This document presents a comprehensive risk-adjusted Bill of Materials for the Malaysian Ministry of Defence ICT maintenance and infrastructure upgrade project at PUSPADU and MINDEF 2 data centres.
Executive Summary
This comprehensive risk-adjusted Bill of Materials (BOM) has been prepared for the Malaysian Ministry of Defence tender for ICT maintenance and infrastructure upgrade at PUSPADU (Wisma Pertahanan) and MINDEF 2 (Bangunan Zetro) data centers, both Titanium Plus Tier certified with ISMS ISO/IEC 27001:2022.
Following critical risk assessment conducted by our procurement specialists, the revised budget requirement is RM 46.6 million minimum (increased from initial RM 28.5 million) to adequately address identified operational, technical, and financial risks over the 38-month project duration. This substantial revision ensures project deliverability whilst maintaining service continuity for Malaysia's critical defence infrastructure.
The risk analysis encompasses end-of-life equipment considerations, currency fluctuation impacts, vendor transition requirements, and dual-location operational complexities across both PUSPADU and MINDEF 2 facilities.
Critical Risk Adjustments Applied
Budget Gap Analysis Summary
Initial BOM Total
Original procurement estimate
Risk-Adjusted Requirement
Revised budget requirement
Critical Gap Identified
Additional funding required
Budget Shortfall
Percentage increase needed
The substantial budget adjustment reflects comprehensive risk mitigation measures essential for project success. Key drivers include end-of-life equipment replacements, extended project duration impacts on software licensing, mandatory knowledge transfer provisions, and currency risk protection for foreign-denominated procurement items.
Key Malaysian Suppliers Identified
VSTECS Berhad
Formerly ECS ICT, primary Lenovo systems distributor with comprehensive enterprise inventory and 6-week standard lead times.
Mesiniaga Berhad
IBM Premier Partner specialising in storage systems and enterprise solutions with dedicated data centre support capabilities.
Spectrum Edge
Malaysia's largest Fortinet distributor with extensive security appliance inventory and certified technical support teams.
Ingram Micro Malaysia
Multi-vendor distributor providing comprehensive ICT solutions with established government procurement processes.
These suppliers maintain comprehensive inventories with standard lead times of 6-12 weeks for enterprise equipment. All possess established relationships with Malaysian government entities and maintain appropriate security clearances for defence-related procurements. Their combined capabilities ensure reliable supply chain management throughout the 38-month project duration.
Risk-Adjusted Hierarchical Bill of Materials
The following sections present the complete hierarchical Bill of Materials structured across major component categories. Each category includes detailed risk adjustments, supplier information, and delivery timelines essential for project planning and budget allocation.
ICT Hardware Maintenance
Server systems, storage infrastructure, and network security appliances
Infrastructure Systems
Power, cooling, fire suppression, and environmental monitoring
Software Licensing
VMware, backup solutions, and management platforms
Professional Services
Training, certification, project management, and knowledge transfer
The BOM structure follows industry-standard hierarchical categorisation enabling precise tracking and management of procurement activities across both PUSPADU and MINDEF 2 locations.
ICT Hardware Maintenance - Server Systems
Management, Backup & Virtual Infrastructure
Category Total: RM 5,934,000 (Risk-Adjusted from RM 5,160,000)
The server infrastructure forms the backbone of both PUSPADU and MINDEF 2 operations. Risk adjustments include 10% spare parts allocation for SR650 units and critical spare parts inventory valued at RM 250,000 to ensure minimal downtime during the 38-month maintenance period.
IBM Storage Systems Infrastructure
FlashSystem & Tape Library Solutions
Category Total: RM 7,672,000 (Risk-Adjusted from RM 6,850,000)
IBM FlashSystem Series
Comprehensive flash storage solution including FlashSystem 5030, 5000, 7200, and 7000 models providing tiered storage capabilities. Risk adjustment of 12% applied for currency hedging on USD-denominated procurement.
IBM TS4300 Tape Library
Enterprise-class tape library with LTO-9 support and expansion modules. Essential for long-term data retention compliance with defence regulations. 10-week lead time from Ikon Perkasa.
Storage infrastructure represents the largest single investment category, requiring careful coordination between Mesiniaga Berhad (IBM Premier Partner) and CBS Sdn Bhd for comprehensive deployment across both facilities. The 12% currency risk adjustment protects against USD/MYR fluctuation over the procurement period.
