State of New York STATE OF NEW by jolinmilioncherie

VIEWS: 2 PAGES: 13

									STATE OF NEW YORK
       IT Transformation

 Request for Information (RFI)
 Statewide Data Center Services



                          Appendix A:
         Questions and Response Template

All contacts/inquiries shall be made by email to the following address:
                  ITTransformation.datacenter@cio.ny.gov
1.0 Response Form
This RFI encompasses the scope of information the State needs to evaluate its options concerning a Statewide
Data Center services solution. Some questions may not apply to all respondents. Respondents should answer
the questions that apply to their available services and qualifications. However, please provide an explanation for
those questions left unanswered (e.g., "N/A - function is outside the scope of offering").

In the table provided below, please provide answers to the questions by entering the responses directly beneath
each question. In addition, please provide responses to the Company Profile and Customer Profile tables
included in Section 2 of this Appendix.

The questions are organized under the following headings. The headings correspond to the sections in the
"Consolidated Data Center Environment Capabilities" document distributed as Appendix B of this RFI:

         General Questions
         Functional Capabilities
         Service Management and Support Capabilities
         Information Security Capabilities
         Migration Capabilities



Below are a series of questions for which New York State is seeking information. Please answer the
questions below as succinctly as possible. Please describe any assumptions you make included in
answering these questions, as part of each response.

                                                   QUESTION

General Questions

 1.       Please complete the Company Profile table found in Section 2.1.


 2.       Provide a summary of your company’s key public sector and commercial customers currently utilizing
          your services by completing the Key Customers table found in Section 2.2.

          Identify the public sector organizations where your company has delivered colocation, managed
 3.       infrastructure or public / private cloud based services. If you do not have public sector experience,
          identify the type of enterprise(s) for which your company delivered these types of services. Describe
          the centrally managed services delivered to the enterprises identified in the response.


Response: << Insert your response here >>


 4.       What significant teaming, subcontractor or partnering arrangements would you need in order to
          satisfy the scope of services described in this RFI? Please state the nature of the relationship and the



f70312bc-9013-4c23-a473-1ee1c6a3653d.doc                                                              Page 2 of 13
       role that it would play in New York State's solution.


Response: << Insert your response here >>


       Describe your company's current data center in terms of available capacity (space, power, cooling
 5.    and other services) in relation to New York State's needs. Please state the locations your
       organization would offer colocation services. Please include the State and County where the data
       centers reside.


Response: << Insert your response here >>


 6.    What are the Uptime Institute Tier ratings and other industry certifications of your candidate facilities?
       If any do not meet Tier 3 specifications, please describe the gaps.


Response: << Insert your response here >>


       From your experience, what are the primary reasons large consolidation projects fail, or fall short of
       intended goals? What concerns, issues or roadblocks do you consider with delivering the scope of
 7.
       services described in this RFI? How does your company propose overcoming such issues and/or
       roadblocks? Please include any additional lessons learned from your experience with previous
       consolidation projects.


Response: << Insert your response here >>


       What essential information or data is necessary to understand New York State's current data center
 8.
       environment and would assist a service provider prepare for the migration of the State's applications,
       data, and supporting assets, where necessary?


Response: << Insert your response here >>


Functional Capabilities: Service Deployment Options


The State anticipates that a consolidated data center environment could consist of colocation, hosted
managed services, and a public / private cloud service delivery. A broad range of functionality will be
supported by the future consolidated environment, and the level of vendor responsibility will be determined
by factors such as asset ownership, management responsibility, and physical location. The environment may
be comprised of services deployed on State premises, in a cloud service, or at one or more colocation sites.


 9.    Describe your capability to offer colocation services. Please indicate the data center components that
       are included in your colocation service (power, cooling, rack space, network connectivity, etc.) in the




f70312bc-9013-4c23-a473-1ee1c6a3653d.doc                                                             Page 3 of 13
        table below.


 Category of Function               Offered (X)     Brief Description
 Power
 HVAC
 Floor Space
 Network Connectivity
 Others                                             e.g., physical security, fire suppression technology, etc


        Describe your capability to offer managed services. Please indicate which services are included in
 10.
        your offering in the table below:



 Supported Services                  Offered (X)    Brief Description
 Data Center Floorspace                             Describe facility related elements included, e.g., rack
                                                    space, power, cooling, etc
 Network Management
 Server Management
 Storage Management
 Database Management
 Service Management
 (Please Add Others)                                e.g., Application / System / Service Monitoring


        There are several options for deploying a shared IT service. Please explain what alternatives you
 11.    offer and the pros and cons of each relative to New York State’s key design principles and
        capabilities listed in Appendix B. Please use the table below.


