ATT G - Acronyms Terms and Definitions - Amendment 02.pdf

ATTACHMENT G

NASA CONSOLIDATED APPLICATIONS AND

PLATFORM SERVICES (NCAPS)

ACRONYMS, TERMS, AND DEFINITIONS

RFP 80TECH23R0002

CONTRACT #TBD

DATE: APRIL 2023

Attachment G

80TECH23R0002

ACRONYMS

A&A Assessment and Authorization AAO Agency Application Office AART Agency Application Rationalization Tool ACA Associate Contractor Agreement ACITS4 Ames IT Services Contract Services 4 ACL Assessed and Cleared List ACS Audio Conferencing Services AD Active Directory ADCC Agency Data Center Consolidation ADL Applicable Documents List ADLR Application Development Language Roadmap AEGIS Advanced Enterprise Global IT Solutions AED Automated External Defibrillators AES Advanced Exploration Systems AFRC Armstrong Flight Research Center AHC Agency Hierarchy Code AI Artificial Intelligence AIML Artificial Intelligence Markup Language AIX Advanced Interactive eXecutive AK Alaska AL Alabama ALMS Access Level Management request System ALP Acceptable Levels of Performance ANI/ALI Automatic Numbering Identification/Automatic Location Identification ANSI American National Standard Institute AO Authorizing Official API Application Programming Interface APL Approved Products List APS Applications and Platform Service APSCC Alternate Protective Services Control Center AR Accepted Risk ARC Ames Research Center ARIN American Registry for Internet Numbers ART Agile Release Train ASCS Agency Security Configuration Standards ASLM Agile Software Lifecycle Management ASN Autonomous System Number ASVS Security Verification Standard ATO Authority to Operate ATP Authority to Proceed ATSC Advanced Television Systems Committee ATV Asset Transition Value AWS Amazon Web Services

BAS Biometric Application Server BCC Backup Control Center BCC-HOSC Backup Control Center – HOSC BGP Border Gateway Protocol BI Business Intelligence BICSI Building Industry Consulting Services International BIS Base Infrastructure Services BMS Badge Management System BNOC Base NOC BOE Basis of Estimate BOM Bill of Material BRT Breach Response Team BY Budget Year

CA California CA Certificate Authority CA Cost Accountant C-ATO Conditional Authority to Operate C&A Certification and Accreditation CaaS Compute as a Service CAD Computer-Aided Design CAM COMSEC Account Manager CAE Computer-Aided Engineering CAP Certified Authorization Professional CASP+ CompTIA Advanced Security Practitioner CATS Contract Administration Tools & Services CATSCAN Covered Article & Technology Supply Chain Assessment Needed CATV Cable Television CBA Collective Bargaining Agreements CBT Computer Based Training CCB Configuration Control Board CCISO Certified Chief Information Security Officer CCNA Cisco Certified Network Associate CCTS Configuration Control Tracking System CD Continuous Delivery CD Contractual Data CD&SC Communications Distribution and Switching Center CDM Continuous Diagnostics & Mitigation CDN Content Delivery Network CDR Critical Design Review CDRL Contract Data Requirements List CDT Central Daylight Time CE Continuing Education CEC Collaborative Engineering Center CED Collection of Electronic Data CEMP Comprehensive Emergency Management Plan

CENMS Corporate Enterprise Network Management Systems CER Cisco Emergency Responder CFR Code of Federal Regulations CHATS Contractor-Held Asset Tracking System CI Configuration Item CI Continuous Integration CIEF Carrier Independent Exchange Facilities CIO Chief Information Officer CISA Cybersecurity and Infrastructure Security Agency CISO Chief Information Security Officer CISM Certified Information Security Manager CISSP Certified Information Systems Security Professional CLI Command Line Interface CLIN Contract Line Item CM Configuration Management CMI Configuration Management Items CMDB Configuration Management Data Base CMMI Capability Maturity Model Integration CMP Contract Management Plan CMS Card Management System CMS Content Management System CNOC Corporate Network Operations Center CNSI Classified National Security Information CO Contracting Officer COAM Customer Owned and Maintained COD Center Operations Directorate CoF Construction of Facilities CompTIA Computing Technology Industry Association COMSEC Communications Security CONUS Continental United States COOP Continuity of Operations COOP Continuity of Operations Plan COBRA Collect, Observe, Broadcast, Record and Analyze COR Contracting Officer’s Representative COTS Commercial Off-the-Shelf COW Carry Over Work CNSI Classified National Security Information CP Communications Program CPE Center Premises Equipment CPFF Cost Plus Fixed Fee CPIC Capital Planning and Investment Control CPR Cost Performance Report CPR Core Program Requirements CPU Central Processing Unit CR Change Request CRA Contract Resource Analyst

