The file's text, extracted by GovTribe without its formatting.
Exhibit 3.2 (Service Level Definitions) Solicitation No. 5400028075
Managed Cloud Services
Exhibit 3.2 Service Level Definitions
Solicitation No. 5400028075
Table of Contents
| Offeror Guidelines | 2 | |
| Offeror Instructions | 2 | |
| 1 | Critical Service Levels | 3 |
| 1.1 | Service Provider Services Availability | 3 |
| 1.2 | Incident Resolution Time - Priority 1 and Priority 2 Incidents | 4 |
| 1.3 | Service Request Fulfillment | 6 |
| 1.4 | Root Cause Analysis (RCA) Delivery | 8 |
| 1.5 | RCA Corrective Action Implementation | 9 |
| 1.6 | Solution Proposal Delivery | 10 |
| 1.7 | Solution Implementation | 12 |
| 1.8 | Data Recovery Request | 14 |
| 1.9 | Change Management Effectiveness | 17 |
| 1.10 | Vulnerability Management | 18 |
| 2 | Key Service Levels | 20 |
| 2.1 | Invoice Dispute Resolution | 21 |
| 2.2 | ROM Proposal Delivery | 22 |
| 2.3 | Incident Resolution Time - Priority 3 and Priority 4 Incidents | 23 |
Offeror GuidelinesThis Exhibit 3.2 (Service Level Definitions) contains specific functional requirements that the Offeror must meet in order to successfully perform the requested Services. The response must address all requirements contained in this Exhibit according to the instructions below and be in the prescribed format.
Offeror Instructions1. The Offeror’s response to the RFP shall reflect and comply with the information contained in this Exhibit 3.2 (Service Level Definitions).
2. If the Offeror wishes to suggest changes to the content or requirements contained in this Exhibit 3.2 (Service Level Definitions), these suggestions shall be summarized and submitted separately as detailed in RFP Exhibit J.2.1 (Exceptions). Any notation of objections or issues associated with this Exhibit 3.2 (Service Level Definitions) content does not eliminate or modify the requirements herein or of this RFP, and the Offeror’s Proposal must not assume any incorporation of the Offeror’s suggested changes.
3. The Offeror should not view the possibility of requesting changes as an opportunity to rewrite the entire RFP. The State expects the Offeror to comply with the requirements as written, and changes should only be made for minor clarifications or if an Offeror will not comply with the requirement as written.
4. The Offeror will complete the highlighted sections Service Provider to Complete in each of the Critical Services Levels and Key Measurements by the following methods:
a. Metric Exclusions: Offeror to include in RFP Exhibit J.2.1 (Exceptions).
b. Collection Process: Not required for initial RFP response; this will be completed at a later stage in the procurement.
c. Reporting Tools: Offeror to include reporting tools in Section 4.20 Service Level Management of Exhibit 2.2 (MCS Solution).
Critical Service Levels This Section sets forth qualitative descriptions of the Critical Service Levels. The numerical Minimum Service Levels, Expected Service Levels, and commencement of obligations associated with such Critical Service Levels are set forth in Exhibit 3.1 (Service Level and Deliverable Matrix). Where reporting tools are identified below, State Agency Customers are tracked in the State of South Carolina, Department of Administration’s (Admin’s) IT Service Management (ITSM) system, and Service Level management Reporting system, while Other Government Entity Customers are tracked in Service Provider systems, and reported to Customers by the Service Provider. Comment by George Assenheimer: Added to call out the State Agency customer activity is tracked in the Admin ServiceNow, and Other Gov Entity activity is tracked in the Service Provider ITSM.
Service Provider Services Availability
SERVICE LEVEL NAME
Service Provider Services Availability
| SERVICE LEVEL TYPE |
| Critical Service Level |
| METRIC DESCRIPTION |
| The Service Level “Service Provider Services Availability” measures the percentage of time the Services that the Service Provider provides and manages (e.g., IaaC provisioning, monitoring, management) are Available to the using system or end user during the applicable Measurement Window. |
If downtime occurs for a Service, the Outage is counted against the Service, and the Service is considered unavailable for purposes of this Service Level.
| METRIC INCLUSIONS and DATA SOURCES |
| Each Service and related CIs are identified in the CMDB. Scheduled hours of operations and maintenance windows for each supporting element related to the Services will be maintained in the Service Management Manual (SMM). |
| METRIC EXCLUSIONS |
| Individual Services unavailable as a result of events in which the root cause is determined to be outside the control of the Service Provider. |
Failures that do not result in any Outage.
| DAYS OF MEASUREMENT |
| 365(366) |
| MINIMUM SERVICE LEVEL |
| 99.95% |
| EXPECTED SERVICE LEVEL |
| 99.99% |
| ALGORITHM |
| The Service Level calculation for “Service Provider Services Availability” is (a) the total number of available minutes during the Measurement Window, minus (b) the total number of unscheduled downtime, divided by (c) available minutes during the Measurement Window, with the result expressed as a percentage to two decimal places. |
Available minutes = the total number of minutes in a month (60 minutes x 24 hours x number of days in the month) for the service.