Response: << Insert your response here >>

 Alternatives                                       Pros                                  Cons
 Secure public cloud
 Private cloud
 SaaS
 IaaS
 PaaS
 (Please Add Others)



 12.    Describe your experience delivering infrastructure services in a public, private, or hybrid-cloud
        model? Please include the components of the public, private, or hybrid approach delivered.




f70312bc-9013-4c23-a473-1ee1c6a3653d.doc                                                              Page 4 of 13
Response: << Insert your response here >>


 13.   What makes your approach to the public, private, or hybrid-cloud model unique and flexible? What
       value does this approach add?


Response: << Insert your response here >>


 14.   What risks are associated with your company’s cloud delivery approach?




Response: << Insert your response here >>


 15.   What factors should the State consider when determining which applications to migrate into a
       public, private, or hybrid cloud model?


Response: << Insert your response here >>


Functional Capabilities: Data Center Solution Components

 The State seeks to understand how solution providers could provide the range of capabilities that are
 needed for consolidated data center services to more than 40 agencies. We anticipate that the consolidated
 solution will be delivered through a combination of data center components and deployment models such
 as secure public cloud, private cloud, and highly virtualized hosting and colocation solutions.


 16.   Describe the standard system platforms and configurations that your company offers in a secure
       public, private or hybrid cloud delivery model via the table below:


 Supported Service                   Brief Description
  Computing Hardware
  Computing Storage Tiers
  (Primary, Secondary, Data
  Retention)
  Operating Systems and
  Virtualization
  Network Connectivity
  Backup and Recovery
  Other


       If your company offers a cloud delivery model, describe your solution’s ability to scale in response
 17.   to additional load, both through proactive capacity planning and on-demand needs. Please
       describe the capacity planning process for your company’s colocation and managed service
       models.




f70312bc-9013-4c23-a473-1ee1c6a3653d.doc                                                           Page 5 of 13
Response: << Insert your response here >>

       Describe the high availability and redundancy features of your company’s solution that ensure
 18.   continuous availability and performance, including facility, network, server, storage, and other
       components.


Response: << Insert your response here >>

       What is your company’s model for managing software licenses for enterprise applications or
 19.   databases (e.g. by core, CPU, etc.)? What is your company’s recommendation for managing licenses
       that are not cost effective for virtual environments, such as system software priced by the number of
       cores?


Response: << Insert your response here >>


 20.    How does your company migrate existing licensing agreements to a managed services model?



Response: << Insert your response here >>

       From your experience with other clients (including State and Federal), how will the State’s existing
 21.   license agreements affect the solution in a consolidated data center environment? Are there factors
       the State should take into consideration regarding license ownership and transfer?


Response: << Insert your response here >>


 22.   Describe any concerns about asset ownership and asset ownership transfer that the State should
       consider when consolidating data center assets to a future solution.


Response: << Insert your response here >>

       From your experience, describe how your company would address customers’ asset inventory and
 23.   compliance tasks. Common examples of these include tracking and reporting asset funding sources
       and providing documentation and facility access to State or Federal auditors.


Response: << Insert your response here >>

       What data center components or design aspects does your company provide in support of a “green
 24.   data center”? How does your company manage energy efficiency in your existing environments and
       pass those savings along to customers?


Response: << Insert your response here >>




f70312bc-9013-4c23-a473-1ee1c6a3653d.doc                                                           Page 6 of 13
       Please describe your company’s standard approach to disaster recovery (DR) and Business
       Continuity (BC) for the colocation and cloud-based services in your solution if a catastrophic failure
 25.   were to cause the site or equipment to be unusable for a prolonged period of time. At minimum, list
       the location, nature and wide area network connectivity of any additional facilities that would be
       involved in your offering and the service-recovery time objective by tier of service. Please describe
       ways in which these services have been provided to other large clients.


Response: << Insert your response here >>


Service Management and Support Capabilities

 All infrastructure-related services shall be available online, on demand, and dynamically scalable in the
 industry-accepted sense of a “cloud computing service.” The service provider(s) must describe the service
 model and deployment model that will best satisfy all of New York State’s functional, technical, security,
 privacy and migration requirements, and undertake a service management approach that fully aligns with
 the strategy.

 26.   If your company offers a cloud delivery model, please describe the process for ordering or self-
       provisioning new services.


Response: << Insert your response here >>

       Describe how services are measured and invoiced to customers, particularly for services delivered
 27.   via a public or private cloud. How do you measure usage by organizational units (agency,
       department) in a shared environment? Describe your ability to customize billing requirements and
       report periods.


