Statement of Service Enterprise Services

Statement of Service
Enterprise Services - AID
Apache Web Server
Customer
Enterprise Services for Apache Servers
Proprietary Rights
The information in this document is confidential to Arrow Managed Services and is
legally privileged. The information and this document are intended solely for the
addressee. Use of this document by anyone else for any other purpose is
unauthorized. If you are not the intended recipient, any disclosure, copying, or
distribution of this information is prohibited and unlawful.
Disclaimer
This documentation might include technical inaccuracies or typographical errors and
is subject to correction and other revision without notice. Arrow Managed Services.
GIVES YOU THE CUSTOMER THIS DOCUMENTATION "AS IS." EXPRESS OR IMPLIED
WARRANTIES OF ANY KIND ARE NOT PROVIDED, INCLUDING BUT NOT LIMITED
TO THE IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A
PARTICULAR PURPOSE. Some states or jurisdictions do not allow disclaimer of
express or implied warranties in certain transactions; therefore, this statement may
not apply to you.
Arrow Managed Services Confidential
Copyright © 2004-2010, NetEnrich, Inc. All Rights Reserved.
Page 2 of 22
March 2010
Enterprise Services for Apache Servers
TABLE OF CONTENTS
1.0
Introduction ......................................................................................................................... 5
2.0
Engagement overview & scope .......................................................................................... 5
3.0
Detailed Scope – APACHE Servers .........................................Error! Bookmark not defined.
3.1
24/7 Monitoring and Alerting ...........................................................................................5
3.2
Daily administrative activities – APACHE ...........................Error! Bookmark not defined.
3.3
Remote remediation and fix for the servers .....................................................................6
3.4
Monthly proactive checks on APACHE Web Servers. .......................................................6
3.5
hardware & software configuration of APACHE Web Servers Error! Bookmark not defined.
3.6
Service Requests (SRs)........................................................Error! Bookmark not defined.
4.0
Service delivery Management ............................................................................................ 8
4.1
Engagement Process Overview .........................................................................................8
4.2
Service Level Agreement ...................................................................................................8
4.3
Service Reviews .................................................................................................................9
4.4
Customer Visibility & Auditability .....................................................................................9
4.4.1
Auditability .................................................................................................................. 9
4.4.2
Infrastructure Visibility portal ...................................................................................... 10
4.4.3
Executive dashboard.......................................................... Error! Bookmark not defined.
4.5
Metrics based reporting and analysis .............................................................................10
4.5.1
Weekly Reporting .............................................................. Error! Bookmark not defined.
4.5.2
Monthly Reporting ..................................................................................................... 10
4.6
Extending operation support for new Services/infrastructure .......................................10
4.7
Support Window .............................................................................................................10
4.8
Escalation Matrix .............................................................................................................11
6.0
Out of scope....................................................................................................................... 13
Fees ............................................................................................................................................... 14
Terms and Conditions .................................................................................................................. 15
Disclaimers.................................................................................................................................... 16
Arrow Managed Services Confidential
Copyright © 2004-2010, NetEnrich, Inc. All Rights Reserved.
Page 3 of 22
March 2010
Enterprise Services for Apache Servers
Appendix A - SLA .......................................................................................................................... 17
Appendix B – Roles and Responsibilities..................................................................................... 19
Appendix C – VPMG Deployment Architecture .......................................................................... 21
Appendix D – Equipment List ....................................................................................................... 22
Arrow Managed Services Confidential
Copyright © 2004-2010, NetEnrich, Inc. All Rights Reserved.
Page 4 of 22
March 2010
Enterprise Services for Apache Servers
1.0 INTRODUCTION
This document specifies the scope & schedule of the services delivered to the end custome r by
Arrow Managed Services detailing AID services package for APACHE Servers.
As a requirement to start services, this document must be signed off by Customer and Arrow
Managed Services, as an agreement for the scope and deliverables of the services under the
AID services package.
2.0 ENGAGEMENT OVERVIEW & SCOPE
This statement of service (SOS) describes the “engagement model and scope of service” for
Arrow Managed Services to support monitoring and managing of APACHE Servers. The overall
objective of this engagement is to provide support to Customer, using highly efficient and SLA
driven delivery model under Arrow Managed Services AID services package.
MANAGE services Package includes these services for APACHE Servers.




