Service Providers by evolving capabilities with investment in Service Evolution of the Public Cloud. Our expanded Public Cloud model delivers IaaS, PaaS, and SaaS services with products and tooling built for and within the Public Cloud to leverage the full benefits of Public Cloud services with the security assurances of DCS.

1.4 Sandbox Public Cloud Support

This operational model is intended for environments with use cases such as proof-of-concepts, sandbox, and lower lifecycle development and testing activities which can operate with network restrictions preventing communication with the STS Consolidated Data Centers and unsolicited inbound internet communication. Network connectivity to this environment is thru a secure customer VPN connection provisioned by the DCS managed service provider.

Native public cloud console access to Public Cloud IaaS services (with minimal restrictions) is available enabling customer flexibility operating in the Public Cloud.

Customers are fully responsible for services provisioned within the Sandbox support environments, with minimal SCP support provided.

1.5 Semi-Managed Public Cloud Support

The Semi-Managed Cloud operational model is intended for environments where the customer is responsible for operating system management and monitoring, application level support and associated incident and change management. This environment requires connectivity through a DCS managed Direct Connect/Virtual Cross Connect (VXC) solution, delivering integration of private cloud resources with public cloud resources including STS assurances.

DCS solutions enabled for customers include the following operational functions for the semi managed environments:

• Native Public Cloud console available with full read access to the cloud environment,

• Specific console roles can be discussed with PCM,

• SaaS based log aggregation services to capture, extract, transform and load pertinent security and event details from Public cloud management environments,

• Advanced analytics and data correlation greatly extend the success of forensic research and investigation,

• Capture Azure events via OMS logs; AWS events via Cloud Trails and Cloud Watch; GCP events via Cloud Operations Suite,

• Cloud Access Security Broker solution spanning AWS, Azure and GCP providing sophisticated analytics to identify violation of policy and combat cyberthreats,

• SaaS based log aggregation services to capture, extract, transform and load pertinent security and event details from Public cloud management environments,

• Utilizing the Security Instrumentation platform (SIP) to measure against cybersecurity KPI and targets. Tests effectiveness of network, endpoint and cloud controls,

• Advanced, customizable reporting with comprehensive API access and integration across multiple platforms, and

• Endpoint protection online or offline with integration into tools such as Windows System Center for compliance and regulatory requirements and mandates.

The DCS SCP is responsible for:

• Provisioning and deprovisioning,

• Enabling Customer console and IaaS access,

• Acquiring, installing, and patching the operating system,

• Installing and maintaining antivirus,

• Performing SIEM logging, critical watch reporting and security incident response, and

• Asset discovery and CMDB integration.

1.6 Fully Managed Public Cloud Support

The Fully-Managed Cloud operational model is intended for environments where the DCS Service Component Provider (SCP) is responsible for all aspects of the service lifecycle including provisioning, deprovisioning, ongoing operating system (OS) support, monitoring, environment maintenance, customer Incident Request, Change Requests, and Work Orders. Connectivity over a new or previously existing Virtual Cross Connect (VXC) between on-premises CDC resources and cloud resources enables the extension of STS assurances to the hybrid environment.

functions for the fully managed environments:

• Read access to view inventory and state information of cloud resources,

• Usage and cost reporting and budget management,

• SaaS based log aggregation services to capture, extract, transform and load pertinent security and event details from Public cloud management environments,

• Advanced analytics and data correlation greatly extend the success of forensic research and investigation,

• Capture Azure events via OMS logs; AWS events via Cloud Trails and Cloud Watch; GCP events via Cloud Operations Suite,

• Cloud Access Security Broker solution spanning AWS, Azure and GCP providing sophisticated analytics to identify violation of policy and combat cyberthreats,

• SaaS based log aggregation services to capture, extract, transform and load pertinent security and event details from Public cloud management environments,

• Utilizing the Security Instrumentation platform (SIP) to measure against cybersecurity KPI and targets. Tests effectiveness of network, endpoint and cloud controls,

• Advanced, customizable reporting with comprehensive API access and integration across multiple platforms,

• Endpoint protection online or offline with integration into tools such as Windows System Center for compliance and regulatory requirements and mandates,

• Real-time intervention, blocking, and prevention for any in-process runtime attacks, includes,

• Integration with 3rd party tools across the entire cloud native lifecycle, and

• Web Application Firewall protecting applications in the cloud with consistent policies and management capabilities as on-premise solutions (optional).

