Page Premier Provider of eGov Services - AIS Network · AIS Network 8300 Greensboro Dr., Ste. 1100,...

Page | 0

Premier Provider of eGov Services to the Commonwealth of Virginia

Capabilities Overview

March 2016

Your One-Stop Shop for eGov Services

CAI ITCL Statement of Work Contract — Application Development

VITA eGov Hosting Contract VA - 120416-AISN

VITA eGov Operations & Maintenance Contract VA-120413-BPI

www.aisn.net/egov

AIS Network 8300 Greensboro Dr., Ste. 1100, McLean, VA 22102 1611 Colonial Parkway, Inverness, IL 60067

Phone: 847-202-1400 x 123 888-401-2476 x 123 www.aisn.net

Table of Contents

Who Is AIS Network? ........................................................................................................................................................................................ 2

Our Contracts ......................................................................................................................................................................................................... 3

Build: CAI Virginia IT Contingent Labor Contract Statement of Work (SOW) ................................................... 3

Host: VA-120416-AISN Hosting Services ...................................................................................................................................... 3

Maintain: VA-120413-BPI Web Applications Maintenance and Operations ....................................................... 3

Our Solutions & Services .............................................................................................................................................................................. 4

Responsive Website & Application Development Services — ..................................................................................... 4

Website & Application Hosting — ....................................................................................................................................................... 4

Managed Security Services for Applications & Websites — Not every agency has the in-house resources to manage compliance and security effectively. .......................................................................................... 4

High Security/ High Compliance Hosting for FISMA, HIPAA and More — .......................................................... 5

Microsoft Azure — .......................................................................................................................................................................................... 5

Cloud Services — ............................................................................................................................................................................................ 5

PCI Compliant Payment Portals — .................................................................................................................................................... 5

Select Public Sector Customers in Virginia .................................................................................................................................. 6

Select Education Customers in Virginia .......................................................................................................................................... 8

Customer Testimonials .................................................................................................................................................................................. 8

Highest Security & Compliance Standards ................................................................................................................................... 9

AISN Service Level Agreement (SLA) ............................................................................................................................................... 12

Contact Us .............................................................................................................................................................................................................. 14

1



Who Is AIS Network? AIS Network is your one-stop shop for eGov services. Founded in 1993, AISN is headquartered in McLean, Virginia, with offices in Richmond and Chicago. Using the following contracts, we can build your application, host it, and provide ongoing support and maintenance:

CAI ITCL Statement of Work Contract – Application Development VITA eGov Hosting Contract VA-120416-AISN VITA eGov Operations and Maintenance Contract VA-120413-BPI

Among other distinctions, AISN hosts the Commonwealth of Virginia’s portal, www.virginia.gov, and provides highly secure and compliant application development, hosting and support services for scores of applications and websites across more than two dozen state agencies, higher education institutions, and other public entities. We also serve major corporations and other large enterprises throughout North America with a strong presence in the healthcare/pharma, higher education and financial services industries. As an SSAE 16-audited hosting company operating from Tier 3 and Tier 4 data centers across the nation (primarily in Northern Virginia and Chicago), we take security and privacy, compliance, and network uptime and availability very seriously. Our networks are managed to multiple compliance requirements, including PCI, HIPAA, FERPA and Sarbanes Oxley, among others. Whether you’re using our solutions and services for application development, O+M, or cloud hosting, we take the worry out of your IT. AISN continually goes the extra mile to ensure our clients’ goals are met. We have a track record of providing responsive, timely, and cost effective solutions. Please contact us. We’d be happy to talk to you about the ways in which we can help your agency, department, or organization accomplish its goals.

2



Our Contracts AISN can build, host, and maintain your application, portal, or website. Use one of these contract vehicles.

Build: CAI Virginia IT Contingent Labor Contract Statement of Work (SOW)

As an authorized sub-contractor to CAI, AISN can build your application, portal or website as a fixed price, deliverables-based project. AISN can also provide Staff Augmentation services under this contract.

More information on this contract can be found here:

http://vaitcl.compaid.com/

Host: VA-120416-AISN Hosting Services

This eGov Hosting Service statewide contract allows AISN to provide scalable hosting solutions for web and non-web-based applications and data to all public entities in the Commonwealth of Virginia, including state agencies, universities, school systems and localities. There are no restrictions or limitations for non-executive branch agencies or other public entities.


http://vita2.virginia.gov/procurement/contractDetail.cfm?contract_id=1000731

Maintain: VA-120413-BPI Web Applications Maintenance and Operations

As an authorized sub-contractor to BroadPoint, AISN can provide:

Operations and Maintenance for your new or existing web applications, and Payment Processing Applications (including development, maintenance, and hosting)


http://www.vita2.virginia.gov/procurement/contractDetail.cfm?contract_id=1000729

3



Our Solutions & Services AISN is a full-service, one-stop shop for eGov solutions and services. Our most in-demand services are described below, but if you don’t see what you need, check our website or simply ask. We’re always ready to help you customize a solution for your unique needs.