Monitoring and alerting of APACHE Services
Remote SOP remediation/fix for the issues on APACHE Web Servers.
Monthly Proactive checks on APACHE Web Servers (Executing APACHE Health
check checklist).
Monitoring the APACHE configuration & metadata backup Jobs.
To help support the key objectives mentioned above, Arrow Managed Services will provide the
following shared services delivery model:

All alerts will go to Arrow Managed Services Service Desk which will be
monitoring, alerting, ticketing and escalating the tickets.
o Incoming alerts will be initially diagnosed to identify false alerts or alerts
where no action is required
o Actionable alerts will be ticketed by the service desk /helpdesk
o Any documented Standard Operating Procedure (SOP) will be executed
by service desk as first level of support
2.1 24/7 MONITORING AND ALERTING
Tasks include: Arrow Managed Services will monitor the APACHE Web Servers 24/7 and
alert the customer contact based on the priority of the alert and Server. At the same
time, the Arrow Managed Services Windows team will troubleshoot and fix the reported
issue remotely.
Arrow Managed Services Confidential
Copyright © 2004-2010, NetEnrich, Inc. All Rights Reserved.
Page 5 of 22
March 2010
Enterprise Services for Apache Servers
Arrow Managed Services deploys Arrow Managed Services’ Virtual Private Management
Gateway (VPMG) which utilizes WMI and Syslog monitoring. This appliance also allows
Arrow Managed Services staff secures remote access to the customer APACHE web
Servers.
Note: All Monitoring templates applied to the APACHE Web servers are customized
by Arrow Managed Services and any monitors found outside the existing templates
will be researched by Arrow Managed Services and applied to all the clients’ servers
as appropriate.
The following Monitors will be enabled on APACHE Web Servers.
o APACHE Service monitoring
o URL Monitoring
o APACHE stats monitoring
 Response time
 Idle time
 Open slots
o SSL Certificate expiration
2.2 REMOTE REMEDIATION AND FIX FOR THE SERVERS
Arrow Managed Services Windows Team will connect to APACHE Web Servers remotely
to SOP remediate issues.
The following are the some of the examples of issues:
 Website down.
 Website slow.
 Configure Applications.
 Troubleshoot APACHE Performance.
 Enabling APACHE certificates
 Applying Security Patches
 Application Backup & Restores
Scope:
 All APACHE Web Servers in the customer environment which are in the scope.
Deliverables:


Remotely fixing issues APACHE Web Servers with SOPs
Providing RCA report for P0 issues.
2.3 MONTHLY PROACTIVE CHECKS ON APACHE WEB S ERVERS.
Scope:
Arrow Managed Services Confidential
Copyright © 2004-2010, NetEnrich, Inc. All Rights Reserved.
Page 6 of 22
March 2010
Enterprise Services for Apache Servers

All APACHE Web Servers in the customer environment agreed as per the scope.
Deliverables:

Report on Monthly APACHE health check.
Arrow Managed Services Confidential
Copyright © 2004-2010, NetEnrich, Inc. All Rights Reserved.
Page 7 of 22
March 2010
Enterprise Services for Apache Servers
3.0 SERVICE DELIVERY MANAGEMENT
Leveraging its well defined process, technology and people, Arrow Managed Services will
execute efficient and effective operations of any APACHE Servers environment.
Arrow Managed Services will create two important documents which will define the service
delivery details. These documents are being created by Arrow Managed Services and will be
provided to Customer for review and approval.
1. Service Delivery Document: This support process document is intended to identify the
guidelines for providing support and services and for determining priority, issue
resolution and the communication of updates to Customer’s team. This document will
be kept current (based on the changes in support requirements) and will be an
extension to this SOS.
2. Discovery Document & Service Delivery Manual: This is document details the business
services and contains important sections which are required for Arrow Managed
Services to adequately manage the service. Customer will play a key role in providing
the necessary information for Arrow Managed Services to complete the documents.
3.1 ENGAGEMENT PROCESS OVERVIEW
Arrow Managed Services will provide efficient support to Customer by leveraging our
SLA driven delivery model. The monitoring facility will be installed on all the Servers
under support, in consultation with the customer, and all alerts will be monitored. All
alerts which qualify as per defined parameters will be ticketed and remedied.
Based on the results of the initial investigation, an issue may be brought to resolution. If
an anomaly is identified, it is escalated to appropriate individuals within Customer IT
Services.
Service delivery document details the process flow for this engagement and will be
updated to highlight the current support process.
3.2 SERVICE LEVEL AGREEMENT
Arrow Managed Services will perform these activities in SLA based service delivery
model. However, because there is no lockdown on the environment, important
operational requirements such as availability, capacity, and outages will be a joint
responsibility of Arrow Managed Services and its customer. Further any device
addition/deletion, changes must follow effective change management.
Following table describes the various priority levels associated with incidents. The
sources of alerts are from monitoring system or from requests via ticketing system,
phone or emails.
Arrow Managed Services Confidential
Copyright © 2004-2010, NetEnrich, Inc. All Rights Reserved.
Page 8 of 22
March 2010
Enterprise Services for Apache Servers

