Exhibit 1 SOW Appendix A Reports_Final.xlsx

XLSX spreadsheet 99 KB Posted

Attached to
Managed Network Services (MNS)
Solicitation number
DIR-CPO-STS-609
Issued by
Travis County, Austin City, Texas

About this file

This document is a Statement of Work Appendix detailing reporting requirements for the Texas Department of Information Resources (DIR) Shared Technology Services Program's Managed Network Services (MNS) contract (RFO DIR-CPO-STS-609). The appendix establishes comprehensive reporting standards across two primary categories: Service Component Provider (SCP) Reports and Enterprise Reports. SCP Reports are generated by individual service providers and include incident reports (real-time), vulnerability reports (monthly), compliance scanning reports (monthly), MSBC health checks (quarterly), and intrusion detection reports (real-time). Enterprise Reports are centrally managed by the Master Service Integrator (MSI) and include operational reports such as service monitoring, security availability, asset inventory management, capacity management, availability management, and software/hardware tracking. All reports are published to the STS Portal, with data provision and creation responsibilities clearly designated between the successful respondent and the MSI.

The reporting framework encompasses security, compliance, asset management, incident management, change management, service desk operations, project status, and financial tracking across all DIR customers. Critical reports include daily managed security service reports, monthly security incident reports, semi-annual privileged ID reports, and monthly SLA compliance reports by customer. The document specifies that the successful respondent must create reports using designated tools and provide supporting data to the MSI for publication, with most operational reports distributed monthly unless otherwise noted as real-time or quarterly. This comprehensive reporting structure ensures DIR maintains visibility into service performance, security posture, asset inventory accuracy, capacity planning, availability metrics, problem resolution trends, and compliance status across all managed network services delivered through the STS program.

View the file

Other files

File Type Posted
MSA Att 1 Definitions Table_DIR-CPO-STS-609.docx DOCX document
Exhibit 2 Financial Provisions and Pricing Requirements_Final.docx DOCX document
RFO Att A Respondent Information Form_Final.docx DOCX document
Exhibit 1 SOW DIR-CPO-STS-609_MNS_Final.docx DOCX document
Exhibit 2 Att 2.2 Financial Responsibility Matrix_Final.xlsx XLSX spreadsheet
RFO Att H_State of Texas Subcontracting Plan Form_06.2026.pdf PDF
RFO DIR-CPO-STS-609_MNS_Final.docx DOCX document
RFO Att E VADSIR_WCAG 21_Final.docx DOCX document
Exhibit 1 SOW Att 1.4 Key Personnel_Final.docx DOCX document
MSA Att 3 Source_Code_Escrow.docx DOCX document
MSA Template DIR-CPO-STS-609.docx DOCX document
MSA Att 4 Form of Parent Guaranty.docx DOCX document
Exhibit 2.1 Att 2.1 Pricing and Volumes_Final.xlsx XLSX spreadsheet
RFO Att F Questions and Answers Form_Final.docx DOCX document
RFO Att D VPAT 2.5 WCAG_Nov 2023_Final.docx DOCX document
RFO Att G Exceptions_DIR-CPO-STS-609_Final.xlsx XLSX spreadsheet
Exhibit 1 SOW Att 1.3 SMM Content and Organization_Final.docx DOCX document
MSA Att 5 CJIS Security Addendum.docx DOCX document
MSA Att 2 Insurance and Risk of Loss.docx DOCX document
RFO Att C PDAA Vendor Self Assessment.xlsx XLSX spreadsheet
RFO Att B Technical Solution Summary Document_Final.docx DOCX document
Exhibit 1 SOW Att 1.2 Service Level Definitions_Final.docx DOCX document
Exhibit 1 SOW Att 1.1 Service Level_Deliverable Matrix_Final.xlsx XLSX spreadsheet
Show all 23

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Title Page

Texas Department of Information Resources
Shared Technology Services Program
Managed Network Services (MNS)
Statement of Work Appendix A Reports

