RFP Presentation_v.01_21 October 2022_Copy.pptx

43805-business powerpoint-Business presentation template-8-red.pptx

1. Request for Proposal For Selection of Indian Cloud Partner for Managing Cloud Solution –

2. Project Overview

3. Vision for Cloud: Objective behind this RFP Expand Capacity of NDCs in leased/revenue sharing model MeghRaj 2.0 to become the first option for providing Govt. Cloud services Ministries / Govt. Dept. NIC MeghRaj 2.0 NIC’s MeghRaj 2.0 MeghRaj 2.0 NIC/NICSI leases land, building, Non-ICT to Industry at HYD and BHU Indian Cloud Partner (ICP) funds ICT infra, cloud layer (50 racks)  each & O&M   and provides cloud services with SLAs Take over of existing non-IT Infra at BHU and HYD Pay as you go Managed Services High Availability Autoscaling Elastic Cloud Provisioning TAT Key Features Partnership with Cloud Service Providers Security and Governance Team Service Providers for Non- IT Infrastructure OEMs for IT Infrastructure Indian C loud Partner (ICP) lead s the partnership with NIC GITDC leased/ revenue sharing model Provides strategic control Common Integrated Console Security

4. Scope of Work

5. Scope of Work for Indian Cloud Partner (ICP)  Operation and maintenance of non-IT infrastructure at the given two NDCs Provide managed IT infrastructure services for the new ICT set-up Setup of NOC and SOC for hybrid cloud set-up Provide managed cyber security services Set-up ICT infra to provide Secure Managed Cloud Services* at NDCs Provide self-serving portal white labeled as MeghRaj Portal for end users with billing and consumption pattern features Seamless integration with VPC for bursting of workload Set-up helpdesk ; monitor and provide support to the end user on 24*7 basis as per SLA Training and capacity building of NIC staff around ICT set-up Implementation of ITSM policies and procedures for the hybrid cloud Project governance including risk, incident, infra, change, escalation, transition, exit management etc. *Managed Services Definition ( Source: https://csrc.nist.gov/glossary/ ) PaaS : The consumer does not manage or control underlying cloud infra including N/W, servers, OS, or storage, but has control over deployed applications and possibly configuration settings for application-hosting environment. IaaS : The consumer does not manage or control the underlying cloud infra but has control over operating systems, storage, and deployed applications; and possibly limited control of select networking components (e.g., host firewalls). NIC shall ensure payout of lease/rentals for building/land rates at DC locations NIC will provision raw power at both the datacenters. NIC will provide required water and payment of water charges for DC cooling usage IT and non-IT refresh and upgradation at required intervals

6. Timelines of the Project

7. Milestones

8. Bid Evaluation

9. Bid Evaluation Process Bidders should clear all technical evaluation perimeters, to qualify for opening of the Commercial Bid. Evaluation of the NIC in this regard shall be final and binding on the bidders. Bidder must mandatorily demonstrate all the features as mentioned in the Demo/PoC section Commercial envelope of only those bidders who comply with the technical evaluation criteria shall be opened. Bidders must obtain a minimum overall technical score of 70 (Seventy) for commercial bid to be opened. Total Cost of ownership shall be calculated based on the commercial formats. The final score will be calculated through Combined Quality Based System method based with the following weight-age:  Technical: 70%  b. Commercial :30%  Final Score = (0.70xNormalized Technical score) + (0.30xNormalized Commercial Score)  Technical Evaluation Commercial Evaluation Final Evaluation

