8K Miles Software Services Inc Tel: 1-855-856-4537 Fax : 877-251-3509 California : 12647, Alcosta Boulevard, Suite 165, San Ramon, CA 94583 Virginia : 44121 Harry Byrd Hwy #275, Ashburn, VA 20147 New Jersey : 3240 E State Street Ext, Hamilton, NJ 08619

October 23, 2012

Region 14 Education Center 1850 Highway351 Abilene, Texas 79601

Region 14 Evaluation Panel:

8KMiles Software Services Inc. (8KMiles) is pleased to submit our response to your Request for Proposal # 25-12 for Web and Cloud Computing. We believe we offer very competitive pricing and can provide the technical expertise and value-added solutions to help Region 14 and National Cooperative Purchasing Alliance (NCPA) members acquire responsive, efficient, and cost-effective web and cloud computing solutions. The Amazon Web Services (AWS) computing platform offers commodity services that are best engineered and implemented by an experienced AWS Services partner such as 8KMiles. As an AWS Advanced Consulting Partner, 8KMiles offers a comprehensive suite of cloud consulting, migration, and engineering services, as well as value-added cloud solutions that will give Region 14 and NCPA members the ability to leverage the power of AWS’s worldwide cloud computing platform and capabilities to create the most effective solution in a timely manner. We have been working with Amazon for the last four years and our Chief Cloud Officer, Sri Vasireddy, previously worked at AWS where he provided engineering and business development leadership and vision in the cloud marketplace. We strive to provide our customers innovative, cost-effective solutions that meet their business, technical, and cost needs. Our deep cloud engineering background and extensive knowledge of the AWS platform gives Region 14 and NCPA members the ability to quickly leverage the power of cloud computing.

Thank you for considering 8KMiles. If you have any questions, kindly address them to Sri Vasireddy at sri@8kmiles.com or by phone at 703-371-8274.

Sincerely,

Suresh Chari Chairman and Chief Executive Officer

RFP #25-12

8KMiles understands Region 14 ESC is a governmental entity and responses submitted are subject to release as public information after contracts are executed. If public release is necessary, after contract award, 8KMiles requests the information identified in Tab 1 Subsection 1.20 Open Record Policy not be released with obtaining written approval from 8KMiles Software Services, Inc.

Tab 1: Signature Form ................................................................................... 1

Customer Support .......................................................................................... 11.1Assignment of Contract ................................................................................. 11.2

Disclosures ..................................................................................................... 11.3Renewal of Contract ...................................................................................... 21.4

Funding Out Clause ....................................................................................... 21.5Shipments (if applicable) ............................................................................... 21.6

Tax Exempt Status ......................................................................................... 21.7Payments ........................................................................................................ 21.8

Pricing ............................................................................................................ 21.9Warranty ........................................................................................................ 31.10

Indemnity ....................................................................................................... 31.11Franchise Tax ................................................................................................. 31.12

Supplemental Agreements ............................................................................. 31.13Certificates of Insurance ................................................................................ 31.14

Legal Obligations ........................................................................................... 31.15Protest ............................................................................................................ 31.16

Force Majeure ................................................................................................ 41.17Prevailing Wage ............................................................................................. 41.18

Miscellaneous ................................................................................................ 41.19Open Records Policy ...................................................................................... 41.20

Tab 2: NCPA Administration Agreement ...................................................... 6

Tab 3: Vendor Questionnaire ....................................................................... 10

Tab 4: Vendor Profile .................................................................................. 14

Company’s official registered name: 8KMiles Software Services, Inc. ...... 144.1Brief history of 8KMiles .............................................................................. 144.2

Company’s Dun & Bradstreet (D&B) number: 01-019-0224 .................... 154.3Company’s organizational chart .................................................................. 154.4

Corporate office location. ............................................................................ 164.5Define your standard terms of payment ....................................................... 164.6

Who is your competition in the marketplace? ............................................. 164.7

Provide Annual Sales for last 3 years (City/Counties, K-12, Higher Ed, other 4.8government and non-profits) ..................................................................................................... 17

What differentiates your company from competitors? ................................ 174.9Describe how your company will market this contract if awarded ............. 184.10

Describe how you intend to introduce NCPA to your company. ................ 184.11

Describe your firm’s capabilities and functionality of your on line catalog / 4.12ordering website.... .................................................................................................................... 18

Describe your company’s Customer Service Department (hours of 4.13operation, number of service centers, etc.) ............................................................................... 18

Green Initiatives ........................................................................................... 194.14Vendor Certifications (if applicable) ........................................................... 194.15

Tab 5: Product and Services ........................................................................ 20

Cloud Computing ......................................................................................... 205.1Elastic Compute Cloud (EC2) ..................................................................... 205.1.1Elastic Map Reduce ..................................................................................... 225.1.2Auto Scaling ................................................................................................. 225.1.3Elastic Load Balancing ................................................................................ 235.1.4Content Delivery .......................................................................................... 245.2

Database ....................................................................................................... 255.3Relational Database Service ........................................................................ 255.3.1Amazon Dynamo DB ................................................................................... 275.3.2ElastiCache .................................................................................................. 285.3.3

Deployment and Management ..................................................................... 285.4Application Services .................................................................................... 295.5

Cloud Search Service ................................................................................... 295.5.1Simple Work Flow Service .......................................................................... 305.5.2Simple Queuing Service .............................................................................. 305.5.3Simple Notification Service ......................................................................... 305.5.4Simple Email Service ................................................................................... 315.5.5Software ....................................................................................................... 315.6

Amazon Software Market Place .................................................................. 315.6.1Networking .................................................................................................. 325.7

Amazon Virtual Private Cloud (VPC) ......................................................... 325.7.1Amazon Direct Connect ............................................................................... 345.7.2Storage ......................................................................................................... 355.8

Amazon Elastic Block Store (EBS) ............................................................. 355.8.1Amazon Simple Storage Service (S3) .......................................................... 365.8.2

Support ......................................................................................................... 375.9Web Traffic .................................................................................................. 375.10

Workforce .................................................................................................... 385.11Cloud Consulting (Assessment and Proof of Concept) ............................... 385.11.1Cloud Migration and Engineering ............................................................... 395.11.28KMIles Value-Added Solutions ................................................................. 415.12

Secure Virtual Private Cloud Solutions ....................................................... 415.12.1Secure Mobile Collaboration Solution ......................................................... 445.12.2Big Data and Data Analytic Solutions ......................................................... 455.12.3Direct Connect Solution ............................................................................... 465.12.4

Tab 6: References ........................................................................................ 48

LikeLive ....................................................................................................... 486.1Online First Day Packet System .................................................................. 496.2

Asha-Jyothi Run Timing System ................................................................. 496.3Deets ............................................................................................................ 506.4

May Moon Media ........................................................................................ 506.5Radian .......................................................................................................... 516.5

Other Applicable Client Engagement .......................................................... 516.6AWS Case Study: ZAGG, Inc. and 8KMiles .............................................. 516.6.1Public Sector Global Financial Institution ................................................... 526.6.2

Tab 7: Pricing & Warranty .......................................................................... 54

Pricing .......................................................................................................... 547.1

Amazon Cloud Services ............................................................................... 547.1.1Consulting, Migration, and Engineering Services ....................................... 567.1.2

8KMiles Warranty and Additional Terms ................................................... 577.2

Tab 8: Value Added Products and Services ................................................. 59

Customer Service Plan ................................................................................. 598.1

Marketing Plan ............................................................................................. 598.2

Tab 9: Required Documents ........................................................................ 61

Clean Air and Water Act & Debarment Notice ........................................... 619.1Contractor Requirements ............................................................................. 619.2

Antitrust Certification Statements (Tex. Government Code § 2155.005) ... 629.3ARRA Standard Terms and Conditions Addendum for Contracts and Grants9.4

……………………………………………………………………………...63

FEMA Standard Terms and Conditions Addendum for Contracts and Grants9.5 ……………………………………………………………………………...67

Required Clauses for Federal Assistance provided by FTA ........................ 689.6State Notice Addendum ............................................................................... 739.7

The undersigned hereby proposes and agrees to furnish goods and/or services in strict compliance with the terms, specifications and conditions at the prices proposed within response unless noted in writing. The undersigned further certifies that he/she is an officer of the company and has authority to negotiate and bind the company named below and has not prepared this bid in collusion with any other Respondent and that the contents of this proposal as to prices, terms or conditions of said bid have not been communicated by the undersigned nor by any employee or agent to any person engaged in this type of business prior to the official opening of this proposal.

Prices are guaranteed: 120 days: Company Name: 8KMiles Software Services, Inc.

Address: 12647 Alcosta Boulevard, Suite 165, San Ramon, CA 94583 Telephone No. 1-855-8564537

Fax No. 1-877-251-3509 Email address: sureshv@8kmiles.com

Printed Name: Suresh Venkatachari Position in Company: Chief Executive Officer

Authorized signature:______ ___________________________________

8KMiles Accepts the Master Agreement General Terms and Conditions Except Where Highlighted Below in Yellow, namely subsection 1.10, Warranty, and subsection 1.20, Open Record Policy.

The vendor shall provide timely and accurate technical advice and sales support. The vendor shall respond to such requests within one (1) working day after receipt of the request.

No assignment of contract may be made without the prior written approval of Region 14 ESC. Purchase orders and payment can only be made to awarded vendor. Awarded vendor is required to notify Region 14 ESC when any material change in operation is made.

Respondent affirms that he/she has not given, offered to give, nor intends to give at any time hereafter any economic opportunity, future employment, gift, loan, gratuity, special discount, trip, favor or service to a public servant in connection with this contract.

The respondent affirms that, to the best of his/her knowledge, the offer has been arrived at independently, and is submitted without collusion with anyone to obtain information or gain any favoritism that would in any way limit competition or give an unfair advantage over other vendors in the award of this contract.

Unless otherwise stated, all contracts are for a period of one (1) year with an option to renew annually for an additional four (4) years if agreed to by Region 14 ESC and the vendor.

Any/all contracts exceeding one (1) year shall include a standard “funding out” clause. A contract for the acquisition, including lease, of real or personal property is a commitment of the entity’s current revenue only, provided the contract contains either or both of the following provisions: Retains to the entity the continuing right to terminate the contract at the expiration of each budget period during the term of the contract and is conditioned on a best efforts attempt by the entity to obtain appropriate funds for payment of the contract.

The awarded vendor shall ship ordered products within seven (7) working days for goods available and within four (4) to six (6) weeks for specialty items after the receipt of the order unless modified. If a product cannot be shipped within that time, the awarded vendor shall notify the entity placing the order as to why the product has not shipped and shall provide an estimated shipping date. At this point the participating entity may cancel the order if estimated shipping time is not acceptable.

Since this is a national contract, knowing the tax laws in each state is the sole responsibility of the vendor.

The entity using the contract will make payments directly to the awarded vendor.

All pricing submitted to shall include the administrative fee to be remitted to NCPA by the awarded vendor. It is the awarded vendor’s responsibility to keep all pricing up to date and on file with NCPA.

All deliveries shall be freight prepaid, F.O.B. destination and shall be included in all pricing offered unless otherwise clearly stated in writing.

Warranty and/or guarantees of equipment and installations, including any conditions and response time for repair and/or replacement, are addressed in Tab 7, Pricing & Warranty.

The awarded vendor shall protect, indemnify, and hold harmless Region 14 ESC and its participants, administrators, employees and agents against all claims, damages, losses and expenses arising out of or resulting from the actions of the vendor, vendor employees or vendor subcontractors in the preparation of the solicitation and the later execution of the contract.

The respondent hereby certifies that he/she is not currently delinquent in the payment of any franchise taxes.

The entity participating in this contract and awarded vendor may enter into a separate supplemental agreement to further define the level of service requirements over and above the minimum defined in this contract i.e. invoice requirements, ordering requirements, specialized delivery, etc. Any supplemental agreement developed as a result of this contract is exclusively between the participating entity and awarded vendor.

Certificates of insurance shall be delivered to the Public Agency prior to commencement of work. The insurance company shall be licensed in the applicable state in which work is being conducted. The awarded vendor shall give the participating entity a minimum of ten (10) days notice prior to any modifications or cancellation of policies. The awarded vendor shall require all subcontractors performing any work to maintain coverage as specified.

It is the Respondent’s responsibility to be aware of and comply with all local, state, and federal laws governing the sale of products/services identified in this RFP and any awarded contract and shall comply with all while fulfilling the RFP. Applicable laws and regulation must be followed even if not specifically identified herein.

A protest of an award or proposed award must be filed in writing within ten (10) days from the date of the official award notification and must be received by 5:00 pm CST. No protest shall lie for a claim that the selected Vendor is not a responsible Bidder. Protests shall be filed with Region 14 ESC and shall include the following:

• Name, address and telephone number of protester • Original signature of protester or its representative • Identification of the solicitation by RFP number • Detailed statement of legal and factual grounds including copies of relevant documents

and the form of relief requested • Any protest review and action shall be considered final with no further formalities being

considered.

If by reason of Force Majeure, either party hereto shall be rendered unable wholly or in part to carry out its obligations under this Agreement then such party shall give notice and full particulars of Force Majeure in writing to the other party within a reasonable time after occurrence of the event or cause relied upon, and the obligation of the party giving such notice, so far as it is affected by such Force Majeure, shall be suspended during the continuance of the inability then claimed, except as hereinafter provided, but for no longer period, and such party shall endeavor to remove or overcome such inability with all reasonable dispatch.

The term Force Majeure as employed herein, shall mean acts of God, strikes, lockouts, or other industrial disturbances, act of public enemy, orders of any kind of government of the United States or any civil or military authority; insurrections; riots; epidemics; landslides; lighting; earthquake; fires; hurricanes; storms; floods; washouts; droughts; arrests; restraint of government and people; civil disturbances; explosions, breakage or accidents to machinery, pipelines or canals, or other causes not reasonably within the control of the party claiming such inability. It is understood and agreed that the settlement of strikes and lockouts shall be entirely within the discretion of the party having the difficulty, and that the above requirement that any Force Majeure shall be remedied with all reasonable dispatch shall not require the settlement of strikes and lockouts by acceding to the demands of the opposing party or parties when such settlement is unfavorable in the judgment of the party having the difficulty.

It shall be the responsibility of the Vendor to comply, when applicable, with the prevailing wage legislation in effect in the jurisdiction of the purchaser. It shall further be the responsibility of the Vendor to monitor the prevailing wage rates as established by the appropriate department of labor for any increase in rates during the term of this contract and adjust wage rates accordingly.

Either party may cancel this contract in whole or in part by providing written notice. The cancellation will take effect 30 business days after the other party receives the notice of cancellation. After the 30th business day all work will cease following completion of final purchase order.

