Request for Proposal for Managed Services for ICT

Transcription

Request for Proposal for Managed Services for ICT
DIST
Request for Proposal
for
Managed Services for ICT Infrastructure
23-Mar-2012
version [ v1.2 - Final ]
Reference: RFP/2012/479
Notice of Confidentiality:
This document, its appendices, and all annexes, are the property of the Office of the United Nations
High Commissioner for Refugees (UNHCR). Use of the contents of this document, its appendices,
and all annexes is provided to you for the sole purpose of responding to this Request for Proposal. It
may not be otherwise copied, distributed or recorded on any medium, electronic or otherwise without
UNHCR’s express written permission.
Request for Proposal
Managed Services for ICT Infrastructure
DIST
Table of contents
1
Introduction ................................................................................................................................. 6
1.1
1.2
1.3
1.4
1.5
2
BACKGROUND ....................................................................................................................... 6
OBJECTIVES .......................................................................................................................... 6
SCOPE OF ICT INFRASTRUCTURE MANAGED SERVICE............................................................. 6
OUT OF SCOPE INFRASTRUCTURE SERVICES ........................................................................... 7
TIMEFRAME ........................................................................................................................... 7
DIST Organizational Structure ................................................................................................... 8
2.1
2.2
2.3
2.4
2.5
2.6
2.7
2.8
3
BACKGROUND ....................................................................................................................... 8
ROLE OF DIST ...................................................................................................................... 8
PROJECT PROMETHEUS......................................................................................................... 8
ORGANIZATION FUNCTIONAL DESIGN ..................................................................................... 9
EXECUTIVE OFFICE OF THE CIO ........................................................................................... 10
TECHNICAL AUTHORITY ....................................................................................................... 10
BUSINESS RELATIONSHIP MANAGEMENT SERVICE ................................................................ 11
ICT OPERATIONS SERVICE .................................................................................................. 12
Connect & Collaborate.............................................................................................................. 15
3.1
3.2
3.3
3.4
4
BACKGROUND ..................................................................................................................... 15
OBJECTIVES ........................................................................................................................ 15
SCOPE ................................................................................................................................ 16
PROGRESS TO DATE ............................................................................................................ 16
Introduction of ICT Managed Services.................................................................................... 17
4.1
4.2
4.3
4.4
4.5
4.6
4.7
5
RATIONALE FOR MANAGED SERVICES .................................................................................. 17
MANAGED SERVICES LANDSCAPE ........................................................................................ 17
CORE INFRASTRUCTURE MANAGED SERVICES ...................................................................... 19
CORPORATE MESSAGING SERVICES..................................................................................... 20
TRANSITION TO MANAGED SERVICES ................................................................................... 20
SERVICE W INDOW ............................................................................................................... 20
GENERIC REQUIREMENTS .................................................................................................... 21
UNHCR ICT Infrastructure Landscape .................................................................................... 22
5.1
5.2
5.3
5.4
5.5
5.6
5.7
5.8
6
HIGH-LEVEL TOPOLOGY ....................................................................................................... 22
DATA CENTRE - HUBS ......................................................................................................... 22
NETWORK AND LAN ............................................................................................................ 22
DESKTOP ............................................................................................................................ 23
DISASTER RECOVERY AND BUSINESS CONTINUITY ................................................................ 23
CATEGORIZATION OF UNHCR OFFICE LOCATIONS ................................................................ 23
TARGET INFRASTRUCTURE LANDSCAPE ................................................................................ 24
OUT OF SCOPE INFRASTRUCTURE SERVICES ........................................................................ 24
Data Centre Service Scope ...................................................................................................... 26
6.1
6.2
SUPPORT SERVICES ............................................................................................................ 26
IMPLEMENTATION OF NEW DATA CENTRE SERVICES .............................................................. 28
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2 - Final
RFP/2012/479
Page 2 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
6.3
6.4
6.5
7
SERVICE W INDOW ............................................................................................................... 28
MINIMUM AND OPTIMUM OPERATING HOURS.......................................................................... 29
SERVICES OUT OF SCOPE .................................................................................................... 29
Network and LAN Service Scope ............................................................................................. 30
7.1
7.2
7.3
7.4
8
SUPPORT SERVICES ............................................................................................................ 30
MINIMUM AND OPTIMUM OPERATING HOURS.......................................................................... 32
IMPLEMENTATION OF NEW NETWORK AND LAN SERVICES...................................................... 32
OUT OF SCOPE NETWORK AND LAN SERVICES ..................................................................... 32
IMAC Services ........................................................................................................................... 33
8.1
8.2
8.3
8.4
9
SUPPORT SERVICES ............................................................................................................ 33
MINIMUM AND OPTIMUM OPERATING HOURS.......................................................................... 34
IMPLEMENTATION OF NEW IMAC SERVICES........................................................................... 34
OUT OF SCOPE IMAC SERVICES .......................................................................................... 35
Desktop Service Scope ............................................................................................................ 36
9.1
9.2
9.3
9.4
9.5
10
SUPPORT SERVICES ............................................................................................................ 36
SOFTWARE TOOLS ............................................................................................................... 39
MINIMUM AND OPTIMUM OPERATING HOURS.......................................................................... 39
IMPLEMENTATION OF NEW DESKTOP SERVICES ..................................................................... 39
OUT OF SCOPE DESKTOP SERVICES .................................................................................... 39
Corporate Messaging Service Scope ...................................................................................... 40
10.1
10.2
10.3
10.4
11
Generic Requirements .............................................................................................................. 43
11.1
11.2
11.3
11.4
11.5
11.6
11.7
11.8
11.9
11.10
11.11
12
SERVICE MANAGEMENT PROCESSES.................................................................................... 43
BUSINESS CONTINUITY ........................................................................................................ 43
POLICY AND STANDARDS ..................................................................................................... 44
ANNUAL REVIEW ................................................................................................................. 44
MONTHLY REPORT .............................................................................................................. 44
PROJECT AND DEVELOPMENT PERFORMANCE ...................................................................... 45
AD HOC REPORTS ................................................................................................................ 45
SATISFACTION SURVEY........................................................................................................ 45
ACCESS TO INFRASTRUCTURE.............................................................................................. 45
LICENSE AND ASSET MANAGEMENT ....................................................................................... 45
VENDOR MANAGEMENT ........................................................................................................ 46
Infrastructure Skills Inventory ................................................................................................. 47
12.1
12.2
12.3
12.4
13
SUPPORT SERVICES ............................................................................................................ 40
MINIMUM AND OPTIMUM OPERATING HOURS.......................................................................... 41
IMPLEMENTATION OF NEW CORPORATE MESSAGING SERVICES .............................................. 41
OUT OF SCOPE CORPORATE MESSAGING SERVICES ............................................................. 42
SERVICE DEVELOPMENT ...................................................................................................... 47
SERVICE DESIGN................................................................................................................. 48
SERVICE SUPPORT AND OPERATIONS................................................................................... 49
PROJECT MANAGEMENT ....................................................................................................... 51
Service Levels and Performance Targets ............................................................................... 54
13.1
13.2
13.3
CRITICALITY AND PRIORITY MATRICES .................................................................................. 54
OBJECTIVES OF SERVICE LEVEL AGREEMENTS ..................................................................... 56
SERVICE LEVEL AGREEMENTS FOR INFRASTRUCTURE SUPPORT ACTIVITIES .......................... 56
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2 - Final
RFP/2012/479
Page 3 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
13.4
13.5
14
RFP Technical Response ......................................................................................................... 60
14.1
14.2
14.3
14.4
14.5
15
UNHCR GENERAL TERMS AND CONDITIONS FOR THE PROVISION OF SERVICES .................... 65
STANDARD UNHCR CONTRACT FOR SERVICES .................................................................... 65
ADDITIONAL CONTRACTUAL DOCUMENTATION ....................................................................... 65
LEGAL REPRESENTATIVE...................................................................................................... 65
CONTRACT TERM................................................................................................................. 66
COMMERCIAL TERMS ........................................................................................................... 66
PAYMENT MECHANISM ......................................................................................................... 66
PERFORMANCE REGIME ....................................................................................................... 66
CHANGE MANAGEMENT ........................................................................................................ 67
GOVERNANCE AND REPORTING ............................................................................................ 67
TRANSITION AND MIGRATION................................................................................................ 67
EXIT PROVISIONS ................................................................................................................ 68
STAFF MANAGEMENT .......................................................................................................... 68
SUB-CONTRACTING ............................................................................................................. 68
STAFF TRANSFER ................................................................................................................ 68
ASSET OWNERSHIP ............................................................................................................. 69
FLEXIBILITY ......................................................................................................................... 69
DATA SECURITY AND DATA PROTECTION .............................................................................. 69
CODE OF CONDUCT ............................................................................................................. 69
NON-DISCLOSURE AGREEMENTS ......................................................................................... 69
RFP Price Quotation ................................................................................................................. 70
16.1
16.2
16.3
16.4
16.5
16.6
16.7
17
COMPANY PROFILE .............................................................................................................. 60
INFRASTRUCTURE MANAGED SERVICES CAPABILITY ............................................................. 61
CASE STUDIES AND REFERENCE SITES ................................................................................ 62
MANAGED SERVICES LIFE CYCLE ......................................................................................... 62
MANAGED SERVICES GOVERNANCE ..................................................................................... 63
RFP Contractual Response ...................................................................................................... 65
15.1
15.2
15.3
15.4
15.5
15.6
15.7
15.8
15.9
15.10
15.11
15.12
15.13
15.14
15.15
15.16
15.17
15.18
15.19
15.20
16
SERVICE LEVEL AGREEMENTS FOR INFRASTRUCTURE DEVELOPMENT ACTIVITIES .................. 59
SERVICE AVAILABILITY TARGETS .......................................................................................... 59
CURRENCY OF OFFER AND CONTRACT .................................................................................. 70
MODULAR PRICE STRUCTURE ............................................................................................... 70
TRANSITION PHASE ............................................................................................................. 70
INFRASTRUCTURE SUPPORT AND MAINTENANCE COMPONENT ............................................... 70
IMAC COMPONENT.............................................................................................................. 71
INFRASTRUCTURE DEVELOPMENT COMPONENT..................................................................... 71
PRICE EVALUATION MATRIX ................................................................................................. 71
Evaluation Process ................................................................................................................... 72
17.1
17.2
17.3
17.4
17.5
SUBMISSION OF PROPOSALS................................................................................................ 72
TECHNICAL EVALUATION ...................................................................................................... 72
COMMERCIAL TERMS EVALUATION ....................................................................................... 73
PRICE EVALUATION ............................................................................................................. 73
BEST AND FINAL OFFERS ..................................................................................................... 73
A.
Glossary ..................................................................................................................................... 74
B.
Comprehensive Infrastructure Service Catalogue ................................................................ 75
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2 - Final
RFP/2012/479
Page 4 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
COMMUNICATIONS .............................................................................................................................. 75
ICT INFRASTRUCTURE ........................................................................................................................ 75
C.
Service Management Processes ............................................................................................. 77
D.
Document Templates ................................................................................................................ 78
SERVICE MANAGEMENT FORMS........................................................................................................... 78
PROJECT OFFICE TEMPLATES ............................................................................................................. 78
STANDARD STATEMENTS OF W ORK ..................................................................................................... 78
E.
Metrics ........................................................................................................................................ 79
INCIDENTS .......................................................................................................................................... 79
CHANGE REQUESTS ........................................................................................................................... 79
F.
External Annexes to this document ........................................................................................ 80
Table of figures
Figure: 1: DIST organizational design. .................................................................................................... 9
Figure: 2: GSD coverage by location (GMT based, not adjusted for DST). .......................................... 14
Figure: 3: High-level scope and Managed Services Requirements. ..................................................... 18
Figure: 4: Infrastructure Managed Services overview. .......................................................................... 19
Figure: 5: Generic Services overview. ................................................................................................... 21
Figure: 6: Minimum and optimum Data Centre support operating hours. ............................................. 29
Figure: 7: Incident Criticality Matrix. ...................................................................................................... 54
Figure: 8: Priority Matrix. ....................................................................................................................... 55
Figure: 9: Level 2 Response Time. ....................................................................................................... 56
Figure: 10: Level 2 Restore Time. ......................................................................................................... 57
Figure: 11: Problem Management Remediation Target. ....................................................................... 57
Figure: 12: Service Request Response Time........................................................................................ 58
Figure: 13: Information Request Resolution Targets. ........................................................................... 58
Figure: 14: Level 3 Work Request Response Time. ............................................................................. 59
Figure: 15: Change Plan Response Time. ............................................................................................ 59
Figure: 16: Availability targets (percentage up-time). ............................................................................ 59
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2 - Final
RFP/2012/479
Page 5 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
1
Introduction
This document is UNHCR’s Request for Proposal (RFP) for the introduction of a “managed
service” for ICT Infrastructure services.
1.1
Background
The Division of Information Systems and Telecommunications (DIST) is in the process of a
major change initiative, aimed at transforming DIST into a service-oriented (as opposed to
technology-focused) organization which provides effective support for UNHCR’s operations.
This will benefit end users, and ultimately refugees, by:
• Ensuring the effective and timely provision of accurate and complete information to
UNHCR field staff;
• Supporting a rapid response to protecting refugees and safeguarding their well-being.
This improved service will be brought about, in part, by freeing staff to engage more directly
with their customers and focus on enabling enhanced ICT support to UNHCR, rather than
the day-to-day running of ICT services. The introduction of “Managed Services” for ICT
Infrastructure is seen as an essential component of the enhanced services offered by DIST
to the Divisions, Bureau, and Field.
DIST has already engaged a Managed Service Partner for development, maintenance and
support of its ICT Applications. Full transition to this partner will be complete by April 2012.
1.2
Objectives
The objective of this RFP is to:
• Identify and establish a “Managed Services” contract with ideally one, but possibly
more, companies that can assume responsibility for the ICT Infrastructure as described
in this request for proposal.
1.3
Scope of ICT Infrastructure Managed Service
With only a few exceptions (noted below), DIST is looking to transition the ICT Infrastructure
previously managed internally to an external “managed service” provider. This includes
infrastructure and services of strategic importance to the organization and used world-wide
(e.g. Data Centre management, Network management, IMAC Services, Desktop support,
Corporate Messaging).
1.3.1
Data Centre Management
This component will cover: Data Centre hardware and software support and maintenance;
systems monitoring and housekeeping; storage management and capacity planning; backup
and recovery; business continuity and disaster recovery planning and execution.
1.3.2
Network Management
This component will cover: Network hardware and software support and maintenance;
Network security management; LAN Administration (except end user identity management);
Network installations and de-installations, upgrades, etc.
Network technologies will include LAN, WAN, Wireless/WiFi, unless already managed by
another third party (e.g. VSAT, MPLS, ISP, etc.).
1.3.3
IMAC Services
1
This component will cover the day-to-day Installation, Move, Addition, and Change to
standard infrastructure configuration items based on a predefined catalogue and rates.
1
Also referred to as MACD (Move, Add, Change, Delete)
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 6 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
1.3.4
Desktop Support
This component will cover: Management of standard configurations for desktop images
including all office software, anti-virus, etc.; distribution of updates, patches, and new
releases; component replacement on failure; mobile devices (smart phones, tablets); asset
management; and user training, VIP services.
1.3.5
Corporate Messaging
This component will cover: All aspects of UNHCR’s global email messaging system
including synchronisation to mobile devices; collaborative and social networking tools.
1.4
Out of scope infrastructure services
Not all aspects of UNHCR’s ICT Infrastructure are within the scope of this RFP. In particular
the following are considered out of scope:
• Service Desk
• User Identity Management
• Print Services
• WAN services (VSAT and MPLS)
• Telephony and Video Conferencing
• Local ISP connections
• Deep Field communications
1.5
Timeframe
UNHCR is hoping to award the contract to the successful supplier before the end of June
2012, and have completed the transition to fully operational ICT Infrastructure managed
services by the end of September 2012. We recognize that this is an aggressive timeline,
but it is one that we will strive to meet by selecting a partner that has a proven track record
in each domain.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 7 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
2
DIST Organizational Structure
This section provides a background to UNHCR and the Division of Information Systems and
Telecommunications (DIST).
2.1
Background
In more than six decades, UNHCR has helped tens of millions of people restart their lives.
UNHCR personnel operate in some 120 countries around the world, from major capitals to
remote, difficult locations where field staff are directly helping the most vulnerable victims of
displacement. UNHCR maintains offices in donor countries worldwide and wherever
refugees are arriving, working closely with governments to ensure the 1951 Refugee
Convention is honoured. Today, approximately 7,200 staff continues to help some 36.4
million persons.
Staff at the Geneva headquarters now number just over 9% of the total, a declining portion
as UNHCR gets closer to the people it assists. Geneva, along with the Global Service
Centre in Budapest provides support for the rest of UNHCR, including key administrative
functions.
The largest portion of the organization’s staff is based in countries in Asia and Africa, the
continents that both host and generate the most refugees and internally displaced persons
(IDP). Many beneficiaries are in isolated locations where staff works in difficult - and often
dangerous - conditions. Among the largest operations are Afghanistan, Pakistan, Iraq and
surrounding countries; Chad, Democratic Republic of the Congo, Sudan, Somalia, Kenya,
and Colombia. But there are also substantial operations in many other countries around the
world.
As a United Nations agency, UNHCR enjoys privileges and immunities in all countries it
works. These privileges and immunities are extended to the organization's staff, assets,
facilities, and services.
For more information on UNHCR, please refer to www.unhcr.org
2.2
Role of DIST
The Division of Information Systems and Telecommunications (DIST) provides Information
and Communication Technology (ICT) playing a vital role in supporting UNHCR’s mission.
DIST is responsible for the maintenance, evolution and support of UNHCR's ICT systems,
whilst planning ahead to meet the organization’s new and increasing reliance on information
technology through new ICT project initiatives. DIST provides ICT services and support to
meet the needs of all Divisions, Bureaux and Field Offices within UNHCR while ensuring
that necessary governance mechanisms are in place and standards are adopted and
adhered to.
2.3
Project Prometheus
DIST is in the middle of a major change programme (Project Prometheus), of which the
introduction of Managed Services for ICT Infrastructure is seen as a significant work stream.
The main objectives of the Project Prometheus are to:
1. Align DIST and the UNHCR ICT Systems with the priorities of the organization – as a
service-providing entity, DIST should be structured around the ICT services and support
needs of the organization both at HQ and in the field.
2. Strengthen ICT Governance – the appropriateness and cost-effectiveness of all ICT
investments and expenditures must be subjected to close scrutiny to ensure that
UNHCR gets the best products, services and value for money while avoiding investment
in redundant and obsolete technologies and services.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 8 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
3. Leverage technology and modernize UNHCR’s ICT Systems – move from running and
maintaining specific technologies and applications to implementing managed services,
thereby focusing more on service delivery, interaction with the business owners, and
exploring and understanding the market to leverage technology. Existing ICT
infrastructure and systems should be modernized by adopting relevant and costeffective technologies to provide end-to-end services that enable UNHCR to conduct its
business more effectively and efficiently.
4. Build capacity to manage specialists – build capacity to manage specialists engaged
under Framework Agreements and via Managed Service contracts, to ensure that the
organization gets the best services and value for money.
5. Strengthen ICT capacity and flexibility – Ensure that adequate capacity exists for the
design and implementation of customized solutions when certain ICT needs cannot be
met by what is commonly available in the market. Build increased and flexible capacity,
in human resources, equipment, communication and network capabilities, to meet the
demands of the business, putting in place alternatives and standby arrangements to
prevent and professionally handle service disruptions, address unexpected surges in
demand, and respond to field emergencies.
6. Create service-oriented, secure and customer-friendly ICT systems and services –
Ensure the involvement of the end users from the design and development of ICT
systems and services to their testing, rollout, and operation. ICT services should be
demand-driven. DIST must focus on the delivery of end-to-end services as opposed to
running specific technologies and providing specific service components.
2.4
Organization Functional Design
To this end, a new organizational structure has been implemented (Figure: 1 below) - based
on the ICT functions that DIST must have to effectively manage and deliver ICT services to
the rest of UNHCR and engage other Divisions, Regional Bureaux and the Field. Roles and
responsibilities, and skills necessary for carrying out these functions, have been clearly
defined based on SFIA (Skills Framework for the Information Age). This new structure is
now in place and will be fully operational to coincide with the implementation of the
Managed Services being sought in this RFP.
Figure: 1: DIST organizational design.
A new ICT Services Centre has been established in Amman, Jordan, significantly
strengthening DIST’s capabilities to provide services to all UNHCR Offices and by bringing
ICT services closer to major operations in the Middle East, Asia and Africa. DIST functions
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 9 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
are essentially located in three main locations (Geneva, Amman, and Budapest) with
additional satellite hubs in Kuala Lumpur and Panama. The latter two have been
strengthened to provide infrastructure and application support covering different time-zones
and thus enabling DIST to provide “lights on” support for all normal UNHCR office working
hours worldwide – with the plan to move to full 24x7 in the future.
The following subsections describe the major Services and Sections within the Division and
how they relate to Infrastructure and related services.
2.5
Executive Office of the CIO
The Office of the Chief Information Officer (CIO) provides overall strategic guidance,
planning and management as well as programme monitoring and management of ICT
services and resources in the organization. The Office is supported by three Deputy
Directors: Technical Authority (Chief Architect), Business Relationship Management, and
Operations Management whose input will be crucial in shaping the strategic direction of ICT
in the organization. The CIO’s Office is also supported by a Resource Management Unit.
The main responsibilities of the CIO’s office include:
• Alignment of the ICT function and DIST’s activities with the organization’s strategic
goals;
• Alignment of technology with the ICT needs of UNHCR business;
• Strategic planning and ensuring the delivery of effective and efficient ICT services;
• Drive ICT innovation and modernization;
• Support the Business Relationship function in the development of better business
systems and services;
• Support Operations Management in the delivery of ICT Services;
• Provide advice, guidance and support to the ICT Governance Board;
• Oversee resource management and administrative support;
• Direct Project Portfolio planning;
• Overall management of the ICT function and performance reporting;
2.5.1
Resource Management Unit
The Resource Management Unit is responsible for the preparation of DIST’s budget
submissions, reviewing field proposals, supporting budget and resource management,
keeping track of financial expenditure and obligations, compiling financial analysis and
projections and providing administrative support to all DIST Services and Sections. The
Senior Resource Manager works closely with Heads of Service and Chiefs of Section,
advise and assists the Executive Office of the CIO on all matters relating to Resource
Management.
2.6
Technical Authority
One of the major changes driven by this organization design is the creation of the Chief
Architect function – the Technical Authority. This function coordinates and guides all
technical areas of expertise for ICT related matters within UNHCR and ensures that the
organization’s ICT systems are integrated, up-to-date and sustainable. The Technical
Authority:
• Defines the future technical ICT architecture of UNHCR, develops the long term
technology roadmap for applications and infrastructure;
• Defines technical ICT policies, standards, security arrangements and guidelines and
ensures their correct application throughout UNHCR;
• Ensures that appropriate technical governance is in place to manage all ICT within
UNHCR;
• Assesses the industry for new technologies, products and services with a view to
enabling UNHCR to benefit from such developments;
• Researches and innovates – continual updates on standard builds, leveraging and use
of emerging technologies and trends within UNHCR;
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 10 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
•
•
Manages the release of new technologies, systems, changes in infrastructure,
applications and services into operation;
Manages ICT Security, Risk, and Issues.
This Unit comprises the Chief Architect function which leads all matters related to Technical
Authority and Governance. This function coordinates and guides all technical areas of
expertise for IT related matters within UNHCR.
The ICT Security function and the Portfolio, Programme, and Project Office (P3O) fall under
the responsibility of this Service.
2.6.1
ICT Security
The ICT Security Office works under the supervision of the Deputy Director to establish,
monitor, and enforce security policies for both applications and infrastructure.
2.6.2
Portfolio, Programme and Project Office (P3O)
The Portfolio, Programme and Project Office (P3O) is responsible for adherence to the
overall ICT governance processes by providing guidance and oversight to ICT Project
Managers and others running projects with significant ICT components.
The P3O provides administrative support to the ICT Business Owner’s Committee and ICT
Governance Board.
2.7
Business Relationship Management Service
This service focuses on developing and maintaining close working relationships with the rest
of UNHCR business. It provides insight to the business on the best use of technology in
delivering services, while ensuring DIST is providing the services needed. Within this
Service there are three distinct functions: Business Relationship Management, Service
Development and Project Management.
The key responsibilities of the Business Relationship Management Service include the
following:
• Ensure that the current ICT needs of UNHCR are being met by DIST services;
• Identify the need for new or enhanced ICT applications or infrastructure services;
• Ensure effective communication and engagement between DIST and all divisions and
bureaus in UNHCR;
• Help divisions and Bureaux work effectively with DIST to apply ICT solutions achieve
UNHCR business objectives;
• Develop and maintain a catalogue of Services in conjunction with other DIST functions;
• Coordinate day to day interface with other UNHCR Bureaus & Divisions;
• Work with the Business Owner Committee in the prioritization of requirements and
investments;
• Communication to the rest of UNHCR on behalf of DIST to ensure common themes,
messages and standards;
• Ownership on behalf of the UNHCR divisions of Service requirements;
• Provide UNHCR divisions a concept development Service;
• Provide a Service to develop new or amend current Services;
• Develop Service Level Agreements and agree associated Service Level Targets within
in the Service framework;
• Business requirements elicitation and discovery;
• Business process design support;
• Provide a requirements management service;
• Advise UNHCR functions on the Technical Strategy and the opportunities and benefits
that maybe leveraged;
• Help maintain alignment of ICT with the wider UNHCR strategic goals;
• Support the business change management processes.
The Business Relationship Management Service is headed by a Deputy Director who is
supported by three Senior ICT Business Relationship Officers: one for Bureaux for Africa
and MENA; one for Asia, Americas and Europe; and one for HQs Divisions. The Business
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 11 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
Relationship Management Service also comprises a Service Development Section headed
by a Chief based in Budapest and an ICT Project Management Section at Headquarters.
2.7.1
Service Development Section
This Section creates and builds capabilities for service development, maintenance and
improvement. As part of the Business Relationship Management Service the Section takes
a formal role in engaging the Business units dealing with protection and beneficiary data,
finance, supply chain, and human resources. All ICT projects and work packages are
provided with in-depth analysis and support including the design of new business and ICT
processes, resolution of technical/operational issues that cannot be handled by the Global
Service Desk, analysis of systemic problems and changes to ICT systems needed to ensure
alignment with specific business processes. The Section, however, focuses mainly on the
development of new capabilities and improvement of services rather than providing routine
support.
The Service Development Section is the centre of DIST’s capacity for the management of
experts. It focuses on getting good designs by helping the UNHCR business better
articulate their requirements and matching these requirements with what is available in the
ICT market place. In this process the Section utilizes the knowledge of its analysts (and
where necessary external specialists) to ensure the development of systems and services
that leverage technology for UNHCR than the simple acquisition of solutions offered by the
market. This will help UNHCR become an “Informed Customer” who can inform Vendors of
what is required rather than taking what is offered.
In certain technology areas where UNHCR has invested heavily, DIST has retained systems
and application specialists to ensure that the organization gets the best out of these major
investments. The service development section will also ensure, in collaboration with the
Technical Authority, that service delivery meets the requirements through appropriate
governance and testing, via controlled and authorized projects.
2.7.2
Project Management Section
This Project Management Section is headed by a Project Management Section Chief, who
will lead the largest ICT projects that UNHCR undertakes. The section is staffed by two
more project managers, who will also lead ICT projects. It is expected that additional project
managers will be hired from external service providers as the need arises, whereas the
three positions form the core of UNHCR’s ICT project Management capability, setting
standards and procedures for all projects to follow.
Project managers build and lead teams composed of staff from throughout DIST and
potentially other UNHCR divisions along with staff from the Managed Service Provider and
possibly other third parties.
In particular the project managers work closely with staff from the Service Development
Section, to plan and execute the delivery of new or enhanced services. In the case of
smaller changes the staff from the service development group may lead small projects but
will still follow the approach and methodology adopted by the Project Management Section.
2.8
ICT Operations Service
The third main structural component of the Division is the ICT Operations Service. This
Service is headed by a Deputy Director who is responsible for the coordination and
management of ICT operations and service delivery. The section is organized to provide
and ensure effective service delivery at HQs and in the field. This Service consists of four
sections; ICT Field Operations, ICT Customer Services, Technical Support & Monitoring and
Vendor Management.
2.8.1
ICT Field Operations Section
ICT Field Operations constitute the largest component of DIST’s Operations Service. By
creating a strong field service structure DIST brings services closer to UNHCR’s field
operations. Single functional reporting lines have been created within DIST to ensure
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 12 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
ownership for tasks and decisions at every level and to pave the way for the provision of
demand-driven, coherent, and integrated end-to-end ICT services.
Supported by other DIST staff, Regional Information Communications Technology Officers
(RICTOs) located in a Service Hub or within a country operation provide second level
support for all ICT infrastructure and applications at a regional and local level, in particular
working with any local ICT staff. RICTOs receive technical and functional guidance and
supervision from the Chief of ICT Field Operations in Geneva or the Head of the ICT
Services Centre in Amman.
The Amman team will be supported by RICTOs from ICT Field Operations located in other
hubs or in Country Operations.
2.8.2
ICT Customer Services and Service Hubs
The ICT Customer Services Section is responsible for the delivering operational services
within UNHCR. This Section is on the front line of service delivery between DIST and
UNHCR business. Customer services are provided from Geneva, Amman, Kuala Lumpur,
and Panama City. The Service Centre in Amman has the largest area of service coverage
and consequently the largest number of staff dealing with customer services.
The Customer Services Section:
st
• Provides 1 Service Desk support from Geneva, Amman, Kuala Lumpur, and Panama
City to all UNHCR staff during normal working hours of the locations in which they work;
nd
• Ensures the provision of 2 line technical and functional support from Amman, the two
Service Hubs and dedicated regional/country ICT staff who have responsibility for
specific operations or regions. This support will include user administration for
applications and infrastructure;
• Encourages and supports user self-service and self-help for applications and
infrastructure;
• Has ownership of the Service Management processes and knowledge base and,
encourage its use within DIST and the business;
• Manages delivery of desktop support.