10. Pre-Qualification Criteria

11. # PQ Domain Parameters 1 Legal Entity The bidder must fulfil all the following:  Bidder must be a Legal Entity i.e.  A company incorporated in India under the Companies Act, 1956 or 2013 OR LLP Act 2008/ Partnership Act, 1932. OR A partnership firm registered under Indian LLP act 2008.  and subsequent amendments thereto  Registered with the Income Tax (PAN) and GST (GSTN) Authorities in India with active status  Should be in business of providing IT/Non-IT implementation of Data Centre Infra services for at least 3 years as on 31.03.2022  Should submit last 3 years (as on 31.03.2022) IT returns   Should have at least one permanent office in India 2 Financial Turnover The bidder must have an average annual revenue from operations of not less than INR 1000 crore for the last three consecutive financial years i.e., FY 2019-20, 2020-21 and 2021-22 from the ICT/ ITeS /Data Centre/Cloud related services as on 31.03.2022.  3 Financial : Net Worth The Net worth of the Bidder for each of the last three financial years (i.e., FY 2019-20, 2020-21 and 2021-2022) should be positive. 4 Project Experience The Bidder must have at least two (at least one completed and one ongoing) projects of INR 200 crores each with scope covering IT/Non-IT implementation of Data Centre Infra during last five years as on bid submission date in India.  The project should be for own company or for a client.  For internal projects, the value to be considered is cost incurred till Go-Live.  5 Data Centre Establishment Experience  The bidder should have designed, built, commissioned, and installed at least one Tier III or above certified Data Centre with 24x7x365 NOC in India, for own company or for a client.   The project setup (go live date) should be prior to five years of bid submission date with at least INR 200 crores order value/project value (including 100 Cr of IT Infra).  For internal projects, the value to be considered is cost incurred till Go-Live.  Pre-Qualification Criteria for ICP (1/2)

12. # PQ Domain Parameters 6 NoC /SoC Experience  Bidder should have experience of setup and operating a NoC and SoC setup catering for minimum 500 IT racks with 24x7x365 operations in India.  7 Manpower Bidder should have at least 300 technical employees based in India on own pay roll working in data centre / cloud services/ ICT/ ITeS business.   Out of these at least 20 technical employees based in India must have valid cloud/cloud service certifications as on date of bidding. 8 Certifications Bidder must possess all three valid certifications at the time of submitting the Bid.   A. ISO 9001:2015 , B. ISO 20000 , C. ISO 27001 9 Mandatory Undertaking The bidder shall submit the undertaking that their entity: -  Has not been under a declaration of ineligibility for corrupt or fraudulent practices and should not be blacklisted by any State Govt. / Central Govt. / Board, Corporations and Government Societies / PSU for any reason as on date of bid submission.  Has not been insolvent, in receivership, bankrupt or being wound up, not have its affairs administered by court or judicial officer, not have its business activities suspended and must not be the subject of legal proceedings for any of the foregoing reasons.  And their directors, partners and officers have not been convicted of any criminal offense related to their professional conduct or the making of false statements or misrepresentations as to their qualifications to enter into a cloud service supplying contract within a period of three years preceding the floating of this RFP, or not have been otherwise disqualified pursuant to debarment proceedings  10 IT Act ICP must be compliant with IT Act 2000 (including 43A) and amendment Pre-Qualification Criteria for ICP (2/2)

13. # PQ Domain Parameters 1 Financial Turnover  The CSP must have an average annual revenue from operations of not less than Rs 1000 crore for the last three consecutive financial years from Cloud related services 2 CSP Presence and Services   CSP should be operating in India for at least 10 years.  CSP should be empaneled with MietY to provide cloud services as on date of bidding. 3 ISO Certifications  CSP must have any three out of below valid certifications for its facilities in India  A.ISO 20000 , B. ISO 27001, C. ISO 22301 & D. ISO  27701 4 Data Centre Certificate CSP’s Data Center from where in Public Cloud services will be offered must be in India and must be at least Tier III certified Data center. The Primary and DR Data Centre (Cloud) shall be physically located in India and certified by MeiTY 5 Accreditations   CSP should have accreditations relevant to security, availability, confidentiality, processing integrity, and/or privacy Trust Services principles. SOC 1, SOC 2, SOC 3 6 Financially Backed SLA  The CSP should provide financially backed SLAs for all the services offered on public cloud and these SLAs should be declared in public portal of CSP. 7 List of Services  CSP should have services listed in Section-4 of this RFP document in ready-to-offer condition at the time of bidding and must have a disaster recovery Centre 8 Operational Managed Service  CSP should have an operational public cloud/managed services on cloud and all services mentioned in this RFP should be available through self-service portal.  9 Non- Blacklisting   Neither the current organization nor the holding company should have been Debarred and / or blacklisted by any organizations of Govt. of India/ Central PSU/ State Govt entities as on bid submission date for similar work as defined in project scope   10 Public Facing Website  CSP shall have published on its public facing website-  1. Cloud services rates for India with options for pay as you go/on demand and reserve instance (or equivalent)  2. Dashboard live-status of cloud services’ health across datacentre in India   3. Cloud Services outage details (if any) with RCA  11 IT Act CSP must be compliant with IT Act 2000 (including 43A) and amendments.   Pre-Qualification Criteria for CSP