CRM Customer Relationship Manager CRQ Customer Request CSD Communications Services Document CSET Cybersecurity Standards and Engineering Team CSBF Columbia Scientific Balloon Facility CSI CyberSecurity Infrastructure CSO Communications Service Office CSONS Communications Service Office Outage Notification System CSP Cloud Service Provider CSPD Cybersecurity & Privacy Division CSPP Cybersecurity & Privacy Program CSS Central Storage System CSSO Computing Services Service Office CST Central Standard Time CSV Comma Separated Values CTA Corporate Target Architecture CTE Cloud Technical Environments CUI Controlled Unclassified Information CWDS Centralized Web and Database Servers CyPrESS Cybersecurity and Privacy Enterprise Solutions and Services CySA+ CompTIA Cybersecurity Analyst

D2E2 Data Discovery Exploration Engine DAR Data at Rest DART Damage Assessment and Recovery Team DAVC Desktop Appliance Video Conference DBA Database Administration DBaaS Database as a Service DBMS Database Management System DCIM Data Center Infrastructure Management DCN Data Center Network DCOI Data Center Optimization Initiative DCS Design-Cost-Schedule

DDI DNS DHCP IPAM

DEIA Diversity, Equity, Inclusion, and Accessibility Dev Development DevOps Development and Operations DFUM Directorate Facilities Utilization Managers DHCP Dynamic Host Configuration Protocol DHS Department of Homeland Security DISA Defense Information Services Agency DLP Data Loss Prevention DME Development, Modernization, and Enhancements DMV Desktop Mobile ViTS DMZ De-Militarized Zone DNS Domain Name Service

DOCR Data Operations Control Room DoD Department of Defense DOS Denial of Service DP Decommissioning Plan DPS Deliverable Products and Services DR Disaster Recovery DR Discrepancy Report DRD Data Requirements Document DSL Digital Subscriber Line DSN Deep Space Network DSR Daily Summary Report DTV Digital Television DVD Digital Versatile Disc DVR Digital Video Recorder

E3A Einstein 3 Accelerated E911 Emergency911; system for emergency calls EA Enterprise Architect EAC Estimate at Completion EAR Export Administration Regulations EAST2 Enterprise Applications Service Technologies 2 EBGP External Border Gateway Protocol EBMO Enterprise Business Management Office EC Engineering Change ECAD Electronics Computer-Aided Design EC2 Elastic Compute Cloud ECCB Enterprise Change Control Board ECN Equipment Control Number ECWG Enterprise Change Working Group EDMS Electronic Document Management System EIA Electronic Industries Alliance EIB-NAC Enterprise Internal Border-Network Access Control EIS Enterprise Infrastructure Solutions eITAM Enterprise IT Acquisition Management ELA Enterprise License Agreement ELB Elastic Load Balancing EMCC Enterprise Managed Cloud Computing ELMT Enterprise License Management Team ENS Emergency Notification System EO Executive Order EOC Emergency Operations Center EOL End of Life EON Emergency On-Site Notification EOS End of Service EP Elevated Privileges EPACS Enterprise Physical Access Control System

EPMO Enterprise Project Management Office EPMT Enterprise Platform Management Team ER Event Report ERA Electronic Records Archives ES&I Enterprise Service and Integration ESC Enterprise Service Catalog ESD Enterprise Service Desk ESF Emergency Support Function ESRS Enterprise Service Request System eSRS Electronic Subcontracting Reporting System ETOS Electronic Task Order System EUSO End User Services Office EVCDN Enterprise Video Content Delivery Network EWS Emergency Warning System

FAR Federal Acquisition Regulation FASD Facilities and Administrative Services Division FBACP Fringe Benefits Analysis of Compensation Plan FBF Filter Based Forwarding FC Fibre Channel FCL Facility Clearance FCC Federal Communications Commission FCO Field Change Orders FDCCI Federal Data Center Consolidation Initiative FDD Final Design Document FDF Flight Dynamics Facility FedRAMP Federal Risk and Authorization Management Program FER Freeze Exemption Request FFP Firm Fixed Price FIPS Federal Information Processing Standard FISMA Federal Information Security Management Act FITARA Federal IT Acquisition Reform Act FOD Foreign Object Debris FOIA Freedom of Information Act FOM Facility Operations Manager FPC Fixed Price Capacity FPCTP Fixed Price Capacity Transition Plan FRC Federal Record Center FTP File Transfer Protocol FY Fiscal Year

GAO Government Accountability Office GCC Goddard Communications Control GCTC Yuri Gagarin Cosmonaut Training Center GFE Government Furnished Equipment GFP Government Furnished Property GFY Government Fiscal Year

GHz Gigahertz GIAC Global Information Assurance Certification GICSP Global Industrial Cyber Security Professional GISS Goddard Institute for Space Studies GOTS Government Off The Shelf GPA Government Property Administrator GPO Group Policy Object GPR GSFC Procedural Requirement GPS Global Positioning System GRC Glenn Research Center GSA General Services Administration GSCM Ground Systems Configuration Management GSEC GIAC Security Essentials Certification GSFC Goddard Space Flight Center GSLC GIAC Security Leadership GUI Graphical User Interface GWAC Government-Wide Acquisition Contract