Global Service Desk
Level 1 support for all ICT services (applications, infrastructure, etc.) is provided through the
DIST Global Service Desk (GSD). The GSD has been restructured and strengthened as
part of the DIST organizational change programme. This will remain an in-house function
and is, therefore, not part of the scope of this RFP.
Location of Service Desk staff
DIST Global Service Desk staff is located in the following locations:
• Geneva, 6 staff (including the Customer Services Chief and Senior Service Desk
Coordinator)
• Amman, 8 staff
• Kuala Lumpur, 2 staff
• Panama, 2 staff
Service Desk coverage
The working hours of staff in each location is based on the office hours of that office. The
intention is to provide “lights on” first level support. GSD staff will provide support
irrespective of their location, e.g. staff in KL will pick up incidents logged by users in the
Americas after the end of the normal business day in Panama. For completeness the GSD
coverage is depicted in the following diagram:
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 13 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
GMT
00
MON
TUE
WED
THU
FRI
SAT
SUN
01
02
03
04
05
06
07
08
09
10
11
12
13
14
15
16
17
18
19
20
21
22
23
Kuala Lumpur
Amman
Geneva
Panama
Budapest
Figure: 2: GSD coverage by location (GMT based, not adjusted for DST).
2.8.3
Technical Support and Monitoring Section
The Technical Support and Monitoring Section provides all ICT technical support including
monitoring the ICT infrastructure and network operations, carries out configuration
management on ICT equipment and networks, supports the infrastructure at Headquarters
that cannot be managed remotely, and manage service levels for operational services.
Staffing levels:
• Geneva – 10 staff members;
• Budapest – 1 staff member;
Staff from the Managed Services Provider will be expected to integrate seamlessly with the
UNHCR staff, providing capacity and skills augmentation for Level 2 activities.
2.8.4
Vendor Management Section
The primary responsibility of this Section is to define and design workable contracts with ICT
Suppliers that deliver the Service offerings made by providers, and supporting the ICT
Operations Service to ensure that goods and services are delivered. The Section also
supports the Service Development function in Vendor selection, contractual negotiations
and the creation of new services or changes to existing services. The Vendor Management
Section also ensures clear communication of SLAs (Service Level Agreements) and
associated Service Level Targets across DIST and UNHCR so that all parties are aware of
the levels of expected Service.
This Section is led by a Principal Vendor Management Office who will work closely with the
Client Engagement Manager from the Managed Service Provider to ensure all contractual
aspects of the Managed Service are correctly managed.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 14 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
3
Connect & Collaborate
“Connect & Collaborate” is the name given to the DIST ICT Infrastructure Upgrade
Programme. This programme, launched in late 2011, aims to upgrade UNHCR’s aging ICT
Infrastructure to a modern, flexible, scalable, and cost effective platform on which business
services can be delivered.
Connect and Collaborate is governed by a project charter and roadmap. Key elements of
those documents are included below, the full documents are included as annexes to the
RFP.
3.1
Background
Information and communication technology plays a vital role in supporting UNHCR’s
operations. The current infrastructure was designed in the 1990s when data networks and
connectivity were too expensive or not available in many areas where UNHCR operates.
Investment in information and communication technology in the past decade focused on the
provision of basic connectivity to field operations and development of Enterprise application
systems including MSRP, Focus, and proGres. While these systems provide the
organization with the tools for better coordination in planning, implementation and
monitoring of operational activities, their continued and effective use depends on the
infrastructure on which they run. Investment on the infrastructure has been very minimal
during the past ten years.
Key components of the infrastructure including bandwidth, office productivity tools, desktop
and network operating systems, Local Area Networks and servers, as well as security
support systems and computer hardware are outdated and in many cases not supported by
their manufacturers. The ICT network is slow and does not provide effective support to
demands particularly in the field. Staff has difficulty to exchange documents with outside
interlocutors and benefit from online facilities such as training and development. The highly
fragmented network, outdated equipment and software have heightened information
security risks. The infrastructure has also become a major impediment for the introduction
of new and value added tools and services such as instant/text messaging, social
collaboration, video and teleconferencing.
The senior management of the organization has taken steps to address the problems and
challenges presented above. In 2010 DIST launched a project to upgrade the bandwidth
access to more than 110 UNHCR offices that depend on the VSAT Network. The
bandwidth upgrade project was completed by the end of June 2011 more than doubling the
total bandwidth available to the offices concerned. In February 2011 DIST launched a
comprehensive infrastructure study which culminated in a draft Roadmap. The Roadmap
inter-alia recommended the upgrade of all major components of the current infrastructure
with up-to-date and forward-looking technologies, the setting up of a governance structure
to implement the upgrade and allocation of the required resources. The Charter put in place
provides a framework for further refinement of the planning, design and implementation of
the new infrastructure in the coming years.
3.2
Objectives
The objectives of Connect & Collaborate are to:
• Upgrade the office suite to improve productivity, facilitate seamless integration with
corporate applications and improve information exchange within the organization and
with external interlocutors;
• Establish a reliable and secure infrastructure built on up-to-date hardware devices,
networks and software products capable of meeting ICT needs of the organization at
Headquarters and in the field;
• Rationalize and simplify the ICT infrastructure by providing services from centralized
data centers, where possible and desirable, and introduce remote support and
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 15 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
•
•
3.3
management necessary for cost-effective and efficient management, service delivery
and support;
Improve ICT services across the organization by ensuring effective support for staff
mobility and increased use of mobile devices;
Introduce new value-added services such as Unified Communications and Social
Collaboration and pave the way for ICT-supported innovation and modernization.
Scope
The scope of Connect and Collaborate is to:
• Upgrade of the Microsoft Office Suite from the current Office XP (2002) version to
MS Office 2010;
• Upgrade the Desktop/Laptop Operating System from MS Windows XP(SP3) to
MS Windows 7;
• Migrate the Server Operating System from Novell Netware 6 and 6.5 to MS Windows
Server 2008 R2;
• Migrate the corporate messaging system from GroupWise 7 to MS Exchange 2010;
• Replace ageing Desktop and Laptop Computers at Headquarters and the Field;
• Upgrade Field Office LANs through standardized cabling, the use of standardized
CISCO devices and servers to create fully managed LANs;
• Deploy LANDesk Management Suite for asset and configuration management, remote
software deployment, and remote device management.
• Deploy industry standard desktop, server and network management, virtualization,
service, asset and remote management software tools;
• Upgrade the Headquarters (Geneva) LAN switching system to create a fully integrated
network that supports data, voice and video communications across the UNHCR
network. The need for re-wiring of the MBT building will be determined after a technical
review;
• Review and, as appropriate, rationalize the use of VSAT, MPLS and ISP services,
routing and switching to create a streamlined, robust and effective Wide Area Network;
• Incorporate technologies for data backup, disaster recovery, and business continuity in
the design and implementation of the new infrastructure;
• Ensure that the new infrastructure will support existing and planned enterprise
applications including MSRP, Focus, and proGres. The actual integration of
infrastructure components with these applications will be handled outside the
infrastructure upgrade Programme;
• Review security risks and vulnerabilities and ensure that the emerging infrastructure is
capable of supporting robust security management;
• Build and implement an integrated Active Directory for the entire organization
• Identify and propose the development of policies and standards required for the
effective management of the new infrastructure.
3.4
Progress to date
At the time this RFP was issued, Connect and Collaborate is a well-established programme
and is making good progress towards its goals.
By contract award, DIST expects that most of the new infrastructure will be in place in
Headquarters and other Hub locations with rollout to the wider Field Office locations
proceeding into 2013. The Managed Service Provider will be expected to integrate into this
evolving infrastructure environment and to take over maintenance and support of the new
platform as it is rolled out.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 16 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
4
Introduction of ICT Managed Services
This section briefly outlines the rationale for UNHCR to move to Managed Services in
general and ICT Infrastructure Managed Services in particular.
4.1
Rationale for Managed Services
ICT is a support function that enables UNHCR to do its core business. Consequently,
UNHCR should not have to reinvent the wheel by designing, developing, and maintaining
applications or infrastructure that is readily available on the market and should not retain
staff to perform standard ICT functions that are readily available elsewhere. The main focus
of DIST should rather be to understand the business needs for IT solutions and services
and, to identify suitable, reliable, effective and efficient products that can be used to address
the needs. Where customization is necessary to meet business needs, DIST should play a
leading role in ensuring that such customizations undergo the appropriate governance and
project management processes. This approach enables DIST to focus on delivering value
added services to the organization and help directs scarce resources towards more
pressing priorities.
Project Prometheus recognized the value to transition many internal services to external
providers and have them delivered through a “managed service” model. Services which
have become commodities in the IT industry and which can be provided in a more efficient
and cost effective manner through managed services will be considered for transition. The
engagement of such specialized external service providers will be managed in a costeffective and efficient manner as UNHCR retains the technical authority and ICT architect
functions as well as the requisite capacity to manage specialists and special services.
4.2
Managed Services Landscape
Based on a review of the DIST Service Catalogue from early 2011, the following services
were identified as candidates for transition to a Managed Service:
• Application development and support:
•
PeopleSoft Enterprise Suite ERP from Oracle (Financials & Supply Chain, Human
Resources and Global Payroll, EPM (Planning and Budgeting) and Enterprise
Portal);
•
PC & Web applications, including proGres v3 (Refugee Registration system) –
mostly based on Microsoft .Net technologies;
•
Intranet WCMS – based on Adobe (ex-Day) Communiqué;
•
Focus – Results Based Management and Budgeting – based on Java;
•
LiveLink EDMS from Open Text;
• Core ICT infrastructure:
•
HQs Data Centers;
•
Network Monitoring and Management, in conjunction with the other infrastructure
managed services or independently;
•
Local Area Networks, in particular in Geneva, Budapest, Amman and other centrally
managed LAN locations;
•
Desktop Services, including hardware support and standard applications support;
• Corporate messaging:
•
Corporate messaging (in the process of being transitioned from GroupWise to
MS-Exchange/Outlook);
•
Corporate Instant Messaging and Social Collaboration.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 17 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
The overall scope of all potential ICT Managed Services is shown in the following diagram.
DIST
Services
Corporate Messaging
ICT Infrastructure
Client Services (CS)
Generic Requirements
Application Services (AS)
Services (IS)
(GN)
(CM)
(Standard UNHCR
Application
Fix-on-fail
services
support
Preventative
01.
01.
Service
Desk
Applications Support
Services
(Critical, Std, Other)
maintenance
and minor
Patches
upgradesand Database
Reports
User
Management
02.
User Print
Services
Peripherals
Application Development
Services
Installation, removal and
disposal power
Arrange
03.
points & configure network
Install
points existing ICT
Move
equipment
configure, de-install for
Install,
RFC
02.WAN - MPLS
General Requirements for
Application Services
Release
Test
Management
Joint Working and
Management
03.WAN - ISP
Reporting and Skills
Resourcing
Availability
Telephony & Video
Conferencing
04.
LAN - HQ
04.
Server Management
– Data Centre
Software Fix-on-fail
management
Hardware
Management
Security Updates (incl. anti System
virus)
Systems
06.Desktop services
(HW & SW)
02.Problem
Management
Network Support and
Maintenance
Wireless
03.Change
Management
installation
Install, Move, Adds &
Changes (IMACs)
Mobile voice
services
Tele-conference
services
Conferencing
Video
services
User training
05.
WAN
ProvisioningNetwork
End-to-End
Management and Policy
Configuration
Installatio
Management
Networks
LAN Administration
Network
Security / De Installation
off-site conferences
04.
01.Incident
Management
n
Support
User
training
03. Print Services
services
Security
Services
User
training
Development
Services for Change
Request
(RFC)
of
Implementation
02.
Email
servicesdevice data sync
Mobile
services
Collaboration
01.WAN - VSAT
queries
Data Centre Support and
Systems
Maintenance
monitoring
hardware management and
System
System software management and
support
System Housekeeping
support
Storage Management and Capacity
Services
Planning
Database
Administration
Backup and Restore
Services
Reportin
g
Network Support and
Wireless
Maintenance
Maintenance
Mobile
devices
Asset
05.
management
User training
LAN - Field
Networks
LAN Administration
Network
Security / De Installation
04.Release
Management
05.Configuration
Management
06.Business
Continuity
installation
Legend
05.
Server Management –
Data Centre
System hardware management and
support
System software management and
System Housekeeping
support
Storage Management and Capacity
Services
Database
Planning
Backup and Restore
Administration
Out of Scope for MS Project
07.Policy and
Standards
(including Project
Mgmt &Governance)
Services
Reportin
g
In Scope for MS Project
06.
Deep Field
Communications
Figure: 3: High-level scope and Managed Services Requirements.
A further feasibility study and initial market testing conducted in spring 2011 determined that
there was a strong market interest in bidding for these services and that there were
sufficient benefits (cost and other) to go ahead. The study was less emphatic on how to
present the full suite of potential managed services to the market (1, 2 or 3 lots) with
advantages and disadvantages in each case. Following that study, UNHCR went ahead
(summer 2011) and issued an RFP to select a partner for Applications Managed Services.
The process was completed in late-2011 and the selected partner is currently in transition.
Two other RFPs are currently in progress: VSAT managed services (closed and under
evaluation) and Telephony and Videoconferencing (issued to the market).
At this time, UNHCR has decided to issue an additional RFP (this document) for the
introduction of, and transition to, Managed Services for ICT Infrastructure Maintenance and
Support.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 18 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
4.3
Core Infrastructure Managed Services
The diagram below expands the Infrastructure Service portion of the high level scope:
DIST
Infrastructure Services
Client Services
(CS)
IMAC (Instal,
Move, Adds,
Changes)
Infrastructure
(IS)
Installation, Removal, Disposal
Arrange power points
Install and configure network
points
Move existing ICT equipment
Install, configure, de-install for
off-site events
Desktop services
Data Centre
Services
Network Services
Software fix on fail
Hardware management
System security updates
Mobile devices
Asset management
User training
Data centre support and maintenance
Systems monitoring
Hardware management and support
Software management and support
Housekeeping services
Storage management, capacity
planning
System database administration
Backup and restore services
Disaster Recovery & Business
Continuity
Business continuity planning
Reporting
Corporate
Messaging
E-Mail services
Mobile device data sync services
Security Services
User training
Network support and maintenance
Wireless networks
LAN administration
Network security
Installation and de-installation
Business continuity planning
Reporting
Figure: 4: Infrastructure Managed Services overview.
The overall Infrastructure Services can be divided into four distinct service offerings with
some common and generic requirements.
4.3.1
Data Centre Services
This service is intended to provide support and maintenance for all data centre services that
are in operational use, as listed in the Infrastructure Service Catalogue, and which come
under the responsibility of the ICT Operations Service, in particular the ICT Customer
Services Section (which contains the Global Service Desk).
Work performed by this service will be expected to adhere to the ITIL Service Management
processes in place and be fully integrated into LANDesk.
More details of the data centre support and maintenance service requirements are
contained in Section 6.
4.3.2
Network Services
This service is intended to provide support and maintenance for all Network and LAN
services that are in operational use, as listed in the Infrastructure Service Catalogue, and
which come under the responsibility of the ICT Operations Service, in particular the ICT
Customer Services Section (which contains the Global Service Desk).
Work performed by this service will be expected to adhere to the ITIL Service Management
processes in place and be fully integrated into LANDesk.
More details of the Network and LAN service requirements are contained in Section 7.
4.3.3
IMAC Services
This service is intended to provide day to day Installation, Move, Addition, and Changes to
standard infrastructure configuration items, including the necessary change control, asset
and configuration management. When appropriate, it will also include rollout of new
infrastructure services and support for other time driven events (e.g. conference facilities).
More details of the Network and LAN service requirements are contained in Section 8.
4.3.4
Desktop Services
This service is intended to provide support and maintenance for all Desktop services that
are in operational use, as listed in the Infrastructure Service Catalogue, and which come
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 19 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
under the responsibility of the ICT Operations Service, in particular the ICT Customer
Services Section (which contains the Global Service Desk).
Work performed by this service will be expected to adhere to the ITIL Service Management
processes in place and be fully integrated into LANDesk.
More details of the desktop service requirements are contained in Section 9.
4.4
Corporate Messaging Services
This service is intended to provide support and maintenance for all Corporate Messaging
services that are in operational use, as listed in the Infrastructure Service Catalogue, and
which come under the responsibility of the ICT Operations Service, in particular the ICT
Customer Services Section (which contains the Global Service Desk).
Work performed by this service will be expected to adhere to the ITIL Service Management
processes in place and be fully integrated into LANDesk.
More details of the Corporate Messaging service requirements are contained in Section 10.
4.5
Transition to Managed Services
UNHCR recognizes that the transition process and its effectiveness will have a significant
impact on the success of the on-going services. The following should be taken into account
before and during the transition phase:
• Develop a detailed transition plan showing clearly how ICT Infrastructure responsibility
will move from UNHCR to the managed service provider.
• Knowledge transfer from key UNHCR staff to the managed service provider.
• Provision of travel, visa, and other documents needed to have your staff on-site in those
locations where an on-site presence is required (both for the transition itself and for the
steady state).
• Maintain steady operation of all existing services at the same levels of service during
the transition of responsibility from UNHCR staff to the managed service provider.
• Complete the transition in as short a time as possible without jeopardizing the result.
We would expect you to be following a well defined and previously executed transition
methodology. Your proposal should provide details of this methodology and case studies
that demonstrate its success.
4.6
Service Window
UNHCR is looking to achieve similar or better service hours than at present and also to
obtain better out of hours coverage.
The expectations are outlined in the following sections of this document, but are
summarised here:
Service
Core hours *
Non-core
Optimum
Data Centre
Network and LAN
Messaging
07:30 to 19:30 weekdays
00:00 to 07:30 and
19:30 to 24:00 weekdays
00:00 to 24:00 weekends
(C1 & C2 incidents)
24x7
IMAC
Desktop
07:30 to 19:30 weekdays
00:00 to 07:30 and
19:30 to 24:00 weekdays
00:00 to 24:00 weekends
(C1 incidents)
24x7
Core hours will be based on the working week of the specific location, e.g. Monday to Friday
in Geneva, Sunday to Thursday in Amman. During non-core hours, UNHCR will expect the
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 20 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
Managed Service Provider to provide coverage via an on-call service with a rapid response
time for C1 level incidents.
4.7
Generic Requirements
The following diagram expands on the Generic Requirements for any managed service
provision – including Infrastructure Managed Services.
Generic
Requirements
Incident
Management
Business
Continuity
Problem
Management
Policies and
Standards
Change
Management
Governance
Release
Management
Security
Configuration
Management
Figure: 5: Generic Services overview.
More details of the generic service requirements are contained in Section 11.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 21 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
5
UNHCR ICT Infrastructure Landscape
This section provides an overview of the current infrastructure landscape that the managed
services provider will be expected to take over. An exhaustive list of all Headquarters, Hub,
and Field Office infrastructure is provided in Appendix B and in annexes to this document..
5.1
High-level topology
A high level organization-wide infrastructure diagram is provided below. A more detailed
diagram is provided as an annex to this document.
5.2
Data Centre - Hubs
Today, UNHCR’s data centres are concentrated in Geneva, and Amman, with smaller hubs
in Brussels, Budapest, and London.
The Geneva centre consists of two server rooms in the main MBT building with an offsite
high availability, disaster recovery, and alternate routing hub located about 1km away.
Although the configuration of these hubs will change significantly with the move away from
Novell (Netware and GroupWise) to Windows (Active Directory, Exchange, SharePoint, etc.)
there is no current plan to look for an alternative hosting location for these services which
will continue to be hosted on-site for the foreseeable future.
5.3
Network and LAN
As can be seen from the diagram above, UNHCR operates a large and diverse network.
The Wide Area Network (WAN) components of this network are already running under
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 22 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
separate managed services contracts and are out of the scope of this RFP. However, the
Headquarters LAN (Geneva, Budapest, Brussels, London) as well as LANs in field locations
are within scope.
UNHCR’s current HQ and FO LANs are based on Novell Netware (6.0 or 6.5). As part of
the Collaborate & Connect programme, these LANs will be migrated to Microsoft Windows
2008 Server R2. The managed service provider may be asked to participate in the
migration from Novell to Windows but will be expected to manage the new HQ and FO
LANs post migration.
5.4
Desktop
At the time of writing, the standard UNHCR desktop computer is running Windows XP
(SP3), MS-Office 2002, and Novell GroupWise (email). MS-Office 2010 (under Windows
XP) has been rolled out in Headquarters (Geneva, Budapest) and is being distributed to
Field Office locations since February 2012.
As part of Connect & Collaborate all UNHCR desktop PCs will be migrated to Windows 7
using Microsoft Office 2010, including Outlook, as the standard configuration.
The managed service provider may be asked to participate in the migration from Novell to
Windows but will be expected to manage the new HQ and FO desktops post migration.
5.5
Disaster Recovery and Business Continuity
At present, only HQ in Geneva has a general strategy for Disaster Recovery and Business
Continuity from an ICT perspective.
All core ICT services are assessable over the Internet which avoids the need to be
physically present in the Geneva offices for most activities and business tasks. A DR data
centre in Geneva provides essential backup and recovery.
The ICT Services Centre in Amman, when fully operational, will have a backup server room
– but is it located in the same building as the main data centre.
Connect & Collaborate intends to strengthen the overall DR & BC capability and to ensure
that essential ICT services in Field Offices are covered as much as possible.
5.6
Categorization of UNHCR Office locations
In order to be able to provide a level of service to all UNHCR offices that is commensurate
with the size and role of that office within the overall organizational footprint, offices have
been categorized into four groups.
A full list of all UNHCR office locations and their categorisation (from an ICT perspective) is
included as an annex to this document.
5.6.1
Hubs
Headquarters and other hub locations with large concentration of staff and ICT equipment
will warrant on-site support on a day to day basis. Data Centres will typically be located at
these locations and will be hosting applications and other services that are accessible to a
wide user base either within UNHCR or externally (e.g. Internet services, email relays, etc.).
At present the following locations are considered as hubs:
• Geneva, Headquarters
• Amman, ICT Services Centre
Because of the direct connectivity to Geneva, the following three locations can also be
considered in the “hub” category, although their location and infrastructure is more in line
with a “category A” location.
• Budapest, Global Service Centre
• Brussels
• London
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 23 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
5.6.2
Category A
These locations will comprise UNHCR’s Regional and Branch Offices that are typically
located in capital cities and to which good communications is available. In addition, we
would expect typical Infrastructure Managed Service Providers either to have a local
presence in these locations or to have a local representative that could provide services on
their behalf.
These locations are unlikely to require full-time on-site staff, but would expect a quick
response and short turn-around for incident resolution.
Remote access (over VPN connections) to the local infrastructure (LAN and managed
desktops) should be possible once UNHCR has fully upgraded its ICT Infrastructure in line
with Connect and Collaborate.
Including the three offices mentioned above, 102 locations are categorized as Category A.
5.6.3
Category B
These locations will typically be outside capital cities and will comprise smaller offices with
fewer staff. Depending on connectivity it may still be possible to provide support and
maintenance without a physical presence.
72 locations are categorised as Category B
5.6.4
Deep Field
These locations are physically remote and often in locations that may require special
security clearance for travel or movement. Communication links to these locations may be
limited.
In most cases, UNHCR would expect to support these locations ourselves, usually with
UNHCR staff on the ground. We would expect the Managed Service Provider to be able to
provide remote telephone support to the local staff.
274 locations are categorized as Deep Field.
5.7
Target Infrastructure Landscape
Detailed information about the future network landscape is provided in annexes to this
document.
• Data Centre Infrastructure Detailed Design
• Field Office Pilot Detailed Design
• Logical and Physical Design
• FO Pilot Sites Connectivity
• SAN Detailed Connectivity
Where relevant, these documents also provide information on the existing infrastructure and
provide a direct comparison with the future design.
5.8
Out of Scope Infrastructure Services
The following infrastructure and related services are out of scope for this iteration of
Managed Services. They may be introduced at some later stage, e.g. at the end of the
current service agreement.
5.8.1
Transfer of Data Centre Services
As part of this Managed Services contract, UNHCR does not intend to further outsource its
current in-house data centre services. Rather, the Managed Service Provider should plan to
take over responsibility of on-site management of the existing data centres.
5.8.2
WAN Services (VSAT, MPLS)
UNHCR has well established managed services with external providers for WAN services
over VSAT and MPLS and intends to retain these service providers at this time.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 24 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
The selected partner(s) will be expected to seamlessly integrate their services at the
appropriate touch points with the existing providers and work together to resolve incidents
and problems that may occur.
5.8.3
Print Services
UNHCR has previously awarded a separate contract for managed print services. The
successful bidder will be expected to work with this partner to ensure a smooth integration
of all services in particular Desktop.
5.8.4
Telephony, Unified Communication, and Video Conferencing
UNHCR currently has an RFP in the marketplace for these services. The successful bidder
will be expected to work with this partner to ensure a smooth integration of all services.
5.8.5
Externally hosted applications
UNHCR has previously decided to run some software applications using a SaaS model. As
these applications are already hosted externally and provided as a service there are no
plans to change this. As a result the infrastructure to support these applications is to be
considered as out of scope for this RFP.
However, the links to and from these SaaS applications are within the scope of this RFP.
The successful bidder will be expected to support and maintain the UNHCR component of
these links and to work with the third-party service provider on specific support issues and
any SOWs raised to support an authorized Change Request.
5.8.6
Global Service Desk
Level 1 support for all ICT services (applications, infrastructure, etc.) is provided through the
DIST Global Service Desk (GSD). The GSD has been restructured and strengthened as
part of the DIST organizational change programme. This will remain an in-house function
and is, therefore, not part of the scope of this RFP at this time.
However, longer term DIST wants to provide Level 1 ICT support on a 24x7 basis so that all
UNHCR operations irrespective of their location or time-zone can avail of a high-quality
Service Desk support. This could include transitioning the existing Service Desk to a
Managed Service Provider.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 25 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
6
Data Centre Service Scope
This section describes the services that UNHCR is expecting to receive as part of the Data
Centre component of Managed Services.
This section includes provision of support and administration services for all server
hardware, Operating systems and other software products related to all Servers located in
the Data Centres in Geneva, Budapest, and potentially Amman. As the managed
LAN/WAN network is extended it will potentially include all UNHCR Field Offices with local
server installations (i.e. those that qualify as a data centre).
6.1
Support Services
The Managed Service Provider shall provide support and administration services for all
server hardware, Operating systems and other software products related to all Servers inscope in Headquarters and Field Office locations, including documentation by following ITIL
Service Management processes and as per guidelines and policies as defined or agreed by
UNHCR. The sub-services include, but are not limited to:
•
•
•
•
•
•
•
•
•
6.1.1
Data Centre Support and Maintenance
•
•
•
6.1.2
Data Centre Support and Maintenance;
Systems monitoring;
System hardware management and support;
System software management and support;
System Housekeeping Services;
Storage Management and Capacity Planning;
Database Administration;
Backup and Restore Services;
Reporting.
The Managed Service Provider shall maintain a stable live data centre environment in
order to achieve the applicable service levels stated in performance metrics section of
this document.
Items in-scope shall include all infrastructure elements and systems contained within the
data centre related to the servers in-scope defined above.
The Managed Service Provider shall perform routine administration and maintenance of
the UNHCR’s Data Centre facilities, and to this effect shall:
•
Undertake corrective maintenance ensuring that all problems are raised and logged
centrally.
•
Ensure that all products and tools that support live operations comply with the
defined technical standards, policies and procedures, and with government
regulations.
•
Pro-actively inform UNHCR if the operational environment in the data centre is
unsuitable and action is required.
•
Provide interface with relevant UNHCR teams to help ensure the fitness of the Data
Centre accommodation and operational environment conditions.
•
Maintain a log of all data centre accesses.
•
Maintain an inventory of on-site spares for critical quipment.
•
Prepare and update Standard Operating Procedures (SOPs).
Systems monitoring
•
The Managed Service Partner shall ensure that all System monitoring functions are
periodically performed like:
•
Performance / uptime monitoring.
•
Log monitoring.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 26 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
6.1.3
System hardware management and support
The Managed Service Provider shall:
• Provide support and administration services for all server hardware including
installation, maintenance and monitoring of the products including but not limited to:
•
Patches for server hardware firmware and BIOS.
•
Updates to server hardware firmware and BIOS.
• Be responsible for all upgrades to server hardware.
• Manage and liaise with third party suppliers of server hardware.
• Produce and maintain a Capacity Plan covering all systems and proactively inform
UNHCR of the need for any changes.
• Perform a periodic health check on all hardware.
• Maintain a list of all users with system level privileges.
6.1.4
System software management and support
The Managed Service Provider shall:
• Provide support and administration services for all operating systems including
installation, maintenance and monitoring of the products.
• Perform routine upgrades to the Operating Systems.
• Perform proactive maintenance of Server.
• ?? Operating Systems to minimize impact of any potential shortcomings.
• Ensure that appropriate approval is obtained from UNHCR prior to application of any
vendor patches and/or upgrades.
• Manage and liaise with 3rd party suppliers for provision of OS software.
• Deploy, configure and secure operating systems in use by UNHCR to vendor
recommended best practice or other agreed standards.
• Ensure that any software security related patches for Operating Systems or ancillary
software is deployed in an agreed timely manner.
• Implement monitoring of all Operating System.
• Maintain a list of all users with system level privileges.
• Ensure all application certificates are renewed and installed.
6.1.5
System Housekeeping Services
•
•
6.1.6
Storage Management and Capacity Planning
•
6.1.7
The Managed Service Partner shall ensure that all System administration functions are
periodically performed like:
•
System / file cleanup.
•
Server reboot as needed.
The Managed Service provider shall also:
•
Maintain firewall rules and policies.
•
Perform periodic intrusion detection testing and remediation.
•
Monitor supplier websites for critical security alerts and patches.
The Managed Service Provider shall provide managed storage area network and
related storage services to include but not limited to:
•
The creation and assignment of storage space to servers and services.
•
Provision of storage connectivity including the installation of HBA, Switches, fibre
connections.
•
Replication, where necessary, of SAN storage Logical Unit Numbers to remote
locations.
•
Reallocation of Storage.
•
Storage capacity monitoring including alerting when utilization exceeds at
prescribed levels.
