Cloud Services Migration

The contract involves migrating all existing cloud-based services, applications, and data from Microsoft Azure to a designated new Cloud Service Provider, with the goal of ensuring a seamless, secure, and efficient transition. The scope encompasses assessment, infrastructure setup, data and application migration, security implementation, testing, validation, and comprehensive documentation, culminating in a fully operational environment ready for County use. The project emphasizes strict adherence to County security policies, including compliance with NIST 800-53 standards, SOC, ISO, PCI, and HIPAA requirements where applicable, with contractors required to implement robust security controls, incident response procedures, breach notification protocols, and data sanitization practices. The contract mandates detailed security certifications, ongoing audits, and confidentiality agreements, with the County reserving rights to conduct security assessments and audits at any time. The procurement process is initiated through a Request for Information (RFI) issued by Orange County, with responses due by November 3, 2025. The evaluation emphasizes cost considerations, with preferences granted to certified local small businesses (OCLSB) and Disabled Veteran Business Enterprises (DVBE), applying a 5% or 8% bid adjustment or deduction accordingly. While no specific contract type or fixed pricing schedule is provided at this stage, vendors are expected to submit detailed cost proposals as part of their response. The contract will be governed by County-specific policies, federal and state regulations, and security standards, with key administrative contacts including Erika Flores, the Deputy Procurement Agent, and County security officers. Delivery is performance-based, with the completion deadline set for November 3, 2025, and work to be conducted primarily within the County’s cloud environment, without explicit physical delivery locations or FOB terms. The agreement also incorporates provisions for insurance, indemnification, and compliance with confidentiality and conflict-of-interest policies, ensuring a comprehensive framework for secure, compliant, and successful migration.