HA High Availability HBCU Historically Black Universities HITSS HQ Information Technology Support Services contract HMI Human Machine Interface HOSC Huntsville Operations Support Center HPC High-Performance Computing HPSS High-Performance Storage System HQ Headquarters HRC Hardware Reference Configurations HSF Human Space Flight HSM Hierarchical Storage Management HTML HyperText Markup Language HUBZone Historically Underutilized Business Zone HVAC Heating, Ventilation, and Air Conditioning

I3P IT Infrastructure Integration Program I&A Inspect and Adapt IA Information Assurance IaaS Infrastructure as a Service IAGP Installation Accountability Government Property IAM Identity Access Management IAW In Accordance With IBGP Internal Border Gateway Protocol IBM International Business Machines Corporation IBN Intent Based Network IaaS Infrastructure as a Service ICAM Identity Credential and Access Management ICD Interface Control Document

ID Identification; identity IDA Interface Definition Agreement IDAS Information Data Analytics Services IDC Integrated Data Collection IDD Interface Definition Document IDIQ Indefinite-Delivery Indefinite-Quantity IDM Identity Manager (used synonymously with IdMAX) IdMAX Identity Management and Account Exchange ID/IR Intrusion Detection and Incident Response IDS Intrusion Detection System IDR Internal Design Review IDU Incremental Development Unit IES Integrated Engineering Services IETF Internet Engineering Task Force IGP Interior Gateway Protocols IIS Internet Information Services ILO Integrated Lights Out IMAC Install, Move, Add and Change IMS Instant Meeting Service IMS Incident Management System INKSNA Iran, North Korea, and Syria Nonproliferation Act INP Integration Plan IONet IP Operational Network IOP Interim Operating Procedures IoT Internet of Things IP Internet Protocol IPAM Internet Protocol Address Management IPO Industrial Property Officer IPP Invoicing Processing Platform IPS Intrusion Prevention Systems IPT Integrated Project Team IPTV Internet Protocol Television iPV International Procedure Viewer IPv4 Internet Protocol version 4 IPv6 Internet Protocol version 6 IR Incident Response IR Investigative Reports IRAP Incumbent Retention and Pay IRD Integrated Receiver/Decoder IRM Incident Response Manager IRR Internal Readiness Review ISC Infinity Science Center (ISC)2 International Information System Security Certification Consortium ISE Identity Service Engine IS-IS Intermediate System to Intermediate System ISM IT Service Management

ISO International Organization for Standardization ISO Information System Owner ISS International Space Station ISSO Information System Security Officer ISR Individual Subcontract Report IT Information Technology ITAR International Traffic in Arm Regulations ITBS Information Technology Business Services ITCD Information Technology and Communications Directorate ITIL Information Technology Infrastructure Library ITMB IT Management Board ITPO IT Procurement Office ITS IT Security ITS21 Information Technology Services 2021 ITSCM IT Service Continuity Management ITSEC-EDW IT Security Enterprise Data Warehouse ITSM IT Security Management ITSM IT Service Management ITSP Information Technology Plan ITSSP Information Technology System Security Plan ITU Incremental Team Unit IV&V Independent Verification and Validation IV&V Independent Verification and Validation Facility

J911 Joint 911 J911NGU J911 Next Generation Upgrade JPL Jet Propulsion Laboratory JSC Johnson Space Center

K Thousand(s) KA Knowledge Article KATS Kennedy Action Tracking System KDC Kennedy Data Center KIAC Kennedy Infrastructure Applications and Communications contract KOATS Kennedy Online Application Tracking System KPaaS Kubernetes Platform as a Service KSC Kennedy Space Center KUS KSC Uplink Station KVM Keyboard-Video-Mouse

L2BS Layer 2 Backbone Services L2VPN Layer 2 Virtual Private Network LAN Local Area Network LaRC Langley Research Center LBS Load Balancing Services LCN Limited Communications Notice

LDAP Lightweight Directory Access Protocol LDP Label Distribution Protocol LFT Large File Transfer LOC Level of Confidence LOP Local Operating Procedure LRU Line Replaceable Unit LS Logistics Support LTE Long-Term Evolution LTO Linear Tape-Open LVoDS Local Voice Distribution System