• Provisioning and deprovisioning,

• Enabling Customer console and IaaS access,

• Acquiring, installing, and patching the operating system,

• Ongoing operating system (OS) support,

• Installing and maintaining antivirus,

• Monitoring and environment maintenance,

• Performing SIEM logging, critical watch reporting and security incident response,

• Customer Incident Request, Change Requests, and Work Orders, and

• Asset discovery and CMDB integration.

1.7 Platform as a Service (PaaS)

DCS managed Direct Connect/Virtual Cross Connect (VXC) will be required for integration between the CDC and the Cloud Service Provider PaaS environments.

functions for PaaS environments:

• PaaS access management provisioned in alignment with DCS program service responsibility matrix distinguishing customer and service provider responsibilities,

• Read access to view inventory and state information of cloud resources,

• Usage and cost reporting and budget management,

• SaaS based log aggregation services to capture, extract, transform and load pertinent security and event details from Public cloud management environments,

• Advanced analytics and data correlation greatly extend the success of forensic research and investigation,

• Capture Azure events via OMS logs; AWS events via Cloud Trails and Cloud Watch; GCP events via Cloud Operations Suite,

• Cloud Access Security Broker solution spanning AWS, Azure and GCP providing sophisticated analytics to identify violation of policy and combat cyberthreats,

• SaaS based log aggregation services to capture, extract, transform and load pertinent security and event details from Public cloud management environments,

• Utilizing the Security Instrumentation platform (SIP) to measure against cybersecurity KPI and targets. Tests effectiveness of network, endpoint and cloud controls,

• Advanced, customizable reporting with comprehensive API access and integration across multiple platforms,

• Endpoint protection online or offline with integration into tools such as Windows System Center for compliance and regulatory requirements and mandates,

• Real-time intervention, blocking, and prevention for any in-process runtime attacks, includes,

• Integration with 3rd party tools across the entire cloud native lifecycle, and

• Web Application Firewall protecting applications in the cloud with consistent policies and management capabilities as on-premise solutions (optional).

• Maintenance and enablement of VXC and VPC/VNET ,

• Integration between public cloud IaaS services and PaaS service as needed,

• All cloud deployments,

• Enabling Customer console and PaaS access, and

• Asset/Service discovery and CMDB integration.

1.8 Virtual Cross Connect (VXC)

The DCS Service Component Provider (SCP) uses Megaport to provide a virtual networking solution that allows customers to securely connect to multiple Cloud Providers without having to establish direct connections between the individual customer and Cloud Provider.

VXCs provide dedicated bandwidth for the customer to a Cloud Provider location, including traffic segmentation. AWS and Google require one VXC per DIR Customer, whereas Azure requires two. Two VXCs are recommended for improved network resiliency.

The DCS Service Component Provider (SCP) is responsible for provisioning and management of VXCs.

1.9 Virtual Private Cloud (VPC)

A VPC is a public cloud networking construct roughly analogous to a VLAN in current Consolidated Data Centers (CDCs). It is designed to enable network and security services to the workloads that run inside the public cloud.

VPCs go by different names based on the Public Cloud provider: Google and AWS calls them VPCs, while Azure calls them VNETs. DCS prefers to use VPCs to mean the network construct used by the Public Cloud Provider.

The DCS Service Component Provider (SCP) is responsible for provisioning and management of VPCs.

1.10 DCS Private Cloud

The Data Center Services program maintains two consolidated data centers geographically separated in order to provide disaster recovery. The Texas Private Cloud (TPC) provides technology infrastructure compute and storage based on standard reference models and managed services options.

Fully managed or Semi-managed support services are available for all compute platforms with multiple service levels.

• Consolidated Fully Managed - Premier Plus

• Consolidated Fully Managed - Premier Plus (UNIX)

• Consolidated Fully Managed - Premier

• Consolidated Fully Managed - Premier (UNIX)

• Consolidated Semi Managed - Standard

• Consolidated Limited Managed – Sandbox

The DCS program supports operating system standards that include:

• Microsoft Windows,

• Red Hat Linux,

• SUSE Linux,

• OES Linux,

• AIX (non-standard - by advanced exception approval only), and

• Oracle Linux (Enterprise Exadata and Fractional Oracle only).

Data is protected by the Dell EMC Data Protection Suite, which writes to replicated tapeless systems in the alternate data center for Disaster Recovery purposes.

All DCS computer platforms use DCS enterprise SAN storage except for the Fractional Intel VxRail hyper-converged infrastructure (HCI) that uses an internal VSAN technology.

The DCS program offers CDC virtual compute solutions for Intel (Windows / Linux), and IBM Power System Platforms (by exception approval only) based on customer business needs. See below for more information.

