 System management from primary site to the DR site and from the DR site to the primary site. (C) System operation and management items by person will be follows:  Change and modification management (requirements changes)  Release and deployment management (release and deployment plan)  System configuration management (equipment version and number)  Incident management (problems and issues) (D) System should be designed and configured as the local vendors could support its operation and management. (E) For ease of maintenance, the same kinds of equipment will be unified in the same vendor as much as possible. (9) Information Security (A) In principle, comply with the security policy of CBM. (B) Manage authority to access CBM-NET Phase 2 and implement two-factor authentication using USB tokens with digital certification. (C) Use VPN for communication circuit and line of WAN (D) Use firewalls to deny unauthorized protocols and communications for both of internal networks and external networks. (E) Use antivirus and anti-malware software and always update them to the latest. (F) Manage logs and keep system date and time accurate. 3.2.4.6 Procurement Plan 3.2.4.6.1 Procurement Batches and Method The basic policy for procurement in the project aims for competitive pricing, reliability of integrated systems, and minimizing the total cost of ownership. As such, the preparatory survey team has set the following approaches: The first approach is the competitive pricing approach that separates the procurement items into small components for tender bids. The second approach is bundling the procurement items to ensure the reliability of the integrated systems. The third approach is to procure, wherever possible, the systems including operation and maintenance service with 87