MA Management MAB MAC Address Bypass MAC Media Access Control MACS MSFC Agency Compute Services MAF Michoud Assembly Facility MAP Mission Support Future Architecture Program MAR Mitigation Action Recommendation MATLAB Matrix Laboratory MBFD Multi-Hop Bidirectional Forwarding Detection MCAD Mechanical Computer Aided Design MCC Mission Control Center MCC-H Mission Control Center – Houston MCE Managed Cloud Environment MCDTV Multi-Channel Digital TV System MCM Mission Communications Manager MCWG Mission Communications Working Group MD Maryland MDM Mobile Device Management MEC Management Education Center MEI Mission Essential Infrastructure MEOV Mobile Emergency Operations Vehicle MFA Multi Factor Authentication MGSS MSFC Ground Systems and Services MICS Management Information Control System MITS MSFC Information Technology Services ML Machine Learning MND Mission Network Division MNGV Mission Next Generation Voice MOA Memorandum of Agreement MOID Mission Operations Interface Document MONS Mission Outage Notification System MORR Mission Operations Readiness Review MOST Mission Operations Security Team MOU Memorandum of Understanding MOVE Mission Operations Voice Enhancement

MPLS Multiprotocol Label Switching MPR MSFC Procedural Requirement MSI Minority Serving Institutions MSFC Marshall Space Flight Center MSM Mission Service Manager MSN Mission MRB Material Review Board

NAC Network Access Control NAID National Association for Information Destruction NAMS NASA Access Management System NASA National Aeronautics and Space Administration NASCOM NASA Communications NAT Network Address Translation NaTS Networking and Telecommunications Services NBL Neutral Buoyancy Laboratory NC North Carolina NCAD NASA Consolidated Active Directory NCAPS NASA Consolidate Applications and Platform Services NCC NASCOM Communications Control NCCIPS National Center for Critical Information Processing and Storage NCI NASA Critical Infrastructure NCTR NASA Client Trust Reference NDA Non-Disclosure Agreement NDAA National Defense Authorization Act NDC NASA Data Center NEAS NASA Enterprise Automation Service NEC National Electric Code NED NASA Enterprise Directory NEMO NASA Emergency Management Officer NEN Near Earth Network NERD Network Engineering Review Board NESC National Electric Safety Code NESS NF1018 Electronic Submission System NEST NASA End-user Services & Technologies NetOps Network Operations NETS NASA Environmental Tracking Systems NexGen Next Generation [contract] NF NASA Form NFS NASA FAR Supplement NFV Network Functions Virtualization NIC Network Interface Card NICA NASA Internal Certificate Authority NID NASA Interim Directive NIEG NASA Imagery Expert Group NIEP NASA Imagery Experts Program

NIN NASA Internal Network NIST National Institute of Standards and Technology NITR NASA Information Technology Requirement NITS NASA Incident Tracking System NITSM NASA IT Service Management NMIS NASA Mishap Information System NM New Mexico NMS Network Management System NMO NASA Management Office NOCA NASA Operational Certificate Authority NOR NEST Organizational Representative NOMC Network Operations and Management Center NOSL NASCOM Operations System Lab NPD NASA Policy Directive NPR NASA Procedural Requirement NRRS NASA Records Retention Schedule NRS NASA Collaborative Infrastructure Resource Scheduler NSBCP NSSC Business Continuity and Disaster Recovery Plans NSR Network Service Request NSS National Security Systems NSSC NASA Shared Services Center NSSTC National Space Science & Technology Center NTAM NASA Trust Anchor Management NTC NASA Teleconferencing Center NTSR New Technology Summary Report NTP Network Timing Protocol NTSC National Television Systems Committee NY New York

O365 Microsoft Office 365 OAT Oracle Auditing Tool O&M Operations and Maintenance OAM Operation Administration and Maintenance OMB Office of Management and Budget OCFO Office of Chief Financial Officer OCI Organizational Conflict of Interest OCIO Office of the Chief Information Officer OCONUS Outside Continental United States OCR Optical Character Recognition OCSD Organizational computer Security Officer OCSS Office of the Cyber Security Services ODBC Open Database Connectivity ODC Other Direct Cost ODM Operational Directive Memorandum ODS Ozone Depleting Substances ODV Organizationally Defined Value

OEM Original Equipment Manufacturer OFRI Operations & Flight Readiness Implementation OGA Other Government Agency OH Ohio OIG Office of Inspector General OIP Operations Interface Procedures OITM Organizational IT Managers OMB Office of Management and Budget OOBA Out-of-Band Administration OP Operating Procedures OPM Office of Personnel Management OPS Office of Protective Services ORI Organizational Records Inventory ORR Operational Readiness Review OS Operating System OSHA Occupational Safety and Health Administration OSI Office of Strategic Infrastructure OSMA Office of Safety and Mission Assurance OSP Operational Support Plans OSPF Open Shortest Path First OT Operational Technology OWASP Open Web Application Security Project

PA Public Address [Systems] PaaS Platform as a Service PACE V Professional, Administrative, Computational, and Engineering Services V PACS Physical Access Control System PAI Privacy Act Information PB Petabyte PDL Ponce De Leon PDF Portable Document Format PDU Power Distribution Unit PDM Policy Decision Memoranda PEB Performance Evaluation Board PEC Performance Evaluation Committee PI Program Increment PIA Privacy Impact Assessment PII Personally Identifiable Information PIP Program Implementation Plan PIV Personal Identity Verification PIV-M PIV Mandatory PKI Public Key Infrastructure PLC Programmable Logic Control PM Preventive Maintenance PMP Property Management Plan PMOD Payload and Mission Operations Division

