REQUEST FOR PROPOSAL FOR OUTSOURCING OF …

1 REQUEST FOR PROPOSAL FOR OUTSOURCING OF DATA CENTER AND disaster recovery site AND services General Insurance Corporation of India Suraksha, 170, J. Tata Road, Churchgate, Mumbai 400 020. +91 22 22867166 / 22867158; E-mail Reference No.: ITMG/ 150 /2016-17. Date of issue of tender Document & download from GIC Re website: Submit before 03:00 on 20 March, 2017. General Insurance Corporation of India Information Technology Management Group Page 2 of 118 Table of Contents DEFINITIONS AND ACRONYMS .. 4 SECTION I .. 5 1. INTRODUCTION .. 5 2. OBJECTIVE .. 5 3. EMPANELMENT .. 5 4. BROAD REQUIREMENTS .. 6 5. SCOPE OF WORK .. 8 6. TENDER DOCUMENT .. 29 7. IMPORTANT DATES .. 30 8. QUERIES/ REQUEST FOR CLARIFICATION FROM BIDDERS.

2 30 SECTION II .. 31 1. ALL TERMS & 31 2. SUBMISSION OF BIDS .. 31 3. PLACE OF SUBMISSION .. 36 4. OPENING OF PRE QUALIFICATION CUM TECHNICAL BID & COMMERCIAL BID .. 37 5. PROCEDURE FOR PROCESSING THE BIDS .. 37 6. EARNEST MONEY DEPOSIT (EMD) .. 38 7. FORFEITURE OF EMD .. 38 8. REFUND OF EMD .. 39 9. REJECTION OF BIDS .. 39 10. VALIDITY OF PRICES QUOTED IN BID .. 39 11. SERVICE LEVEL AGREEMENT (SLA) .. 39 12. BUYBACK OF EXISTING EQUIPMENT .. 40 13. PERFORMANCE BANK GUARANTEE (PBG) .. 40 14. GENERAL INSTRUCTIONS .. 40 15. AUTHENTICATION OF BID .. 41 General Insurance Corporation of India Information Technology Management Group Page 3 of 118 16. PRICE .. 41 17. DELIVERY SCHEDULE .. 41 18. PAYMENT TERMS .. 42 19. BIDDER S UNDERSTANDING OF THE RFP.

3 42 20. GOOD FAITH STATEMENT .. 42 21. PUBLICITY .. 42 22. COMMUNICATION .. 42 ANNEXURE I .. 44 ANNEXURE II .. 50 ANNEXURE III .. 57 ANNEXURE IV .. 58 ANNEXURE V .. 61 ANNEXURE-VI .. 63 65 ANNEXURE-VIII .. 66 ANNEXURE - IX .. 73 ANNEXURE-X .. 101 ANNEXURE- XI .. 109 ANNEXURE XII .. 114 APPENDIX - I .. 118 APPENDIX II -QUERY FORMAT .. 119 General Insurance Corporation of India Information Technology Management Group Page 4 of 118 DEFINITIONS AND ACRONYMS AD Active Directory AMC Annual Maintenance Contract APT Advance Persistent Threat BGP Border Gateway Protocol BIW Business Information Warehouse BOBJ Business Object BOQ Bill of Quantities CAPEX Capital expenditure CCTV Closed-circuit television DB Database DC Data Center DMS Document Management System DR disaster recovery EMD Earnest Money Deposit EP Enterprise Portal ERM Enterprise Risk Management GIC Re General Insurance Corporation of India Reinsurer HO Head Office IDS Intrusion Detection System INR Indian Rupees IP Internet Protocol IPS Intrusion Prevention System IS-IS Intermediate

4 System - Intermediate System IT Information Technology ITMG Information Technology Management Group LUN Logical Unit Number MPLS Multiprotocol Label Switching NIC Network Interface Controller NOC Network Operations Center OEM Original Equipment Manufacturer OPEX Operational expenditure OS Operating System OSPF Open Shortest Path First PERT Project Evaluation and Review Technique PI Process Integrator PO Purchase Order RFP REQUEST for PROPOSAL RPO recovery Point Objective RTO recovery Time Objective SAN Storage Area Network SB Selected Bidder SLA Service Level Agreement SOC Security Operations Center SOW Scope of Work SPLA services Provider License Agreement SPLA Service Provider License Agreement SR Service REQUEST VMs Virtual Machines VPN Virtual Private Network vSAN Virtual SAN WAF Web Application Firewall WAN Wide Area Network General Insurance Corporation of India Information Technology Management Group Page 5 of 118 SECTION I OUTSOURCING OF DATA CENTER AND disaster recovery site AND services 1.