14. Technical Qualification Criteria

15. Technical Qualification Criteria for ICP & CSP (1/2) S. No Evaluation Criteria Sub Marks Marks A Project Understanding 20 1 Approach and Methodology for the entire project 9 2 Service Delivery approach (including helpdesk) 2 3 Quality Assurance Plan & Methodology 2 4 Risks and Mitigation Plan 2 5 Exit Management Plan for smooth handover to NIC/new partner selected by NIC 5 B Proposed Technical Solution 30 1 Design Architecture for offered Solution - Ready-to-start as well as proposed solution for IaaS, PaaS, and SaaS 9 2 Proposed Cybersecurity, SOC, and Data Security solution 6 3 Scalability and burstability features (current and proposed) 5 4 Proposed Team for implementation and Go-Live 3  5 Proposed Team for O&M 3 6 Solution and plan for launching new cloud services including solutioning and presales support plan 2 7 Distance between DC and DR of CSP (Public Cloud) – In India If the distance between DC and DR is equal or more than 100 kilometers 2 C Experience 15 1 Bidders experience in setting up hybrid cloud/ private clouds 5 2 Self-service portal and tight coupling with cloud provisioning layer. 5 3 Bidders experience in application migration for cloud services 3 4 Bidder (ICP)’s previous co-working experience with same CSP in the past 2

16. Technical Qualification Criteria for ICP & CSP (2/2) S. No Evaluation Criteria Sub Marks Marks D Partnership and Business Models 10 1 Proposed Business Model for the project 3 2 Funding and mobilization plan for the project 4 3 Details of Partnership/ Subcontracting activities and arrangements for implementation 3 E Technical Presentation and Demonstration 25 1 Technical presentation to Evaluation Committee and Q&A 15 2 Demo/PoC of proposed solution using proposed tools and components for NICs cloud infrastructure 10 Grand Total 100

17. Commercial Construct

18. Business Model Investments NIC ICP Land, Building, MEP, initial non-IT Infra IT Infra, Cloud layer, Business Operations, O&M of non-IT infra Revenue Generation NIC ICP Mark up value of 15 % comprising shares of both NIC and NICSI Quarterly p ayment through NICSI’s escrow account based on ( i ) cloud services consumed and billed to the end user (ii) O&M of non-IT infra (iii) any data migration efforts consumed.. SLA penalties will be deducted from the payment. 1 2 The Minimum Contract Period has been set at seven years which may be extended by another seven years NIC is offering minimum commitment of 50% utilization for Compute, Storage and Network services in the installed ICT infrastructure capacity in the first three years of operations for 100 racks. NIC is offering after the AoC , NIC will brief the ICP of the workload that is expected to be hosted from the day of Go-Live. ICP will have to accordingly do the sizing for the ICT infra for these applications plus it will also budget in the ICT infra at least three times this sizing to accommodate any future workload request which may come up between Award of Contract and actual Go-Live.

