Download Minimum Standards for ICT Infrastructure and

Survey
yes no Was this document useful for you?
   Thank you for your participation!

* Your assessment is very important for improving the workof artificial intelligence, which forms the content of this project

Document related concepts

Airborne Networking wikipedia , lookup

Distributed firewall wikipedia , lookup

Deep packet inspection wikipedia , lookup

Computer security wikipedia , lookup

Wireless security wikipedia , lookup

Wake-on-LAN wikipedia , lookup

Lag wikipedia , lookup

Microsoft Security Essentials wikipedia , lookup

Piggybacking (Internet access) wikipedia , lookup

Remote Desktop Services wikipedia , lookup

Cracking of wireless networks wikipedia , lookup

Zero-configuration networking wikipedia , lookup

Transcript
Minimum Standards for ICT Infrastructure and Telecommunications
BOM Office of Information Systems and Technology - United Nations Development Programme
304 E. 45th Street, New York, NY 10017 - 2014
1
DOCUMENT CONTROL
Document Name
Minimum Standards for ICT Infrastructure and Telecommunications
Language(s)
Responsible Unit
English
OIST/BoM
Creator (individual)
Sergey Datsenko
Subject (taxonomy)
Date Created
Minimum Standards for ICT Infrastructure and Telecommunications
June 2006
Date Updated
May 2014
Mandatory Review
Audience
(12 months past publish date)
All UNDP staff members at Headquarters, Country Offices and other offices worldwide and by all UNDP associates
using ICT resources owned or operated by UNDP
Applicability
Replaces
All individuals accessing UNDP resources
https://intranet.undp.org/global/popp/it/Pages/minimum-standards-for-ict-infrastructure-andtelecommunications.aspx (removed from POPP May 2014. May 2014 ICT Resource Usage Standards has a clause to
state that Director, OIST/BoM shall prescribe and oversee Minimum Standards (outside of POPP) with updates
shared through ICT communications channels
ICT Procedures, Guidelines, Best Practices at https://intranet.undp.org/unit/bom/oist/security/policy/default.aspx
UN Policies and Guidelines
United Nations (UN) Staff Regulations and Rules 100/200/300 Series (ST/SGB/2004/1, ST/SGB/2004/2,
ST/SGB/2004/3); UN Status, Basic Rights and Duties of United Nations Staff Members (ST/SGB/2002/13) –
Amended; UN Commission on International Trade Law (UNCITRAL) Rules on Commercial Transactions
UN Circulars and Bulletins
United Nations (UN) Secretary-General’s Bulletin on Use of Information and Communication Technology Resources
and Data, ST/SGB/2004/15 - Amended
UNDP Policies, Procedures, Standards and Guidelines
UNDP Public Information and Documentation Disclosure Policy; UNDP Copyright and Terms of Use; UNDP Policy and
Procedures on Use of Telecommunication Services at Headquarters; UNDP Prescriptive Content on Accountability,
Disciplinary Measures and Procedures; UNDP Prescriptive Content on Records Management; UNDP Internal Control
Framework; Information Security Policy; ICT Governance Policy
Other Related Policies and Guidelines
UNDP Policy on Sexual Harassment
UN Standards of Conduct for International Civil Servant
Is part of
Related Documents
UN Record Ref.
TBD
BOM Office of Information Systems and Technology - United Nations Development Programme
304 E. 45th Street, New York, NY 10017 - 2014
2
Date
Author
Version
Change Reference
05 Jun 2006
Tech Services group
0.0
20 Dec 2008
Tech Services group
1.0
09 Apr 2009
22 Sep 2009
11 Aug 2010
Tech Services group
Tech Services group
Sergey Datsenko
1.1
1.2
1.3
18 Sep 2010
Sergey Datsenko
1.4
1 Mar 2011
Sergey Datsenko
1.5
25 Oct 2011
Sergey Datsenko
1.6
24 February 2012
Michelle Maggal
1.7
Original Draft created
Edits; updates (Mobile Messaging; Sun ONE retirement); Includes mobile
messaging, HDVC, WiMAX. OIST Mgt review
Edits; updates (YA; MP)
CISO and CTO review
Restructured and updated entire document
SD ad FM edits included; Data Center standards and Telecoms connectivity
bandwidth targets added
Updates
Added Mac OS X and related applications, added Microsoft Lync, updated
network requirements to include QoS
