Specifications include, but are not limited to:APPLICANTS PLEASE NOTE: This Scope of Work is provided by MassTech as a reference and starting point for an Applicant’s proposal. It is not intended to be exclusive or inclusive. Applicants are encouraged to propose modifications and suggestions for improving the scope of the audit. Phase I – Physical Network Discovery The initial phase of the assessment will focus on MassTech’s network electronics, servers, storage, end- user devices, communications links and running services. Contractor’s engineer will collect said data through a combination of means, including hands-on systems inventories, software inspection tools, and a review of existing network documentation. The level, accuracy, and age of the existing documentation will dictate how much manual data generation will be necessary. Contractor will provide a Senior Systems Engineer onsite in MassTech’s Westborough facility to complete this phase. The list below highlights some of the systems data that will be gathered: Review of physical security surrounding Masstech site. Physical access controls, locked doors, and security of backup servers and storage. Two employee interviews on their day to day computer experiences and likes and dislikes. Analysis of network speed and bandwidth capacities. Review of desktop computer and laptop hardware, including OS and overall performance and health. Server hardware specifications, operating system (“OS”) version and revision levels, running services and hosted applications. Storage solutions, utilization, and capacities. Network electronics topology, inter-closet links, configurations of ACLs, VLANS, subnets, etc. Sample of end user systems, hardware, OS, and local applications in use. Remote site links, hardware in use, bandwidth available, remote installed services. Distribution of network core services, such as DHCP, DNS, WINS, etc. External facing devices, such as firewalls, routers, web servers, gateways, etc. It is estimated that Contractor’s engineer will be onsite to collect this data. All collection techniques are designed to be non-interruptive to MassTech’s daily business operations. If any system resets or outages are required for collection of the data, Contractor will schedule this in advance with the MassTech staff. Request for Proposals RFP No. 2015-GA-03 Information Technology Audit and Assessment Services