Unscheduled Downtime = the total number of available minutes in which a service is not available for reasons outside of metric exclusions and solely due to the fault of the Service Provider.
| COLLECTION PROCESS |
| Service Provider to Complete |
| REPORTING TOOLS |
| Service Provider to Complete |
Service Level Management Reporting System
| RAW DATA STORAGE (ARCHIVES) |
| Data used to calculate the Service Level result for reporting will be stored in the Service Level Management Reporting System, which will be accessible to users via report drill-down functionality for a rolling 13 months. |
| METRIC REPORTING |
| |X| Monthly |
|_| Quarterly |_| Semi Annual
Incident Resolution Time - Priority 1 and Priority 2 Incidents
SERVICE LEVEL NAME
Incident Resolution Time –Priority 1 and Priority 2 Incidents
| SERVICE LEVEL TYPE |
| Critical Service Level |
| METRIC DESCRIPTION |
| The Service Level for “Incident Resolution Time –Priority 1 and Priority 2 Incidents” measures the percentage of time Service Provider Resolves Priority 1 or 2 Incidents (Level 2 and Level 3 Support) assigned by the Service Desk, or automated event to Incident creation, within the applicable timeframes. |
| METRIC INCLUSIONS and DATA SOURCES |
| Includes all Priority 1 and Priority 2 Service Provider Incidents assigned to Level 2 or Level 3 Support. |
The applicable resolution timeframes are listed below.
Priority 1 Incidents: < 2 hours Priority 2 Incidents: < 4 hours
| METRIC EXCLUSIONS |
| Events determined to be outside the control of the Service Provider. Security Incidents will follow the Security Incident Management process as defined in the SMM and may be eligible for an SLA exception or as otherwise mutually agreed upon. |
| HOURS OF MEASUREMENT |
| 24 hours |
| DAYS OF MEASUREMENT |
| 365(366) |
| MINIMUM SERVICE LEVEL |
| 98.00% |
| EXPECTED SERVICE LEVEL |
| 99.00% |
| ALGORITHM |
| The Service Level calculation for “Incident Resolution Time Priority 1 and Priority 2” is the total number of Priority 1 and Priority 2 Incidents (Level 2 Support and Level 3 Support) assigned to the Service Provider for which the Resolution time is less than or equal to the relevant resolution timeframe, divided by the total number of Resolved Priority 1 and Priority 2 Incidents plus the total number of open Priority 1 and Priority 2 Incidents that have exceeded the relevant resolution timeframe, with the result expressed as a percentage. |
For purposes of clarity, note the following:
If an Incident is opened within the current Measurement Window, but its relevant resolution timeframe extends beyond the end of the current Measurement Window, then it is excluded from the current Measurement Window’s calculation (unless such Incident is actually Resolved in the current Measurement Window, in which case it is included in the current Measurement Window’s calculation).
| COLLECTION PROCESS |
| Incident tickets will be logged in the ITSM system. Incidents will be categorized and assigned to resolver teams who will work to resolve the incident and progress the ticket through the incident management lifecycle. |
Incident data will be loaded to Service Level Management Reporting system on a daily basis, where the Service Level result will be calculated and reported based on appropriate measurement criteria.
| REPORTING TOOLS |
| ITSM system |
Service Level Management Reporting system
| RAW DATA STORAGE (ARCHIVES) |
| Data used to calculate the Service Level result for reporting will be stored in the Service Level Management Reporting System, which will be accessible to users via report drill-down functionality for a rolling 13 months. |
| METRIC REPORTING |
| |X| Monthly |
Service Request Fulfillment
Service Request Fulfillment
| SERVICE LEVEL TYPE |
| Critical Service Level |
| METRIC DESCRIPTION |
| The Service Level “Service Request Fulfillment” measures the percentage of time Service Provider successfully completes Service Requests on schedule. Service Requests, which are defined as requests that do not require solution proposal development, include such requests as provisioning ID access, password resets, Service Catalog requests, etc. |
Specific target timeframes are maintained in the SMM.