Added handsets, headsets, cameras; Lync for PBX, Managed ECS Services;
Country Office Intranet Starter Kit, Teamworks, CQ5; IPSAS asset management
standards; update for PWD; Proxy server changed to TMG; add docking
station, DVD-RW minimum and target; Notebook target 12”-15”.
9 May 2014
Charles Havekost
1.8
Added minor changes for public cloud and IP telephony (HQ) readiness;
removed XP and Office 2003; updated hardware and software specifications;
incorporated feedback and review by BoM Directorate
BOM Office of Information Systems and Technology - United Nations Development Programme
304 E. 45th Street, New York, NY 10017 - 2014
3
Table of Contents
Minimum Standards for ICT Infrastructure and Telecommunications ............................................................................................................ 5
1. Computer Hardware and Software Specifications ................................................................................................................................... 6
1.1 Computer Hardware Specifications ...................................................................................................................................................................... 6
1.2 Computer Accessories ........................................................................................................................................................................................ 6
1.3 Printers and Multi-Function Printers .................................................................................................................................................................... 6
1.4 Tablets, Mobile Devices and Smart Phones .......................................................................................................................................................... 7
1.5 Standard Specifications....................................................................................................................................................................................... 7
2. ICT Infrastructure ................................................................................................................................................................................ 8
2.1 Server Hardware, Software and Cloud Services ..................................................................................................................................................... 8
a) Server Hardware .............................................................................................................................................................................................. 9
b) Server Software and/or Cloud Services .............................................................................................................................................................. 9
2.2 Network Protocols ........................................................................................................................................................................................... 10
2.3 Local Area Network .......................................................................................................................................................................................... 11
2.4 Data Center/Server Room Standards ................................................................................................................................................................. 11
3. Telecommunications Specifications ..................................................................................................................................................... 13
3.1 Wide Area Network - Recommended Link Quality Performance for Voice-Over Internet Protocol (VOIP) and IP Video ............................................. 13
3.2 Recommended Wireless Broadband/WiMAX Solution for Wide Area Network ...................................................................................................... 13