Database Administration
For databases within the scope of the Infrastructure Managed Services:
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 27 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
•
•
6.1.8
Backup and Restore Services
•
•
•
•
•
•
•
6.1.9
The Managed Service Provider shall operate a data backup and recovery service for the
UNHCR Data Centre in accordance with backup and recovery policy and Performance
Targets.
Align with UNHCR Disaster Recovery and Business Continuity Policy – agree and
maintain the backup policy and procedures in line with UNHCR standards and
Performance Targets.
Back-up system according to agreed Backup Schedule – once authorized by UNHCR,
set up, schedule and carry out relevant back-ups of all User and system data that is
held on the servers according to agreed Backup Schedules with UNHCR.
In the event of a backup failure, load and unload back-up media at the Data Centres
and in the backup storage devices in accordance with the backup policy and procedure,
restore lost or damaged files and retain back-ups of standard PC system build data.
Carry out replacements of backup media in line with the manufacturers’ guidelines
and/or diagnostic information produced as a result of backup and restore processes.
Recycle media at end of agreed retention period and replace where operationally
desirable (e.g. wear and tear) according to policy agreed with UNHCR.
Where possible, ensure that data restore is tested on a regular basis to verify integrity of
backups and back-up media according to an agreed schedule with UNHCR.
Reporting
•
•
•
6.2
The Managed Service Provider shall provide database management, support and
administration services including installation, maintenance, rebuilding indexes, tuning
and monitoring of the database.
The Managed Service Provider shall pro-actively inform UNHCR of the need for
changes in the size of the databases or the need to perform re-organization, due to
indicative business growth, new developments, application enhancements or if
opportunities for performance optimization are available.
The Managed Service Provider shall provide regular performance monitoring reports
(frequency to be agreed) on server uptime, SAN usage, incidents, and other
performance metrics agreed.
The Managed Service Provider shall provide input into the Capacity Planning exercise
to ensure that the Data Centre is sized at the level required for the services to be
provided.
On request by UNHCR, the Managed Service Provider shall produce ad-hoc reports
related to server and data centre service management aspects
Implementation of new Data Centre services
The Managed Service Partner is expected to be actively involved in the development of new
Data Centre services.
Any service delivery will follow the agreed ICT Project and Governance process. The
Managed Service Partner would be expected to be involved in all aspects of the service
development and to provide work and cost estimates as part of the approval process.
It is likely that this facility will only be used once the basic infrastructure managed services
have stabilized.
6.3
Service Window
The Managed Service Provider is expected to perform data centre maintenance (hardware
and software) minimizing the impact on operations. This may require scheduling outages at
lower usage periods, e.g. nights or weekends. This should be part of the base service and
not incur any additional (e.g. overtime) costs.
All changes to the systems (hardware and software) should be based on an approved
Change Request (or Emergency CR). The Managed Service Provider is expected to follow
the established CAB and ITIL procedures when implementing a Change Request.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 28 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
6.4
Minimum and Optimum operating hours
The minimum on-site support in all Data Centre locations will be based on a “lights-on”
approach covering the extended working day (i.e. 12 hours from 07:30 to 19:30) at each
location with on-call support outside these hours.
Optimum on-site support would be for a full 24x7 service but UNHCR recognizes that this
may not be affordable at this stage.
Remote support and maintenance may be possible outside of core hours or in locations
where there is insufficient equipment to warrant a full on-site support service. This will need
to be agreed and established in advance based on the service level agreements.
MON
TUE
WED
THU
FRI
SAT
SUN
00
01
02
03
04
05
06
07
08
09
10
11
12
13
14
15
16
17
18
19
20
21
22
23
Managed Service Provider - on-site coverage
Managed Service Provider - on-call
Managed Service Provider - optimum coverage
Amman Service Centre only
Figure: 6: Minimum and optimum Data Centre support operating hours.
6.5
Services out of Scope
At the present time, there is no plan to move the existing UNHCR data centres or
infrastructure to a third party hosting provider.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 29 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
7
Network and LAN Service Scope
This section describes the services that UNHCR is expecting to receive as part of the
Network and LAN component of Managed Services.
This service is the operations of the current HQ managed LAN environments and
associated infrastructure elements for all Users on managed LANs (presently in Geneva,
Budapest, Amman, Brussels, and London offices). As the managed LAN/WAN network is
extended it will potentially include all UNHCR Field Offices.
7.1
Support Services
The Managed Service Partner shall provide management, maintenance and support of the
current operational LAN environments and associated infrastructure elements at all in-scope
locations, including documentation by following ITIL Service Management processes and as
per guidelines and policies as defined or agreed by UNHCR. The sub-services include, but
are not limited to:
• Network Support and Maintenance
• Wireless Networks
• LAN Administration
• Network Security
• Installation / De-installation
• Reporting
7.1.1
Network Support and Maintenance
•
•
•
•
7.1.2
Wireless Networks
•
7.1.3
The Managed Service Partner shall perform the on-going support and delivery of all
local networks, and ensure end-User and server connectivity in order to achieve the
performance criteria specified for all Services.
The Managed Service Partner shall perform maintenance on all local network
infrastructure components in line with the equipment manufacturers and/or UNHCR
guidelines and ensure that firmware is kept current and security patches are applied:
•
Network equipment components include but are not limited to, routers, firewall and
load balancers, switches, hubs, modems and patch panels.
•
Other LAN components comprise the Traffic prioritization, Network Client Services,
Network Monitoring servers, software and Scripts, networking protocols, address
management, name resolution services.
The Managed Service Partner shall administer the cable and patch panel management
and perform patching to resolve problems or reconfigure the LAN. The Managed
Service Partner shall make recommendations on patches released by Manufacturers.
The Managed Service Partner shall ensure that any maintenance action leading to a
Scheduled Outage or a noticeable degradation of service is planned via the appropriate
Change and Release Process in order to minimize disruption to the service.
The Managed Service Partner shall manage and support a wireless LAN for visitors and
UNHCR staff at the UNHCR premises including but not limited to the HQ locations listed
in the annex to this document.
LAN Administration
•
•
•
The Managed Service Partner shall maintain the UNHCR’s IP addressing scheme and
continuously support the implementation of optimal policy-based routing policies and
architecture.
The Managed Service Partner shall allocate IP addresses when necessary and maintain
the register of used and available IP addresses at UNHCR.
The Managed Service Partner shall provide simple rule-based and/or intelligent filtering
of traffic between different network segments along the following principles:
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 30 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
•
•
•
•
7.1.4
Network Security
•
•
•
7.1.5
Create an IP-enabled network infrastructure supporting the injection of all traffic
over IP, IP encapsulation and IP tunneling.
•
Maintain clear physical and logical boundaries.
•
Limits complexity in top level routing.
•
Allow peering architecture and addressing hierarchy between the locations.
•
To include where appropriate traffic shaping and prioritization of IP based traffic
•
To include, where appropriate, segmentation and implementation of networks using
variable/fixed length subnet masks.
•
Maintenance and creation of V-LAN IDs.
•
Maintenance and creation of Multi Link Trunks.
•
To create, where appropriate, multicast address and support for one to many
network broadcasts.
The Managed Service Partner shall implement access and authentication controls
relating to the management and configuration of all intelligent components of the
network.
The Managed Service Partner shall support the creation of an IP-centric organization
enabling the convergence of all traffic, including IP voice and video
Where appropriate maintenance and creation of Internet Protocol version 4 and 6
address spaces.
The Managed Service Partner shall ensure that wherever the UNHCR Network
connects to other networks, the Managed Service Partner shall co-operate with the
relevant parties to ensure that appropriate security is put in place with a view to
protecting the Network and its components from malicious attack and unauthorized
access.
The Managed Service Partner shall also ensure that users on the Network are
prevented from making malicious attacks on other networks.
The Managed Service Partner shall monitor the Network for any attempted or actual
security breaches.
Installation / De-installation
•
•
•
Where installation / De-installation has been required and confirmed by UNHCR, the
Managed Service Partner shall be responsible for the complete set of associated works
in line with Health and Safety requirement, and shall liaise with appropriate teams within
UNHCR to this effect.
The Managed Service Partner shall manage the installation / De-installation and testing
as needed of all LAN changes in accordance with the procedures in place, updating the
relevant documentations to reflect the changes, and informing Global Service desk of
the impact of the change.
•
Where works may be carried out by Third Parties appointed by the Managed
Service Partner, the end-delivery of the project remains the responsibility of the
Managed Service Partner. The Managed Service Partner shall be responsible for
the resolution of faults during installation and commissioning, and provide all
necessary warranty and documentation.
•
Where works may be carried out by Third Parties appointed by UNHCR, the
Managed Service Partner shall have the responsibility to provide an efficient service
interface for the successful end delivery of the works. The Managed Service
Partner shall remain responsible for the Service Support functions post-installation
and the Service Management aspects, e.g. Configuration and Capacity
Management.
An installation comprises any of the following elements:
•
Installation of structured cabling system, floor outlets and data points
•
Installation of equipment cabinets and active equipment in computer rooms and in
the network
•
Installation of drop leads, patch cords, fibre patch cords for the connection of PCs,
printers and server equipment and any other network peripheral connected to the
structured cabling system
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 31 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
•
•
7.1.6
Reporting
•
•
•
7.2
Installation of Network Interface Cards (NICs) and modems to networked equipment
(physical and logical connection).
All LAN (including both fixed wired and wireless networks ) design, installation and
testing works supplied by the Managed Service Partner will have to comply with
international standards (IEEE and ISO) including but not limited to:
•
Prevalent Standards specified UNHCR
•
ISO 8802.3 1000 Mbps Gigabit Ethernet
•
ISO 8802.3 100BASET operating at 100Mb/s
•
ISO 8802.3 10BaseT operating at 10Mb/s
•
Structured cabling utilizing TIA/EIA-568-B or Category 5 e standards
•
Fibre connectivity including single mode and multimode including FC and SC
termination
•
Provision of secure wireless networking operating 802.11 (B/G/N) – utilizing WPA-2
and other approved security authentication
The Managed Service Provider shall provide regular performance monitoring reports
(frequency to be agreed) on network and LAN uptime, incidents, and other performance
metrics agreed.
The Managed Service Provider shall provide input into the Capacity Planning exercise
to ensure that the networks are sized at the level required for the services to be
provided.
On request by UNHCR, the Managed Service Provider shall produce ad-hoc reports
related to network and LAN service management aspects
Minimum and Optimum operating hours
The minimum and optimum operating hours for Network and LAN services are the same as
those for Data Centres (i.e. on-site for 12 hours per day from 07:30 to 19:30) with on-call
services outside these hours.
7.3
Implementation of new Network and LAN services
The Managed Service Partner is expected to be actively involved in the development of new
network and LAN services.
Any service delivery will follow the agreed ICT Project and Governance process. The
Managed Service Partner would be expected to be involved in all aspects of the service
development and to provide work and cost estimates as part of the approval process.
It is likely that this facility will only be used once the basic infrastructure managed services
have stabilized.
7.4
Out of scope Network and LAN Services
None.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 32 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
8
IMAC Services
This section describes the services that UNHCR is expecting to receive as part of the IMAC
component of Managed Services.
2
The scope of IMAC services covers all authorised users in all UNHCR locations.
8.1
Support Services
The Managed Service Partner shall provide IMAC services to all authorised users in the inscope locations by following ITIL Service Management processes and as per guidelines and
policies as defined or agreed by UNHCR. The sub-services include, but are not limited to:
• Installation, removal and disposal.
• Arrange power points.
• Install & configure network points.
• Move existing ICT equipment.
• Install, configure, de-install for off-site conferences.
8.1.1
Installation, removal and disposal
•
•
•
•
•
•
•
2
The Managed Service Partner shall be responsible for the installation of all of UNHCR’s
user workstations, ensuring that all installation components have been received and are
available.
Installation items shall include, but are not limited to:
•
Site requirements check, e.g., desk space, power, network availability, etc.
•
All necessary User pre-requisites check.
•
Complete installation within a single visit to the relevant location.
•
Coordinated disposal for replacement if necessary.
•
Performing preliminary and installation testing.
•
Removal of all packaging materials.
•
Feedback to the LAN services on any issues concerning capacity limits (including
port, network sockets and network addresses) or associated performance issues.
•
All relevant Service Management activities, e.g. Change and Configuration
Management (including asset management), Capacity Management, etc.
•
User sign-off.
Installation items shall include but are not limited to:
•
Laptops and Desktops including monitors together called Workstation.
•
Associated peripherals as required.
•
Network port activation.
•
Assignment of a TCP/IP address.
•
Access to all authorized applications (and data transfer if necessary).
Where specified by UNHCR, the Managed Service Partner shall configure desktop
machines with accessibility features to enable users with special needs to access their
required desktop environment.
The Managed Service Partner shall be responsible for the disposal process on request
from UNHCR, via the Global Service Desk. Disposal shall comprise of, but not limited
to:
•
Removal of Desktop Equipment and Peripherals.
•
Network port deactivation.
•
De-assignment of IP addresses.
•
Feedback to the LAN services.
•
User sign-off.
The Managed Service Partner shall be responsible for checking security of installation in
line with UNHCR Security Policy and associated standards before commissioning.
The Managed Service Partner shall familiarize the User with new User equipment and
gain their acceptance of the Installation.
Often referred to as MACD (Move, Add, Change, Delete).
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 33 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
8.1.2
Arrange power points
The Managed Service Partner shall
• Work in coordination with the relevant UNHCR (General Services) or other external
teams to arrange the installation of any additional power points required to install new
equipment.
• Take responsibility for ensuring power points are installed in time for the equipment to
be connected.
8.1.3
Install & configure network points
The Managed Service Partner shall:
• Work in coordination with the relevant UNHCR or other external teams to install new
voice and data network points, including associated cabling and patching.
• Configure live voice and data network points that are required to install ICT equipment,
including necessary network and telephony cable patching.
8.1.4
Move existing ICT equipment
The Managed Service Partner shall:
• Move ICT equipment from its current location to a new location and perform all work
required to reconnect the equipment to the appropriate network.
• Test the installation of the equipment and perform user acceptance for user equipment
• Shall obtain a Sign-off from the User(s), once the activity is complete.
8.1.5
Install, configure, de-install for off-site conferences
•
8.1.6
The Managed Service Partner shall perform all of the above described activities
including user sign off as necessary for setting up, configuring, operating and deinstalling off-site conferences. The equipment includes, but is not limited to:
•
Laptops and Desktops including monitors
•
Associated peripherals if requested
•
Network cabling
•
Network port activation
•
Assignment of a TCP/IP address
•
Access to all authorized applications (and data transfer if necessary).
•
Liaise and coordinate with all 3rd party hosts of meetings to ensure that services are
provided
•
Provide on-site support for the duration.
•
Note: these types of meetings are normally set up and dismantled at weekends
Maintain the Asset Management Register
The Managed Service Partner shall:
• Ensure that all equipment movements are correctly reflected in the Organization’s asset
register (MSRP/PeopleSoft) and configuration database (LANDesk Management Suite).
• Ensure that all disposals are carried out in accordance with established UNHCR
practices, are submitted to the Asset Management Board for approval prior to disposal,
and that disposals are correctly reflected in the asset management register.
8.2
Minimum and Optimum operating hours
The minimum and optimum operating hours for IMAC services are the same as those for
Data Centres (i.e. on-site for 12 hours per day from 07:30 to 19:30) with on-call services
outside these hours.
8.3
Implementation of new IMAC services
As new infrastructure services are introduced, the appropriate IMAC service will need to be
included in the overall service offering.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 34 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
8.4
Out of scope IMAC Services
The following services that would typically be included in IMAC services are out of scope for
this RFP:
• Print services.
• Telephony and videoconferencing.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 35 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
9
Desktop Service Scope
This section describes the services that UNHCR is expecting to receive as part of the
Desktop component of Managed Services.
The scope of Desktop services covers all authorised users in all UNHCR locations. All
UNHCR authorised desktop and laptop devices (together called Work Stations) and UNHCR
issued mobile devices (Tablets, Smart Phones) are in-scope of Desktop services.
9.1
Support Services
The Managed Service Partner shall provide both remote and on site Desktop services as
required to all authorised user Work Stations and peripherals by following ITIL Service
Management processes and as per guidelines and policies as defined or agreed by
UNHCR. The sub-services include, but are not limited to:
• Basic Desktop Services
• Software Fix-on-fail management, including 2nd Level support for standard applications
including global messaging;
• Hardware Management;
• System Security Updates (incl. anti-virus);
• Systems Maintenance;
• Mobile devices (all approved mobile devices not limited to tablets or smart phones);
• Asset management and Configuration Management;
• User training.
9.1.1
Basic Desktop services
The Managed Service Partner shall:
• Ensure that Users are able to:
•
Store and retrieve information from a local and/or network storage area permissible
by their access privilege as defined by UNHCR.
•
Choose printers, connected locally or on UNHCR Network within their access
privilege, and are able to print.
•
Obtain information on the print status and also to manage their jobs in the print
queue.
• Ensure that File capabilities are defined for each User according to the read/write
privileges defined by UNHCR.
• On User request, recover data from backup, when a User loses data and is not able to
recover it.
9.1.2
Software Fix-on-fail management
•
The Managed Service Partner shall provide fix-on-fail support by following the Service
Management processes for the Users including:
•
Resolution of Incidents relating to standard install applications.
•
The Managed Service Partner shall be responsible to restore Workstations to their
standard configuration as needed.
•
Resolution of incidents relating to Workstations and mobile devices that require
changes including but not limited to:
Application / system configuration.
Application installation and distribution in line with the approved Workstation
image.
Restoration of network configuration, standard printer configuration,
standard drivers and other approved accessories and peripherals as needed in
coordination with Print Services team.
Other 2nd level support activities including, but not limited to
Reconfiguration, archiving and errors in macros, driver installs and upgrades,
etc.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 36 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
•
•
•
9.1.3
In case of a Microsoft software error, the Managed Service Partner shall be responsible
for providing and operating a workaround as the case may until such time as the error is
diagnosed, fixed, tested and installed.
Any new hardware / software that is introduced must follow the agreed Change and
Release Management processes
The Managed Service Partner shall update all relevant documentation when applying
any changes to the standard Workstation software
Hardware Management
The Managed Service Partner shall:
• Be responsible for coordinating with relevant teams within UNHCR for the provision of
system hardware, accessories and peripherals used in delivery of the services in line
with UNHCR standards and for ensuring that it is fully supported and maintained.
• Ensure that as changes are made to the Workstation hardware have followed the
Change and Release management processes and do not cause a negative impact on
applications and processes and that they continue to operate efficiently.
• Advise UNHCR of suggested changes to standard hardware configurations. Such
changes may only be effected by following the Change and Release management
processes with the explicit written approval from UNHCR. Managed Service Partner
shall ensure that the relevant documentation is updated accordingly.
• Not introduce any hardware or software for use as system hardware until such
hardware/software has been approved by UNHCR.
• Follow the approved Change and Release Management process for any new hardware /
software that is introduced.
• Replace any non functioning item of client hardware (including mobile devices) with a
functioning unit. The Managed Service Partner shall treat each component of the client
hardware such as a monitor or a base unit separately.
• Draw up a schedule of preventative maintenance to the hardware in line with good
industry practice for agreement with UNHCR, The Managed Service Partner shall
ensure that preventative maintenance is scheduled outside Business Hours or as
otherwise agreed with UNHCR to minimise disruption to users and ensure continued
provision of the services. The Managed Service Partner shall be responsible for
carrying out preventative maintenance to client hardware in accordance with the agreed
schedule.
9.1.4
System Security Updates (incl. anti-virus)
The Managed Service Partner shall:
• Provide and maintain Virus protection software in line with UNHCR standards that will
protect the workstation from viruses that may be introduced to the network and the client
environment by any means. The Managed Service Partner shall update the relevant
documentation with details of any such software.
• Actively monitor threats to the workstation and shall take all reasonable actions in line
with industry best practice to protect UNHCR from new threats as they emerge. This
includes cases where the user is connected directly to the secure company network, by
VPN or connected directly to the internet from a UNHCR mobile device.
• In case of a virus attack / infection on a User workstation/mobile device; ensure that the
infected file(s) is(are) quarantined and / or the User workstation/mobile device is
disconnected from the UNHCR network as needed to avoid the spread to other
workstations connected to the network.
• Ensure that updates to Virus signatures for Virus protection software are distributed to
and installed on all workstations/mobile devices that are connected to the network within
four hours of such update or upgrade being made available for distribution after Service
acceptance.
• Provide reports setting out the number, name and location of viruses that have been
automatically detected and eradicated. Such reports shall be included in the standard
Monthly Service Report or as requested.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 37 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
9.1.5
Systems Maintenance – Provision of Software
The Managed Service Partner shall:
• Distribute new software builds (desktop and laptop images) and for Mobile devices as
needed that are required in line with changes to the UNHCR standards.
• Support UNHCR’s Standard Operating Environment, workstation builds and, if specified,
bespoke Workstation builds, group policies and their associated logon scripts and logon
/ log-off facility and configuration standards as defined by UNHCR.
• Record and track all software used by them to deliver the services.
• Ensure that all software provided or distributed by them is maintained in fully functional
condition.
• Be responsible for ensuring that suitable license arrangements are in place for all
software deployed. The Managed Service Partner shall be responsible for the ongoing
management and monitoring of license usage in order to ensure that such usage is both
legal and efficient, including the enablement of license re-deployment to minimize
license costs. The Managed Service Partner shall provide evidence when requested by
UNHCR.
• Ensure that only authorized Users have access to specific software in line with UNHCR
standards.
9.1.6
Systems Maintenance – Maintenance and Support of Client Software
The Managed Service Partner shall:
• Notify when software patches, fixes and maintenance releases or ad-hoc software
releases are necessary and agree a timescale for their distribution following the
Change, Release and Deployment processes.
• Distribute, apply and test the software patches, fixes and maintenance releases or adhoc software releases as required.
• Repair or the assign (in coordination with Global Service Desk) to the appropriate
resolution group any client software that is not fully functional.
• Provide preventive maintenance and analysis including, but not limited to:
•
Acting on software patch releases as appropriate.
•
Scheduling downtime.
•
Root cause analysis.
•
Trend analysis.
•
Identification of repeating faults/known errors.
•
The above will follow the Problem, Change, Release and Deployment processes.
9.1.7
Mobile devices
The Managed Service Partner shall:
• Ensure that all the UNHCR owned mobile devices are included and maintained as part
of the agreed Asset Management process.
• Track the mobile devices with their corresponding contract and the user it is issued to.
9.1.8
Asset management and Configuration Management
The Managed Service Partner shall:
• Ensure that the Asset Register compiled by the Managed Service Partner includes,
either physically or logically, information on all physical hardware assets in use within
UNHCR ICT Environment.
• Work with UNHCR to ensure that the information in the Asset Register includes
information of the Asset owner, Asset Class, and other Asset attributes.
• Ensure that the Asset Register reflects the up-to-date situation and is periodically
maintained.
• Work with UNHCR to perform an audit of the Asset Register at least every six months to
ensure that the details of Assets recorded therein remain accurate and up-to-date. The
Managed Service Partner shall ensure that UNHCR has full access to the results of
such audits once those results are available.
• Document the processes for ensuring that change to Assets is performed in a controlled
and managed manner and protects the accuracy of information in the Asset Register.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 38 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
•
•
9.1.9
User training
•
•
•
9.2
Maintain, as a component of the Asset Register, an audit trail of all changes in Assets.
The audit trail shall include information relating to planned, ongoing and completed
changes. The Managed Service Partner shall record changes in location, configuration,
and usage and where the Asset has been subject to a Problem or Incident.
Ensure that all information in the Asset Register is available to UNHCR and shall
provide summary reports on request.
When new equipment and/or devices are made available to the Users, or when the User
procedures are changed, the Managed Service Partner shall ensure that User training
and/or documentation is put in place in agreement with UNHCR.
The Managed Service Partner shall undertake User training as appropriate. Activities
involved in the delivery of this service include, but are not limited to:
•
Provide User training plan in agreement with UNHCR.
•
Ensure Users are notified of date, location etc. of the training.
•
Provide documentation / manuals for training purposes.
•
Training on both the use of the equipment, and also on how to improve the use of
the service.
For all the services provided by the Managed Service Partner, they shall coordinate with
the relevant UNHCR teams to administer the complete training service from request for
training through to evaluation of the training delivered and shall make the results of all
evaluations available to UNHCR.
Software tools
The Managed Service Provider is expected to use the desktop management tools that are
already established at UNHCR. This includes the LANDesk:
• Service Desk
• Management Suite
• Patch Manager.
9.3
Minimum and Optimum operating hours
The minimum and optimum operating hours for Desktop services are the same as those for
Data Centres (i.e. on-site for 12 hours per day from 07:30 to 19:30) with on-call services
outside these hours.
9.4
Implementation of new Desktop services
The Managed Service Partner is expected to be actively involved in the development of
Desktop services.
Any service delivery will follow the agreed ICT Project and Governance process. The
Managed Service Partner would be expected to be involved in all aspects of the service
development and to provide work and cost estimates as part of the approval process.
It is likely that this facility will only be used once the basic infrastructure managed services
have stabilized.
9.5
Out of Scope Desktop Services
The following services that would typically be included in IMAC services are out of scope for
this RFP:
• Print services.
• Non-standard software installation or support.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 39 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
10
Corporate Messaging Service Scope
This section describes the services that UNHCR is expecting to receive as part of the
Corporate Messaging component of Managed Services.
This service includes all aspects of the email service including licenses and supporting the
server side but excludes hardware and operating system; collaboration tools include any
networked collaboration tools supporting all Users in the Headquarters and Field locations
across UNHCR footprint.
10.1
Support Services
The Managed Service Partner shall provide support services for Email, Instant Messenger,
web email access, etc for all Users at all in-scope locations, including documentation by
following ITIL Service Management processes and as per guidelines and policies as defined
or agreed by UNHCR. The sub-services include, but are not limited to:
• Email services (including calendar, Mail relay and filtering services).
• Mobile device data sync services.
• Collaboration services.
• Security Services.
• User training.
10.1.1
Email services
The Managed Service Partner shall:
• Resolve incidents relating to email service that require changes including but not limited
to:
•
Application / system configuration.
•
Operational aspects including availability, performance and stability.
• Queue and retain email in the event of a failure in the mail server or a connection, in
order to prevent messages from bouncing. The Managed Service Partner shall
gradually transmit queued email upon resolution of the problem to avoid overloading the
servers.
• Support email requirements of varying complexity, in terms of load and volume.
• Provide and support instant messenger services to all Users.
• Provide and support web email services to all Users.
• Support a management interface which provides, but is not limited to the following:
•
Configuration tools allowing UNHCR to set policies, rules and routing requirements
•
Email activity trends, such as daily, weekly, monthly, and yearly volumes and
patterns.
•
Email cleaned, deleted or rejected.
•
Management of user and domain permissions.
•
Real-time service statistics and availability data.
•
User and company domain activity.
• Provide proactive filtering of incoming email for viruses, spam, malware, phishing,
directory harvest, denial of service.
• Provide Email messages relay service for other UNHCR applications requiring SMTP
service.
• Ensure that any changes made have followed the Change and Release management
processes and do not cause a negative impact on applications and processes and that
they continue to operate efficiently.
• Update all relevant documentation in line with UNHCR policy and procedures.
• Manage disk quotas for individual mail boxes.
• Perform capacity planning.
• Perform backup and recovery of data.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 40 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
10.1.2
Mobile device data sync services
The Managed Service Partner shall:
• Ensure that all UNHCR approved mobile devices including, but not limited to
Smartphones, Tablets, iPhone, Blackberry devices and PDAs and their associated
ancillary equipment if any are able to synchronize with the UNHCR email systems.
• Ensure that these devices are appropriately configured for the Users.
10.1.3
Collaboration services
The Managed Service Partner shall:
• Provide support for Users for all approved collaboration tools that includes but not
limited to:
•
Application / system configuration.
•
Application installation.
•
Operational aspects including availability, performance and stability.
• Be responsible for providing support to all approved collaboration tools including any 3rd
party software.
• Update all relevant documentation in line with UNHCR policy and procedures.
10.1.4
Security Services
The Managed Service Partner shall:
• Implement security procedures to preserve the confidentiality and integrity of all email
traversing UNHCR network. These include, but are not limited to, authentication,
encryption, and access restriction as required.
• Perform periodic reviews of the existing email policy.
10.1.5
User training
•
•
•
10.2
When new equipment and/or devices are made available to the Users, or when the User
procedures are changed, the Managed Service Partner shall ensure that User training
and/or documentation is put in place in agreement with UNHCR.
The Managed Service Partner shall undertake User training as appropriate. Activities
involved in the delivery of this service include, but are not limited to:
•
Provide User training plan in agreement with UNHCR
•
Ensure Users are notified of date, location etc. of the training
•
Provide documentation / manuals for training purposes
•
Training on both the use of the equipment, and also on how to improve the use of
the service.
For all the services provided by the Managed Service Partner, they shall coordinate with
the relevant UNHCR teams to administer the complete training service from request for
training through to evaluation of the training delivered and shall make the results of all
evaluations available to UNHCR
Minimum and Optimum operating hours
The minimum and optimum operating hours for Corporate Messaging services are the same
as those for Data Centres (i.e. on-site for 12 hours per day from 07:30 to 19:30) with on-call
services outside these hours.
10.3
Implementation of new Corporate Messaging services
The Managed Service Partner is expected to be actively involved in the development of new
network and LAN services including integration of messaging with IP telephony, instant
messaging, presence notification, unified messaging, etc. which are the subject of another
RFP.
Any service delivery will follow the agreed ICT Project and Governance process. The
Managed Service Partner would be expected to be involved in all aspects of the service
development and to provide work and cost estimates as part of the approval process.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 41 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
It is likely that this facility will only be used once the basic infrastructure managed services
have stabilized.
10.4
Out of Scope Corporate Messaging Services
The following services that would typically be included in IMAC services are out of scope for
this RFP:
• Telephony and videoconferencing.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 42 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
11
Generic Requirements
The following generic requirements apply to all aspects of Infrastructure Development,
Support and Maintenance.