| METRIC INCLUSIONS and DATA SOURCES |
| Service Requests shall be an agreed upon set of service requests as specified in the SMM. |
| HOURS OF MEASUREMENT |
| As maintained in SMM. |
| DAYS OF MEASUREMENT |
| As maintained in SMM. |
| MINIMUM SERVICE LEVEL |
| 96.00% |
| EXPECTED SERVICE LEVEL |
| 99.00% |
| ALGORITHM |
| The Service Level for “Service Request Fulfillment” is, for a given Measurement Window, the total number of Service Requests that are completed within the committed timeframes, divided by the total number of Service Requests scheduled for completion during such Measurement Window as well as all uncompleted Service Requests scheduled to be completed in a prior Measurement Window, with the result expressed as a percentage. |
For purposes of clarity, note the following:
If a Service Request is opened within the current Measurement Window, but its relevant committed timeframe extends beyond the end of the current Measurement Window, then it is excluded from the current Measurement Window’s calculation (unless such Service Request is actually resolved in the current Measurement Window, in which case it is included in the current Measurement Window’s calculation).
| COLLECTION PROCESS |
| Service Requests that do not require solution proposal development will be logged and tracked in the ITSM system. Service Requests will be categorized and assigned to resolver teams who will work to fulfill the Service Request and progress the ticket through the service request management lifecycle. |
Service Request data will be uploaded to Service Level Management Reporting system on a daily basis; this tool will filter service request tickets based on appropriate measurement criteria.
| REPORTING TOOLS |
| ITSM system |
Service Level Management Reporting System
| RAW DATA STORAGE (ARCHIVES) |
| Data used to calculate the SLA results for reporting will be stored in the Service Level Management Reporting System, which will be accessible to authorized users via inherent report drill-down functionality for a rolling 13 months. |
| METRIC REPORTING |
| |X| Monthly |
Root Cause Analysis (RCA) Delivery
Root Cause Analysis Delivery
| SERVICE LEVEL TYPE |
| Critical Service Level |
| METRIC DESCRIPTION |
| The Service Level “Root Cause Analysis Delivery” measures the percentage of time Service Provider delivers to the State, a Root Cause Analysis (RCA) within (i) ten (10) Business Days from service restoration (for Priority 1), (ii) ten (10) Business Days from request by the State, (iii) fifteen (15) Business Days from Service Level Improvement Plan initiation, or (iv) otherwise as agreed upon by the State. |
| METRIC INCLUSIONS and DATA SOURCES |
| The RCA is documented and tracked within the Problem Management process, and upon completion, is submitted by the Service Provider to the State for review and approval. |
Service Provider will provide Root Cause Analyses on the most business-critical events, as maintained in the SMM, and as requested by the State for all other Incidents.
| HOURS OF MEASUREMENT |
| 7:00 AM – 6:00 PM |
| DAYS OF MEASUREMENT |
| 10 Business Days (110 Business Hours) |
| MINIMUM SERVICE LEVEL |
| 97.00% |
| EXPECTED SERVICE LEVEL |
| 98.00% |
| ALGORITHM |
| The Service Level calculation for “Root Cause Analysis Delivery – Enterprise” is the total number of Root Cause Analyses that are delivered to the State within the required timeframe, divided by the total number of Root Cause Analyses delivered to the State during the applicable Measurement Window, with the result expressed as a percentage. |
| COLLECTION PROCESS |
| Problem investigations for Root Cause Analyses will be logged and tracked in the ITSM system. Problems will be categorized and assigned to teams who will analyze the Problem, perform, and document the root cause analysis. The Problem record will be completed and progressed through the Problem Management lifecycle. |
Problem data will be loaded to Service Level Management Reporting System on a daily basis, where the Service Level result will be calculated and reported based on appropriate measurement criteria.