Network Hardware - Security Appliances
Firewall, WAF & Email Security Infrastructure
Category Total: RM 4,617,000 (Risk-Adjusted from RM 3,420,000)
Critical End-of-Life Replacements
The most significant risk adjustment in this category addresses end-of-life equipment requiring immediate replacement. FortiWeb 3000E units reach end-of-support in 2025, necessitating migration to 3000F models with zero-downtime transition services.
Spectrum Edge, Malaysia's largest Fortinet distributor, provides comprehensive migration services including professional consultation, configuration transfer, and parallel operation support. The 100% price adjustment for FortiWeb replacement reflects both hardware costs and mandatory migration services.
Additional risk provisions include 50% adjustment for FortiMail 2000E units approaching end-of-life in 2027, ensuring proactive replacement planning rather than emergency procurement scenarios.
Network security infrastructure requires careful coordination between multiple suppliers including J&M Eastern Group for FortiMail systems, AceTeam Networks for Palo Alto platforms, and Westcon-Comstor for EfficientIP DNS solutions. This distributed approach ensures supply chain resilience whilst maintaining competitive pricing across vendor platforms.
EOL Risk Buffer
Additional provision for equipment lifecycle
FortiWeb Migration
Complete replacement allocation
Weeks Lead Time
Standard delivery for Fortinet equipment
PUSPADU Infrastructure - Power Systems
Electrical Distribution Infrastructure
Category Total: RM 3,078,000 (Risk-Adjusted from RM 2,850,000)
11KV VCB Switchgear
Medium voltage switchgear with vacuum circuit breaker panel from ABB Malaysia. 12-week lead time requires early procurement initiation.
1250KVA Transformer
Oil-immersed low-loss transformer with 16-week lead time from Schneider Electric Malaysia. Critical path item requiring immediate ordering.
LV EMSB Distribution
Essential Main Switch Board for low voltage distribution using Schneider Blokset technology with 8-week delivery schedule.
Standby Generator
1250KVA Cummins diesel generator from WCS Resources with 12-week lead time. Represents largest single power infrastructure investment.
Power infrastructure represents the foundation of data centre operations at PUSPADU. The 8% inflation adjustment accounts for commodity price increases in copper, steel, and electrical components over the procurement period. Coordination between ABB Malaysia, Schneider Electric Malaysia, and WCS Resources ensures integrated power distribution architecture.
"Power infrastructure reliability directly impacts service availability. The redundant design ensures 99.99% uptime even during component maintenance activities."
PUSPADU Cooling Systems
Precision Climate Control Infrastructure
Category Total: RM 1,468,800 (Risk-Adjusted from RM 1,360,000)
Precision Air-Conditioning
Six Schneider InRow RC precision air-conditioning units provide targeted cooling for server racks. CITEC International supplies these units with 10-week lead times, requiring careful scheduling coordination with server deployment.
The in-row cooling approach offers superior efficiency compared to traditional perimeter cooling, reducing energy consumption by approximately 25% whilst maintaining precise temperature and humidity control essential for server reliability.
VRF System Components
Variable Refrigerant Flow system from Coolnet Malaysia provides office space conditioning with multiple indoor units:
- Four 2.5HP ceiling cassette units
- Four 2.0HP ceiling cassette units
- Six 1.0HP wall-mounted units
All VRF components maintain in-stock availability ensuring rapid deployment once installation permits are secured.
Week 1-2
Equipment procurement and delivery coordination
Week 3-6
Precision AC installation and commissioning
Week 7-10
VRF system deployment and testing
Week 11-12
Integrated system commissioning and handover
Fire Suppression & Environmental Monitoring
Safety Systems & Monitoring Infrastructure
Fire Suppression Systems
Total Investment: RM 715,000 (Risk-Adjusted from RM 650,000)
Dual-agent fire suppression approach combines FM200 clean agent system from PALCON Engineering with IG-541 inert gas system from AITO Firework. This redundant design ensures comprehensive fire protection whilst maintaining equipment safety.
High Sensitivity Smoke Detection using VESDA-E aspirating systems from Hegel Engineering provides early warning capabilities essential for data centre environments. Water detection systems from Grid Connect monitor potential leak sources including cooling systems and building infrastructure.
