SOURCES SOUGHT
R -- Hosting Services - applications with common systems, such as its Unix, Windows, and Linux.
- Notice Date
- 11/6/2015
- Notice Type
- Sources Sought
- NAICS
- 541513
— Computer Facilities Management Services
- Contracting Office
- Small Business Administration, Office of Chief Finanical Officer- Aquisition Division, SBA Contracting, 409 Third Street, S.W., Washington, District of Columbia, 20416, United States
- ZIP Code
- 20416
- Solicitation Number
- SBAHQ-16-HOSTING
- Point of Contact
- Toni Hoskinson, Phone: 202-205-7457
- E-Mail Address
-
toni.hoskinson@sba.gov
(toni.hoskinson@sba.gov)
- Small Business Set-Aside
- N/A
- Description
- This is a SOURCES SOUGHT ANNOUNCEMENT to be used for market analysis ONLY to determine if there are a sufficient number of qualified SMALL BUSINESS firms that can provide a TIER 3 HOSTING FACILITY. NAICS code is 541513; size standard is $27.5 million. ONLY SMALL BUSINESS FIRMS SHOULD RESPOND TO THIS ANNOUNCEMENT. NO SOLICITATION WILL BE AVAILABLE AT THIS TIME. The Small business Administration (SBA) intends to award a Firm Fixed Price Indefinite Delivery/Indefinite Quantity (IDIQ) contract to support this effort. SBA expects the effort will assist with minimizing and managing operational costs effectively as well as maximizing efficiencies by partnering with a provider who hosts applications with common system architecture to that of SBA, such as its Unix, Windows, and Linux. SBA is seeking an experienced and resourceful partner for this hosting contract, who will use innovative means to provide a stable and cost effective operational environment which must support agency systems, applications and their underlying databases in a current state. The SBA is seeking a dependable, flexible, yet cost efficient approach for hosting its systems. SBA seeks planned and predictable maintenance costs that will let the agency achieve effective functional performance but in a shared servicing environment for its systems. Facilities Provide a tier 3 hosting facility as described in the Uptime Institute Tier Standard: Operational Sustainability. You will find a copy of this publication at www.uptimeinstitute.org. SBA's workload is highly unpredictable. We require flexibility to meet changing capacity needs will be critical to the success of this hosting effort and Agency goals. We can have a 24x7 operation during some periods. Facilities must be approved by SBA. The primary location must be within 30 miles of the DCMS Operations Center for SBA's system (DCMS) located in Herndon, Virginia and SBA Headquarters in Washington, DC. The hosting facilities should be supplied with electrical power from discrete grid segments, or a similar method ensuring that a power failure at an electrical substation does not leave the facility operating on engine-driven generators or battery backup power alone. Provide hosting services at sites that are geographically located in areas of the continental United States not subject to a greater than average exposure to natural disasters that would unduly threaten infrastructure services supporting the SBA's mission critical application to assist victims of these same natural disasters. Provide Physical security at the hosting facility with an approved SBA access list. Access must be available 24x7x365 with 30 minute prior notification. Provide access to SBA authorized industry partners and staff for audit, Internal Verification & Validation and other Government- approved purposes. Facilities must be scalable to support varying workload requirements as well as application performance requirements. The facility must be managed by the primary contract company. Technical Provide the capability to host and support multiple instances of approved systems as defined by the specified Task Order. To include, but not limited to, development, testing, training, production and disaster recovery instances; with reporting capability configured in an appropriate instance which permits minimized licensing costs. Allow remote VPN and direct hands-on, application and database administration by SBA authorized individuals, where applicable. All non-SBA initiated platform patches must be fully tested prior to being applied to production systems or devices providing connectivity and access to the SBA systems and be approved by the appropriate SBA program office/system owners to ensure minimal impact to the SBA user population. Application administration information, schedules and standards are to be made available to all relative SBA program Offices and the Office of the Chief Information Officer for oversight, security and quality assurance purposes. Disaster Recovery Provide secure, off-site encrypted media storage for backup schedule to be negotiated. SBA data must be segregated from other customer. Provide Backup hosting facilities at least 200 miles away from the primary hosting facility and be on a separate national power grid. In the event of a major catastrophe, provide disaster recovery, including failover to disaster recovery site within 24 hours of failure or declaration of an emergency by a specific system business owner or the SBA CIO. Please detail your procedures for testing the disaster recovery mechanisms and procedures and the frequency of the tests. Host facility operations in this regard must meet or exceed all current and future SBA information technology requirements for contingency of operations planning and disaster recovery. Communication Hosting facility must include base power and connectivity to the hosting company's Internet backbone. More than one internet provider must be available and all internet connectivity must be redundant from all providers to both the primary and backup facilities. Provide the ability to integrate into SBA's existing VPN extranet. SBA uses a combination of AT&T Global and Cisco Smart Net VPN technologies and prefers to introduce an SBA Smart Net device into the hosted environment. The industry partner will have to work with the SBA Office of the Chief Information Officer staff to integrate