3.3 Internet Bandwidth Connectivity – Target Recommendation ............................................................................................................................... 13
3.4 Private Branch Exchange (PBX) .......................................................................................................................................................................... 14
3.5 Videoconferencing ........................................................................................................................................................................................... 14
BOM Office of Information Systems and Technology - United Nations Development Programme
304 E. 45th Street, New York, NY 10017 - 2014
4
Minimum Standards for ICT Infrastructure and Telecommunications
This document provides the minimum ICT Infrastructure and Telecommunications standards that are supported by OIST/BoM, as well as target, recommended
standards for UNDP offices for optimum performance. The following tables outline hardware, software, network, Internet, telephony and telecommunications
recommendations. ICT Managers and ICT focal points are responsible for assuring that UNDP office requirements meet the following conditions:
a) ICT Support - Minimum requirements are 1 ICT staff for every 50 users and 1 ICT staff for every 35 users as a target recommendation
b) Profile List - Verify that all hardware specifications and software versions meet the Minimum ICT Standard requirements, as specified in this document.
Verify that power users have hardware and software that meet the requirements of Atlas and other enterprise ICT applications required. Identify in your
office a profile list of the different users, nature of access required
c) Computer and Server Configurations - Verify that all hardware specifications and software versions meet the Minimum ICT Standard requirements, as
specified in this document. Verify that the Power Users have hardware and software that meet requirements of Atlas, SharePoint Intranet, other
enterprise applications (such as CARDS, FDP, MPTF Gateway, Swift, etc.)
d) Software Version and License Compliance - Ensure that all personal computer and server software is legally licensed, including client access licenses, and
is in compliance with minimum or standard versions specified in this document
e) Local Area Network Compliance - Ensure that network is built using managed Fast or Gigabit Ethernet switches and compliant with cabling
requirements. Ensure that a country office is in compliance with network standards, including firewall appliance, with separate subnets for UNDP and
other UN agencies/partners, demilitarized zones, and proper IP Addressing, as specified in this document
f) Network & Internet Policy Compliance - Ensure that firewall is configured with the appropriate policy in compliance with the applicable Managed
Security Services Policies from the Service Provider. Anti-virus software must be installed on all personal computers, as well as on email, file and
document management servers. Ensure that proxy server is used per standards below. It is required to have at least 6 routable IP addresses from ISP
g) Telecommunications - Ensure that PBX meets all minimum requirements stated in this document, including availability of local support and service
h) Videoconferencing - Ensure that videoconferencing facilities fully meet requirements of this document
i) Persons with Disability - Ensure that the built-in accessibility features are made available for persons with disabilities
j) Standard computer as well as server hardware should be procured only through established Long Term Agreements with manufacturers/resellers (HQ
only). Use of other computer manufacturers requires written approval of UNDP Chief Technology Officer
k) Obsolete ICT components refer to ICT components that cannot and should not be used within UNDP due to various factors, such as compatibility with
other ICT components. For example, for hardware it is inability to efficiently run minimally supported version of software; for software it is inability to
