Appendix 3: Request For Proposal-ABCD Company Request for Proposal - Business Continuity and HIPAA Business Continuity Management in the Health Care Environment [Electronic resources] نسخه متنی

Appendix 3: Request For Proposal-ABCD Company Request for Proposal

I INTRODUCTION

Healthcare organizational Overview

The ABCD Company has been established to provide health care services to its customers.

The Headquarters for ABCD is located in CITY, STATE. This facility acts as the focal point for the healthcare organization and also houses the ABCD data center.

Purpose

ABCD is currently engaged in the development of a business continuity plan. As part of this process, ABCD has reviewed its business applications to determine those which are absolutely essential to the running of its business and would need to be supported at an alternate site in the event of a disaster. ABCD has made a determination of the minimum facility and system resources required to run those critical applications.

In the event of a disaster, ABCD intends to have the communications abilities restored within 2 days after the declaration of a disaster. Along with the restoration of the communications abilities, ABCD also intends to relocate up to 150 employees at an alternate work area site. This site will need to provide telephones, computer connections and working space for these 150 individuals.

Within 2 days after declaring a disaster, ABCD intends to restore their Local Area Network to provide access to all critical applications that will be used by ABCD. ABCD is planning to have PC terminals for all employees who will be located at the alternate work area site.

As a result, ABCD has issued this RFP for business continuity services. The intent of this document is to define the parameters and requirements of the desired business continuity services. Vendors are requested to review their capability to meet this time frame through the supply of a hot site and work area capability.

A hot site is deemed to be a fully equipped and operational data processing facility capable of meeting ABCD's minimum resource requirements. It must contain not only the required computer equipment, but also all of the necessary support facilities including power, chillers, air conditioners, telecommunications equipment and lines, etc.

The work area site must have the ability to appropriately provide space for up to 150 employees to continue the operations of the healthcare organization. The office space should provide for desk space, computer connections, PC's and telephones for all the employees. In addition, it must have the needed support equipment including fax machine and copiers.

In the event of an extended outage, ABCD intends to install equipment into a contracted cold site. A cold site is deemed to be an empty computer room ready to receive and support a replacement computer configuration equivalent to that set out in this RFP. It is preferable that the cold site be co-located with the hot site facility.

Recovery Configuration Specifications

Based upon the project which ABCD has performed to identify its needs in the event of a disaster, the vendor will be required to provide and maintain a fully equipped hot site and work area facility, including as a minimum the system configuration set out below. Vendors should indicate in their response, their compliance or non-compliance with each item. Variances should be identified and documented. Alternate solutions may also be presented for consideration including telecommunications equipment and configurations (e.g., high-end Cisco routers, termination of client owned Tl lines at the recovery site).

Computer Hardware

IBM RS/6000

Processors:

Other Hardware:

Tape Drives:

Terminals Attached Locally:

LAN

Processors:

Other Hardware:

Workstations

Processors:

Operating Systems Software

RS/6000 SP2

AIX 4.15

RS/6000

AIX 4.14

LAN

NT 3.51

Windows for Workgroups

Version 3.11

Communications

Dial-Up Lines:

Communications Services:

Test Time

Vendor should provide test time for each contract year. Test time should be included in the proposed hot site services.

ABCD should have the right to purchase additional test time on the hot site configuration for the purposes of testing ABCD's business continuity plan. The additional test time should be scheduled in blocks of eight hours and should be scheduled in advance.

The vendor should provide a copy of their test scheduling policy.