into the SBA network. Public and Private IP network offering need to support IPv4 and IPv6 traffic with service provider delegated addressing schemes where appropriate. SBA maintains a TIC compliant portal. Hosting provider must be able to meet OMB mandate to provide access to SBA Trusted Internet Connections in adherence to the following: OMB M-08-05, Implementation of Trusted Internet Connections OMB M-08-16, Guidance for Trusted Internet Connection Statement of Capability Form OMB M-08-26, Transition from FTS 2001 to Networx OMB M-08-27, Guidance for Trusted Internet Connection Compliance NSPD-54/HSPD-23, Comprehensive National Cyber Security Initiative Provide duel internet access connections with ISP diversity, private line connecting data centers for DB replication, private line connection from HQ and Denver Finance Center to each data center. The industry partner must provide SBA with scalable bandwidth to meet Task Order requirements. DCMS and JAAMS bandwidth requirements consists of 50 mbps minimum per line burstable to 1Gbps. Current configuration is of six (6) 9 mbps lines with an aggregate base commit rate of 45 mbps, burstable to 100 mbps that provide connectivity and redundancy between datacenters and connectivity to HQ and Denver Finance Center. Fixed price will include the 9 mbps line(s). Provide additional pricing for bursts. Provide network and facility availability of at least 99.9%. Provide hosting platform availability of at least 99.5%. Must provide Service Level Agreements (SLA) to address this availability and escalating penalties for failures to meet requirements. Security Maintain secure intranet network to prevent unauthorized access; provide firewall with network intrusion detection system, virus protection and vulnerability scanning in both data centers. Host facility operations in this regard must meet or exceed all current and future SBA information security requirements. The hosting facility must be annually audited according to Standards for Attestation Engagements (SSAE) No. 16. The audit must cover a significant portion of the federal fiscal year cycle. The annual audit must end no sooner than April 30 and be delivered no later than August 1. Support the SBA Office of Chief Information Officer (OCIO) Authority to Operate (ATO) and any additional audit processes for any system or application with such a requirement. Other Support Provide tier 2 and 3 Help Desk/Service Desk support to track incidents, troubleshoot platform problems, and to assist in the resolution of problems. Provide formal helpdesk/support services with statistics and escalation procedures to troubleshoot functional and technical problems reported. The services must include access to a formal trouble ticketing system that can provide detailed reports of problem resolution and response times to SBA. Provide all consumables required at the hosting facility such as paper, printer ribbons, ink, toner, tapes, other media and so forth. 7X24 server monitoring with service desk support Provide continuous monitoring and reporting for identified communication lines to include latency, performance, utilization, and availability. Provide optional services to include but not limited to: network and firewall hardware with configuration support; movement and mounting of hardware etc. Planned maintenance will be at an agreed upon schedule. SBA requires 14 day notice of maintenance and time and day of maintenance at SBA discretion from the hosting facility. Other planned maintenance will be scheduled and approved by SBA. All interested SMALL BUSINESS firms are encouraged to respond to this notice by submitting a brief capability statement addressing the Facilities, Technical, Disaster Recovery, Communication, Security, and Other Support listed above. The capability statements must answer the following questions: 1. Does your company mange tier 3 hosting facilities that include: primary location with 30 miles of Herndon VA; power supply including discrete power grid segment and power backup solution, physical security with 24X7X265 access as described in the Facilities Section above? 2. Does your company manage a tier 3 hosting facility, at least 200 miles away from the primary site and on a separate national power grid? A site meeting these requirements is mandatory for a recovery facility. 3. Do the hosting facilities described in your answers to questions 1 & 2, provide redundant internet connectivity between sites that supports IPv4 and IPv6 traffic and meet the OMB directives listed under Communication? 4. Do the hosting facilities described in your answers to questions 1 & 2, maintain current SSAE No. 16 compliance? The capability statement shall be no more than 2 pages in length. The response must show that the firm possesses the ability to provide and manage the facilities and these requirements. This is not a request for competitive proposals or quotations. There is no solicitation at this time. This notice is to determine if there are an adequate number of interested Small Business Concerns capable of providing a Tier 3 Hosting Facility. A determination by the Government to proceed with the acquisition as a set-aside for Small Business is within the discretion of the Government. A Firm-Fixed price IDIQ contract (base with 4 option years) are contemplated; interested parties may submit technical literature showing their capability of meeting the Governments requirement by December 4, 2015 at 2:00 p.m. MST. Email your response demonstrating your firms experience and capabilities to Toni.Hoskinson@sba.gov
- Web Link
-
FBO.gov Permalink
(https://www.fbo.gov/spg/SBA/OOA/OPGM/SBAHQ-16-HOSTING /listing.html)
- Place of Performance
- Address: 30 Miles from Herndon A and SBA HQ, Washington, DC. AND additional approved site per the details above., United States
- Record
- SN03940390-W 20151108/151106233954-e35955739c194ebca8a2807d88e7595a (fbodaily.com)
- Source
-
FedBizOpps Link to This Notice
(may not be valid after Archive Date)
| FSG Index | This Issue's Index | Today's FBO Daily Index Page |