integrate with other ICT infrastructure components
l) Not supported ICT components refer to ICT components that may be technically compatible but not tested, and their use may introduce negative impact
on current UNDP ICT infrastructure. For end-user support this term means that specific software or hardware will not be serviced through normal ICT
support channels - IMA/IM/OIST Helpdesk for HQ and ICT Managers in Country Offices
m) ICT assets are now a minimum of $1500 with a useful life of 7 years as per IPSAS standards. Please refer to the IPSAS standards for asset lifecycle and
disposal information at https://intranet.undp.org/global/popp/asm/Pages/equipment-depreciation-reconciliations-reports-and-centralizedfunctions.aspx
n) Users must submit to their ICT focal point a valid business justification for requesting to use Mac OS in the office. Not all IMAs/ICT Managers have been
trained on supporting Mac OS X and therefore users should expect support from their IMAs/ICT Managers only after they have been fully trained.
BOM Office of Information Systems and Technology - United Nations Development Programme
304 E. 45th Street, New York, NY 10017 - 2014
5
o) All network equipment must be installed and managed by office’s ICT personnel. Users must not connect network hubs or switches, Wireless Access
Points or Cable/DSL routers to the network
1. Computer Hardware and Software Specifications
1.1 Computer Hardware Specifications
Component
Minimum configuration
Obsolete configuration
Processor
Dual-Core x86 CPU, 1.8 GHz or faster with support for PAE, NX, and
SSE2
4 GB RAM
120 GB HDD or SSD
Microsoft DirectX 9 graphics device with WDDM driver
At least 1366 x 768 resolution
100/1000 Mbps Ethernet or 802.11a/b/g/n dial-band Wi-Fi card
2 USB ports
VGA, DVI, HDMI or DisplayPort connector for external monitor
Integrated or built-in camera, microphone and speakers or headsets
Microsoft Lync compatible
All not meeting minimum configuration
requirements
Memory
Internal Storage
Graphic Card
Display/monitor
External Interfaces/connectors
Cameras, Microphones or
Headsets and Speakers
When purchasing new computers, non-portable
configurations (desktops, towers) are no longer
recommended
1.2 Computer Accessories
Component
Minimum configuration
Target configuration
Obsolete configuration
Monitor
17” LCD with VGA connector supporting at
least 1024x768 resolution
19” LCD with DVI or DisplayPort
supporting at least 1440 x 900
resolution
All CRT monitors
15” LCD monitors
1.3 Printers and Multi-Function Printers
Component
Minimum configuration
Target configuration
Obsolete configuration
Personal Printers
Black and White Laser or Color Inkjet
Black and White Laser or Color Inkjet
All lower specs personal printers
BOM Office of Information Systems and Technology - United Nations Development Programme
304 E. 45th Street, New York, NY 10017 - 2014
6
Workgroup/Network Printers
Multi Function Printers
printer, with 300 DPI and 20 PPM, duplex
printing, USB interface
Black and White or Color Laser printers,
with 300 DPI and 40 PPM, duplex printing,
integrated print server with support for
direct IP printing
Same as Workgroup/Network Printers, with
addition of 300 DPI scanner/copier (scan to
email and scan to file) supporting PDF
output, and integrated Group 3 FAX
printer, with 600 DPI and 20 PPM,
duplex printing, USB interface
Black and White or Color Laser
printers, with 600 DPI and 40 PPM,
duplex printing, integrated print
server with support for direct IP
printing
Same as Workgroup/Network
Printers, with addition of 600 DPI
scanner/copier (scan to email and
scan to file) supporting PDF output,
and integrated Group 3 FAX
All lower specs workgroup/network
printers
All lower specs multi functional
printers
1.4 Tablets, Mobile Devices and Smart Phones
Specification
Requirement
Standard
Screen
Applications
Data Connection
Synchronization
Wi-Fi Support
Quad-band GSM phone (850/900/1800/1900 MHz)
Full color
Short Message Service (SMS), Phone book, Calendar
GPRS, EDGE, 3G/4G, LTE; 802.11b/g WiFi
Microsoft ActiveSync for e-Mail, Contacts and Calendar