The RCA for P1 is part of normal ticket updates but in P0 we would provide a
separate and detailed report. SLAs are not applicable on unsupported devices
 SLAs are not applicable when change management is not followed
 Support benchmark is 100% for given quarter
SLA is applicable if effective Change Management is followed both for changes made by Arrow
Managed Services and the customer. Resolution time mandates one or more of the following
activities are complete:




Temporary work around/fix to restore the business service
Permanent fix (may be a result of root cause analysis of an issue)
Issue escalated to vendor
Action plan is created to address the trouble ticket
3.3 SERVICE REVIEWS
Periodic reviews will be conducted by Arrow Managed Services with customer management
team to assess the performance.
A weekly review for status update/performance review will be scheduled with Customer
Management. The agenda for the meeting includes:





Review of tickets (Open / Closed / Work in Progress etc) and service requests.
Progress made on key activities/items
Key Issues impacting the engagement
Prioritization of activities/service requests
Operational metrics review
3.4 CUSTOMER VISIBILITY & AUDITABILITY
3.4.1 AUDITABILITY
Arrow Managed Services Confidential
Copyright © 2004-2010, NetEnrich, Inc. All Rights Reserved.
Page 9 of 22
March 2010
Enterprise Services for Apache Servers
All remote activities performed by Arrow Managed Services engineers on the
customer’s APACHE Web Servers are recorded and available for the customer to
replay and review via the Arrow Managed Services VPMG.
3.4.2 INFRASTRUCTURE VISIBILITY PORTAL
Arrow Managed Services will provide two user logins for our customers to login to
the Infrastructure visibility portal. This provides unparallel visibility on the current
status of the Base OS servers across different locations and provides useful trending
reports for advanced analysis.
3.5
METRICS BASED REPORTING AND ANALYSIS
3.5.1 MONTHLY REPORTING
Key Content
 Status review meeting to review tickets and SLA performance.
Meeting Type

Phone call – 1 hr
3.6 EXTENDING OPERATION SUPPORT FOR NEW S ERVICES/INFRASTRUCTURE
Arrow Managed Services will perform a “service/infrastructure intake process” to do
knowledge transfer and transition/transfer of information to perform steady state
operations. “service/infrastructure intake process” will be performed by L2 team as ondemand activity and would usually need 2-6 weeks of Transition/TOI before supporting
it with SLAs. Arrow Managed Services will evaluate every business service and update on
the plan for operation readiness and intake. Arrow Managed Services will present a
program change request on this SOS to customer accommodating the additions in
devices/services.
3.7 SUPPORT WINDOW
Below are the terminologies used by the NOC for the service time frames:Definition
Days
Service Timings
Business Hours
Monday to Friday
8:00 am to 6:00 pm
Mode of
Delivery
Remote
Off Business Hours
Monday to Friday
6:00 pm to 8:00 am
Remote
Weekend Hours
Saturday & Sunday
6:00 pm Friday to
8:00 am Monday
Remote
Arrow Managed Services Confidential
Copyright © 2004-2010, NetEnrich, Inc. All Rights Reserved.
Page 10 of 22
March 2010
Enterprise Services for Apache Servers
Note: All hours mentioned are client local hours.
3.8 ESCALATION M ATRIX
Following is the escalation matrix available for customers to escalate any incidents relating to
services.
Role
Skills
Account Manager
Management Skills
Service Delivery
Manager
Delivery Management
Skills
Technical Support
Group
Senior Engineer
Major Activities
Technical Skills
Server, Mail, Network
Support
Communication
Process Knowledge
Help Desk




