DIR-CPO-STS-609

&K000000Managed Network Services (MNS) RFO DIR-CPO-STS-609

&K000000&F &A Page &P of &N

Contract Change Log

Contract Change Log
CCR No.Amendment No.DateDescription of Changes

&"Segoe UI,Regular"&K000000Managed Network Services (MNS) &"Segoe UI,Regular"RFO DIR-CPO-STS-609

&"Segoe UI,Regular"&K000000SOW Appendix A Reports &"Segoe UI,Regular"&A &"Segoe UI,Regular"Page &P of &N

Overview

Overview

This Attachment contains a summary description of the format, content, and frequency of key reports required by DIR and DIR Customer.

SCP Reports Tab
Column NameColumn Description
Report NameName of report
DescriptionShort description of the report and report content
FrequencyHow often the report is distributed.
RecipientDIR or DIR Customer for whom report is created.
Report LocationWhere the report is published; Portal, email etc.…
Report Data and CreationEach column indicates which Service Provider provides the data for the report and which Service Provider creates the report.
Enterprise Reports TabNote: All Enterprise Reports are provided by the MSI via the MSI's Systems and Tools. SCPs shall not create these reports individually.
Column NameColumn Description
Report NameName of report
DescriptionShort description of the report and report content
Report LocationWhere the report is published; Portal, email etc.…
Report Data and CreationEach column indicates which Service Provider provides the data for the report and which Service Provider creates the report. Note: All Enterprise Reports are provided by the MSI via the MSI's Systems and Tools. SCPs shall not create these reports individually.
NOTE: All days are calendar days unless otherwise noted.

&"Segoe UI,Regular"&K000000Managed Network Services (MNS) &"Segoe UI,Regular"RFO DIR-CPO-STS-609

&"Segoe UI,Regular"&K000000SOW Appendix A Reports &"Segoe UI,Regular"&A &"Segoe UI,Regular"Page &P of &N

SCP Reports Report Data and Creation MSI publishes all Reports.

Column indicates who:

(C) creates Report for publication, (D) provides data to MSI

Report NameDescriptionFrequencyRecipientReport
LocationReport Generator ToolMSISuccessful

Respondent

MNS - specific ReportsReports identified in Exhibit 1 - Statement of WorkMonthlyDIRSTS PortalCD
Incident ReportReport showing realtime incidents and status for the DIR Customer environment.

1. Risk items identified during scans or Service delivery

2. Summary of actions taken

3. Recommendations for additional changes for additional protectionsRealtimeDIRSTS PortalCD
Vulnerability ReportReport detailing vulnerabilities in the DIR Customer Landscape

1. Provide detail of the report and compliance requirements

2. Provide detail of the actions taken to resolve

a. Permanent Fix

b. Temporary FixMonthlyDIRSTS PortalCD
Vulnerability Compliance Scanning ReportGenerate a report detailing areas of non compliance, the report shall detail the:

1. Areas of non-compliance

2. Potential Risks

3. Recommend actions

MonthlyDIRSTS PortalCD
MSBC HealthcheckSTS Customer MSBC compliance and remediation; compliance with Security PlanQuarterlyDIRSTS PortalCD
Intrusion DetectionReport on intrusion attempts and success/failure of prevention systems. Failures generate Incidents and Alerts generate Service Request.Real-timeDIRSIEM DashboardCD

&"Segoe UI,Regular"&K000000Managed Network Services (MNS) &"Segoe UI,Regular"RFO DIR-CPO-STS-609

&"Segoe UI,Regular"&K000000SOW Appendix A Reports &"Segoe UI,Regular"&A &"Segoe UI,Regular"Page &P of &N

Enterprise Reports Note: All Enterprise Reports are provided by the MSI via the MSI's Systems and Tools. SCPs shall not create these reports individually. Report Data and Creation MSI publishes all reports. Column indicates who:

(C) creates report for publication, (D) provides data to MSI

Report NameDescriptionReport
LocationMSIMNS
Service Monitoring ReportAll Services associated with MNS and as identified by DIR Customer; other contents TBD.STS PortalCD
Security Availability ReportIncidents of unavailability related to Services (NOC, DIR Customer managed devices)STS PortalCD
CMDB Update RequestsListing of all Configuration Items in CMDB that have an open Change Management ticket assigned to them.STS PortalCD
Asset Change Activity Report
List of Configuration Items that have been Decommissioned, deleted and additions to CMDB.STS PortalCD
Asset Inventory and ManagementProduce periodic reports as necessary, and respond within designated timeframes to queries and requests concerning the inventory data or supporting information. At a minimum, such reports shall include:

Exception reports on errors and corrections, by DIR Shared Service Customer; and Reports on the results of periodic audits and inventories.

STS PortalCD
CMDB Logical / Physical Inventory Reconciliation ReportReport of update and reconciliation of CMDB (after initial asset inventory and logical relationship mapping) to e-discovery data.STS PortalCD
Asset inventory Summary ReportsProvide integrated Asset Inventory reports in a formats agreed with DIR at various aggregated levels by Customer, MSI and Third Party Vendor that, at a minimum, includes:

Provides statistics, lists and charts illustrating the assets in the STC supported environment.

Provides a summary with drill-down details of all assets.

Provides DQM reconciliation summary and detail reports with the inputs, processing and outputs from the DQM reconciliation process Provides reports on Incidents, Problems and Changes by asset.

STS PortalCD
Software Installs and Upgrades AppliedUnderstand what changes have been made to from a Software perspective.
Provide a list of installs and upgrades that have been performed and the Hardware those installs and upgrades were made upon.STS PortalCD
Unauthorized Software ReportReport on Equipment with the presence of any unauthorized or non-standard Software.
Additional Clarification: Assist in ensuring that unauthorized software is not installed in the environment. Also, provide information about equipment that does not have the current set of standard software installed.STS PortalCD
Software and Hardware Contracts by DIR Customer by ExpirationAssist Customer in renewing Maintenance Contracts according to agreed upon timeframes. Understand what Maintenance Contracts a DIR Customer has and how much time is remaining. List Maintenance Contracts for which the Maintenance renewal date has past.STS PortalCD
Software & Hardware Maintenance/Support AgreementsAssist in ensuring that all in-scope Applications have Maintenance and Support agreements. Provide a list of in-scope Applications and the Maintenance and Support agreement associated with the CI. For each Maintenance and Support agreement show the expiration date.STS PortalCD
Capacity Management ReportPublish regular software Capacity Management reports to Customers, which at a minimum will include current/recent utilization (and trends) compared to normal utilization, Service Levels, and previously identified baselines.

Produce monthly reports on the current usage of resources, trends and forecasts and exceptions, in a format agreed to by DIR, that at a minimum includes the following:

enabling visibility into the overall service health performance and trends based on utilization, availability, and technology currency

Visibility into capacity-related Incidents and ProblemsSTS PortalCD
Availability Management ReportProvide a monthly report in a format agreed upon with DIR that, at a minimum, includes the following:

Compare performance and Availability statistics for each Application/environment with planned performance and Availability.

Provide a list of all Outages by DIR Customer, linked to an Incident, including the date and time the Outage commenced, its duration, and the affected infrastructure and Applications.

Provide trend analysis of the performance for each Application and Environment during the thirteen (13) most recent months Report on proposed preventative maintenance activities. Provide DIR with recommendations of preventative maintenance options.

Provide regular reporting with respect to the following measures for all services and components for both current reporting period and trend over the prior twenty-four (24) months, and make available through the Portal:

Number and impact of instances of unavailability.

Mean time to restore.

Mean time between Service/System Incidents.

Mean time between failure.

Cost and impact of unavailability.

Provide regular reporting on the Availability of Service Management Systems (e.g. Incident Management, Request Management, Capacity Management) and the impact on Service Provider(s) ability to provide Services.