11.1
Service Management Processes
The Managed Services Provider shall provide the contracted service by following Service
Management Processes as defined by UNHCR or in the absence of a Process, by following
best practice conforming to the ITIL v3 standards in agreement with UNHCR. The Managed
Services Provider is expected to follow or interact as required, with the processes including
but not limited to:
• Incident Management
• Problem Management
• Change Management
• Release Management
• Configuration Management
• Demand Management
• Service Portfolio Management
• Service Acceptance
• Financial Management
• Service Level Management
• Supplier Management
• Capacity Management
• Service Catalogue Management
• Availability Management
• ICT Security Management
• ICT Service Continuity Management
• Major Incident Management
• Service Request & Access Management
• Continuous Service Improvement
• Service Measurement & Reporting
11.2
Business Continuity
The Managed Services Provider is expected to follow the Business Continuity processes as
per guidelines and policies defined by UNHCR. Any process defined for the delivery of
services shall conform to the relevant UNHCR BCP processes and approved by UNHCR.
The Managed Services Provider shall provide a single point of contact for all matters related
to Business Continuity services.
The Managed Services Provider shall provide Business Continuity Management and be
responsible for:
• Ensuring that Business Continuity (BC) and Disaster Recovery (DR) Plan integrate with
business continuity plans across UNHCR and, if required, other pertinent organizations.
• Ensuring that appropriate business continuity and disaster recovery plans for all
Managed Services Provider processes, infrastructure and systems required to ensure
that Service Levels are met.
• Ensuring that all BC and DR plans are reviewed and agreed at least annually with
UNHCR.
• Ensuring that all BC and DR arrangements are tested to standards agreed with UNHCR
at least annually.
The Managed Services Provider shall provide results of BC and DR tests and status of
proposed or agreed changes arising from these with UNHCR and other agreed the bodies
like, but not limited to the audit committee.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 43 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
11.3
Policy and Standards
The Managed Services Provider shall provide UNHCR with a single point of contact (SPOC)
for all Contract Management matters, and a clear escalation path on all services provided.
The Managed Services Provider shall provide UNHCR with a Reporting process,
highlighting key individual responsibilities, dependencies and escalation path. The
Managed Services Provider shall advise of any change to the Management Structure
through the life of the Contract.
If necessary, the Managed Services Provider shall, jointly with UNHCR, draft Service Levels
for new areas of service prior to implementation and for proposed changes to existing
Service Levels.
For Projects awarded to the Managed Services Provider:
• The Managed Services Provider shall manage the Project using an agreed and
recognized project management methodology in line with UNHCR standards and
policies.
• The Managed Services Provider shall provide product descriptions during the planning
cycle for all products to be produced in line with agreed project management
methodology.
• The Managed Services Provider shall follow the project management processes, ITIL
based Service management processes that have been defined by UNHCR Project
office, or in its absence, follow a process with the prior approval of UNHCR.
11.4
Annual Review
The Managed Services Provider shall cooperate with UNHCR for the production of annual
review reporting, which shall be available no later than 4 weeks after the end of the annual
anniversary of the contract award date.
The annual review shall include all reporting elements of the Service Management
processes including but not limited to:
• Managed Services Provider’s overview of the reporting year, e.g. key service
improvements, cost savings, delivery of particular services or applications, SLA
performance, benefits delivered to customers, major changes, and upgrades.
• Financial overview of the reporting year, to include all key financial KPI’s summarized
for the year including network and desktop costs through the year as appropriate,
savings achieved over previous year, etc.
• Service Overview of the reporting year to include summaries of:
•
Performance Monitoring;
•
Capacity Management;
•
Availability Management;
•
Financial Management and Billing;
•
Incident Management;
•
Problem Management;
•
Change and Release Management; and
•
Configuration, Asset and Inventory Management.
• Summary of customer satisfaction surveys undertaken through the year.
For projects and new services:
• Key projects and new services delivered in the year;
• Innovation and solutions presented to UNHCR;
• Project Performance summary.
11.5
Monthly Report
The Managed Services Provider shall cooperate with UNHCR for the production of a
monthly service report to be available no later than 10 working days after the first working
day of the month.
The monthly report shall be concise and in readable electronic format.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 44 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
The details of the monthly service management report would include.
• RAG (Red, Amber, Green) status of all contract areas;
• Performance against SLAs;
• Major incidents;
• Change Requests;
• Business and service improvement plans;
• Configuration management changes;
• Preventative maintenance report;
• Changes to Assets and inventories;
• IMACs report;
• Networks and Applications availability; and
• Security issues report.
11.6
Project and Development Performance
The Managed Services Provider shall provide regular performance monitoring reports
(frequency to be agreed) on infrastructure service development and maintenance
productivity, timeliness of delivery of projects / releases, software quality, reliability of
estimates and reasons for variations between estimates and actuals.
11.7
Ad hoc reports
On request by UNHCR, the Managed Services Provider shall produce ad-hoc service or
financial reports within a timescale of up to two days for any of the contracted Services
11.8
Satisfaction Survey
The Managed Services Provider shall cooperate with UNHCR to conduct Satisfaction
Surveys at mutually agreed intervals to measure User satisfaction with the support and
delivery of the services at all levels of the organization.
11.9
Access to Infrastructure
UNHCR will provide access to all Production and non-Production environments for all ICT
infrastructure within the scope of this RFP. When working from remote sites (off-site
support) the Managed Services Provider will ensure that adequate security is in place to
safeguard UNHCR infrastructure and data. This will include, amongst others, ensuring that
all remote access is via VPN or other secure links.
If, for ease of support and maintenance, the Managed Services Provider needs to replicate
locally any infrastructure components, they will ensure that this is done in an isolated and
dedicated container logically and physically separated from any in-house equipment. The
Managed Services Provider must request and obtain UNHCR’s permission beforehand.
11.10
License and asset management
For all work performed from UNHCR’s premises, UNHCR will provide standard office
facilities to support and maintain the infrastructure.
For all work performed remotely by the Managed Services Provider from their own premises
(off-site), the Contactor will be responsible to provide desktop support, communications links
with adequate bandwidth, and all software and hardware necessary to support the UNHCR
infrastructure. This includes any UNHCR infrastructure that the Contractor replicates for
support or development purposes.
As described under the specific service descriptions, the Managed Service Provider is
expected to maintain the asset register for all UNHCR assets under its mandate.
UNHCR will maintain control and ownership of all software licenses and the relationship with
the respective software vendors.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 45 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
11.11
Vendor management
The Managed Service Provider will be expected to manage the day to day relationship with
suppliers and the underpinning contracts for support and maintenance of software and
hardware under their control. This will include:
• Coordination with vendors for support services.
• Logging and monitoring incidents and problems with OEM suppliers.
• Escalation of incidents and problems as required ensuring speedy resolution or the
provision of an acceptable work-around pending resolution.
• Managing any assets sent for repair or replacement• Periodic review, with UNHCR, of the vendor’s performance against the SLAs in the
under-pinning contracts.
The Managed Service Provider may be asked to participate in contract and SLA negotiation
but the primary responsibility will remain with UNHCR.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 46 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
12
Infrastructure Skills Inventory
For service development projects UNHCR intends to issue Statements of Work (SOWs) to
the Managed Service Provider either for the delivery of a turn-key solution (at an agreed
fixed price), or on a Time and Materials basis.
For T&M based SOWs, we would expect the Managed Service Provider to work off a preestablished rate card based on the specific skills required.
This section outlines the skill sets that we envisage requiring as part of the overall
Infrastructure Managed Services contract.
12.1
Service Development
This category includes the profiles that may potentially be required to assist UNHCR/DIST
to develop new infrastructure services or to perform future upgrades the existing ICT
infrastructure and associated services.
Senior Infrastructure/Network Specialist:
•
•
Tasks:
•
Performs complex design, engineering, implementation, maintenance, and upgrade
of the HQ data center servers, local area network (LAN) and/or wide area network
(WAN), and/or security infrastructure located at HQ
Required skills:
•
Experience in designing, developing, and implementing new virtual environments
based on virtualization technologies such as VMWare, Hyper-V, iSCSi/FC SANs
•
Experience with iSCSi/FC NetApp SAN storage systems
•
Experience with WAN optimization
•
Strong background in LAN and WAN TCP/IP networking environment and
experience designing, developing, installing, managing and monitoring network
security and routing solution including Checkpoint firewalls and CISCO routers.
Senior Microsoft Systems Specialist:
•
•
Tasks:
•
Provide expertise for any project that requires integration with Microsoft Windows
Servers, SQL Server, IIS, SharePoint, and/or Microsoft Active Directory.
Required skills:
•
Experience (min 8 years) current and recent versions of Microsoft Windows Server
and associated components.
•
Microsoft Active Directory.
•
Microsoft SQL Server, including BI services and integration.
•
Microsoft SharePoint Server, including workflow services.
•
Microsoft Dynamics CRM.
•
Microsoft Server Certification.
Junior Microsoft Systems Specialist:
•
•
Tasks:
•
Provide expertise for any project that requires integration with Microsoft Windows
Servers and Desktop, and/or Microsoft Office.
Required skills:
•
Experience (min 4 years) current and recent versions of Microsoft Windows Server
and Desktop OS.
•
Current and recent versions of Microsoft Office, Outlook, and associated software.
•
Microsoft Server Certification.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 47 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
Microsoft Exchange Specialist:
•
Tasks:
Provide technical leadership, standards and best practices during infrastructure
design and implementation phases of Microsoft Exchange 2010.
•
Work with the managed service provider to ensure all proprietary and third party
applications properly integrate with the firm’s network infrastructure.
•
Perform data migration from legacy email to Microsoft Exchange 2010
•
Integration of third party software to Microsoft Exchange including but limited to
Microsoft SharePoint, OpenText LiveLink, and Blackberry BES.
Required skills:
•
Strong experience in designing, implementing and optimizing Microsoft Exchange
system over MPLS and VSAT WAN
•
Proven migration experience of legacy messaging systems to Microsoft Exchange
platform.
•
Microsoft Exchange 2010 certification.
•
•
Microsoft Active Directory Specialist:
•
•
Tasks:
•
Provide technical leadership, standards and best practices during infrastructure
design and build phases of the Microsoft Active Directory service.
•
Work with the Applications and Infrastructure teams to ensure all proprietary and
third party applications properly integrate with Microsoft Active Directory.
Required skills:
•
Strong experience in designing, implementing and optimizing Active Directory
services over MPLS and VSAT WAN for 300+ nodes global network infrastructure
and proven architectural experience with LDAP infrastructures and naming service.
•
Strong experience in migration and integration with Novell eDirectory and Open
LDAP.
Infrastructure Security Specialist:
•
•
12.2
Tasks:
•
Perform infrastructure security audits
•
Perform penetration tests
•
Document exposure threats, risks, prevention and mitigating actions
•
Advice on preventative and corrective actions to take
•
Prepare security policies
•
Assist in infrastructure system design
Required skills:
•
Experience (10 years +) in management, design, and development of security
aspects of business critical infrastructure;
•
Experience in all aspects of network and ICT infrastructure security;
•
Knowledge of PKI, encryption, certificates, etc.;
•
CSSA / CSSM certification a distinct advantage.
Service Design
Technical Analyst:
•
Tasks:
•
Provide technical leadership, standards and best practices during infrastructure
design, build, migration and deployment phases;
•
Analyze and scope the area of analysis, working with project managers and
business sponsors to clarify the level and complexity of the business analysis effort
needed for a new project;
•
Select the appropriate elicitation techniques to efficiently identify critical business
requirements;
•
Conduct effective requirements reviews to improve the quality of requirements
deliverables;
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 48 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
•
•
Build strong relationships with project stakeholders.
Required skills:
•
Experience (10 years +) in management, design, and development of business
critical infrastructure.
•
Experience (10 years +) in infrastructure platform migration and deployments with
expert knowledge in network design, storage, backups, security and monitoring
technologies.
•
Previous experience in UN, International or other humanitarian organization process
will be a distinct advantage.
•
Excellent command of spoken and written English.
•
Relevant Project Implementation experience involving all stages of a project life
cycle.
•
ITIL Change control procedures.
•
Ability to carry out information gathering exercises, document results and compile
project deliverables, such as requirements definition, fit-gap analysis, cost-benefit
analysis, feasibility studies, project vision and strategic planning.
•
Interpersonal skills required include:
Ability to work in a truly multicultural environment;
Ability to organize and carry out workshops/brain-storming sessions with
clear objectives;
Good communication skills and able to explain and present complex topics
to audience of variety level of IT expertise;
•
Expert knowledge of IT productivity tools, such as MS Office, (Word, Excel,
PowerPoint), and process documentation tool(s) such as Visio, MS-Project;
Infrastructure/Network Architect:
•
•
12.3
Tasks:
•
Contributes to ensuring that UNHCR has an appropriate IT architecture to meet the
strategic direction of UNHCR.
•
Creating roadmaps that will deliver convergence to the new architecture.
•
Monitoring progress against roadmaps to ensure desired outcomes are achieved
•
Define standards related to the infrastructure architecture.
•
Identify the impact on other systems of new proposed infrastructure changes and
undertake a gap analysis to define areas of discrepancy.
Required skills:
•
Experience (10 years +) in management, design, and development of business
critical infrastructure.
•
Large Network Infrastructure architecture and design experience across multiple
technologies: Hardware Platform, Enterprise Storage, Virtualization, Security,
Software tools and Automation.
•
Experience in management of Internet-based real-time applications.
•
Strong project management skills with multi-faceted teams.
Service Support and Operations
In addition to some of the skill profiles included under Service Development and Service
Design.
Telecommunications Professional:
•
Tasks:
•
Deploy various telecommunications solutions in accordance with UNHCR
standards; Be responsible for monitoring and maintenance of various
telecommunications systems deployed by UNHCR in the field and HQ;
•
Install, configure and commission conventional and digital RF systems in
accordance with UNHCR requirements, ITU standards and local regulations;
•
Install, configure and commission satellite earth stations in accordance with UNHCR
requirements, ITU standards, EMC/GVF recommendations and local regulations;
•
Integrate telephony solutions into the new or existing network infrastructure, ensure
their survivability and interfacing with VSAT, WAN, PSTN as described in project
documentation of UNHCR;
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 49 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
•
•
Deploy wireless communications solutions, video surveillance systems, manage
cabling and infrastructure projects, install power systems in accordance with
UNHCR standards, requirements of manufactures and local regulations; Liaise with
authorities to timely obtain required permits and authorizations;
•
Perform diagnostics and repair of hardware problems pertaining to the HCR
telecommunications equipment;
•
Assess and provide recommendations on standard telecommunications hardware
specifications;
•
Assist in the analysis and definition of telecommunications solutions for systems
under development;
•
Provide information on availability of support packs, relevant firmware updates.
Ensure that software and firmware of associated telecommunications systems is
updated in order to comply with the latest UNHCR guidelines on security and
performance.
•
Install and configure Tele- and Video conferencing solutions in accordance with
UNHCR standards;
•
Be ready/responsible to administrate (create updates and guidelines etc.) and
schedule Tele- and Video conferences but also develop a best practice in
accordance with our existing- and future resources.
•
Be prepared to work outside normal working hours in order to conduct installations,
maintenance and other infrastructure support activities;
•
Liaise with technical units within DIST concerning deployment, configuration and
troubleshooting of telecommunications equipment and solutions;
•
Ensure that performance of telecommunication solutions in compliant with
maintenance contracts and SLA provisions; Liaise with UNHCR technical units for
timely resolution of incidents;
•
Apply a variety of specialized software tools to remotely access, monitor, support
and configure data and voice network components;
•
Perform LAN administration functions when required; Provide support to ICT
services of UNHCR in solving connectivity and data infrastructure problems;
•
Extended experience with TCP/IP networks, VPN, firewalls, routers and information
security procedures; Ability to use network analysis tools;
•
Maintain asset database within the area of technical responsibility; Assist in
decommissioning of obsolete equipment as required by UNHCR regulations;
•
Generate telecommunications reports (periodic, mission, etc.);
•
Provide support to staff on the use of telecommunications equipment, advise on
best practices and communications standards, explain troubleshooting and safety
procedures;
•
Provide telecommunications advice to implementing partners of UNHCR.
Required skills:
•
Experience (5+ years) in installing, configuring and managing telecommunications
equipment in large and complex environment within standard operating procedures.
•
Experience in LAN and WAN TCP/IP voice and data infrastructures, experience
managing and monitoring network performance;
•
Proven ICT project management experience;
•
Experience in customer services and the ability to provide a professional interface
with the user community. Good interpersonal skills.
•
Experience in managing and keeping up to date information in a stock control /
asset management system.
•
Proven ability to trouble-shoot networking issues and provide viable solutions or
temporary work around to keep the data and voice solutions operational.
•
Proven ability to perform problem management and root cause analysis.
•
Proven ability to work with attention to details and under pressure.
•
Proven experience of working in large organizations with a multicultural
environment.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 50 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
Mobile Device Specialist:
•
Tasks:
Configure mobile devices, create and deploy security and device management
policies based on the organization's standards and corporate policies, carry out
functionality and configuration tests on devices as well as on mobile applications
and solutions, troubleshoot problems and support devices including iOS (Apple),
Blackberry (RIM), Android (Google) and Windows Mobile (Microsoft);
•
Design user interface architecture and workflows, develop mobile applications,
integration with web services, back-end connectivity to databases and other
applications, develop API platforms for existing services.
Required skills:
•
In-depth hands-on experience in configuring, pushing out device management and
security policies, troubleshooting (both client side and server side) and supporting
one or more mobile devices including iOS (Apple), Blackberry (RIM), Android
(Google) and Windows Mobile (Microsoft)
•
Strong Experience with enterprise-level mobile device and applications
management / synchronization
•
Strong concept & data visualization and interaction design skills including task
flows, user object models, wireframe etc.
•
Strong experience with IDE and SDK tools including Eclipse, Xcode, iOS SDK,
Android SDK etc.
•
Experience with front-end programming languages including PHP, .NET, Java, etc.,
with back-end databases including MS SQL Server, MySQL, and with mobile
technologies such as Mobify and PhoneGap.
•
•
12.4
Project management
This category includes the profiles that will be required to manage and run the upcoming
infrastructure upgrade and migration projects. UNHCR/DIST will be looking for a partner
with a proven track record in the successful implementation of large ICT infrastructure
projects and with a strong pool of resources to support those activities.
Project Manager:
•
•
Tasks:
•
General project management of an ICT Infrastructure project.
•
Report to the DIST CIO and project sponsor on the status of the project.
Required skills:
•
Sound Project management experience (min. 5 years) with a proven track record.
•
Excellent consulting skills in terms of managing client expectations; being tenacious
and inquisitive; proactive and a ‘can do’ attitude.
•
Proven experience within ICT infrastructure implementation, upgrade, and migration
projects.
•
Considerable experience in ICT project methodologies, tools and methods;
•
Certification in a recognized Project Management methodology, PMP, PRINCE2,
etc.
•
Excellent command of English, written and spoken.
•
Good interpersonal skills: communications skills, organizational skills and people
management abilities and techniques.
•
Coordinate meetings with end users and work closely with the project owners,
users, functional and technical teams.
•
Manage issues, risks, etc.
•
Create high quality project documents and charts.
Programme Manager:
In addition to the skills of the Project Manager:
• Tasks:
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 51 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
•
•
Coordinate and manage a series of parallel ICT infrastructure projects as a
consolidated programme, ensuring that each individual project is successfully
completed.
•
Report to the DIST CIO and to the ICT Governance Board on the overall status of
the infrastructure programme.
Required skills:
•
A minimum of. 10 years’ experience as a successful project and programme
manager with a proven track record managing large (value, resources, scope, time,
etc.) programmes and projects related to ICT infrastructure upgrades and
migrations.
•
Excellent and communication abilities, comfortably interacting with Senior
Management, Operational and Client personnel at all levels.
•
Proven leadership to deliver to commitments (financial and otherwise) and share the
value of the company.
•
Professional and approachable management style, with a results orientated attitude.
•
Business focused and commercially aware, yet retaining extensive technical
knowledge and awareness of current and emerging technologies.
•
Highly developed client facing skills, able to negotiate at a senior level, establishing,
developing and maintaining strategic business relationships.
•
Skilled Programme/Portfolio Manager with in-depth knowledge and experience of
implementing ‘best practice’ methodologies i.e. MSP, Prince2, Six Sigma, CMMI
and DSDM.
•
Proactive people manager – establishing teams, motivating and empowering
personnel, transferring skills, mentoring management and leading from the front.
•
Worked within the guidance provided by the UK OGC “Managing Successful
Programmes” (or equivalent).
•
Understanding or practitioner level in ITIL, CobiT, M_o_R, TOGAF, etc.
•
Experience in setting up and working with a P3O (Portfolio, Programme, & Project
Office).
•
Ability to maintain a Risks Register for the projects within the Programme.
Projects, Programme Planner & Scheduler:
•
Tasks:
Assist the Project and Programme managers to plan and schedule the tasks related
to ICT Infrastructure projects.
•
Prepare project status reports.
•
Maintain the project risks register.
•
Required skills:
•
Proven experience working within a P3O to manage the projects and programme
resource usage matrices.
•
High level planning of projects and programmes
•
Preparation and delivery of project related reports to management.
•
Skills in planning, scheduling, in particular the ability to:
develop and integrate a planning template based on the in-house project
methodology;
produce programme and project level planning protocols;
design the template in such a manner as to ensure the production of
reliable and standardized 'Management Information' and Key Performance
Indicators;
identify and manage all Project/Programme interdependencies;
pass on planning skills to appropriate members of the permanent staff;
facilitate coordination of the assumptions, risk, issue, dependency and
change control logs within the consolidated programme level plan and
Risk/Issues log;
support project managers during the transition to or the initial use of the
template;
produce a programme level consolidated plan of active projects;
prepare initial plans for future projects circa 2012/2013 and consolidate
them into a programme plan;
•
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 52 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
•
manage planning governance and good practice;
project manage development and roll out of the planning protocols,
governance and training;
Specific applications skills in MS-Project, MS-Visio, MS-Office, etc.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 53 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
13
Service Levels and Performance Targets
This section outlines the organization’s expectations for Service Level Agreements and
Performance Targets.
In responding to this RFP, you should provide details of how you manage SLAs and
Performance Targets in existing managed service engagements and how you would adapt
to the expectations of UNHCR.
13.1
Criticality and Priority Matrices
Based on the ITIL framework, UNHCR has defined and uses criticality levels for Incident
management and escalation, and has defined priority levels for Change Management.
The Service Level Agreements that DIST will establish with its customers will reflect these
matrices and will also underpin the SLAs that DIST will expect to establish with the
Managed Services Provider for ICT Infrastructure.
13.1.1
Impact
Impact is common to both Incident Management and Change Management. The following
table describes the levels of impact that are considered.
Rank
Description
Severe
(UNHCR wide)
Significant
(Country, Division)
Localized
(users)
13.1.2
Impact is Organizational wide or Multiple Business Units.
Impact affects Country(s) or Division(s) or Multiple Business Units.
Single office or less than 20 users.
Incident Criticality
UNHCR uses the following matrix to determine the criticality of an incident or service failure.
Within LANDesk, the same criticality levels are applied to incidents.
Impact
Incident
Criticality
Urgency
Severe
(UNHCR wide)
Major
(Country, Division,
or Bureau)
Localised
(User level)
High
C1
C2
C3
Medium
C2
C3
C4
Low
C3
C4
C5
Figure: 7: Incident Criticality Matrix.
In the sections that follow, proposed SLAs and performance targets are given.
13.1.3
Change Priority
All Requests for Change have a Priority assigned that is based on the impact and urgency
of the requested change. Impact is as described for Incidents.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 54 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
13.1.4
Urgency
The following table describes the levels of urgency that are considered:
Rank
Description
Organization disruption and /or degradation of business critical
services. Treat as Emergency change.
Severely affecting large numbers of users or some key users.
No workaround available.
No severe impact but rectification cannot be deferred until the
next scheduled release/maintenance window or upgrade.
A change is justified and necessary, but can wait until the next
scheduled release/maintenance window or upgrade.
Immediate
High
Medium
Low
13.1.5
Priority Matrix
The following diagram shows how the combination of Impact and Urgency are used to
assign Priority to a Change Request.
Impact
RFC
Priority
Severe
(UNHCR wide)
Major
(Country, Division,
or Bureau)
Localised
(User level)
Immediate
Emergency
Emergency
Major
High
Major
Major
Minor
Medium
Minor
Minor
Minor
Low
Standard
Standard
Standard
Urgency
Figure: 8: Priority Matrix.
The following table defines the Response Level that is expected for a Request for Change
based on its Priority.
13.1.6
Response Levels
The following table describes the response levels expected for RFCs based on their relative
priority.
Response Level
Priority
C1
Emergency
C2
Major
C 3, C 4
Minor
C5
Standard
Description
Organization disruption and /or degradation of
business critical services, i.e. Emergency Change
Severely affecting large numbers of users or some
key users. No workaround available, i.e. Urgent
Change
No severe impact but rectification cannot be
deferred until the next scheduled
release/maintenance window or upgrade, i.e.
Extended Scheduled Change or Urgent Change
All Non-Emergency changes, i.e. Local, Preapproved and Scheduled
It is important to realise that RFCs classified as Priorities of Emergency, Major, or Minor will
result in an Emergency CAB as the implementation of the change cannot wait until the next
scheduled release/maintenance window.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 55 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
13.2
Objectives of Service Level Agreements
The objectives of these Service Level Agreements are to:
• Create an environment that is conductive to a co-operative relationship between the
Managed Service Provider and UNHCR and to ensure the effective support of our endusers.
• Document the responsibilities of both parties.
• Ensure that UNHCR receives a high-quality service.
• Define the service level expected of the Managed Service Provider, thereby reducing
the risk of misunderstanding.
• Institute a formal system of objective service level monitoring and measurement,
thereby ensuring that reviews of the SLAs are based on factual data.
13.2.1
Service Level Monitoring
The success of service level agreements depends fundamentally on the ability to measure
performance comprehensively and accurately so that credible and reliable information can
be provided to customers and support areas on the services provided.
Service factors must be meaningful, measurable, and monitored constantly.
Service level monitoring will be performed by the Managed Service Provider. Report will be
produced as and when required and forwarded to UNHCR for review.
Service level monitoring and reporting is performed on response times as outlined in the
following sections.
13.3
Service Level Agreements for Infrastructure Support Activities
The following are considered as the baseline service levels and performance targets for
Infrastructure Support and Maintenance activities. All times are assumed to be working
hours based on the locations where the service is provided. We would encourage you to
propose mechanisms whereby DIST could extend the hours of service given to our user
community.
13.3.1
Level 2 Response Time (time to intervene for incidents)
Definition: The time from when Global Service Desk assigns an incident to the service
provider, to the time the service provider responds confirming to the incident originator that
the incident has been assigned to an appropriate functional/technical analyst and is being
worked on.
Criticality
C1
C 2, C 3
C 4, C 5
Support type
Data Centre,
Network & LAN
IMAC,
Desktop
Messaging
on-site
15 mins
15 mins
15 mins
on-call
15 mins
30 mins
15 mins
on-site
60 min
60 min
60 min
on-call
60 min
120 mins
60 min
on-site
120 mins
120 mins
120 mins
on-call
next business day
next business day
next business day
Figure: 9: Level 2 Response Time.
13.3.2
Level 2 Restore Target (time to resolve incidents)
Definition: The time from when Global Service Desk assigns an incident to the service
provider, to the time that the service is resumed, a workaround is agreed, or a Problem
remediation plan is agreed.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 56 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
Criticality
Data Centre,
Network & LAN
IMAC,
Desktop
Messaging
C1
95% within 2 hours;
100% within 8 hours
95% within 2 hours;
100% within 8 hours
95% within 2 hours;
100% within 8 hours
C 2, C 3
95% within 4 hours;
100% within 12 hours
95% within 4 hours;
100% within 12 hours
95% within 4 hours;
100% within 12 hours
C 4, C 5
95% within 8 hours;
100% within 16 hours
95% within 8 hours;
100% within 16 hours
95% within 8 hours;
100% within 16 hours
Figure: 10: Level 2 Restore Time.
13.3.3
Problem Management, Root Cause Analysis, and Proposed Remediation Plan
Definition: The time taken for root cause analysis to be completed and an appropriate
remediation plan to be proposed for the relevant service level and criticality.
Criticality
Data Centre,
Network & LAN
IMAC,
Desktop
Messaging
C1
95% within 5 days;
100% within 10 days
95% within 5 days;
100% within 10 days
95% within 5 days;
100% within 10 days
C 2, C 3
95% within 10 days;
100% within 15 days
95% within 10 days;
100% within 15 days
95% within 10 days;
100% within 15 days
C 4, C 5
95% within 10 days;
100% within 20 days
95% within 10 days;
100% within 20 days
95% within 10 days;
100% within 15 days
Figure: 11: Problem Management Remediation Target.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 57 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
13.3.4
Service Request Response Time (time to intervene for service requests)
Definition: The time (in core working hours) from when Global Service Desk assigns the
Service Request to the service provider, to the time the service provider responds
confirming to the RFS/RFI originator that the Service Request has been assigned to an
appropriate functional/technical analyst and is being worked on.
Criticality
Data Centre,
Network & LAN
IMAC,
Desktop
Messaging
C1
1 hour
4 hours
4 hours
C 2, C 3
4 hours
8 hours
8 hours
C 4, C 5
8 hours
16 hours
16 hours
Figure: 12: Service Request Response Time.
13.3.5
Information Request Resolution Target
Definition: The time taken for an RFI to be answered with the appropriate information.
Criticality
Data Centre
Network & LAN
IMAC
Desktop
Messaging
C1
95% within 2 hours;
100% within 1 day
95% within 4 hours;
100% within 2 days
95% within 16 hours;
100% within 10 days
C 2, C 3
95% within 4 hours;
100% within 2 days
95% within 8 hours;
100% within 4 days
95% within 16 hours;
100% within 10 days
C 4, C 5
95% within 8 hours;
100% within 4 days
95% within 16 hours;
100% within 8 days
95% within 16 hours;
100% within 10 days
Figure: 13: Information Request Resolution Targets.
13.3.6
Service Level Compliance
Service level compliance will be measured and reported on a monthly basis and will be
calculated as the percentage of items within the agreed target level to the total number of
items.
For example:
Response % =
Number of calls responded to within stipulate response time
x100
Total number of calls received in the month
On completion of the transition to steady state managed services operation, the compliance
levels may be used to manage the performance regime, including penalties for poor service
achievement.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 58 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
13.4
Service Level Agreements for Infrastructure Development Activities
The following are considered as the baseline service levels and performance targets for
Infrastructure Development activities.