| REPORTING TOOLS |
| ITSM system |
Service Level Management Reporting System
| RAW DATA STORAGE (ARCHIVES) |
| Data used to calculate the Service Level result for reporting will be stored in the Service Level Management Reporting System, which will be accessible to users via report drill-down functionality for a rolling 13 months. |
| METRIC REPORTING |
| |X| Monthly |
RCA Corrective Action Implementation
RCA Corrective Action Implementation
| SERVICE LEVEL TYPE |
| Critical Service Level |
| METRIC DESCRIPTION |
| The Service Level “RCA Corrective Action Implementation” measures the percentage of time Service Provider completes corrective actions within the committed timeframes. |
| METRIC INCLUSIONS and DATA SOURCES |
| Corrective actions associated with all Problem tickets. |
Information Technology Service Management (ITSM) System
| METRIC EXCLUSIONS |
| Corrective actions internal to Service Provider. |
| HOURS OF MEASUREMENT |
| 24 hours |
| DAYS OF MEASUREMENT |
| 365 (366 for leap year) |
| MINIMUM SERVICE LEVEL |
| 98% |
| EXPECTED SERVICE LEVEL |
| 99% |
| ALGORITHM |
| The Service Level calculation for “RCA Corrective Actions Implementation” is the total number of corrective actions that are completed within the required timeframe divided by the total number of corrective actions completed during the applicable Measurement Window, with the result expressed as a percentage. |
| COLLECTION PROCESS |
| Corrective Actions: |
Corrective actions will be logged and tracked in the ITSM system. Corrective actions will be assigned to teams who will implement the corrective actions. The corrective actions will be progressed through the Problem Management lifecycle.
Problem data will be loaded to the Service Level management Reporting system on a daily basis, where the Service Level result will be calculated and reported based on appropriate measurement criteria.
| REPORTING TOOLS |
| ITSM system |
Service Level Management Reporting System
| RAW DATA STORAGE (ARCHIVES) |
| Data used to calculate the Service Level result for reporting will be stored in the Service Level Management Reporting System, which will be accessible to users via report drill-down functionality for a rolling 13 months. An additional 23 months of Data will be archived and made Available via the Service Level management Reporting system upon request by the State. |
| METRIC REPORTING |
| |X| Monthly |
Solution Proposal Delivery
Solution Proposal Delivery
| SERVICE LEVEL TYPE |
| Critical Service Level |
| METRIC DESCRIPTION |
| The Service Level for “Solution Proposal Delivery” measures the percentage of time Service Provider delivers a viable proposal to the State within the committed timeframes, in response to a solution request. |
Following validation of requirements by Service Provider, the Service Provider shall deliver a proposal for each request within the process defined in the SMM and in accordance with the following solution proposal targets:
· Simple - 10 business days
· Medium - 15 business days
· High - 20 business days
· Custom - 30 business days Definitions for simple, medium, high, and custom solution complexities to be defined in the Request Management SMM.
When a proposal is delivered, it must include a committed timeframe for project implementation specified as Business Days from the time the project is assigned to the Service Provider to the implementation completion, including Deliverable(s) as agreed by the State. These defined Deliverable due dates will be used in the “Project Deliverable Completion” Service Level.
| METRIC INCLUSIONS and DATA SOURCES |
| Each proposal submitted to the State will be counted as a measurable event. If there are multiple proposals for one request due to requirements changes then subsequent iterations will be counted as another event. Each will count as an event and an opportunity to succeed or fail. |
| HOURS OF MEASUREMENT |
| 7:00 AM – 6:00 PM |
| DAYS OF MEASUREMENT |
| Business Days |
| MINIMUM SERVICE LEVEL |
| 95.00% |
| EXPECTED SERVICE LEVEL |
| 97.00% |
| ALGORITHM |
| The Service Level calculation for “Solution Proposal Delivery” is the total number of solution proposals that are delivered within the committed timeframes, divided by the total number of delivered proposals plus the total number of open proposals that have exceeded the committed timeframes, with the result expressed as a percentage. |
For purposes of clarity, note the following:
If a solution proposal request is opened within the current Measurement Window, but its relevant committed timeframe extends beyond the end of the current Measurement Window, then it is excluded from the current Measurement Window’s calculation (unless such request is actually delivered in the current Measurement Window, in which case it is included in the current Measurement Window’s calculation).
| COLLECTION PROCESS |
| Solution proposal requests will be logged and tracked in the ITSM system. Solution proposal requests will be categorized and assigned to teams who will work to deliver a proposal and progress the ticket through the service Request management lifecycle. |
Solution proposal data will be uploaded to Service Level Management Reporting System on a daily basis, where the Service Level result will be calculated and reported based on appropriate measurement criteria.
