System Integrator’s Requirements

1 Bidder should have application security expertise and should be able to fine tune the profile of the Bank’s web applications in the WAF.

2 Bidder should be able to analyze WAF alerts and remove false positives and fine tune the protection policies in the WAF.

3 Bidder should be able to develop custom WAF policies to protect against known vulnerabilities in bank’s web applications.

Note:-

 The proposed solution covering all Hardware, Software, Operating System and other related software must be IPV6 compliant. A certificate in this regard should also be submitted along with technical bid documents.

 The Bidder should provide compliance statement for all the above specifications of technical requirements against each item.

 All relevant product information such as user manual, technical specifications sheet etc should be submitted along with the offer. Failure to submit this information could result in disqualification of the bid.

 Hard copy of supporting documents, Data Sheet, Manuals or documentary proof for all the above criteria i.e. Bidder’s eligibility criteria, Technical Specifications etc. should be submitted in the envelope containing technical bid.

4 Bidder should be able to develop custom DAM policies to monitor, audit and protect Bank’s database as per Bank’s unique requirements.

5 Bidder should conduct comprehensive training on WAF and DAM solution to enable bank’s officials in managing WAF and DAM.

6 Bidder should design an incident management workflow to respond to WAF and DAM alerts.

Bill of Material Annexure IV

Sr.

No. Item Description Item Specification

High Availability (HA)/Single Qty. Rate Total (INR) 1 Database Activity

Monitoring System (DAM) Software/Hardware HA 2 Web Application Firewall

(WAF) Software/Hardware HA

3

Database protection agents (to be installed on protected 25 DB Servers)

Software Single

4

Centralized Management for DMS and WAF solution modules

Annexure V

L1 Bidder determination sheet

Sr.

No. Item Qty.

Unit Price with 3 years warranty (RS.) Total Price with 3 years warranty (Rs.) (A) AMC charge s for 2 years (B) Total Price (Rs.) (A+B) 1 Database Activity Monitoring System (DAM) 2 Web Application Firewall

(WAF) 3

Database protection agents (to be installed on protected 25 DB Servers) 4

Centralized Management for DMS and WAF solution modules

5 Facility Management (FM)

Charges 01

6 Any other Charges Total Charges (Rs.) =

Note:-The price quoted must be inclusive of all duties and charges related to freight, insurance, forwarding, packing, dispatch, installation etc. However, Value Added Tax, Sales Tax, Octroi, Service Tax and Local Taxes, if any, are payable extra on actual.

The Facility Management (FM) Charges to be quoted initially for a period of one year for one engineer only. The Bank may extend the facility for subsequent years as per Business requirement.

Annexure VI

Performa for the Bank Guarantee for Earnest Money Deposit

(To be stamped in accordance with stamp act)Ref: Bank Guarantee # Date

Oriental Bank of Commerce Corporate Office,

Plot No. 5, Sec-32 Institutional Area Gurgaon

Dear Sirs,

In accordance with your bid reference no. OBC/HO/DIT/RFP-Information Security/

/2012-13 dated _____________, M/s______________________________________ having

its registered office at ______________________________________________herein after called ‘bidder’) wish to participate in the said bid for Supply, Installation, Configuration, Integration and Operationalization of Web Application Firewall (WAF) and Database Activity Monitoring Security Tools at Oriental Bank of Commerce having its Corporate Office at Gurgaon-122001.

An irrevocable Financial Bank Guarantee (issued by a nationalized / scheduled commercial Bank) against Earnest Money Deposit amounting to Rs.__________ Rupees (in words)___________valid up to ________________ is required to be submitted by the bidder, as a condition for participation in the said bid, which amount is liable to be forfeited on happening of any contingencies mentioned in the bid document. M/s_________________________________ having its registered office at ______________has undertaken in pursuance of their offer to Oriental Bank of Commerce_____________________________________(hereinafter called as the beneficiary) dated__________ has expressed its intention to participate in the said bid and in terms thereof has approached us and requested us ___________________________Bank________________________ to issue an irrevocable financial Bank Guarantee against

Earnest Money Deposit amounting to Rs ________valid up to _______________.We, the ________________________ Bank at _______________________having our Head office at ____________________therefore Guarantee and undertake to pay immediately on first written demand by Oriental Bank of Commerce, the amount Rs.

_________________Rupees__________________________________________________ _________________________________________________________________________ without any reservation, protest, demur and recourse in case the bidder fails to comply with any condition of the bid or any default in violation against the terms of the bid, without the beneficiary needing to prove or demonstrate reasons for its such demand. Any such demand made by said beneficiary shall be conclusive and binding on us irrespective of any dispute or difference raised by the bidder.

This guarantee shall be irrevocable and shall remain valid up to _______________. If any further extension of this Guarantee is required, the same shall be extended to such required period (not exceeding one year) on receiving instructions in writing, from(______________________________________) on whose behalf guarantee is issued. In witness whereof the Bank, through its authorized officer has set its hand stamped on this _____________ Day of ______________2012 at __________________

Designation

Bank Common Seal

Annexure VII