0001 BIA DevSecOps Application Systems Product List.docx

Benefits Enterprise Services - DevSecOps

Attachment 0001 BIA DevSecOps Application Systems Product List The Benefits Integration and Administration (BIA) product line delivers platform, integration, and data products to business and IT partners that accelerate the delivery of benefits to Veterans, their families, and their caregivers. The long-term goal of the product line is to become a forward thinking, agile, and highly collaborate technical service provider business and IT Partners rely on to deliver their most critical capabilities in the benefits space.

· This data lives predominately in VBA Corporate Database (CRP).

· Used by 40+ systems for benefits related data and processing, including Veterans Benefits Management System (VBMS).

· Deployed primarily in the Austin Information Technology Center (AITC) with some APIs deployed in the VA Enterprise Cloud (VAEC) Amazon Web Services (AWS) GovCloud environment on Benefits Integration Platform (BIP).

· Employs WebLogic and Tuxedo in AITC but is transitioning to cloud native technologies as APIs are refactored and deployed onto BIP.

· Currently undergoing a lift-and-shift migration from AITC to the VAEC AWS GovCloud environment.

· Deployed in the VA Enterprise Cloud (VAEC) Amazon Web Services (AWS) GovCloud environment and employs modern tooling, including Kubernetes, Docker, Jenkins, GitHub, Nexus, Vault, Consul, SonarQube, Fortify, Prisma Cloud, Prometheus, Kibana, Dynatrace, AppDynamics, and Confluent/Kafka (for eventing).

· Includes a Java Spring Boot based Application Programming Interface (API) framework that provides patterns and templates for quickly building well-integrated, well-structured, and standardized APIs.

· Hosts 27 production tenants, including VBMS and Memorials Benefits Management Systems (MBMS).

· Certified as a VA Custom Development Software Factory in June 2023 and is implementing several Zero Trust Architecture (ZTA) enhancements, including upgraded scanning and improved access controls.

· Provides authentication services for rich client applications and authorization services to both rich and non-rich client applications.

· Supports security and Office of Inspection General (OIG) reviews and audits.

· Consists of three components – Common Security User Manager (CSUM), Common Security Employee Manager (CSEM), and Common Security Application Manager (CSAM).

· Undergoing a modernization initiative that entails significant refactoring and re-platforming to the Benefits Integration Platform (BIP) hosted in the VA Enterprise Cloud (VAEC).

· Key technology includes .NET, Pro*C, and Java, and Tuxedo.

· Consists of 1,100+ data tables and 600+ reference tables used to process benefit claims, ratings, awards, and payments and support financial accounting.

· Deployed in the AITC environment with a disaster recovery environment located in the Hines Information Technology Center (HITC).

· Utilizes Common Security Services (CSS) to authenticate users and control access to Personal Identifying Information (PII) stored within the database.

· Supports real-time interactions from various user interfaces used by VBA employees and external users and facilitates Veteran access to their benefits information.

· Uses Oracle Database as the relational database and will undergo significant modernizations over the next five years, including software and hardware upgrades and a migration the VA Enterprise Cloud (VAEC) AWS GovCloud environment.

· Receives data from dozens of sources, including VBA Corporate Database (CRP) and Veteran Benefits Management System (VBMS).

· Used by the VBA Performance Analysis and Integrity (PA&I) team to perform a variety of business intelligence reporting for executive managers, business lines, and claims processing teams.

· Used for performance reviews and tracking, fraud detection and prevention, financial auditing, and reports to the Executive and Legislative branches.

· Hosted on an Oracle SCM8 SuperCluster server located in the Austin Information Technology Center (AITC) with a disaster recovery environment in the Hines Information Technology Center (HITC).

· Consists of 440+ schemas and 85,000+ tables, which are updated on a daily, weekly, and monthly basis based on business and reporting needs.

· Employs Oracle Database, Oracle GoldenGate, Oracle Business Intelligence Enterprise Edition, SAS Enterprise Miner, and Informatica and is 300+ terabytes (TBs) in size.

· Uses data from VBA Data Warehouse (VD2) to provide near-real time ad-hoc reporting, queries, analysis, trends, metrics, and payment data to VBA, various organizations throughout the VA, and the Executive and Legislative branches.

· Resides on a cluster of Microsoft Windows servers in the Austin Information Technology Center (AITC) and is undergoing an assessment to evaluate options for a migration to the cloud.

BIA Software Languages and Tools

Ansible

Apache

AppDynamics

Argo CD

ASP.NET

AWS (SQS, S3, SNS, EFS, EC2, RDS, etc.)

C++

Centrify

Classic ASP

COBAL

Confluent (Kafka)

Connect:Direct

Consul

Control-M

Delphix

DevExpress

Dex

Docker

Dynatrace

Elasticsearch

Fluent D

Foglight

Gangway

GitHub

Grafana

Helm

Helm Operator

HTML

Informatica Data Quality

Informatica Metadata Manager

Informatica PowerCenter

Ingress

IntelliJ

Java

JavaScript

Jenkins

Jira

Karpenter

Kiali

Kiam

Kibana

Kong Gateway

Konga

Kubecost

Kubernetes

Kubespray

Liquibase

LoadRunner

Micro Focus Dimensions

Micro Focus Fortify

Micro Focus Solutions Business Manager

Microsoft Jet Engineer Database

MS Windows Server

Nexus Repository Manager

NGINX

Oauth

OpenAPI Specification (OAS)

Oracle Business Intelligence Enterprise Edition (OBIEE)

Oracle Database

Oracle Golden Gate

Oracle Tuxedo

Oracle Tuxedo System and Application Monitor (TSAM)

Oracle WebLogic

Packer

Prisma Cloud (formally Twistlock)

Pl/SQL

PostgreSQL

Postman

Pro*C

Prometheus

Red Hat Enterprise Linux

ServiceNow

SharePoint

Slack

Solaris OS

SonarQube

Splunk

SQL

SQL Developer

SQL Plus

SQL Server

SSRS

Tableau

Tiller

Toad

Vault

Velero

Venafi

Veridata

Veritas Volume Manager

Visual Basic 6

Visual Studio .NET

Windows Server (IIS)

WinSCP