STS PortalCD
Digital Capacity PlanCurrent usage of resources, trends and forecasts and exceptions. Supports the on-going program of Capacity Management.STS PortalCD
Application DR Recovery Time Objective (RTO) and Recovery PriorityList of Applications for DR - by DIR and DIR Customer. Source of RTO data is the CMDB.STS PortalCD
Daily Managed Security Service ReportDaily security dashboard: scan results, OEM security/vulnerability announcements, previous 7-day (calendar days) window, open tasks/incidents, security tickets.STS PortalCD
Monthly Security Incident Reports (SIRS)List of Security Incidents and their statusSTS PortalCD
Monthly Security Status ReviewRoll-up of multiple sources:

Monthly Security Updates Monthly Application Security Services Monthly Identity and Access Management Assessments status report Monthly Background Checks TDCJ and DFPS status report Monthly Documentation and Process status reports Monthly MSBC (Configuration Compliance) status reports (number of exceptions, number pending, DIR Customer issues with MSBC implementation (delays in implementation, DIR Customer failure to submit exceptions, etc.)

Monthly Antivirus/Malware status report

Monthly Security Reports information derived from ISS Security ServicesSTS PortalCD
STS Portal Access Review ReportList of who has access and last use of that access.STS PortalCD
Semi-Annual Privileged ID ReportDIR Customer Privileged ID report; validating what is in Security Clearance Database to what is coming from each SCP.STS PortalCD
Monthly On-boarding/Off-boarding ReportIdentify new personnel on-boarded and off-boarded personnel.STS PortalCD
Access Management ReportReport on all Access Requests and their status, access rights granted or removed, approver and dates of the request lifecycle.STS PortalCD
Shared Technology Services InvoiceDIR Invoice. Automated detailed billing feeds supporting SCP invoiced Services and Customer chargebackSTS PortalCD
Invoice Dispute MetricsInvoice dispute statistics including dispute aging and log.STS PortalCD
HUB Spend ReportTracks spending by Service Provider with HUB-qualified subcontractors.STS PortalCD
Charges Forecast ReportForecast of Charges trends and projected demand.STS PortalCD
RU Trend ReportsShows growth/decline in RUs over the past 18 months.STS PortalCD
Service Level Credit and Earnback ReportTracks all SLA credits invoiced at the DIR level and any prior period adjustments to credits in the appropriate month of service. Indicates whether and what portion of a credit in each SLA performance measure has lost earn back and what portion remains eligible for earn back.STS PortalCD
Executive Operations Review ReportExecutive overview of monthly statistics for Incident, Change, Backups, Restores, Requests, Projects and PBIs.STS PortalCD
Average Close Time TrendChart - Average Incident close time - 6 month view.STS PortalCD
Daily Status ReportListing of all Open P1 & P2 Incident tickets.STS PortalCD
Distribution of Resolution TimeChart - Incident Distribution of Resolution Time for P1 & P2.STS PortalCD
Incident & Change DashboardSummary of Incident / Change tickets.STS PortalCD
Incidents Caused by ChangesSummary of Incidents caused by Change requests.STS PortalCD
Incident Upgrade ReportSummary of Incident tickets where priority is upgraded.STS PortalCD
P3/P4 IncidentsMultiple charts detail P3 / P4 Incidents - age, type, resolution.STS PortalCD
Monthly Incident Management ReportKey issues relating to Incident Management processes. Number of Incidents during the month, grouped by severity, service, agency, region, classification or other criteria as appropriate. List of Incidents, short description, reference number, and a shortcut to detailed description. Detailed description, including timing of activities. Links to Problems and Known Errors. Trend analysis of the Incidents reported during the thirteen (13) most recent months. Calculate metrics and provide monthly reports to DIR and Customers, which include:

The number of Incidents.

Sources of the Incidents.

Frequency regarding the types or categories of Incidents.

The duration of open Incident (average and quantities by age).

Number and percentage of Incidents Resolved upon first contact.

Trending metrics in terms of MTTRS (mean time to restore service) by category, priority and by service or SLA.

Number and percentage of SLA impacting Incidents.

