Integration services in the context of the implementation of an SDDC solution based on OpenStack in the IT-DLZ

"Confirm that you are technically, economically and humanly able to provide the tendered services in full in the planned project period" "Reliability: Confirm that you are technically, technically, economically and humanly able to provide a call 7x24." "The bidder undertakes to use only competent, efficient and reliable personnel who are familiar with the hardware and software products used and have the qualifications and experience required for the respective role." "Confirm that at the end of the first six months during the further term of the contract, at least half of the staff employed have at least six months of experience in the project or in cooperation with the client." Personnel Reserve: Confirm that you have at least one other person per role in your company/tendering community.

"Flexibility/quality of service" As part of the provision of services, the customer expects the contractor to act flexibly in order to be able to react quickly to emerging situations. In relation to the subject matter of the award, describe how you will achieve the highest level of service quality with a flexible willingness to act. In particular, address the organizational possibilities of your company (e.g. failure of the person intended for the IT-DLZ).

It is particularly important to the client that the contractor has a personnel concept that binds personnel to the company in the long term and ensures regular further training through internal or external measures.

"Key positions: Confirm that the key roles (lead architect and senior engineer) required for the provision of services are staffed and ready for use by suitable people within three weeks of the service call or at the agreed start of the project." "Reliability check ZÜ": Confirm that the persons designated for the IT DLC are willing to undergo a reliability check (ZÜ) according to type. 60a Police Tasks Act (PAG).

"The background check does not replace the security check." However, a positive result allows for faster deployment while the security check is carried out in parallel. As a rule, a reliability check to max. One week is completed. "Security Check: Confirm that the persons designated for the IT DLC are ready to undergo a simple BaySÜG security check (Ü1)."

"Introduce your company / bidding consortium, addressing the general service portfolio and the main areas of activity over the past 3 years.

In doing so, make particular reference to the subject matter of the tender and, where available, to your experience in working with public administration clients." "Confirm that your company/bidding consortium is based within the EU/EEA (if applicable)" "Do all IT systems used meet the following requirements: Operation and administration of the systems as well as data storage in Europe. No forwarding / transmission to or access from a country outside the EU/EEA (third country) may occur.

Any such access or transmission possibilities must additionally be technically prevented.""Minimum technological competence The bidder demonstrates at least three years of experience with the offered platform. Minimum requirements are: > three years of project experience with OpenStack or Bare Metal Kubernetes and corresponding verifiable productive installations.

Alternatively: Proof of certified engineers or manufacturer/partner status." "Technical solution concept Confirm that you can provide a complete and comprehensible technical solution concept for the SDDC. Describe the architectural understanding and the fit with the client's target architecture.

In doing so, address HLD and LLD for OpenStack basis or Bare Metal Kubernetes, control plane and data plane, compute, storage and network, automation, IT security and multi-tenancy, high availability and scaling, as well as the integration of existing basic services and interfaces, which must be based exclusively on open source.

In addition, present vendor neutrality, the avoidance of vendor lock-in, the bill of materials, and architecture decision records." "Methodology and procedural model The bidder describes a comprehensible and structured procedural model. Minimum requirements are:

• Design phase,
• Implementation phase,
• Testing and acceptance, as well as
• Knowledge transfer. " "Testing and operations The bidder submits a robust test concept for the platform. Minimum requirements are:
• Functional tests,
• Failover and resilience tests, as well as
• Clear acceptance criteria" "Training and knowledge transfer concept The bidder submits a structured training concept. Minimum requirements are:
• Hands-on training and
• Suitable training materials." "Operational and process integration The bidder describes the integration into existing operational processes. Minimum requirements are:
• An ITIL-oriented approach,
• Defined roles and responsibilities, and at least
• The processes incident management,
• Change management, and
• Problem management." Confirm that continuously accessible on-call duty is ensured during the agreed times. This is to be staffed with skilled personnel who are familiar with the managed systems. Incident reports must be accepted via the designated communication channels and processed competently within the response time agreed upon for each incident category.Deputy, escalation, and documentation procedures must be defined in a binding manner and maintained throughout the entire contract term. "Operational support and service Confirm that you can provide structured support to the client in the event of a genuine Priority 1 incident. Using a concrete case example, describe the first 60 minutes of incident handling, the escalation paths, communication with the client, and the recovery measures.Initial scenario as an example: The OpenStack control plane has partially failed and there is a simultaneous disruption in the SDN. In addition, name the specific OpenStack distribution and the associated support model." Confirm that you have an ITSM tool/ticketing system that meets the requirements specified in the service description, particularly regarding data protection."Escalation: Describe your planned procedure for resolving escalations (e.g., due to insufficient quality, customer complaints, lack of availability). Minimum requi…

Please indicate the annual turnover in euro (net) for the last three closed financial years. The information is required and listed separately for: - the bidder - in the case of bidding associations for each member of the bidding community To the extent that your company has not been active on the market for more than three years, present the respective sales figures from the start of business. In this case, the average annual turnover (net) from the start of the business is taken into account. Confirm that your company’s average annual turnover over the past three years has been at least twice the order volume for which an offer is made.

Please indicate the turnover on call in euro (net) for the last three closed financial years. The information is required and listed separately for: - the bidder - in the case of bidding associations for each member of the bidding community To the extent that your company has not been active on the market for more than three years, present the respective sales figures from the start of business. In this case, the average annual turnover (net) from the start of the business is taken into account.

"The required reference project can only be cited and evaluated if significant persons who will be used for the present service were involved in the respective project implementation!" Only projects carried out for external clients are recognised as references. "Reference projects are comparable if they meet the following criteria:

• technical complexity corresponds to the system landscapes described in the specification of services
• the services provided correspond to the activities required in the specification of services
• the references mentioned may be max. 4 years ago (please specify the exact periods).
• Duration at least. 2 years
• budget amount per reference at least. 1,2 million Euro net
• for the specified reference the bidder was min. 80 percent of the total budget of the project
• number of specialist roles involved in the project at least. The bidder demonstrates at least two comparable reference projects in the area of software defined data center or cloud platform. Minimum requirements are:
• at least 100 nodes in final construction as well as
• a range of services with architectural design,
• implementation
• commissioning and
• readiness to call

Information Security and Compliance: The bidder has a valid information security certificate according to ISO/IEC 27001 or a certification according to BSI IT-Grundschutz and has an information security management system (ISMS) in its own company.