PMR Performance Management Review PO# Purchase Order Number POA&M Plan of Action & Milestones POC Point-of-Contact PoP Point of Presence POTS Plain Old Telephone Service PP&E Property, Plant, & Equipment PPBE Planning, Programming, Budgeting, and Execution PPD Presidential Policy Directive PPM Principal Periods of Maintenance PPR Phased Periodic Reinvestigation PPS Ports, Protocols, Services PR# Purchase Request Number PRD Program Requirements Document PSO Protective Services Office PSS Physical Security Specialist PSTN Public Switched Telephone Network PTA Privacy Threshold Assessment PTP Project Task Plan PUB Publication PWS Performance Work Statement

QA Quality Assurance QASP Quality Assurance Surveillance Plan QE Quality Engineering QMS Quality Management System QoS Quality of Service

RA Risk Assessment RAM Random Access Memory RAS Remote Access Service RBAC Role-Based Access Control RBD Risk Based Decision RCA Root Cause Analysis RCDD Registered Communications Distribution Designer RDM Release and Deployment Management RDP Remote Desktop Protocol Rev Revision RF Radio Frequency RF&ESS Research Facilities and Engineering Support Services RFC Request for Comments RFI Request for Investigation RFID Radio Frequency Identification RIPE Reseaux IP Europeans RIR Regional Internet Registry RISCS Risk Information Security Compliance System

RM Remedial Maintenance RM Records Management RM Reliability and Maintainability RNO Responsible NASA Official RoE Rules of Engagement ROI Return on Investment ROM Rough Order Magnitude RPA Robotic Process Automation RPO Recovery Point Objective RQD Requirements Document RS Return to Service RSC-E Rocket Space Corporation – Energia RSVP Resource Reservation Protocol RPO Recovery Point Objective RTE Release Train Engineer RTO Recovery Time Objective RTS Return To Service RvoDS Remote Internet Voice Distribution System

S&MA Safety And Mission Assurance SA Safety SaaS Software as a Service SACM Service Asset and Configuration Management SAFe Scaled Agile Framework SAISO Senior Agency Information Security Officer SAM Subject Area Monitor SAN Storage Area Network SAP Systems, Applications and Products SAR Situational Awareness Report SATCOM Satellite Communications SATERN System for Administration, Training, and Educational Resources for

NASA

SBPR Single Scope Background Period Reinvestigation SBU Sensitive But Unclassified SC Service Customers ScaN Space Communications and Network SCD Small Conversion Devices SCI Sensitive Compartmented Information SCIF Sensitive Compartmented Information Facilities SCM Shift Communications Manager SCM Service Continuity Management SCR Software Change Request SCRM Supply Chain Risk Management SCTF Sonny Carter Training Facility SDA Software Defined Access SDLC System Development Life Cycle

SDN Software Defined Networking SE Systems Engineering SE&I Systems Engineering and Integration SEL Systems Engineering Lead SEM Service Element Manager SEMO Supply and Equipment Management Officer SEQP Software Engineering Quality Plan SFTP Secure File Transfer Protocol SHE Safety, Health & Environmental SIA Security Impact Assessments SIP Session Initiation Protocol SLA Service Level Agreement SLS Space Launch System SME Subject Matter Expert SMTP Simple Mail Transfer Protocol SN Space Network SOC Security Operations Center SOC-MAR Security Operations Center - Mitigation Action Requirement SOD Segregation of Duties SOP Standard Operating Procedure SOW Statement of Work SORN Systems of Registry Notifications SoS Systems-of-Systems SP Special Publication SpaaS SharePoint as a Service SPIP Station Program Implementation Plan SPR System Problem Report SQL Structured Query Language SR Service Request SRR Systems Requirements Review SSBI Single Scope Background Investigation SSC Stennis Space Center SSCP Systems Security Certified Practitioner SSE Server-Side Encryption SSH Secure Shell SSHGS Secure Shell Gateway System SSL Secure Sockets Layer SSN Social Security Number SSO Systems Security Officer SSP System Security Plan SSR Summary Subcontracting Reporting SVS Switched Voice Services

T3 Tier 3 T5R Tier 5 reinvestigation TAG Temporary Access Grants

TAM Technical Area Monitor T&F Timing & Frequency T&S Timing & Synchronization TB Terabyte TBM Taxonomy Business Model TBM Technology Business Management TCM Technical Coordination Meeting TCP Total Compensation Plan TDM Time-Division Multiplexing TDY Temporary Duty TE Traffic Engineering TIA Telecommunications Industry Association TIALS2 Technical Information and Logistics Services 2 TIC Trusted Internet Connection TIM Technical Interchange Meeting TLS Transport Layer Security TM Task Monitor TO Task Order TOM Task Order Monitor TOS Terms of Service TPOC Technical Point of Contact TReK Telescience Resource Kit TS Top Secret (security clearance) TSC Telescience Support Centers TTL Teletype Loop TV Television TX Texas

