STATEMENT OF WORK FOR. County of Los Angeles Chief Executive Office

Transcription

1 STATEMENT OF WORK FOR County of Los Angeles Chief Executive Office 1. Introduction This Statement of Work ( SOW ) is made between a McAfee Certified Partner ( McAfee Partner ) and County of Los Angeles, ( Dept ). McAfee Partner and Dept may hereafter be referred to as the Parties and individually as the Party. 2. Description of Services to be Rendered Reviewing existing epo architecture and determine epo network usage Making recommendation for epo architecture upgrades Analyzing epo agent push and an alternative to SMS push Reviewing existing Dept software release and patch levels and update policies Verifying Systems met Hardware/Software specifications for upgrade Reviewing existing epo Hardware/Software configuration Recommending preparation steps for epo server upgrade Making recommendation for product upgrades Determining upgrade path to Pilot Group Review of existing HIPS Environment Consultant and Dept contact(s) will review the current configurations, network architecture, business processes and security policies to facilitate a plan for the HIPS upgrade deployment. Tasks include: Review security policies and business process documents to ensure implementation is in accordance with the business practices. Review network architecture. Review epo Directory structure and policies to facilitate deploying HIPS to network. Identify Pilot Group IP hosts that will be used for the baseline installation of HIPS Review security policy development for HIPS (IPS, Firewall and Application Blocking) Review Best Practices for the implementation of HIPS Develop upgrade plan: o Determining upgrade path to Pilot Group o Determine upgrade path to production rollout Upgrade of epo and VirusScan Following the development of the upgrade plan, Consultant will assist in the upgrade, configuration, and testing of the new technology. Specific tasks may include the following: Backing up of existing epo server and Database (if required) Installation of the new epo Server software Identify Pilot Group members Creating/restoring/refining of the epo database, directory structure and repositories Migrating existing epo policies/database to new environment Upgrading new environment to the latest supported version of epo Configuring of epo policies and tasks Rolling out of the epo Agent (latest version) and VirusScan software to Pilot Group Validating of the upgraded Pilot implementation Rolling out of the epo Agent and VirusScan software to remaining nodes Validating of the upgraded network implementation Page 1of

2 Installation of Site Advisor Consultant will assist in the installation, configuration, and testing of the new technology. Specific tasks may include the following: Backing up of existing epo server (if required) Installation of the new Site Advisor Server software Identify Pilot Group members Creating/refining of the Site Advisor database, directory structure and repositories Migrating existing Site Advisor policies/database to new environment Upgrading new environment to the latest supported version of Site Advisor Configuring of Site Advisor policies and tasks Rolling out of the Site Advisor software to Pilot Group Validating of the upgraded Pilot implementation Rolling out of the Site Advisor software on as many nodes as time permits Validating of the upgraded network implementation Upgrade of HIPS Following the development of the upgrade plan, Consultant will assist in the upgrade, configuration, and testing of version 7.x. Specific tasks may include the following: Backing up of existing epo server and Database Install latest HIPS on one (1) epo server Add HIPS clients into the epo Repository Check User accounts and privilege access levels for all appropriate HIPS Policy Administrators. Check ownership of HIPS security policies to Policy Administrators Deploy HIPS agents to Pilot Group. Test/check basic HIPS security policies, Firewall and Application Blocking to ensure proper implementation of protection mode reactions Test/check HIPS security policies to the appropriate sites, groups and systems within epo Knowledge Transfer McAfee Partner shall provide informal, hands-on knowledge transfer to representatives selected by Dept on all McAfee technologies, and shall occur during the course of the engagement. Knowledge transfer is essentially knowledge sharing between the McAfee Partner consultant representative(s) and Dept selected representatives Work Product/Reports McAfee Partner report will be delivered as part of the engagement. Executive Summary Solution Implementation Overview Solution Deployment Recommendations Overview of Key Knowledge Transfer Activities Issues and Resolution 3. Schedule for provision of Services The Services will begin on a mutually agreeable date; the work product and reports will be provided to Dept as part of the provision of the Services. Page 2 of 5