Because Region 14 ESC is a governmental entity responses submitted are subject to release as public information after contracts are executed. If a vendor believes that its response, or parts of

its response, may be exempted from disclosure, the vendor must specify page by page and lineby line the parts of the response, which it believes, are exempt. In addition, the respondent must specify which exception(s) are applicable and provide detailed reasons to substantiate the exception(s). The determination of whether information is confidential and not subject to disclosure is the duty of the Office of Attorney General (OAG). Region 14 ESC must provide the OAG sufficient information to render an opinion and therefore, vague and general claims to confidentiality by the respondent are not acceptable. Region 14 ESC must comply with the opinions of the OAG. Region14 ESC assumes no responsibility for asserting legal arguments on behalf of any vendor. Respondent are advised to consult with their legal counsel concerning disclosure issues resulting from this procurement process and to take precautions to safeguard trade secrets and other proprietary information. 8KMiles considers company pricing confidential (see Tab 7,Pricing & Warranty) and requests that this information be protected from public disclosure beyond Region 14 and NCPA members (hereafter referred to as “NCPA Members”).

Please provide responses to the following questions that address your company’s operations, organization, structure, and processes for providing products and services. ♦ States Covered

Bidder must indicate any and all states where products and services can be offered.

Please indicate the price co-- efficient for each state if it varies.

50 States & District of Columbia (Selecting this box is equal to checking all boxes below)

Alabama Maryland South Carolina

Alaska Massachusetts South Dakota

Arizona Michigan Tennessee

Arkansas Minnesota Texas

California Mississippi Utah

Colorado Missouri Vermont

Connecticut Montana Virginia

Delaware Nebraska Washington

District of Columbia Nevada West Virginia

Florida New Hampshire Wisconsin

Georgia New Jersey Wyoming

Hawaii New Mexico

Idaho New York

Illinois North Carolina

Indiana North Dakota

Iowa Ohio

Kansas Oklahoma

Kentucky Oregon

Louisiana Pennsylvania

Maine Rhode Island

All US Territories and Outlying Areas (Selecting this box is equal to checking all

boxes below)

American Samoa Northern Mariana Islands Federated States of Micronesia Puerto Rico Guam U.S. Virgin Islands Midway Islands

♦ Minority and Women Business Enterprise (MWBE) and (HUB) Participation

It is the policy of some entities participating in NCPA to involve minority and women business enterprises (MWBE) and historically underutilized businesses (HUB) in the purchase of goods and services. Respondents shall indicate below whether or not they are an M/WBE or HUB certified.

Minority / Women Business Enterprise • Respondent Certifies that this firm is a M/WBE

Historically Underutilized Business • Respondent Certifies that this firm is a HUB

♦ Residency Responding Company’s principal place of business is in the city of San Ramon, State of California.

♦ Felony Conviction Notice Please Check Applicable Box:

If the 3rd box is checked, a detailed explanation of the names and convictions must be attached.♦ Distribution Channel

Which best describes your company’s position in the distribution channel:

Manufacturer Direct Certified education/government reseller Authorized Distributor Manufacturer marketing through reseller Value-added reseller Other: System Integrator Midway Islands

♦ Processing Information

Sales Reports / Accounts Payable Contact Person: PK Chandrasheker Title: Vice President of Finance Company: 8KMiles Software Services, Inc.

Address: 3240 E State Street, Hamilton, NJ 08619 Phone: 1-855-856-4537, Ext 205 Email: pk@8kmiles.com

Purchase Orders Contact Person: PK Chandrasheker Title: Vice President of Finance Company: 8KMiles Software Services, Inc.

Address: 3240 E State Street, Hamilton, NJ 08619 Phone: 1-855-856-4537, Ext 205 Email: pk@8kmiles.com

Sales and Marketing Contact Person: Sri Vasireddy Title: Chief Cloud Officer Sales and Solution Engineering Company: 8KMiles Software Services, Inc. Address: 44121 Harry Byrd Hwy#275, Ashburn, Va. 20147

Phone: 1-855-856-4537, Ext 203 Email: sri@8kmiles.com

♦ Pricing Information In addition to the current typical unit pricing furnished herein, the Vendor agrees to offer all

future product introductions at prices that are proportionate to Contract Pricing.

If answer is no, attach a statement detailing how pricing for NCPA participants would be calculated for future product introductions.

Yes No This Contract provides for a wide range of products and services for Region 14 and NCPA members. As a reseller of AWS and other AWS marketplace vendor products and services, 8KMiles’ discounting structure may greatly differ from those vendors. Therefore, 8KMiles cannot guarantee that the pricing of all future product offerings will be proportional to the pricing provided here. 8KMiles will assure pricing parity across Region 14 and NCPA members for similar and like services and terms.

Pricing submitted includes the required NCPA administrative fee. The NCPA fee is calculated based on the invoice price to the customer.

Yes No

Vendor will provide additional discounts for purchase of a guaranteed quantity. Yes No

♦ CooperativesList any other cooperative or state contracts currently held or in the process of securing

None at this time

8KMiles Software Services, Inc. (8KMiles) an internet company focused on engineering cloud computing, mobility and big data innovative and low cost solutions for enterprise, small medium business (SMB), government, and managed service providers. Founded in 2008, we operate internationally with offices in North America, India, and Singapore. Our US offices are located in San Ramon, California, Ashburn, Virginia and Hamilton New Jersey. As an Amazon Web Services (AWS) Advanced Consulting Partner, 8KMiles offers a comprehensive suite of cloud solutions that provides our clients the ability to leverage the power of AWS’s worldwide cloud computing platform and capabilities. We have been working with Amazon for the last four years. Our Chief Cloud Officer, Sri Vasireddy, previously worked at AWS where he provided engineering and business development leadership and vision in the cloud marketplace. The 8KMiles team is expert in providing Cloud Consulting, Migration, and Engineering Services in the following key areas:

• Technical feasibility assessment and Proofs of Concept • Engineering of AWS cloud solutions tailored to clients’ security and cost framework • Infrastructure setup (Production, UAT, Load Testing, etc.) • Application integration • Cloud migration services • Infrastructure optimizations

8KMiles has also developed enterprise Value-Added Cloud Solutions to leverage the cloud in a secure way. We have engineered a suite of unique solutions, and today we offer the following Cloud solutions tailored to meet our clients’ needs:

• Secure Virtual Private Cloud (S-VPC) Solutions • Direct Connect • Secure Mobile Collaboration Solution • Big Data Solutions on Hadoop, MapReduce, Hive, HBase, Flume, and Sqoop

As a reseller of AWS services, 8KMiles can save you time by streamlining your deployment of new applications in the cloud. We demonstrate this daily through our in-depth and comprehensive understanding of such AWS products as:

• Amazon Elastic Compute Cloud (EC2) for Windows and Linux • Amazon Virtual Private Cloud (VPC) • Amazon Elastic Map Reduce (EMR) • Amazon Elastic Block Storage (EBS) • Amazon Simple Queue Service (SQS)

• Amazon Simple Notification Service (SNS) • Amazon Simple Storage Service (S3) • Amazon Auto Scaling • Amazon Elastic Load Balancer (ELB) • Amazon CloudWatch for monitoring • Amazon Elastic IP • Amazon MapReduce • Amazon SimpleDB • Amazon CloudFront • Amazon Relational Database Service (RDS)

By effectively leveraging the AWS platform, 8KMiles also offers Managed Services Solutions for:

• Cloud Hosted Solutions (i.e., “Secure Drop Box”) • Client Infrastructure and or Application Managed Service

We strive to provide our customers innovative, cost-effective solution that meet their security and cost profile. Our deep cloud engineering background and extensive knowledge of the AWS platform gives our customers the ability to quickly leverage the power of cloud computing.

8KMiles has a flat organization, as shown in Figure 1. The key individuals that will be involved in this contract are identified below;

Suresh Venkatachari Chief Executive Officer

Sri Vasireddy Chief Cloud Officer

Sales and Solution Engineering

Sudish Mogli Vice President, Engineering

and Operations

PK Chandrasheker Vice President,

Finance

California (Sales and Service): Address: 12648 Alcosta Boulevard, Suite 165, San Ramon, CA 94583

Point of Contact: Sudish Mogli, Vice President, Engineering and Operations, 1-855-856-4537, Ext 204

Email Address: sudish@8kmiles.com New Jersey (Sales and Service):

Address: 3240 E State Street, Ext, Hamilton, NJ 08619 Point of Contact: PK Chandrashekher, Vice President, Finance, 1-855-856-4537, Ext 205

Email Address: pk@8kmiles.com Virginia (Sales and Service):

Address: 44121 Harry Byrd Hwy#275, Ashburn, Va. 20147

Point of Contact: Sri Vasireddy, Chief Cloud Officer, 1-855-856-4537, Ext 203

Email address: sri@8kmiles.com

All Customer payments are due to 8KMiles in U.S. currency within forty-five (45) days of receipt of invoice. All delinquent amounts due from Customer to 8KMiles are subject to a late charge of the lesser of 1–1/2% per month or the maximum rate permitted by law. Customer shall pay 8KMiles all costs of collection of any past due amounts, including without limitation, reasonable attorneys’ fees and collection agent fees.

At present, there are 100-plus AWS Consulting Partners that service North American with only 33 classified as Advanced Consulting Partners. These 33 range from very large system integrators like Deloitte or Accenture to smaller companies like 8KMiles. 8KMiles considers the following companies our direct competitors:

• Acquilent • Blue River IT • Cognizant • CSS Corporation • DataPipe • JHT • Smartronix

8KMiles is in discussions with K-12 school districts, local government, universities, and non-profit organizations for AWS-related solutions. To date, it has been difficult for 8KMiles to support this market without a contracting vehicle.

8KMiles is one of the few systems integrators with comprehensive knowledge and experience designing and implementing secure—and cost-effective—cloud computing solutions. 8KMiles offers more than just consulting engineering and migration services: we offer secure turnkey enterprise cloud, mobility, and big data solutions (identified in subsection 5.15) that can be quickly implemented by Region 14 and NCPA members. We have extensive technical knowledge and successful experience with AWS’s infrastructure and offerings. Key AWS resellers often ask our company to provide our expertise to their product, technical, and business people to help advance their product offerings on the AWS cloud. As earlier noted, while Sri Vasireddy was employed by AWS he was the solutions lead for all state and local education (SLED) markets. This experience provided Mr. Vasireddy with significant working knowledge of solutions tailored to this market. These solutions include pay-per-use deployments of Learning Management Systems (LMS), distant learning solutions, collaboration solutions, parent/student outreach solutions, and document management and archival solutions for state and local governments.

8KMiles cloud expertise and knowledge, our people, and our methodologies are key differentiates from our competitors

Expertise & Knowledge

• Proven cloud strategy and implementation expertise and experience with cloud security, economics, architecture, infrastructure, platform, migration, optimization, and re-engineering

• Proven ability to navigate roadblocks, enabling early adoption of cloud computing models based on experience, best practices, and lessons learned cross private and public sectors

Our People

• Our cloud security and cloud computing engineers and architects with hands-on experience implementing cloud computing solutions and defining high-value strategy

• Expertise across numerous cloud service delivery models (Infrastructure, Platform, Software), and cloud deployment models (On & Off Premise, Hybrid/Virtual Private Cloud)

Technology, Processes & Methodology

• Innovative and tested methodology/approach for defining and implementing an enterprise cloud computing strategy

• Well-defined Systems Engineering and Cost-Benefit Analysis process for strategic IT transformation in an enterprise environment

8KMiles believes that SLED organizations are poised to benefit heavily from advances in cloud computing, mobility, and big data mainly driven by student demands. Students are early adopters of innovation in the consumer space and demand similar solutions at their schools. 8KMiles is constantly looking for ways to help the IT teams bridge the gap between student’s demands and compliance constraints imposed by security and legal teams.

Upon award of this contract, 8KMiles will further expand our channel partners program to include partners that specialize in the education space. We will build turnkey solutions that address immediate market needs such as Bring Your Own Device (BYOD) and big data analytics. We will draw on our strong relationship with AWS’s SLED Group to provide effective, aggressive marketing to NCPA members. Working in conjunction with NCPA, 8KMiles will determine the best way to address and work with their member community. We will directly market our secure enterprise cloud, mobility, and big data solution to the education marketplace. We are upgrading the 8KMiles website. When completed and upon award, the new website will identify this contract and our relationship with Region 14 and NCPA as a key opportunity for other NCPA members.

Our marketing plan section under Tab 8 provides further detail on how 8KMiles works hand in hand with AWS to enhance the adoption of cloud services around the world.

8KMiles’s Chief Executive Officer and Chief Cloud Officer will meet with NCPA within thirty (30) days after contract award to discuss NCPA’s unique needs, our company’s capabilities, and the most effective ways to reach and help the NCPA member community.

In Tab 7, Pricing & Warranty, we provide the web links for the services defined in Tab 5, Product and Services. These links provide the online catalog pricing against which Region 14 and NCPA members should apply the discounts offered under this contract. Since our valued-added solutions (as well as our consulting, engineering, and migration services) are highly tailored to our customers, 8KMiles has provided our hourly rates and competencies but not online pricing/ordering.

8KMiles operates out of three US locations, India, and Singapore . Our technical and helpdesk customer service is available 8am to 8pm Monday through Friday Eastern Standard Time. Upon award of the contract, 8KMiles will ensure 24x7x365 helpdesk and technical support for the solutions and services offered by 8KMiles under this contract that Region 14 and NCPA members can purchase if required. Furthermore, Region 14 and NCPA members that utilize Secure Virtual Private Cloud (S-VPC) offerings with the managed services option will have their

environment monitored at no additional cost for events and proactive notifications of incidents that occur in their environment.

In addition, Region 14 and NCPA members will have access to support offered by AWS. AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers at each of the North America locations. The service helps NCPA members to successfully utilize the products and features provided by Amazon Web Services.

AWS support is provided in four tiers:

1. Basic: Free forum-based support for any one that subscribes to AWS services.

2. Developer: Email-based support with twelve (12)-hours response time meant for individual developers.

3. Business: Phone, chat, and email-based support with one (1)-hour response time designed to meet the needs of small and medium-size businesses and enterprises getting started with AWS.

4. Enterprise: Phone, chat, email, and a dedicated technical account manager for enterprise with fifteen (15)-minutes response time designed for AWS power users.

All AWS Support tiers offer customers of AWS Infrastructure Services an unlimited number of support cases with pay-by-the-month pricing and no long-term contracts. The four tiers provide developers and businesses the flexibility to choose the support tiers that meet their specific needs. The combination of 8KMiles support and AWS support gives Region 14 and NCPA members the peace of mind they need knowing that there is a person they can reach out to when something goes wrong. In addition, members that utilize S-VPC with managed services option will have their environment monitored for events and receive proactive notifications of incidents that occur in their environment.