| REPORTING TOOLS |
| ITSM system |
Service Level Management Reporting System
| RAW DATA STORAGE (ARCHIVES) |
| Data used to calculate the Service Level result for reporting will be stored in the Service Level Management Reporting System, which will be accessible to authorized users via inherent report drill-down functionality for a rolling 13 months. |
| METRIC REPORTING |
| |X| Monthly |
Solution Implementation
Solution Implementation
| SERVICE LEVEL TYPE |
| Critical Service Level |
| METRIC DESCRIPTION |
| The Service Level for “Solution Implementation” measures the percentage of time Service Provider successfully implements a Solution Request (RFS Project) within the committed timeframe. All phases of the Solution implementation process are included in this measure. |
| METRIC INCLUSIONS and DATA SOURCES |
| The committed timeframe is that timeframe specified in the proposal (as further described in the “Solution Implementation” Service Level) or otherwise as agreed by the requester. |
| HOURS OF MEASUREMENT |
| 24 hours |
| DAYS OF MEASUREMENT |
| 365(366) |
| MINIMUM SERVICE LEVEL |
| 97% |
| EXPECTED SERVICE LEVEL |
| 98% |
| ALGORITHM |
| The Service Level calculation for “Solution Implementation” is the total number of projects that are successfully implemented within the committed timeframes, divided by the total number of projects implemented plus the total number of projects that have passed the committed timeframe without successful implementation, with the result expressed as a percentage. |
Projects will be reported in the Measurement Window in which the associated Project (PPM) ticket is closed, allowing sufficient time to determine if the project was successful.
For purposes of clarity, note the following:
1. if a Project is assigned within the current Measurement Window, but its relevant committed timeframe extends beyond the end of the current Measurement Window, then it is excluded from the current Measurement Window’s calculation (unless such project is actually implemented in the current Measurement Window, in which case it is included in the current Measurement Window’s calculation)
2. an uncompleted project is also carried forward into subsequent Measurement Windows as a breach until implemented; if it is implemented within twenty-eight (28) days following its relevant committed timeframe, it is excluded from the subsequent Measurement Window; otherwise, it is counted as failed to meet the committed timeframes in each subsequent Measurement Window’s calculation until implemented.
| COLLECTION PROCESS |
| When the solution proposal is approved, a Project (PRJ) record will be created. Final sign-off approvals will be tracked in the Service management system. Upon completion of the post implementation review, the State Program Manager will close the Project (PRJ). |
Solution implementation Data will be loaded to the Service Level Management Reporting System on a daily basis, where the Service Level result will be calculated and reported based on appropriate measurement criteria.
| REPORTING TOOLS |
| Service management system |
Service Level management Reporting system
| RAW DATA STORAGE (ARCHIVES) |
| Data used to calculate the Service Level result for reporting will be stored in the Service Level management Reporting system database, which will be accessible to users via report drill-down functionality for a rolling 13 months. An additional 23 months of Data will be archived and made Available via the Service Level management Reporting system upon request by the State. |
| METRIC REPORTING |
| |X| Monthly |
Data Recovery Request
Data Recovery Request
| SERVICE LEVEL TYPE |
| Critical Service Level |
| METRIC DESCRIPTION |
| The Service Level calculation is the total number of service requests for data recovery that are initiated successfully within the specified timeframes during the applicable Measurement Window and for which the restoration of data was successful, divided by the total number of service requests for data recovery that were scheduled to be initiated during the applicable Measurement Window, with the result expressed as a percentage. |
For purposes of clarity, note the following:
a. if a service request is opened within the current Measurement Window, but its relevant committed timeframe extends beyond the end of the current Measurement Window, then it is excluded from the current Measurement Window’s calculation (unless the data recovery for a service request is actually initiated in the current Measurement Window, in which case it is included in the current Measurement Window’s calculation).
b. an open service request that has exceeded the committed timeframe is also carried forward into subsequent Measurement Windows as a breach until the data recovery is initiated; if it is resolved within twenty-eight (28) days following its relevant committed timeframe, it is excluded from the subsequent Measurement Window; otherwise, it is counted as failed to meet the committed timeframes in each subsequent Measurement Window’s calculation until initiated.
Data recovery requests are handled as service requests in the ITSM. Service requests will be categorized and assigned to resolver teams who will work to fulfill the service request and progress the ticket through the service request management lifecycle.
If a data recovery is required during the course of Incident resolution, a Recoveries service request must be submitted and related to the associated Incident ticket.