Number and percentage of Incidents (by category, priority, service and SLA) that were handled within the SLA targets.

Number and percentage of Incidents (by category, priority, service and SLA) reopened.

Number and percentage of Incidents (by category, priority, service and SLA) reoccurring.

Number and percentage of Incidents that have resulted in the creation of problem records.

Percentage (by category, type and priority) of Incidents that were resolved by use of an Incident Model;

Number and percentage of Incidents escalated by organization, category, priority and Service.

The association of Incidents by cause and resolution by Service Component.

Other pertinent information regarding Incident Resolution, including Service Level measurement reporting.STS PortalCD
All Open Changes at Customer and Enterprise Levels
Report all Open changes, high risk, past Due, three month look ahead. Includes at a minimum a breakdown of metrics by type, category, priority, effected service or system, and success/failure.

Provide integrated CAB reports containing all changes (both digitally and traditionally managed) in a format agreed with DIR that, at a minimum, includes:

The status of all Changes active at the beginning of the week and all Changes raised during the week.

The Changes to be implemented the following week.

The Changes submitted for approval.

Change Advisory Board method used for review and approval (e.g., digital CAB, traditional meeting) Provide statistical reporting on change activity to DIR as requested.

Maintain a list of changes reclassified as standard and associated justification.

This report will offer filtered visibility to allow a Customer-specific view or an Enterprise view based on organizational role.STS PortalCD
Project and Procurement StatusMaster Project and Procurement list. Status of all solution requests - includes custom and commodity procurements, catalog requests, RFS. Includes status of all Ideas, Demands, and Projects. Includes status of solution requests (Demands) assigned to standard resources, project bench resources, and staff augmentation resources.STS PortalCD
Open Projects Status ReportStatus report will include, at a minimum, the following: (a) any milestones achieved; (b) any variances to the schedule set forth in the applicable Solution Proposal; (c) if the Project is behind schedule, a recovery plan that describes the actions that Service Provider will undertake in order to return to such schedule; (d) Deliverables and other Work Product that have been created, developed, and/or completed, in whole or in part, pursuant to the Service Proposal or otherwise as part of the Project and the status of each such Deliverable and other Work Product; (e) variances, if any, to the specifications of the Project; (f) any charges incurred to date, including hardware, software, labor and any other charges associated with the performance of the Project and execution of the Service Proposal, to the extent that such charges are relevant to STC Customer’s payment obligations; (g) an identification of any potential known or reasonably anticipated risks regarding the Project (such as potential disruptions to STC Customer operations), and the actions that would need to be taken in order to mitigate and/or eliminate such risks; and (h) any relevant issues identified by either Party since the previous report.STS PortalCD
Service Evolution / Enterprise Projects DashboardMaster Project and Procurement list for Service Evolution and Enterprise projects. Status of all solution requests - includes Ideas, Demands, and Projects.STS PortalCD
RCA ReportSummary RCA Tracking Report.STS PortalCD
Problem Management ReportPercentage and number of Problems in total and grouped by category, priority, severity, status, DIR Customer, system/component, region, classification or other criteria as appropriate. Report to include:

Statistics on total numbers of Problems.

Logged (by requestor, site, category, summary, detail) Outstanding (by assigned group, assigned manager, assigned owner, category, site, status, summary, detail, aging timeframe) Completed (by assigned group, assigned manager, assigned owner, category, site, status, summary, detail, resolution timeframe, within target timeframe, outside of target timeframe).

Repeat Problems.

SLA Performance.

Problem trends and analysis.

The percentage and number of Problems and Corrective Actions in total and grouped by category, priority, severity, status, Customer, system/component, region, classification or other criteria as appropriate. Information regarding Major Problem Reviews, including all details set out above.

Information regarding Problem analyses and RCAs conducted in the previous period.

Problem trend analysis findings.

Information regarding new Known Error records and/or workarounds added to the Known Error Database / Knowledge Database (including number, category, priority, etc.).

