Information Security
Sam's.Tech
bambergerexpansionproject.pdf
Bamberger Corp. Completed Denver Expansion Project
1
REQUEST FOR PROPOSAL (RFP)
IMPLEMENTATION OF
DEFENSE IN DEPTH
FOR THE
DENVER EXPANSION PROJECT
60 PINE ST
NEW YORK, NY 10005
(703)978-8581
6 SEPTEMBER 2014
Bamberger Corp. Completed Denver Expansion Project
2
SUMMARY AND BACKGROUND
Bamberger has recently completed a major corporate expansion project to into the Denver,
Colorado metropolitan region. Although the expansion went smooth and business is thriving,
we have noticed several areas of concern in the area of information security. Specifically, the
implementing contractor did not provide architectural drawings, nor do they seem to have
implemented any Defense in Depth.
The purpose of this request is to solicit proposals from various candidate organizations,
conduct a fair and extensive evaluation based on criteria listed herein, and select the
candidate who best represents the direction Bamberger wishes to go.
Bamberger Corp is a large mid-size business that was founded in 1985. The company is
focused on the manufacturing of gizmo and providing consulting services to start-up small
businesses in the gizmo sector. Bamberger prides itself as a leader in the implementation of
best practice processes and solutions. Our client base consists of commercial businesses as
well as local, state, and federal government organizations.
Bamberger’s headquarters is based in New York City, with an established presence in
Washington, D.C., Chicago and Atlanta. We are going nation-wide, expanding west beyond
the current operating region east of the Mississippi. Denver has been selected as the central
site for expansion and will include engineering and manufacturing functions as well as
regional management offices. The Chicago location for the corporate university location was
selected due to under-utilization of the existing workforce.
1. PROPOSAL GUIDELINES
This RFP represents the requirements for an open and competitive process. Proposals will be
accepted until 7 p.m. EST, October 7, 2014. Any proposals received after this date and time
will be returned to the sender without consideration. All proposals must be signed by an
official agent or representative of the company submitting the proposal.
Company’s may not outsource any portion of the work and must include a statement in the
project plan certifying that all work in preparation for this project was the sole work of the
company and that the work described therein shall be accomplished only by the submitting
company. Additionally, all costs included in proposals must be all-inclusive and must be
itemized to include an explanation of all fees.
Contract terms and conditions will be negotiated upon selection of the winning bidder for this
RFP. All contractual terms and conditions will be subject to review by Bamberger’s legal
department and will include scope, budget, schedule, and other necessary items pertaining to
the project.
Bamberger Corp. Completed Denver Expansion Project
3
Contract award will be based on corrective action taken as presented by the final RFP
deadline.
2. PROJECT PURPOSE AND DESCRIPTION
The purpose of this project is as follows: In order to provide Defense in Depth for the
Denver expansion site, senior level management has determined that a comprehensive
information security management plan be available to ensure Bamberger keeps data secure.
Bamberger is seeking an information security management plan provider that can provide a
turnkey plan that integrates a Defense in Depth implementation with the new Denver
environment.
Project Description:
There are a total of four buildings. Two 2-story buildings are co-located on a campus in
north Denver, conveniently near to both the airport and railroad terminus for shipping and
receiving. One of these buildings (DB1, for Denver Building 1)) is for the Engineering
group. The collocated DB2 is for manufacturing. The two buildings are connected by
underground conduit and have plenty of spare multi-mode and single-mode fiber strands. A
third 2-story building (DB3) has been procured for IT infrastructure and support staff, but it
is located in the Denver Technology Center (DTC), south of town. The fourth facilities
(DB4), per the desires of the new Western Region General Manager, are four adjacent floors
in a downtown office tower. The building locations are:
DB1/2: 127 East 120 th
Ave, Denver, Colorado 80233
DB3: 5251 DTC Parkway, Englewood, Colorado 80111
DB4: 16 th
Street, Denver, Colorado 80202.
The Engineering group has 450 employees. The Manufacturing group has 300 employees. IT
will has 50 employees and the downtown facility houses 125 employees. The 125 personnel
are broken down into: 15 personnel for the Regional General Manager’s office (floor 20), 20
employees for Legal (floor19), 15 personnel for HR (floor19), and 75 employees for Sales
(floors 17 & 18).
The Engineering group has 300 people on the 2 nd
floor and 150 people on the 1 st floor, as
there is a large lab on the first floor. All the Engineering people have their own dedicated
desktop PC and access to a printer, with an average of one IP addressable printer per ten
people.
The Manufacturing group has 100 employees who each need a dedicated desktop PC and
access to a shared printer with the same user load as Engineering. The remaining 200
employees share a pool of 50 “public” PCs and 10 printers.
In DB4, all 125 employees have their own PC and access to a printer at a rate of one printer
per employee; this is due to the large number of user dedicated (e.g. the GM wants his own
printer) and special (e.g. high speed color) printers.
Bamberger Corp. Completed Denver Expansion Project
4
For the IT group, everyone has their own dedicated desktop PC and access to a printer at the
same 10 to 1 ratio common in the company. And, 30 of the 50 employees have access to a
dedicated Unix workstation, 10 for management and administrative functions on servers,
databases, etc., and 20 for a small development group building in-house applications.