1.11 Fractional Intel Virtualization (Consolidated Data Center) The Fractional Intel Virtualization solution is an Infrastructure as a Service (IaaS) providing an Intel virtualized environment based on VCE/VBlock converged infrastructure, Dell EMC VxRail hyperconverged infrastructure (HCI)or the Cisco UCS compute systems supporting Windows and Linux operating systems.

Reliability is supported with the use of VMware virtualization and high availability clustering.

Flexible configurations are available in 1vCPU and/or 2GB memory increments. Maximum limits are 500GB memory and 72vCPU for HCI or 64vCPU for VBlock.

Optionally, customer-dedicated Cisco Intel UCS blades are supported with customer-specified compute, memory, and hypervisor or bare metal configurations that leverage the shared VBlock or UCS infrastructure.

1.12 Enterprise SAN Storage

The DCS program provides enterprise SAN storage services using a four-tiered approach. The tiered storage methodology supports the use of various types of data storage architecture, pricing, and recovery. The solution is based on DellEMC Vmax Enterprise Storage, is protected by redundant architecture, and can be replicated to an alternate Consolidated Data Center

(CDC).

1.13 Non-HCI Server SAN Storage Tiers

• Tier 0 - All SSD storage: Highest IOPS and fastest response times

• Tier 1 – Ultra high-performance storage: Generally, for very high database transactions

• Tier 2 – High performance storage: OS and production databases requiring high performance

• Tier 3 – Medium performance storage: Standard storage requirements

1.14 HCI VMware vSAN Storage Tiers

The VxRail HCI uses VMware vSAN which provides all flash storage to the hyper-converged environment. VMware vSAN is a hyper-converged, software-defined storage (SDS) product developed by VMware that pools together direct-attached storage devices across a VMware vSphere cluster to create a distributed, shared data store.

1.15 HCI Server vSAN Storage Tiers

Tier 1 – Ultra high-performance storage: Generally, for very high database transactions

Tier 2 – High performance storage: OS and production databases requiring high performance

• Tier 3 – Medium performance storage: Standard storage requirements

1.16 Private Cloud Managed Support Services (available for all compute platforms)

1.17 Fully Managed Private Cloud

The Service Component Provider (SCP) is responsible for all aspects of the IaaS lifecycle, including provisioning the:

• Ongoing operating system (OS) support,

• Ongoing database and middleware support (where optional services are selected),

• Hardware maintenance,

• Incident, change and customer service request tickets,

• Service Catalog Requests,

• Asset discovery and CMDB integration,

• All base security functions (i.e. antivirus, patching, SIEM), and

• Optional advanced security available.

1.18 Semi-Managed Private Cloud

The customer is responsible for OS support and all application level support as summarized below.

SCP Responsibilities

• Provisioning

• Acquiring, installing, and patching the OS

• Installing and maintaining antivirus protection

• Performing SIEM logging, critical watch reporting and security incident response

• Performing hardware container maintenance and reboots

• Responding to Incidents and Service Catalog Requests related to hardware

• Asset discovery and CMDB integration

Customer Responsibilities

• OS management

• Monitoring

• Creating and managing Incidents, Change Requests, and Service

Catalog Requests

1.19 Database Standards

Database management support for multiple database platforms are classified as two groups. Each platform allows for support and management of a database environment with customer privileged access and with varied availability requirements for each unique customer.

1.19.1 Standard Databases

• Oracle

• MS SQL

• MySQL

• DB2

1.19.2 Non-Standard Databases

• Sybase

• Informix

• Adabas

1.20 Oracle Database Offerings

1.20.1 Enterprise Exadata

Enterprise Exadata is an option for Oracle Real Application Cluster (RAC) databases requiring high performance and high availability. Enterprise Exadata is a shared Oracle engineered system that provides an isolated multi-tenant environment. Enterprise Exadata provides virtual machine clusters consisting of two Oracle virtual machines with a minimum configuration of 4 cores and 64 GB RAM each and up to 9600 GB of storage and can be scaled up with additional cores, memory and storage.

