The selected vendor will provide ongoing Drupal support and maintenance services for eServices, including monitoring Drupal security advisories and responding to end-of-support notifications that may impact instances, whether for Drupal core or installed modules. Responses to security advisories must be communicated within one business day, with mitigation via production deployments within two business weeks.

Routine responsibilities include upgrading Drupal core and contributed modules, applying patches as recommended, and performing major version upgrades (currently, from version 8 upwards). While no further upgrades from Drupal 7 are anticipated, ongoing minor upgrades for remaining Drupal 7 instances are included in scope.

Vendors will be provided with remote access to eServices' amazee.io hosting plan via managed accounts and VPN access to hosting servers with OS accounts capable of root-level access. The initial contract period is one year.