Strategic interfacing with customer
Statement of Service Compliance
Overall delivery quality
SLA adherence
Transposing best practices across sites
Availability management
Capacity Management
Service Delivery review & reporting
Bridging the customer and delivery team
SOP co-ordination, reviews and
approvals
SPOC for the customer on Delivery issues
Provide level 3 technical support for all
escalated incidents
Incident handling
Call resolution (servers, network,
servers)
Handling escalated calls
Process adherence
Call logging
Call assignment
Process adherence
Configuration Management (ITIL)
Following is the Arrow Managed Services Contact List dedicated for the Customer Service
Delivery
Title
Name
Email
Phone Number
Technical Support
Service Delivery Manager
Account Manager
Arrow Managed Services Confidential
Copyright © 2004-2010, NetEnrich, Inc. All Rights Reserved.
Page 11 of 22
March 2010
Enterprise Services for Apache Servers
4.0 ON-BOARDING REQUIREMENTS
Tasks include
 Arrow Managed Services can assist the customer in the above tasks by
conducting a discovery and assessment engagement prior to on-boarding.
 Arrow Managed Services will integrate into customer current outsourced
helpdesk provider for SR fulfillment and tracking
This would be on a case by case basis.
Arrow Managed Services Confidential
Copyright © 2004-2010, NetEnrich, Inc. All Rights Reserved.
Page 12 of 22
March 2010
Enterprise Services for Apache Servers
5.0 OUT OF SCOPE
Any items not explicitly covered within this document are considered out-of-scope. Upon
request, out-of-scope activities will be scoped by Arrow Managed Services and presented to the
customer for approval.
Arrow Managed Services Confidential
Copyright © 2004-2010, NetEnrich, Inc. All Rights Reserved.
Page 13 of 22
March 2010
Enterprise Services for Apache Servers
FEES
Arrow Managed Services Confidential
Copyright © 2004-2010, NetEnrich, Inc. All Rights Reserved.
Page 14 of 22
March 2010
Enterprise Services for Apache Servers
TERMS AND CONDITIONS
Arrow Managed Services Confidential
Copyright © 2004-2010, NetEnrich, Inc. All Rights Reserved.
Page 15 of 22
March 2010
Enterprise Services for Apache Servers
DISCLAIMERS
DISCLAIMER OF WARRANTIES, LIMITATION OF LIABILITY AND LIMITATION OF ACTIONS.
ARROW MANAGED SERVICES MAKES NO WARRANTIES, EXPRESS OR IMPLIED, FOR ITS SERVICES
OR ANY RELATED DELIVERABLES, ALL OF WHICH WILL BE PROVIDED AS-IS, WITH ALL FAULTS.
ARROW MANAGED SERVICES SPECIFICALLY DISCLAIMS (A) THE IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, (B) ANY WARRANTY THAT IT’S
SERVICES OR ANY RELATED DELIVERABLES WILL BE ERROR-FREE OR WILL OPERATE WITHOUT
INTERRUPTION AND (C) ANY WARRANTY THAT ITS SERVICES OR ANY RELATED DELIVERABLES
WILL RESULT IN ANY ECONOMIC ADVANTAGE, INCREASE IN PROFITS OR REDUCTION IN COSTS.
ARROW MANAGED SERVICES WILL NOT BE LIABLE FOR ANY INCIDENTAL, SPECIAL, EXEMPLARY
OR CONSEQUENTIAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF
ANY DATA, PROGRAMS, WARRANTIES, ANTICIPATED PROFITS OR OTHER BENEFITS) THAT
RESULT FROM USE OF, RELIANCE UPON OR INABILITY TO USE ITS SERVICES OR ANY RELATED
DELIVERABLES, REGARDLESS OF (1) WHETHER OR NOT ARROW MANAGED SERVICES HAS BEEN
INFORMED OF THE POSSIBILITY OF SUCH DAMAGES AND (2) WHETHER SUCH DAMAGES ARE
BASED IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY OR ANY OTHER
THEORY OR FORM OF ACTION.
If for any reason, by operation of law or otherwise, any of the foregoing disclaimer of
warranties and limitation of liability is ineffective, the parties hereby expressly agree that IN NO
EVENT SHALL ARROW MANAGED SERVICES’S CUMULATIVE LIABILITY TO CUSTOMER IN
RELATION TO THIS AGREEMENT AND THE TRANSACTIONS CONTEMPLATED HEREBY EXCEED A
SUM EQUAL TO THE TOTAL COMPENSATION ACTUALLY PAID TO ARROW MANAGED SERVICES
UNDER THIS AGREEMENT.
Neither party shall have the right to institute any action nor does proceeding arising out of any
of the transactions contemplated by this Agreement, regardless of the form of such action or
proceeding, later than one year after such transaction occur.
Customer
______________________________
ARROW MANAGED SERVICES INC.
________________________________
Signature
______________________________
Signature
________________________________
Print
______________________________
Print
________________________________
Title
______________________________
Date
Title
________________________________
Date
Arrow Managed Services Confidential
Copyright © 2004-2010, NetEnrich, Inc. All Rights Reserved.
Page 16 of 22
March 2010
Enterprise Services for Apache Servers
APPENDIX A - SLA
Following section describes the various priority levels associated with incidents. The sourc e of
alerts is either from Monitoring system or from User requests via our ticketing systems phone
or emails.
Priority 0 (Critical)
Description: This is an EMERGENCY situation that significantly restricts the use of an Application
or System to perform any critical business function. This could mean that several areas of
customer IT infrastructure are impacted. The ticket could originate from multiple sources:
customer, end-user, customer IT staff, Arrow Managed Services staff, or an automatic
notification from a server, network device or an application. Some examples of critical issues
are listed in the bullets below.
Target for Response: There will be first response within 15 minutes of receiving notification. A
status update will be given within 60 minutes of the initial call.
Target for Resolution: Within 4 hours, but the solution may require a temporary workaround
until the final solution can be investigated and implemented. In these cases, the ticket will be
closed after a workaround is implemented and the service is restored. A new ticket will be
opened with a lower priority to evaluate alternative solutions.
Procedure: After a critical issue is reported to the incident manager in Arrow Managed
Services (ICM) the process is:
 The ICM will report the issue immediately to all key customer personnel (key
customer personnel shown in section on Business Contacts).
 The ICM will communicate regular status updates to the appropriate customer
personnel.
 If it is appropriate, the ICM will call an emergency coordination meeting with all
the issue owners to discuss an action plan for resolution including possible
recovery efforts.
 Incident report will be sent to the customer within 8 Hrs of
resolution/workaround which details the steps taken to resolve the Incident.
A Root Cause Analysis (RCA) report will be provided within 1 week of resolution to the
customer.
Examples of Critical Issues