Going “green” means different things to business enterprises and individuals. As a technology consulting company that provides engineering solutions, we focus on remaining as paperless as possible and minimize printing and paper consumption wherever possible. When purchasing office supplies, we concentrate on green-friendly products and equipment that reduces our carbon footprint. We apply energy and water conservation best practices to reduce our operating expense and limit our consumption of critical resources.

Provide a copy of all current licenses, registrations and certifications issued by federal, state and local agencies, and any other licenses, registrations or certifications from any other governmental entity with jurisdiction, allowing respondent to perform the covered services including, but not limited to, licenses, registrations, or certifications. Certifications can include M/WBE, HUB, and manufacturer certifications for sales and service. None

8KMiles will provide a comprehensive set of cloud computing services for Region 14 and NCPA member organizations. As an Amazon Web Services (AWS) Advanced Consulting Partner, 8KMiles provides a comprehensive suite of Amazon Cloud Services as defined in subsections 5.1–5.10, through our AWS resell agreement. These sections describe AWS offerings, as defined by AWS, and identify 8KMiles value added services, where applicable. 8KMiles also provides cloud consulting, migration, and engineering implementation services as defined in subsection 5.11. 8KMiles provides unique cloud product solutions as defined in subsections 5.12–5.16. 8KMiles can tailor each of these services to the specific application and task order requirements issued under this contract. For the following subsections, we followed the suggested ordered list of product and service categories in the RFP and included our additional capabilities as added categories at the end of Tab 5.

Amazon Elastic Compute Cloud (Amazon EC2) is a web service that provides resizable compute capacity in the cloud. It is designed to make web-scale computing easier for Region 14 and NCPA members. Amazon EC2’s simple web service interface allows Region 14 and NCPA members to obtain and configure capacity with minimal effort. It provides Region 14 and NCPA members with complete control of their computing resources and the ability to run their applications on Amazon’s proven computing environment. Amazon EC2 reduces the time required to obtain and boot new server instances from days or hours to minutes, allowing Region 14 and NCPA members to quickly scale capacity, both up and down, as their computing requirements change. Amazon EC2 changes the economics of computing by allowing Region 14 and NCPA members to pay only for capacity that they actually use. Amazon EC2 provides the tools to build failure resilient applications and isolate themselves from common failure scenarios. The AWS platform and 8KMiles solutions offer the following key features:

• Secure –Depending on the level of security required, there are three AWS cloud environments that Region 14 and NCPA members can use to host applications: 1. The AWS classic environment is a quick and easy-to-use environment for trials. It is

meant for applications such as demo environments where security is not a concern. 2. The Virtual Private Cloud (VPC) environment is a private and secure environment

that provides network isolation for every customer and allows customers to host controlled unclassified data.

3. The AWS GovCloud (US) allows US government agencies and customers to move more sensitive workloads into the cloud by addressing their specific regulatory and compliance requirements. The AWS GovCloud (US) framework adheres to US International Traffic in Arms Regulations (ITAR) requirements.

Table 1 shows the security features offered by AWS for each of the cloud environments offered.

Classic VPC GovCloud

Logical Server and application isolation X X X

Granular information access policy X X X

Logical network isolation X X

Physical server isolation X X

Government only physical network and facility isolation

X

ITAR compliant (US persons only access) X

Sample work loads Public-facing applications, web sites, Dev/Test, etc.

Financial, HR, ERP, CRM applications

ITAR-Compliant and Government-Specific Apps

• Elastic – Amazon EC2 enables Region 14 and NCPA members to increase or decrease capacity within minutes, not hours or days. Region 14 and NCPA members can commission one, hundreds, or even thousands of server instances simultaneously. Since this is all controlled with web service APIs, the application can automatically scale itself up and down depending on its needs.

• Completely Controlled – Region 14 and NCPA members have complete control of their instances. They have root access to each instance, and can interact with them as they would any machine. They can stop an instance while retaining the data on a boot partition and then subsequently restart the same instance using web service APIs. Instances can be rebooted remotely using web service APIs. Region 14 and NCPA members also have access to console output of their instances.

• Flexible – Region 14 and NCPA members have the choice of multiple instance types, operating systems, and software packages. Amazon EC2 allows Region 14 and NCPA members to select a configuration of memory, CPU, instance storage, and the boot partition size that is optimal for their choice of operating system and application. For example, their choice of operating systems includes numerous Linux distributions and Microsoft Windows Server. Designed for use with other Amazon Web Services, Amazon EC2 works in conjunction with Amazon Simple Storage Service (Amazon S3), Amazon Relational Database Service (Amazon RDS), Amazon SimpleDB, and Amazon Simple Queue Service (Amazon SQS) to provide a complete solution for computing, query processing, and storage across a wide range of applications.

• Reliable – Amazon EC2 offers a highly reliable environment where replacement instances can be rapidly and predictably commissioned. The service runs within

Amazon’s proven network infrastructure and datacenters. The Amazon EC2 Service Level Agreement (SLA) commitment is 99.95% availability for each Amazon EC2 Region.

• In all of the foregoing cases, the AWS security and compliance regime is only applicable up to the hypervisor. Each Region 14 and NCPA member organization is responsible for the security and compliance of the applications deployed on AWS. The 8KMiles Secure VPC (S-VPC) solution provides additional security controls for the applications running in VPC to meet the application security and compliance requirements. Subsection 5.13 describes the S-VPC solution in more detail.

Amazon Elastic MapReduce (Amazon EMR) is a web service that enables Region 14 and NCPA members to easily and cost effectively process vast amounts of data. It utilizes a hosted Hadoop framework running on the web-scale infrastructure of Amazon Elastic Compute Cloud (Amazon EC2) and Amazon Simple Storage Service (Amazon S3).

Using Amazon Elastic MapReduce, Region 14 and NCPA members can instantly provision as much or as little capacity as they like to perform data-intensive tasks for applications such as web indexing, data mining, log file analysis, data warehousing, machine learning, financial analysis, scientific simulation, and bioinformatics research. Amazon Elastic MapReduce lets Region 14 and NCPA members focus on crunching or analyzing their data without having to worry about time-consuming setup, management, or tuning of Hadoop clusters or the compute capacity upon which they sit. Amazon Elastic MapReduce automatically spins up a Hadoop implementation of the MapReduce framework on Amazon EC2 instances, subdividing the data in a job flow into smaller chunks so that they can be processed (the “map” function) in parallel, and eventually recombining the processed data into the final solution (the “reduce” function). Amazon S3 serves as the source for the data being analyzed, and as the output destination for the end results.

The Big Data solution presented in subsection 5.15 describes how 8KMiles can help Region 14 and NCPA members apply Amazon EMR to efficiently analyze vast amounts of data and improve their decision making capability to improve effectiveness and efficiency of their mission.

Auto Scaling allows Region 14 and NCPA members to achieve the elasticity benefits by scaling their Amazon EC2 capacity up or down automatically according to conditions they define. With Auto Scaling, Region 14 and NCPA members can ensure that the number of Amazon EC2 instances increases seamlessly during demand spikes to maintain performance, and decreases automatically during demand lulls to minimize costs. Auto Scaling is particularly well suited for applications that experience hourly, daily, or weekly variability in usage. Auto Scaling is enabled by Amazon CloudWatch and available at no additional charge beyond Amazon CloudWatch fees. Key features include:

• Scale out Amazon EC2 instances seamlessly and automatically when demand increases.

• Shed unneeded Amazon EC2 instances automatically and save money when demand subsides.

• Scale dynamically based on Amazon CloudWatch metrics, or predictably according to a schedule that customers define.

• Receive notifications via Amazon Simple Notification Service (SNS) to be alerted when you use Amazon CloudWatch alarms to initiate Auto Scaling actions, or when Auto Scaling completes an action.

• Run On-Demand or Spot instances, including those inside your Virtual Private Cloud (VPC) or High Performance Computing (HPC) Clusters.

• Auto Scaling is enabled by Amazon CloudWatch and carries no additional fees.

Elastic Load Balancing automatically distributes incoming application traffic across multiple Amazon EC2 instances. It enables Region 14 and NCPA members to achieve even greater fault tolerance in their applications, seamlessly providing the amount of load balancing capacity needed in response to incoming application traffic. Elastic Load Balancing detects unhealthy instances within a pool and automatically reroutes traffic to healthy instances until the unhealthy instances have been restored. Customers can enable Elastic Load Balancing within a single Availability Zone or across multiple zones for even more consistent application performance. Elastic Load Balancing can also be used in an Amazon Virtual Private Cloud (VPC) to distribute traffic between application tiers. Key features include:

• Distributing incoming traffic across Amazon EC2 instances in a single Availability Zone or multiple Availability Zones. Elastic Load Balancing automatically scales its request handling capacity in response to incoming application traffic.

• When used in a VPC, users can create and manage security groups associated with their Elastic Load Balancing to provide additional networking and security options.

• When used in a VPC, users can create a load balancer without public IP addresses to serve as an internal (non-Internet facing) load balancer.

• Elastic Load Balancing can detect the health of Amazon EC2 instances. When it detects unhealthy load-balanced Amazon EC2 instances, it no longer routes traffic to those Amazon EC2 instances and spreads the load across the remaining healthy Amazon EC2 instances.

• Elastic Load Balancing supports the ability to stick user sessions to specific EC2 instances.

• Elastic Load Balancing supports SSL termination at the Load Balancer, including offloading SSL decryption from application instances, centralized management of SSL certificates, and encryption to backend instances with optional public key authentication.

• Flexible cipher support allows users to control the ciphers and protocols that are accepted by Elastic Load Balancing in the SSL negotiation for client connections.

• Elastic Load Balancing supports use of both the Internet Protocol version 4 and 6 (IPv4 and IPv6).

• Elastic Load Balancing metrics such as request count and request latency are reported by Amazon CloudWatch.

Amazon CloudFront is a web service for content delivery. It integrates with other Amazon Web Services to give developers and businesses an easy way to distribute content to end users with low latency, high data transfer speeds, and no commitments. Amazon CloudFront can be used to deliver users entire website, including dynamic, static and streaming content using a global network of edge locations. Requests for content are automatically routed to the nearest edge location, so content is delivered with the best possible performance. Amazon CloudFront is optimized to work with other Amazon Web Services, like Amazon Simple Storage Service (Amazon S3), Amazon Elastic Compute Cloud (Amazon EC2), Amazon Elastic Load Balancing, and Amazon Route 53. Amazon CloudFront also works seamlessly with any non-AWS origin server, which stores the original, definitive versions of your files. Like other Amazon Web Services, there are no contracts or monthly commitments for using Amazon CloudFront – you pay only for as much or as little content as you actually deliver through the service. Service highlights include:

• Fast – Using a network of edge locations around the world, Amazon CloudFront caches copies of static content close to viewers, lowering latency when they download objects and delivers high, sustained data transfer rates needed to serve large popular objects to end users at scale. Requests for dynamic content are carried back to origin servers running in Amazon Web Services (e.g., Amazon EC2 and Elastic Load Balancing) over optimized network paths for a more reliable and consistent experience. These network paths are constantly monitored by Amazon and connections from CloudFront edge locations to the origin are reused to serve dynamic content with the best possible performance.

• Simple –A single API call lets users get started distributing content from Amazon S3 bucket or Amazon EC2 instance or other origin server through the Amazon CloudFront network. Or, interact with Amazon CloudFront through the AWS Management Console’s simple graphical user interface. There is no need to create separate domains for static and dynamic content. With CloudFront, users can just use the same domain name to point to all of your website content. Any changes users make to existing configuration take effect across the entire global network within minutes. Plus, since there’s no need to negotiate with a sales person, users can get started quickly and begin delivering entire website using Amazon CloudFront.

• Designed for use with other Amazon Web Services – Amazon CloudFront is designed for use with other Amazon Web Services, including Amazon S3, where users can durably store the definitive versions of their static files, and Amazon EC2, where users can run your application server for dynamically generated content. Amazon CloudFront also integrates with Elastic Load Balancing. For instance, you can deploy your web application on Amazon EC2 servers behind Elastic Load Balancing and use Amazon CloudFront to deliver your entire website.

• Cost-Effective – Amazon CloudFront passes on the benefits of Amazon’s scale to you. You pay only for the content that you deliver through the network, without minimum commitments or up-front fees. This applies for any type of content that you deliver – static, dynamic, streaming media, or a web application with any combination of these.

• Elastic – With Amazon CloudFront, you don’t need to worry about maintaining expensive web-server capacity to meet the demand from potential traffic spikes for your content. The service automatically responds as demand increases or decreases without any intervention from you. Amazon CloudFront also uses multiple layers of caching at each edge location and collapses simultaneous requests for the same object before contacting your origin server. These optimizations further help reduce the need to scale your origin infrastructure as your website becomes more popular.

• Reliable –Amazon CloudFront is built using Amazon’s highly reliable infrastructure. The distributed nature of edge locations used by Amazon CloudFront automatically routes end users to the closest available location as required by network conditions. Origin requests from the edge locations to AWS origin servers (e.g., Amazon EC2, Amazon S3, etc.) are carried over network paths that Amazon constantly monitors and optimizes for both availability and performance.

• Global – Amazon CloudFront uses a global network of edge locations, located near Region 14 and NCPA members in the United States, Europe, Asia, and South America.

AWS offers a range of database services as defined in the following sections. 8KMiles is experienced in engineering and implementing each of these services.

Amazon Relational Database Service (Amazon RDS) is a web service that makes it easy to set up, operate, and scale a relational database in the cloud. It provides cost-efficient and resizable capacity while managing time-consuming database administration tasks, freeing the NCPA member to focus on their applications and business. Amazon RDS gives Region 14 and NCPA members access to the capabilities of a familiar MySQL, Oracle, or Microsoft SQL Server database engine. This means that the code, applications, and tools a customer already uses today with their existing databases can be used with Amazon RDS. Amazon RDS automatically patches the database software and backs up the customer’s database, storing the backups for a user-defined retention period and enabling point-in-time recovery. Region 14 and NCPA members benefit from the flexibility of being able to scale the compute resources or storage capacity associated with their Database Instance (DB Instance) via a single API call. Amazon RDS DB Instances can be provisioned with either standard storage or Provisioned IOPS storage. Amazon RDS Provisioned IOPS is a storage option designed to deliver fast, predictable, and consistent I/O performance, and is optimized for I/O-intensive, transactional (OLTP) database workloads. In addition, Amazon RDS makes it easy to use replication to enhance availability and reliability for production workloads. Using the Multi-AZ deployment option, Region 14 and NCPA

members can run mission-critical workloads with high availability and built-in automated fail-over from their primary database to a synchronously replicated secondary database in case of a failure. Amazon RDS for MySQL also enables Region 14 and NCPA members to scale out beyond the capacity of a single database deployment for read-heavy database workloads. As with all Amazon Web Services, there are no up-front investments required, and customers pay only for the resources used. The features provided by Amazon RDS depend on the DB Engine you select. Visit the Amazon RDS for MySQL page for supported features for the MySQL engine, the Amazon RDS for Oracle Database page for supported features of the Oracle database engine or the Amazon RDS for SQL Server page for supported features for the SQL Server engine.