13.4.1
Work Request Response Time (time to intervene for change requests)
Definition: The time from when a Work Request is received at the service provider, to the
time the service provider responds confirming to the originator that the Work Request has
been assigned to the appropriate functional/technical resource and is being analysed.
Priority
Data Centre,
Network & LAN
IMAC,
Desktop
Messaging
Emergency
1 hour
1 hour
1 hour
Major
4 hours
4 hours
4 hours
Minor
8 hours
8 hours
8 hours
Standard
16 hours
16 hours
16 hours
Figure: 14: Level 3 Work Request Response Time.
13.4.2
Change Plan Response time
Definition: The time taken for a Work Request to be fully analysed, estimated, and priced
and a proposed change plan ready for presentation to the CAB for approval.
Priority
Data Centre,
Network & LAN
IMAC,
Desktop
Messaging
Emergency
95% within 2 hours;
100% within 1 day
95% within 2 hours;
100% within 1 day
95% within 2 hours;
100% within 1 day
Major
95% within 4 hours;
100% within 2 days
95% within 4 hours;
100% within 2 days
95% within 4 hours;
100% within 2 days
Minor
95% within 8 hours;
100% within 4 days
95% within 8 hours;
100% within 4 days
95% within 8 hours;
100% within 4 days
Standard
95% within 16 hours;
100% within 8 days
95% within 16 hours;
100% within 8 days
95% within 16 hours;
100% within 8 days
Figure: 15: Change Plan Response Time.
13.5
Service Availability Targets
The Managed Service Provider will be responsible for the overall “up time” of the ICT
Infrastructure covered by this RFP. The following target levels are provided as a guidance
to the level of service that would be expected.
Data Centre,
Network & LAN
IMAC,
Desktop
Messaging
Core hours
99.95
n/a
99.95
non-core hours
99.5
n/a
99.5
Figure: 16: Availability targets (percentage up-time).
Core and non-core hours will be based on the location and working week of each office.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 59 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
14
RFP Technical Response
This section outlines how we would like you to structure your technical response to this
RFP. Following the outline of this section will allow us to evaluate all submissions on an
equal footing and thus determine the most appropriate solution for UNHCR.
As will be seen from the Price Component, UNHCR is looking for a fully integrated solution
for ICT Infrastructure Managed Services that can be delivered via a phased and modular
approach. In particular, there should be a clear separation of services that can be delivered
at Headquarters (and Hubs) from Field Offices, and by category of Field Office.
14.1
Company profile
Ideally, UNHCR is looking for a single company with a proven track record in the provision
of Managed Services for Infrastructure Support, Maintenance, and Development. We are
also looking for a company that already has the capability to take over these responsibilities
in as short a period as possible. Providing solid evidence of this in your submission will be
important in the overall evaluation.
We would expect to receive submissions from established companies (minimum five years
on-going business in ICT Infrastructure Managed Services). Your company should have
experience working in an on-site / off-shore model with clients similar to UNHCR. We would
expect this to be amply demonstrated in the information provide in your response, and in the
references you provide.
14.1.1
Company overview
Please provide the background to your company, its history, areas of business, etc. Please
do not repeat information that has been requested elsewhere.
14.1.2
Financial stability, Supplier Viability
The proposal must outline long-standing history in the marketplace, a viable business model
and continuously sound financial results. Bidders should provide the following financial
information:
• Financial Statements: Summary financial statements (Operating Statement and
Balance Sheet) for the last 3 years. Please provide this information in electronic format
on the CD that will accompany your submission. There is no need to provide printed
copies of this information.
• Managed Services Revenue: Please provide an indication of the percentage of
Infrastructure Managed Services of your overall revenue (either within the company or
major business unit).
14.1.3
Overall capability statement
Please provide information on your Infrastructure Managed Services capability in general
and how this is integrated into your overall business model.
14.1.4
Supplier Strategic Vision
Provide an overview of your company’s strategic vision and how the provision of
Infrastructure Managed Services is part of that vision.
14.1.5
Global Reach
Provide information about the global reach of your company and how this can be used to
the benefit of UNHCR in general and more specifically how this influences your ability to
deliver high quality applications managed services as requested in this RFP.
Specifically, we are interested to know the level of coverage (on-site / on-call) you can
provide in those locations where UNHCR as a presence today – even down to the deep field
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 60 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
locations. Your ability to provide skilled on-site support within an acceptable delay will be an
important evaluation criterion.
14.1.6
Off-site facilities
Provide an overview of your managed service facilities (locations etc.) and how these could
be leveraged to the benefit of UNHCR.
If you plan to provide some of the services from an off-shore location, please specify.
14.1.7
Information Security Policy
To the extent possible without compromising your own security, please provide details of
your Company’s Information Security Policy and specifically how this relates to the delivery
of Infrastructure Managed Services.
Please provide a copy of those aspects of your ISP that are relevant to this RFP.
14.2
Infrastructure Managed Services Capability
Please provide comprehensive information about your capability in the area of Infrastructure
Support, Maintenance, and Development – clearly indicating how this can be leveraged to
the maximum benefit to UNHCR.
14.2.1
Managed Services capability statement
Please give details of the technical and functional capabilities of your infrastructure
managed services operation. You should address your ability to cover the specific
infrastructure landscape at UNHCR.
14.2.2
Tools and Processes
Provide details of the additional tools and processes that you have at your disposal to
enhance the provision of infrastructure support, maintenance, and development. In the
Technical Proposal, you should indicate if these tools are provided at no additional charge
or if UNHCR would be expected to license these tools. In the latter case, please ensure that
the relevant cost information is contained in the Price Component only.
14.2.3
Solution Testing and Quality
UNHCR is looking to engage a Managed Service Partner who will be able to improve the
overall quality of our infrastructure services and maintain high quality solutions over time.
To this end, you should provide information on your infrastructure testing and quality
assurance facilities and how these would be integrated into the overall Infrastructure
Managed Service.
14.2.4
Managed Services Framework
UNCHR believes that the overall Infrastructure Managed Services will be delivered as three
distinct components and that this should be reflected in both the technical and price
submissions. It is UNHCR’s preference to engage a single service provider for all
infrastructure managed services. However, we do reserve the right to split this into multiple
contracts if we feel there is an overall benefit to the organization, or where it is significantly
cost effective to do so.
Please provide as much detail as possible in the Technical Response –without giving any
indication of the actual costs (which should be in the Commercial Response).
Infrastructure Support and Maintenance component
Please provide specific details of the operational aspects of your Infrastructure Support and
Maintenance capabilities. This could include:
• Your ability to integrate into our existing ICT Customer Services and Service Hubs, i.e.
co-locating staff with UNHCR;
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 61 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
•
•
•
•
Your capacity to provide support and maintenance capacity outside the hours that will
be covered by UNHCR staff – in particular to pick up and respond to critical incidents
outside normal working hours;
Business process that you already have in place where you feel there would be an
advantage to UNHCR to adopt;
Technologies covered and how these align with the application landscape of UNHCR.
Your ability to meet and exceed the SLAs suggested in this RFP.
You should also include any other details that you think will be important to UNHCR in our
evaluation of your offer.
IMAC component
Please provide specific details of how you will deliver this service both for HQ and FO
locations. In particular how you will endeavour to provide UNHCR with as predictable a
service and cost model as possible. We are specifically interested in seeing the charging
mechanism.
• Fixed cost per IMAC service (each service being provided at a pre-agreed cost)
• Ticked based (fixed price per ticket, variable number of tickets per service)
• Hourly rate (with or without an agreed time allocation per service).
We are also interested in an option that would allow us to purchase in advance a quantity of
IMAC units and then use them as and when required. Over time, it may be possible to fix
an agreed lower threshold of IMAC units per month – which would also allow you as the
Managed Service Provider to predict a minimum staffing level for this service.
Infrastructure Service Development component
Please provide specific details of the operational aspects of your Infrastructure Service
Development capabilities. This could include:
• Your ability to integrate into our existing Service Development teams (Geneva,
Budapest, Amman) and how you would place staff to maximize through-put while
minimizing the need to co-locate staff.
• Your capacity to provide development capacity outside the hours that will be covered by
UNHCR staff – in particular to pick up and respond to critical Work Orders or RFSs
outside normal working hours;
• Business process that you already have in place where you feel there would be an
advantage to UNHCR to adopt;
• Technologies covered and how these align with the infrastructure landscape of UNHCR.
14.3
Case Studies and Reference Sites
Provide case studies of existing Managed Services engagements that your company is
currently undertaking. Of particular interest to UNHCR will be engagements that are
comparable to what we are hoping to establish. Special consideration should be given to:
• Large international engagements with services delivery in diverse locations;
• Engagements with Government or other Public Sector organizations;
• Engagements with United Nations organizations.
14.3.1
Reference Sites
Provide a minimum of three (3) reference sites that UNHCR can contact to assist in the
evaluation of your performance on existing managed services engagements.
Please ensure that you provide full contact details of each of the reference sites. UNHCR
reserves the right to contact these references directly and without your intervention.
14.4
Managed Services Life Cycle
Your submission must include comprehensive details of how you will manage the overall
managed services life cycle. This will include any finalisation of contact details and
definitions of the actual services covered in the contract and all aspects of the day-to-day
operation.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 62 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
14.4.1
Service Definition Phase
Provide information on how you intend to finalise the scope of the managed services
contract. Please make reference to the contract section of this RFP and ensure that your
response to this section covers the practical aspects of the service definition.
14.4.2
Service Transition Phase
Provide details and information about how you would propose to transition the existing inhouse services to your responsibility under the managed services contract. This should
clearly indicate the expected timelines and dependencies in meeting those timelines.
A high-level project plan should be included showing the optimum transition period.
14.4.3
Knowledge Management
Provide details of how you will manage knowledge transfer from existing UNHCR staff to
your staff. You should indicate the time you anticipate for this to be completed and the level
of commitment that will be required from UNHCR staff during this exercise.
You should also indicate how you will address any knowledge gaps that are identified, either
because the UNHCR staff member is no longer available or the level of information provided
is not sufficient to take full responsibility for the infrastructure.
14.4.4
Service Delivery and Management Phase
Provide details on how you will manage the day-to-day (steady-state) operation and delivery
of the Managed Service once the transition phase is complete. You should indicate the
level of staffing you would expect to have and indicate what proportion of the staff would be
on-premise (and in which locations(s)) and off-site (your premises).
14.4.5
Service Performance, Measurement, and Monitoring
Provide details on how you will measure the performance of the managed service and what
monitoring mechanisms must be in place to ensure that this is done.
14.4.6
Service Improvement
Provide details on how you would implement service improvements over time and how
these improvements could benefit UNHCR. Any service improvements that would impact
the terms of deliverables of the managed service contract could require modifications to the
contract itself and how this would be done should be addressed in your contractual
response.
14.4.7
Service Termination
Explain how you would transfer the Infrastructure Services to another managed services
partner in the event that UNHCR decided not to renew the contract with your company at
the end of the agreed term - or for any other reason prior to the normal end of contract term.
What would be the minimum (practical rather than legal) time required to successfully
transition all managed services you have envisaged to an alternative provider?
Please provide a high-level transition-out plan that would indicate the timelines and
significant milestones to wind down this service and transition to another company.
14.5
Managed Services Governance
UNHCR believes that overall governance of this managed service will be extremely
important and will have a significant influence on the success of the service.
Please provide details of the governance structure you would put in place to manage this
contract and the corresponding structure that you would expect UNHCR to have in place.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 63 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
14.5.1
Executive and Management Commitment
The DIST organizational structure (Section 2) has been endorsed at the highest level and
has the full support of the executive management. As part of the overall approval for Project
Prometheus, UNHCR and DIST have made a commitment to move to managed services for
Infrastructure Support, Maintenance, and Development.
To ensure that UNHCR selects a Managed Service Partner who is equally committed to this
goal, we would appreciate receiving an equivalent commitment from your executive
management.
14.5.2
Escalation process
Provide details of the escalation processes that should be followed to deal with:
• Operational aspects of the services provided under this contract;
• Strategic and tactical aspects that will need to be addressed by senior management on
both sides.
14.5.3
Single Point of Contact
Provide details of who you would propose to be the single point of contact for all operational
aspects of this contract before any escalation occurs. Would you propose one person to be
the SPOC for all aspects of the Infrastructure services or split this by area?
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 64 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
15
RFP Contractual Response
UNHCR believes that final contract negotiation will be an important activity before initiating
the transition to Infrastructure Managed Services. In order to avoid a protracted legal
negotiation phase (following the technical and commercial evaluations), UNHCR would like
to identify any legal impediments to awarding a contract as early as possible in the
evaluation process.
This section outlines how we would like you to structure your contractual response to this
RFP.
15.1
UNHCR General Terms and Conditions for the Provision of Services
Any contract that results from this RFP will be underpinned by the January 2010 edition of
the “UNHCR General Terms and Conditions for the Provision of Services”, which are in turn,
based on Ts & Cs common to all UN agencies. Acceptance of, and compliance with, these
Ts & Cs is considered a prerequisite for establishing any contract with UNHCR.
As a general rule, UNHCR does not accept any changes or amendments to the UNHCR
General Terms and Conditions for the Provision of Services, but also recognizes that the
nature of an ICT Managed Services Agreement may require the inclusion of certain clauses
not found in the standard document.
If there are any articles in the UNHCR General Terms and Conditions for the Provision of
Services that you feel you will be unable to accept in their current form, please identify them
stating your reasons and providing an alternative wording that you feel would be acceptable
to UNHCR. UNHCR Legal Affairs Section (LAS) will review these comments and determine
if they are, indeed, acceptable to the organization. In doing so we would hope to avoid a
protracted negotiation late in the contract award process only to find that we are unable to
come to agreement and that we must look elsewhere for a managed service provider.
Review of the legal component of the RFP response will be carried out in parallel to the
technical evaluation.
15.2
Standard UNHCR Contract for Services
We have provided a copy of the standard UNHCR contract for the provision of Services on a
long-term basis. UNHCR will expect this contract document to be used as the basis for any
contract resulting from this RFP.
Please ensure that your legal department has reviewed this contract (and the UNHCR
Terms and Conditions) and has provided any comments or feedback that you feel is
pertinent to your offer.
15.3
Additional contractual documentation
Please provide a full set of any additional legal documentation that you would expect to form
part of any contract for Managed Services with UNHCR. LAS will review these documents
in parallel to the technical evaluation so that any issues can be identified early in the
process.
15.4
Legal representative
Your offer must clearly identify the person (or function) within your company that is
authorized to complete legal negotiations on your behalf.
Should you be selected to provide Infrastructure Managed Services, we would expect this
person to work closely with LAS and to quickly resolve any contractual issues.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 65 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
15.5
Contract term
UNHCR plans on awarding a three year contract to the preferred Managed Services
Provider as a result of the evaluation of the responses to this RFP. Based on satisfactory
performance, the contract maybe renewed annually for a further two years for a total of five
years (3+1+1). After five years the Managed Services Provider should expect a new market
survey to be conducted and a new RFP issued for the further renewal of ICT Infrastructure
Managed Services.
15.6
Commercial terms
The following section outlines some other issues you may choose to address in your
Contractual Response.
15.6.1
Contract Terms
You should outline your key contractual terms, in particular the “make or break” issues that
you envisage may become a stumbling block in taking on an Infrastructure Managed
Services contract with UNHCR. Topics to consider are:
• Warranties and Liabilities expected by UNHCR.
• Immunities and Privileges of UNHCR as a UN organization.
• Jurisdiction under International law rather than any national law.
15.7
Payment mechanism
UNHCR will be looking for commercial arrangements that result in an understandable and
predictable cost to the organization. In particular, the pricing schedule must be:
• Simple to explain;
• Simple to operate – allowing for automated measurement and validation processes;
• Amenable to changes in scope and requirements;
• Able to cover “options” or variations in scope that could be proposed;
• Linked directly to cost drivers;
• Designed to be sensitive to both UNHCR and the Managed Services Provider;
• Ensure long-term value for money.
We would expect you’re pricing and charging arrangements to be supported by an agreed,
robust financial model supported by an open book accounting policy.
Your pricing model must clearly support the three specific on-going activities:
• Regular on-going support and maintenance – to be charged at an agreed monthly rate.
• IMAC – to be charged based on a predefined rate card or ticketing mechamism.
• Ad-hoc, work order or project-based tasks – to be charged based on the scope and
deliverables of each work package.
15.7.1
On-going Value for Money
As this will be a long-term arrangement and UNHCR does not wish to renegotiate the price
component each year, you should outline how you will ensure on-going value for money to
UNHCR over the duration of the contract (assumed to be five years; 3+1+1). In particular,
you should outline how you would factor into the pricing model such things as:
• Exchange rate fluctuations (if your price proposal is not in US Dollars);
• Variations in consumer price indices and inflation/deflation;
• Efficiency gains as the Managed Services Provider becomes more familiar with the
applications.
15.8
Performance regime
Please outline how you will link payment for services provided against satisfactory
performance of those services. In particular, UNHCR is interested in mechanisms which
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 66 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
award “service credits” to UNHCR in the event of poor performance and which could,
ultimately, be linked to contract termination for poor performance.
For regular on-going support and maintenance, UNHCR may be paying based on a fixed
monthly fee. In such a case, we would expect poor performance to be linked with a
reduction in monthly fee or a credit towards the following month.
While UNHCR is not looking to unduly penalise the Managed Service Provider, we are
looking at ways to promote good performance while having some level of potential risk to
the supplier in the event of on-going poor performance. We will be looking to the Managed
Service Provider to propose a manageable and meaningful set of Key Performance
Indicators (KPIs) that can be used to measure performance on an on-going basis. Ideally
these KPIs will also be reflected on the DIST Balanced Scorecard.
15.9
Change management
It is inevitable that some level of change will occur in the Contract for Managed Services
over the duration of the contract. Please outline the Change Control procedures you would
expect to follow to implement a change in the Service Contract itself.
UNHCR would be keen to agree up-front on as many of the likely changes as possible. This
may include:
• How increases or decreases in overall scope would be reflected in the corresponding
charges;
• Clarification of clauses or rate tables that were not clearly understood by one party at
the time of contract signature;
• Streamlining of working procedures that are embedded in the contract.
15.10
Governance and Reporting
Your proposal should clearly outline the governance procedure that will be used to manage
the relationship between UNHCR and the Managed Service Provider at various levels:
• Operational: how day-to-day relationships will be managed between DIST staff and the
staff of the Managed Service Provider;
• Tactical: how shared responsibility on project and work order delivery will be managed;
• Strategic: Formal governance at the level of the DIST CIO and their counterpart within
the Managed Service Provider’s organization.
Reporting requirements are outlined elsewhere in this RFP (see Section 11), but should
also be formally defined in the Contract for Managed Services. At a minimum we would
expect the contract to specify:
• The frequency of submission of regular reports on performance against contracted
service levels, targets, KPIs etc.;
• The frequency of meetings to review of the supplier’s performance and who should
attend such meetings;
The contract should also identify the key representatives of both parties (by function) and to
provide full contact details as an annex that can be updated as needed.
15.11
Transition and Migration
In addition to the practical aspects of transitioning our internal infrastructure services to an
external service provider, we also believe there will be some contractual aspects of the
initial transition itself that need to be addressed as part of the contract approval process and
not left until transition is underway.
Of particular concern to UNHCR is how the Managed Service Provider would react and
support UNHCR (DIST and the business users) in the event that the transition to managed
services takes longer than originally planned and the existing UNHCR staff resources are no
longer available for knowledge transfer.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 67 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
15.12
Exit Provisions
Your submission must clearly specify the exit provisions in the event that the contact is not
extended beyond the initial period, or in which it is terminated prior to the originally agreed
end date.
Your submission should also address how the cessation of a particular infrastructure or
service originally within the agreed scope is handled (e.g. equipment becoming obsolete;
UNHCR deciding to manage the application independently of the main contract).
On termination of the managed service contract it must be clear that:
• All data and code provided to the partner will be returned to UNHCR;
• Any assets (software, hardware) provided to the partner will be returned to UNHCR;
• The outgoing partner will assist UNHCR to transition to a new partner providing
knowledge transfer and other services to ensure a no impact transition.
UNHCR would expect to draw up an “exit plan” early in the engagement that clearly
identifies the obligations of each party and the time required to execute that plan.
15.13
Staff Management
The Managed Service Provider is responsible for the staff resources it allocates to UNHCR.
UNHCR may, at its discretion, assist the Managed Service Provider in obtaining travel or
other work related documents – however, the full responsibility for all staff remains with the
Managed Service Provider.
The Managed Service Provider must ensure that all staff providing critical functions have a
pre-assigned backup who can intervene should the primary resource be absent for any
reason.
All changes of staff resources (on-site or off-shore) from the Managed Service Provider
must be notified to UNHCR in advance and with sufficient time to transition to the
replacement without any impact on on-going service delivery. Any costs in this knowledge
transfer will be borne by the Managed Service Provider.
Frequent changes to staff resources are to be avoided and may be considered as a factor in
poor performance.
The Service Delivery Manager should maintain a register of all staff assigned to UNHCR.
This will include names, userids, locations, access privileges, etc. The Managed Service
Provider must ensure that system admin passwords are changed following a change in staff
resources.
15.14
Sub-contracting
The “UNHCR General Terms and Conditions for the Provision of Services” include provision
on the use of sub-contractors by the primary contract holder. We would expect those
conditions to be adhered to in the execution of this contract.
Specifically, the Managed Service Provider must ensure that any and all sub-contractors:
• Agree to be subject to the same terms and conditions as any employee of the Managed
Service Provider.
• Will sign and adhere to the UNHCR Code of Conduct and Non-Disclosure Agreement.
Sub-contractors can only be used after agreement by UNHCR.
You should clearly specify your desire to outsource some activities of the Managed Service
Contract to a sub-contractor, providing justification and benefits to UNHCR for this.
15.15
Staff Transfer
As mentioned earlier in this RFP, UNHCR is not looking to transfer any of its existing staff to
the Managed Services Provider as part of the initial transition.
However, UNHCR recognises that it may be of interest of UNHCR staff to seek employment
outside the organization at some future time and potentially with the Managed Service
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 68 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
Provider – or for employees of the Managed Service Provider to consider employment
within UNHCR. The contract should clearly indicate under what terms this can occur.
15.16
Asset Ownership
UNHCR's current policy is that it should retain ownership of and purchase its assets used in
its delivery of ICT services, including equipment and software licenses. UNHCR is willing to
allow suppliers to access such assets to the extent necessary to perform their obligations
under this Managed Service contract.
Section 11.10 describes how we would expect to manage the provision of hardware and
software for on-site and off-site use by the Managed Service Provider.
UNHCR intends to retain the ownership and control of all assets (hardware and software)
and to manage the on-going relationship with the respective vendors. At an operational
level, the Managed Service Provider would be expected to deal with the vendors for product
support, incident and problem management.
15.17
Flexibility
At the time managed services are introduced DIST will also be completing its internal
transition to the new organization structure. In parallel, we will be undertaking a major
infrastructure upgrade programme that will have an organizational wide impact.
We will be looking to a partner with flexibility to assist UNHCR in our internal transformation
and who can also support the wider organization in a flexible manner.
15.18
Data Security and Data Protection
UNHCR stores and processes large amounts of sensitive data about vulnerable individuals
and takes very seriously its obligation to protect such data from unauthorised and improper
access, use, or dissemination.
In addition, as a UN agency and considering its status under international law, UNHCR will
not enter into any contract that could:
• Jeopardize its position or infringe its privileges and immunities; or
• Compromise its rights to deny access to its data to any unauthorized individuals.
15.18.1
Information Security Policy
Please provide (in electronic form on the accompanying CD-ROM) a copy of those aspects
of your internal Information Security Policy as it applies to Infrastructure Managed Services.
15.19
Code of Conduct
Signature of and adherence to the UNHCR Code of Conduct is an obligation of all UNHCR
employees, contractors, volunteers, and other affiliated workforce.
This same obligation will be required of the employees of the Managed Service Provider.
15.20
Non-Disclosure Agreements
By the nature of the work expected under this Managed Service Contract, your staff is likely,
as part of their normal day-today work, to be exposed to sensitive data. All contractor staff
working on this contract (whether on-site or off-shore) will be expected to sign a nondisclosure agreement for data protection purposes.
The sample “Consultant Confidentiality Agreement” is included as an annex to the RFP.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 69 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
16
RFP Price Quotation
This section outlines how we would like you to structure your commercial response to this
RFP.
As explained in the covering letter for this RFP, it is essential that your commercial response
be provided separately. The technical response must not contain any commercial
information and to do so will be grounds for disqualifying your submission.
16.1
Currency of offer and contract
UNHCR intends to award a multi-year managed services contract as a result of this RFP. In
order to allow direct comparison of all submissions, your commercial offer will be converted
to USD (United States Dollars) based on the prevailing United Nations rate of exchange at
the time of the evaluation.
Any contract awarded as a result of this RFP will be in currency used by the bidder when
responding to this RFP. A commercial offer in multiple currencies is not acceptable.
As UNHCR is planning to engage the Managed Services Provider in an extended contract
(see below), UNHCR is particularly interested in proposals from the bidders to limit the
mutual exposure to exchange rate fluctuations against the US Dollar over the duration of the
contract.
16.2
Modular price structure
To allow for a phased and possibly modular introduction and implementation of ICT
Infrastructure Managed Services to all locations, you should provide a price breakdown by
component and location. A matrix has been provided as a guide and your compliance with
this matrix will greatly facilitate the comparison of all offers received.
16.3
Transition Phase
UNHCR recognises that a transition phase is required at the beginning of the contract and
that additional costs may be incurred during this ramp-up period. However, for ease of
comparison, any transition costs must be included as part of the overall costs of the first
year of operation.
16.4
Infrastructure Support and Maintenance component
Based on the information contained in this RFP, you should submit a comprehensive price
quotation for the provision of an Infrastructure Support and Maintenance Managed Service.
Your price quotation should be as detailed as possible in order to allow UNHCR to make a
fair evaluation and comparison with other submissions.
If your offer contains price variations these should be clearly indicated – in particular the
minimum level required to meet our expectations. Optional items must be priced separately
so that they can be isolated for price comparison purposes. In particular, we believe there is
scope for UNHCR to extend its Level 2 infrastructure support though the use of a Managed
Services Partner and potentially to transition the Global Service Desk to a fully Managed
Service.
UNHCR is expecting to see a fixed and variable component for this service whereby the
basic and on-going service level can be determined in advance while surges in support or
maintenance activities may require the Managed Service Provider to match this demand
with additional capacity.
Consideration should also be given on how staff from the Managed Service Provider could
cover national holidays in the various locations so that the minimum combined level of
coverage by UNHCR staff and that from the Managed Service Provider would remain
constant.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 70 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
16.5
IMAC component
Based on the information contained in this RFP, you should submit a comprehensive price
quotation for the provision of Infrastructure IMAC Services. We would expect your offer to
include different categories of IMAC services, each with a fixed unit price per call off.
If you prefer you may also include this component as a fixed price offer irrespective of
volume, in which case it will become part of the overall Infrastructure Managed Service
(above).
Your price quotation should be as detailed as possible in order to allow UNHCR to make a
fair evaluation and comparison with other submissions.
16.6
Infrastructure Development component
Based on the information contained in this RFP, you should submit a comprehensive price
quotation for the provision of an Infrastructure Service Development Managed Service.
Your price quotation should be as detailed as possible in order to allow UNHCR to make a
fair evaluation and comparison with other submissions.
Service Development is demand driven but often constrained by budget and occasionally by
the availability of technical or functional resources. We believe we can resolve the issue of
resources by moving to a managed service delivery model. In order to be able to plan
budget requirements on a reasonable basis, we would be looking to a Managed Service
Provider that operates off a consistent rate card and delivery schedule.
16.7
Price Evaluation Matrix
As part of this RFP you will have received an Excel spreadsheet that should be used to
submit the details of your price quotation.
This spreadsheet contains four tabs:
• Summary: please enter your company name and the currency of your offer. All other
prices should be in this currency.
• ISM: This tab contains a breakdown by location and managed service component for
the base services to be provided as part of the ICT Infrastructure Managed Service.
You are requested to quote costs for each of the first three years of the initial contract
period and for any subsequent years. The breakdown by location and type of service is
to allow UNHCR to estimate the total cost (all locations, all services) or to modularize
the implementation (by service or location) for an implementation over a longer period of
time.
• IMAC: call off costs by type of IMAC service. Costs should be quoted per call-off.
• Skills: For any supplementary staff required to augment the core team or to work on
specific ICT Infrastructure projects. You are requested to quote fully inclusive costs
based on the specific skill, location, and duration of contract.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 71 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
17
Evaluation Process
The following section is intended to give some additional information on the evaluation
process that UNHCR will use when reviewing the submissions received in response to this
RFP.
For the provision of services where a decision cannot be made simply on price, UNHCR
assigns a relative weighting to the Technical and Price components. This breakdown is
given in the covering letter to this RFP. The mechanism used to attribute points to the
commercial submissions and how the resulting technical and commercial scores are
combined to get an overall result is also described.
17.1
Submission of Proposals
The procedures to be followed in preparing and submitting your proposal are defined in the
covering letter for this RFP. You should carefully follow the instructions and guidelines in
the covering letter in preparing your response and adhere to the established deadlines.
The RFP process is governed by UNHCR’s Financial and Procurement rules and these will
be strictly adhered to throughout the whole RFP process. The RFP process is managed by
the Supply Management Service and any contact with UNHCR in relation to this RFP must
be through the designated focal point within SMS.
17.2
Technical Evaluation
This evaluation criterion is internal to UNHCR and will not be shared with any of the
vendors, either prior to or after the final submission date. The evaluation criteria will be
based on the information requested in this RFP.
UNHCR/DIST will form an evaluation committee which will examine all offers that where
received in good order and prior to the closing deadline for submissions. The evaluation
committee will normally be composed of UNHCR staff members (DIST and others) but may
also include independent external consultants.
Any submission that does not pass this initial inspection will not evaluated further.
All submissions retained at this point will be technically evaluated by each member of the
evaluation committee independently and points allocated based on their review of the
information contained in the technical response.
17.2.1
Minimum technical threshold
UNHCR may fix a minimum threshold which any vendor must reach in order to be
considered further. This is to ensure that additional time is not taken further evaluating
submissions that clearly do not meet the minimum technical requirements or where the
company is clearly not in a position to meet UNHCR’s expectations. The financial offer of a
submission that does not meet the minimum technical requirements will not be evaluated.