Details on the use and utility of the Known Error Database / Knowledge Database.

Details regarding open Problem / Known Error, including identification number, description, status, date/time of record open, status description, etc.

Results of reviews of Incidents to identify recurring Incidents and associated Problems.

Tracking information as to escalations, contacts, follow-ups and commitments.

Tracking information as to requests from DIR and Customers’ to initiate Problem Management.

Any issues relating to the Problem Management process, such as any information that may improve or facilitate a better Problem Management process, including decisions to be made by DIR and Service Provider.

Trend analysis of Problems reported during the thirteen (13) most recent months.

STS PortalCD
Monthly Service Request ReportProgress toward fulfillment and status of all Service Requests, committed fulfillment times, anticipated completion times and status, ownership and activities toward fulfillment and changes in service request status throughout the service request lifecycleSTS PortalCD
P3/P4 User RequestsChart of P3 & P4 open request tickets.STS PortalCD
Service Request ReportShow weekly demand snapshot and monthly trends of: Resource hours as listed in Service Now, Time to Solution, Time to Implement and Backlog of Pre Solution, Solution, Implementation.STS PortalCD
Risk Mgmt. Meeting Status ReportsConduct regularly scheduled Risk Management meetings.
Document and publish meetings status reports to all relevant stakeholders, including DIR, other Service Component Provider(s) and authorized Third Party Vendors.STS PortalCD
Individual Monthly Reports for Critical Service LevelsEnterprise compliance reporting for Critical Service LevelsSTS PortalCD
Individual Monthly Reports for Key Service LevelsEnterprise compliance reporting for Key Service LevelsSTS PortalCD
Various reports and data required to validate SLAsDetailed element data to validate SLA.STS PortalCD
Monthly SLA Report by DIR Shared Services CustomerCustomer-level compliance reporting for Critical Service Levels and Key Service LevelsSTS PortalCD
Service Management Manual Status Updates and ReviewList of the current SMM sections in review and updated.STS PortalCD
DR Test ResultsResults achieved, comparison of the results the to the measures and goals identified in respective plans. Plan and schedule to remedy any gaps revealed during testing.STS PortalCD
DR Test ScheduleList of all the DR tests scheduled.STS PortalCD
Service Desk Management ReportingKey issues relating to Service Desk processes, improvements, script development. Status as to Service Desk staffing, training, and authorization. Integration activities and issues with other Service Desks belonging to DIR, DIR Customers and other Service Component Providers as directed by DIR. Trend analysis during the thirteen (13) most recent months. Calculate metrics and provide monthly reports to DIR, to at least include: Number of Contacts, to include all Calls, phone calls, electronic, automated or otherwise; Number of calls abandoned, average call duration, average time to answer, average time to abandon; Number and percentage of Contacts resolved; Other pertinent information regarding Service Desk operation and performance.STS PortalCD
Action Plan for Suggested Improvements to Successful Respondent's ServiceReport on Progress and improvements made.STS PortalCD
Operations DocumentationReport the assessment of operations documentation findings to DIR and DIR Customers on a regular basis, and where it is determined that documentation is inaccurate (e.g. erroneous or out of date), correct and replace such documentation.STS PortalCD
Training for Successful Respondent PersonnelReport on the effectiveness of such training and the metrics associated with each staff that received training.STS PortalCD
DIR Board ReportExecutive level Report on metrics and statistics for all Shared Technology Services Programs.STS PortalCD
Monthly Operations Statistics DashboardDashboard report showing operational statistics for Shared Technology Services Programs. Report to include, but not limited to, SLA results, Scorecard results, HW currency, SW currency and forecast, Operational statistics.STS PortalCD

&"Segoe UI,Regular"&K000000Managed Network Services (MNS) &"Segoe UI,Regular"RFO DIR-CPO-STS-609

&"Segoe UI,Regular"&K000000SOW Appendix A Reports &"Segoe UI,Regular"&A &"Segoe UI,Regular"Page &P of &N image1.png image2.png

File details come from the government source that posted it. Updated .