• Pre-configured Parameters – Amazon RDS DB Instances are pre-configured with a sensible set of parameters and settings appropriate for the DB Instance class you have selected. You can simply launch a MySQL, Oracle or SQL Server DB Instance and connect your application within minutes without additional configuration. If you desire additional control, you can achieve it via DB Parameter Groups

• Monitoring and Metrics – Amazon RDS provides Amazon CloudWatch metrics for your DB Instance deployments at no additional charge. You can use the AWS Management Console to view key operational metrics for your DB Instance deployments, including compute/memory/storage capacity utilization, I/O activity, and DB Instance connections.

• Automatic Software Patching – Amazon RDS will make sure that the relational database software powering your deployment stays up-to-date with the latest patches. You can exert optional control over when and if your DB Instance is patched via DB Engine Version Management.

• Automated Backups – Turned on by default, the automated backup feature of Amazon RDS enables point-in-time recovery for your DB Instance. Amazon RDS will backup your database and transaction logs and store both for a user-specified retention period. This allows you to restore your DB Instance to any second during your retention period, up to the last five minutes. Your automatic backup retention period can be configured to up to thirty-five (35) days.

• DB Snapshots – DB Snapshots are user-initiated backups of your DB Instance. These full database backups will be stored by Amazon RDS until you explicitly delete them. You can create a new DB Instance from a DB Snapshot whenever you desire.

• Provisioned IOPS – Using the Amazon RDS APIs or with a few clicks on the AWS Management Console, you can provision the IOPS for your database instance and scale it easily. This functionality is available to you in two stages. Starting immediately, when you create new DB Instances using the AWS Management Console or the Amazon RDS APIs, you can provision from 1,000 IOPS to 10,000 IOPS with corresponding storage from 100GB to 1TB for MySQL and Oracle engines. You can start small and scale up in increments of 1,000 IOPS and 100GB of storage. If you are using SQL Server then the maximum IOPS you can provision is 7,000 IOPS.

• Push-Button Scaling – Using the Amazon RDS APIs or with a few clicks on the AWS Management Console, you can scale the compute and memory resources powering your deployment up or down. Scale compute operations typically complete within a handful of

minutes. For MySQL and Oracle database engines, as your storage requirements grow, you can also provision additional storage on-the-fly with zero downtime. If you are using RDS Provisioned IOPS with the MySQL and Oracle database engines, you can also scale the throughput of your DB Instance by specifying the IOPS rate from 1,000 IOPS to 10,000 IOPS and corresponding storage from 100GB and 1TB in 1,000 IOPS and 100GB increments.

• Automatic Host Replacement – Amazon RDS will automatically replace the compute instance powering your deployment in the event of a hardware failure.

• Replication – Amazon RDS provides two distinct but complementary replication features: Multi-AZ deployments and Read Replicas that can be used in conjunction to gain enhanced database availability, protect your latest database updates against unplanned outages, and scale beyond the capacity constraints of a single DB Instance for read-heavy database workloads. Multi-AZ deployments are available for the MySQL and Oracle database engines. Read Replicas are currently supported for the MySQL database engine.

• Isolation and Security – Using Amazon VPC, you can isolate your DB Instances in your own virtual network, and connect to your existing IT infrastructure using industry-standard encrypted IPsec VPN. The VPC functionality is supported by all RDS DB Engines. To learn more about Amazon RDS in VPC, refer to the Amazon RDS User Guide. In addition, using Amazon RDS, you can configure firewall settings and control network access to your DB Instances.

Amazon DynamoDB is a fully managed NoSQL database service that provides fast and predictable performance with seamless scalability. With a few clicks in the AWS Management Console, customers can launch a new Amazon DynamoDB database table, scale up or down their request capacity for the table without downtime or performance degradation, and gain visibility into resource utilization and performance metrics. Amazon DynamoDB enables customers to offload the administrative burdens of operating and scaling distributed databases to AWS, so they don’t have to worry about hardware provisioning, setup and configuration, replication, software patching, or cluster scaling. Amazon DynamoDB is designed to address the core problems of database management, performance, scalability, and reliability. Developers can create a database table that can store and retrieve any amount of data, and serve any level of request traffic. DynamoDB automatically spreads the data and traffic for the table over a sufficient number of servers to handle the request capacity specified by the customer and the amount of data stored, while maintaining consistent, fast performance. All data items are stored on Solid State Drives (SSDs) and are automatically replicated across three Availability Zones in a Region to provide built-in high availability and data durability. Amazon DynamoDB enables customers to offload the administrative burden of operating and scaling a highly available distributed database cluster while only paying a low variable price for the resources they consume.

Amazon ElastiCache is a web service that makes it easy to deploy, operate, and scale an in-memory cache in the cloud. The service improves the performance of web applications by allowing you to retrieve information from a fast, managed, in-memory caching system, instead of relying entirely on slower disk-based databases. Amazon ElastiCache is protocol-compliant with Memcached, a widely adopted memory object caching system, so code, applications, and popular tools that you use today with existing Memcached environments will work seamlessly with the service.

Amazon ElastiCache simplifies and offloads the management, monitoring, and operation of in-memory cache environments, enabling Region 14 and NCPA members to focus on the differentiating parts of your applications. Using Amazon ElastiCache, you can add an in-memory cache to your application architecture in a matter of minutes. With a few clicks of the AWS Management Console, you can launch a Cache Cluster consisting of a collection of Cache Nodes, each running Memcached software. You can then scale the amount of memory associated with your Cache Cluster in minutes by adding or deleting Cache Nodes to meet the demands of your changing workload. In addition, Amazon ElastiCache automatically detects and replaces failed Cache Nodes, providing a resilient system that mitigates the risk of overloaded databases, which slow website and application load times. Through integration with Amazon CloudWatch, Amazon ElastiCache provides enhanced visibility into key performance metrics associated with your Cache Nodes.

Amazon provides a simple and intuitive, web-based user interface to manage virtual resources. The AWS Management Console provides convenient point-and-click web interface for management of compute, storage, and other cloud resources. AWS provides a log in using your AWS account name and password. Region 14 and NCPA members can enable AWS Multi-Factor Authentication (MFA) to their console to further secure access. If MFA is enabled, users will be prompted for their device’s authentication code as an extra measure of security. AWS Management Console you can easily manage Amazon S3 buckets and objects. You can create buckets, upload objects, and manage all aspects of your Amazon S3 resources. With the AWS Management Console, developers can start and stop EC2 instances, view and perform actions on running instances, and manage Elastic Block Store volumes with simple clicks of a mouse. You can also see what configurations you have set (e.g. security groups, key pairs, and Elastic IPs) and modify them using interactive controls. AWS Management Console to set up and configure your Virtual Private Cloud (VPC). A simple wizard will assist you in creating your VPC and subnets, and will also help you establish IPSec VPN connectivity to your VPC. Once your VPC has been created, use the AWS Management Console to configure DHCP option sets, subnets, and to launch Amazon EC2 instances within your VPC. With the AWS Management Console, developers can view and monitor operational and performance metrics for AWS resources such as Amazon EC2 instances, EBS volumes, and Elastic Load Balancers.

In addition, developers can add application metrics and business information to CloudWatch for monitoring alongside AWS resource metrics. Search and browse your metrics, graph current or historical metrics to troubleshoot issues and discover trends, create and edit alarms to be notified of problems, and get at-a-glance overviews of your AWS resource metrics.

The AWS API tools serve as the client interface to create and manage virtual resources using machine-to-machine interfaces. Users can perform all the functions mentioned above in the Web based management section using these tools. The Sample Code & Libraries Catalog provides a listing of code, Software Development Kits (SDK), sample applications, and other tools available to for use by the AWS developer community. The SDKs for Java, .NET, PHP, Ruby, iOS and Android can be found at http://aws.amazon.com/code/.

Amazon CloudWatch provides monitoring for AWS cloud resources and the applications customers run on AWS. Developers and system administrators can use it to collect and track metrics, gain insight, and react immediately to keep their applications and businesses running smoothly. Amazon CloudWatch monitors AWS resources such as Amazon EC2 and Amazon RDS DB instances, and can also monitor custom metrics generated by applications and services. With Amazon CloudWatch, users gain system-wide visibility into resource utilization, application performance, and operational health. Amazon CloudWatch provides a reliable, scalable, and flexible monitoring solution that you can start using within minutes. Users no longer need to set up, manage, or scale your own monitoring systems and infrastructure. Using Amazon CloudWatch, you can easily monitor as much or as little metric data as you need. Amazon CloudWatch lets you programmatically retrieve your monitoring data, view graphs, and set alarms to help you troubleshoot, spot trends, and take automated action based on the state of your cloud environment.

Amazon CloudSearch is a fully-managed search service in the cloud that allows customers to easily integrate fast and highly scalable search functionality into their applications. With a few clicks in the AWS Management Console, developers simply create a search domain, upload the data they want to make searchable to Amazon CloudSearch, and the service then automatically provisions the technology resources required and deploys a highly tuned search index.

Amazon CloudSearch seamlessly scales as the amount of searchable data increases or as the query rate changes, and developers can change search parameters, fine tune search relevance, and apply new settings at any time without having to upload the data again. Amazon CloudSearch enables customers to offload the administrative burden of operating and scaling a search platform. Customers don't have to worry about hardware provisioning, data partitioning, or software patches. Amazon CloudSearch offers low, pay-as-you-go pricing with no up-front expenses or long-term commitments.

Amazon Simple Workflow Service (Amazon SWF) is a workflow service for building scalable, resilient applications. Whether automating business processes for finance or insurance applications, building sophisticated data analytics applications, or managing cloud infrastructure services, Amazon SWF reliably coordinates all of the processing steps within an application. With traditional development approaches, it is both time-consuming and costly to build and track processing steps that run at different times and have different durations, while ensuring they are executed reliably and without duplication. When the execution of applications is distributed across multiple systems, the coordination of processing steps across those systems presents an added challenge. Using Amazon SWF, developers can structure the various processing steps in an application as “tasks” that drive work in distributed applications, and Amazon SWF coordinates these tasks in a reliable and scalable manner. Amazon SWF manages task execution dependencies, scheduling, and concurrency based on a developer’s application logic. The service stores tasks, reliably dispatches them to application components, tracks their progress, and keeps their latest state. Amazon SWF is a fully managed service, with no hardware or software to administer, scale, tune, patch or upgrade. Amazon SWF provides simple API calls that can be executed from code written in any language and run on your EC2 instances, or any of your machines located anywhere in the world that can access the Internet. On-premises machines can simply open an Internet connection to request tasks from SWF APIs, requiring no changes to firewall rules. Detailed reporting on the current status and execution history of your workflows is available through the AWS Management Console.

Amazon Simple Queue Service (Amazon SQS) offers a reliable, highly scalable, hosted queue for storing messages as they travel between computers. By using Amazon SQS, developers can simply move data between distributed components of their applications that perform different tasks, without losing messages or requiring each component to be always available. Amazon SQS makes it easy to build an automated workflow, working in close conjunction with the Amazon Elastic Compute Cloud (Amazon EC2) and the other AWS infrastructure web services.

Amazon SQS works by exposing Amazon’s web-scale messaging infrastructure as a web service. Any computer on the Internet can add or read messages without any installed software or special firewall configurations. Components of applications using Amazon SQS can run independently, and do not need to be on the same network, developed with the same technologies, or running at the same time.

Amazon Simple Notification Service (Amazon SNS) is a web service that makes it easy to set up, operate, and send notifications from the cloud. It provides developers with a highly scalable, flexible, and cost-effective capability to publish messages from an application and immediately deliver them to subscribers or other applications. It is designed to make web-scale computing easier for developers. Amazon SNS provides a simple web services interface and browser-based Management Console that can be used to create topics you want to notify applications (or people) about, subscribe clients to these topics, publish messages, and have these messages

delivered over clients’ protocol of choice (e.g., HTTP, email, and SMS. Amazon SNS delivers notifications to clients using a “push” mechanism that eliminates the need to periodically check or “poll” for new information and updates. Amazon SNS can be leveraged to build highly reliable, event-driven workflows and messaging applications without the need for complex middleware and application management. The potential uses for Amazon SNS include monitoring applications, workflow systems, time-sensitive information updates, mobile applications, and many others. As with all Amazon Web Services, there are no up-front investments required, and you pay only for the resources you use.

Amazon Simple Email Service (Amazon SES) is a highly scalable and cost-effective bulk and transactional email-sending service for businesses and developers. Amazon SES eliminates the complexity and expense of building an in-house email solution or licensing, installing, and operating a third-party email service. The service integrates with other AWS services, making it easy to send emails from applications being hosted on services such as Amazon EC2. With Amazon SES there is no long-term commitment, minimum spend or negotiation required - businesses can utilize a free usage tier and after that enjoy low fees for the number of emails sent plus data transfer fees. Building large-scale email solutions to send marketing and transactional messages is often a complex and costly challenge for businesses. To optimize the percentage of emails that are successfully delivered, businesses must deal with hassles such as email server management, network configuration, and meeting rigorous Internet Service Provider (ISP) standards for email content. Additionally, many third-party email solutions require contract and price negotiations, as well as significant up-front costs. Amazon SES eliminates these challenges and enables businesses to benefit from the years of experience and sophisticated email infrastructure Amazon.com has built to serve its own large-scale customer base. Using SMTP or a simple API call, businesses can now access a high-quality, scalable email infrastructure to efficiently and inexpensively communicate to their customers. For high email deliverability, Amazon SES uses content filtering technologies to scan a business’s outgoing email messages to help ensure that the content meets ISP standards. The email message is then either queued for sending or routed back to the sender for corrective action. To help businesses further improve the quality of email communications with their customers, Amazon SES provides a built-in feedback loop, which includes notifications of bounce backs, failed and successful delivery attempts, and spam complaints.

Region 14 and NCPA members can run business applications in the cloud to lower costs, deploy the applications more quickly, and simplify infrastructure management. AWS offers a reliable and flexible cloud infrastructure platform that enables NCPA members to run all types of business applications, from small departmental solutions to mission-critical applications that automate company-wide business processes.