At least 802.11b/g, recommended 802.11a/b/g/n
1.5 Standard Specifications
Category
Operating System
Standard Software
Microsoft Windows
Minimum version
Windows 7 Enterprise
32-bit or 64-bit
Target version
Windows 7 Enterprise
32-bit or 64-bit
Obsolete or unsupported versions and date
Windows XP and Vista, all versions
Windows 8.1
Office Suite
Mac OS X
Microsoft Office
Professional, including Word,
Excel, PowerPoint, OneNote,
optionally Project and Visio
10.8 (Mountain Lion)
Microsoft Office 2010
Professional SP2 32-bit
for Windows
Most recent
Microsoft Office 2013
Professional 32-bit only
for Windows
Office Enterprise 2011
Office Enterprise 2011
BOM Office of Information Systems and Technology - United Nations Development Programme
304 E. 45th Street, New York, NY 10017 - 2014
All previous versions
Microsoft Office 2003
Microsoft Office 2007
Microsoft Office 2010 64-bit
Microsoft Office 2013 64-bit
7
E-mail Client
Web Browser
Anti-virus, anti-malware
Instant Messaging
Voice and Video Internet
calling
IP telephony
(Headquarters)
Country Offices should
consider Cisco IP
telephony for better
integration with HQ IP
telephony
Microsoft Outlook
Microsoft Internet Explorer
Apple Safari
Mozilla Firefox
Google Chrome
Symantec Endpoint
Protection
for Mac OS X
for Mac OS X
Outlook 2010 SP2 for
Windows
MS Outlook 2013 for
Windows
Outlook for Mac
Outlook for Mac
9
6
10 ESR
17x
12.1 RU3
9,10
Most recent
Most recent
Most recent
12.1 RU3
Skype
Microsoft Lync
Most recent
Lync 2010
Most recent
Most recent
Cisco Jabber
Requires MS Windows 7
Requires Mac 10.6 or
above
Cisco Jabber for
Windows 9.6
Cisco Jabber for Mac
9.2.2
Cisco Jabber for iPhone
and iPad 9.6.1
Cisco Jabber Voice for
Android 9.1(5)
Most recent
Note: Microsoft Project and Visio are not
available for Mac OS X. Users requiring these
applications should use Windows-based
computers
All Outlook versions earlier then specified
Outlook 2010 64-bit ; Outlook 2013 64-bit
Microsoft Outlook may function differently on
Mac OS X and therefore the user experience
may be different
11
All older versions
Mac OS must be protected by standard antivirus and anti-malware software
All older versions
Only MS Windows 7 OS is supported
2. ICT Infrastructure
2.1 Server Hardware, Software and Cloud Services
BOM Office of Information Systems and Technology - United Nations Development Programme
304 E. 45th Street, New York, NY 10017 - 2014
8
a) Server Hardware
(Hardware specifications provided below are generic. ICT staff should upgrade depending on server purposes)
Component
Processor
Minimum configuration
Multi-Core x86 CPU, 2.0 GHz or
faster; support for AMD AMD-V or
Intel VT-x virtualization technology
Memory
Internal Storage
Graphic Card
2 Gb RAM with ECC support
300 Gb hard disk drive minimum
SVGA video card that supports
console redirection
SVGA LCD display supporting
800x600 or higher resolution
DVD-ROM drive
Redundant Power Supply
Dual Gigabit Ethernet NIC
Display
Removable Media
Power Supply
Network Interface
Internal Storage Interface, applicable
to servers and external enclosures
External Storage Interface
Backup Hardware
Hot-plug SATA-2, SCSI-3, SAS or FC;
Internal and External Storage
Compliant with internal and external
storage interfaces above, with
support of RAID 0, 1, and 5 (with one
hot-spare per 10 disks)
SCSI-2, 1Gbps FC
SDLT2 or LTO-3 Tape Drive supported
by standard backup software
Target configuration
Multi-Core x86 CPU, 2.8 GHz or
faster; support for multiple CPUs;
support for AMD AMD-V or Intel VT-x
virtualization technology
4 Gb RAM with ECC support
500 Gb hard disk drive minimum
SVGA video card that supports
console redirection
SVGA LCD display supporting
800x600 or higher resolution
DVD-ROM drive
Redundant Power Supply
Dual Gigabit Ethernet NIC with Jumbo
Frame support
Hot-plug SATA-2, SCSI-3, SAS or FC
Obsolete configuration
All not meeting minimum
configuration requirements
SCSI-3, 2/4/8Gbps FC
SDLT3 or LTO-4 Tape Library
supported by standard backup
software
Compliant with internal and external
storage interfaces above, with
