Objectives

The primary objective of this tender is to procure a (Veeam) Cloud Backup Solution for Microsoft 365, providing comprehensive backup and recovery services over a period of 24 months. The solution aims to ensure continuous, secure, and compliant protection of Microsoft 365 workloads including Exchange Online, SharePoint Online, OneDrive for Business, and Microsoft Teams. It also seeks to enhance data availability, facilitate rapid recovery, automate backup processes, and support regulatory compliance through features like immutability, audit reporting, and high availability.

Scope

The scope of the tender includes:

• Provision of a fully managed, cloud-based backup service tailored for Microsoft 365 workloads.
• Protection of specific workloads: Exchange Online (mailboxes, calendars, contacts), SharePoint Online (sites, libraries, lists), OneDrive for Business (files, folders), and Teams (messages, files, tabs).
• Implementation of backup policies, schedules, and exclusions as per organizational needs.
• Support for granular, bulk, and point-in-time recovery options.
• Creation of immutable backups with protection against accidental or malicious deletion.
• Integration with Microsoft 365 via native APIs and support for secondary application registration.
• Provision of a self-service restore portal with Role-Based Access Control (RBAC).
• Unlimited storage capacity with unlimited retention and flexible migration options.
• Security features including regular penetration testing, encryption, multi-factor authentication, and compliance certifications.
• Monitoring, reporting, and audit capabilities for operational transparency and compliance.

Technical Requirements

The technical specifications for the solution include:

• Workload Protection: Backup of Exchange Online (mailboxes, archives), SharePoint Online (sites, libraries), OneDrive for Business (files, version history), and Teams (messages, files, settings).
• Integration & Compatibility: Native API-based integration with Microsoft 365, support for secondary application registration, and compatibility with Microsoft Azure services under MACC agreement.
• Restore Capabilities: Granular, bulk, and point-in-time restores, object-level recovery, and export in native formats (PST, XML, ZIP, etc.).
• Security & Compliance: Regular penetration testing, TLS encryption (256-bit), multi-factor authentication, audit logging, storage in customer-chosen regions, and compliance with ISO/IEC 27001, HIPAA, SOX, SOC2, NIST.
• Data Management & Migration: Support for data migration to any cloud or on-premises storage, with an exit strategy for offboarding at no additional cost.
• Monitoring & Reporting: Built-in analytics, activity logs, email notifications, and exportable reports for operational and compliance purposes.
• Licensing & Support: Subscription-based licensing model based on user accounts, automated software upgrades, zero-downtime patches, and unlimited storage with unlimited retention.
• Security & Access Control: Role-Based Access Control (RBAC), network access restrictions, manual application registration, and support for both tenant and non-tenant login scenarios.