Vendor needs to provide cloud–based backup, recovery and disaster recovery supply and implement enterprise solution. Solution must support role–based access control and separation of duty requirements in the system; either via workflow and technical controls. Solution must describe their organization’s monitoring, detection, and alerting capabilities of their solution; including how they address emerging threats such as quantum–enabled attacks or advanced persistent threats (APTs). Provide visibility into any third–party dependencies and describe how those vendors are managing their own quantum transitions. Solution must provide evidence of any third–party security assessments, penetration testing, or certifications (e.g., FIPS 140–3, Common Criteria) that include post–quantum considerations. Share a knowledge–based support portal where Region staff can explore different threads for support and troubleshooting. Software functionality, configuration, scalability, Cyber Security, user interface, backup and restore processes, file level and image level restores, and Disaster Recovery planning, testing and validation processes.