support of RAID 0, 1, and 5 (with one
hot-spare per 10 disks)
b) Server Software and/or Cloud Services
Component
Operating System
Directory Service
Minimum configuration
Windows Server 2008 R2
Microsoft Active Directory based on 2008
R2 Server
SunOne Directory Server 6.3
Target configuration
Windows Server 2012 R2
Microsoft Active Directory based
on 2012 R2 Server
BOM Office of Information Systems and Technology - United Nations Development Programme
304 E. 45th Street, New York, NY 10017 - 2014
Obsolete configuration
All previous versions
All previous versions
9
Messaging and Unified
Communications
Storage Services
Intranet/Content Management
Internet/External Websites
Extranet/Knowledge Sharing
Proxy Server
Backup Software
Microsoft SharePoint Server 2010 Intranet
Startup Kit
Local websites should follow UNDP
WebApp Security Guidelines at:
https://intranet.undp.org/unit/bom/oist/I
CT Security
New/WebApp.Security.Guidelines_v1.0.do
cx
Microsoft TMG 2010 with SP2
Latest supported Symantec Backup Exec or
NetBackup
Cloud Computing with Microsoft
Office 365
Cloud Computing with Microsoft
Office 365 - OneDrive for Business
Microsoft SharePoint Server 2010
Intranet Startup Kit
Centrally Managed CQ5 Content
Management System
All local versions by the end of
2012
All previous services
Teamworks
Microsoft TMG 2010 with SP2
Latest supported Symantec Backup
Exec or NetBackup
All local knowledge-sharing tools
All previous versions
All previous versions
All local versions of Sharepoint
All local external-facing websites
by end 2014
2.2 Network Protocols
Protocol
Communication Protocol
Internal IP addresses
Remote Terminal (access over secure
channel or gateway only)
File Transfer Protocols
Mailbox Access
Mail Transfer Protocol
Directory Access
Minimum configuration
Target configuration
IPv4
IPv4
An /22 IP network block of RFC1819 addresses is allocated centrally by OIST.
Please contact [email protected] for assignment information.
Microsoft RDP (tcp/3389)
Microsoft RDP (tcp/3389)
Secure Shell (tcp/22)
Secure Shell (tcp/22)
Protocols encapsulated into HTTPS
Protocols encapsulated into HTTPS
(tcp/443), SFTP(tcp/22), FTP with TLS (tcp/443), SFTP(tcp/22), FTP with TLS
(tcp/21), FTP-SSL (tcp/990)
(tcp/21), FTP-SSL (tcp/990)
RPC over HTTPS
RPC over HTTPS
IMAP with SSL or TLS
IMAP with SSL or TLS
ActiveSync
ActiveSync
ESMTP for Internet delivery
ESMTP for Internet delivery
ESMTP with TLS and authentication
ESMTP with TLS and authentication
for user submission
for user submission
Active Directory
Active Directory
LDAPv3 with SSL
LDAPv3 with SSL
BOM Office of Information Systems and Technology - United Nations Development Programme
304 E. 45th Street, New York, NY 10017 - 2014
Not supported
IPX, NetBEUI, AppleTalk
telnet, rsh, rlogin and other protocols
transmitting credentials in clear text
HTTP, FTP without SSL or TLS
RPC over HTTP
IMAP or POP3 without SSL or TLS
POP3 with SSL or TLS
All other mail transfer protocols
All other directory access protocols
10
2.3 Local Area Network
Component
Network cabling
Network switches
Wireless Access Points (LAN access)
Firewall
Minimum configuration
Structured Cabling System (SCS) using
Category 5e UTP cables
Managed Fast/Gigabit Ethernet L2/L3
switches with 802.1af PoE, and QoS
marking and prioritization
Wireless Access Points supporting
802.11b/g standards with 2.4 GHz
radio, WPA2-Enterprise certified
Mission Control Security Gateway
from Open Systems AG (MSS-II
provider)
Target configuration
Structured Cabling System using
Category 6a UTP cables
Managed Fast/Gigabit Ethernet L2/L3
switches with 802.1af PoE, and QoS
marking and prioritization
CAPWAP/LWAPP based Wireless
Access Points supporting
802.11a/b/g/n with 2.4 and 5 GHz
radio, WPA2-Enterprise certified
Mission Control Security Gateway
from Open Systems AG (MSS-II
provider)
Obsolete configuration
Not SCS, Category 5 or lower for data
Any network switches and hubs not
supporting PoE and QoS
All other Wireless Access Points
Cisco PIX 515
Cisco ASA 5510
2.4 Data Center/Server Room Standards
Component
Standards
Server room physical
security