UAT User Acceptance Test UCC Unified Communications and Collaboration UD Unauthorized Device UHF Ultra-High Frequency UI User Interface UPS Uninterruptible Power Supply U.S. United States USS User Self Service UTC Coordinated Universal Time UVS Unique Video Services UWG Utility Working Group UX User eXperience

V&V Verification & Validation VA Virginia VAFB Vandenberg Air Force Base VAR Visit Access Requests VCS Video Conferencing Services vCPU virtual Central Processing Units VDC Virtual Data Centers VHF Very High Frequency ViTS Video Teleconferencing Services VLAN Virtual LAN VM Virtual Machine VMS Virtual Memory System VNF Virtualized Network Function vNIC Virtual Network Interface Card VoIP Voice over Internet Protocol VOSB Veteran Owned Small Businesses VoTS Voice Teleconferencing System VPC Virtual Private Cloud VPN Virtual Private Network VVP Verification and Validation Plan

WAN Wide Area Network WBS Work Breakdown Structure WCC Work Control Center WCS Web Collaboration Services WCS Workplace and Collaboration Services WFF Wallops Flight Facility WOSB Women-owned Small Business WR Work Request WSC White Sands Complex WSTF White Sands Test Facility WV West Virginia WYE Work Year Equivalent

YTD Year to Date

TERMS AND DEFINITIONS

Accepted Risk – the level of Residual Risk that has been determined to be a reasonable level of potential loss/disruption for a specific IT system. (See Risk Based Decision) per NIST SP 800- 16.

Account Provisioning – The process of adding or modifying user permissions within an application or system. Once a user is approved in NAMS, the user will need to be added within the system with the appropriate permissions to access the requested resources. Provisioning new users most commonly requires a user with an administrator role to login using a web portal and add the new user from a configuration page.

Agile Product Teams – (Agile Teams must have a Scrum Master and a Product Owner that is included in the 5-11 count). Refer to ** below.

Agile Release Train (ART) – (An ART consist of 50 – 125 people organized in multiple agile teams). Refer to ** below.

Application – Refers to any application, system, website, mobile application, database, platform, container, or software. In the contract the terms Application and System are interchangeable unless otherwise stated. Supports a process, implements logic and rules to transform user or system input into data output, and/or automates and optimizes functions, processes, tasks, and activities. Applications can be divided into business or mission supported, and generally fall into the categories that support NPR 7150.2D, NASA Software Engineering Requirements: Class F General Purpose Computing, Business, and IT Software.

Application maintained by external parties – An application where an external party maintains the code and configuration of the application. An application where a third party maintains the code and NCAPS manages the configuration of the application is not considered “Application maintained by external parties”.

Application Support Level – The categories used to classify application O&M support based on the characteristics defined in Attachment K, Application Support Levels. Applications Support Levels are attributed a specific quantity of Application Points based upon the complexity and support requirements defined in Attachment A, Performance Work Statement (PWS).

Availability – The timely, reliable access to and the use of data and resources for authorized users whenever it is needed.

Business Agility – Organizational-wide application of Lean and Agile practices.

Business Owner – Sets the Business vision.

Commitment Reliability – Story points accepted against story points committed for a sprint.

Refer to ** below.

Confidentiality – The protection of data from unauthorized disclosure, whether intentional or accidental, and must be provided for data when in storage, during processing, and in transit.

Cryptographic Certificate Requests – Cryptographic Certificate Requests are used to request new certificates from a certificate authority. These certificates may come from the NASA Operational Certification Authority (NOCA) for internal web applications, NASA Internal Certificate Authority (NICA), or they may be provided by a third party in accordance with IT Security requirements.

Cryptographic Protocols – Cryptographic Protocols are used to enhance the security of communications over computer networks. Examples of these protocols include Transport Layer Security (TLS) and Secure Sockets Layer (SSL).

DME – Development, Modernization, Enhancement. The projects and activities that lead to new IT assets/systems, or change or modify existing IT assets to substantively improve capability or performance.

Data Gateway – An On-Premises Data Gateway (aka “Data Gateway”) allows Power Apps and Power Automate to reach back to on-premises resources to support hybrid integration scenarios.

Emergency Outage – Emergency outages are taken for the unexpected loss of a production application or systems accessibility or functionality. These outages require notification in DRD MA-09, Documentation, item g, “Daily Outage and Activity Status Report”.

Enabler Story – Brings visibility to the work items needed to support exploration, architecture, infrastructure, and compliance.

Enterprise Architect – Sets the Architectural direction.

Epic Owners – The champion of the initiative/epic.