Region 14 and NCPA members deploying business applications on AWS can choose between installing and configuring their own applications or launching entire software stacks from Oracle, SAP, Microsoft and IBM in minutes by choosing from a large selection of pre-configured virtual machine images. In both cases, Region 14 and NCPA members may be able to use their existing software licenses in the AWS cloud with no additional license fees. In addition to deploying applications to the AWS cloud, Region 14 and NCPA members can also subscribe to business applications that run on AWS and which are offered as a service [Software as a Service (SaaS)] by such software vendors as Adobe, Infor, ESRI, Splunk, Consona, and Coupa. Region 14 and NCPA members can obtain these services from AWS Marketplace (an online store) that allows them to buy and quickly deploy software that runs on AWS. Region 14 and NCPA members can use AWS Marketplace’s 1-Click deployment to quickly launch pre-configured software and be charged for what they use, by the hour or month.

In subsections 5.12–5.16, we describe how 8KMiles can help Region 14 and NCPA members utilize the software available on AWS marketplace and apply it to solve their business needs in a secure and cost-effective manner.

Amazon Web Services offers Virtual Private Cloud (VPC) for Region 14 and NCPA members to design their own private network topology that is similar to their data centers while using a private network addressing scheme. Region 14 and NCPA members can connect their VPC to their data centers using IPSec tunnels riding on their Virtual Private Network (VPN) or a dedicated connection using AWS Direct Connect.

Amazon Virtual Private Cloud (Amazon VPC) lets Region 14 and NCPA members provision a private, isolated section of the Amazon Web Services (AWS) Cloud where members can launch AWS resources in a virtual network that they define. With Amazon VPC, users can define a virtual network topology that closely resembles a traditional network that they might operate in their own data center. Region 14 and NCPA members have complete control over their virtual networking environment, including selection of their own IP address range, creation of subnets, and configuration of route tables and network gateways. Region 14 and NCPA members can easily customize the network configuration for their Amazon VPC. For example, users can create a public-facing subnet for their web servers that has access to the Internet, and place their backend systems such as databases or application servers in a private-facing subnet with no Internet access. Region 14 and NCPA members can leverage multiple layers of security, including security groups and network access control lists, to help control access to Amazon EC2 instances in each subnet. Additionally, Region 14 and NCPA members can create a Hardware VPN connection between their corporate data center and their VPC and leverage the AWS cloud as an extension of their corporate data center. Figure 2 shows a notional picture of the AWS VPC infrastructure offering.

A variety of connectivity options exist for users of Amazon VPC: they can connect their VPC to the Internet, to their datacenter, or both, based on the AWS resources that they want to expose publicly and those that they want to keep private.

• Connect directly to the Internet (public subnets) – You can launch instances into a publicly accessible subnet where they can send and receive traffic from the Internet.

• Connect to the Internet using Network Address Translation (private subnets) – Private subnets can be used for instances that Region 14 and NCPA members do not want to be directly addressable from the Internet. Instances in a private subnet can access the Internet without exposing their private IP address by routing their traffic through a Network Address Translation (NAT) instance in a public subnet.

• Connect securely to a corporate datacenter – All traffic to and from instances in Region 14 and NCPA members’ VPC can be routed to their corporate datacenter over an industry standard, encrypted IPsec hardware VPN connection.

• Combine connectivity methods to match the needs of your application – Region 14 and NCPA members can connect a VPC to both the Internet and their corporate datacenter and configure Amazon VPC route tables to direct all traffic to its proper destination.

Amazon VPC provides advanced security features such as security groups and network access control lists to enable inbound and outbound filtering at the instance level and subnet level. In

addition, Region 14 and NCPA members can store data in Amazon S3 and restrict access so that it’s only accessible from instances in their VPC. Optionally, they can also choose to launch Dedicated Instances that run on hardware dedicated to a single customer for additional isolation.

AWS Direct Connect makes it easy to establish a dedicated network connection from Region 14 and NCPA members’ premise to AWS. Using AWS Direct Connect, Region 14 and NCPA members can establish private connectivity between AWS and your datacenter, office, or colocation environment, which in many cases can reduce your network costs, increase bandwidth throughput, and provide a more consistent network experience than Internet-based connections. AWS Direct Connect lets Region 14 and NCPA members establish a dedicated network connection between their network and one of the AWS Direct Connect locations. Using industry standard 802.1q VLANs, this dedicated connection can be partitioned into multiple virtual interfaces. This allows users to use the same connection to access public resources such as objects stored in Amazon S3 using public IP address space, and private resources such as Amazon EC2 instances running within an Amazon Virtual Private Cloud (VPC) using private IP space, while maintaining network separation between the public and private environments. Virtual interfaces can be reconfigured at any time to meet their changing needs. Key features include;

• Reduces Region 14 and NCPA Members’ Bandwidth Costs – If users have bandwidth-heavy workloads that they wish to run in AWS, AWS Direct Connect reduces their network costs into and out of AWS in two ways. First, by transferring data to and from AWS directly, they can reduce your bandwidth commitment to your Internet service provider. Second, all data transferred over your dedicated connection is charged at the reduced AWS Direct Connect data transfer rate rather than Internet data transfer rates.

• Consistent Network Performance – Network latency over the Internet can vary given that the Internet is constantly changing how data gets from point A to B. With AWS Direct Connect, Region 14 and NCPA members choose the data that utilizes the dedicated connection and how that data is routed which can provide a more consistent network experience over Internet-based connections.

• Compatible with all AWS Services – AWS Direct Connect is a network service, and works with all AWS services that are accessible over the Internet, such as Amazon Simple Storage Service (Amazon S3), Elastic Compute Cloud (Amazon EC2), and Amazon Virtual Private Cloud (Amazon VPC).

• Private Connectivity to Amazon VPC – Region 14 and NCPA members can use AWS Direct Connect to establish a private virtual interface from their on-premise network directly to their Amazon VPC, providing them with a private, high bandwidth network connection between their network and their VPC. With multiple virtual interfaces, Region 14 and NCPA members can even establish private connectivity to multiple VPCs while maintaining network isolation.

• Elastic – AWS Direct Connect makes it easy to scale Region 14 and NCPA members’ connection to meet their needs. AWS Direct Connect provides 1 Gbps and 10 Gbps connections, and they can easily provision multiple connections if they need more capacity. Region 14 and NCPA members can also use AWS Direct Connect instead of

establishing a VPN connection over the Internet to their Amazon VPC, avoiding the need to utilize VPN hardware that frequently can’t support data transfer rates above 4 Gbps.

• Simple – Region 14 and NCPA members can sign up for AWS Direct Connect service quickly and easily using the AWS Management Console. The console provides a single view to efficiently manage all their connections and virtual interfaces. Users can also download customized router templates for their networking equipment after configuring one or more virtual interfaces.

Amazon offers two types of storage: Amazon Elastic Block Store (EBS) and Amazon Simple Storage Service (S3). EBS is meant for use as a disk on a server and the user pays for what they allocate. S3 is an object store that can store large amounts of data on a pay-per-use basis.

Amazon Elastic Block Store (EBS) provides block-level storage volumes for use with Amazon EC2 instances. Amazon EBS volumes are network attached, and persist independently from the life of an instance. Amazon EBS provides highly available, highly reliable, predictable storage volumes that can be attached to a running Amazon EC2 instance and exposed as a device within the instance. Amazon EBS is particularly suited for applications that require a database, file system, or access to raw block-level storage.

• Amazon EBS allows Region 14 and NCPA members to create storage volumes from 1 GB to 1 TB that can be mounted as devices by Amazon EC2 instances. Multiple volumes can be mounted to the same instance.

• Amazon EBS enables Region 14 and NCPA members to provision a specific level of I/O performance if desired, by choosing a Provisioned IOPS volume. This allows them to predictably scale to thousands of IOPS per Amazon EC2 instance.

• Storage volumes behave like raw, unformatted block devices, with user-supplied device names and a block device interface. Region 14 and NCPA members can create a file system on top of Amazon EBS volumes, or use them in any other way they would use a block device (like a hard drive).

• Amazon EBS volumes are placed in a specific Availability Zone, and can then be attached to instances also in that same Availability Zone.

• Each storage volume is automatically replicated within the same Availability Zone. This prevents data loss due to failure of any single hardware component.

• Amazon EBS also provides the ability to create point-in-time snapshots of volumes, which are persisted to Amazon S3. These snapshots can be used as the starting point for new Amazon EBS volumes, and protect data for long-term durability. The same snapshot can be used to instantiate as many volumes as the user wishes.

• AWS also enables Region 14 and NCPA members to create new volumes from AWS hosted public data sets.

• Amazon CloudWatch exposes performance metrics for EBS volumes, giving Region 14 and NCPA members insight into bandwidth, throughput, latency, and queue depth. The

metrics are accessible via the AWS CloudWatch API or the AWS Management Console. For more details, see Amazon CloudWatch.

Amazon S3 is storage for the Internet. It is designed to make web-scale computing easier for developers. Amazon S3 provides a simple web services interface that can be used to store and retrieve any amount of data, at any time, from anywhere on the web. It gives any user access to the same highly scalable, reliable, secure, fast, inexpensive infrastructure that Amazon uses to run its own global network of web sites. The service aims to maximize benefits of scale and to pass those benefits on to developers.

Amazon S3 is intentionally built with a minimal feature set, as follows:

• Write, read, and delete objects containing from 1 byte to 5 terabytes of data each. The number of objects Region 14 and NCPA members can store is unlimited.

• Each object is stored in a bucket and retrieved via a unique, developer-assigned key. • A bucket can be stored in one of several Regions. Region 14 and NCPA members can

choose a Region to optimize for latency, minimize costs, or address regulatory requirements. Amazon S3 is currently available in the US Standard, US West (Oregon), US West (Northern California), EU (Ireland), Asia Pacific (Singapore), Asia Pacific (Tokyo), South America (Sao Paulo), and GovCloud (US) Regions. The US Standard Region automatically routes requests to facilities in Northern Virginia or the Pacific Northwest using network maps.

• Objects stored in a Region never leave the Region unless Region 14 and NCPA members transfer them out. For example, objects stored in the EU (Ireland) Region never leave the EU.

• Authentication mechanisms are provided to ensure that data is kept secure from unauthorized access. Objects can be made private or public, and rights can be granted to specific users.

• Options for secure data upload/download and encryption of data at rest are provided for additional data protection.

• Uses standards-based REST and SOAP interfaces designed to work with any Internet-development toolkit.

• Built to be flexible so that protocol or functional layers can easily be added. The default download protocol is HTTP. A BitTorrent™ protocol interface is provided to lower costs for high-scale distribution.

• Includes options for performing recurring and high volume deletions. For recurring deletions, rules can be defined to remove sets of objects after a pre-defined time period. For efficient one-time deletions, up to 1,000 objects can be deleted with a single request.

• Reliability is backed with the Amazon S3 Service Level Agreement.

In Tab 8, Value Added Products and Services, we describe our 8KMiles application support service as an optional service for an additional cost. Region 14 and NCPA members will always have access to 8KMiles support services, if they choose the option.

In addition to 8KMiles support service, AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps Region 14 and NCPA members to successfully utilize the products and features provided by Amazon Web Services.

AWS support is provided in four tiers:

1. Basic: Free forum-based support for anyone that subscribes to AWS services.

2. Developer: Email-based support with twelve (12)-hour response time meant for individual developers.

3. Business: Phone, chat, and email-based support with one (1)-hour response time designed to meet the needs of small and medium-size businesses and enterprises getting started with AWS.

4. Enterprise: Phone, chat, email, and a dedicated technical account manager for enterprise with fifteen (15)-minutes response time designed for AWS power users.

All AWS Support tiers offer customers of AWS Infrastructure Services an unlimited number of support cases with pay-by-the-month pricing and no long-term contracts. The four tiers provide developers and businesses the flexibility to choose the support tiers that meet their specific needs at any point in time.

AWS offers data transfer service for web traffic on a pay-per-use basis. Region 14 and NCPA members do not incur any set up charges for the web traffic to the public Internet. The charges only apply to outgoing traffic (Internet traffic that leaves AWS). There is no charge for incoming traffic. When Region 14 and NCPA members use a Hardware VPN Connection to their VPC via a Virtual Private Gateway, a charge applies for every “VPN Connection-hour” that the VPN connection is provisioned and available. Each partial VPN Connection-hour consumed is billed as a full hour. Region 14 and NCPA members incur standard AWS data transfer charges for all data transferred via the VPN Connection.

Region 14 and NCPA members that transfer large amounts of data may prefer to use AWS Direct Connect. AWS Direct Connect reduces the network costs into and out of AWS in two ways. First, by transferring data to and from AWS directly, a member can reduce its bandwidth commitment to its Internet Service Provider. Second, all data transferred over the dedicated connection is charged at the reduced AWS Direct Connect data transfer rate rather than Internet data transfer rates.

8KMiles follows AWS best practices in providing a comprehensive set of Cloud Consulting, Migration, and Engineering Services from concept through implementation. 8KMiles has the working knowledge and experience that we have accumulated over years of helping customers. This expertise will provide Region 14 and NCPA members the comfort and confidence that their migrations will be completed successfully. These services are highly tailored to the client’s specific technical and business requirements to support a lifecycle model as shown in Figure 3.

To support Region 14 and NCPA members, 8KMiles will make a full range of engineering services to support the following key areas.

Several factors need to be assessed before an organization makes a move to the cloud. These include:

• Financial assessment that includes a total cost of operation to ensure cost savings as well as productivity growth that is enabled by innovation and agility that cloud offers.

• Security assessment to identify what applications can and cannot move to the cloud and what security controls are required as a part of the move.

• Technical assessment to make sure that applications will run as good or better after they move to the cloud.

• Policy/Process assessment to make sure the existing information technology (IT) policies and processes are in place for continuous and reliable operations.

• Licensing and contract assessment to ensure that the applications that move to the cloud do not introduce any liability or risk.

Once the assessment is complete, 8KMiles believes in providing actionable recommendations. In this regard, 8KMiles will produce technical reference architecture and provide a technical reference implementation by building a proof of concept (POC). Over years, 8KMiles has gained the confidence of the AWS sales team to a degree that the AWS sales team brings their most strategic accounts to 8KMiles to ensure high rate of success with the POC. A few such POCs include:

• A large low-cost airline company that required highly scalable infrastructure (starting hundreds of servers) when they run a promotion on their website.

• A global public sector financial corporation that wanted to prove that they can meet all the security and compliance requirements they have in their data centers after the move. This enabled them to leverage AWS global infrastructure to provide better user experience to their customers and employees around the world.

• A large insurance company that wanted to reduce their daily data processing times from hours to minutes to make better business decisions.

After completing a successful assessment and demonstrating success with a POC, 8KMiles can help with the migration of application and data to the cloud and optimize the applications for the cloud.

