Tender For Rfp-Cloud-Migration-Audit; 1 9 Scope of Work 2 Verification of on-premises residuals in data centre and Disaster recovery centre & activities Completed by Vendor. Please clarify the extent of access that will be provided to the audit firm for verification of residuals in the data centre and DR site. Will remote access be allowed or is physical inspection mandatory? Access shall be provided on need basis. 2 9 Scope of Work 2 Establishment of consumption of 3rd party licenses in cloud environments and verification of associated costs. Kindly specify the types of 3rd party licenses involved and whether license usage reports will be provided by AIC or need to be independently generated by the audit firm. Details of third-party licenses and the process for license usage reporting will be clarified by AIC during the course of the engagement with successful bidder. 3 10 Scope of Work 2 Suggestions for maximizing the benefit using the multicloud approach of OCI and AWS. Is AWS currently part of AIC’s infrastructure or is this a forwardlooking recommendation? Will access to AWS environments be provided for assessment? Yes, AWS is currently a part of AIC’s infrastructure. However, access may be extended on a need-to-have basis, as per requirements. 4 17 Eligibility Criteria 3.23 Bidder should have experience of similar work exposure (on premises and cloud) for any Central Government, State Government, or any PSU... Can you confirm whether experience with private sector BFSI clients will also be considered valid if supported by relevant documentation? As per RFP eligibility criteria. 5 6 General Details - Consortium: Not Allowed Will subcontracting of specialized tasks (e.g., license audit or security validation) be permitted if declared upfront and managed under the bidder’s responsibility? As per RFP terms and conditions 6 20 Project Timelines 4 T+6 weeks: OCI migration assessment and recommendation report for OCI tenancies Will AIC provide access to historical migration documentation and vendor reports to support the assessment within the stipulated timeline? Access shall be provided on need basis. 7 14 Pre-Bid Queries 3.11 Format for pre-bid queries and clarifications is as per Annexure N. Can AIC confirm if the Excel format mentioned in Annexure N needs to be submitted as an attachment or pasted in the email body as well? Both options are allowed — the Excel format mentioned in Annexure N may be submitted either as an attachment or pasted in the email body 8 17 Eligibility Criteria 3.23 Bidder should have a minimum of 5 (five) Nos. of Quality manpower... Is there a specific format or template required for submitting resource certifications and experience declarations? Can resumes be attached? Please refer clause 3.23 Evaluation Methodology, Eligibility & Technical Criteria point 5 Proof to be Submitted where following is mentioned Bidder should submit the valid certifications of resources and undertaking letter in case of experience of resource. Undertaking on bidder letterhead with employee name, certification documents to be submitted or Relevant certification proof of the individual employees to be submitted. 9 6 General Details - Document Download Start Date: 06.08.2025 Will there be any corrigendum or updated version of the RFP released post pre-bid meeting? If yes, what is the expected timeline? All relevant updates w.r.t RFP shall be published on companys website, GeM portal and CPPP. 10 10 Scope of Work 2 Cloud guard score validation Please clarify whether the audit firm will be provided access to OCI Cloud Guard dashboards or reports for validation purposes. Access shall be provided on need basis. 11 10 Scope of Work 2 Comparison of used cases on lift and shift to OCI cloud and observations on best practices to be followed. Will AIC provide documentation or access to historical use cases and migration strategy documents to support this comparison? Access shall be provided on need basis. 12 10 Scope of Work 2 Database version & patch level Will the audit firm be provided access to database instances or reports to verify patch levels? Is there a preferred tool for this validation? Access shall be provided on need basis. The bidder may provision required tool as per scope of work defined in the RFP. 13 10 Scope of Work 2 Fast connect-IPSEC VPN configuration Will network topology diagrams and VPN configuration details be shared with the audit firm? Is any hands-on validation expected? Required details shall be shared with the successful bidder. 14 21 Project Timelines 4 T+8 weeks: Residual confirmation, comparatives of the Golden copy... Will AIC provide a baseline or reference version of the Golden Copy for comparison? What format is expected for submission? Required details shall be shared with the successful bidder. 15 14 Pre-Bid Queries 3.11 Only two authorized representatives of the Bidder’s organization will be allowed to attend the prebid meeting... Will the pre-bid meeting be recorded or minutes shared with all bidders post meeting? All relevant updates w.r.t RFP shall be published on companys website, GeM portal and CPPP. 16 9 Scope of Work 2 Cloud Migration Audit on Oracle Cloud Infrastructure (OCI) cloud including verification of migration activities, golden copy, storage/compute allocation, backups, license usage, DR config, and recommendations. Clarify whether audit covers only post-migration verification or also readiness assessment & methodology review. As per scope of work defined in the RFP. 17 9 Scope of Work 2 Scope includes verification of storage/compute allocation, backup setup, DR configuration, license costs, tenancy architecture, network security design, and cloud guard score validation. Confirm if the audit must also cover configuration review, security posture assessment, DR validation, and cost optimization. As per scope of work defined in the RFP. 18 8 Overview of RFP 1.3 Objective is to conduct OCI migration assessment and recommendation report for two OCI Tenancies. Confirm if migration is to a single or multiple cloud providers; name the cloud providers to be audited. Migration in two tenancies of OCI 19 9 Scope of Work 2 Audit requires verification of on-prem residuals, tenancy architecture, backup policy, and network design. Will AIC provide access to cloud consoles/logs and migration documentation, or should bidder provision independent tools? Access shall be provided on need basis. 