Several users or groups have Hardware, Server, Business application, or Network
related issue which has a direct impact on CUSTOMER revenue.
A comprehensive list will be prepared based on feedback from CUSTOMER &
mutual agreement will be made on the expectations.
Examples of some critical issues:
o Complete web site down
o Authentication issues for all users.
Arrow Managed Services Confidential
Copyright © 2004-2010, NetEnrich, Inc. All Rights Reserved.
Page 17 of 22
March 2010
Enterprise Services for Apache Servers
o
o
o
o
FTP Server down
Application to Database connectivity issues
Web Server down
SSL Certificate Expired
Priority Level 1(High) P1
Description: Any important functionality of an Email application is severely impacted. It is
deemed high priority (P1) because of its business or financial impact. The ticket could originate
from multiple sources: customer end-user, customer IT staff, Arrow Managed Services staff, or
an automatic notification from a server, network device or an application. Substantially
degraded performance of any critical system (order/invoice channel) is also categorized as
Priority 1. The only difference between a P0 and P1 issue is how widespread the issue is i.e.
business impact. A P0 may impact the entire department or company where as P1 impacts
one/few users. A P1 may impact the entire order/invoice channel where there is a possibility of
reverting to a manual or back-up order process.
Target for Response: There will be first response within 30 min of receiving notification or
leaving a voicemail if a representative is not available immediately. Status update for every 8
Hrs will be given until the problem gets resolved OR a workaround been provided.
Target for Resolution: Within 24 hours, but the solution may require a temporary workaround
instead of the final resolution. In these cases, the ticket will be closed after workaround is
implemented. A new ticket will be opened with a lower priority to evaluate all possible
solutions. If a resolution requires vendor management, the ticket will be escalated to Customer
and Arrow Managed Services will provide the back end support required to close the ticket. ----This is just the SLA measurement part where third party vendors are involved and Arrow
Managed Services will have less hold on it. However the team will continue to co-ordinate with
vendor for first one hour and from second hour an approval would be obtained from customer
as it involves additional charges.
Examples of High Priority Issues