Service Provider will update service request to designate when the data recovery has been initiated. The service request is updated with success or failure once the data recovery request has been fulfilled and approved for closure.
| METRIC INCLUSIONS and DATA SOURCES |
| Information Technology Service Management (ITSM) System |
| HOURS OF MEASUREMENT |
| 24 hours |
| DAYS OF MEASUREMENT |
| 365(366) |
| MINIMUM SERVICE LEVEL |
| 99.50% |
| EXPECTED SERVICE LEVEL |
| 99.90% |
| ALGORITHM |
| The Service Level measurement is the number of times Service Provider completes backup executions successfully and within the specified timeframes during the applicable Measurement Window divided by the number of times Service Provider should have completed backup executions within the applicable Measurement Window, with the result expressed as a percentage. |
Priority 3 Incidents are created for backups that are not successfully completed the first time. Subsequent backup failures generate additional incidents with escalating priority.
| COLLECTION PROCESS |
| On a daily basis, Service Provider uploads files from the backup management system(s) to the State designated file store that details information on all backup executions that were scheduled and indicates those that have and have not been successfully completed. The files will be provided to the State daily. |
| REPORTING TOOLS |
| Service management system |
Service Level management Reporting system
| RAW DATA STORAGE (ARCHIVES) |
| Data used to calculate the Service Level result for reporting will be stored in the Service Level management Reporting system database, which will be accessible to users via report drill- down functionality for a rolling 13 months. An additional 23 months of Data will be archived and made Available via the Service Level management Reporting system upon request by the State. |
| METRIC REPORTING |
| |X| Monthly |
Change Management Effectiveness
Change Management Effectiveness
| SERVICE LEVEL TYPE |
| Critical Service Level |
| METRIC DESCRIPTION |
| The Service Level for “Change Management Effectiveness” measures the percentage of time Service Provider successfully implements Changes to Services. |
| METRIC INCLUSIONS and DATA SOURCES |
| Includes all Service Provider Service Provider Changes. |
Changes are not successfully implemented if they: (i) do not comply with the Change Management procedures (including the Change Control Process), the SMM, and except as specified in clause (iii) to this sentence, any associated project plan; (ii) cause either a Priority 1 Incident or Priority 2 Incident; (iii) exceeded the change window; (iv) are backed out; or (v) partial success of change is backed out or unsuccessful.
| DAYS OF MEASUREMENT |
| 365 (366) |
| MINIMUM SERVICE LEVEL |
| 96.00% |
| EXPECTED SERVICE LEVEL |
| 98.00% |
| ALGORITHM |
| The Service Level calculation for “Change Management Effectiveness” is the number of changes that are successfully implemented by Service Provider divided by the number of changes implemented by Service Provider, with the result expressed as a percentage. Changes will be reported in the Measurement Window that the Change ticket is closed. |
| COLLECTION PROCESS |
| Changes will be logged and tracked in the ITSM system. Changes will be documented, categorized, and assigned to implementer teams who will work to plan, review, obtain approvals, and progress the change through the Change Management lifecycle. |
Change data will be loaded to Service Level Management Reporting System on a daily basis, where the Service Level result will be calculated and reported based on appropriate measurement criteria.
| REPORTING TOOLS |
| ITSM system |
Service Level Management Reporting System
| RAW DATA STORAGE (ARCHIVES) |
| Data used to calculate the Service Level result for reporting will be stored in the Service Level Management Reporting System, which will be accessible to users via report drill-down functionality for a rolling 13 months. An additional 23 months of Data will be archived and made Available via the Service Level management Reporting system upon request by the State. |
| METRIC REPORTING |
| |X| Monthly |
Vulnerability Management
Vulnerability Management
| SERVICE LEVEL TYPE |
| Critical Service Level |
| METRIC DESCRIPTION |
| The Service Level “Vulnerability Management” measures and ensures timely notification and remediation of all identified vulnerability patches or actions. This SLA is intended to measure aging of vulnerabilities by business impact to ensure appropriate emphasis is placed on the highest priority Vulnerabilities. |
| METRIC INCLUSIONS and DATA SOURCES |
| TBD (defined during the procurement process) |
| METRIC EXCLUSIONS |
| Patches or actions not approved by Customer for implementation are excluded from this SLA. |
Excused events approved by the State through the SLA Exception procedure documented in the SMM.
| DAYS OF MEASUREMENT |
| 365 (366) |
| MINIMUM SERVICE LEVEL |
| 98.00% |
| EXPECTED SERVICE LEVEL |
| 99.00% |
| ALGORITHM |
| The Service Level calculation is the total number of vulnerabilities identified in the Vulnerability Remediation Module and resolved successfully, divided by the total number of vulnerabilities identified and resolved plus number of vulnerabilities that should have been resolved. |
| COLLECTION PROCESS |
| Service Provider will initiate a change (either manually or by template) within ServiceNow for each Customer upon Security Vulnerability identified by the State or Service Provider will populate information about the patch including the patch release date (start date of SLA measurement), Manufacturer, CVSS score and the affected CIs (Configuration Items) within the Change record. |
The Change Management record will document, categorize, and be assigned to implementer teams who will work to plan, review, obtain approvals, and progress the ticket through the change management lifecycle. If the patch is approved by the Customer and CAB (Change Advisory Board), Service Provider will follow the Change Management Process to schedule the patch installation. If the change is rejected by Customer, it will not be measured in the SLA.
