ATT K - Application Support Levels.pdf

ATTACHMENT K

NASA CONSOLIDATED APPLICATIONS AND

PLATFORM SERVICES (NCAPS)

APPLICATION SUPPORT LEVELS

RFP 80TECH23R0002

CONTRACT #TBD

DATE: MARCH 2023

Attachment K

80TECH23R0002

Application Support Levels are classified based on the characteristics below and organized into a point-based system where the weighting is determined by the highest category meeting any of the criteria. The “Hosted Only” description is used for applications, websites and systems that are maintained or managed by external parties. Each application is assigned a number of Application Points based on the criteria stated below:

1. Minimal - 1 Application Point (Small Hosted Only): (Application Criticality 1 = 2

Application Points)

a. Static web sites (i.e., HTML & CSS).

b. Customer maintained content management sites hosted in Web Content Management systems like WordPress. Excludes Platform O&M.

c. File based/client-side applications.

d. License Services.

e. Help Desk and Permission Provisioning Only.

2. Basic - 2 Application Points: (Application Criticality 1 = 3 Application Points)

The Basic category is used to support larger Hosted Only applications and NCAPS maintained applications fitting the criteria described below.

a. NCAPS-Maintained

i. Static web sites (i.e., HTML & CSS).

ii. Content management sites hosted in Web Content Management systems like

WordPress. Excludes Platform O&M.

iii. Plugins for other platforms.

iv. Application Programming Interfaces (APIs) without full applications.

v. New application under development before deployment to production.

b. Large Hosted Only

i. Production languages per the AP-NASA-HDBK-001, Applications Program

Handbook.

ii. Production environment and databases and up to 3 non-production environments and databases per application.

c. Software as a Service (SaaS)

i. SaaS is used to support third party applications that are provided by external parties using the SaaS model.

ii. Applications in the SaaS support level still require inclusion in an IT System Security Plan (ITSSP) in accordance with PWS XXX, IT Security Compliance, but development of the ITSSP is not included in the scope of this offering.

4. Intermediate – 8 Application Points (NCAPS Maintained): (Application Criticality 1 = 12 Application Points) The Intermediate category is used to support the most common NCAPS Maintained applications. These applications have upper limits to their complexity based on the characteristics of the application described below.

a. Websites/Applications with interfaces between NCAPS contractor-maintained applications.

b. Up to 4 user roles.

Attachment K

80TECH23R0002

c. Web-based, client front end/based, or mobile application developed in Production languages per the AP-NASA-HDBK-001, Applications Program Handbook.

d. Production environment and databases and up to 3 non- production environments and databases per application.

5. Advanced – 16 Application Points: (Application Criticality 1= 24) The Advanced category is used to support complex applications that are not classified as systems below. These applications may require additional support for a number of reasons, including but not limited, to legacy technologies, interfaces with external parties or a large number of roles.

a. Websites/Applications with 2 or more interfaces to applications maintained by external parties.

b. Websites/Applications developed on platforms that are not listed as a Production language per the AP-NASA-HDBK-001, Applications Program Handbook, but do not require a dedicated environment or dedicated hosted database (e.g., Access Databases and Maximo instances in a Multi-Maximo cluster do not require dedicated hosting).

c. Exceeds intermediate criteria but does not meet the criteria to be classified as a System.

The characteristics of the COTS/PaaS platform (e.g., SharePoint, Maximo, and WordPress) are not to be considered when classifying Applications developed for COTS/PaaS platforms.

Custom application solutions developed on top of a COTS/PaaS platform will follow the same criteria for determining application O&M Points.

Platform O&M will be covered separately from the Application O&M points.

Standard O&M Points are defined as Application Criticality 2. Applications defined as Application Criticality 1 will consume the increased number of points identified.

Systems are defined as offerings that do not meet the application definitions defined above and require one or more of the following:

1. Dedicated virtual/physical assets that run a server operating system

2. Not listed as a Production language per the AP-NASA-HDBK-001, Applications

Program Handbook

3. Application Criticality level other than Application Criticality 1 or 2.