IT manages a collection of server farms in DB3. The Engineering farm is composed of 75
Unix servers. The Manufacturing farm has 10 Unix servers. The Sales farm has 10 high
availability Unix servers and 20 Microsoft Windows servers running critical sales
applications and databases. The Unix servers are deemed 24x7 critical, and extra measures
must be taken to protect against network failures and security risks. The Corporate farm has
10 Microsoft Windows class servers, shared among the HR, Legal and GM Offices groups.
While not deemed operationally critical, these servers do contain company sensitive
information that calls for limited access due to various compliance mandates.
Some traffic estimates were developed based on typical file types. Engineering and Sales in
particular move fairly large data files averaging 3MB in size throughout the day.
Additionally, Sales has the need to participate in desktop video conferencing using streaming
technologies. Sales has both transaction and analytical databases in the server farm.
Corporate, Legal, HA, and Manufacturing have no special traffic considerations as they
move simple Microsoft Office type of files averaging less than 1MB in size. In order to
ensure a virtually transparent work environment with the rest of Bamberger throughout the
United States and to ensure product quality, network delays for all Denver based employees
must not exceed 2.5 seconds for local network transactions, while wide area network
transaction delay must not exceed 6 seconds. The bidder must demonstrate that each member
of the given group will have at least the following bandwidth (considered an appropriate
blend of average and peek needs) to their local Denver servers:
Engineering: 950 Kbps
Manufacturing: 350 Kbps
Sales: 950 Kbps
Corp/Legal/HR: 350 Kbps
A design goal is to isolate traffic within groups as much as possible. Thus, the director of
manufacturing doesn’t want a heavy network traffic load from Engineering and Sales to
impact his production. Similarly, the Regional General Manager doesn’t want some clever
engineer sniffing the network and gaining access to highly sensitive, company private
documents and correspondence; similarly for HR and Legal. Confidentiality, integrity, and
availability of the network and data are a must!
The Engineering and Sales servers back up files and services that are run out of the New
York office. This is done one night per week and the estimate is that this function requires a
fairly constant average of 15 Mbps for 12 hours.
All Denver personnel need access to the corporate intranet with applications running out of
New York. The average load of this traffic during working hours is estimated to be 3.7
Mbps, with peeks of roughly 12 Mbps.
Bamberger Corp. Completed Denver Expansion Project
5
All Denver employees need access to the Internet.
The Western Regional Sales Director has his own local web servers (2) serving up sales
information, contact requests, etc., to potential western state customers. This information is
kept up to date with information found in the Sales server farm. Customer traffic to this site
is pretty light, no more than 8,500 Kbps average and 2.9 Mbps peek. Bamberger business
forecasters predict that 84% of westerns state customer business will likely originate from
California.
Bamberger does not own a cable plant within the greater Denver metro area and building are
connected via third party provider.
Bamberger’s network address space is 135.172.128/18. However, network engineers have
already determined that insufficient address exists to accommodate the Denver expansion.
Bamberger has made arrangements with W3C to obtain address space 135.160/11.
Network robustness and security is a vital concern for Bamberger. Gizmo is a highly
advanced technical device whose production and operational function are highly sensitive.
As a result, detailed product data are strictly controlled by regulatory statue to specific
Corporate and Engineering personnel. There are 15 Corporate personnel (the Regional
Manager, two Senior Counsels) and 12 Engineers with access to the gizmo data must be
isolated from the rest of Bamberger the personnel without access to gizmo data. Bamberger
must have a method to bring non-sensitive data back and forth across the isolated
environments. Bamberger estimates that up to 5GB amounting to 6,000 files per week move
between the environments.
While the rare outage of a few hours would be acceptable, anything longer than this would
not. Sales is particularly concerned about access to their 10 high availability Unix servers.
Therefore the successful RFP bidder must ensure to address both continuity of operations for
all Denver operations and near 24x7 operations for the Sales high availability Unix servers.
Because of the forecasted California business base and our government partners, the
proposed plan must ensure compliance with published statues, policies, and best practices
within the gizmo sector.
3. PROJECT SCOPE
The scope of this project includes all planning, architecture, and technical computation
artifacts necessary for demonstrating the veracity of the bidder’s proposed information
security implementation plan. Specifically:
Deliverable 1: Securing the Network
Bamberger Corp. Completed Denver Expansion Project
6
4. REQUEST FOR PROPOSAL AND PROJECT TIMELINE
Request for Proposal Timeline:
Deliverable Due Date
Securing the Network 7 Oct
Deliverables that fail to meet the announced deadlines will be returned without consideration.
Bamberger will announce remuneration for each bidder on 21 October 2014.
5. BUDGET
Bidders must provide detailed costing data for deliverables of advertised cost of identified IT
equipment, software, services, and network plant. Also include sourcing data such as
websites or catalog location data. Costs should be stated as one-time or non-recurring costs
(NRC) or monthly recurring costs (MRC).
6. BIDDER QUALIFICATIONS
Bidders should provide the following items as part of their proposal for consideration:
None.
7. PROPOSAL EVALUATION CRITERIA
Bamberger will evaluate all proposals based on the detailed criteria to be delivered
separately.
Joseph T. Walker
Bamberger Corp 60 PINE ST
NEW YORK, NY 10005
(703)978-8581
