Cooperative Development Authority Tender

Description Purpose: For The Official Use Of Cda Head Office - Ictd 1. Project Description 1.1. The Cooperative Development Authority (cda) Seeks A One-year Subscription Renewal Of A Business-grade Content Delivery Network (cdn) Service With Integrated Ddos Mitigation, Certificate Management, And Training. The Subscription Is Intended To Improve The Speed, Reliability, And Security Of Cda's Digital Services, Ensuring Seamless Online Operations, Enhanced Data Security, And Better Stakeholder Access Nationwide. 2. Scope Of Work And Services 2.1. The Provider Shall Provide The Following Services: 2.1.1. Business-grade Subscription 2.1.1.1. A One (1) Year Subscription To A Business-grade Cdn Service With Integrated Ddos Mitigation And Certificate Management Capabilities. 2.1.2. Initial Setup And Integration 2.1.2.1. Configuration Of Cda's Domain And Dns Settings Within The Cdn Platform. 2.1.2.2. Setup Of Account Structures, Access Permissions, And User Controls. 2.1.3. Security Configurations 2.1.3.1. Activation Of Ddos Protection Against Application-layer And Volumetric Attacks. 2.1.3.2. Configuration Of A Web Application Firewall (waf) With A Set Number Of Customizable Rules. 2.1.3.3. Implementation Of Ssl/tls Encryption For Secure Data Exchange. 2.1.4. Performance Optimization 2.1.4.1. Activation Of Content Caching To Optimize Website Load Times Globally. 2.1.4.2. Configuration Of Caching Policies And Page Rules For Enhanced Performance. 2.1.5. Traffic Management And Access Control 2.1.5.1. Implementation Of Rate-limiting To Manage Traffic Loads And Protect Against Bot Attacks. 2.1.5.2. Configuration Of Ip Filtering And Geographic Access Controls As Needed. 2.1.6. Monitoring And Alerts 2.1.6.1. Enable Monitoring Tools, Including Dashboards, Logs, And Real-time Alerts. 2.1.6.2. Configure Notifications For Potential Performance Or Security Incidents. 2.1.7. Testing And Validation 2.1.7.1. Conduct Functional Tests For Security, Performance, And Configuration Efficacy. 2.1.8. Documentation And Training 2.1.8.1. Provide Comprehensive Documentation On System Configurations And Procedures. 2.1.8.2. Deliver Training To Up To Cda Personnel On System Use And Incident Management. 3. Technical Requirements 3.1. Performance. The Solution Must Include: 3.1.1. Global Content Delivery Network (cdn) Caching For Accelerated Content Delivery. 3.1.2. Static Content Caching With Instant Full-cache Purging And Minimum Cache Ttl Expiry Of One Second. 3.1.3. Support For Modern Protocols And Technologies, Including Ipv6, Http/2, Spdy, And Websockets. 3.1.4. Tiered Caching To Optimize Resource Delivery And Reduce Origin Server Load. 3.1.5. Network Optimization Tools For Faster Response Times And Reduced Latency. 3.2. Customization & Optimization. The Solution Must Offer: 3.2.1. Up To 50 Configurable Page Rules For Customizing Traffic Handling And Caching Behavior. 3.2.2. Accelerated Mobile Page (amp) Support To Improve Mobile Web Performance. 3.2.3. Asynchronous Javascript Loading To Improve Page Performance. 3.2.4. Tools For Managing And Optimizing Mobile-specific Content. 3.2.5. Cname Setup For Custom Domain Support. 3.3. Security. The Solution Must Include: 3.3.1. Comprehensive Ddos Protection For Application-layer And Volumetric Attacks, Including Unmetered Mitigation Capabilities. 3.3.2. Advanced Threat Detection Using Reputation-based Intelligence To Identify And Block Emerging Threats. 3.3.3. Protection Against Bot Attacks (basic Bot Management Tools, Like Captcha And Javascript Challenges, Are Included.) 3.3.4. Mitigation Against Content Scraping And Spam Through Intelligent Filtering Mechanisms. 3.3.5. Real-time Alerts For Potential Ddos And Other Security Incidents. 3.4. Certificate Management. The Solution Must Provide: 3.4.1. Centralized Management Of Ssl/tls Certificates With Automated Issuance And Renewal. 3.4.2. Support For Both Universal Ssl Certificates And User-provided Certificates. 3.5. Web Application Firewall (waf). The Solution Must Include: 3.5.1. Web Application Firewall (waf) With Up To 100 Customizable Rules. 3.5.2. Free Managed Rulesets, Including Owasp Core Ruleset, To Protect Against Common Vulnerabilities. 3.5.3. Security Analytics For Visibility Into Threats And Potential Vulnerabilities. 3.6. Reliability. The Solution Must Include: 3.6.1. Global Anycast Dns With Dnssec Support For Secure And Efficient Domain Resolution. 3.6.2. Custom Nameservers And Wildcard Dns Record Proxying. 3.6.3. One (1) Waiting Room Feature To Manage Traffic Surges During High-demand Periods. 3.7. Dashboard, User, And Api Access. The Solution Must Provide: 3.7.1. Multi-user Administrative Access With Role-based Access Controls And Read-only Options. 3.7.2. Api Access And Terraform Integration For Automation And Customization. 3.8. Insights & Analytics. The Solution Must Provide: 3.8.1. Real-time Analytics For Traffic, Caching, And Security Events. 3.8.2. Historical Analytics With Configurable Resolutions (e.g., 15 Minutes For Site Analytics, 7 Days For Dns Analytics). 