As a first step in the migration process, 8KMiles’ team of experts will perform a detailed technical study of the customer infrastructure requirements and recommend the suitable architecture to be set up in AWS. The study will cover all the major layers of the system requirements such as DNS, load balancers, web, application layers, database, storage, security, internal and external integrations, monitoring, backup, deployment, and background programs in the AWS infrastructure. 8KMiles will work closely with Region 14 and NCPA member’s technology team during this step. This is an essential step in understanding the infrastructure requirements for the engineering phase.

Once the requirements are clear, 8KMiles will proceed to the engineering phase that includes:

1. Identify and suggest the capacity needs of the infrastructure in terms of the number of Amazon EC2 Instances, Instance Types, Regions, and Availability Zones.

2. Provision the CPU, Memory, IO, and Network bandwidth according to the requirements of the individual applications and its different layers

3. Configure Amazon Elastic Load Balancer for the application. 4. Configure the Health Check, Timeouts, Thresholds, and Round Robin Algorithms in

ELB. 5. Configure CloudWatch Monitoring for EC2 instances. 6. Configure the necessary AWS Security Groups for revised architecture.

7. Configure IAM (Identity and Access Management) policies, turn off unused services and ports.

8. Identify and Implement the suggested Instance Capacity and Amazon Machine Image (AMI) type.

9. Identify the version for caching nodes for the proposed architecture. 10. Identify and implement the suggested RDS database in Multi-AZ with the necessary

number of Read Replicas. Configure the Backup and Maintenance window, frequency, and schedule.

11. Configure Amazon CloudWatch for monitoring. 12. Configure and implement the backup policies for the Database and Web Layers. 13. Create the base AMI once the initial application setup has been completed. 14. Configure CloudWatch monitoring/ CloudWatch Alarms/Alerts for all the applicable

tiers of the proposed architecture.

The foregoing steps for cloud migration and engineering may vary for different applications. For example, a web application may require a CloudFront configuration to make use of content delivery network services to improve the end-user experience. Other applications may have application integration steps that involve components from AWS Software MarketPlace or other SaaS offerings. 8KMiles cloud architects and cloud developers are expert in delivering a wide variety of services that we describe in subsections 5.12–5.16.

Security is a cost versus risk decision. Security requirements vary from application to application depending on the information that an application stores. Our 8KMiles team has the expertise to assess the sensitivity of the Region 14 and NCPA members’ information in the application that is being migrated to the cloud and classify the data to accurately identify the security requirements that meet compliance needs. Our 8KMiles team has the experience of working with public sector organizations that follow Federal Information Security Management Act (FISMA) requirements or educational institutions that follow the Family Education Rights and Privacy Act (FERPA) to implement the most cost-effective security framework that meets the applicable security (confidentiality, integrity, and availability) and compliance requirements.

Cloud deployments pay off even more when they are optimized to use the elasticity and pay-per-use nature of the cloud. 8KMiles will help Region 14 and NCPA members gain the most from their cloud deployments by optimizing their applications, which includes such tasks as:

1. Analyzing the usage patterns and stopping instances when they are not in use. For example, a development may not be used between 8 PM and 8 AM in the morning. Customers can save money by stopping these instances.

2. Reengineering applications to be elastic. An example of this service is to make sure that the user sessions are not affected when application servers are added or removed based on load.

3. Identify steady-state utilization of instances after reengineering and purchase reserved instances to avail 30–50% cost savings over on-demand instances.

1. Decompose relational databases and use less expensive and more effective solutions such as SimpleDB or DynamoDB where applicable.

8KMiles also provide a set of Value-Added Solutions that can be customized to Region 14 and NCPA members as described the next subsection.

8KMiles will provide Region 14 and NCPA members value-added solutions that leverage the AWS platform. Our unique, valued-added solutions have been designed to provide enterprise-level cloud security, mobile collaboration, and large-scale data analytics solutions that can be tailored to Region 14 and NCPA-specific member’s cost, security profile, and technical requirements. Due to our ability to highly tailor these solutions, pricing will be quoted based on the NCPA specific requirements.

In this era of on-demand mobile computing, there are more and more requests for making sure that the distribution of information (personal information and otherwise) onto mobile devices is protected and secure. Whether we are talking about personal information like social security numbers, credit card information, or addresses and phone numbers; about personal health information exchanged between physicians and patients; or even about homework assignments, student projects, and grades at all levels of education, the security of our own data is critically important.

8KMiles has designed, developed, and deployed a packaged secure virtual private cloud (S-VPC) framework that provides assurance of information protection (see Figure 4). As described in subsection 5.7.1, the Amazon VPC lets customers provision a private, isolated section of the AWS Cloud. We have integrated a front-end user layer using a Sophos unified threat management suite. The suite provides firewall services, intrusion protection/detection services, secure virtual private network (VPN) connectivity, packet filtering, and web application firewall protection not available via AWS standard offerings. This front-end protects against denial-of-service attacks, worms, and hacker exploits; secures email from spam and viruses; filters web browsing; and provides wireless network protection. An application layer leverages the pay-per-use approach and elastic AWS services infrastructure in the S-VPC to deliver a scalable and highly available collaboration solution. Data is encrypted while at rest whether in RDS for Oracle or RDS for SQL Server. We recommend that each client manages the keys for data encryption within their own corporate data center with oversight provided by their system administrators. System administrator access control is provided through the Xceedium Xsuite Cloud identity and access management solution. This suite supplements the AWS Management Console by vaulting administrator credentials, enforcing separation of duties, and recording all

accesses and actions. Finally, we provide a management layer that provides continuous real-time forensics to watch for patterns of malicious activity across the S-VPC framework.

This framework allows our customers to provision almost any application in the application layer while benefitting from the security and scalability of the S-VPC framework. As part of 8KMiles engineering service offerings we can help Region 14 and NCPA Members make their applications cloud ready and integrated into this pre-defined, proven framework.

The security of the framework has been validated by independent third-party auditors and meets the Federal Information Security Management Act (FISMA) moderate security level, the Payment Card Industry (PCI) security standard, the Service Organization Control (SOC) 1 standard, and is fully compliant with the Health Insurance Portability and Accountability Act (HIPAA) standard. We provide a more detailed example of the use of this framework in subsection 5.14.

The flexibility in combining AWS services into functioning end-to-end platforms can be overwhelming. Many options and deployment choices are available. The S-VPC framework, built on the Amazon Virtual Private Cloud, allows us to provide Region 14 and NCPA Members with three straightforward and easy-to-choose options for a client-based network and infrastructure deployments. The options will work for whatever applications the members may want to host in a cloud environment (see Table 2).

Option 1: Multi-client S-VPC on a Virtual Infrastructure. This solution allows deployment of the network and security infrastructure, as needed, across multiple clients. That is, the network virtual firewalls and switches are shared across clients and the virtual management zone

monitoring and access control is shared across clients. Each client is provided client-specific virtual computing and storage. This option is a huge step up from using the Amazon Classic Cloud because the security of the S-VPC is inherent in each deployment. For example, enterprises or school systems that want to allow each university, department, or business unit to have their own application environment can effectively cost-share the front end data center common infrastructure and controls.

Option 2: Client-Specific S-VPC on a Virtual Infrastructure. This solution provides client-specific network infrastructure, including private subnets, virtual firewalls, and switches, and client-specific virtual management zone and access control. An operating unit within a larger institution or enterprise may desire to have total control of the entire cloud environment and not share it with any other clients. We have designed this solution for this type of client that has the ability to absorb the cost of added infrastructure and assure total peace of mind regarding security. Option 3: Client-Specific S-VPC on a Dedicated Infrastructure. This solution provides dedicated network, security, monitoring, and server computing for each client. This solution is much closer to building a traditional client-specific, data center managed hosting solution. This solution still offers the advantages of the S-VPC security, the elastic scalability of the Amazon services, and the lower cost associated with pay-per-use. Very large enterprises that have more than 150 machines may find the cost of dedicated machines prohibitive; however, some customers benefit from these solutions. This option is well suited for clients with a large number of servers (150+) and which require a single tenant environment to meet their risk profile.

VPC Capabilities Multi-Client S-VPC Solution

Client-Specific Virtual S-VPC Solution

Client-Specific Dedicated S-VPC

Solution

Firewalls Shared by all clients Virtual Server per client Dedicated Server per client

Security Groups Shared by all clients but specific to application

Shared by all clients but specific to application

Shared by all clients but specific to application

Monitoring Shared by all clients Virtual Server per client Dedicated Server per client

Privileged Access Shared by all clients Virtual Server per client Dedicated Server per client

Management Zone Shared by all clients Virtual Server per client Dedicated Server per client

Load Balancer Virtual Server per client Virtual Server per client Dedicated Server per client

Server Virtual Server per client Virtual Server per client Dedicated Server per client

Disk Encryption Shared key management Shared key management Dedicated key management

These platform solution options offer several key benefits for Region 14 and the wide range of its NCPA members:

1. They allow for immediate expansion of the Region 14 and NCPA members’ product offerings by leveraging the AWS low-cost infrastructure and the 8KMiles solutions.

2. They eliminate the need for one-time capital expenditures to expand business capability, by offering pay-per-use approach.

3. They enable a secure, global computing infrastructure platform. 4. They reduce implementation through the use of established AWS business

arrangements—you can be in business in weeks, not months.

Mobile connectivity is becoming pervasive in today’s society as smartphones and tablets proliferate. The majority of workers are connected to email and text distribution solutions, students are increasingly connected to teachers and professors, and patients are connecting with physicians. The exchange of information, access to documents, and collaboration while on the go is becoming an essential element of how we live our lives. 8KMiles offers an enterprise-class, secure mobile collaboration solution for today without fear of data leakage, loss of compliance, or legal risk. Built on the S-VPC framework, the product integrates the Alfresco content management solution with Amazon’s RDS for data storage (see Figure 5). Key features include identity and access control across the user base, full text search, content version control, on-demand AWS elasticity, and security compliance. A particularly powerful feature is content collaboration: multiple workers have access to documents and the ability to change and update content with instant sharing between all participants anywhere in the world. This capability includes the option to define workflows to direct how and when collaborative support is needed for rapidly changing documentation. This 8KMiles solution was implemented by a leading public sector international banking institution. The components of the 8KMiles collaboration solution are distributed in AWS data centers worldwide to provide access wherever the bank’s users are at any time.

Consider how K-12 educators and students could use this solution to allow the sharing of textbooks, reading and homework assignments, homework and project submissions, grades, and collaboration between students, between teachers, and between schools. School districts are considering providing tablets starting at the grade school level. This mobile solution can immediately tie teachers and students together in a coordinated way that was not available even a year ago. This solution is a natural add-on for schools or enterprises that have already deployed 8KMiles secure VPN solutions with the addition of collaboration capabilities.

State and local governments and educational institutions increasingly rely on Big Data to improve effectiveness of learning by offering personalized learning. A recent paper from the Brookings Institution, “Big Data for Education: Data Mining, Data Analytics, and Web Dashboards” concludes by noting that bringing teachers into the “big data” discussion is crucial because they are the ones, along with parents and students, who will benefit from advances in research and analysis. Projects that let teachers know which pedagogic techniques are most effective or how students differ in their style of learning enable instructors to do a better job. Tailoring education to the individual student is one of the greatest benefits of technology, and Big Data will help teachers personalize learning.

8KMiles brings years of experience helping organizations worldwide take a systematic approach to Big Data analytics to improve decision making. Figure 6 shows the framework 8KMiles has employed in transitioning large amounts of structured and unstructured data into AWS storage services, cost effectively processing this data using EMR, and populating the data into the AWS database service for analytics.

Using this framework helps organizations make intelligent decisions by answering questions that arise in day-to-day operations. Executives are no longer limited by information in their databases. Using computing power at their disposal, they can populate their databases on demand with relevant data to answer the question and get answers in minutes.

8KMiles data analytics framework will tailor Region 14 and NCPA members’ data pipeline by combining the AWS Hadoop offering (EMR), Hadoop ecosystem tools available such as Hive, and new-generation Extract Transform and Load (ETL) tools like Talend to populate AWS Relational Database Service (RDS) and AWS DynamoDB, a highly scalable, fully managed NoSQL database service. The AWS RDS can be Oracle, Microsoft SQL, or MySQL database that the existing Business Intelligence and Analytics tools in the customer environment can consume, or 8KMiles can build customized dashboards from data in RDS and DynamoDB. 8KMiles will work with the domain experts within Region 14 and NCPA member organizations to build algorithms that enable using the massively parallel computing mechanism employed by EMR. In practical terms, a problem that would require a thousand hours of computation can be completed in one hour with thousand machines, ten hours using hundred machines, or hundred hours using ten machines. This allows Region 14 and NCPA members to process large amounts of data and make decisions quicker by paying the same amount for using a thousand machines for one hour and getting an answer to a large problem in one hour. This can be further reduced to minutes by adding more compute capacity if needed.

As Region 14 and NCPA members embrace Big Data solutions to improve their service, they will often need to use existing data in their data centers for this purpose. Access to this data must be secure and reliable with low latency between transfers. The AWS Direct Connect offering provides a means for this; however, the service is only available at selected colocation facilities with which AMS has partnerships. Region 14 and NCPA members that wish to employ this

service need to procure dedicated connections from these colocation facilities to their data centers. This process involves gathering bandwidth requirements, determining the right connection type (MPLS vs. VPLS), architecting proper redundancy, conducting Return on Investment analysis, and configuring and installing the service to meet the applicable security needs. Our 8KMiles Direct Connect Solution is a turnkey offering that includes architecture, design, procurement, and provisioning of connection from the customer data center to their AWS environment. Figure 7 describes the process for accomplishing the 8KMiles Direct Connect Solution utilizing AWS, Amazon Direct Connect, and the member’s data center.

Tab 8: Value Added Products and Services

8KMiles operates out of three US locations, India, and Singapore. Upon award of the contract, 8KMiles will ensure 24x7x365 helpdesk and technical support for the solutions and services offered by 8KMiles under this contract that Region 14 and NCPA members can purchase if required. Furthermore, Region 14 and NCPA members that utilize S-VPC offering with managed services option will have their environment monitored at no additional cost for events and proactive notifications of incidents that occur in their environment. In addition, Region 14 and NCPA members will have access to support offered by AWS. AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers at each of the North America location. The service helps NCPA members to successfully utilize the products and features provided by Amazon Web Services. AWS support is provided in four tiers:

1. Basic: Free forum-based support for any one that subscribes to AWS services.

2. Developer: Email-based support with twelve (12)-hours response time meant for individual developers.

3. Business: Phone, chat, and email-based support with one (1)-hour response time designed to meet the needs of small and medium-size businesses and enterprises getting started with AWS.

4. Enterprise: Phone, chat, email, and a dedicated technical account manager for enterprise with fifteen (15)-minutes response time designed for AWS power users.