17.2.2
Short listing of suppliers
Following consultation with SMS, UNHCR may short list suppliers that have scored the
highest technical scores and decide to continue the evaluation process with a reduced
number of potential suppliers.
17.2.3
Face to Face Presentations
UNHCR may choose to invite short listed suppliers to make face-to-face presentations of
their submissions and to give the evaluation team an opportunity to get clarifications on any
specific question as a result of the initial technical evaluation.
Face-to-face meetings, if required, will be organized by SMS at a time that is mutually
acceptable to both the supplier and UNHCR, but within the constraint that we have to
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 72 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
complete the evaluation process as quickly as possible to ensure that the overall transition
time-table can be respected.
17.2.4
Supplier Due Diligence
Because of the importance of this contract to UNHCR and the long-term arrangement that
we would hope to establish, we will undertake an appropriate level of due diligence on the
short listed suppliers. Additional due diligence may be carried out once a preferred supplier
has been identified but before any formal award of contract.
Site visits
UNHCR may choose to visit your off-shore Managed Services facilities. This would be done
with your full cooperation and at a time that is mutually agreeable. UNHCR will not expect
the suppliers to cover any of the costs of such site visits.
Reference checks
UNHCR will conduct reference checks based on the information you provided in your
technical response. We would expect to be able to have direct contact with your reference
clients and would ensure that such an intervention would not adversely impact their
operations.
Reference checks could be by phone, video-conference, or on-site visits. UNHCR would
expect to cover its own costs in conducting these reference checks and would ensure that
any financial burden on the managed services provider or client would be minimised.
17.2.5
Final technical consolidation
When complete, all technical evaluations will be consolidated and average scores computed
for each vendor. Once finalized, the resulting technical scores will be provided to SMS.
17.3
Commercial Terms Evaluation
Legal Affairs Section (LAS) will review the legal terms response for the retained
submissions. The intention of this step is to ensure that UNHCR and the Managed Service
Provider will be able to agree on contractual terms quickly and not be blocked or delayed by
long and protracted legal negotiations.
LAS may contact your legal representative if clarifications are needed to your submission or
may advise on the elimination of a submission if they feel that the response from the
supplier would make it difficult or impossible to come to mutually agreeable contract terms.
No points will be allocated to the review of the commercial terms.
17.4
Price Evaluation
SMS will complete the evaluation of the Price Proposals and consolidate all results.
In general, UNHCR will select the offer that represents the “best value” to the organization
and not necessarily the lowest price offer.
17.5
Best and Final Offers
UNHCR may ask short listed suppliers to submit a “best and final offer” of their price
component that is realigned to a better understanding of UNHCR’s technical expectations.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 73 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
A.
Glossary
UNHCR Specific Terminology
BO
Business Owner
LAS
Legal Affairs Section
BOC
Business Owner’s Committee
LRS
Leave Recording System
BOM
Business Owner’s Meeting
MSRP
Managing Systems Resources and
People – PeopleSoft based ERP
DIST
Division of Information Systems and
Telecommunications
GSD
Global Service Desk
IDP
Internally Displaced Person
IP
PT8
Travel Authorization System
RICTO
Regional Information Communications
Technology Officer
RMS
Request Management System
Implementing Partner
ICT Terminology
BA
Business Analyst
BCP
Business Continuity Plan
BU
Business Unit
CAB
Change Advisory Board
CIO
Chief Information Officer
COBIT
Control Objectives for Information and
related Technology
ITIL
IT Infrastructure Library
KPI
Key Performance Indicator
MSP
Managed Service Provider
RFC
Request for Change
RFI
Request for Information
RFS
Request for Service
SaaS
Software as a Service
COTS
Commercial off the Shelf (software)
SFIA
Skills for the Information Age
CR
Change Request
SLA
Service Level Agreement
CSF
Critical Success Factor
SOW
Statement of Work
DR
Disaster Recovery
SPOC
Single Point of Contact
EDMS
Electronic Document Management
System
SR
ICT
Information and Communications
Technology
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
Service Request
UAT
User Acceptance Testing
WCMS
Web Content Management System
RFP/2012/479
Page 74 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
B.
Comprehensive Infrastructure Service Catalogue
This appendix and associated annexes (external to this document) give a comprehensive
list of all infrastructure and related services that will be transitioned to the Managed Service
Provider at the start of the contract.
As previously noted, UNHCR is currently undergoing a major upgrade to its LAN and
Desktop Infrastructure and related applications and services. Since we cannot determine at
this stage the exact point we will be in that transition when the contract(s) resulting from this
RFP will be finalised, you should be prepared to inherit some “in-flight” projects.
As new Infrastructure and related services are introduced over time, they will be added to
this catalogue.
Communications
•
•
Voice / Telephony
•
legacy PABX systems (HQ)
•
legacy PABX systems (Field)
•
Voice over IP (VOIP – Internet telephony)
Messaging
•
Business collaboration services
•
Mobile Messaging
•
Instant Messaging
•
Unified Messaging
•
Corporate Messaging
•
Desktop e-mail
•
Mailbox administration
•
Webmail
•
Mail content monitoring & reporting
•
Mailbox capacity management
•
Local Distribution Lists
•
Enterprise Distribution Lists
•
E-mail security & AntiSpam
ICT Infrastructure
•
•
•
•
•
•
•
•
•
•
Printing, Scan & Fax
Peripheral
Data
Network Security
Remote Communications
Emergency Infrastructure
Directories
Operations & Monitoring
•
Network monitoring
•
Manage network integration
•
Service Monitoring & Reporting
•
Maintenance of the ICT Asset
•
Disaster recovery
Storage & Backup
•
Management of Duty Officer files
•
Archive and retrieval
•
Storage Capacity architecture
•
Storage & Capacity planning
WAN Network
•
Terrestrial Ethernet network
•
Connectivity to 3rd party networks
•
ICC network access & security
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 75 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
•
•
•
•
•
UNOG network access & security
Tailored turn key solutions
LAN Network
•
Local Area Networks (LAN) –Field Office location
•
WI/FI
•
Cabling
•
Server and network architecture
•
Connectivity architecture
Data Center on-site management
•
HQ Data Centre
•
Server and Network architecture
•
VMWare environment architecture
Field Infrastructure (if and when a decision is made to outsource specific locations to the
managed service provider)
•
Energy
•
Green Power (Solar/Wind)
•
Clean and stable power
•
Lightning and Surge Protection
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 76 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
C.
Service Management Processes
The following table shows the current status of DIST’s Service Management processes.
The Managed Service Provider must integrate their teams into these processes as
seamlessly as possible. Any changes to these procedures will themselves be subject to
Change Management.
Service Management Process
Service Strategy
Demand Management
Service Portfolio Management
Service Acceptance
Financial Management
Service Design
Service Level Management
Supplier Management
Capacity Management
Service Catalogue Management
Availability Management
ICT Security Management
ICT Service Continuity Management
Service Transition
Change Management
Release & Deployment Management
Configuration Management
Service Operations
Incident Management
Major Incident Management
Service Request & Access Management
Problem Management
Continuous Service Improvement
Continuous Service Improvement
Service Measurement & Reporting
Status
Pending
Pending
Operational
Pending
Operational
Operational
Pending
Pending
Pending
Pending
Pending
Operational
Operational
Pending
Operational
Pending
Operational
Operational
Operational
Pending
Full documentation on each of the operational processes is provided separately.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 77 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
D.
Document Templates
The following standard document templates are in use at UNHCR and should continue to be
used by the Managed Services Partner. UNHCR is open to making revisions to these
documents or replacing them with others where there is a clear advantage in doing so.
These templates and any modifications or replacement will remain the property of UNHCR
and must continue to be branded with the UNHCR logo.
Service Management Forms
•
•
•
Change Request
Work Order
Forward Schedule of Changes
Project Office Templates
The following templates have been prepared by the P3O and approved by the ICT
Governance Board for use on all ICT Projects.
For all projects:
•
•
•
Project Reviews (1,2, 3, 4, 5);
Project Dashboard (RAG report);
Project Meeting Minutes.
For Large, Medium, and Small projects:
The following templates have been tailored to the “size” of the Project
• Project Initiation Document (PID)
• Business Case (BC)
• Project Closure Report
All templates have been provided as external annexes to this document.
Standard Statements of Work
For some time, UNHCR has been issuing statements of work (SOWs) to external suppliers
to deliver applications services. The SOWs fall into two categories:
• Time and Materials: In this case, the external supplier will be asked to provide CVs to
match a particular skills profile and should expect to invoice on the basis of days worked
using a previously agreed all-inclusive daily rate. UNHCR takes responsibility for the
tasks assigned to the consultants and for all deliverables.
• Fixed Time, Fixed Price: In this case, the external supplier will be asked to provide a
fixed price and delivery date for a specific piece of work based on the requirements and
speciation provided. Once the supplier and UNHCR agree on the terms, it will be the
supplier’s responsibility to deliver to the agreed specifications and delivery schedule.
Templates for both SOWS are provided as an annex to this RFP. Alternative templates may
be suggested by the Managed Service Provider.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 78 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
E.
Metrics
The following statistics and metrics are intended to give bidders an indication of the current
number of Level 2 and Level 3 incidents, problems, and changes required to support the
infrastructure in scope for this RFP.
Incidents
One of the most significant measurements of the level of support required for an
infrastructure service is the number of incidents raised through the Global Service Desk and
logged in the Service Management tool (LANDesk). In 2011 (the last full year of data
available) a total of 51,777 incidents were logged. Of these 34,991 related to Business
Applications and are not relevant to this RFP. The remaining 16,786 can be divided into:
• Desktop Support (7,497)
• Messaging Systems (2,316)
• Network Support (3,931)
• Telecommunications (3,080)
However, these figures do not accurately reflect the full scope of incident and problem
management under this RFP as it is recognized that only a small fraction (< 50% at HQ and
<20% in the Field) of all “incidents” are registered in LANDesk.
Within the current LANDesk configuration an “incident” is raised to record a break in service
but also for a “service request” (e.g. creation of a new user, password reset) which results in
unusually high incident rates. UNHCR is currently implementing the “Service Request”
process in LANDesk and this will be operational before any contract from this RFP is
awarded.
Analysing the LANDesk data is subject to certain constraints, in particular the quality of the
underlying data. Information that is incorrectly recorded (e.g. attributed to the wrong
Configuration Item and not corrected) will result in unrelated incidents appearing in the
statistics. The tables that follow exhibit this trait as no effort has been made to go back and
retroactively correct all data elements.
Details of all 2011 incidents (raw data and pivot tables) are provided as an annex to this
document.
Change Requests
Until recently, UNHCR had not implemented Problem and Change Management in
LANDesk.
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 79 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
F.
External Annexes to this document
In order to provide potential bidders as much information as possible but avoiding making
this RFP document too voluminous, additional supporting documentation has been provided
as external annexes. This information will be provided via a secure (password protected)
download to all recipients of this RFP who express their intent to respond. The following
information is included:
•
DIST Infrastructure Catalogue
•
DIST Organizational Structure
•
DIST Functional Organizational Structure
•
DIST Organizational Chart by Location
•
DIST Organizational Chart Showing Units
•
DIST ICT Strategy
•
Connect and Collaborate
•
Programme Charter
•
Programme Roadmap
•
Project Office Documentation
•
Project Office Business Case
•
Project Office Project Initiation Document
•
Project Office End Of Project Report
•
Legal
•
General Conditions for the Provision of Goods and Services
•
Supplier Code of Conduct
•
Additional Model Clauses for Contracts
•
Consultant Confidentiality Agreement
•
DIST Service Catalogue
•
Service Levels
•
Support Hours
•
Impact, Urgency, Criticality, Priority SLA’s
•
Operational Service Management Processes
•
Change
•
Change Advisory Board
•
Continuous Service Improvement
•
Incident
•
Problem
•
Release & Deploy
•
Service Acceptance
•
Service Desk
•
Service Level Management
•
Service Request and Access Management
•
Supplier
•
Work Request
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 80 of 81
Request for Proposal
Managed Services for ICT Infrastructure
DIST
•
•
Metrics
•
Raw data and pivot table of all 2011 Service Desk Incidents.
Statement Of Work Templates
Statement of Work – Fixed Price
Statement of Work – Time and Materials
•
•
•
UNHCR office locations
•
UNHCR Duty Stations (Locations), official list
•
Categorizations (Hub, A, B, Deep field)
•
UNHCR Network and Infrastructure
•
High-level network infrastructure diagrams
•
PC replacement breakdown, by location
•
Network device breakdown, by location
•
Data Centre Infrastructure Detailed Design (future)
•
Field Office Pilot Detailed Design (future)
•
Logical and Physical Design (future)
•
FO Pilot Sites Connectivity (future)
•
SAN Detailed Connectivity (future)
RFP-2012-479 Infrastructure Managed Services-v1.2
Version : v1.2
RFP/2012/479
Page 81 of 81
RFP/2012/479
ICT Infrastructure Managed Services
Summary
Company Name:
{enter company name here}
Currency of bid:
{enter currency here}
Managed Services (years 1-3)
0
Instructions:
1. Please do not modify the structure or format of this spreadsheet
2. Please only enter values in the cells with light-yellow shading
3. Where appropriate, select values from the pull-down lists
RFP-2012-479_Price_Evaluation_Matrix-v1.0.xls - Summary
Printed 26/03/2012 - 3:00 PM
Page 1 of 1
RFP/2012/479
ICT Infrastructure Managed Services
No of
offices
Infrastructure Support and Maintenance (fixed price)
Headquarters (Geneva)
Data Centre Services
Network Services
IMAC Services (fixed charge)
Desktop Services
Corporate Messaging Services
Year 2
Year 3
Subtotal
Additional
Years
1
ICT Services Centre (Amman)
Data Centre Services
Network Services
IMAC Services (fixed charge)
Desktop Services
Corporate Messaging Services
1
Category A Locations (per location)
Data Centre Services
Network Services
IMAC Services (fixed charge)
Desktop Services
Corporate Messaging Services
102
Category B Locations (per location)
Data Centre Services
Network Services
IMAC Services (fixed charge)
Desktop Services
Corporate Messaging Services
72
Deep Field Locations (per location)
Data Centre Services
Network Services
IMAC Services (fixed charge)
Desktop Services
Corporate Messaging Services
274
Notes:
1.
2.
Year 1
-
Subtotal (HQ)
0
0
0
0
0
0
-
-
Subtotal (ASC)
0
0
0
0
0
0
-
-
Subtotal (CatA)
0
0
0
0
0
0
-
-
Subtotal (CatB)
0
0
0
0
0
0
-
-
Subtotal (DF)
0
0
0
0
0
0
-
Grand Total
0
only update cells shaded in yellow
cells shaded in green/tan are calculated automatically, do not adjust the formulas
RFP-2012-479_Price_Evaluation_Matrix-v1.0.xls - ISM Printed 26/03/2012 - 3:02 PM
Page 1 of 1
RFP/2012/479
ICT Infrastructure Managed Services
Infrastructure Skills Inventory
Daily all inclusive rate for staff by location
Location
Duration of contract
<30d
30-99d
>100d
Service Development
Senior Infrastructure/Network Specialist
Headquarters (Geneva)
Category A
Category B
Deep Field
Offsite (MSP premises)
Senior Microsoft Systems Specialist
Headquarters (Geneva)
Category A
Category B
Deep Field
Offsite (MSP premises)
Junior Microsoft Systems Specialist
Headquarters (Geneva)
Category A
Category B
Deep Field
Offsite (MSP premises)
Microsoft Exchange Specialist
Headquarters (Geneva)
Category A
Category B
Deep Field
Offsite (MSP premises)
Microsoft Active Directory Specialist
Headquarters (Geneva)
Category A
Category B
Deep Field
Offsite (MSP premises)
Infrastructure Security Specialist
Headquarters (Geneva)
Category A
Category B
Deep Field
Offsite (MSP premises)
RFP-2012-479_Price_Evaluation_Matrix-v1.0.xls - Skills
Printed 26/03/2012 - 3:03 PM
Page 1 of 2
RFP/2012/479
ICT Infrastructure Managed Services
Service Design
Technical Analyst
Headquarters (Geneva)
Category A
Category B
Deep Field
Offsite (MSP premises)
Infrastructure/Network Architect
Headquarters (Geneva)
Category A
Category B
Deep Field
Offsite (MSP premises)
12 Service Support and Operations
Telecommunications Professional
Headquarters (Geneva)
Category A
Category B
Deep Field
Offsite (MSP premises)
Mobile Device Specialist
Headquarters (Geneva)
Category A
Category B
Deep Field
Offsite (MSP premises)
Project Management
Project Manager
Headquarters (Geneva)
Category A
Category B
Deep Field
Offsite (MSP premises)
Programme Manager
Headquarters (Geneva)
Category A
Category B
Deep Field
Offsite (MSP premises)
Project Planner & Scheduler
Headquarters (Geneva)
Category A
Category B
Deep Field
Offsite (MSP premises)
Notes:
1. Only update cells shaded in yellow
2. daily rates must be "all inclusive" of travel to and from the location, and
living expenses at the location for the specified duration;
RFP-2012-479_Price_Evaluation_Matrix-v1.0.xls - Skills
Printed 26/03/2012 - 3:03 PM
Page 2 of 2
UNHCR VENDOR REGISTRATION FORM – (Rev. Feb 10)
Section 1: Company Details and General Information
1. Name of Company:
2. Street Address:
3. P.O. Box and Mailing Address:
Postal Code:
City:
Country:
4. Tel:
5. Fax:
6. Email:
7. WWW Address:
8. Contact Name and Title:
9. Email:
10. Parent Company (Full legal / officially registered company name):
11. Subsidiaries, Associates - name, city, country (attach a List if necessary):
12. International Offices/Representation (Countries where the Company has local Offices/Representation):
13. Type of Business (Mark one only):
Corporate/ Limited:
Partnership:
Other (specify):
14. Nature of Business:
Manufacturer:
Authorised Agent:
Trader:
Consulting Company:
Other (specify):
15. Year Established:
16. Number of Full-time Employees:
17. Licence no./State where registered:
18. VAT No./Tax I.D:
19. Technical Documents available in:
English
French
Spanish
Russian
Arabic
Chinese
Other (specify) _________________
Spanish
Russian
Arabic
Chinese
Other (specify) _________________
20. Working Languages:
English
French
Section 2: Banking Information
21. Bank Name:
22.
Branch Name:
23. Branch Address:
24.
Tel. number:
25.
Fax number:
26. Bank Account Number:
27.
Account Name:
28. Account currency:
29.
Swift/Bank Identifier Code (BIC):
30. International Bank Account Number (IBAN):
31. Routing Bank details (if applicable): full details to be provided as per above
If multiple bank accounts exist that may be relevant to UNHCR, please provide details for each account.
1
Section 3: Technical Capability and Information on Goods / Services Offered
32.. Quality Assurance Certification (e.g. ISO 9000 or Equivalent) (please provide a Copy of your latest Certificate):
33. For Goods only, do those offered for supply conform to National/International Quality Standards?
Yes
No
34. List below up to a maximum of ten (10) of your core Goods/Services offered:
Description (one Line for each Item)
National/International Quality Standard to which Item conforms
Section 4: Experience
35. Annual Value of Total Sales for the last 3 Years:
Year ______: USD___________
Year ______: USD___________
Year ______: USD___________
36. Annual Value of Export Sales for the last 3 Years:
Year ______: USD___________
Year ______: USD___________
Year ______: USD___________
37. If available, please provide a copy of the company's latest annual or audited Financial Report. Please note that the latest audited financial report
may be requested in case of a contract with UNHCR.
Do you have outstanding bankruptcy, judgment or pending legal action that could impair operating as a going concern? Yes
No
If available, please provide Credit Rating by Dun and Bradstreet or equivalent:
38. Recent Contracts with the UN and/or other International Aid Organizations:
Organization:
Value:
Year:
Goods/Services Supplied:
USD
________________________
USD
________________________
USD
________________________
USD
________________________
Destination:
_
39. To which Countries has your Company exported and/or managed Projects over the last 3 Years?
2
Section 5: UN Global Compact Initiative
40. Is your company aware of the UN Secretary General‟s Global Compact initiative, which can be viewed at http://www.unglobalcompact.org?
Yes
No
If yes, have you signed up to this initiative or are you going to sign up to? Please state:
Section 6: Environment
41. Does your Company have a written Statement of its Environmental Policy? (If yes, please attach a Copy)
Yes
No
42. Write down the name, qualification and contact details of your company‟s environmental focal point.
Name: ______________________
Qualification: ____________
Telephone: ______________________ Email: _________________
43. Does your organisation hold any accreditation such as ISO 14001 related to the environment?
Yes
No
If yes, please attach a copy.
Section 7: Anti Personnel Mines
44. By signing this VRF, potential vendor warrants and represents that neither it, its parent entities (if any), nor any of its subsidiary
or affiliated entities (if any) is engaged in the sale or manufacture, either directly or indirectly, of anti-personnel mines or any components produced
primarily for the operation thereof. Please confirm by answering Yes or No below.
Yes
No
Any breach of this clause may lead to the termination of all contracts your Company may have with
UNHCR and removal from the approved vendor database.
Section 8: Child Labour
45. By signing this VRF, potential vendor warrants and represents that it is not engaged in any practice inconsistent with the Rights set forth in the
Convention on the Rights of Child which requires that a child shall be protected from performing any work that is likely to be hazardous or to interfere
with the child‟s education or to be harmful to the child‟s health and physical, mental, spiritual, moral or social development. Do you agree with this?
Yes
No
Any breach of this clause may result in the termination of all contracts your Company may have with
UNHCR and removal from the approved vendor database.
Section 9: Official not to benefit
46. By signing this VRF, potential vendors confirm that they have read, understood and will comply with the UNHCR policy on the “zero tolerance” that
strictly prohibits the acceptance of any type of gift and/or hospitality by UN staff members participating in the procurement process. Please confirm.
Yes
No
Any breach of this clause may lead to the termination of all contracts your Company may have with
UNHCR and removal from the approved vendor database.
Section 10: Others
47. Please list any Disputes your Company has been involved in with UN Organizations over the last 3 Years:
48. List any National or International Trade or Professional Organizations of which your Company is a Member.
49. Is your company already registered with the United Nations Global Marketplace (UNGM)? If so, please provide registration number.
50. Certification:
I, the undersigned, hereby accept the UNHCR General Conditions, a copy of which has been provided to me, and warrant that the information
provided in this form is correct and, in the event of changes, details will be provided as soon as possible:
51. Self Declaration: I, the undersigned, declare that:
(a) Our company is not involved in any fraudulent or corrupt activities and has not been in the past, and is not currently under any investigation for
any such activities which would render our company unsuitable for business dealing with UNHCR.
(b) Our company is not on, or associated with a company or individual, groups, undertakings and entities that are on the consolidated list
established and maintained by the committee established by the UN Resolution No. 1267 (www.un.org/sc/committees/1267/consolist.html).
(c) Our company is not on, or associated with a company or individual that are subject to the list of Independent Inquiry Committee into United
Nations Oil-for-food programme (www.iic-offp.org).
(d) Our company is not currently removed, invalidated or suspended by any other UN Headquarters, or Field Offices or any other UN Agencies
(including the World Bank)
Name:
Signature:
Functional Title:
Date:
3
Please mail completed form to*:
United Nations High Commissioner for Refugees
Supply Management Service HQSF00
Chief, Procurement & Contracts Section
Ipoly utca 5a/b/c
1133 Budapest
Hungary
*Registration form to be returned to the relevant UNHCR Office
Companies that are registered with UNHCR and that have no purchase history over three years shall beinactivated. UNHCR may require new
registration documentation from suppliers in case new business opportunity appears.
INSTRUCTIONS FOR COMPLETION
The form should be typewritten in uppercase and completed clearly and accurately ensuring that all questions are answered. The numbers below
correspond to item numbers on the registration form:
Section 1:
1. Full name of company.
2. Full street address.
3. Full mailing address (including P.O. Box, if any).
4. Telephone number, including correct country and area codes.
5. Fax number, including country and area codes.
6. Email address.
7. WWW Address.
8. Provide name of person (including title) or department to whom correspondence should be addressed.
9. Provide email address of contact person.
10. Full legal name of parent company, if any.
11. Please provide, on a separate sheet if necessary, names and addresses of all subsidiaries & associates if any.
12. Please provide countries where the company has local offices or representation.
13. Please tick one box. If other; please specify.
14. Please tick one box. If other; please specify. If the company is a manufacturer of some products and a trader/agent of others which they do not
manufacture, both boxes should be ticked.
15. Indicate the year in which the organization was established under the name shown in Item 1.
16. Indicate the total number of full-time personnel in the company.
17. Provide the license number under which the company is registered, or the State where it is registered.
18. Provide the VAT number or Tax I.D. of the company.
19. Please tick the boxes for which languages the company is able to provide technical documents. Please specify other languages.
20. Please tick the boxes for which languages the company is able to work in. Please specify other languages.
Section 2:
21. Full name of bank.
22. Name of branch.
23. Address where branch is located.
24. Telephone number, including correct country and area codes.
25. Fax number, including country and area codes.
26. Number of the company account.
27. Name in which the account is held (important: tis should be the company name).
28. Currency of the account.
4
29. Swift code for the account.
30. International Bank Account Number (IBAN).
31. Should a routing be required for international payments, please provide full details of intermediate bank(s).
Section 3:
32. List any Quality Assurance Certificates (e.g. ISO 9000 series) that have been issued to your company and provide a copy of the latest certificates.
33. Indicate whether the company's products conform to national/international standards. If yes please attach copies of the certificates.
34. Please list up to 10 of the core goods/services offered. For each item, list the National/International Quality Standard to which it conforms.
Section 4:
35. Provide the total annual sales for the organization for the last 3 financial years in USD.
36. Provide the total export sales for the organization for the last 3 financial years in USD.
37. Please provide a copy of your most recent annual report or audited financial report. Please tick „yes‟ or „no‟ to reflect whether your company has
any outstanding bankruptcy, judgment or pending legal action that could impair operating as a going concern? If available, provide a rating by Dun
and Bradstreet or equivalent (specify which).
38. Enter the name(s) of UN organizations which your company has dealt with recently. Provide the value and the year of the contract, the
goods/services supplied and the country of destination of each contract. If you have had more than 5 of such contracts, please attach a separate
sheet indicating the others. Documentary evidence of such contracts may be required, e.g. copies of purchase orders.
39. List export markets, in particular, all developing countries to which your company has exported over the last 3 years.
Section 5:
40. Please confirm if your company is aware of the UN Global Compact Initiatives – ten universally accepted principles of Human Rights, Labour,
Environment and Anti-Corruption – by marking Yes or No. Also, please state if you have signed up to this initiative or you intend to do so.
Section 5:
41. The Earth Summit, held in Rio de Janeiro in 1992, emphasised the necessity to protect and renew the earth's limited resources. Agenda 21 was
adopted by 178 governments and lays an emphasis for the UN to exercise leadership, i.e. towards promoting environmental sensitive procurement
policies for goods and services. Please indicate whether your company has a written statement of its Environmental Policy and, if so, please
provide a copy.
42. Provide the name, qualification and contact details (e-mail and telephone) of your environmental focal point.
43. Please indicate if your organisation holds any accreditation such as ISO 14001 related to the environment. If so, please enclose copies of such
certification.
Section 7:
44. UNHCR expects all suppliers with whom it does business with to obey with the non-engagement in the sale or manufacture of anti-personnel mines
or components utilized in the manufacture of anti-personnel mines. Please mark yes if you are in agreement and no if otherwise.
Section 8:
45. UNHCR expects all suppliers with whom it does business with to obey with the non-engagement in any practice inconsistent with the rights set forth
in the Convention on the Rights of the Child, the International Labour Organization (ILO) Minimum Age Convention or the Prohibition and
Immediate Elimination of the Worst Forms of Child Labour Convention. Please mark yes if you are in agreement and no if otherwise.
Section 9:
46. Official benefits: UNHCR adopted “zero tolerance” policy that strictly prohibits the acceptance of any type of gift and/or hospitality by UN staff
members participating in the procurement process. Please confirm your acceptance by answering Yes or No if otherwise.
Section 10:
47. List all disputes with UN organizations which your organization has been involved in over the last 3 years. If more space is required, please use a
separate sheet.
48. Provide details of all national and international trade or professional organizations to which your company belongs.
49. UNHCR accepts UNGM-registered companies into its database, subject to submitting a hardcopy of a complete set of vendor registration form with
necessary attachments. The registration number provided by UNGM should be given.
50. Please read carefully the enclosed UNHCR General Term and Conditions, as signing of the form signifies acceptance. The form should be signed
by the person completing it and their name and title should be typed, along with the date.
5
51. Please sign a self declaration stating that:
(a) Your company is not involved in any fraudulent and corrupt activities and has not been in the past, and is not currently under any investigation
for such activities which would render your company unsuitable for business dealing with UNHCR.
(b) Your company is not on, or associated with a company or individual, groups, undertakings and entities that are on the consolidated list
established and maintained by the committee established by the UN Resolution No. 1267 (www.un.org/sc/committees/1267/consolist.html)
(c) Your company is not on, or associated with a company or individual that are subject to the list of Independent Inquiry Committee into United
Nations Oil-for-food programme (www.iic-offp.org)
(d) Your company is not currently removed, invalidated or suspended by the UN Headquarters or any of its field offices or any other UN agency
Headquarters or any of their field offices.
6
UN Supplier Code of Conduct Rev.03 - May 2007
UN SUPPLIER CODE OF CONDUCT
UN Charter: The values enshrined in the United Nations (UN) Charter, respect for fundamental human rights,
social justice and human dignity, and respect for the equal rights of men and women, serve as the overarching goals that
suppliers to the UN are expected to achieve.