SLA is measured from the date the vulnerability is identified and categorized \ Vulnerability resolved date (change closed as successful).
| REPORTING TOOLS |
| ITSM system |
Service Level Management Reporting System
| RAW DATA STORAGE (ARCHIVES) |
| Data used to calculate the Service Level result for reporting will be stored in the Service Level Management Reporting System, which will be accessible to users via report drill-down functionality for a rolling 13 months. An additional 23 months of Data will be archived and made Available via the Service Level management Reporting system upon request by the State. |
| METRIC REPORTING |
| |X| Monthly |
Key Service Levels This Article sets forth qualitative descriptions of the Key Service Levels. The numerical Minimum Service Levels, Expected Service Levels, and commencement of obligations associated with such Key Service Levels are set forth in Exhibit 3.1 (Service Level and Deliverable Matrix). Where reporting tools are identified below, State Agency Customers are tracked in the State of South Carolina, Department of Administration’s (Admin’s) IT Service Management (ITSM) system, and Service Level management Reporting system, while Other Government Entity Customers are tracked in Service Provider systems, and reported to Customers by the Service Provider.
Invoice Dispute Resolution
Invoice Dispute Resolution
| SERVICE LEVEL TYPE |
| Key Service Level |
| METRIC DESCRIPTION |
| The Service Level for “Invoice Dispute Resolution” measures the percentage of invoice disputes that are resolved within twenty (20) Business Days. |
| METRIC INCLUSIONS and DATA SOURCES |
| N/A |
| HOURS OF MEASUREMENT |
| 7:00 AM – 6:00 PM |
| DAYS OF MEASUREMENT |
| Business Days |
| MINIMUM SERVICE LEVEL |
| 95.00% |
| EXPECTED SERVICE LEVEL |
| 97.00% |
| ALGORITHM |
| The Service Level calculation for “Invoice Dispute Resolution” is the total number of invoice disputes that are resolved within twenty (20) Business Days of submission, divided by the total number of resolved invoice disputes plus the total number of open invoice disputes that have exceeded twenty (20) Business Days, with the result expressed as a percentage. |
For purposes of clarity, note the following:
If an invoice dispute is initiated within the current Measurement Window, but the twenty Business Days extends beyond the end of the current Measurement Window, then it is excluded from the current Measurement Window’s calculation (unless such dispute is actually resolved in the current Measurement Window, in which case it is included in the current Measurement Window’s calculation).
| COLLECTION PROCESS |
| Invoice Disputes will be logged and tracked in the ITSM system as a Service Request. Invoice dispute requests will be categorized and assigned to teams who will work to research and resolve the dispute and progress the request through the Request management lifecycle. |
Invoice Dispute data will be loaded to Service Level Management Reporting System on a daily basis, where the Service Level result will be calculated and reported based on appropriate measurement criteria.
| REPORTING TOOLS |
| ITSM system |
Service Level Management Reporting System
| RAW DATA STORAGE (ARCHIVES) |
| Data used to calculate the Service Level result for reporting will be stored in the Service Level Management Reporting System, which will be accessible to users via report drill-down functionality for a rolling 13 months. |
| METRIC REPORTING |
| |X| Monthly |
ROM Proposal Delivery
ROM Proposal Delivery
| SERVICE LEVEL TYPE |
| Key Service Level |
| METRIC DESCRIPTION |
| The Service Level for “ROM Proposal Delivery” measures the percentage of time Service Provider delivers viable High-Level Assessments with rough order of magnitude (ROM) proposals to Customers within the committed timeframes, in response to a solution request. A viable ROM is defined as one that has all the required architecture and cost elements required to deliver a viable solution. |
| METRIC INCLUSIONS and DATA SOURCES |
| ITSM system, Solution Request System |
| HOURS OF MEASUREMENT |
| 7:00 AM – 6:00 PM |
| DAYS OF MEASUREMENT |
| Business Days |
| MINIMUM SERVICE LEVEL |
| 97.00% |
| EXPECTED SERVICE LEVEL |
| 98.00% |
| ALGORITHM |
| The Service Level calculation for “ROM Proposal Delivery” is the total number of ROM proposals Delivered within required timeframe divided by the total number of ROM proposals plus the total number of open ROM proposals that have exceeded the committed timeframes, with the result expressed as a percentage. |
| COLLECTION PROCESS |
| Requests will be logged and tracked in the Service management system. Requests will be documented, categorized, and assigned to implementer teams who will work to plan, review, obtain approvals, and progress the change through the RFS lifecycle. |
Data will be loaded to Service Level management Reporting system on a daily basis, where the Service Level result will be calculated and reported based on appropriate measurement criteria.