Power













Server room should be located in a flood-proof environment above ground and towards the back of the office building away from any roads
Server room must have separate set of keys from the rest of the doors/offices. Combination lock or card-key based locking mechanism preferred
to simplify access control
Access should be limited to staff that require physical access to servers and other equipment
Vendors must be accompanied when working in Server room
Access list must be reviewed at least on a bi-annual basis
No flammable materials should be stored inside the Server room
Backup tapes should be stored at an off-site location and properly catalogued
Allow 5-7 kilowatts of power for each rack, 24-30 kilowatts if using blade servers
Power must be conditioned
Equipment should be on dedicated circuits
On-line UPS is recommended with backup power of at least 15 minutes
If power is expected to be interrupted for more than 15 minutes, equipment must be shut down
If there is regular power interruption, stand-by generators must be provided. If so, ensure that there is fuel delivery for the generators for
extended power interruptions
Ensure that equipment are properly protected from lightning strikes. Ensure that grounding is adequately implemented so that protection is
effective for the antennas, lightning protection systems and for the electrical power distribution
BOM Office of Information Systems and Technology - United Nations Development Programme
304 E. 45th Street, New York, NY 10017 - 2014
11
Climate control


Environment
monitoring
Fire suppression
Administration/Organi
zation/Management




















Backup




Change Management



Server room must maintain ambient temperature of 68° to 75°F (20° to 24°C). Temperature should not exceed 85 degrees. Calculate the heat
generated by your equipment, the size of the room, and your cooling load to be able to maintain ideal temperature. Approximately, every 3,000
Watts (approximately 25 amps at 120 volts) requires 10,200 BTU of cooling
If you have a large data center with several aisles of racks, ensure that this temperature is maintained across all aisles. ‘Hot aisle – Cold aisle’
configuration must be implemented
Relative humidity should be maintained at 45%-55%
Ensure dust-free environment in Server rooms
Smoke, fire and water-condition alarms with paging capabilities should be installed in Server room
Fire suppression system must be in place with preference given to electrically safe systems such as FM-200.
If water sprinklers are used, automatic emergency power shut-off must be in place.
In case there is no automatic fire suppression system, Class I fire extinguishers must be put inside and by the entrance outside of the room with
count 1 gallon (4 liters) per cabinet
Use rack-mountable devices using standard 19-inch racks
Use cable management systems usually found in newer racks
Label all servers, power, data/LAN/WAN connections, port, etc. including entry points of WAN services into the building
Maintain up-to-date inventory of devices, service providers in Server room
Maintain up-to-date inventory of system software, application software
Ensure all data in storage devices are wiped clean according to asset disposal standards when disposing of equipment
Make use of either raised tile floor or overhead railings for cabling
Server room should not be used for storage of any kind
Maintain contact information of critical service providers for Server room, including electric company, server, tape library, UPS and other
equipment maintenance providers, air conditioning services, fire suppression services, off-site tape storage services provider
Have Business Continuity Plan (BCP) and Disaster Recovery (DR) readily available to everyone
Ensure DR plan is in place, tested annually and in accordance to the standards prescribed in POPP.
Maintain system administrators and application focal points contact numbers in case of problems
Maintain library of documentation of all devices, including power down and power up sequences, system configuration and design
Maintain envelope with all critical systems passwords is a safe accessible only to staff entrusted with password management responsibilities.
Ensure that these are changed on a quarterly basis. Ensure that this is documented in BCP
Perform backup regularly – Weekly full, daily incremental
Ensure tapes are catalogued accordingly
Ensure retention policies are met
Ensure backup tapes are stored off-site keeping recent ones in Server room for easy restores
Ensure local ICT Governance structure is in place
Ensure all changes to system configurations undergo proper change management controls