All AWS Support tiers offer customers of AWS Infrastructure Services an unlimited number of support cases with pay-by-the-month pricing and no long-term contracts. The four tiers provide developers and businesses the flexibility to choose the support tiers that meet their specific needs. The combination of 8KMiles support and AWS support gives Region 14 and NCPA members the peace of mind they need knowing that there is a person they can reach out to when something goes wrong.

8KMiles is one of the early partner companies of Amazon Web Services. The expertise gained from servicing AWS customers since the inception of services has created a very special relationship with AWS. To date, Jeff Barr, AWS Chief Evangelist hosts joint webinars with 8KMiles leadership team on various topics in cloud computing. This has created a virtuous cycle over years with more and more customers trusting 8KMiles with the knowledge and expertise we bring. As this trust brings more business, the 8KMiles team has gained even more knowledge and contributed back to the community. One such example is a presentation on “Email Architecture using SES” by 8KMiles chief architect, Jithu Balakrishnan, that was highlighted on AWS blog (http://aws.typepad.com/aws/2012/10/aws-week-in-review-october-8-2012.html) this

week. Since AWS blog posts are read by millions of users, it results in more users embracing 8KMiles as their trusted partner that has proven expertise.

In addition to such organic marketing initiatives, 8KMiles is invited to present our solutions at the AWS events worldwide. The 8KMiles leadership team was invited to present at two major AWS events during the month of October 2012. Our CTO presented at the AWS summit in India and received kudos from the AWS CTO and AWS global partnership and alliance leadership team that visited India for a groundbreaking security framework. 8KMiles’s Chief Cloud Officer presented at the AWS Global Public Sector Summit in Washington DC.

8KMiles was also invited to demonstrate our solutions at the AWS booth during a tradeshow where AWS is a diamond sponsor and keynote speaker.

Finally, upon award of this contract, 8KMiles will further expand our channel partners program to include partners that specialize in the education space. We will build turnkey solutions that address immediate market needs such as Bring Your Own Device (BYOD) and big data analytics. We will draw on our strong relationship with AWS’s SLED Group to provide effective, aggressive marketing to NCPA members. Working in conjunction with NCPA, 8KMiles will determine the best way to address and work with their member community. We will directly market our secure enterprise cloud, mobility, and big data solution to the education marketplace. We are also upgrading the 8KMiles website. When completed and upon award, the new website will identify this contract and our relationship with Region 14 and NCPA as a key opportunity for other NCPA members.

8KMiles will continue this momentum and market to Region 14 and NCPA members by getting hosting booths at events such as Educause to showcase their solutions and conduct webinars. 8KMiles will further strengthen the inside sales team and run targeted solution campaigns that solve real problems that are relevant and beneficial to Region 14 and NCPA members. We will also provide product sheets to NCPA.

8KMiles acknowledges and agrees to comply with the requirements expressed in the following documents.

I, the Vendor, am in compliance with all applicable standards, orders or regulations issued pursuant to the Clean Air Act of 1970, as Amended (42 U.S. C. 1857 (h), Section 508 of the Clean Water Act, as amended (33 U.S.C. 1368), Executive Order 117389 and Environmental Protection Agency Regulation, 40 CFR Part 15 as required under OMB Circular A 102, Attachment O, Paragraph 14 (1) regarding reporting violations to the grantor agency and to the United States Environment Protection Agency Assistant Administrator for the Enforcement.

_____________________________________________________________________________

I hereby further certify that my company has not been debarred, suspended or otherwise ineligible for participation in Federal Assistance programs under Executive Order 12549, “Debarment and Suspension”, as described in the Federal Register and Rules and Regulations

Potential Vendor: 8KMiles Software Services, Inc.

Title of Authorized Representative: Chief Executive Officer

Mailing Address: 12647 Alcosta Boulevard, Suite 165, San Ramon, CA 94583

Signature: _________ _______________________________________

Contractor Certification

Contractor’s Employment Eligibility

By entering the contract, Contractor warrants compliance with the Federal Immigration and Nationality Act (FINA), and all other federal and state immigration laws and regulations. The Contractor further warrants that it is in compliance with the various state statues of the states it is will operate this contract in. Participating Government Entities including School Districts may request verification of compliance from any Contractor or subcontractor performing work under this Contract. These Entities reserve the right to confirm compliance in accordance with applicable laws.

Should the Participating Entities suspect or find that the Contractor or any of its subcontractors are not in compliance, they may pursue any and all remedies allowed by law, including, but not limited to: suspension of work, termination of the Contract for default, and suspension and/or debarment of the Contractor. All costs necessary to verify compliance are the responsibility of the Contractor. The offeror complies and maintains compliance with the appropriate statutes which requires compliance with federal immigration laws by State employers, State contractors and State subcontractors in accordance with the E-- Verify Employee Eligibility Verification Program.

Contractor shall comply with governing board policy of the NCPA Participating entities in which work is being performed

Fingerprint & Background Checks If required to provide services on school district property at least five (5) times during a month, contractor shall submit a full set of fingerprints to the school district if requested of each person or employee who may provide such service. Alternately, the school district may fingerprint those persons or employees. An exception to this requirement may be made as authorized in Governing Board policy. The district shall conduct a fingerprint check in accordance with the appropriate state and federal laws of all contractors, subcontractors or vendors and their employees for which fingerprints are submitted to the district. Contractor, subcontractors, vendors and their employees shall not provide services on school district properties until authorized by the District.

The offeror shall comply with fingerprinting requirements in accordance with appropriate statutes in the state in which the work is being performed unless otherwise exempted.

Contractor shall comply with governing board policy in the school district or Participating Entity in which work is being performed

___________________________________________________________________________

Business Operations in Sudan, Iran

In accordance with A.R.S. 35 391 and A.R.S. 35 393, the Contractor hereby certifies that the contractor does not have scrutinized business operations in Sudan and/or Iran.

________________ _________________________ Signature of Respondent ________________10/23/12__________________________ Date

I affirm under penalty of perjury of the laws of the State of Texas that: (1) I am duly authorized to execute this contract on my own behalf or on behalf of the company, corporation, firm, partnership or individual (Company) listed below; (2) In connection with this bid, neither I nor any representative of the Company has violated any provision of the Texas Free Enterprise and Antitrust Act, Tex. Bus. & Comm. Code Chapter 15; (3) In connection with this bid, neither I nor any representative of the Company has violated any federal antitrust law; and (4) Neither I nor any representative of the Company has directly or indirectly communicated any of the contents of this bid to a competitor of the Company or any other company, corporation, firm, partnership or individual engaged in the same line of business as the Company.

Vendor: 8KMiles Software Services, Inc. Bidder: 8KMiles Software Services, Inc.

Signature _____ _________________________________________________ Address: 12647 Alcosta Boulevard, Suite 165, San Ramon, CA 94583

Printed Name Suresh Venkatachari Phone: 1-855-8564537

Position with Company: Chief Executive Officer Fax: 1-877-251-3509

Authorizing Official:

Signature: _________________ ____________________________________

Printed Name Suresh: Venkatachari Position with Company: Chief Executive Officer

If a contract or grant involves the use of funds from the federal American Recovery and Reinvestment Act of 2009, Pub. L. 111 5 (“Recovery Act”), the following terms and conditions apply. As used in this Section, “Contractor/Grantee” means the contractor or grantee receiving Recovery Act funds under this agreement.

1. The Contractor/Grantee specifically agrees to comply with each of the terms and conditions contained herein.

2. Contractor/Grantee understands and acknowledges that the federal stimulus funding process is still evolving and that new requirements for Recovery Act compliance may still be forthcoming from federal government. Accordingly, Contractor/Grantee specifically agrees that both it and subcontractors/subgrantees will comply with all such requirements during the contract period.

AVAILABILITY OF FUNDING Contractor/Grantee agrees that programs supported with temporary federal funds made available from the Recovery Act may not be continued once the temporary federal funds are expended.

BUY AMERICA REQUIREMENT Contractor/Grantee agrees that pursuant to Section 1605 of Title XV of the Recovery Act, neither Contractor/Grantee or its subcontractors/subgrantees will use Recovery Act funds for a project for the construction, alternation, maintenance, or repair of a public building or public work unless all of the iron, steel and manufactured goods used in the project are produced in the United States in a manner consistent with United States obligations under international agreements. This requirement shall be applied unless the use of alternative materials has been approved by a federal agency pursuant to Section 1605.

CONFLICTING REQUIREMENTS

Contractor/Grantee agrees that, to the extent Recovery Act requirements conflict with the participating agencies requirements, the Recovery Act requirements shall control.

FALSE CLAIMS ACT

Contractor/Grantee agrees that it shall promptly refer to an appropriate federal inspector general any credible evidence that a principal, employee, agent, subgrantee, subcontractor or other person has submitted a claim under the federal False Claims Act, as amended, 31 U.S.C. §§37293733, or has committed a criminal or civil violation of laws pertaining to fraud, conflict of interest, bribery, gratuity, or similar misconduct involving those funds.

Contractor/Grantee agrees that if Contractor/Grantee or one of its subcontractors/subgrantees fails to comply with all applicable federal and state requirements governing the use of Recovery Act funds, the participating agency may withhold or suspend, in whole or in part, funds awarded under the program, or recover misspent funds following an audit. This provision is in addition to all other remedies available to participating agency under all applicable state and federal laws.

INSPECTION OF RECORDS

Contractor/Grantee agrees that it shall permit the United States Comptroller General or his representative or the appropriate inspector general appointed under section 3 or 8G of the federal Inspector General Act of 1978, as amended, 5 U.S. App. §§3 and 8(g), or his representative to: (1) examine any records that directly pertain to, and involve transactions relating to, this contract; and (2) interview any officer or employee of Contractor/Grantee or any of its subcontractors/subgrantees regarding the activities funded with funds appropriated or otherwise made available by the Recovery Act.

JOB POSTING REQUIREMENTS

Section 1512 of the Recovery Act requires states receiving stimulus funds to report on jobs created and retained as a result of the stimulus funds. Contractors/Grantees who receive Recovery Act funded contracts are required to post jobs created and retained as a result of stimulus funds.

PROHIBITION ON USE OF RECOVERY ACT FUNDS

Contractor/Grantee agrees that none of the funds made available under this contract may be used for any casino or other gambling establishment, aquarium, zoo, golf course, swimming pools, or similar projects.

REPORTING REQUIREMENTS Pursuant to Section 1512 of Title XV of the Recovery Act, entities receiving Recovery Act funds must submit a report to the federal government no later than ten (10) calendar days after the end of each calendar quarter. This report must contain the information outlined below. Accordingly, Contractor/Grantee agrees to provide the County with the following information in a timely manner:

a. The total amount of Recovery Act funds received by Contractor/Grantee during the Reporting Period;

b. The amount of Recovery Act funds that were expended or obligated during the Reporting Period;

c. A detailed list of all projects or activities for which Recovery Act funds were expending or obligated, including:

i. the name of the project or activity; ii. a description of the project or activity;

iii. an evaluation of the completion status of the project or activity; and iv. an estimate of the number of jobs created and the number of jobs retained by the

project or activity; d. or any subcontracts or subgrants equal to or greater than $25,000:

i. The name of the entity receiving the subaward; ii. The amount of the subaward;

iii. The transaction type; iv. The North American Industry Classification System (NAICS) code or Catalog of

Federal Domestic Assistance (CFDA) number; v. Program source;

vi. An award title descriptive of the purpose of each funding action; vii. The location of the entity receiving the subaward;

viii. The primary location of the subaward, including the city, state, congressional district and country; and

ix. A unique identifier of the entity receiving the sub--�award and the parent entity of

Contractor/Grantee, should the entity be owned by another. x. The names and total compensation of the five most highly compensated officers

of the company if it received: 1) 80% or more of its annual gross revenues in Federal awards; and 2) $25M or more in annual gross revenue from Federal awards.

e. For any subcontracts or subgrants of less than $25,000 or to individuals, the information required in d may be reported in the aggregate and requires the certification of an authorized officer of Contractor/Grantee that the information contained in the report is accurate.

f. Any other information reasonably requested by the County or required by state or federal law or regulation. Standard data elements and federal instructions for use in complying with reporting requirements under Section 1512 of the Recovery Act, are pending review by the federal government, and were published in the Federal Register, 74 Federal Register, 14824 (April 1, 2009), and are to be provided online at www.FederalReporting.gov.

SEGREGATION OF FUNDS Contractor/Grantee agrees that it shall segregate obligations and expenditures of Recovery Act funds from other funding. No part of funds made available under the Recovery Act may be comingled with any other funds or used for a purpose other than that of making payments for costs specifically allowable under the Recovery Act. Contractor/Grantee agrees that it shall include these standard terms and conditions, including this requirement, in any of its subcontracts or subgrants in connection with projects funded in whole or in part with funds available under the Recovery Act.

WAGE REQUIREMENTS

Contractor/Grantee agrees that, in accordance with Section 1606 of Title XVI of the Recovery Act, both it and its subcontractors shall fully comply with this section in that, notwithstanding any other provision of law, and in a manner consistent with the other provisions of the Recovery Act, all laborers and mechanics employed by contractors and subcontractors on projects funded in whole or in part with funds available under the Recovery Act shall be paid wages at rates not less than those prevailing on projects of a character similar in the locality, as determined by the United States Secretary of Labor in accordance with Subchapter IV of Chapter 31 of Title 40 of the United States Code

WHISTLEBLOWER PROTECTION Contractor/Grantee agrees that both it and its subcontractors/subgrantees shall comply with Section 1553 of the Recovery Act, which prohibits all non federal Contractor/Grantees of Recovery Act funds from discharging, demoting or otherwise discriminating against an employee for disclosures by the employee that the employee reasonably believes are evidence of (1) gross mismanagement of a contract or grant relating to Recovery Act funds; (2) a gross waste of Recovery Act funds; (3) a substantial and specific danger to public health or safety related to the implementation or use of Recovery Act funds; (4) an abuse of authority related to implementation or use of Recovery Act funds; or (5) a violation of law, rule, or regulation related to an agency contract (including the competition for or negotiation of a contract) or grant, awarded or issued relating to Recovery Act funds. In addition, Contractor/Grantee agrees that it and its subcontractors/subgrantees shall post notice of the rights and remedies available to employees under Section 1553 of Title XV of the Recovery Act.

If any purchase made under the Master Agreement is funded in whole or in part by Federal Emergency Management Agency (“FEMA”) grants, Contractor shall comply with all federal laws and regulations applicable to the receipt of FEMA grants, including, but not limited to the contractual procedures set forth in Title 44 of the Code of Federal Regulations, Part 13 (“44 CFR 13”).

