Attachment 1 - Salient-Characteristics - FA487725QA234.pdf
PDF 134 KB Posted
- Attached to
- Backflow Software System
- Solicitation number
- FA487725QA234
About this file
This document presents Salient Characteristics for a Backflow Software System for the Air Force, detailing specific technical and security requirements. The software must be a web-based service compatible with multiple operating systems (Windows 11, iOS, Linux, Android, Chrome OS) and web browsers, supporting multiple simultaneous users and customizable data structures aligned with AFMAN 32-1067 Water and Fuels Systems standards.
Key technical requirements include AICPA/SOC 2 Type II Certification, FedRAMP and DODSRG Level 2 and 4 compliance, robust identity and access management, data ownership protection, and legacy data migration support for XC2 Live systems. The system must accommodate approximately 1,200 backflow assemblies, provide comprehensive training and on-demand live chat support, and meet stringent security standards including access controls, security audits, penetration testing, and disaster recovery capabilities.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
SALIENT CHARACTERISTICS FOR
Backflow Software System
• Software delivered as a service by a web browser interface to enable the ability to work across multiple operating system types (eg. MS Windows 11, Apple iOS, Linux, Android, Chrome OS), for multiple web browser types (eg. Firefox, Chrome, Edge, Safari) that are compliant with Open Web Standards for Open Web Application Security Project
(OWASP).
• Software must support multiple users in multiple instances at a time. A single use or single instance is not allowed.
• Software data structures, input forms, and reports must have the ability to be customized for specific Air Force requirements outline in AFMAN 32-1067- Water and Fuels Systems, Section 4.3.5 Backflow Prevention Program.
• Software must Meet AICPA / SOC 2 Type II Certification. As part of that certification, it must be FedRAMP (Federal Risk and Authorization management Program) and DODSRG (the Department of Defense Security Requirements Guide) Level 2 and 4 certified.
• Software must support Identity and Access Management, Access Controls, Security Audits/Penetration Testing, Disaster Recovery/Backup.
• Software must support the ownership of the data to rest solely with the owner.
• Software Data structures must support the legacy data structure of XC2 Live for data migration to ensure ease of migration and verification for legacy compliance tracking purposes. Technical support for migration will be required.
• Software support must encompass training elements in the core functions of the software and as it is modified for the end user. On-demand live chat help for end users is required.
• There are approximately 1200 backflow assemblies that are being tracked.
File details come from the government source that posted it. Updated .