Objectives

The primary objective of this tender is to appoint a qualified and experienced service provider to supply, implement, manage, and support a Microsoft 365 cloud backup and data protection solution for South Cape TVET College over a period of 36 months. The solution aims to ensure secure, compliant, and rapid recovery of Microsoft 365 data across the College’s multi-domain environment, safeguarding against data loss, cyber incidents, and disasters.

Scope

The scope of work includes delivering a fully managed Microsoft 365 backup and data protection solution with capabilities to:

• Provide full backup and restore for mailboxes, calendars, contacts, archives, sites, document libraries, lists, metadata, permissions, user files, versions, team structures, channels, chats, and conversations.
• Implement automated backup schedules (daily, weekly, monthly).
• Offer granular restore options for individual emails, mailboxes, files, SharePoint sites, Teams, and channels.
• Support restore to original or alternative locations, and export in standard formats.
• Define recovery objectives (RTO and RPO).
• Ensure end-to-end encryption of data in transit and at rest.
• Support immutable backups, anti-ransomware features, and compliance with POPIA and relevant ICT standards.
• Disclose data center certifications (e.g., ISO 27001, SOC 2) and security compliance attestations.
• Provide monthly operational reports on backup success, storage utilization, and restore activities.
• Support proactive management, including backup optimization, capacity management, and health checks.
• Provide comprehensive documentation on architecture, policies, and procedures.

Technical Requirements

The technical specifications for the backup solution include:

• Support for minimum 30 TB initial capacity, expandable as needed.
• Backup and restore for core workloads: Exchange Online, SharePoint Online, OneDrive, Teams.
• Granular restore capabilities for emails, files, SharePoint sites, Teams, and channels.
• Automated backup schedules with daily, weekly, and monthly options.
• Support for immutable backups and anti-ransomware protection.
• Encryption of data in transit and at rest.
• Compliance with POPIA and ICT governance/security standards.
• Disclose data center certifications (e.g., ISO 27001, SOC 2) and security compliance attestations.
• Monthly operational reporting on backup success, storage, and restore activities.
• Support for proactive management, including backup optimization and health checks.
• Provision of detailed architecture, backup policies, and restore procedures documentation.

Skills Requirements

The successful service provider must demonstrate:

• Proven experience in implementing Microsoft 365 cloud backup and data protection solutions.
• Technical expertise in cloud backup architecture, encryption, and security standards.
• Capability to support automated backup scheduling, granular restore, and disaster recovery planning.
• Knowledge of compliance requirements such as POPIA and ICT security standards.
• Ability to provide comprehensive documentation, operational reports, and proactive management services.
• Strong customer support skills, including service desk support with defined SLA response and resolution times.
• Experience in managing data center certifications and security compliance attestations.
• Capacity to deliver ongoing support, health checks, and capacity management.