Table 1.20.1 – Exadata Configuration Options

Exadata Configuration Options

Cores RAM Storage

(GB)

Enterprise Exadata VM Cluster Small 4 + 4

64 + 64 9600

Enterprise Exadata VM Cluster Medium 6 + 6

96 + 96 14400

Enterprise Exadata VM Cluster Large 8 + 8

128 19200

Enterprise Exadata VM Additional cores (2+2) 2 + 2

32 + 32 4800

Enterprise Exadata VM Additional RAM (8

GB + 8GB) -

8 + 8 -

Enterprise Exadata VM Additional ASM Storage 512 GB - - 512

1.20.2 Enterprise Exadata Minimum Oracle Database Software

and Option requirements:

Oracle Enterprise Edition

Oracle Real Application Clusters (RAC)

Oracle Diagnostics Pack

Oracle Tuning Pack

Oracle Database Vault

Oracle Advanced Security

Database Lifecycle Management Pack

Oracle Cloud Management Pack

Oracle Partitioning

1.20.3 Fractional Oracle

Fractional Oracle is a potential refresh target for small databases and Oracle applications. Fractional Oracle alleviates the software licensing issues with running Oracle Database software on VMware because it allows for sub-capacity licensing on Intel. It also provides better scalability and resiliency than bare metal servers. Fractional Oracle runs on the same converged infrastructure hardware (VBlock Cisco blades) as Fractional Intel and takes advantage of existing support resource units. However, Oracle Linux KVM is used as the virtualization software instead of VMware. Fractional Oracle supports Oracle Linux, RHEL, and Windows virtual machine operating systems.

Minimum Fractional Oracle vCPUs is 2 and can be scaled in increments of 2 to a maximum of 60 vCPU. Virtual memory can be allocated in 2 GB increments up 500 GB.

Minimum Oracle Database software requirements for Fractional Oracle.

Oracle Standard or Enterprise Edition version 19c.

Oracle RAC is not required in the Fractional Oracle environment, but it is an available option for databases requiring high availability.

1.20.4 Database Services Support Options

The DCS Database support options provide DCS customers with greater flexibility to support application development, release initiatives, and aggressive application business availability requirements. The DCS program uses a two-level approach to support.

Fully Managed: Maintains the level of support that has historically been provided for databases.

Semi-Managed: The customer has the majority of privileges and responsibilities but retains service provider support for availability, monitoring, maintenance, backups, patching and upgrades.

1.21 Private Cloud Hardware and Software Currency

The DCS hardware infrastructure is refreshed on a 60-month refresh cycle.

Operating software, database software, and application utility tools are required to be within n or n-1 of the currently supported versions of the software manufacturer. The Respondent is required to ensure the application software developed for TWC’s CCCM project will support the DCS standard hardware and software platforms as described in the DCS Standard Configurations.

1.21.1 Level I Help Desk

If needed for the solution, the Successful Respondent is required to maintain a Level I help desk to triage all calls prior to submitting an incident to the DCS Support Center. Once the Successful Respondent has determined or suspects the cause of an incident is related to a DCS infrastructure component, the Successful Respondent will log into the DCS Support Center’s system to report the incident in accordance with the DCS Services Management Manual.

1.21.2 Functions Retained by TWC – Not Provided by Data Center Services

For clarity, the following services are not provided by DCS Service Providers.

In developing your response, the Respondent should clearly understand that the requestor (agency) performs these functions as needed.

• End-user computing, including desktop, mobile, and LAN-attached multi-function devices.

• Network support, including WAN/LAN support outside of the State data centers, voice/phone support.

• Help desk (Level I – all services).

• Expert troubleshooting and support for all non-DCS services.

• Technology planning, strategies, and visioning.

• Project management.

• Disaster recovery planning and testing for all retained services.

• Business continuity planning for agency processes.

• Packaged imaging systems (scanners, servers, optical disks, etc.).

• Coordination of data center print services, including coordinating form changes with business units, volume trending.

• Data security, security design and policy development, systems access requests (directory/file, ID creation and removal, determination of access rights).

• Logical database administration.

• Application development, support, maintenance, and monitoring.

• Electronic payment processing services.

• Data import and export to the environment (FTP services).

• Reporting services.

Table 1.21.2 Shared Technology Services/Customer Program Responsibilities Overview

Services STS Customer Systems/Environment Monitoring

• IaaS/PaaS (Network, Compute, Service, Storage and OS, Middleware, Database) R

• Application R Security Monitoring and Management

• IaaS/PaaS (Network, Compute, Service, Storage and OS, Middleware, Database) - Solutions, Monitoring, Management, Patching, SIEM, CSOC (ITD/ITP, Malware, DDOS, logging). STS SIEM is for STS managed environments (IaaS/PaaS) events R

• Application R Network Provisioning and support -Direct Connect and Public Cloud Virtual networking (e.g., VPC, VNET, firewalls) R IaaS/PaaS Compute, Storage and Services Provisioning R Support Services

• Incident, Request, Change, Problem, Availability, Management R

• IaaS/PaaS (Network, Compute, Service, Storage and OS, Middleware, DB) R

• Application R

• Installation and Upgrade Support (Software

Services) R Service Request Management (i.e. startup shutdown services for IaaS, PaaS environment support) R Event Management