Environmental Monitoring
Total Investment: RM 606,250 (Risk-Adjusted from RM 485,000)
Comprehensive AKCP SensorProbeX+ deployment monitors temperature, humidity, and security across 40 rack locations. RFID swing handles provide electronic rack security with audit trail capabilities.
Pegasus DCIM system integration provides centralised monitoring with automated alerting. ZKTeco biometric access control ensures personnel security whilst Hikvision CCTV provides visual monitoring and incident recording.
FM200 Clean Agent
Hygood HFC-227ea system provides rapid fire suppression without equipment damage
Environmental Sensors
40 temperature sensors plus 25 humidity sensors ensure comprehensive monitoring
Security Integration
Biometric access control with CCTV monitoring and RFID rack security
Physical Infrastructure & Display Systems
Racks, Containment & Visual Display Infrastructure
Server Racks
20 standard 42U server cabinets plus 6 network equipment cabinets from Schneider Electric
Cold Aisle Containment
Four complete aisle containment systems from Vertiv Malaysia ensuring cooling efficiency
Display Infrastructure
Multiple Samsung commercial displays with Crestron control systems for operational visibility
Physical Infrastructure Total: RM 918,000 (Risk-Adjusted from RM 850,000)
Display Systems Total: RM 243,000 (Risk-Adjusted from RM 225,000)
Physical infrastructure provides the foundation for equipment deployment with cold aisle containment ensuring optimal cooling efficiency. Schneider NetShelter SX cabinets offer tool-free assembly and comprehensive cable management capabilities essential for maintaining organised installations.
MINDEF 2 (Zetro) Infrastructure
Secondary Site Infrastructure Requirements
Category Total: RM 561,600 (Risk-Adjusted from RM 520,000)
30KVA UPS Systems
Dual Schneider Galaxy VS units providing redundant power protection. Power Solutions supplies these units with 8-week lead times.
Precision Cooling
Two Vertiv Liebert CRV in-row cooling units ensuring optimal temperature control for the secondary facility.
Fire Suppression
FM200 clean agent system from VIC Engineering providing comprehensive fire protection for the Zetro location.
Environmental Monitoring
AKCP SPX+ system ensuring consistent monitoring capabilities across both primary and secondary sites.
The MINDEF 2 facility represents the secondary operational site requiring scaled infrastructure appropriate for backup and disaster recovery operations. The 8% risk adjustment accounts for inflation in mechanical and electrical components over the procurement period.
Infrastructure coordination between both sites ensures consistent operational capabilities whilst maintaining cost efficiency through standardised equipment selection. Dual UPS configuration provides N+1 redundancy essential for continuous operations during maintenance activities.
Software Licensing Requirements
VMware, Veeam & Identity Management Solutions
Category Total: RM 2,949,750 (Risk-Adjusted from RM 2,185,000)
VMware Infrastructure
Comprehensive VMware deployment across both PUBLIC and ATM environments requires significant licensing investment. vSphere 8 Enterprise Plus licensing covers 48 processor cores across both environments with vCenter management platforms.
The 35% risk adjustment reflects software vendor escalation patterns over the 38-month project duration. Historical data indicates average annual increases of 8-12% for enterprise software licensing, compounded over the extended project timeline.
Backup & Identity Solutions
Veeam Data Platform provides comprehensive backup capabilities for both environments with separate licensing for PUBLIC and ATM domains. ManageEngine Identity Management suite supports 7,500 users with ADManager, ADAudit, and ADSelfService components.
Datumstruct DCIM platform provides data centre infrastructure management capabilities essential for operational efficiency and compliance reporting across both PUSPADU and MINDEF 2 facilities.
Annual escalation reserve of RM 567,500 provides protection against vendor price increases during years 2 and 3 of the project. This proactive approach prevents budget overruns whilst ensuring continuous software support and updates essential for security compliance.
Memory & Storage Upgrades
Capacity Expansion Requirements
Memory Expansion
Investment: RM 517,500
100 units of 64GB DDR4-3200 RDIMM modules from Samsung/SK Hynix through VSTECS Berhad with 4-week lead times.
Storage Expansion
Investment: RM 782,000
50 units of 7.68TB NVMe enterprise SSDs from Samsung/Intel through Ingram Micro Malaysia with 6-week delivery.
Memory and storage upgrades provide essential capacity expansion for both server and storage infrastructure. The 15% risk buffer accounts for potential price volatility in semiconductor components and ensures adequate allocation for both planned and emergency upgrade requirements.
