Attachment 1 - VA SaaS Definition.docx
DOCX document 32 KB Posted
- Solicitation number
- 36C10B24Q0015
About this file
This document defines the Department of Veterans Affairs' requirements for Software-as-a-Service offerings. It specifies that SaaS must be hosted outside of VA's security boundary on a cloud infrastructure and accessed via thin clients such as web browsers. The Cloud Service Provider is responsible for managing the application, safeguarding data, and underlying infrastructure. SaaS offerings must meet key cloud computing characteristics including on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service. Data must remain within the United States. The related federal contract opportunity is for technology ecosystem and management services for the VA Technology Acquisition Center in Austin, Texas under solicitation number 36C10B24Q0015.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| 36C10B24Q0015_1.docx | DOCX document | |
| PTEMS 2.0 RFI QAs 10.20.23.docx | DOCX document | |
| Attachment 4 - DTC System Integrator SLAs.docx | DOCX document | |
| Attachment 3 - DTC Process - How to Submit a Request to Move a Module to Sustainment.docx | DOCX document | |
| DRAFT PWS PTEMS 2.0 Oct 10 2023.docx | DOCX document | |
| Attachment 2 - Existing Product and Technology Ecosystem Management Services (PTEMS).docx | DOCX document | |
| Request for Information - PTEMS 2.0 RFI.docx | DOCX document | |
| 36C10B24Q0015.docx | DOCX document |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
ATTACHMENT 1 - VA Software-as-a-Service (SaaS) Definition A SaaS Product is hosted on a cloud infrastructure outside the security boundary of VA and is provided to the Cloud Service Customer (CSC) over the internet. (Software hosted in VA Enterprise Cloud (VAEC) does not meet this definition of SaaS.) The CSC uses the SaaS offering via a thin-client interface, such as a web-browser or a program interface. The CSC subscribes to the SaaS offering and is only responsible for limited application configuration settings. The Cloud Service Provider (CSP) offering the application is responsible for management of the application, safeguarding of data stored or processed by the application, and all elements of the underlying infrastructure.
In order to qualify as SaaS for use at VA, and to align with Federal Risk and Authorization Management Program (FedRAMP) requirements, the hosting for the offering must conform to the NIST 800-145 definition of Cloud Computing and thus contain following key characteristics:
· On-Demand Self-Service: The CSP fully automates the provisioning of both the customer interface and the underlying cloud components of the SaaS offering. In some cases, to the CSP may provision internal resources manually, while providing the CSC an automated interface to request and track the service.
· Broad Network Access: The SaaS capabilities are available over the internet or over a network that is available from all access points the CSC requires. The SaaS offering is accessible through common platforms (e.g., mobile phones, tablets, laptops, and workstations).
· Resource Pooling: The computing infrastructure supporting the SaaS offering is shared among more than one CSC using a multi-tenant model, and resources are dynamically assigned depending on customer demand.
· Rapid Elasticity: Computing capabilities are automatically provisioned and released in a manner that scales with customer demand. In some cases, the scaling of resources may not be fully automated, but it should be fast enough to support the needs of the CSC, which the CSC would have to define.
· Measured Service: Resource usage, such as storage, processing, bandwidth, and user activity are measured and reported on in a manner that is relevant to the SaaS offering.
The SaaS offering must be hosted within the United States and data stored/processed/transmitted within the offering must remain within the United States.
CSPs should be aware of FedRAMP and ready to partner with VA through the SaaS FedRAMP Authorization process.
File details come from the government source that posted it. Updated .