Flow Velocity – (For new teams, velocity will be normalized and calculated using 8 story points per team member per 2-week iteration/sprint (not to include the Scrum Master). Therefore, if we have a team of 8 members, we will subtract the Scrum Master from the calculation 8 – 1 = 7 team members. Then times the 7 team members by 8 story points, 7 x 8 = 56 story points will be the starting velocity of the new 8-member team that includes a Scrum Master and on the team).

Refer to ** below.

Flow Distribution – Refer to ** below.

Flow Time – Refer to ** below.

Flow Efficiency – Refer to ** below.

Flow Load – Refer to ** below.

Flow Predictability – Refer to ** below.

Flow Velocity Fluctuations – Refer to ** below.

Hosted Only – a description used for applications, websites, and systems that are maintained or managed by external parties.

Integrated Development Backlog – The Integrated Development Backlog is a prioritized schedule of work yet to be started. The purpose of the backlog is to ensure that items in work reflect the priorities of the Government, and that the contractor has a sufficient amount of approved new work.

Incremental Development Unit (IDU) – A fixed cycle of development that includes all required support (project management, testing support, software development, business analysis, and documentation) associated with delivery of a software product and is expected to target 10 Story Points per Incremental Development Unit based on the Reference User Stories defined in Attachment J, Fixed Price Story Point Process, section 1 Incremental Development Unit Process.

Information System – Refers to any system that physically or logically is connected to a NASA network, or that stores, processes, or transmits NASA data.

Inoperable Functionality – Portions of an application or system that cease to perform as designed or at all. These flaws, failures or faults in the applications or systems are commonly referred to as software bugs.

Integrity – The result of successfully guarding against improper information modification or destruction, and includes ensuring information non-repudiation and authenticity.

Internal Agile Coach – A Government provided Agile coach.

Investigation Report – The Investigation Report provides the software TM a planning estimate for potential work. The software TM prioritizes the Integrated Development Backlog using these estimates.

ITIL – Information Technology Infrastructure Library: Framework of best practices for delivering IT services.

Iteration/Sprint – standard, fixed-length timebox, where Agile Teams deliver incremental value. Typically 2-weeks but can be up to 4-weeks.

IT Resource Metadata – The information and characteristics describing an application that are tracked in the local and Agency metadata repositories.

IT Security Incident – An adverse event or situation associated with electronic and non-electronic information that poses a threat to the integrity, availability, or confidentiality of that system. An Information Security incident results in the following:

• A failure of NASA information or Information Security controls;

• The waste, fraud, abuse, loss, or damage of NASA resources or information; and/or

• A violation or imminent threat of violation of NASA information protection and IT policies.

Major Software Upgrades – Major Software Upgrades are defined to be on the ‘0.’ revision level of a software product. For example, Atlassian Jira would require a major software upgrade from version 6.0 to version 7.0. Any alternate definitions will require approval on an application-by-application basis from the TM.

Minor Software Upgrades – Minor Software Upgrades are defined to be on the ‘0.0’ revision level of a software product. For example, Atlassian Jira would require a minor software upgrade from version 6.0 to version 6.5. Any alternate definitions will require approval on an application-by-application basis from the TM.

NASA Internal Certificate Authority (NICA) – The NASA Internal Certificate Authority (NICA) issues cryptographic certificates to be used for IT resources internal to NASA.

NASA Operational Certificate Authority (NOCA) – The NASA Operational Certification Authority (NOCA) issues cryptographic certificates to be used for IT resources internal to

NASA.

Non-Emergency Outage/Updates – Non-emergency outages and updates are scheduled maintenance applied to applications and systems. These outages are performed on a non-interference basis with an application or system’s Standard Hours. These outages require coordination with the SC in accordance with contract requirements should the application or system have any potential for a loss of service.

Planned work – Work that has been approved by the Government at the beginning of an iteration.

Product - the term product is generic. It crosses disciplines and can defined as:

• Hardware (e.g., systems).

• Software (e.g., computer program, dictionary, component that makes up a computer program).

• Documentation (e.g., specifications, drawings, test procedures, publications, version description documents).

Product Manager – Prioritizes the features that the teams work on and provides acceptance of the work.

Product Owner Health Radar – Product Owner Health Radar is defined here.

https://agilityhealthradar.com/product-owner-health-radar-assessment/

Program Increment (PI) – Refer to ** below.

Release Train Engineer Health Radar – Release Train Engineer Health Radar is defined here https://agilityhealthradar.com/safe-rte-health-radar-assessment/

Reference User Stories – A set of User Stories used in evaluating and defining the scale and scope of requirements in agile software development. Each Reference User Story is assigned Story Point values defined in Attachment J, Fixed Price Story Point Process, section 1 Incremental Development Unit Process, to standardize the estimation and consistency of Incremental Development Unit planning as a contractual unit of measure. User Stories are evaluated by matching the requirements with the closest Reference User Story based on scope.

