CMS Assessment – Phase II – Summary Report List of Appendices Appendix A: Acquia-Wisc-Multi-Proposal Appendix B: Acquia-Wisc-Pricing Appendix C: ADI-IA-UserInterfaceDevelopment-Estimate Appendix D: Blackmesh Quote 1604-000945 Appendix E: Followup COOP Information Datacenter Tiers Appendix F: Pantheon Presentation – U. Wisc Feb3 Appendix G: Site Information Collected from Network Flows Appendix H: WiscWeb CMS Service Description Appendix I: Requirements Per Tiers Appendix J: WiscWebDirective_9Sep2015 Appendix K: ProposalItemizedTables Appendix L: Harvard University CMS Homepage Appendix M: University of Iowa CMS Homepage Appendix N: Stanford University CMS Hompage Appendix O: Library of Things Proposal Status Appendix P: WordPress Consortium Proposal 6/21/2016 Appendix A: Acquia-Wisc-Multi-Proposal Acquia Proposal Enterprise Cloud Platform Thad Martin, Director – Higher Education, West Acquia in Higher Education § Acquia is the enterprise company behind Drupal, founded by its original creator with over 750 employees and customers like Tesla, Whole Foods, Pfizer, Motorola and the Weather Channel. § Higher Education is our largest vertical by number of customers. Over 550 higher education clients – including institutions like UCLA, California State, Arizona Iowa, and Kent State § Dedicated team started in 2013 and broadened in 2014 to work strategically with institutions. § Acquia’s oldest and a key strategic vertical (Bentley was our first customer in 2007) § Many of Acquia’s team have deep backgrounds in higher education. Support & Technology for the University’s most visible sites § Platform as a Service – focusing developer efforts Main .EDU sites on Acquia Cloud with included functionality and tools § Univ of Minnesota (http://umn.edu) § 24/7 Critical response for ANY issue – both with the § CalState – Long Beach (http://csulb.edu) - Also Drupal Application or the Acquia Platform itself Northridge, LA, Stanislaus and San Francisco State. § Dedicated, global support and operations teams § Kent State (http://kent.edu) providing advisory and support to Wright § Arizona (http://arizona.edu) § True High Availability – Servers across two physical § George Mason (http://gmu.edu) data centers with automated failover With many others (just under 100), and preparing § Proactive Monitoring and Issue response, automated to Launch: scaling in the event of a traffic increase. § Southern Mississippi (http://usm.edu) § Industry-leading security, with completion of SSAE16 § Tulane University (http://tulane.edu) SOC1 and SOC2 audits, HIPAA compliance audits, § University of Iowa (http://uiowa.edu) and PCI. Acquia Cloud By The Numbers 6+ 99.98% YEARS UPTIME IN LAST SIX INVESTMENT MONTHS 33B 10K REQUESTS & 450+ INSTANCES 9PB SYSTEM TESTS ON AWS CONTINUALLY 500K SERVED RUNNING TO LINES OF MONTHLY ENSURE RELIABLE AUTOMATION OPERATIONS CODE Guaranteed Resiliency DNS What You Get Balancer Balancer → Highly available, scalable, secure infrastructure → Guaranteed 99.95% Web Nodes Web Nodes infrastructure and application uptime Memcache File System Database Memcache File System Database → 24x7x365 monitoring → Nightly backups AVAILABILITY ZONE 1 AVAILABILITY ZONE 2 → 4-hour snapshots OREGON REGION Why It Matters → Sites won’t go down → No loss of data Elasticity When You Need It Most Your site is down OVER PLAN ! ! Traditional hosting: Potential outages, dollars wasted UNDER PLAN Scales to meet the needs Acquia Cloud: Guaranteed 99.95% uptime, pay for what ACQUIA PLAN you need Accelerated Deployment of Reliable Websites Build & Manage & Deploy Optimize TOOLS FOR YOU ACQUIA-MANAGED TOOLS FOR YOU ACQUIA-MANAGED • Pre-established dev/ • High-performance, • Site security and • Performance and stage/prod Drupal-tuned platform performance monitoring configuration tuning environments in stack • Log Streaming • 24x7 infrastructure and developer workflow • Elastic, scalable virtual • Stack usage metrics security management • Cloud API & Hooks resources • Site Uptime Monitoring • Remote Site • Local & Live Dev • Multi-datacenter failover Administration • Git/Subversion for high availability • Drupal application integration for version • Nightly backups (custom code) support control • 4-hour snapshots Robust Development Tools What You Get → Pre-established dev/stage/prod environments with drag-and- drop deployment → Cloud API & Hooks Why It Matters → Quality application design → Business agility & velocity → Continuous delivery best practices Powerful Troubleshooting & Monitoring What You Get → Performance & security analysis and recommendations → Log Streaming → Site Uptime Monitoring → Stack Usage metrics Why It Matters → Ensures your site is secure and actively serving customers → Reduce time between discovering & fixing site issues Guaranteed Resiliency