| REPORTING TOOLS |
| Service management system |
Service Level management Reporting system
| RAW DATA STORAGE (ARCHIVES) |
| Data used to calculate the Service Level result for reporting will be stored in the Service Level management Reporting system database, which will be accessible to users via report drill-down functionality for a rolling 13 months. An additional 23 months of Data will be archived and made Available via the Service Level management Reporting system upon request by the State. |
| METRIC REPORTING |
| |X| Monthly |
Incident Resolution Time - Priority 3 and Priority 4 Incidents
Incident Resolution Time – Priority 3 and 4 Incidents
| SERVICE LEVEL TYPE |
| Key Service Level |
| METRIC DESCRIPTION |
| The Service Level for “Incident Resolution Time –Priority 3 and 4 Incidents” measures the percentage of time Service Provider Resolves Priority 3 and Priority 4 Incidents (Level 2 and Level 3 Support) assigned by the Service Desk within the applicable timeframes. |
| METRIC INCLUSIONS and DATA SOURCES |
| Includes all Priority 3 and Priority 4 Service Provider Incidents. |
The applicable resolution timeframes are listed below.
Priority 3 Incidents:
The Incident shall be Resolved within 1320 minutes (i.e., 22 Business Hours) where such minutes shall be measured only between 7:00 AM and 6:00 PM inclusive on Business Days.
Priority 4 Incidents:
The Incident shall be Resolved within 1980 minutes (i.e., 33 Business Hours) where such minutes shall be measured only between 7:00 AM and 6:00 PM inclusive on Business Days.
| METRIC EXCLUSIONS |
| Events determined to be outside the control of the Service Provider. Security Incidents will follow the Security Incident Management process as defined in the SMM and may be eligible for an SLA exception or as otherwise mutually agreed upon. |
| HOURS OF MEASUREMENT |
| 7:00 AM and 6:00 PM |
| DAYS OF MEASUREMENT |
| Business Days |
| MINIMUM SERVICE LEVEL |
| 95.00% |
| EXPECTED SERVICE LEVEL |
| 99.00% |
| ALGORITHM |
| The Service Level calculation for “Incident Resolution Time – Priority 3 and Priority 4 Incidents” is the total number of Priority 3 and Priority 4 Incidents (Level 2 Support and Level 3 Support) assigned by the Service Desk for which the Resolution time is less than or equal to the relevant resolution timeframe, divided by the total number of Resolved Priority 3 and 4 Incidents plus the total number of open Priority 3 and 4 Incidents that have exceeded the relevant resolution timeframe, with the result expressed as a percentage. |
For purposes of clarity, note the following:
if an Incident is opened within the current Measurement Window, but its relevant resolution timeframe extends beyond the end of the current Measurement Window, then it is excluded from the current Measurement Window’s calculation (unless such Incident is actually Resolved in the current Measurement Window, in which case it is included in the current Measurement Window’s calculation)
| COLLECTION PROCESS |
| Incident tickets will be logged in the ITSM system. Incidents will be categorized and assigned to resolver teams who will work to resolve the incident and progress the ticket through the incident management lifecycle. |
Incident data will be loaded to Service Level Management Reporting System on a daily basis, where the Service Level result will be calculated and reported based on appropriate measurement criteria.
| REPORTING TOOLS |
| ITSM system |
Service Level Management Reporting System
| RAW DATA STORAGE (ARCHIVES) |
| Data used to calculate the Service Level result for reporting will be stored in the Service Level Management Reporting System, which will be accessible to users via report drill-down functionality for a rolling 13 months. |
| METRIC REPORTING |
| |X| Monthly |
State Fiscal Accountability Authority Page 1 image1.png