This page uses extracted PDF text. Text can misread numbers, dates or table columns. Check the PDF before quoting or interpreting it. Redacted areas remain redacted.
RFP Name RFP 20-xxxx-xxxx
B.18 Are the organization’s hosted application or resources ☒ Yes Please provide additional information below:
maintained in a multi-tenant environment or platform in which ☐ No The application is hosted in a multi-tenant
City data is co-mingled with other entities, or dedicated environment on AWS shared infrastructure. City
infrastructure for City-specific resources? data is logically segregated from other customers
using dedicated AWS S3 storage and access
controls.
B.19 Does the organization maintain high availability of resources ☒ Yes Please provide additional information below:
available to customers and document and define specific ☐ No High availability is maintained through AWS
service availability level agreements? infrastructure with a 99.9% uptime commitment,
geographically dispersed data centers, redundancy,
and failover capabilities. Service Level Agreements
(SLAs) are documented and provided to customers,
specifying availability levels and support response
times.
B.20 Does the organization maintain an incident response plan ☒ Yes Please provide additional information below:
including strategy for notifying customers in the event of a ☐ No There is a comprehensive incident response plan that
breach and compromise of customer information? Is this includes procedures for notifying customers in the
incident response plan regularly tested? event of a breach or compromise of customer
information. Impacted customers are notified as soon
as possible. The plan is tested quarterly and reviewed
annually to ensure effectiveness.
B.21 Does the organization maintain a formal Business ☒ Yes Please provide additional information below:
Continuity/Disaster Recovery Plan? Does organization perform ☐ No There is a formal, documented Business Continuity
regular exercises to test the effectiveness of the plan? and Disaster Recovery Plan. The organization
conducts scenario-based tabletop tests and
restoration testing of these plans at least annually.
Test results are documented, lessons are
formalized, and corrective actions are taken as
needed to ensure ongoing effectiveness.
B.22 Does the organization maintain disaster recovery procedures ☒ Yes Please provide additional information below:
to assist in preventing interruption of system use? ☐ No The organization maintains formal, documented
disaster recovery procedures, including a disaster
recovery plan and business continuity plan. These
are communicated, tested, and updated annually.
Page 8 of 19Jump to an indexed page (163 of 163)