19. Commercial Bid Format (1/2) Section B: Specialized Services on Cloud Section A: NIC Data Center Cloud Service Section C: Cloud Services (not listed in the RFP) Section D: O&M (including AMC) for non-IT Cost Section E: Application Migration Cost Sr.No . Service Name   Service Category Type of Services Unit of measure Weight (%) (A) Indicative BoQ (B) Multiplication Factor to calculate price per month (C) Unit Price (D) (Without tax) Tax % (T) Total Price (Excluding Tax) (E) = (A*B*C*D) Total Price Including Tax (F) = E*(1+(T/100))                         Sr. No. Service Name Service Category Type of Services Unit of measure Weight (%) (A) Indicative BoQ (B) Multiplication Factor to calculate price per month (C ) Unit Price (D) (Without tax) Tax % (T) Total Price (Excluding Tax) (E) = (A*B*C*D) Total Price Including Tax (F) = E*(1+(T/100))                         Sr. No. Service Name   Type of Services  Unit of measure  % Discount Offered on Published Unit Price (A) Indicative Total Service Billing in a Month without Tax (B) Total Billing to NICSI (C) = B*(1-(A/100))               Sr. No. Location O&M Cost for Non-IT Infra (Y1) O&M Cost for Non-IT Infra (Y2) O&M Cost for Non-IT Infra (Y3) O&M Cost for Non-IT Infra (Y4) O&M Cost for Non-IT Infra (Y5) O&M Cost for Non-IT Infra (Y6) O&M Cost for Non-IT Infra (Y7) Tax % (T) A: Avg Yearly O&M Cost (Y1+….+Y7)/7 (without tax) Avg Yearly O&M Cost (Y1+….+Y7)/7 (with tax) B: A*(1+T/100))                         Sr. No. Resource Qualification and Experience Indicative Number of Resources (A) Indicative Time Period of Deployment (months) (B) Monthly Rate (C) (without tax) Tax % (T) Total Price without Tax D= (A*B*C) Total Price with Tax E = D*(1+(T/100))                  

20. Commercial Bid Format (2/2) Total Commercial/ BoQ Value: Sr. No. Commercial Bid Sections Final Section Price (P) Weightage (W) Weighted Section Price (P*W) 1 Section A: NIC Data Center Cloud Services 70% 2 Section B: Virtual Private Cloud Services 15% 3 Section C: Cloud Services (not listed in the RFP) 10% 4 Section D: O&M for non-IT 3% 5 Section E: Application Migration 2% Total Bid Price (Sum total of P*W)  

21. Payment to the ICP shall be done quarterly (in arrear) based on the : Cloud services consumed and billed (as per the discovered price rates in this RFP + Government’s margin) to the end user O&M of non-IT infra any data migration efforts consumed The billed amount shall be transferred to NICSI’s escrow account from where the payments (as per the discovered price rates in the RFP) will be disbursed to the ICP’s account. The invoices raised by ICP should be inclusive of all taxes, duties, levies, and services.  Payment Terms The mode of Payment will be ECS / NEFT / RTGS only. ICP shall deploy an automatic tool for SLA calculation on real time basis including billing and accounting tool for end customers with no need for any manual intervention.   All the payment shall be made in Indian Rupees (INR) currency only

22. Service Level Agreements

23. The ICP needs to comply with service levels during the operations of the system. The ICP shall be responsible for the measurement of the SLAs at the level as well as at the user level with the help of the enterprise monitoring tool on a periodic basis. An SLA management tool needs to be deployed to manage the SLAs. Service Level agreement (SLA) Project Implementation System Availability SLAs SLAs for Recovery Time Objective SLAs for Network Connectivity and Bandwidth SLAs for Operations Support [DC/DR components] SLAs for Network Operations and Management SLAs for Security Operations and Management SLAs for Change Management SLAs for Service Desk Liquidated Damages Requirements related to upgrades/major changes IT Service Management KPIs Category of SLAs