Return to Service (RTS) – The restoration of a SCs service to full operability when an Incident, Problem, or outage occurs that renders a service unstable or inoperable. RTS includes the tasks that are necessary to get an end-user’s service back to an operational state, including field services and any remote management.

Risk Based Decision – Documentation for an Accepted Risk (See Accepted Risk).

SAFe – Scaled Agile Framework – System for implementing Agile, Lean, and DevSecOps practices at scale.

Scaled Agile Framework for Lean Enterprises (SAFe) – Refer to ** below.

Scrum Master Health Radar – Scrum Master Health Radar is defined here:

https://agilityhealthradar.com/scrummaster-health-radar-assessment/

SAFe’s Requirements Model – Refer to ** below.

Shared Services Teams – Refer to ** below.

Security Operations Center (SOC) – The NASA SOC monitors activity and events in the NASA environment to ensure that anomalous behavior is detected, identified, classified, and acted upon where appropriate. Security engagements are co-managed by the SOC and the contractor where actionable behavior by each is recommended in the event of malicious activities.

Sensitive Information – Any information, the loss, misuse, or unauthorized access to or modification of which could adversely affect the national interest or the conduct of Federal programs, or the privacy to which individuals are entitled under Section 552a of Title 5, United

States Code (the Privacy Act) but which has not been specifically authorized under criteria established by an Executive Order or an act of Congress to be kept secret in the interest of national defense or foreign policy.

Service Availability – Ability of a component or service to perform its required function 24 hours a day, 7 days a week, with the exception of scheduled outages. It is usually expressed as the availability ratio (i.e., the proportion of time that the service is actually available for use by the end-users).

Service Customer (SC) – A user who has submitted an incident ticket or a service request.

Service Delivery Standards – The expectation that the Government has on how long it should take the contractor to deliver a service.

Software Change Request (SCR) – A modification to software based on Inoperable Functionality and/or enhancements to existing functionality. SCRs that request resolution of Inoperable Functionality are non-Story Point earning, prioritized by the NCAPS contractor and worked as part of application O&M. SCRs that are enhancements or extensions to existing functionality earn Story Points and are prioritized through the Integrated Development Backlog.

Software Enhancements – A type of Software Change Request (SCR), which extends the original functionality of an application or system. For software, enhancements are decomposed into user stories in accordance with Attachment J, Fixed Price Story Point Process, section 1 Incremental Development Unit Process.

Software Verification and Validation Testing – The software developed to meet the requirements of each User Story require validation and verification. Verification testing ensures that the product produced performs correctly, where validation testing will be coordinated with the customer and software TM to ensure that the correct products are being produced through the Incremental Development Unit. Verification testing should include assessments to ensure that the product performs correctly and protects against any common user mistakes.

Software Vulnerabilities – Flaws, glitches, or weaknesses found in software or operating systems that are potential security concerns.

Story – Stories are short descriptions of a small piece of desired functionality, written in the user’s language. Agile Teams implement small, vertical slices of system functionality and are sized so they can be completed in a single Iteration. Stories must include:

• Title

• Description

• Level of Effort (i.e. story points)

• Business Value

• Definition of Done

• Acceptance Criteria

• Dependencies

• Other attributes that characterize the story

• Type of Flow Item story supports (Features, Defects, Risk, and Debts)

Story Points – singular number that represents a combination of qualities:

• Volume – How much is there?

• Complexity – How hard is it?

• Knowledge – What’s known? Uncertainty – What’s unknown?

• Story points are relative, without a connection to any specific unit of measure. The size

(effort) of each story is estimated relative to the smallest story, which is assigned a size of ‘one.’

• For IDUs, the unit of measure defined in Attachment J, Fixed Price Story Point Process, section 1 Incremental Development Unit Process, primarily utilizing a Fibonacci series, used to measure the level of effort required to implement a User Story.

System – Refers to the definition of an application. In the contract the terms Application and System are interchangeable unless otherwise stated.

Team Health Radar – Team Health Radar is defined here: https://agilityhealthradar.com/team-health-radar-assessment

Task Monitor (TM) – A NASA Subject Matter Expert, oversight authority, and Point of Contact responsible for ensuring product delivery of a particular contract area.

Third-Party External Certificates – Third-Party External Certificates are used for IT resources that require interactions with the general public. The applications and systems implementing these certificates are commonly applications available on public networks.

Unplanned work – Work that is not approved by the Government or planned at the beginning of a specific iteration or sprint.

User Story – A description consisting of one or more sentences in the everyday or business language of the end user or user of a system that captures what a user does or needs to do as part of his or her job function. Delivers functionality directly to the end user.

Value Stream – Refer to ** below.

Website – Collection of sites aimed at sharing information about an organization including people rosters, mission statement, relevant links and other content that an organization produces or manages (e.g. policy) for the Agency. Websites may be static in nature (non-interactive or transformational).

Web Application – Facilitates user interactions and transactions to support a business function.

** Scaled Agile Framework definitions from https://www.scaledagileframework.com/