20 9 Scope of Work 2 Objective is compliance with industrys best practices and regulatory requirements. Specify if RBI, IRDAI, CERT-In, or other specific regulatory guidelines need inclusion. As per scope of work defined in the RFP. 21 9 Scope of Work 2 Verification of data migration using automated tools from on-premises to OCI cloud. Confirm if full dataset validation is required or sample-based verification is acceptable. As per scope of work defined in the RFP. 22 20 Project Timelines and Payment of fees 4 The contract period is 2 months from PO issuance. Clarify if 2-month duration starts from LoA/PO or from system access date. As per RFP terms and conditions. 23 20 Project Timelines and Payment of fees 4 Milestones include interim and final audit reports within specific weeks. Confirm if weekly progress updates and preliminary reports are expected. As per RFP terms and conditions. 24 9 Scope of Work 2 Deliverables include audit report and recommendation report for OCI Tenancies. Provide any prescribed templates or formats for audit reports and recommendations. The bidder may use industry standard templates or formats for audit reports and recommendations. 25 20 Project Timelines and Payment of fees 4 Final report acceptance after comparison of golden copy and residuals. State AICs review/approval timeline for final report. As per RFP terms and conditions. 26 17 Evaluation Methodology - Eligibility & Technical Criteria 3.23 Bidder must have experience of similar work exposure for PSU/Govt preferably in BFSI. Can private sector projects be considered or only PSU/Govt work? As per RFP eligibility criteria. 27 15 Sub-Contracting 3.18 Bidder is not allowed to subcontract or form consortium for any work in scope of RFP. Confirm if consortium bidding or subcontracting is allowed. As per RFP terms and conditions 28 17 Evaluation Methodology - Eligibility & Technical Criteria 3.23 Purchase order/Billing for bidder over last 3 years required. Will work orders + completion certificates suffice without client sign-off? Please refer clause 3.23 Evaluation Methodology, Eligibility & Technical Criteria point 4 Proof to be Submitted where following is mentioned Documentation: Proof of respective Purchase Order /relevant Invoices and Agreement for required projects 29 6 Bid Details - Minimum average turnover of INR 48 Lakhs in last 3 years, proportionate for younger firms. Confirm if proportionate turnover calculation per GeM rules applies for firms <3 years old. Please refer clause 3.23 Evaluation Methodology, Eligibility & Technical Criteria point 2 & 3. 30 20 Project Timelines and Payment of fees 4 Payment is milestone-based: 25%-50%-25% against deliverables. Can payment terms be aligned to partial payment on interim report submission? Please refer clause 4 Project Timelines and Payment of fees. 31 21 Contract 4.1 Overall penalty including LD capped at 10% of TCO. Clarify if LD cap basis is contract value or project value? Overall penalty including LD capped at 10% of TCO. 32 16 Evaluation Methodology 3.23 L1 bidder selected based on Least Cost System (LCS). Confirm if only L1 price is considered, without technicalcommercial weighting. Please refer clause 3.23 Evaluation Methodology, II. Commercial Bid Evaluation. 33 6 Bid Details - ePBG Duration required: 4 months. Does 4-month validity include post-audit warranty period? Please refer clause 5.13 Performance Security. 34 9 Scope of Work 2 Independent assessment of OCI facility and completed migration tasks. Confirm if remote execution is allowed with occasional onsite visits. Access shall be provided on need basis. 35 9 Scope of Work 2 Audit requires validation of multiple system and network configurations. Who coordinates credentials, VPN access, and NDA formalities? Required details shall be shared with the successful bidder. 36 36 Terms and Conditions 5 Right to alter and amend contract terms at any time. If migration scope changes mid-audit, will contract variation be issued? As per RFP terms and conditions 37 36 Terms and Conditions 5 Indemnity clause for bidder performance. Limit bidder liability to findings/recommendations, not postaudit remediation outcomes. As per RFP terms and conditions 38 8 1.4 Current AIC IT Landscape Kindly share tenancy architectures Required details shall be shared with the successful bidder. 39 9 2.1 b Comparison of Golden copy to ascertain the verifications done under (a) Whether Golden Copies created before cut-off? If so what is validity of the old data vs current data on OCI ? From Migration date to till date, the data shouldve undergone constant changes and will be difficult to compare. Required details shall be shared with the successful bidder. 40 9 2.1 c(ii) During Migration, automated tool was used to migrate the data from on-premises to cloud on Lift & Shift basis by AIC’s ImV1 in consultation with AIC’s MCSP1 Please mention the tool so that it will help to understand the configurations Required details shall be shared with the successful bidder. 41 9 2.1 e Verification of FMS and Credence application migration activity as given in a to c. Is FMS and Credence applications still running on Premise? The FMS and Credence applications are hosted and running in OCI. 42 9 2.2 Scope of the Specific assessment in OCI Kindly share tenancywise applications Required details shall be shared with the successful bidder. 43 10 2.2 n On-premises residual task – Decommissioning Can you confirm still on-premise servers are running? Required details shall be shared with the successful bidder. 44 16 3.23 I -Sr No 5 Eligibility & Techchnical Criteria -Sub Point 5 - Employee & Experience We would like to clarify on what documentation you need in this regards ? Please refer clause 3.23 Evaluation Methodology, Eligibility & Technical Criteria point 5 Proof to be Submitted where following is mentioned Bidder should submit the valid certifications of resources and undertaking letter in case of experience of resource. Undertaking on bidder letterhead with employee name, certification documents to be submitted or Relevant certification proof of the individual employees to be submitted. 45 27 5.13 i Performance Bank Guarantee Submission is MSME exempted for this requirement ? We would like to seek an exception for MSME Please refer clause 5.13 Performance Security for exemption. 46 N.A N.A Audit exercise will be done remotely with the few management meetings to discuss findings , we will need remote access to the data of AIC envionement for assessment & will need help of internal teams to run the scripts and commands under our guidance to get the required inputs for us - We need confirmation of AIC for the same As per RFP terms and conditions