5 INTRODUCTION General Insurance Corporation of India (hereinafter referred to as GIC Re ) is a professional Reinsurer and provides comprehensive reinsurance services to all the direct property and casualty insurers in Indian Market. GIC Re also assumes reinsurance from foreign insurance companies. GIC Re of India has started leading the reinsurance programs of several insurance companies in neighboring SAARC Countries, South East Asia, Middle East and African continent. To offer its international clientele an easy accessibility and efficient service, GIC Re has enhanced its global presence by opening offices in London, Dubai and Malaysia and representative office in Russia. 2. OBJECTIVE GIC Re is issuing this RFP document (hereinafter referred to as the RFP which expression shall include all attachments and annexures hereto as well as all amendments, addendums, modifications and alteration hereto) to service providers, (hereinafter referred to as the Bidder ) to enable them to participate in the competitive bidding for OUTSOURCING of Data Center and disaster recovery site and services .

6 The selected Bidder has to provide, manage and maintain all necessary infrastructure components and services that would be necessary as per the defined requirements of the RFP. The selected Bidder has to ensure that the desired objectives of GIC Re IT infrastructure are fulfilled. 3. EMPANELMENT Besides selection of a Bidder for providing for OUTSOURCING of Data Center, and disaster recovery site and services for GIC Re, all Bidders who are shortlisted based on the prequalification cum technical criteria in this exercise, will be added to the Panel of approved Firms/Vendors/Consultants for providing Data Center and disaster recovery solutions for GIC Re (hereinafter referred to as the Panel ). The panel would be valid for a period not exceeding five years. GIC Re may directly approach the empaneled firms/vendors/consultants for Commercial Bids to carry out this or any other similar project should the need arise.

7 General Insurance Corporation of India Information Technology Management Group Page 6 of 118 4. BROAD REQUIREMENTS GIC Re s Data Center (DC) and disaster recovery (DR) site are presently hosted and managed by an external Professional Service Provider. The DC is located at Mumbai and DR is located at Chennai. The current infrastructure in DC is in CAPEX model (Co-location, Total cost of ownership, traditional Data Center) while DR infrastructure is in OPEX model. GIC Re is in requirement of OPEX model services for all of its computing requirements , security requirements, and networking requirements for its Data Center (virtualized private cloud setup for entire structure), and its DR site for the applications listed in the table below.

8 The entire private cloud setup for GIC Re would be in OPEX Model. For executing this activity, GIC Re wants a solution that will migrate the existing applications at the DC and DR to Private Cloud setups at new DC and DR sites to be identified by the bidder. 1. The proposed cloud solutions have to be hosted in an India-based facilities. 2. The selected bidder should provide at least availability per month. 3. The proposed solution should connect to all of GIC Re s domestic branches over MPLS links. 4. The selected Bidder has to propose Internet and MPLS connectivity based on the application landscape. 5. The cloud environment should include the option to connect over internet seamlessly for inbound traffic from end-users. The estimated bandwidth sizing has been given in Section I Sub - Clause 6. The cloud environment should have adequate security in place.

9 A detailed list of requirements are mentioned in the Section I Sub - Clause of this document. 7. The selected bidder should provide 24*7*365 support for the overall environment. The support mechanism has to be confirmed by the selected bidder with response times. 8. The selected bidder should have full time CCTV surveillance at the proposed Data Center where private cloud setup is installed. 9. The selected bidder should provide software VPN connectivity for selected GIC Re s users at their residences. The selected bidder should propose suitable hardware and software for VPN connectivity at the DC and DR in the proposed solution. The details of licensing & capacities provided are to be mentioned in the PROPOSAL from the selected bidder. Currently, GIC Re s foreign office locations at London, Dubai and Kuala-Lumpur are connected through site -to- site VPN.

10 The selected bidder should enable connection to General Insurance Corporation of India Information Technology Management Group Page 7 of 118 these locations by making necessary changes for the site -to- site VPN configuration as required. 10. The selected bidder should provide the backup solution as per GIC Re s backup policy mentioned in the SOW (under Section I clause 5). 11. The selected bidder should appropriately size and propose the options of virtual machines and bare metal servers as per information given by GIC Re (Current Sizing as per Annexure IV). The Virtual environment should not be sized beyond 80% utilization of physical Workload. 12. The selected bidder should provision processing/compute, memory, storage, network and security devices and other fundamental computing resources including Operating system, Databases and Hypervisors.