RFI C001012 - Cloud Broker Management & Operation Services

ITS is seeking input from interested parties on Cloud Broker Management and Operations Services. NYS ITS follows the Cloud Computing Policy ITS-P19-002. This policy designates NYS ITS as New York State’s Cloud Broker. NYS ITS is seeking to improve its Cloud Broker Management and Operations Services Model.

ITS seeks accountable operator(s) capable of providing governed access to public cloud, private cloud, SaaS/PaaS/IaaS, AI-enabled offerings, security tools, marketplace transactions, subscription lifecycle management, FinOps, third-party terms governance, and statewide reporting.

ITS is conducting this RFI solely for the purpose of gathering information related to new, innovative, and cost-effective solutions for Cloud Broker Services. This RFI will not directly result in the award of a contract; however, the information may be used for planning purposes.

ITS intends to procure all Public Cloud IAAS, PAAS, XAAS and SAAS solutions as well as hardware and software solutions that enable Private Cloud Services that reside in NYS operated Data Centers through this new model as depicted in Attachment 2 Diagrams.

Dedicated Operator Support

• Dedicated team to support NYS ITS and access to Technology Subject Matter Experts
• Support for all required operations elements

Cloud Broker Operator Portal

ITS anticipates the operator would provide access to a Portal that has role-based access controls and NYS Single Sign On (SSO) integration support. The portal needs to support export of data and use of API’s as well as ability to audit usage. NYS ITS needs to be able to access key performance indicators in a Dashboard format.

• Marketplace catalog of all underlying vendors
• SKU/catalog search
• Repository of terms and conditions acceptance packages for underlying vendors
• Documentation for workflows for quotes and orders
• Tracking of renewals via a calendar

Vendor Onboarding

• Onboarding process via a standard process and methods to expedite to meet an emergency need
• Confirmation of adherence to security and compliance standards
• Identification of any Artificial Intelligence use and risk assessment results
• Pricing Terms
• Offboarding and retirement process

Cloud Financial Operations (FinOps)

• Consolidated billing
• Ability to have agency/project/account/tag reporting
• Identification of reserved instance/savings plan recommendations
• Monthly raw data export
• Ability to access FinOps data via API feeds that will integrate with NYS ITS systems
• Anomaly detection
• Access to chargeback/showback information

Terms Governance

• Adherence to NYS ITS Terms and Conditions
• Repository of all agreements for NYS ITS/Cloud Broker Operator/Vendor
• Process to ensure terms change notification
• Renewal and version tracking

Security and Compliance

• The support structure and all NYS data must reside in Contiguous United States (CONUS) meaning the 48 contiguous States and the District of Columbia.
• SOC 2 / ISO / FedRAMP evidence where applicable
• Disclosure of cloud architecture
• Vulnerability disclosure
• Supply Chain Risk Management best practices including SBOM and HBOM

Please email your Response to: EA@its.ny.gov with the subject line “Response to RFI C001012”, no later than the RFI Response Due Date shown in Section 1.1 Pertinent Dates.

Please submit your response to the questions as an MS Word Document using Attachment 1 as the format. The total length of the document should be no longer than **30 pages**. Any attachments will count towards the 30-page limit.

Faxed responses and mailed responses will not be accepted. All responses shall be submitted via email to ea@its.ny.gov

Vendors may submit more than one submission for the purpose of offering alternative possibilities, but each response must be separate and complete.

Responses received after the deadline may or may not be reviewed at the discretion of ITS.

This RFI does not fall under the requirements of State Finance Law §§139-j and 139-k (the Procurement Lobbying Law) and there is no restricted period.