3 4. Contact Information Dept Contact: County of Los Angeles - Chief Executive Office 500 West Temple St., Rm 781 Los Angeles, CA jignacio@ceo.lacounty.gov 5. Dept Responsibilities Dept is responsible for: Obtain approval through the Dept s Change Control system to: o Implement firewall rules and open ports and protocols for the NAC system o Connect new systems to the network o Integrate with dept s existing network and security applications o Provide access to existing systems and hosts o Configure Active Directory Group Policy Objects/logon scripts o Deploy McAfee Agents to host o Deploy and configure software modules the groups of hosts. Designating a Project Manager who will be accountable for: o The success of the project, the coordination of any interviews, meetings, document reviews, and Dept responsibilities o Acting as the McAfee Partner s primary management point of contact during the services engagement o Approving additional work and charges, if necessary Designating a Project Technical Lead who will be Consultant s primary contact during the implementation and will be accountable for: o Submitting any Change Management requests and completing all related activities o Obtaining authorized maintenance windows, as necessary, for use during the services engagement Making sure resources will be made available for knowledge transfer Providing consultant with: o Reasonable access to required network locations and services including but not limited to: server console access and account maintenance. o Administrative systems/network access as needed to all Dept workstations and servers for the project, including administrator passwords to servers included in scope, Internet access (FTP, HTTP), and access to server consoles o Access to Dept facilities as required for performance of the Service o A work area for consultant with telephones, printer, network and Internet connectivity Validating that all Windows machines (NT and higher) have the latest Microsoft Service Packs Validating, in the case of multiple domains, that trust relationships exist Validating that all workstations, databases and servers meet hardware and software requirements specified in the relevant Installation/Product Guide Validating that all applicable software licenses have been installed as specified in the relevant Installation/Product Guide Performing any necessary backups Provide any Dept specific network access control policies if different than McAfee s best practice. Page 3 of 5

4 Access to required documentation Examples of documentation include but not limited to requirements documentation, system/subsystem specification documents, functional description documents, and data base specifications, if available. Access to appropriate personnel McAfee Partner will work with the technical project lead to arrange requirements gathering and implementation meetings to include Dept representatives in order to accomplish the work. The Dept will make these people available as needed and mission permits. 6. Recognized Holidays McAfee Partner is not required to perform Services on the following days: New Year s Day, Martin Luther King Jr. s Birthday, President s Day, Memorial Day, Independence Day, Labor Day, Columbus Day, Veteran s Day, Thanksgiving Day, and Christmas Day. 7. Travel Requirements All actual travel expenses such as airfare, lodging, meals and ground transportation are included in the purchase. 8. Personnel Requirements McAfee Partner employees performing Services shall be required to comply with all Dept installation rules and regulations applicable to the conduct, safety, security, and procedures governing site entry and exit. McAfee Partner employees shall be proficient on all of the systems and applications that are employed at the command. All McAfee Partner personnel must be U.S. citizens and those requiring access to the Dept site must possess an appropriate security clearance as stated herein. 9. Scope of Work McAfee Partner agrees to provide to Dept the Services, including any Work Product, as are described in this SOW for the benefit of Dept. McAfee Partner warrants that the Services will be performed by qualified McAfee personnel in a professional and workmanlike manner consistent with industry standards. McAfee Partner may employ a subcontractor to perform the Services, provided that McAfee Partner assumes joint and several liability for such sub-contractor. For purposes of this SOW McAfee Partner shall mean a McAfee Certified Partner and its subcontractors. No software will be produced by the Services, and any license for software may only be granted by McAfee to Dept through a separate software license agreement. This written SOW sets forth the entire understanding of the Parties as to the Services and may not be modified except in a writing executed by both Parties. 10. Government Furnished Property and Services The Dept shall furnish working space, including necessary utilities, electrical power, test data files/forms to accomplish tasks associated with this SOW. The Dept will supply office space, office supplies, computer equipment, telephone, and reproduction, Standard Operation Procedures, applicable regulations, manuals, texts, briefs, and other materials associated with the project and the hardware/software noted throughout this SOW as required. McAfee Partner shall be responsible for the routine work day care, maintenance, and cleanliness of space provided. The Dept will also provide computer resources to support all work areas on an as required and available basis. Page 4 of 5

5 11. Payment Schedule McAfee Partner will send all invoices to the Dept at the following address: County of Los Angeles - Chief Executive Office 500 West Temple St., Rm 781 Los Angeles, CA jignacio@ceo.lacounty.gov 12. Change Management Additional tasks considered outside this SOW or any delay and/or wait-time on this project will be defined, documented and mutually agreed upon by McAfee Partner and Dept prior to beginning any new activity pursuant to the terms of the change control procedure below. Dept may request Changes to this SOW by informing McAfee Partner in writing of the proposed Changes. Within five (5) business days following receipt of this request, or such additional time as required, McAfee Partner shall provide Dept with a written response to specify the cost and alteration in term, if any, ( Change ) to the SOW. In order for a Change to be effective and binding upon the Parties it must be in the form of Change Order issued by the Dept. Page 5 of 5