FTP is not accessible for few users.
Modify application authentication settings
Web server Performance troubleshooting
Backup restore
A comprehensive list will be prepared bas ed on the feedback from CUS TOMER and mutual agreement
will be made on the expectation
Priority Level 2 (Medium)
Description: The reported issue may restrict the use of one or more features of the system, but
the business or financial impact is not severe. The ticket could have originated from multiple
sources: customer end-user, customer IT staff, Arrow Managed Services staff, or an automatic
notification from a server, network device or an application. The reported issue may be of
Arrow Managed Services Confidential
Copyright © 2004-2010, NetEnrich, Inc. All Rights Reserved.
Page 18 of 22
March 2010
Enterprise Services for Apache Servers
critical nature but sometimes the issue can be downgraded to a priority 3 because a viable
workaround is discovered as a temporary solution.
Target for response: within one hour, every 12 hours status update will be provided
Target for resolution: within 48 Hrs
Examples of medium priority issues

Slow web access

Log analysis

Application configuration changes
Priority Level 3 (Low)
Description: The reported anomaly in the system does not substantially restrict the use of one
or more features of the product to perform necessary business functions. The ticket could have
originated from multiple sources: customer end-user, customer IT staff, Arrow Managed
Services staff, or an automatic notification from a server, network device or an application. This
is a minor problem and will not significantly impact operations. This also arises out of any
install/move/add/change (IMAC) activities discussed with customer.
Target for Response: Within 2 Hrs
Target for Resolution: 5 days (or mutually Agreed)
Examples of Minor Issues




Low impact changes in IT processes that are of a non-critical nature
Any server software or hardware issue for which a workaround exists
Patch Installation
Backup
APPENDIX B – ROLES AND RESPONSIBILITIES
Activity
Enable SNMP/WMI and setup community string
Account Access Details for all the Servers
Install and Configure VPMG
Access in the firewall to allow communication from VPMG
Vendor and their contact details with escalation matrix
Arrow Managed Services Confidential
Copyright © 2004-2010, NetEnrich, Inc. All Rights Reserved.
Customer
Arrow
Managed
Services





Page 19 of 22
March 2010
Enterprise Services for Apache Servers
SERVICE D ELIVERY
Activity
Monitoring and alerting –APACHE Web Servers
Troubleshooting and fix –APACHE related Issues
Hands & Feet Support
Approval for deploying antivirus updates and monthly security
patches
End users should be informed of maintenance schedules
Preventive Maintenance tasks
Antivirus Updating
Install missing security and critical patches
Reports
Backup and Restoration
Inform NOC of any changes to the APACHE Web Servers
Configuration.
Arrow Managed Services Confidential
Copyright © 2004-2010, NetEnrich, Inc. All Rights Reserved.
Customer
Arrow
Managed
Services











Page 20 of 22
March 2010
Enterprise Services for Apache Servers
APPENDIX C – VPMG DEPLOYMENT ARCHITECTURE
Customized as per customer requirements
Arrow Managed Services Confidential
Copyright © 2004-2010, NetEnrich, Inc. All Rights Reserved.
Page 21 of 22
March 2010
Enterprise Services for Apache Servers
APPENDIX D – EQUIPMENT LIST
Insert Device list at customer’s locations
Arrow Managed Services Confidential
Copyright © 2004-2010, NetEnrich, Inc. All Rights Reserved.
Page 22 of 22
March 2010