• IaaS/PaaS (Network, Compute, Service, Storage and OS, Middleware, DB) R

• Application R Asset & Configuration Management

• IaaS/PaaS (Network, Compute, Service, Storage and OS, Middleware, DB) R

Services STS Customer

• Application - Software discovered is populated in

STS CMDB. Agency responsibility for Business and relationship correlation of application data in MSI provided APM (Application Portfolio Management System) R

Backup and Recovery R Disaster Recovery R Production Scheduling - Application level scheduling is responsibility of customer R R

Availability Management (IaaS, PaaS) R Identity and Access Management

• IaaS/PaaS (Network, Compute, Service, Storage and OS, Middleware, DB) - Privileged Access Management for STS Provider managed Id's R

• Application - Includes DB where customer not choosing Optional STS DB support services R

• Account Lifecycle Management-For respective areas of support responsibility R R

• Active Directory - Customer Owned AD with access granted to STS as required for delivery of managed services. Customer and SCP co-exist with responsibility for respective identities. R R

2.0 Document Control

2.1 Revision History

Versio n Date Author

Title and

Company

Description

5.0 10/5/20

Sally Ward DIR Updated for Transition

2.2 SP Process Owner Approval

Versio n Name

Title and Company Date Signature

N/A

2.3 QA Review and Approval

Versio n Name

Title and Company Date Signature

5.0 Cyndi Barcio

Process Analyst, Capgemini

10/5/2020 Approved

3.0 DCS Template – Private Cloud High Level Architecture (HLA) / Rough Order of Magnitude (ROM)

What type of Service are you looking for?

Is this request for an HLA/ROM or RFS?

HLA/ROM

Solution Title

Short Description

Applicable Service

Private and Public Cloud

Private Cloud

Detailed Description

Business Justification

Target Implementation Date

Are you the Primary Contact for this request?

Primary Contact Name & Title

Primary Contact Telephone Number

Primary Contact Email

**DCS Templates and supporting documentation must be included in Response Package 1 Files (Table 3), DCS Templates, “ABC_RFO_3202500034_DCS_Templates.docx”

3.1 DCS Template – Public Cloud High Level Architecture (HLA) / Rough Order of Magnitude (ROM)

What type of Service are you looking for?

Is this request for an HLA/ROM or RFS?

HLA/ROM

Solution Title

Short Description

Applicable Service

Private and Public Cloud

Private Cloud

Detailed Description

Business Justification

Target Implementation Date

Are you the Primary Contact for this request?

No

Primary Contact Name & Title

Primary Contact Telephone Number

Primary Contact Email

3.2 DCS Template – Software as a Service (SaaS) / Platform as a Service (PaaS)

Provide brief 40-character summary

Are you providing a quote with this request? Y/N

Is this product available through a DIR Cooperative Contract? Y/N

Please provide the DIR Cooperative Contract Number

What SaaS or PaaS are you looking for?

Select the cloud provider

Amazon AWS

Microsoft Azure

Google Cloud

Other

Provide Details

Please provide product details.

Please provide product details such as functionality (ie database, data analysis, DevOps) and the infrastructure that is included in the SaaS/PaaS product offering (ie compute, storage, etc).

What is the business justification for this request?

Procurement Terms

It is incumbent on the governmental entity seeking permission from DIR to acquire technology products or services through the state’s Shared Technology Services program to ensure that it follows applicable state procurement statutes and rules, including but not limited to Texas Government Code Sec. 2157.068 relating to the acquisition of Automated Information Systems (AIS) commodity items.

I agree this procurement follows applicable state procurement statutes and rules.

All documentation related to the required procurement activities for this request must be retained and you agree to provide this to the STS program if requested.

I agree all documentation will be retained and presented to STS if requested.

Terms & Conditions

Disclaimer: It is important to note that billed rates WILL VARY based on actual Enterprise RU consumption at the time the service is received. Please note the multi-year estimate may fall outside the current Vendor contract terms, which could impact future fiscal year pricing.

Termination of Services: If DIR Customer terminates certain Services, that it requested and approved, for convenience, DIR Customer shall pay the remaining requisite unrecovered costs that have already been incurred prior to the notice of termination, such unrecovered costs will be calculated in accordance with the relevant DIR Shared Services Contract, SMM, or other DIR Customer approved terms. DIR Customer understands that it may not be able to terminate services or receive any refund of a pre-payment after approving the relevant financial solution.

Above standard STS terms must be agreed to before this request may be submitted.

I Agree

Attachment 5: Data Center Services (DCS) and DCS Templates

File details come from the government source that posted it. Updated .