In addition, Contractor agrees to the following specific provisions: 1) Pursuant to 44 CFR 13.36(i)(1), University is entitled to exercise all administrative, contractual, or other remedies permitted by law to enforce Contractor’s compliance with the terms of this Master Agreement, including but not limited to those remedies set forth at 44 CFR 13.43. 2) Pursuant to 44 CFR 13.36(i)(2), University may terminate the Master Agreement for cause or convenience in accordance with the procedures set forth in the Master Agreement and those provided by 44 CFR 13.44.

3) Pursuant to 44 CFR 13.36(i)(3) (6)(12), and (13), Contractor shall comply with the following federal laws:

a. Executive Order 11246 of September 24, 1965, entitled “Equal Employment Opportunity,” as amended by Executive Order 11375 of October 13, 1967, and as supplemented in Department of Labor (“DOL”) regulations (41 CFR Ch. 60);

b. Copeland “Anti Kickback” Act (18 U.S.C. 874), as supplemented in DOL regulations (29 CFR Part 3);

c. Davis Bacon Act (40 U.S.C. 276a 276a 7) as supplemented by DOL regulations (29 CFR Part 5);

d. Section 103 and 107 of the Contract Work Hours and Safety Standards Act (40 U.S.C. 327 30) as supplemented by DOL regulations (29 CFR Part 5);

e. Section 306 of the Clean Air Act (42 U.S.C. 1857(h), section 508 of the Clean Water Act (33 U.S.C. 1368), Executive Order 11738, and Environmental Protection Agency regulations (40 CFR part 15); and f. Mandatory standards and policies relating to energy efficiency which are contained in the state energy conservation play issued in compliance with the Energy Policy and Conservation Act (Pub. L.94 163, 89 Stat. 871).

4) Pursuant to 44 CFR 13.36(i)(7), Contractor shall comply with FEMA requirements and regulations pertaining to reporting, including but not limited to those set forth at 44 CFR 40 and 41.

5) Pursuant to 44 CFR 13.36(i)(8), Contractor agrees to the following provisions 72 regarding patents:

a. All rights to inventions and/or discoveries that arise or are developed, in the course of or under this Agreement, shall belong to the participating agency and be disposed of in accordance with the participating agencies policy. The participating agency, at its own discretion, may file for patents in connection with all rights to any such inventions and/or discoveries.

6) Pursuant to 44 CFR 13.36(i)(9), Contractor agrees to the following provisions, regarding copyrights:

a. If this Agreement results in any copyrightable material or inventions, in accordance with 44 CFR 13.34, FEMA reserves a royalty free, nonexclusive, and irrevocable license to reproduce, publish or otherwise use, for Federal Government purposes:

1) The copyright in any work developed under a grant or contract; and 2) Any rights of copyright to which a grantee or a contactor purchases ownership with grant support.

7) Pursuant to 44 CFR 13.36(i)(10), Contractor shall maintain any books, documents, papers, and records of the Contractor which are directly pertinent to this Master Agreement. At any time during normal business hours and as often as the participating agency deems necessary, Contractor shall permit participating agency, FEMA, the Comptroller General of United States, or any of their duly authorized representatives to inspect and photocopy such records for the purpose of making audit, examination, excerpts, and transcriptions. 8) Pursuant to 44 CFR 13.36(i)(11), Contractor shall retain all required records for three years after FEMA or participating agency makes final payments and all other pending matters are closed. In addition, Contractor shall comply with record retention requirements set forth in 44 CFR 13.42.

ACCESS TO RECORDS AND REPORTS

Contractor agrees to:

a) Maintain all books, records, accounts and reports required under this Contract for a period of not less than three (3) years after the date of termination or expiration of this Contract or any

extensions thereof except in the event of litigation or settlement of claims arising from the performance of this Contract, in which case Contractor agrees to maintain same until Public Agency, the FTA Administrator, the Comptroller General, or any of their duly authorized representatives, have disposed of all such litigation, appeals, claims or exceptions related thereto.

b) Permit any of the foregoing parties to inspect all work, materials, payrolls, and other data and records with regard to the Project, and to audit the books, records, and accounts with regard to the Project and to reproduce by any means whatsoever or to copy excerpts and transcriptions as reasonably needed for the purpose of audit and examination.

FTA does not require the inclusion of these requirements of Article 1.01 in subcontracts. Reference 49 CFR 18.39 (i)(11).

CIVIL RIGHTS / TITLE VI REQUIREMENTS

1) Non discrimination. In accordance with Title VI of the Civil Rights Act of 1964, as amended, 42 U.S.C. § 2000d, Section 303 of the Age Discrimination Act of 1975, as amended, 42 U.S.C. § 6102, Section 202 of the Americans with Disabilities Act of 1990, as amended, 42 U.S.C. § 12132, and Federal Transit Law at 49 U.S.C. § 5332, Contractor or subcontractor agrees that it will not discriminate against any employee or applicant for employment because of race, color, creed, national origin, sex, marital status age, or disability. In addition, Contractor agrees to comply with applicable Federal implementing regulations and other implementing requirements FTA may issue. 2) Equal Employment Opportunity. The following Equal Employment Opportunity requirements apply to this Contract:

a. Race, Color, Creed, National Origin, Sex. In accordance with Title VII of the Civil Rights Act, as amended, 42 U.S.C. § 2000e, and Federal Transit Law at 49 U.S.C. § 5332, the Contractor agrees to comply with all applicable Equal Employment Opportunity requirements of U.S. Dept. of Labor regulations, “Office of Federal Contract Compliance Programs, Equal Employment Opportunity, Department of Labor, 41 CFR, Parts 60 et seq., and with any applicable Federal statutes, executive orders, regulations, and Federal policies that may in the future affect construction activities undertaken in the course of this Project. Contractor agrees to take affirmative action to ensure that applicants are employed, and that employees are treated during employment, without regard to their race, color, creed, national origin, sex, marital status, or age. Such action shall include, but not be limited to, the following: employment, upgrading, demotion or transfer, recruitment or recruitment advertising, layoff or termination, rates of pay or other forms of compensation; and selection for training, including apprenticeship. In addition, Contractor agrees to comply with any implementing requirements FTA may issue. b. Age. In accordance with the Age Discrimination in Employment Act (ADEA) of 1967, as amended, 29 U.S.C. Sections 621 through 634, and Equal Employment Opportunity Commission (EEOC) implementing regulations, “Age Discrimination in Employment Act”, 29 CFR Part 1625, prohibit employment discrimination by Contractor against individuals on the

basis of age, including present and prospective employees. In addition, Contractor agrees to comply with any implementing requirements FTA may issue.

c. Disabilities. In accordance with Section 102 of the Americans with Disabilities Act of 1990, as amended (ADA), 42 U.S.C. Sections 12101 et seq., prohibits discrimination against qualified individuals with disabilities in programs, activities, and services, and imposes specific requirements on public and private entities. Contractor agrees that it will comply with the requirements of the Equal Employment Opportunity Commission (EEOC), “Regulations to Implement the Equal Employment Provisions of the Americans with Disabilities Act,” 29 CFR, Part 1630, pertaining to employment of persons with disabilities and with their responsibilities under Titles I through V of the ADA in employment, public services, public accommodations, telecommunications, and other provisions.

d. Segregated Facilities. Contractor certifies that their company does not and will not maintain or provide for their employees any segregated facilities at any of their establishments, and that they do not and will not permit their employees to perform their services at any location under the Contractor’s control where segregated facilities are maintained. As used in this certification the term “segregated facilities” means any waiting rooms, work areas, restrooms and washrooms, restaurants and other eating areas, parking lots, drinking fountains, recreation or entertainment areas, transportation, and housing facilities provided for employees which are segregated by explicit directive or are in fact segregated on the basis of race, color, religion or national origin because of habit, local custom, or otherwise. Contractor agrees that a breach of this certification will be a violation of this Civil Rights clause.

3) Solicitations for Subcontracts, Including Procurements of Materials and Equipment. In all solicitations, either by competitive bidding or negotiation, made by Contractor for work to be performed under a subcontract, including procurements of materials or leases of equipment, each potential subcontractor or supplier shall be notified by Contractor of Contractor’s obligations under this Contract and the regulations relative to non discrimination on the grounds of race, color, creed, sex, disability, age or national origin.

4) Sanctions of Non Compliance. In the event of Contractor’s non compliance with the non--discrimination provisions of this Contract, Public Agency shall impose such Contract sanctions as it or the FTA may determine to be appropriate, including, but not limited to: 1) Withholding of payments to Contractor under the Contract until Contractor complies, and/or; 2) Cancellation, termination or suspension of the Contract, in whole or in part. Contractor agrees to include the requirements of this clause in each subcontract financed in whole or in part with Federal assistance provided by FTA, modified only if necessary to identify the affected parties.

DISADVANTAGED BUSINESS PARTICIPATION

This Contract is subject to the requirements of Title 49, Code of Federal Regulations, Part 26, “Participation by Disadvantaged Business Enterprises in Department of Transportation Financial Assistance Programs”, therefore, it is the policy of the Department of Transportation (DOT) to ensure that Disadvantaged Business Enterprises (DBEs), as defined in

49 CFR Part 26, have an equal opportunity to receive and participate in the performance of DOT assisted contracts.

1) Non Discrimination Assurances. Contractor or subcontractor shall not discriminate on the basis of race, color, national origin, or sex in the performance of this Contract. Contractor shall carry out all applicable requirements of 49 CFR Part 26 in the award and administration of DOTassisted contracts. Failure by Contractor to carry out these requirements is a material breach of this Contract, which may result in the termination of this Contract or other such remedy as public agency deems appropriate. Each subcontract Contractor signs with a subcontractor must include the assurance in this paragraph. (See 49 CFR 26.13(b)). 2) Prompt Payment. Contractor is required to pay each subcontractor performing Work under this prime Contract for satisfactory performance of that work no later than thirty (30) days after Contractor’s receipt of payment for that Work from public agency. In addition, Contractor is required to return any retainage payments to those subcontractors within thirty (30) days after the subcontractor’s work related to this Contract is satisfactorily completed and any liens have been secured. Any delay or postponement of payment from the above time frames may occur only for good cause following written approval of public agency. This clause applies to both DBE and non DBE subcontractors. Contractor must promptly notify public agency whenever a DBE subcontractor performing Work related to this Contract is terminated or fails to complete its Work, and must make good faith efforts to engage another DBE subcontractor to perform at least the same amount of work. Contractor may not terminate any DBE subcontractor and perform that Work through its own forces, or those of an affiliate, without prior written consent of public agency.

3) DBE Program. In connection with the performance of this Contract, Contractor will cooperate with public agency in meeting its commitments and goals to ensure that DBEs shall have the maximum practicable opportunity to compete for subcontract work, regardless of whether a contract goal is set for this Contract. Contractor agrees to use good faith efforts to carry out a policy in the award of its subcontracts, agent agreements, and procurement contracts which will, to the fullest extent, utilize DBEs consistent with the efficient performance of the Contract.

ENERGY CONSERVATION REQUIREMENTS

Contractor agrees to comply with mandatory standards and policies relating to energy efficiency which are contained in the State energy conservation plans issued under the Energy Policy and Conservation Act, as amended, 42 U.S.C. Sections 6321 et seq. and 41 CFR Part 301 10.

FEDERAL CHANGES Contractor shall at all times comply with all applicable FTA regulations, policies, procedures and directives, including without limitation those listed directly or by reference in the Contract between public agency and the FTA, as they may be amended or promulgated from time to time during the term of this contract. Contractor’s failure to so comply shall constitute a material breach of this Contract.

INCORPORATION OF FEDERAL TRANSIT ADMINISTRATION (FTA) TERMS The provisions include, in part, certain Standard Terms and Conditions required by the U.S. Department of Transportation (DOT), whether or not expressly set forth in the preceding Contract provisions. All contractual provisions required by the DOT, as set forth in the most current FTA Circular 4220.1F, dated November 1, 2008, are hereby incorporated by reference. Anything to the contrary herein notwithstanding, all FTA mandated terms shall be deemed to control in the event of a conflict with other provisions contained in this Contract. Contractor agrees not to perform any act, fail to perform any act, or refuse to comply with any public agency requests that would cause public agency to be in violation of the FTA terms and conditions.

NO FEDERAL GOVERNMENT OBLIGATIONS TO THIRD PARTIES Agency and Contractor acknowledge and agree that, absent the Federal Government’s express written consent and notwithstanding any concurrence by the Federal Government in or approval of the solicitation or award of the underlying Contract, the Federal Government is not a party to this Contract and shall not be subject to any obligations or liabilities to agency, Contractor, or any other party (whether or not a party to that contract) pertaining to any matter resulting from the underlying Contract. Contractor agrees to include the above clause in each subcontract financed in whole or in part with federal assistance provided by the FTA. It is further agreed that the clause shall not be modified, except to identify the subcontractor who will be subject to its provisions.

PROGRAM FRAUD AND FALSE OR FRAUDULENT STATEMENTS

Contractor acknowledges that the provisions of the Program Fraud Civil Remedies Act of 1986, as amended, 31 U.S.C. §§3801 et seq. and U.S. DOT regulations, “Program Fraud Civil Remedies,” 49 CFR Part 31, apply to its actions pertaining to this Contract. Upon execution of the underlying Contract, Contractor certifies or affirms the truthfulness and accuracy of any statement it has made, it makes, it may make, or causes to me made, pertaining to the underlying Contract or the FTA assisted project for which this Contract Work is being performed.

In addition to other penalties that may be applicable, Contractor further acknowledges that if it makes, or causes to be made, a false, fictitious, or fraudulent claim, statement, submission, or certification, the Federal Government reserves the right to impose the penalties of the Program Fraud Civil Remedies Act of 1986 on Contractor to the extent the Federal Government deems appropriate. Contractor also acknowledges that if it makes, or causes to me made, a false, fictitious, or fraudulent claim, statement, submission, or certification to the Federal Government under a contract connected with a project that is financed in whole or in part with Federal assistance originally awarded by FTA under the authority of 49 U.S.C. § 5307, the Government reserves the right to impose the penalties of 18 U.S.C. § 1001 and 49 U.S.C. § 5307 (n)(1) on the Contractor, to the extent the Federal Government deems appropriate. Contractor agrees to include the above clauses in each subcontract financed in whole or in part with Federal assistance provided by FTA. It is further agreed that the clauses shall not be modified, except to identify the subcontractor who will be subject to the provisions.

Pursuant to certain state notice provisions the following public agencies and political subdivisions of the referenced public agencies are eligible to access the contract award made pursuant to this solicitation. Public agencies and political subdivisions are hereby given notice of the foregoing request for proposal for purposes of complying with the

procedural requirement of said statutes:

Nationwide: http://www.usa.gov/Agencies/Local_Government/Cities.shtml

Other States: Cities, Towns, Villages, and Boroughs as defined in the RFP