DDR4 memory procurement focuses on enterprise-grade RDIMM modules ensuring compatibility with Lenovo ThinkSystem servers. NVMe SSD selection prioritises enterprise endurance ratings suitable for data centre workloads with appropriate write endurance specifications.
Memory Modules
64GB DDR4-3200 RDIMM units
NVMe Drives
7.68TB enterprise SSDs
Risk Buffer
Semiconductor price volatility protection
Certification & Training Programs
Professional Development & Skills Enhancement
Category Total: RM 582,000 (Risk-Adjusted from RM 485,000)
VMware Certifications
25 VCP-VCF professional certifications through Iverson Malaysia with milestone-based payment structure over 20% extended duration.
Data Center Training
15 CDCP certifications through GKM Training ensuring operational excellence across both facilities with hands-on practical components.
Technical Workshops
8 specialised technical sessions through New Horizons covering equipment-specific operation and maintenance procedures.
Technology Transfer
Comprehensive knowledge transfer programs ensuring seamless transition from incumbent vendor to new operational team.
Training investment ensures personnel capability development essential for managing complex multi-vendor environments. The milestone-based payment structure protects MINDEF interests whilst ensuring training provider commitment to programme completion.
Knowledge Transfer & Security Certification
Critical Handover Services & Compliance Requirements
Knowledge Transfer Services
New Category Investment: RM 820,000
Critical knowledge transfer requirements not addressed in original BOM include 4-week parallel operations period with incumbent vendor, complete technical documentation repository, and subject matter expert retention programme.
Big 4 consultant engagement ensures professional oversight during transition period whilst PwC Malaysia provides comprehensive documentation services. Monthly SME consultation maintains continuity for complex technical issues during the initial operational period.
Security Certifications
Investment: RM 787,750 (Risk-Adjusted)
ISO 27001:2022 ISMS certification through SIRIM QAS ensures compliance with international information security standards. Green Data Center certification from Bureau Veritas maintains environmental compliance for both facilities.
Quarterly penetration testing through FIRMUS/LGMS ensures ongoing security validation whilst NACSA registration provides mandatory security clearance for vendor personnel.
Month 1
Knowledge transfer initiation and NACSA registration
Month 2-3
ISO 27001 Stage 1 & 2 audits with parallel operations
Month 4
Final ISO certification and documentation handover
Ongoing
Quarterly security testing and SME support
The comprehensive approach ensures seamless transition whilst maintaining security and operational compliance throughout the handover period. Professional oversight minimises operational risk during the critical transition phase.
Data Center Cleaning & Project Management
Maintenance Services & Professional Support
Professional DC Cleaning
Investment: RM 313,500 over 38 months
Bi-monthly professional cleaning through Data Clean Asia with quarterly deep cleaning sessions. Includes certified data sanitisation services for secure disposal requirements.
Project Management Services
Investment: RM 1,606,250 over project duration
Comprehensive help desk operation through TechFix Malaysia with dedicated PM team from EY Malaysia. Includes technical documentation and quarterly review meetings.
Professional cleaning services maintain data centre environmental standards essential for equipment reliability and compliance requirements. The 10% risk adjustment accounts for increased cleaning requirements due to construction activities during infrastructure deployment.
Project management investment represents 25% increase over original allocation reflecting the extended 38-month duration and complexity of dual-location operations. Milestone-based payments protect MINDEF interests whilst ensuring service provider commitment throughout the project lifecycle.
Risk Mitigation Fund Allocations
Currency Risk Management & Contingency Planning
Currency Risk Buffer
FX hedging for USD-denominated equipment
Foreign Exposure
Total USD-denominated procurement value
Hedging Reserve
Currency fluctuation protection allocation
Contingency Rate
Recommended vs standard 10% provision
Currency risk management addresses significant USD exposure across IBM storage systems, software licensing, and international support services. The 12% buffer reflects historical USD/MYR volatility patterns and provides protection against adverse currency movements during the procurement period.
Foreign Exchange Exposure Analysis
Contingency reserves follow industry best practices for complex ICT projects with multiple risk factors. The recommended 20% contingency rate addresses project complexity, dual-location requirements, and extended duration challenges not adequately covered by standard 10% provisions.