Global Compact: At the World Economic Forum, Davos, on 31 January 1999, the UN Secretary-General
challenged world business leaders to "embrace and enact" the Global Compact, both in their individual
corporate practices and by supporting appropriate public policies. The Global Compact’s operational phase
was launched at UN Headquarters in New York on 26 July 2000. During the first Global Compact Leaders
Summit, held on 24 June 2004 at UN Headquarters in New York, the Secretary-General announced the
addition of a tenth principle against corruption. The Global Compact is a voluntary international corporate
citizenship network initiated to support the participation of both the private sector and other social actors to
advance responsible corporate citizenship and universal social and environmental principles to meet the
challenges of globalization. The United Nations strongly encourages all suppliers to actively participate in the
Global Compact. And to that end, this Code has been developed with recognition of the importance of the
ten principles of the UN Global Compact, and is viewed as an important means of integrating the Compact’s
principles into the operations of the UN. The Code addresses the issues included in the Compact in the areas
of human rights, labour, environment and anti-corruption and interpretation of the Code should be
undertaken in a manner consistent with the Global Compact. Suppliers interested in supporting the Global
Compact and for more information on the ten principles, can visit the Global Compact website at
www.unglobalcompact.org.
International Labor Organization (ILO) Core Labor Conventions: The Labour Conventions as
established by the tripartite UN affiliated agency, the ILO, have served as the foundation on which much of
this Code of Conduct is based. It is the UN’s expectation that any supplier providing products or services to
the UN, will adhere to the spirit of its Charter, and the core principles of the ILO Conventions. The full text
of the ILO Conventions can be accessed by accessing the ILO electronic database1.
Continuous Improvement: The provisions as set forth in this Code of Conduct provide the minimum
standards expected of suppliers to the UN. It is the expectation of the UN that suppliers adhere to all laws,
rules and regulations, and strive to exceed both international and industry best practices. The UN recognizes
that reaching the standards established in this Code of Conduct is a dynamic rather than static process and
encourages suppliers to continually improve their workplace conditions.
Monitoring and Evaluation: The UN may conduct on-site evaluations and inspections of its supplier’s
facilities and those of their subcontractors to review their progress towards these principles. It is the
expectation of the UN that suppliers, at a minimum, have established clear goals toward meeting the
standards set forth in this Code of Conduct. The UN may monitor that milestones have been set and
management systems have been put in place to ensure that the principles set out in this Code of Conduct
have been met and failure to do so may impact the future ability of a supplier to do business with the UN.
Notwithstanding the aspirational character of the principles contained in this Code of Conduct, UN Suppliers
must understand that if they are awarded a contract with the United Nations, the United Nations General
Conditions of Contract are an essential part of UN contracts and, therefore, legally enforceable against UN
contractors.
1
www.ilo.org/ilolex/english/convdisp2.htm.
Page 1
UN Supplier Code of Conduct Rev.03 - May 2007
1. Supplier Relationships: The provisions of this Code of Conduct set forth the expectations of all
suppliers with whom the UN does business. The UN expects that these principles apply to suppliers,
parent entities and subsidiary or affiliate entities, as well as all others with whom they do business
including employees, subcontractors and other third-parties. The UN expects that suppliers ensure
that this Code of Conduct is communicated to the employees and subcontractors of all suppliers, and
that it is done in the local language and in a manner that is understood by all.
2. Promoting the Principles of this Code of Conduct: The UN expects that its suppliers will
establish and maintain appropriate management systems whose scope is related to the content of this
Code of Conduct, and that they actively review, monitor and modify their management processes
and business operations to ensure they align with the principles set forth in this Code of Conduct. All
principles contained in this Code of Conduct are of equal importance independently of their order of
appearance. Supplier participants in the Global Compact are strongly encouraged to operationalize its
principles and to annually communicate their progress to stakeholders.
3. Subcontracting: The UN expects that its suppliers encourage and work with their own suppliers
and subcontractors to ensure that they also strive to meet the principles of this Code of Conduct or
equivalent set of principles.
Labour:
4. Freedom of Association and Collective Bargaining: The UN expects its suppliers to recognize
and respect the rights of employees to freely associate, organize and bargain collectively in
accordance with the laws of the countries in which they are employed, as well as core ILO
conventions Freedom of Association and Protection of the Right to Organise Convention, (C 87, 1948) and Right
to Organise and Collective Bargaining Convention, (C.98-1949). The UN recognizes the importance of open
communication and direct engagement between workers and management and suppliers are to
respect the rights of workers to associate freely and communicate openly with management regarding
working conditions without fear of harassment, intimidation, penalty, interference or reprisal.
5. Forced Labor: The UN expects its suppliers to prohibit any use of forced, bonded or indentured
labor or involuntary prison labor, and embrace employment practices consistent with ILO
conventions pertaining to forced labor: Forced Labour Convention, (c.29-1930) and Abolition of Forced
Labour Convention, (C.105-1957). All work, including overtime work, will be voluntary and workers
should be free to leave upon reasonable notice. Suppliers should also not mandate that workers
hand over government-issued identification; passports or work permits as a condition of
employment.
6. Child Labor: The UN expects its suppliers, at a minimum, not to engage in any practice inconsistent
with the rights set forth in the Convention on the Rights of the Child, the ILO Minimum Age
Convention (C.138-1973) or the Prohibition and Immediate Elimination of the Worst Forms of Child Labor
Convention (C. 182-1999). The minimum admission to employment or work shall not be less than the
age of completion of compulsory schooling, normally not less than 15 years or 14 where the local law
of the country permits, deferring to the greatest age. Additionally, all young workers must be
protected from performing any work that is likely to be hazardous or to interfere with the child’s
education or that may be harmful to the child’s health, physical, mental, social, spiritual or moral
development. All suppliers should also adhere to legitimate workplace apprenticeship programs and
comply with all laws and regulations governing child labor and apprenticeship programs.
7. Discrimination: The UN does not tolerate any form of discrimination in hiring and employment
practices on the ground or race, color, religion, gender, sexual orientation, age, physical ability, health
condition, political opinion, nationality, social or ethnic origin, union membership or marital status.
Page 2
UN Supplier Code of Conduct Rev.03 - May 2007
Consistent with the principles espoused in ILO Conventions on Discrimination (Discrimination
(Employment and Occupation) Convention, C.111-1958) and Equal Remuneration (Equal
Remuneration Convention, C. 100-1951), the UN also discourages discrimination regarding access to
training, promotion, and rewards.
8. Working Hours: The UN expects its suppliers to comply with all applicable working hour
requirements as established by local law, and should never exceed 60 hours per week, including
overtime, except in emergency or unusual situations. Suppliers must ensure that all overtime work is
voluntary and compensated at the prevailing overtime rates. Suppliers are encouraged to ensure that
workers are provided with one day off in every seven-day week.
9. Compensation: The UN expects its suppliers to comply, at a minimum, with all wage and hour laws
and regulations, including those pertaining to minimum wages, overtime wages, piece rates, other
elements of compensation and to provide legally mandated benefits
Human Rights:
10. Human Rights: The UN expects its suppliers to support and respect the protection of
internationally proclaimed human rights and to ensure that they are not complicit in human rights
abuses.
11. Harassment, Harsh or Inhumane Treatment: The UN expects its suppliers to create and
maintain an environment that treats all employees with dignity and respect and will not use any
threats of violence, sexual exploitation or abuse, verbal or psychological harassment or abuse. No
harsh or inhumane treatment coercion or corporal punishment of any kind is tolerated, nor is there
to be the threat of any such treatment.
12. Health and Safety: The UN expects its suppliers to follow all relevant legislation, regulations and
directives in country in which they operate to ensure a safe and healthy workplace or any other
location where production or work is undertaken. At a minimum, suppliers should strive to
implement recognized management systems and guidelines such as the ILO Guidelines on Occupational
Safety and Health (ILO-OSH-2001) which can be found at ILO's website 2 and ensure at a minimum,
reasonable access to potable water and sanitary facilities; fire safety; emergency preparedness and
response; industrial hygiene; adequate lighting and ventilation; occupational injury and illness and
machine safeguarding. Suppliers will also ensure these same standards apply to any dormitory or
canteen facilities.
13. Mines: We expect UN suppliers to strive not to engage in the sale or manufacture of anti-personnel
mines or components utilized in the manufacture of anti-personnel mines.
Environment:
14. Environmental: The UN expects its suppliers to have an effective environmental policy and to
comply with existing legislation and regulations regarding the protection of the environment.
Suppliers should wherever possible support a precautionary approach to environmental matters,
undertake initiatives to promote greater environmental responsibility and encourage the diffusion of
environmentally friendly technologies implementing sound life-cycle practices.
2
www.ilo.org/public/english/protection/safework/managmnt/guide.htm
Page 3
UN Supplier Code of Conduct Rev.03 - May 2007
15. Chemical and Hazardous Materials: Chemical and other materials posing a hazard if released to
the environment are to be identified and managed to ensure their safe handling, movement, storage,
recycling or reuse and disposal.
16. Wastewater and Solid Waste: Wastewater and solid waste generated from operations, industrial
processes and sanitation facilities are to be monitored, controlled and treated as required prior to
discharge or disposal.
17. Air Emissions: Air emissions of volatile organic chemicals, aerosols, corrosives, particulates, ozone
depleting chemicals and combustion by-products generated from operations are to be characterized,
monitored, controlled and treated as required prior to discharge.
18. Minimize Waste, Maximize Recycling: Waste of all types, including water and energy, are to be
reduced or eliminated at the source or by practices such as modifying production, maintenance and
facility processes, materials substitution, conservation, recycling and re-using materials.
Bribery & Corruption:
19. Corruption: The UN expects UN suppliers to adhere to the highest standard of moral and ethical
conduct, to respect local laws and not engage in any form of corrupt practices, including extortion,
fraud, or bribery, at a minimum.
20. Conflict of Interest: UN suppliers are expected to disclose to the UN any situation that may appear
as a conflict of interest, and disclose to the UN if any UN official or professional under contract with
the UN may have an interest of any kind in the supplier's business or any kind of economic ties with
the supplier.
21. Gifts and Hospitality: The UN has a “zero tolerance” policy and does not accept any type of gift or
any offer of hospitality. The UN will not accept any invitations to sporting or cultural events, offers
of holidays or other recreational trips, transportation, or invitations to lunches or dinners. The UN
expects UN suppliers not to offer any benefit such as free goods or services or a work position or
sales opportunity to a UN staff member in order to facilitate the suppliers business with the UN.
22. Post employment restrictions : Post-employment restrictions apply to UN former staff members
and to staff in service who participated in the procurement process, as well as to UN suppliers. For a
period of one year following separation from service, former staff members are prohibited from
seeking or accepting employment, from a UN supplier. Staff members in service must also refrain
from accepting any future employment from a UN supplier, with whom they have been involved
with. In case of violations of these provisions, UN Suppliers may be subject to having their
registration as a qualified supplier with the United Nations barred, suspended or terminated.
We encourage UN suppliers to communicate to us any actions taken to improve its business
practices and to send us suggestions about how can the UN best contribute to the
implementation of the principles set out in this Code of Conduct.
Contacts:
Any questions related to this Code of Conduct can be addressed to the Chief, Procurement
Service.
Page 4
DECLARATION OF CONFIDENTIALITY
I, the undersigned, declare and confirm that I am aware that I have been assigned by my
employer, _______________ (the “Contractor”), to render certain services for the Office of
the United Nations High Commission for Refugees (“UNHCR”).
I am aware that my employer’s contract with UNHCR contains the following confidentiality
clause:
Quote
1.
1.1
2.
2.1
2.3
DEFINITIONS AND INTERPRETATION
the following words and expressions shall have the following meanings unless
the context otherwise requires:
“Data Protection Authority”
the local governmental or other official
regulators responsible for enforcement of the Data Protection Legislation
in relation to UNHCR, if any
“Data Protection Legislation”
all privacy laws applicable to the Data which is
processed under or in connection with this Agreement and all regulations
made pursuant to and in relation to such legislation, together with all
codes of practice and other guidance on the foregoing issued by any
relevant Data Protection Authority, all as may be amended from time to
time
“Data” all data, including but not restricted to financial or personal data, within the
meaning given to it in the Data Protection Legislation in respect of which
UNHCR is legally responsible by virtue of the Data Protection Legislation
and which is from time to time processed under this Agreement by the
Contractor and/or on the Contractor’s behalf and, for the avoidance of
doubt, shall include details of any and all refugees, potential refugees,
employees, and/or other people’s details held within any UNHCR system.
CONFIDENTIALITY
In this Agreement “Confidential Information” means any information of a
confidential nature (whether written, oral, in electronic form or in any other media)
that:
2.1.1 is disclosed by or on behalf of a Party (the “Discloser”) or any member of
its Group, and in the case of the Contractor any Contractor Party, to the
other Party (the “Recipient”) or a member of its Group or one of its
Representatives in connection with this Agreement; and/or
2.1.2 relates to the existence or terms of this Agreement, a Statement of Work
and/or the Services; and/or
2.1.3 includes or relates to Data.
2.2
The Recipient of Confidential Information shall:
2.2.1 keep the Confidential Information secret and will only disclose it in the
manner and to the extent expressly permitted by this Agreement or
otherwise as permitted by the terms of the disclosure;
2.2.2 use the Confidential Information only to the extent necessary for the
performance of its obligations and/or, in relation to UNHCR, receipt of
their rights under this Agreement; and
2.2.3 keep the Confidential Information safe and secure and apply to it
documentary and electronic security measures that match or exceed
those the Recipient operates in relation to its own information which is by
its nature confidential.
Provided that the Recipient has a written agreement with the following persons or
entities requiring them to treat the Confidential Information confidential in
accordance with the Agreement and this clause 1, the Recipient may disclose
Confidential Information to:
2.3.1 any other Party with the Discloser’s prior written consent; and
2.3.2 the Recipient’s employees, officials, representatives and agents who have
a need to know such Confidential Information for purposes of performing
obligations under this Agreement, and employees officials,
representatives and agents of any legal entity that it controls, controls it,
or with which it is under common control, who have a need to know such
Confidential Information for purposes of performing obligations under this
Agreement, provided that, for these purposes a controlled legal entity
means:
2.3.2.1 a corporate entity in which the Party owns or otherwise controls, whether
directly or indirectly, over fifty percent (50%) of voting shares thereof;
2.3.2.2 any entity over which the Party exercises effective managerial control; or
2.3.2.3 for UNHCR, a principal or subsidiary organ of the United Nations
established in accordance with the Charter of the United Nations.
2.4 The Contractor may disclose Confidential Information to the extent required by
law, provided that, subject to and without any waiver of the privileges and
immunities of UNHCR, the Contractor will give UNHCR sufficient prior notice of a
request for the disclosure of Confidential Information in order to allow UNHCR to
have a reasonable opportunity to take protective measures or such other action
as may be appropriate before any such disclosure is made.
2.5 UNHCR may disclose Confidential Information to the extent as required pursuant
to the Charter of the United Nations, or pursuant to resolutions or regulations of
the General Assembly or rules promulgated thereunder.
2.6 UNHCR may disclose any Confidential Information:
2.6.1 to any Regulatory Authority or auditor;
2.6.2 to any UNHCR-nominated third parties;
2.6.3 to a Replacement Contractor;
2.6.4 to a third party nominated by UNHCR to perform or manage Step-in
Services;
2.7 The Recipient may disclose Confidential Information to the extent necessary in
order to be able to refer a dispute for resolution in accordance with the Dispute
Resolution Procedure in accordance with this Agreement.
2.8 The Recipient shall not be precluded from disclosing Confidential Information that
the Recipient can demonstrate to the other Party is or has been: (i) obtained by
the Recipient without restriction from a third party who is not in breach of any
obligation as to confidentiality to the owner of such Information or any other
person; (ii) in the public domain other than by a breach of this Agreement; (iii)
previously known by the Recipient; or (iv) at any time is developed or learned by
the Recipient completely independently of any disclosures hereunder.
2.9 The Contractor shall ensure that all Contractor Parties comply with equivalent
obligations as set out in this clause 1.
2.10 These obligations and restrictions of confidentiality shall be effective during the
Term of the Agreement, including any extension thereof, and, unless otherwise
provided in the Agreement, shall remain effective following any termination or
expiry of the Agreement.
3.
3.1
3.2
DATA PROTECTION AND INFORMATION SECURITY
With respect to the Parties’ rights and obligations under this Agreement, the
Parties agree that UNHCR is the Data Controller and that the Contractor and the
relevant Contractor Party is or are the Data Processors.
The Contractor warrants and undertakes on a continuing basis that it shall and
shall procure that the Contractor Parties shall:
UNHCR Consultant Declaration of Confidentiality
Page 2 of 4
3.3
3.2.1 only process the Data in order to provide the Service(s) and then strictly
only in accordance with this Agreement and with instructions received
from UNHCR from time to time relating to the Data;
3.2.2 promptly and fully cooperate with and assist UNHCR in relation to any
reasonable request for cooperation and/or assistance and/or information
relating to its and/or their processing of the Data;
3.2.3 ensure that the Data shall only be accessible by the Contractor Personnel
to the extent they need to know or require access for the purposes of
properly performing their duties in relation to the Services and who, where
relevant, understand the confidentiality of such Data (and who are
contractually bound to maintain its confidentiality) and in particular the
Contractor and the Contractor Parties shall take adequate precautions to
ensure that Data is not used, accessed or processed in a manner
incompatible with these purposes;
3.2.4 not cause UNHCR to be in breach of any part of the Data Protection
Legislation whether by reason of an act or omission by it or them, or by
any of its or their directors, officers, staff, employees or the Contractor
Parties;
3.2.5 not allow any third parties to access the Data except to the extent that it
obtains the prior written consent of UNHCR to appoint a Contractor Party
in order to assist it in delivering the Services, and provided that the
Contractor shall procure compliance by the Contractor Party with these
terms and shall be responsible for the acts and omissions of such
Contractor Parties.
The Contractor warrants and undertakes on a continuing basis that it shall, and
shall procure that the Contractor Parties shall:
3.3.1 observe all the requirements of Data Protection Legislation in relation to
Data;
3.3.2 put in place and maintain appropriate technical and organisational
measures against accidental or unlawful destruction or accidental loss,
alteration, unauthorised disclosure or access to the Data (including,
without limitation the measures set out in the Information Security
Requirements);
3.3.3 take all reasonable steps to ensure the reliability of its/their personnel who
have access to Data and to ensure they are aware of the Contractor’s or
Contractor Party’s (as appropriate) obligations in relation to Data;
3.3.4 promptly notify UNHCR of any actual or suspected or threatened incident
of accidental or unlawful destruction or accidental loss, alteration,
unauthorised or accidental disclosure of or access to the Data;
3.3.5 promptly provide UNHCR with all relevant information in its or their
possession as required by UNHCR to comply with any informal or formal
management and reporting obligations recommended or required by Data
Protection Legislation concerning any Security Breach;
3.3.6 notify UNHCR within five (5) Business Days of any complaint by a data
subject in respect of their Data or any request received from a data
subject to have access to their Data or of any other communication
relating directly or indirectly to the Processing of any Data in connection
with this Agreement and promptly and fully cooperate and assist UNHCR,
as appropriate, in relation to any such request or communication. Neither
the Contractor nor any Contractor Party shall respond directly to any data
subject, access request for their Data or complaint in relation to their
Data, or (unless and to the extent required by law) any communication by
a Data Protection Authority, in each case unless expressly approved in
writing in advance by UNHCR;
UNHCR Consultant Declaration of Confidentiality
Page 3 of 4
3.4
3.5
The Contractor shall, at all times during and after the termination or expiry of this
Agreement Indemnify UNHCR (including losses agreed to be paid by UNHCR)
arising from any breach of the Contractor’s obligations under this clause 2.
This clause 2 shall continue in effect following termination or expiry of this
Agreement.
Unquote
I undertake to conduct myself and render services with a view to ensuring full compliance by
the Contractor with the above clause. In case of doubt, I shall consult with the Project
Coordinator. Upon the request of UNHCR, or termination or expiry of my assignment with
UNHCR, I shall immediately return to UNHCR all Confidential Information disclosed to me or
to which I had access during or as a result of my assignment with UNHCR, together with all
copies thereof.
Signed:
..........................................................
Name:
..........................................................
Date:
..........................................................
UNHCR Consultant Declaration of Confidentiality
Page 4 of 4
GENERAL CONDITIONS OF CONTRACT
CONTRACTS FOR THE PROVISION OF SERVICES
1.
LEGAL STATUS OF THE PARTIES: The United Nations Office of the High Commissioner for Refugees
(“UNHCR”) and the Contractor shall also each be referred to as a “Party” hereunder, and:
1.1 Pursuant, inter alia, to the Charter of the United Nations and the Convention on the Privileges and Immunities
of the United Nations, UNHCR, as a subsidiary organ of the United Nations, has full juridical personality and
enjoys such privileges and immunities as are necessary for the independent fulfillment of its purposes.
1.2 The Contractor shall have the legal status of an independent contractor vis-à-vis UNHCR, and nothing
contained in or relating to the Contract shall be construed as establishing or creating between the Parties the
relationship of employer and employee or of principal and agent. The officials, representatives, employees, or
subcontractors of each of the Parties shall not be considered in any respect as being the employees or agents of
the other Party, and each Party shall be solely responsible for all claims arising out of or relating to its
engagement of such persons or entities.
2.
SOURCE OF INSTRUCTIONS: The Contractor shall neither seek nor accept instructions from any authority external
to UNHCR in connection with the performance of its obligations under the Contract. Should any authority external to
UNHCR seek to impose any instructions concerning or restrictions on the Contractor’s performance under the Contract,
the Contractor shall promptly notify UNHCR in writing and provide all reasonable assistance required by UNHCR. The
Contractor shall not take any action in respect of the performance of its obligations under the Contract that may
adversely affect the interests of UNHCR, and the Contractor shall perform its obligations under the Contract with the
fullest regard to the interests of UNHCR.
3.
RESPONSIBILITY FOR EMPLOYEES: The following provisions shall apply:
3.1 The Contractor shall be responsible for the professional and technical competence of the personnel it assigns to
perform work under the Contract and will select reliable and competent individuals who will be able to
effectively perform the obligations under the Contract and who, while doing so, will respect the local laws and
customs and conform to a high standard of moral and ethical conduct.
3.2 Such Contractor personnel shall be professionally qualified and, if required to work with officials or staff of
UNHCR, shall be able to do so effectively. The qualifications of any personnel whom the Contractor may
assign or may propose to assign to perform any obligations under the Contract shall be substantially the same,
or better, as the qualifications of any personnel originally proposed by the Contractor.
3.3 At the option of and in the sole discretion of UNHCR:
3.3.1 the qualifications of personnel proposed by the Contractor (e.g., a curriculum vitae) may be
reviewed by UNHCR prior to such personnel’s performing any obligations under the Contract;
3.3.2 any personnel proposed by the Contractor to perform obligations under the Contract may be
interviewed by qualified staff or officials of UNHCR prior to such personnel’s performing any
obligations under the Contract; and,
3.3.3 in cases in which, pursuant to Article 3.3.1 or 3.3.2, above, UNHCR has reviewed the qualifications
of such Contractor’s personnel, UNHCR may reasonably refuse to accept any such personnel.
3.4 Requirements specified in the Contract regarding the number or qualifications of the Contractor’s personnel
may change during the course of performance of the Contract. Any such change shall be made only following
written notice of such proposed change and upon written agreement between the Parties regarding such change,
subject to the following:
3.4.1 UNHCR may, at any time, request, in writing, the withdrawal or replacement of any of the
Contractor’s personnel, and such request shall not be unreasonably refused by the Contractor.
CONTRACTS FOR THE PROVISION OF SERVICES
REV.: JANUARY 2010
3.4.2 Any of the Contractor’s personnel assigned to perform obligations under the Contract shall not be
withdrawn or replaced without the prior written consent of UNHCR, which shall not be unreasonably
withheld.
3.4.3 The withdrawal or replacement of the Contractor’s personnel shall be carried out as quickly as
possible and in a manner that will not adversely affect the performance of obligations under the
Contract.
3.4.4 All expenses related to the withdrawal or replacement of the Contractor’s personnel shall, in all
cases, be borne exclusively by the Contractor.
3.4.5 Any request by UNHCR for the withdrawal or replacement of the Contractor’s personnel shall not be
considered to be a termination, in whole or in part, of the Contract, and UNHCR shall not bear any
liability in respect of such withdrawn or replaced personnel.
3.4.6 If a request for the withdrawal or replacement of the Contractor’s personnel is not based upon a
default by or failure on the part of the Contractor to perform its obligations in accordance with the
Contract, the misconduct of the personnel, or the inability of such personnel to reasonably work
together with UNHCR officials and staff, then the Contractor shall not be liable by reason of any
such request for the withdrawal or replacement of the Contractor’s personnel for any delay in the
performance by the Contractor of its obligations under the Contract that is substantially the result of
such personnel’s being withdrawn or replaced.
3.5 Nothing in Articles 3.2, 3.3 and 3.4, above, shall be construed to create any obligations on the part of UNHCR
with respect to the Contractor’s personnel assigned to perform work under the Contract, and such personnel
shall remain the sole responsibility of the Contractor.
3.6 The Contractor shall be responsible for requiring that all personnel assigned by it to perform any obligations
under the Contract and who may have access to any premises or other property of UNHCR shall:
3.6.1 undergo or comply with security screening requirements made known to the Contractor by UNHCR,
including but not limited to, a review of any criminal history;
3.6.2 when within UNHCR premises or on UNHCR property, display such identification as may be
approved and furnished by UNHCR security officials, and that upon the withdrawal or replacement
of any such personnel or upon termination or completion of the Contract, such personnel shall
immediately return any such identification to UNHCR for cancellation.
3.7 Not less than one working day after learning that any of Contractor’s personnel who have access to any
UNHCR premises have been charged by law enforcement authorities with an offense other than a minor traffic
offense, the Contractor shall provide written notice to inform UNHCR about the particulars of the charges then
known and shall continue to inform UNHCR concerning all substantial developments regarding the disposition
of such charges.
3.8 All operations of the Contractor, including without limitation, storage of equipment, materials, supplies and
parts, within UNHCR premises or on UNHCR property shall be confined to areas authorized or approved by
UNHCR. The Contractor’s personnel shall not enter or pass through and shall not store or dispose of any of its
equipment or materials in any areas within UNHCR premises or on UNHCR property without appropriate
authorization from UNHCR.
4.
ASSIGNMENT:
4.1 Except as provided in Article 4.2, below, the Contractor may not assign, transfer, pledge or make any other
disposition of the Contract, of any part of the Contract, or of any of the rights, claims or obligations under the
Contract except with the prior written authorization of UNHCR. Any such unauthorized assignment, transfer,
pledge or other disposition, or any attempt to do so, shall not be binding on UNHCR. Except as permitted with
respect to any approved subcontractors, the Contractor shall not delegate any of its obligations under the
Contract, except with the prior written consent of UNHCR. Any such unauthorized delegation, or attempt to do
so, shall not be binding on UNHCR.
4.2 The Contractor may assign or otherwise transfer the Contract to the surviving entity resulting from a
reorganization of the Contractor’s operations, provided that:
REV.: JANUARY 2010
GENERAL CONDITIONS OF CONTRACT FOR CONTRACTS FOR THE PROVISION OF SERVICES
PAGE 2
4.2.1 such reorganization is not the result of any bankruptcy, receivership or other similar proceedings;
and,
4.2.2 such reorganization arises from a sale, merger, or acquisition of all or substantially all of the
Contractor’s assets or ownership interests; and,
4.2.3 the Contractor promptly notifies UNHCR about such assignment or transfer at the earliest
opportunity; and,
4.2.4 the assignee or transferee agrees in writing to be bound by all of the terms and conditions of the
Contract, and such writing is promptly provided to UNHCR following the assignment or transfer.
5.
SUBCONTRACTING: In the event that the Contractor requires the services of subcontractors to perform any
obligations under the Contract, the Contractor shall obtain the prior written approval of UNHCR. UNHCR shall be
entitled, in its sole discretion, to review the qualifications of any subcontractors and to reject any proposed subcontractor
that UNHCR reasonably considers is not qualified to perform obligations under the Contract. UNHCR shall have the
right to require any subcontractor’s removal from UNHCR premises without having to give any justification therefor.
Any such rejection or request for removal shall not, in and of itself, entitle the Contractor to claim any delays in the
performance, or to assert any excuses for the non-performance, of any of its obligations under the Contract, and the
Contractor shall be solely responsible for all services and obligations performed by its subcontractors. The terms of any
subcontract shall be subject to, and shall be construed in a manner that is fully in accordance with, all of the terms and
conditions of the Contract.
6.
OFFICIALS NOT TO BENEFIT: The Contractor warrants that it has not and shall not offer any direct or indirect
benefit arising from or related to the performance of the Contract or the award thereof to any representative, official,
employee, or other agent of UNHCR. The Contractor acknowledges and agrees that any breach of this provision is a
breach of an essential term of the Contract.
7.
INDEMNIFICATION:
7.1 The Contractor shall indemnify, defend, and hold and save harmless, UNHCR, and its officials, agents and
employees, from and against all suits, proceedings, claims, demands, losses and liability of any kind or nature
brought by any third party against UNHCR, including, but not limited to, all litigation costs and expenses,
attorney’s fees, settlement payments and damages, based on, arising from, or relating to:
7.1.1 allegations or claims that the possession of or use by UNHCR of any patented device, any
copyrighted material, or any other goods, property or services provided or licensed to UNHCR under
the terms of the Contract, in whole or in part, separately or in a combination contemplated by the
Contractor’s published specifications therefor, or otherwise specifically approved by the Contractor,
constitutes an infringement of any patent, copyright, trademark, or other intellectual property right of
any third party; or,
7.1.2 any acts or omissions of the Contractor, or of any subcontractor or anyone directly or indirectly
employed by them in the performance of the Contract, which give rise to legal liability to anyone not
a party to the Contract, including, without limitation, claims and liability in the nature of a claim for
workers’ compensation.
7.2 The indemnity set forth in Article 7.1.1, above, shall not apply to:
7.2.1 A claim of infringement resulting from the Contractor’s compliance with specific written instructions
by UNHCR directing a change in the specifications for the goods, property, materials, equipment or
supplies to be or used, or directing a manner of performance of the Contract or requiring the use of
specifications not normally used by the Contractor; or
7.2.2 A claim of infringement resulting from additions to or changes in any goods, property, materials
equipment, supplies or any components thereof furnished under the Contract if UNHCR or another
party acting under the direction of UNHCR made such changes.
7.3 In addition to the indemnity obligations set forth in this Article 7, the Contractor shall be obligated, at its sole
expense, to defend UNHCR and its officials, agents and employees, pursuant to this Article 7, regardless of
whether the suits, proceedings, claims and demands in question actually give rise to or otherwise result in any
loss or liability.