3.8.3. Exportable Logs And Audit Data In Csv Format For Further Analysis. 3.8.4. Integrated Dashboards For Monitoring Website Performance. 3.9. Compliance. The Solution Must Adhere To The Following Standards: 3.9.1. Iso 27001 Certification. 3.9.2. Soc 2 Type Ii Compliance. 3.9.3. Pci Dss 4.0 Compliance For Payment Data Security. 3.10. Support. The Solution Must Include: 3.10.1. 24/7 Support Via Ticketing And Live Chat. 3.10.2. Service Level Agreement (sla) For Uptime, With Corresponding Service Credits For Breaches. 3.11. Additional Scope. The Provider Must Also Provide: 3.11.1. Advanced Certificate Management Tools For Enhanced Ssl/tls Operations. 3.11.2. Training Sessions For Ictd Personnel On System Operations, Performance Optimization, And Incident Management. 4. Budget And Resources 4.1. Approved Budget For The Contract (abc): 4.1.1. The Approved Budget For The One-year Subscription Is Three Hundred Ninety-four Thousand Eight Hundred Forty-five Pesos And 87/100 (php394,845.87) Inclusive Of All Applicable Taxes, Fees, And Other Charges. Chargeable Against The 2025 Ictd Funds. 5. Mode Of Procurement 5.1. The Procurement Shall Fall Under Section 53.14 Of The Revised Irr Of Ra No. 9184 (as Of 01 July 2023), Allowing For The Direct Retail Purchase Of Online Subscriptions. End-users Delegated To Procure These Subscriptions May Acquire Them From Identified Direct Suppliers Or Service Providers. Online Subscriptions Covered By This Provision Include “(ii) Computer Software And Applications Such As Video Conferencing Applications, Computer-aided Design And Drafting Applications, Office Productivity Tools, And System Protection Software; (iii).....” 6. Pre-termination 6.1. In Case Of Pre-termination, The Provider Shall Be Liable To Additional Liquidated Damage Equivalent To One Percent (1%) Of The Contract Price As Provided By The Government Accounting Manual (gam) And Forfeiture Of The Performance Security; And 6.2. The Cda Shall Have The Right To Blacklist The Provider In Case Of Pre-termination. 7. Warranties Of The Provider 7.1. The Provider Warrants That It Shall Conform Strictly To The Terms And Conditions Of This Tor; 7.2. The Provider In The Performance Of Its Services Shall Secure, And Maintain At Its Own Expense All Registration, Licenses, Or Permits Required By National Or Local Laws And Shall Comply With The Rules, Regulations, And Directives Of Regulatory Authorities And Commissions; And 7.3. The Provider Shall Neither Assign, Transfer, Pledge, Nor Sub-contract Any Part Or Interest Therein. 8. Mode Of Payment: 8.1. 100% Payment Upon The Successful Completion Of The Configuration, Confirmation Of The Solution's Readiness For Use By Cda, And Submission Of Proof Of Renewal Or Order Fulfillment. 9. Delivery Period 9.1. For The Renewal Of The Subscription, The Delivery And Configuration Of Solutions, Ensuring Readiness For Cda’s Use, Shall Align With The Subscription And Warranty Period From January 18, 2025, To January 18, 2026. 10. Subscription And Warranty Period 10.1. January 18, 2025 To January 18, 2026 11. Eligibility Of The Bidders 11.1. 24 X 7 Customer/technical Support Capability; 11.2. The Provider Must Be A Vas-licensed Company Under The National Telecommunication Commission (ntc); 11.3. The Provider Must Be An Accredited Cybersecurity Provider By The Department Of Information And Communications Technology (dict); 11.4. The Provider Must Be A Data Privacy Registered Company Under National Privacy Commission (npc); 12. Other Terms And Conditions 12.1. The Services Required Are Classified As Highly Technical And The Provider Shall Perform Or Deliver These Services With Utmost Professionalism. The Provider Is Prohibited From Disclosing Or Disseminating Any Information, Data Owned By The Cda Or Gathered In Any Manner In The Performance Or Delivery Of Services. This Prohibition Shall Be Effective Even After The Termination Of The Contract; 12.2. An Independent Provider With No Employer-employee Relationship Exists Between The Provider And Cda. Any And All Claims For Compensation, Death, Unpaid Wages, Overtime Pay, Separation Pay, Damages Of The Provider, Heirs, Beneficiaries, And/or Assigns, As Well As Compliance With Applicable Laws And Ordinance Relating To The Services To Be Performed Under The Contract, Shall Be The Exclusive, Direct And Sole Responsibility Of The Provider; 12.3. The Provider Shall Hold Cda Free And Harmless From Any Liability, Injury, Disability, Or Death Sustained By Him Or By Third Parties Arising Out Of Or In Connection With The Performance Of The Undertaking Under The Contract; 12.4. Neither The Cda Nor The Provider Shall Be Liable For Delay Or Failure To Perform In Whole Or In Part Any Of Their Respective Obligations And Responsibilities Lack Or Failure Of Raw Materials, War, Acts Of God, Hurricanes, Fires, Storms, Accidents, And Force Majeure, Government Regulations Or Interference Of Any Cause Whatever Beyond The Concerned Party’s Control; **************nothing Follows***********