J-4 Definitions.pdf

02 AUG 2010

HQ0034-10-R-0046

ATTACHMENT J-4

DEFINITIONS

ADP-I Positions – Those positions in which the incumbent is responsible for the planning, direction, and implementation of a computer security program; major responsibility for the direction, planning and design of a computer system, including the hardware and software; or, can access a system during the operation or maintenance in such a way, and with a relatively high risk for causing grave damage, or realize a significant personal gain.

ADP-II Positions – Those positions in which the incumbent is responsible for the-direction, planning, design, operation, or maintenance of a computer system, and whose work is technically reviewed by a higher authority of the ADP-I category to insure the integrity of the system. This is a critical sensitive position.

Business Engineering – The actions required to analyze existing business processes and workflows in order to develop improvements and efficiencies when moving to digital processing.

CONUS (Continental United States) – The 48 contiguous states plus the District of Coumbia.

COR – Contracting Officer’s Representative

CPARS – Contractor Performance Assessment Reporting System

Critical Contractor Personnel – Those contractor personnel identified by the Government as COOP deployers.

Data Breach, Data Spillage Incidents (DSI) – Occurs when someone transmits classified information over e-mail server(s) or any other information system that has a lower security classification than the classification of the information (i.e. a secret document gets uploaded into a NIPR system). As a result, recovery from a DSI incident can be time consuming, expensive, and will result in the loss of productivity because e-mail server(s) or any other information system will be shutdown until recovery actions are completed.

Failover Test – is the test of the backup operational mode in which the functions of a system component (such as a processor, server, network, or database) are assumed by secondary system components when the primary component becomes unavailable through either failure or scheduled down time.

Logical – is a graphical representation of the business requirements. They describe the things of importance to an organization and how they relate to one another, as well as business definitions and examples.

NACLC – National Agency Check with Local Agency and Credit Check

OCONUS – Other than the 48 contiguous states plus the District of Columbia.

QASP – Quality Assurance Surveillance Plan

Requirements Engineering – The actions required of capturing, structuring, and accurately representing the user's requirements so that they can be correctly embodied in systems which meet those requirements (i.e. are of good quality).

02 AUG 2010

HQ0034-10-R-0046

Software Testing – is an empirical investigation conducted to provide stakeholders with information about the quality of the product or service under test, with respect to the context in which it is intended to operate. This includes, but is not limited to, Unit testing, Regression Testing, and Performance testing, Security testing the process of executing a program or application with the intent of finding software bugs. It can also be stated as the process of validating and verifying that a software program/application/product meets the business and technical requirements that guided its design and development, so that it works as expected and can be implemented with the same characteristics.

SSBI – Single Scope Background Investigation

System Security Authorization Agreement (SSAA) – is an information security document used in the United States Department of Defense (DoD) to describe and accredit networks and systems. The SSAA is part of the Department of Defense Information Technology Security Certification and Accreditation Process, or DIACAP. The DoD instruction (issues in December 1997 that describes DIACAP and provides an outline for the SSAA document is DODI 5200.40.

The DIACAP application manual (DOD 8510.1-M), published in July 2000 provides additional details.

Technical Services – Actions that include, but not limited to programming, system designing, system analysis, workflow and dataflow analysis, database analysis, and data migration.

Tier I – This is the initial support level responsible for basic customer issues. It is synonymous with first-line support, level 1 support, front-end support, support line 1, and various other headings denoting basic level technical support functions. The first job of a Tier I specialist is to gather the customer's information and to determine the customer's issue by analyzing the symptoms and figuring out the underlying problem.

Tier II – This is a more in-depth technical support level than Tier I containing experienced and more knowledgeable personnel on a particular product or service. It is synonymous with level 2 support, support line 2, administrative level support, and various other headings denoting advanced technical troubleshooting and analysis methods.