Response: << Insert your response here >>

       Outline and briefly describe your company’s account management process, including team
 28.   organization, billing, service management (KPI) reporting, exception handling, customer
       documentation, communication between customer and service provider, and other basic
       administrative functions.


Response: << Insert your response here >>

       What is your company’s ability to provide monitoring data and status reports to the State including
 29.   system (e.g. network, storage, server, etc.) performance, resource usage, fault detection and service
       availability? Please describe the ability to customize these services based on application
       requirements.


Response: << Insert your response here >>

       What tools or support can your company offer the State to help troubleshoot applications that are not
 30.   performing as expected? How do you coordinate with customers’ support teams for root cause
       analysis, and what levels of assistance are available?




f70312bc-9013-4c23-a473-1ee1c6a3653d.doc                                                            Page 7 of 13
Response: << Insert your response here >>


 31.   From previous experience, what forms of notification has your company provided customers in the
       event of failure, degraded service, or utilization that exceeds planned levels?


Response: << Insert your response here >>

       Describe typical roles and responsibilities of the customer and your company’s role as a solution
       provider for the following representative activities:
        - Server image creation and certification
 32.    - OS upgrades, patches, and service pack installation and testing
        - Application software upgrades
        - Storage administration
        - Other?


Response: << Insert your response here >>


 33.   What service management applications and processes are in place for your company’s solution, and
       what standards (e.g., ITIL or other) are they based on?


Response: << Insert your response here >>


 34.   Describe how your company could interface with the State’s existing ITIL systems management tools
       during the migration period.


Response: << Insert your response here >>

       Describe the approach to integrating your company’s service desk systems (or any self-service
 35.   systems) with multiple agency help desks within the State to enable seamless handoffs of support
       tickets and provisioning requests.


Response: << Insert your response here >>

       The State is interested in the various service level management approaches offered by vendors.
 36.   Please describe the standard Service Level Agreements (SLAs) included in your company’s public /
       private cloud, colocation and managed service offerings. Please highlight the SLA (e.g., server
       provisioning time), typical SLA metrics (e.g., 24 hours), and tiers of service (e.g., Gold/Silver/Bronze).


Response: << Insert your response here >>


 37.   What types of customer-specific SLAs have you adopted in addition to your standard offerings?




f70312bc-9013-4c23-a473-1ee1c6a3653d.doc                                                             Page 8 of 13
Response: << Insert your response here >>


       Describe the general model for pricing the catalog of services in scope for this initiative? What major
 38.
       considerations determine service prices? Are there any factors that cause price volatility? Do not
       provide actual cost information.


Response: << Insert your response here >>


 39.   What is your company’s experience with defining solution tiers for different types of user, and how
       does this impact solution pricing? Do not provide actual cost information.


Response: << Insert your response here >>


 40.   If you have worked with public sector customers, describe key financial considerations that other
       public sector entities have encountered when utilizing external data center solution providers.


Response: << Insert your response here >>


Information Security Capabilities

New York State has a formal information classification policy as a foundation of its information security
standards. All providers must follow the applicable State standards based on the classification of the assets
(applications, data, storage media, etc.). The infrastructure solution must protect data confidentiality and
integrity for data in transit and at rest. All cryptographic modules must be validated as conforming to
requirements of Federal Information Processing Standards 140-2.

       Describe the security and governance controls in place to protect sensitive data regulated by Federal
 41.   standards (e.g., HIPAA, FISMA, etc.) and State laws. How does your company ensure that a
       customer’s data security and privacy protection is achieved?


Response: << Insert your response here >>

       Describe how your company controls and monitors physical and logical security in a shared data
 42.   center environment. Describe the level of security background checks performed for any staff with
       physical or logical access to the sites.


Response: << Insert your response here >>

       Describe any data ownership or legal issues that the State should consider for services hosted in a
       shared environment, including aspects such as intellectual property rights for State developed
 43.   applications and production of customer data or information about customer data in response to
       subpoenas, court orders, warrants and other legal requests for information. How have you supported
       other customers who may have faced these issues?




f70312bc-9013-4c23-a473-1ee1c6a3653d.doc                                                            Page 9 of 13
Response: << Insert your response here >>


 44.   How will New York State be certain that its data resides exclusively within a required geographic
       location at all times?


Response: << Insert your response here >>


Migration Capabilities

The solution provider(s) will collaborate with New York State staff to conduct a seamless phased migration
from current central and distributed data centers to colocation facilities and/or shared services with minimal
disruption to business operations while ensuring data integrity.

