Storage Area Network Configuration Review

Storage Area Network Configuration Review

The Environment Agency has outsourced all of its IT service provision and service delivery capabilities, as part of the delivered service a utility SAN service has been implemented in the Agency’s two data centres based on HP SAN technologies.

Storage Area Network (SAN) Configuration Review

Reference number: EA – 30689 – AP

Deadline date:03/12/2012

This deadline is for… Registering an interest in tendering

Contract value:£15,000 – £20,000

Location where the contract is to be carried out: United Kingdom

Is this suitable for smaller suppliers? Yes

Is this contract suitable for a voluntary, community and social enterprise organisations? Yes

Name of the buying organisation: Environment Agency

 

Description of the contract

The Environment Agency has outsourced all of its IT service provision and service delivery capabilities, as part of the delivered service a utility SAN service has been implemented in the Agency’s two data centres based on HP SAN technologies. Since the managed service transition the utility SAN service has been used to provide enterprise class storage to support the delivery of the Environment Agency’s Intranet applications. This service is now being extended to also support delivery of the Agency’s restricted applications and the Internet De-Militarised Zone (DMZ) systems. A virtual SAN has also been provisioned to support the Agency’s test and integration systems. The objectives of this review are : • To audit the Agency’s managed SAN infrastructure and SAN management components to identify any security vulnerabilities and detail recommended countermeasures; •to audit the Agency’s managed SAN infrastructure and SAN management components to identify any configuration issues which deviate from HMG, industry or vendor best practice and detail any recommended countermeasures; • To audit the Agency’s managed SAN infrastructure and SAN management processes to identify any operational issues which may impact the ability to deliver service and detail any recommended countermeasures; • To provide assurance that the various domains of data within the SAN have been correctly segregated from each other and that access to data sets between domains is not possible and that access within domains is controlled. This will include the SAN hosted operating systems of the blade and virtual servers as well as Agency business data sets. However, there is no requirement for Penetration Testing in undertaking this work. • To produce a final status report on the security, configuration and operational status of the Agency’s managed SAN infrastructure and SAN management components, detailing the approach taken, procedures followed, the results of any review and the actions proposed to be implemented. For further information please see attached Terms of Reference Document.

 

Classification of the contract

72150000 Computer audit consultancy and hardware consultancy services

72000000 IT services: consulting, software development, Internet and support

 

Additional information

Contract type: Services – Unspecified

Is it a framework agreement? No

Is this contract related to a programme of funding? No

Contract will be awarded based on: Most economically advantageous tender in terms of: The criteria stated in the contract documents

Estimated length of contract: 20 Days

 

Who to contact

Contact name Alexandra Parsons

Organisation name Environment Agency

Address Horizon House, Deanery Road, Bristol, BS1 5AH

Telephone

Extension number:

Fax

How to apply

The Environment Agency would welcome expressions of interest from suppliers with experience in undertaking SAN and security reviews. Ideally suppliers must have HP SAN accreditations and / or relationships as well as any more general accreditations within the storage and storage management market sector. Key personnel proposed by suppliers should have current SC or above secuirty clearance. Please contact Alexandra Parsons by COP on 03 December 2012 to register your interest. Any expression of interest received after this will be deemed out of time. After the expression of interest deadline the tender document for this work will be issued. A further 2 weeks will be given for the completion of tenders.