DNS What You Get Balancer Balancer → Highly available, scalable, secure infrastructure → Guaranteed 99.95% Web Nodes Web Nodes infrastructure and application uptime Memcache File System Database Memcache File System Database → 24x7x365 monitoring → Nightly backups AVAILABILITY ZONE 1 AVAILABILITY ZONE 2 → 4-hour snapshots OREGON REGION Why It Matters → Sites won’t go down → No loss of data Infrastructure & Platform Monitoring Monitoring Cloud Operations Team → Nagios and home-grown tools → Critical issue response provide infrastructure → Proactive tuning of 50 monitoring infrastructure parameters for § Instant access to 40+ real- optimal speed and stability time and historical metrics § Alerting & escalation → OSSEC intrusion detection system Application Monitoring Built For You Performance & Security Third-Party Uptime Monitoring Analysis Monitoring • Provides real-time • Checks your site every analysis, proactive alerts, 60 seconds to see if it is and best practice online and serving pages recommendations on • Sends alerts if security and unresponsive performance issues with your Drupal code and configuration Most Secure Drupal Platform → IP address whitelisting → Granular access control → Two-factor authentication → Vulnerability scanning → Intrusion detection iza rgan tion O Co ce nt vi ro r l → Event monitoring e R S e A p P o C r I t s A → HIPAA & FERPA SERVICE ORGANIZATIONS F SOC s o aicpa.org/soc t rm r e po rl e y SAS 70 R We Won’t Let You Fail Reading → 24x7x365 critical issue Boston response Portland → Follow-the-sun approach → World-class team of Drupalists → Support for your custom Drupal code → One-hour response Sydney time SLA Global Support By The Numbers 94% FLUENCY IN CUSTOMER 5 SATISFACTION LANGUAGES 150+ RATING DRUPALISTS 250+ YEARS OF COMBINED 24x7 DRUPAL 50K+ ACROSS EMERGENCY EXPERIENCE CUSTOMER 50+ RESPONSE REQUESTS SUPPORT COMPLETED 4 PERSONNEL CONTINENTS EACH YEAR Remote Site Administration What You Get Why It Matters → Security updates for Drupal core & → Achieve your business goals faster contributed modules → Free your staff from time-consuming → Module installation, configuration, tasks so they can focus on and feature updates innovation → Creation & modification of views & → Reduce maintenance time & costs content types → Ensure rapid security response → Application tuning via the UI → Streamline maintenance & updates → Implementation of version control → Implement operational best → Recommendations for bug fixes practices How Acquia Cloud Differs ACQUIA MANAGED ON-PREM CLOUD HOSTING HOSTING Fully managed Drupal-tuned platform stack YOUR EFFORT 24x7 Drupal support Drupal development tools YOUR Site uptime monitoring Drupal core and module updates EFFORT Performance tuning Guaranteed 99.95% site uptime Guaranteed 99.95% infrastructure uptime High availability configuration 24x7 infrastructure monitoring and support Acquia Ready Concierge What You Get → Customer Success Manager → Customer Success Engineer → Risk Assessment → Priority Ticketing → Best Practices Review → Launch Support Why It Matters → Removes stress of launch day → Ensures your success on our platform On-Boarding TImeline Pricing Options Option 1 – ACE Basic Support ANNUAL COSTS & DETAILS Support Components Annual Cost Cloud Support Doc Roots Covered Drupal Tickets Advisory Hours Remote Admin CORE anD SECURITY Basic Support $40,250 UnlimiteD 10 12 (annual) 4 Hours (annual) UPDATES ONLY Cloud Components Annual Cost Environment Config Storage SLA • Web: 2 Large CPU+ $14,785 • FS/DB: 2 XL CPU+ • 25GB – DB MulL-Tier MeDium Cluster (possibly $11,216 with HA, MulL-Tier 99.95% • Bal: 2 Large CPU+ • 100GB - Files single-er) • Dev/Stage: Large CPU+ Annual Total $55,035 Each adDiLonal Doc root woulD be $2,875 in With Internet 2 & MulM-Year $39,391 - $42,960 that Ler ($3,450 up to 6). Option 2 – Starter Support ANNUAL COSTS & DETAILS Support Components Annual Cost Cloud Support Doc Roots Covered Drupal Tickets Advisory Hours Remote Admin Basic Support $32,775 UnlimiteD 10 4 (annual) 1 Hour(annual) Not IncluDeD Cloud Components Annual Cost Environment Config Storage SLA • Web: 2 Large CPU+ $14,785 • FS/DB: 2 XL CPU+ • 50GB – DB MulL-Tier MeDium Cluster (possibly $11,216 with HA, MulL-Tier 99.95% • Bal: 2 Large CPU+ • 100GB - Files single-er) • Dev/Stage: Large CPU+ Annual Total $47,560 With Internet 2 & MulM-Year $34,158 - $37,725 Appendix B: Acquia-Wisc-Pricing @ Digital Platforms for UW Madison As UW selects WCMS platforms to better serve its campus stakeholders, there are a few standout requirements and objectives for the initiative: • Easy-to-use for campus web administrators with varied skillsets • Centrally managed and supported for largely non-technical users, while providing increased flexibility for those with development teams