Document all changes
BOM Office of Information Systems and Technology - United Nations Development Programme
304 E. 45th Street, New York, NY 10017 - 2014
12
3. Telecommunications Specifications
3.1 Wide Area Network - Recommended Link Quality Performance for Voice-Over Internet Protocol (VOIP) and IP Video
Minimum VSAT
1%
60ms
4
Packet Loss
Jitter
MOS value min
Minimum Terrestrial
1%
60ms
4
3.2 Recommended Wireless Broadband/WiMAX Solution for Wide Area Network
Specification
Minimum Recommendation
System Capability
RF Band
Channel Size
Network Attributes
Modulation/Coding Rates
Non Line Of Sight (NLOS)
3.3-3.5*; 3.4-3.6; and 3.6-3.8 GHz, or 5GHz
3.5 MHz, 7 MHz
Transparent bridge, 802.1Q, TOS/DSCP and L2/L3 address, traffic classification, DHCP client, client pass-through
Auto-select modulation, BPSK, QPSK, 16 QAM, 64 QAM
Auto-select coding 1/2, 2/3, 3/4
DES, 3DES
256 FFT Orthogonal Frequency Division Multiplexing (OFDM) (Orthogonal Frequency Division Multiplexing)
Standard: 10/100 Ethernet (RJ-45)
SNMP, standard and proprietary SNMP MIBs
Auto-sensing 110/220/240 VAC 50/60 Hz
Auto-sensing 18-72 VDC, 80 W
Over the Air Encryption
Wireless Transmission (PHY)
Network Connections
Network Management
Power Requirements
3.3 Internet Bandwidth Connectivity – Target Recommendation
Primary link
Office Staff Head
Count
Bandwidth (min)
Optimal/Target
Bandwidth
VSAT
50
50-100
Up link
Down
384 Kbps
768 Kbps
1.5 Mbps
3 Mbps
Up
512
Kbps
3.5
Mbps
more than 100
Down
1024
Kbps
7 Mbps
Up
1024
Kbps
7.5
Mbps
Down
2048
Kbps
15
Mbps
BOM Office of Information Systems and Technology - United Nations Development Programme
304 E. 45th Street, New York, NY 10017 - 2014
ISP Local ISP with Fiber Connection)
50
50-100
Up
768
Mbps
1.5
Mbps
Down
1.5
Mbps
3 Mbps
Up
1.5
Mbps
3.5
Mbps
More than 100
Down
Up
Down
3 Mbps
3 Mbps
6 Mbps
7
Mbps
7.5
Mbps
15 Mbps
13
Round Trip time
(min)
Hop Count (max)
IP Address (min)
Back up
700ms
300ms
15
20
6 Internet routable addresses
6 Internet routable addresses
512 kbps minimum. It is required to use dynamic switch over and load balancing between primary and backup links.
3.4 Private Branch Exchange (PBX)
Specification
Power backup
Call accounting
Features
Interfaces
Support
Handsets (Optional ‘Hard Phones’)
Softphones
Power backup
Minimum Configuration
4 hour battery backup minimum
PBX supported by Call Accounting software for itemized billing
Voice mail
Auto attendant
Analog: FXO, FXS, 2 wire E&M, 4 wire E&M
Digital: QSIG PRI based on ISDN Q.931 standard, T1, E1
IP: SIP, H323
Country Offices should consider Cisco IP telephony for better integration with HQ IP telephony
Local service and support must be available
USB or wireless microphone/earphone headsets
4 hour battery backup minimum
3.5 Videoconferencing
Specification
Audio Standards
Video Standards
Protocols
Screen
Camera
Minimum Requirement
G.711, G.722, G.722.1, G.728, CD Quality Audio
High Definition Video (HDV): H.263+, H.263++, H.264
Full HD 1920x1080p, 30 fps (preferred), True HD 1280x720, 30 fps (minimum)
ISDN: H.323 (optional, recommended if ISDN service is available)
IP: H.320
LCD with native resolution of 720p (minimum) or 1080p (recommended) - dual screen recommended
HD camera with 250° total horizontal field of view - Eagle Eye Director recommended
1280 x 720 pixels progressive @ 30 fps
Far-end camera control
15 near and far-end camera presets
BOM Office of Information Systems and Technology - United Nations Development Programme
304 E. 45th Street, New York, NY 10017 - 2014
14
Network Connection
Bandwidth
Bridging Compatibility
Fast or Gigabit Ethernet, routable IP address must be assigned
HD video call: 768 Kbps
IP video call: 256 Kbps
ISDN video call: 128 Kbps
For full compatibility and integration with existing UNDP videoconferencing environment, integration with the
Unified Communications room-based video conferencing and to take advantage of the OIST/BoM video
bridging services, the following manufacturer and HD model video conference equipment is recommended:
Polycom GS500 - Polycom GS700 - These Polycom units are HD and provide a superb videoconferencing
experience. They either support 720p30fps codec or 1080p30fps codec. In deciding whether to go with 720p
with 30fps or 1080p with 30fps, the rule of thumb is that if your screen size is smaller than 55” and you have
dedicated video bandwidth of 512kbps or less for your Country Office, then select 720p. However, If your
screen size is larger than 55” and you have dedicated video bandwidth of 1 MB or higher for your Country
Office, then select 1080p.
BOM Office of Information Systems and Technology - United Nations Development Programme
304 E. 45th Street, New York, NY 10017 - 2014
15