Room 2202, 22/F,
Mega Trade Centre,
1 Mei Wan Street,
Tsuen Wan, New Territories

Tel: 91375571

Quote Number h-q223372036110801
Quote Date 08.11.2023
Total $200,000.00
Global Technology Integrator Limited

Unit 3603-3609, 36/F, 1 Hung To Road, Kwun Tong, Kowloon, Hong Kong.

Hrs/Qty Service Rate/PriceAdjustSub Total
1 Azure Landing Zone Design & Implementation Service for HKMC

Project Preparation
Conduct project kick-off meeting
Technical workshop to gather Azure infrastructure requirements (Azure adoption plan, migration plan) from business units and other stakeholders (e.g. operation risk, information risk, compliance, IT)
Finalize project timeline, tasks and R&R
Azure Environments design (e.g. Dev/Test/Prod)
Formulate an end to end, complete, scalable, extensible system design to support requirement (function/non-functional) gathered
Identity and access management design and implementation
Define up to 3 RBAC roles for Azure subscriptions cloud operation and mangement using built-in Azure roles

Network topology and connectivity design and implementation
Datacenter connectivity requirement discovery
Define hub-and-spoke network architecture design (VNETs, subnets, CIDR, network security groups, route tables)
Setup DNS and name resolutions for Azure resources (Azure Private DNS zone)
Setup S2S VPN connectivity through Azure Virtual Network Gateway (if applicable)
Setup Jumphost or Bastion services for secure remote access to Azure environment
Setup Azure firewall
Setup IP whitelisting for end users
Ensure that all data-in-transit are encrypted for Azure connectivity
Setup Azure Key Vaults for DAP
Setup certificate renewal alerts and auto-rotation
Resource organization and implementation
Define resource groups, naming conventions, tagging conventions
Define resource locations and zones for Azure workload deployment
Core system infrastructure design and implementation on Azure
Define and implement infrastructure-level data architecture (e.g. specifying all physical storages, data flow within, into & out of the System)
Set up and configure common cloud infrastructure components (e.g. landing zone, SMTP gateway, API gateway, etc.)

Infrastructure-as-Code (IaC) enablement and DevOps enablement
DevOps Enablement
Creation of Azure DevOps organization
Creation of Git repositories for storing IaC scripts, Python notebooks for Databricks, schedule jobs, other custom developed scripts for DAP
IaC Enablement
Conversion of infrastructure design to Terraform IaC scripts cover all Azure infrastructure (landing zone and DAP workloads)
Testing and fine-tuning of Terraform IaC scripts
Deployment of Terraform IaC scripts to PROD environment

Setup Azure Infastructure Security baseline
Enable Defender for Cloud
Enable Azure Security Center default policy
Data Security
Ensure that all data-at-rest and data-in-transit are encrypted
Complete security assessment with Customer
Security scanning through Azure Security Center and Azure Advisor
Remediation of Azure Security Center critical findings and Customer-provided security tools critical findings
Compliance Review
Compliance check according to the Customer’s internal IT guidelines
Compliance check with external guidelines such as PDPO, guidelines issued by Insurance Authority

Azure infrastructure governance baseline
Enable Azure Advisor
Define and enable up to 5 Azure policies
Provide Azure well-architected assessment tool output and Azure Advisor output
Setup up to 10 Azure email alerts for Azure system issues

Operational Handover
8 hours knowledge transfer over Teams
for Business Unit representatives
for IT infrastructure / application / operation team

Functional Requirement Document
Design Document / Architecture Document / Network Diagram
Setup and Configuration Document / Technical Specifications
System Test Plan
User Guide / Manual
Azure Admin and Operational Manual
Included: Project Management
Define and execute the project delivery methodology (Waterfall/Agile)
Ensure project schedule and deliverable quality

HKMC will handle all Azure AD related operations, including user account creation, service principal creation, Azure AD roles assignment, Privileged Access Management, MFA setup, enterprise applications enrollment
Creation of Python notebook contents for Databricks, scheduled jobs, custom scripts not related to infrastructure-as-code deployment is out of HD scope.
Areas of management and operational excellence are out of scope at this project stage
The business continuity plan and DR plan are out of scope at this project stage
User Manual, System Implementation Procedure and Training Manual will be combined as Azure Admin and Operational Manual
All documentation in form of softcopy in Microsoft Office format with optional video format, and in English

1 Terms & Condition

Terms & Condition
User Acceptance Test:
It is understood that the Services provided by HD under this Quotation only forms a portion of the Deliverable to be supplied to HKMC by Leading Edge. HD hereby agrees to the following terms regarding User Acceptance Test:
i. HD shall advise and assist Leading Edge, with reasonable effort, in the HKMC User Acceptance Tests.
ii. Acceptance Tests will be selected at the discretion of the HKMC.
iii. HD’s portion of the Deliverable must be verified by the HKMC to ensure it meets their requirements.
iv. Acceptance of Deliverable will be based on the satisfaction or non-satisfaction of the HKMC. A Successful Completion will be acknowledged when the HKMC issues a written notice confirming the passing of the Acceptance Tests and satisfactory completion of the Deliverable.
v. In the event that HD’s portion of the Deliverable is not accepted to the HKMC's full satisfaction, given conclusive proof by HKMC:
a) Leading Edge reserves the right to terminate this agreement immediately, and HD will be required to promptly refund any amounts paid for the respective Deliverable.
b) Leading Edge may also require HD to address and correct the defects, while retaining the right to terminate this agreement as mentioned above at any time.
For the avoidance of doubt, HD is only responsible for its own performance under this Quotation. HKMC’s rejection of the Acceptance Test, if not solely and directly due to the performance of HD, is not a reason for Leading Edge to terminate this agreement, and is not a reason to delay settlement of the respective payment milestone. In the event that during the HKMC Acceptance Test where HD’s portion of the Deliverable passed the acceptance test, while Leading Edge’s portion of the Deliverable failed the HKMC Acceptance Test, Leading Edge is obligated to settle the UAT payment milestone to HD as defined in the Quotation.

Sub Total $200,000.00
Tax $0.00
Total $200,000.00

Add a comment

Your email address will not be published. Required fields are marked *