REV.: JANUARY 2010
GENERAL CONDITIONS OF CONTRACT FOR CONTRACTS FOR THE PROVISION OF SERVICES
PAGE 3
7.4 UNHCR shall advise the Contractor about any such suits, proceedings, claims, demands, losses or liability
within a reasonable period of time after having received actual notice thereof. The Contractor shall have sole
control of the defense of any such suit, proceeding, claim or demand and of all negotiations in connection with
the settlement or compromise thereof, except with respect to the assertion or defense of the privileges and
immunities of UNHCR or any matter relating thereto, which only UNHCR itself is authorized to assert and
maintain. UNHCR shall have the right, at its own expense, to be represented in any such suit, proceeding, claim
or demand by independent counsel of its own choosing.
7.5 In the event the use by UNHCR of any goods, property or services provided or licensed to UNHCR by the
Contractor, in whole or in part, in any suit or proceeding, is for any reason enjoined, temporarily or
permanently, or is found to infringe any patent, copyright, trademark or other intellectual property right, or in
the event of a settlement, is enjoined, limited or otherwise interfered with, then the Contractor, at its sole cost
and expense, shall, promptly, either:
7.5.1 procure for UNHCR the unrestricted right to continue using such goods or services provided to
UNHCR;
7.5.2 replace or modify the goods or services provided to UNHCR, or part thereof, with the equivalent or
better goods or services, or part thereof, that is non-infringing; or,
7.5.3 refund to UNHCR the full price paid by UNHCR for the right to have or use such goods, property or
services, or part thereof.
8.
INSURANCE AND LIABILITY:
8.1 The Contractor shall pay UNHCR promptly for all loss, destruction, or damage to the property of UNHCR
caused by the Contractor’s personnel or by any of its subcontractors or anyone else directly or indirectly
employed by the Contractor or any of its subcontractors in the performance of the Contract.
8.2 Unless otherwise provided in the Contract, prior to commencement of performance of any other obligations
under the Contract, and subject to any limits set forth in the Contract, the Contractor shall take out and shall
maintain for the entire term of the Contract, for any extension thereof, and for a period following any
termination of the Contract reasonably adequate to deal with losses:
8.2.1 insurance against all risks in respect of its property and any equipment used for the performance of
the Contract;
8.2.2 workers’ compensation insurance, or its equivalent, or employer’s liability insurance, or its
equivalent, with respect to the Contractor’s personnel sufficient to cover all claims for injury, death
and disability, or any other benefits required to be paid by law, in connection with the performance of
the Contract;
8.2.3 liability insurance in an adequate amount to cover all claims, including, but not limited to, claims for
death and bodily injury, products and completed operations liability, loss of or damage to property,
and personal and advertising injury, arising from or in connection with the Contractor’s performance
under the Contract, including, but not limited to, liability arising out of or in connection with the acts
or omissions of the Contractor, its personnel, agents, or invitees, or the use, during the performance
of the Contract, of any vehicles, boats, airplanes or other transportation vehicles and equipment,
whether or not owned by the Contractor; and,
8.2.4 such other insurance as may be agreed upon in writing between UNHCR and the Contractor.
8.3 The Contractor’s liability policies shall also cover subcontractors and all defense costs and shall contain a
standard “cross liability” clause.
8.4 The Contractor acknowledges and agrees that UNHCR accepts no responsibility for providing life, health,
accident, travel or any other insurance coverage which may be necessary or desirable in respect of any
personnel performing services for the Contractor in connection with the Contract.
8.5 Except for the workers’ compensation insurance or any self-insurance program maintained by the Contractor
and approved by UNHCR, in its sole discretion, for purposes of fulfilling the Contractor’s requirements for
providing insurance under the Contract, the insurance policies required under the Contract shall:
REV.: JANUARY 2010
GENERAL CONDITIONS OF CONTRACT FOR CONTRACTS FOR THE PROVISION OF SERVICES
PAGE 4
8.5.1 name UNHCR as an additional insured under the liability policies, including, if required, as a
separate endorsement under the policy;
8.5.2 include a waiver of subrogation of the Contractor’s insurance carrier’s rights against UNHCR;
8.5.3 provide that UNHCR shall receive written notice from the Contractor’s insurance carrier not less than
thirty (30) days prior to any cancellation or material change of coverage; and,
8.5.4 include a provision for response on a primary and non-contributing basis with respect to any other
insurance that may be available to UNHCR.
8.6 The Contractor shall be responsible to fund all amounts within any policy deductible or retention.
8.7 Except for any self-insurance program maintained by the Contractor and approved by UNHCR for purposes of
fulfilling the Contractor’s requirements for maintaining insurance under the Contract, the Contractor shall
maintain the insurance taken out under the Contract with reputable insurers that are in good financial standing
and that are acceptable to UNHCR Prior to the commencement of any obligations under the Contract, the
Contractor shall provide UNHCR with evidence, in the form of certificate of insurance or such other form as
UNHCR may reasonably require, that demonstrates that the Contractor has taken out insurance in accordance
with the requirements of the Contract. UNHCR reserves the right, upon written notice to the Contractor, to
obtain copies of any insurance policies or insurance program descriptions required to be maintained by the
Contractor under the Contract. Notwithstanding the provisions of Article 8.5.3, above, the Contractor shall
promptly notify UNHCR concerning any cancellation or material change of insurance coverage required under
the Contract.
8.8 The Contractor acknowledges and agrees that neither the requirement for taking out and maintaining insurance
as set forth in the Contract nor the amount of any such insurance, including, but not limited to, any deductible or
retention relating thereto, shall in any way be construed as limiting the Contractor’s liability arising under or
relating to the Contract.
9.
ENCUMBRANCES AND LIENS: The Contractor shall not cause or permit any lien, attachment or other encumbrance
by any person to be placed on file or to remain on file in any public office or on file with the United Nations against any
monies due to the Contractor or that may become due for any work done or against any goods supplied or materials
furnished under the Contract, or by reason of any other claim or demand against the Contractor or UNHCR.
10. EQUIPMENT FURNISHED BY UNHCR TO THE CONTRACTOR: Title to any equipment and supplies that may
be furnished by UNHCR to the Contractor for the performance of any obligations under the Contract shall rest with
UNHCR, and any such equipment shall be returned to UNHCR at the conclusion of the Contract or when no longer
needed by the Contractor. Such equipment, when returned to UNHCR, shall be in the same condition as when delivered
to the Contractor, subject to normal wear and tear, and the Contractor shall be liable to compensate UNHCR for the
actual costs of any loss of, damage to, or degradation of the equipment that is beyond normal wear and tear.
11. COPYRIGHT, PATENTS AND OTHER PROPRIETARY RIGHTS:
11.1 Except as is otherwise expressly provided in writing in the Contract, UNHCR shall be entitled to all
intellectual property and other proprietary rights including, but not limited to, patents, copyrights, and
trademarks, with regard to products, processes, inventions, ideas, know-how, or documents and other materials
which the Contractor has developed for UNHCR under the Contract and which bear a direct relation to or are
produced or prepared or collected in consequence of, or during the course of, the performance of the Contract.
The Contractor acknowledges and agrees that such products, documents and other materials constitute works
made for hire for UNHCR.
11.2 To the extent that any such intellectual property or other proprietary rights consist of any intellectual property
or other proprietary rights of the Contractor: (i) that pre-existed the performance by the Contractor of its
obligations under the Contract, or (ii) that the Contractor may develop or acquire, or may have developed or
acquired, independently of the performance of its obligations under the Contract, UNHCR does not and shall
not claim any ownership interest thereto, and the Contractor grants to UNHCR a perpetual license to use such
intellectual property or other proprietary right solely for the purposes of and in accordance with the
requirements of the Contract.
REV.: JANUARY 2010
GENERAL CONDITIONS OF CONTRACT FOR CONTRACTS FOR THE PROVISION OF SERVICES
PAGE 5
11.3 At the request of UNHCR, the Contractor shall take all necessary steps, execute all necessary documents and
generally assist in securing such proprietary rights and transferring or licensing them to UNHCR in
compliance with the requirements of the applicable law and of the Contract.
11.4 Subject to the foregoing provisions, all maps, drawings, photographs, mosaics, plans, reports, estimates,
recommendations, documents, and all other data compiled by or received by the Contractor under the Contract
shall be the property of UNHCR, shall be made available for use or inspection by UNHCR at reasonable times
and in reasonable places, shall be treated as confidential, and shall be delivered only to UNHCR authorized
officials on completion of work under the Contract.
12. PUBLICITY, AND USE OF THE NAME, EMBLEM OR OFFICIAL SEAL OF THE UNITED NATIONS OR
OF UNHCR: The Contractor shall not advertise or otherwise make public for purposes of commercial advantage or
goodwill that it has a contractual relationship with the United Nations or UNHCR, nor shall the Contractor, in any
manner whatsoever use the name, emblem or official seal of the United Nations or of UNHCR, or any abbreviation of
the name of the United Nations or of UNHCR in connection with its business or otherwise without the written
permission of UNHCR..
13. CONFIDENTIAL NATURE OF DOCUMENTS AND INFORMATION: Information and data that is considered
proprietary by either Party or that is delivered or disclosed by one Party (“Discloser”) to the other Party (“Recipient”)
during the course of performance of the Contract, and that is designated as confidential (“Information”)1, shall be held in
confidence by that Party and shall be handled as follows:
13.1 The recipient (“Recipient”) of such Information shall:
13.1.1
use the same care and discretion to avoid disclosure, publication or dissemination of the
Discloser’s Information as it uses with its own similar Information that it does not wish to
disclose, publish or disseminate; and,
13.1.2
use the Discloser’s Information solely for the purpose for which it was disclosed.
13.2 Provided that the Recipient has a written agreement with the following persons or entities requiring them to
treat the Information confidential in accordance with the Contract and this Article 13, the Recipient may
disclose Information to:
13.2.1
any other party with the Discloser’s prior written consent; and,
13.2.2
the Recipient’s employees, officials, representatives and agents who have a need to know such
Information for purposes of performing obligations under the Contract, and employees officials,
representatives and agents of any legal entity that it controls, controls it, or with which it is under
common control, who have a need to know such Information for purposes of performing
obligations under the Contract, provided that, for these purposes a controlled legal entity means:
13.2.2.1
a corporate entity in which the Party owns or otherwise controls, whether directly
or indirectly, over fifty percent (50%) of voting shares thereof; or,
13.2.2.2
any entity over which the Party exercises effective managerial control; or,
13.2.2.3
for UNHCR, a principal or subsidiary organ of the United Nations established in
accordance with the Charter of the United Nations.
13.3 The Contractor may disclose Information to the extent required by law, provided that, subject to and without
any waiver of the privileges and immunities of UNHCR, the Contractor will give UNHCR sufficient prior
notice of a request for the disclosure of Information in order to allow UNHCR to have a reasonable
opportunity to take protective measures or such other action as may be appropriate before any such disclosure
is made.
13.4 UNHCR may disclose Information to the extent as required pursuant to the Charter of the United Nations, or
pursuant to resolutions or regulations of the General Assembly or rules promulgated thereunder.
1
Information and data that is considered by UNHCR as proprietary and confidential includes, but is not limited to, data
pertaining to refugees and persons of concern to UNHCR.
REV.: JANUARY 2010
GENERAL CONDITIONS OF CONTRACT FOR CONTRACTS FOR THE PROVISION OF SERVICES
PAGE 6
13.5 The Recipient shall not be precluded from disclosing Information that is (i) obtained by the Recipient without
restriction from a third party who is not in breach of any obligation as to confidentiality to the owner of such
Information or any other person, or (ii) disclosed by the Discloser to a third party without any obligation of
confidentiality, or (iii) previously known by the Recipient, or (iv) at any time is developed by the Recipient
completely independently of any disclosures hereunder.
13.6 These obligations and restrictions of confidentiality shall be effective during the term of the Contract,
including any extension thereof, and, unless otherwise provided in the Contract, shall remain effective
following any termination of the Contract.
14. FORCE MAJEURE; OTHER CHANGES IN CONDITIONS:
14.1 In the event of and as soon as possible after the occurrence of any cause constituting force majeure, the
affected Party shall give notice and full particulars in writing to the other Party, of such occurrence or cause if
the affected Party is thereby rendered unable, wholly or in part, to perform its obligations and meet its
responsibilities under the Contract. The affected Party shall also notify the other Party of any other changes in
condition or the occurrence of any event which interferes or threatens to interfere with its performance of the
Contract. Not more than fifteen (15) days following the provision of such notice of force majeure or other
changes in condition or occurrence, the affected Party shall also submit a statement to the other Party of
estimated expenditures that will likely be incurred for the duration of the change in condition or the event of
force majeure. On receipt of the notice or notices required hereunder, the Party not affected by the occurrence
of a cause constituting force majeure shall take such action as it reasonably considers to be appropriate or
necessary in the circumstances, including the granting to the affected Party of a reasonable extension of time
in which to perform any obligations under the Contract.
14.2 If the Contractor is rendered unable, wholly or in part, by reason of force majeure to perform its obligations
and meet its responsibilities under the Contract, UNHCR shall have the right to suspend or terminate the
Contract on the same terms and conditions as are provided for in Article 15, “Termination,” except that the
period of notice shall be seven (7) days instead of thirty (30) days. In any case, UNHCR shall be entitled to
consider the Contractor permanently unable to perform its obligations under the Contract in case the
Contractor is unable to perform its obligations, wholly or in part, by reason of force majeure for any period in
excess of ninety (90) days.
14.3 Force majeure as used herein means any unforeseeable and irresistible act of nature, any act of war (whether
declared or not), invasion, revolution, insurrection, terrorism, or any other acts of a similar nature or force,
provided that such acts arise from causes beyond the control and without the fault or negligence of the
Contractor. The Contractor acknowledges and agrees that, with respect to any obligations under the Contract
that the Contractor must perform in areas in which UNHCR is engaged in, preparing to engage in, or
disengaging from any humanitarian or similar operations, any delays or failure to perform such obligations
arising from or relating to harsh conditions within such areas, or to any incidents of civil unrest occurring in
such areas, shall not, in and of itself, constitute force majeure under the Contract.
15. TERMINATION:
15.1 Either Party may terminate the Contract for cause, in whole or in part, upon thirty (30) day’s notice, in writing,
to the other Party. The initiation of conciliation or arbitral proceedings in accordance with Article 18
“Settlement of Disputes,” below, shall not be deemed to be a “cause” for or otherwise to be in itself a
termination of the Contract.
15.2 UNHCR may terminate the Contract at any time by providing written notice to the Contractor in any case in
which the mandate of UNHCR applicable to the performance of the Contract or the funding of UNHCR
applicable to the Contract is curtailed or terminated, whether in whole or in part. In addition, unless otherwise
provided by the Contract, upon sixty (60) day’s advance written notice to the Contractor, UNHCR may
terminate the Contract without having to provide any justification therefor.
15.3 In the event of any termination of the Contract, upon receipt of notice of termination that has been issued by
UNHCR, the Contractor shall, except as may be directed by UNHCR in the notice of termination or otherwise
in writing:
15.3.1
REV.: JANUARY 2010
take immediate steps to bring the performance of any obligations under the Contract to a close in a
prompt and orderly manner, and in doing so, reduce expenses to a minimum;
GENERAL CONDITIONS OF CONTRACT FOR CONTRACTS FOR THE PROVISION OF SERVICES
PAGE 7
15.3.2
refrain from undertaking any further or additional commitments under the Contract as of and
following the date of receipt of such notice;
15.3.3
place no further subcontracts or orders for materials, services, or facilities, except as UNHCR and
the Contractor agree in writing are necessary to complete any portion of the Contract that is not
terminated;
15.3.4
terminate all subcontracts or orders to the extent they relate to the portion of the Contract
terminated;
15.3.5
transfer title and deliver to UNHCR the fabricated or unfabricated parts, work in process,
completed work, supplies, and other material produced or acquired for the portion of the Contract
terminated;
15.3.6
deliver all completed or partially completed plans, drawings, information, and other property that,
if the Contract had been completed, would be required to be furnished to UNHCR thereunder;
15.3.7
complete performance of the work not terminated; and,
15.3.8
take any other action that may be necessary, or that UNHCR may direct in writing, for the
minimization of losses and for the protection and preservation of any property, whether tangible or
intangible, related to the Contract that is in the possession of the Contractor and in which UNHCR
has or may be reasonably expected to acquire an interest.
15.4 In the event of any termination of the Contract, UNHCR shall be entitled to obtain reasonable written
accountings from the Contractor concerning all obligations performed or pending in accordance with the
Contract. In addition, UNHCR shall not be liable to pay the Contractor except for those goods delivered and
services provided to UNHCR in accordance with the requirements of the Contract, but only if such goods or
services were ordered, requested or otherwise provided prior to the Contractor’s receipt of notice of
termination from UNHCR or prior to the Contractor’s tendering of notice of termination to UNHCR.
15.5 UNHCR may, without prejudice to any other right or remedy available to it, terminate the Contract forthwith
in the event that:
15.5.1
the Contractor is adjudged bankrupt, or is liquidated, or becomes insolvent, or applies for a
moratorium or stay on any payment or repayment obligations, or applies to be declared insolvent;
15.5.2
the Contractor is granted a moratorium or a stay, or is declared insolvent;
15.5.3
the Contractor makes an assignment for the benefit of one or more of its creditors;
15.5.4
a receiver is appointed on account of the insolvency of the Contractor;
15.5.5
the Contractor offers a settlement in lieu of bankruptcy or receivership; or,
15.5.6
UNHCR reasonably determines that the Contractor has become subject to a materially adverse
change in its financial condition that threatens to substantially affect the ability of the Contractor
to perform any of its obligations under the Contract.
15.6 Except as prohibited by law, the Contractor shall be bound to compensate UNHCR for all damages and costs,
including, but not limited to, all costs incurred by UNHCR in any legal or non-legal proceedings, as a result of
any of the events specified in Article 15.5, above, and resulting from or relating to a termination of the
Contract, even if the Contractor is adjudged bankrupt, or is granted a moratorium or stay or is declared
insolvent. The Contractor shall immediately inform UNHCR of the occurrence of any of the events specified
in Article 15.5, above, and shall provide UNHCR with any information pertinent thereto.
15.7 The provisions of this Article 15 are without prejudice to any other rights or remedies of UNHCR under the
Contract or otherwise.
16. NON-WAIVER OF RIGHTS: The failure by either Party to exercise any rights available to it, whether under the
Contract or otherwise, shall not be deemed for any purposes to constitute a waiver by the other Party of any such right or
any remedy associated therewith, and shall not relieve the Parties of any of their obligations under the Contract.
REV.: JANUARY 2010
GENERAL CONDITIONS OF CONTRACT FOR CONTRACTS FOR THE PROVISION OF SERVICES
PAGE 8
17. NON-EXCLUSIVITY: Unless otherwise specified in the Contract, UNHCR shall have no obligation to purchase any
minimum quantities of goods or services from the Contractor, and UNHCR shall have no limitation on its right to obtain
goods or services of the same kind, quality and quantity described in the Contract, from any other source at any time.
18. SETTLEMENT OF DISPUTES:
18.1 AMICABLE SETTLEMENT: The Parties shall use their best efforts to amicably settle any dispute,
controversy, or claim arising out of the Contract or the breach, termination, or invalidity thereof. Where the
Parties wish to seek such an amicable settlement through conciliation, the conciliation shall take place in
accordance with the Conciliation Rules then obtaining of the United Nations Commission on International
Trade Law (“UNCITRAL”), or according to such other procedure as may be agreed between the Parties in
writing.
18.2 ARBITRATION: Any dispute, controversy, or claim between the Parties arising out of the Contract or the
breach, termination, or invalidity thereof, unless settled amicably under Article 18.1, above, within sixty (60)
days after receipt by one Party of the other Party’s written request for such amicable settlement, shall be
referred by either Party to arbitration in accordance with the UNCITRAL Arbitration Rules then obtaining.
The decisions of the arbitral tribunal shall be based on general principles of international commercial law. The
arbitral tribunal shall be empowered to order the return or destruction of goods or any property, whether
tangible or intangible, or of any confidential information provided under the Contract, order the termination of
the Contract, or order that any other protective measures be taken with respect to the goods, services or any
other property, whether tangible or intangible, or of any confidential information provided under the Contract,
as appropriate, all in accordance with the authority of the arbitral tribunal pursuant to Article 26 (“Interim
Measures of Protection”) and Article 32 (“Form and Effect of the Award”) of the UNCITRAL Arbitration
Rules. The arbitral tribunal shall have no authority to award punitive damages. In addition, unless otherwise
expressly provided in the Contract, the arbitral tribunal shall have no authority to award interest in excess of
the London Inter-Bank Offered Rate (“LIBOR”) then prevailing, and any such interest shall be simple interest
only. The Parties shall be bound by any arbitration award rendered as a result of such arbitration as the final
adjudication of any such dispute, controversy, or claim.
19. PRIVILEGES AND IMMUNITIES: Nothing in or relating to the Contract shall be deemed a waiver, express or
implied, of any of the privileges and immunities of the United Nations, including its subsidiary organs or of UNHCR (as
a subsidiary organ of the United Nations).
20. TAX EXEMPTION:
20.1 Article II, Section 7, of the Convention on the Privileges and Immunities of the United Nations provides, inter
alia, that the United Nations, including UNHCR as one of its subsidiary organs, is exempt from all direct
taxes, except charges for public utility services, and is exempt from customs restrictions, duties, and charges of
a similar nature in respect of articles imported or exported for its official use. In the event any governmental
authority refuses to recognize the exemptions of UNHCR from such taxes, restrictions, duties, or charges, the
Contractor shall immediately consult with UNHCR to determine a mutually acceptable procedure.
20.2 The Contractor authorizes UNHCR to deduct from the Contractor’s invoices any amount representing such
taxes, duties or charges, unless the Contractor has consulted with UNHCR before the payment thereof and
UNHCR has, in each instance, specifically authorized the Contractor to pay such taxes, duties, or charges
under written protest. In that event, the Contractor shall provide UNHCR with written evidence that payment
of such taxes, duties or charges has been made and appropriately authorized, and UNHCR shall reimburse the
Contractor for any such taxes, duties, or charges so authorized by UNHCR and paid by the Contractor under
written protest.
21. OBSERVANCE OF THE LAW: The Contractor shall comply with all laws, ordinances, rules, and regulations bearing
upon the performance of its obligations under the Contract. In addition, the Contractor shall maintain compliance with
all obligations relating to its registration as a qualified vendor of goods or services to UNHCR, as such obligations are set
forth in vendor registration procedures.
22. MODIFICATIONS:
22.1 The Director of the Division for Emergency and Supply Management, or such other contracting authority as
UNHCR has made known to the Contractor in writing, possesses the authority to agree on behalf of UNHCR
to any modification of or change in the Contract, to a waiver of any of its provisions or to any additional
REV.: JANUARY 2010
GENERAL CONDITIONS OF CONTRACT FOR CONTRACTS FOR THE PROVISION OF SERVICES
PAGE 9
contractual relationship of any kind with the Contractor. Accordingly, no modification or change in the
Contract shall be valid and enforceable against UNHCR unless provided by a valid written amendment to the
Contract signed by the Contractor and the Director of the Division for Emergency and Supply Management or
such other contracting authority.
22.2 If the Contract shall be extended for additional periods in accordance with the terms and conditions of the
Contract, the terms and conditions applicable to any such extended term of the Contract shall be the same
terms and conditions as set forth in the Contract, unless the Parties shall have agreed otherwise pursuant to a
valid amendment concluded in accordance with Article 22.1, above.
22.3 The terms or conditions of any supplemental undertakings, licenses, or other forms of agreement concerning
any goods or services provided under the Contract shall not be valid and enforceable against UNHCR nor in
any way shall constitute an agreement by UNHCR thereto unless any such undertakings, licenses or other
forms are the subject of a valid amendment concluded in accordance with Article 22.1, above.
23. AUDITS AND INVESTIGATIONS:
23.1 Each invoice paid by UNHCR shall be subject to a post-payment audit by auditors, whether internal or
external, of UNHCR or by other authorized and qualified agents of UNHCR at any time during the term of the
Contract and for a period of two (2) years following the expiration or prior termination of the Contract.
UNHCR shall be entitled to a refund from the Contractor for any amounts shown by such audits to have been
paid by UNHCR other than in accordance with the terms and conditions of the Contract.
23.2 The Contractor acknowledges and agrees that, from time to time, UNHCR may conduct investigations relating
to any aspect of the Contract or the award thereof, the obligations performed under the Contract, and the
operations of the Contractor generally relating to performance of the Contract. The right of UNHCR to
conduct an investigation and the Contractor’s obligation to comply with such an investigation shall not lapse
upon expiration or prior termination of the Contract. The Contractor shall provide its full and timely
cooperation with any such inspections, post-payment audits or investigations. Such cooperation shall include,
but shall not be limited to, the Contractor’s obligation to make available its personnel and any relevant
documentation for such purposes at reasonable times and on reasonable conditions and to grant to UNHCR
access to the Contractor’s premises at reasonable times and on reasonable conditions in connection with such
access to the Contractor’s personnel and relevant documentation. The Contractor shall require its agents,
including, but not limited to, the Contractor’s attorneys, accountants or other advisers, to reasonably cooperate
with any inspections, post-payment audits or investigations carried out by UNHCR hereunder.
24. LIMITATION ON ACTIONS:
24.1 Except with respect to any indemnification obligations in Article 7, above, or as are otherwise set forth in the
Contract, any arbitral proceedings in accordance with Article 18.2, above, arising out of the Contract must be
commenced within three years after the cause of action has accrued.
24.2 The Parties further acknowledge and agree that, for these purposes, a cause of action shall accrue when the
breach actually occurs, or, in the case of latent defects, when the injured Party knew or should have known all
of the essential elements of the cause of action, or in the case of a breach of warranty, when tender of delivery
is made, except that, if a warranty extends to future performance of the goods or any process or system and the
discovery of the breach consequently must await the time when such goods or other process or system is ready
to perform in accordance with the requirements of the Contract, the cause of action accrues when such time of
future performance actually begins.
25. CHILD LABOR: The Contractor represents and warrants that neither it, its parent entities (if any), nor any of the
Contractor’s subsidiary or affiliated entities (if any), is engaged in any practice inconsistent with the rights set forth in
the Convention on the Rights of the Child, including Article 32 thereof, which, inter alia, requires that a child shall be
protected from performing any work that is likely to be hazardous or to interfere with the child’s education, or to be
harmful to the child’s health or physical, mental, spiritual, moral, or social development. The Contractor acknowledges
and agrees that the provisions hereof constitute an essential term of the Contract and that any breach of this
representation and warranty shall entitle UNHCR to terminate the Contract immediately upon notice to the Contractor,
without any liability for termination charges or any other liability of any kind.
26. MINES: The Contractor warrants and represents that neither it, its parent entities (if any), nor any of the Contractor’s
subsidiaries or affiliated entities (if any), is engaged in the sale or manufacture of anti-personnel mines or components
REV.: JANUARY 2010
GENERAL CONDITIONS OF CONTRACT FOR CONTRACTS FOR THE PROVISION OF SERVICES
PAGE 10
utilized in the manufacture of anti-personnel mines. The Contractor acknowledges and agrees that the provisions hereof
constitute an essential term of the Contract and that any breach of this representation and warranty shall entitle UNHCR
to terminate the Contract immediately upon notice to the Contractor, without any liability for termination charges or any
other liability of any kind.
27. SEXUAL EXPLOITATION:
27.1 The Contractor shall take all appropriate measures to prevent sexual exploitation or abuse of anyone by its
employees or any other persons engaged and controlled by the Contractor to perform any services under the
Contract. For these purposes, sexual activity with any person less than eighteen years of age, regardless of any
laws relating to consent, shall constitute the sexual exploitation and abuse of such person. In addition, the
Contractor shall refrain from, and shall take all reasonable and appropriate measures to prohibit its employees
or other persons engaged and controlled by it from exchanging any money, goods, services, or other things of
value, for sexual favors or activities, or from engaging any sexual activities that are exploitive or degrading to
any person. The Contractor acknowledges and agrees that the provisions hereof constitute an essential term of
the Contract and that any breach of these provisions shall entitle UNHCR to terminate the Contract
immediately upon notice to the Contractor, without any liability for termination charges or any other liability
of any kind.
27.2 UNHCR shall not apply the foregoing standard relating to age in any case in which the Contractor’s personnel
or any other person who may be engaged by the Contractor to perform any services under the Contract is
married to the person less than the age of eighteen years with whom sexual activity has occurred and in which
such marriage is recognized as valid under the laws of the country of citizenship of such Contractor’s
personnel or such other person who may be engaged by the Contractor to perform any services under the
Contract.
28. EXPLOITATION AND ABUSE OF REFUGEES AND OTHER PERSONS OF CONCERN TO UNHCR: The
Contractor warrants that it has instructed its personnel to refrain from any conduct that would adversely reflect on
UNHCR and/or the United Nations and from any activity which is incompatible with the aims and objectives of the
United Nations or the mandate of UNHCR to ensure the protection of refugees and other persons of concern to UNHCR.
The Contractor hereby undertakes all possible measures to prevent its personnel from exploiting and abusing refugees
and other persons of concern to UNHCR. The failure of the Contractor to investigate allegations of exploitation and
abuse against its personnel or related to its activities or to take corrective action when exploitation or abuse has occurred,
shall entitle UNHCR to terminate the Contract immediately upon notice to the Contractor, at no cost to UNHCR.
29. PAYMENT INSTRUCTIONS: UNHCR shall, on the fulfillment of the delivery terms, unless otherwise provided in
the Contract or purchase order, make payment by bank transfer within thirty days of receipt of the Contractor’s invoice
for the goods and copies of any other documentation specified in the Contract. Payment against the invoice referred to
above will reflect any discount shown under the payment terms agreed among the parties, provided payment is made
within the period required by such payment terms. The prices shown in the Contract or the purchase order may not be
increased except by express written agreement of UNHCR. Documents are to be sent to the address indicated in the
Contract or purchase order.
– oOOo –
REV.: JANUARY 2010
GENERAL CONDITIONS OF CONTRACT FOR CONTRACTS FOR THE PROVISION OF SERVICES
PAGE 11