       How does your company typically organize, plan, staff and manage the migration phase? Based on
 45.
       your experience, are the milestones and timeline outlined in Section 2.4.3 of the RFI reasonable?
       How have other customers typically accelerated their migration timeline?


Response: << Insert your response here >>


 46.   Please outline your company’s methodology for migrating services and customer data in your
       environment, including all stages from planning to testing, acceptance and cutover.


Response: << Insert your response here >>


       Based on your experience, what types of skillsets are required from a State and vendor perspective
 47.
       for a successful data center consolidation project? What training modules does your company
       typically provide to State staff before, during and after migration, and how are these delivered?


Response: << Insert your response here >>


       In previous experiences, what approaches has your company taken to incorporate existing customer
 48.   assets (e.g. licenses, hardware, etc.) into the proposed solution to help reduce the overall cost to the
       customer? Also, please describe how vendor staff resources supporting the customer prior to the
       transformation project were transitioned to the future state solution delivery model.


Response: << Insert your response here >>

       The State is anticipating that some agencies will want to migrate to colocation services first, and then
 49.   eventually migrate to a shared environment. Describe your company’s experience with this approach
       and how it helped customers make the transition from colocation to shared environments such as
       cloud-based services.




f70312bc-9013-4c23-a473-1ee1c6a3653d.doc                                                            Page 10 of 13
Response: << Insert your response here >>


 50.   Describe your company’s approach to integrating your solution with other cloud or colocation solution
       providers to provide seamless interoperability for the customer.


Response: << Insert your response here >>

       Describe your company’s transition approach when the State may have to exit your solution. How
 51.   would the State’s data and applications be migrated away from the solution and transferred to the
       State or another solution provider, and in what format? How would asset ownership be addressed?


Response: << Insert your response here >>


 52.   What assets, resources or skill sets would your company request from the State to support a possible
       migration approach?


Response: << Insert your response here >>


       Based on market research and experience, what are the most successful examples of public-sector
 53.
       data center consolidation projects (whether cloud or non-cloud models) and what can New York State
       learn from them?


Response: << Insert your response here >>

Thank you very much for providing this information. Please be sure to fill out Sections 2.1 and 2.2 located in
Appendix A before returning your complete response to ITTransformation.datacenter@cio.ny.gov.




f70312bc-9013-4c23-a473-1ee1c6a3653d.doc                                                           Page 11 of 13
2.0 Profile Tables
2.1 Company Profile (see Question 1)

 Question                                                 Company Response
 Company Name

 Location of Division serving New York State

 Headquarters Location

 URL of Company Web Site

 Contact Name

 Contact Title

 Contact Email Address

 Contact Phone Number

 Number of Years of experience in this service offering

 Business Size – Annual Revenue

 Primary Type of Service(s) Provided
 Are you a Small business enterprise?
 A “New York State Small Business” is defined as a
 company that is a resident to New York State,            (Please respond Yes or No)
 independently owned and operated, with 100 or fewer
 employees, and not dominant in its field.
 Are you a Minority-owned business enterprise?            (Please respond Yes or No)

 Are you a Woman-owned business enterprise?               (Please respond Yes or No)
 Are you certified with Empire State Development
 Corporation (ESDC) as a Minority and/or Woman            (Please respond Yes or No)
 Owned Business (M/WBE)?




f70312bc-9013-4c23-a473-1ee1c6a3653d.doc                                               Page 12 of 13
2.2 Key Customer Profile (see Question 2)
Please use the following template to list up to five customer qualifications that show your company's experience
providing services which are relevant to the scope and requirements of the New York State data center services
project. Please type over the text that is in designated cells.


                                                                     Number of      Years in
   Key Customers                           Service(s)
                                                                       Users        Service
   Customer Entity Name                    (service 1)
   Industry/Enterprise type                (service 2)
   Number of locations served              (service 3)
   Contact Name




   Customer Entity Name                    (service 1)
   Industry/Enterprise type                (service 2)
   Number of locations served              (service 3)
   Contact Name




   Customer Entity Name                    (service 1)
   Industry/Enterprise type                (service 2)
   Number of locations served              (service 3)
   Contact Name




   Customer Entity Name                    (service 1)
   Industry/Enterprise type                (service 2)
   Number of locations served              (service 3)
   Contact Name




   Customer Entity Name                    (service 1)
   Industry/Enterprise type                (service 2)
   Number of locations served              (service 3)
   Contact Name




f70312bc-9013-4c23-a473-1ee1c6a3653d.doc                                                         Page 13 of 13

								
To top