GIS Cloud Services

Project Description: PURPOSE
The State of Utah School and Institutional Trust Lands Administration (Trust Lands) seeks a vendor for hosting and managing Geographic Information System (GIS) services in the cloud. The services required include the deployment and ongoing maintenance of ArcGIS Enterprise and cloud infrastructure across multiple servers.
By submitting a proposal in response to this RFP you must be willing to accept Attachment A "STATE OF UTAH STANDARD TERMS AND CONDITIONS FOR GOODS AND/OR SERVICES and Attachment B "STATE OF UTAH STANDARD INFORMATION TECHNOLOGY TERMS AND CONDITIONS."
ORGANIZATION BACKGROUND
Trust Lands is an independent state agency of Utah created in 1994 to manage parcels of land designated to the state by Congress for generating revenue for public schools and other beneficiaries. Revenue is generated through sales, leases, energy generation, real estate development and surface utilities. Today, Trust Lands manage approximately 3.4 million acres of surface land and an additional 1.1 million acres of subsurface land.
The mission of Trust Lands is to “enhance the value of Trust Lands and maximize economic return for beneficiaries, generate revenue through energy development, real estate planning and surface use, manage lands according to the state constitutional mandate and empower beneficiaries and all of Utah through thoughtful stewardship of Trust Land assets, both now and for the future.”
PROJECT BACKGROUND
Trust Lands currently utilizes Esri’s ArcGIS Enterprise software across three virtual servers on the Google Cloud Platform (GCP). Each server has its own specific function as outlined in “CURRENT SERVER INFORMATION.”
GIS data edits are performed on a SQL Server database physically located on premises. Published web map services are hosted in a Postgres SQL database. Python scripts run nightly to update data from the on-premise SQL database to a Postgres SQL database on GCP consumed by web mapping services. These scripts are anticipated to migrate into ArcGIS Enterprise Notebook Server in the future.
Federation of GIS servers allows data stored in the Postgres SQL database to be accessed directly to agency staff through Portal for ArcGIS with the use of web maps, web applications and mapping services. Data intended for the public is offered via ArcGIS Online through distributed collaboration.
Trust Lands has approximately seventy-five named users licensed through ArcGIS Enterprise. Of those seventy-five named users, seven are power users and licensed with an ArGIS Pro Advanced license, fifteen are licensed with an ArcGIS Pro Basic license and the remainder use ArcGIS Enterprise for viewing maps only. Trust Lands manages the licenses for these products and users.
CHALLENGES
While the current environment is functional, Trust Lands seeks to reduce infrastructure management overhead, improve scalability and strengthen compliance by transitioning to a managed cloud hosting environment. A cloud hosting vendor will allow GIS staff to focus their time and expertise on mapping projects and tools that enhance planning and decision-making within Trust Lands, ultimately maximizing economic revenue for the trust. Trust Lands requires the ability to make administrative changes within ArcGIS Enterprise, including publishing, updating, securing and managing services.
CURRENT SERVER INFORMATION
Trust Lands has successfully deployed ArcGIS Enterprise on GCP using three servers with the following specifications:
Server No. 1 – GIS Mapping Server
Mapping services from the agency SDE database is published from the GIS mapping server. Public mapping services participate in a distributed collaboration with ArcGIS Online. Below are other important specifications of the GIS mapping server:
• ArcGIS Server version 11.3 installed
• ArcGIS License Manager version 11.3 installed
• ArcGIS Web Adaptor installed
• +- 350 ArcGIS mapping services
• 4 CPUS
• 32 GB RAM
• 160 GB Storage
Server No. 2 – GIS Portal Server
Federated GIS server sites allow for viewing of mapping services, web maps and web applications directly through Portal for ArcGIS. Below are other important specifications of the GIS portal server:
• Portal for ArcGIS version 11.3 installed
• ArcGIS Web Adaptor installed
• 8 CPUS
• 32 GB RAM
• 200 GB Storage
Server No. 3 – GIS Hosting Server
Hosted mapping services for use with ArcGIS Field Maps are published to the ArcGIS Data Store located on the GIS hosting server. Below are other important specifications of the GIS hosting server:
• ArcGIS Server version 11.3 installed
• ArcGIS Data Store version 11.3 installed
• ArcGIS Web Adaptor installed
• +- 265 ArcGIS hosted mapping services
• 4 CPUS
• 16 GB RAM
• 120 GB Storage
SERVICES TO BE PROVIDED
The selected vendor will be responsible for achieving the following objectives:
• Install, configure, deploy and manage ArcGIS Enterprise, as well as Notebook Server, across multiple virtual server machines in a public cloud environment (AWS, Azure or GCP)
• Migrate existing ArcGIS Enterprise content, data connections and configurations from Trust Lands' current GCP-based environment to the new cloud environment
• Provide support, monitoring and lifecycle management of the cloud infrastructure and the ArcGIS Enterprise System, including upgrades, patches, performance tuning and security hardening
• Provide virtualized workspaces to run ArcGIS Pro to support the GIS team's (7 users) ability to edit
• Install and configure SSL/TLS certificates and maintain integration with existing Domain Name System (DNS) record
• Ensure support hosted PostgreSQL or equivalent geodatabase for the ArcGIS Data Store, including allowing for data ELT via Python scripts/Notebook server from on-premise SQL database
• Integrate with SITLA's Microsoft Entra ID to enable single sign-on (SSO) for SITLA staff and approved partners
• Provide system security aligned with GovRAMP/StateRAMP policies, including continuous monitoring and access to 3PAO audits, vulnerability assessments and penetration test results (The State of Utah has partnered with StateRAMP dba GovRAMP to enhance cybersecurity measures and ensure compliance with national security standards) For more information, visit: https://programs.govramp.org/utah/
• Provide regularly scheduled system backups with documented recovery procedures, retention schedules and testing of restoration capabilities
• Ensure all State Data remains within the United State at all times and is compliant with State of Utah Attachment B "IT TERMS AND CONDITIONS"
EVALUATION CRITERIA
This project will require the vendor to furnish specific information to ensure that they have the necessary qualifications and expertise to implement successful results for Trust Lands. Please provide the following information:
• Company name
• Brief company history
• Headquarters address
• Contact person (name, title, phone and email)
• Number of years in business
• Customers
• Financial strength
• Growth plans
• Key products and services offered
• Relevant industry experience and goals achieved
• Project approach
• Project timeline
• Project cost and value
• Backup and retention policy
• System in place for customer help
• Response times for help tickets
• Support hours
• Virtual desktop system
• All cloud-hosted systems must reside within U.S data centers (no offshore data storage or processing)
• References (with contact information) from past projects
• Security system (preference will be given to vendors that are GovRAMP or FedRAMP Authorized at the Moderate or High impact level)
If the vendor is NOT currently FedRAMP authorized they must be FedRAMP Ready or In Process with an active engagement with a federal agency or 3PAO, or provide equivalent evidence of security compliance with NIST 800-53 controls, including:
• A completed System Security Plan (SSP)
• A current Security Assessment Report (SAR) conducted by an independent assessor
• A plan of action & milestones (POA&M) outlining any gaps
• The vendor must commit to granting Trust Lands/State of Utah Division of Technology Services (DTS) or equivalent oversight access to audit artifacts (3PAO reports, vulnerability assessments and pentration tests) and agree to remediate deficiencies within an agreed timeframe (or apply compensating controls)