Two-Location Operational Framework
Resource Allocation Between PUSPADU & MINDEF 2
PUSPADU Data Center Allocation
Primary ICT Hardware
70% allocation representing main production environment with comprehensive server and storage infrastructure
Power Infrastructure
RM 2,155,000 investment in full 11KV/1250KVA electrical distribution system
Cooling Systems
RM 1,029,000 for 6 PAC units plus VRF environmental control
Safety & Security
RM 925,000 for fire suppression, monitoring, and access control
MINDEF 2 Server Room Allocation
The secondary facility at Bangunan Zetro provides essential backup and disaster recovery capabilities with scaled infrastructure appropriate for support operations. Resource allocation prioritises reliability over capacity, ensuring continuous operations capability during primary site maintenance or emergency scenarios.
ICT Hardware
30% allocation focused on backup and DR systems
Power Systems
RM 496,800 for dual 30KVA UPS redundancy
Climate Control
RM 410,400 for precision cooling infrastructure
Safety Systems
RM 216,000 for fire suppression and monitoring
Phased Financial Implementation
Three-Phase Budget Deployment Strategy
Phase 1: Foundation (Months 1-12)
Hardware procurement, infrastructure setup, initial licensing, and knowledge transfer initiation. Total: RM 17,041,875
Phase 2: Deployment (Months 13-24)
Remaining hardware installation, software renewals, training delivery, and operations setup. Total: RM 9,277,000
Phase 3: Operations (Months 25-38)
Maintenance support, license renewals, EOL replacements, and final certifications. Total: RM 9,382,460
Phase 1 Budget Breakdown
Phased implementation enables controlled cash flow management whilst ensuring critical infrastructure deployment follows logical progression. Phase 1 emphasis on hardware and infrastructure establishes operational foundation essential for subsequent software deployment and training activities.
Critical Success Factors & Risk Monitoring
Implementation Requirements & Performance Framework
Immediate Actions Required (Month 1)
- Secure Currency Hedging: Lock in USD/MYR forward contracts for 80% of foreign exposure to protect against adverse currency movements
- Negotiate EOL Extensions: Obtain Fortinet extended support commitment through 2028 ensuring operational continuity during replacement planning
- Establish Knowledge Transfer: Finalise overlap agreement with incumbent vendor for minimum 4-week parallel operation period
- Confirm Security Clearances: Initiate NACSA registration process for all security-sensitive personnel requiring facility access
Contractual Protections Required
- Price Escalation Clauses: Cap annual increases at 5% for software licensing and 3% for hardware components
- Force Majeure Provisions: Include pandemic scenarios, supply chain disruptions, and currency crisis events
- Performance Guarantees: Link 30% of total payment to SLA achievement and milestone completion
- Technology Refresh Rights: Secure option to upgrade EOL equipment at predetermined pricing structures
Risk Monitoring Framework
Comprehensive risk monitoring ensures proactive management of identified threats throughout the project lifecycle. Early warning systems enable corrective action before issues impact operational continuity or budget performance.
Financial Summary & Conclusion
Risk-Adjusted Budget Requirements
Total Budget Required
Risk-adjusted comprehensive allocation
Budget Increase
From original RM 28.5M estimate
Project Duration
Months of comprehensive support
Data Centers
PUSPADU and MINDEF 2 locations
Budget Component Analysis
This risk-adjusted BOM addresses all critical gaps identified in the comprehensive risk assessment, transforming the tender from a high-risk undertaking to a manageable, properly resourced project aligned with MINDEF's operational requirements and industry best practices.
The revised budget structure provides comprehensive risk coverage whilst maintaining deliverability within Malaysian market constraints. Key risk mitigation areas include Fortinet end-of-life equipment replacement (RM 2.5M allocation), software license escalation protection over 38 months (35% cumulative increase), mandatory knowledge transfer from incumbent vendor (RM 820K new category), currency fluctuation protection (12% buffer on foreign exposure), and dual-location operational requirements across PUSPADU and MINDEF 2 facilities.
The two-location operational framework ensures appropriate resource allocation between the primary data centre and backup facility, whilst phased implementation enables controlled cash flow management with critical risk mitigation measures funded upfront. This comprehensive approach delivers a robust foundation for Malaysia's defence ICT infrastructure supporting continuous operations and strategic objectives.
Comprehensive Risk-Adjusted Bill of Materials for MINDEF Tender QT250000000021479