24. Governance Model

25. Service Provider Data integrity Increase / decrease services rates post approval Owns new services launch Responsible for ICT, non-ICT set-up and bringing business Exit management 3 Strategic Control Sets security policies Approves compliance for infra, operations design Approves revision of service price Right to audit for policy compliance Discretion on end user on-boarding Customer Bills, collects and disburse payments Contract signing with ICP and End User Delivery sign-off SLA monitoring Data security Right to audit for SLA 1 Asset ownership (of select purchased assets) Right to procure ICP assets at depreciated cost 2 End User Data ownership SLA monitoring Data migration Governance Model NIC ICP NICSI Ministries and Dept Ministries and Dept 1 Costs of independent audit will be borne by NIC/NICSI 2 Copy of the invoices of the assets purchased will have to be submitted to NICSI 3 All assets ( software and hardware) shall be transferred to NIC including all the contracts. NIC will have the right to hire the operations team (business, relationship managers, either on its payroll or on the new vendor payroll). Governance Model

26. Thank You

27. . Cloud Solution: Key Design features To ensure orchestration of hybrid cloud, to provide catalogue of services , to metering and billing service of all on-premises and public cloud services To ensure resources are made available as needed To ensure payment model that charges based on resource usage. To ensure users can setup and launch applications on their without IT teams intervention. To ensure resources are made available in case of sudden workload burst or when on-premise resources are full utilized from hyper scalers using secure connection. To ensure resources are shared between multiple different organizations or departments. To ensure automation and orchestration of day-to-day tasks To ensure resources are highly available and don’t have single point of failures. Application shall be able to move back and forth between cloud and on-prem. To ensure resource usage is calculated by each and every organization or department Self-service portal * On-demand B1.1.2 - Review DR Infra Design B2.1.1 - Review The Existing Policies And Procedures B3.1.1 - BCM Current State Understanding B3.1.2 - Conduct BIA And TRA B1.1.2 - Review DR Infra Design B2.1.1 - Review The Existing Policies And Procedures B3.1.1 - BCM Current State Understanding B3.1.2 - Conduct BIA And TRA B1.1.2 - Review DR Infra Design B2.1.1 - Review The Existing Policies And Procedures B3.1.1 - BCM Current State Understanding B3.1.2 - Conduct BIA And TRA B1.1.2 - Review DR Infra Design B2.1.1 - Review The Existing Policies And Procedures B3.1.1 - BCM Current State Understanding B3.1.2 - Conduct BIA And TRA B1.1.2 - Review DR Infra Design B2.1.1 - Review The Existing Policies And Procedures B3.1.1 - BCM Current State Understanding B3.1.2 - Conduct BIA And TRA B1.1.2 - Review DR Infra Design B2.1.1 - Review The Existing Policies And Procedures B3.1.1 - BCM Current State Understanding B1.1.2 - Review DR Infra Design B2.1.1 - Review The Existing Policies And Procedures B3.1.2 - Conduct BIA And TRA B3.1.1 - BCM Current State Understanding B1.1.2 - Review DR Infra Design B2.1.1 - Review The Existing Policies And Procedures B3.1.2 - Conduct BIA And TRA B3.1.1 - BCM Current State Understanding B1.1.2 - Review DR Infra Design B2.1.1 - Review The Existing Policies And Procedures B3.1.2 - Conduct BIA And TRA B3.1.1 - BCM Current State Understanding B1.1.2 - Review DR Infra Design B2.1.1 - Review The Existing Policies And Procedures B3.1.2 - Conduct BIA And TRA B3.1.1 - BCM Current State Understanding B1.1.2 - Review DR Infra Design B2.1.1 - Review The Existing Policies And Procedures B3.1.2 - Conduct BIA And TRA B3.1.1 - BCM Current State Understanding B1.1.2 - Review DR Infra Design B2.1.1 - Review The Existing Policies And Procedures B3.1.2 - Conduct BIA And TRA B3.1.1 - BCM Current State Understanding B1.1.2 - Review DR Infra Design B2.1.1 - Review The Existing Policies And Procedures B3.1.2 - Conduct BIA And TRA B3.1.1 - BCM Current State Understanding B1.1.2 - Review DR Infra Design B2.1.1 - Review The Existing Policies And Procedures B3.1.2 - Conduct BIA And TRA B3.1.1 - BCM Current State Understanding B1.1.2 - Review DR Infra Design B2.1.1 - Review The Existing Policies And Procedures B3.1.2 - Conduct BIA And TRA B3.1.1 - BCM Current State Understanding B1.1.2 - Review DR Infra Design B2.1.1 - Review The Existing Policies And Procedures Pay-per Use Automation & Orchestration Multi-tenant Self-provisioning Elastic/Scalable Multi-tenant Cloud Metering High-Availability Security To ensure seamless security experience between NIC cloud and hyperscale cloud(s). Security logs Cloud Solution: Key Design Features

28. Scope of Work for Indian Cloud Partner (ICP)  Provide 50 racks each at NDC Bhubaneshwar and NDC Hyderabad for setup of on-prem cloud services NIC giving minimum commitment of 50% utilization for Compute, Storage and Network services Ensure payout of lease/rentals for building/land rates at DC locations Assist successful bidder in marketing activities e.g., support in targeting the Govt. clients Provisioning of raw power at both the datacenters. Provide required water and payment of water charges for DC cooling usage NIC Stakeholders Responsibilities Provision hybrid cloud services from NDC Hyderabad and Bhubaneshwar in a managed service model for 7 years. ICP will manage O&M of existing non-IT infrastructure at both the locations. ICP to position a dedicated technical team to commission and manage the on-premise cloud infrastructure and public cloud Monitor, manage and provide support to the end user on 24*7 basis as per SLA defined in this this RFP. Go-Live(Provisioning of services from on-premise and public cloud) for the project should be by June 2023 ICP

29. Scope of Work for Indian Cloud Partner (ICP)  NIC Stakeholders Responsibilities Provision hybrid cloud services from NDC Hyderabad and Bhubaneshwar in a managed service model for 7 years. ICP will manage O&M of existing non-IT infrastructure at both the locations. ICP to position a dedicated technical team to commission and manage the on-premise cloud infrastructure and public cloud ICP to provide self-service portal in lines with technical specifications mentioned in the RFP. Monitor, manage and provide support to the end user on 24*7 basis as per SLA defined in this this RFP. Go-Live(Provisioning of services from on-premise and public cloud) for the project should be by June 2023. ICP to perform Project Management and Governance Setup of NOC and SOC for hybrid cloud. Implementation of ITSM policies and procedures for the hybrid cloud. ICP will provide managed cyber security services. ICP to setup helpdesk as single point of contact for support. ICP to perform user acceptance testing ICP

30. Scope of Work for Indian Cloud Partner (ICP)  Set-up ICT infra to provide Secure Managed Cloud Services* at NDCs Implement cloud security solutions Provide Self service portal Burst into GCC/public cloud in case of capacity overload Provide hardware for fast provisioning of services Technology refresh and upgradation Manage O&M for entire data center Capacity Building of NIC team/personnel Client relationship management Adding new services Billing based on console data Manage day to day operations Human resource operations Knowledge Transfer Incident Management Helpdesk & Support Network Operation Center Security Operation Center Exit management Compliance to policies and SLA’s TECHNICAL BUSINESS OPERATIONS NIC shall ensure payout of lease/rentals for building/land rates at DC locations NIC will be provisioning of raw power at both the datacenters. NIC will provide required water and payment of water charges for DC cooling usage *Managed Services Definition ( Source: https://csrc.nist.gov/glossary/ ) PaaS : The consumer does not manage or control underlying cloud infra including N/W, servers, OS, or storage, but has control over deployed applications and possibly configuration settings for application-hosting environment. IaaS : The consumer does not manage or control the underlying cloud infra but has control over operating systems, storage, and deployed applications; and possibly limited control of select networking components (e.g., host firewalls).