Responsive Website & Application Development Services

AISN offers fixed price, deliverables-based application development services under the Virginia IT Contingent Labor SOW Contract (aka CAI Contract). We deliver high quality website and app development with a deep understanding of our clients’ requirements. We are known for best-in-class, responsive and secure website strategy, design and development, and we maintain expertise in content management systems such as SharePoint, SiteCore and WordPress, among others, along with programming frameworks like PHP, ASP.NET and C#.

Website & Application Hosting

Organizations with websites and apps that absolutely must be always up and available turn to AISN, whether it is a complex and high-profile, geo-redundant site such as www.virginia.gov or a state disaster portal such as www.vaemergency.gov. And whether you are using SharePoint, Wordpress, Sitecore, Drupal, some other CMS (or no CMS at all), AISN will customize a solution to meet your needs. Leverage our reliable backup and disaster recovery solutions to restore your protected infrastructure to the cloud, dramatically improving recovery times and lowering costs.

Managed Security Services for Applications & Websites

Not every agency has the in-house resources to manage compliance and security effectively. AISN Managed Security Services, include vulnerability testing, penetration testing, enterprise threat simulation, DDoS protection and more, and can be customized to exceed your current security and compliance standards. AISN continuously monitors and responds to security issues, offering remediation services to help you protect your agency, institution or organization and meet your requirements under SEC 501. Our Base Package consists of a single scan and report for $995, but volume discounts are available for agencies requiring scans of multiple sites or periodic scans of the same site. Remediation services are provided based on an agreed upon Scope of Work. We’ll deliver a customized package to meet your unique needs, so give us a call to discuss.

4



High Security/ High Compliance Hosting for FISMA, HIPAA and More

All AISN hosting services meet multiple compliance standards, including FISMA, HIPAA and FERPA, and include the high security required to safeguard PHI, EHR, PII, and other sensitive data. We support your most sensitive sites, apps and databases in state-of-the-art data centers and offer multiple services dedicated to protecting organizations from a data breach. Read more about our compliance later in this document.

Microsoft Azure

In addition to our High Security/High Compliance services, AISN also resells Microsoft Azure public cloud services. AISN Azure Managed Services optimizes, manages and monitors your Azure environment, including your virtual machines, databases, media services, mobile services, app workloads and more.

Cloud Services

AISN offers Cloud-Based Disaster Recovery, Public Cloud (great for test/dev servers, public-facing websites, or sandboxing), High Security Private Cloud (organizations that require high levels of compliance, security, scalability, enhanced performance, and availability choose the AISN High Security Private Cloud) and Hybrid Cloud.

PCI Compliant Payment Portals

Any network involved in transmitting credit card data must maintain PCI compliance. Through the BroadPoint O+M contract, AISN delivers Commonwealth Security Approved solutions to ensure that the transmission of data always remains secure and compliant.

5



Select Public Sector Clients in Virginia

6



7



Select Education Customers in Virginia

Customer Testimonials

“The portal (www.virginia.gov) is hosted…with AIS Network. They gave us a great proposal to win the business and have provided excellent service since Day One - they also play well with others. :) “

Emily Hines Seibert, Virginia Information Technologies Agency “Partnering with AISN has been an exceptional experience. Everyone at AISN is responsive to any and all questions and quickly resolve concerns. We moved to the next level for our customers and met our compliance and business continuity requirements in a compressed timeframe due to their efforts.”

Karen Hostettler, Virginia Department of Historic Resources “AISN helped us to quickly identify prerequisite activities and to create an effective, fair priced technical solution which was operational in a short timeframe. Because AISN's facilities and processes are

8



designed in compliance with FISMA IT security regulations, we did not have to expend costly additional resources and time on the compliance process. We were impressed with their ability to quickly setup our VM environment and work collaboratively with our application vendor, to get everything worked out with no problems at all. I will always utilize AISN for my IT hosting projects…they are reliable and customer focused!”

Lee Tinsley, Virginia Department of Veterans Services “The Virginia Department of Agriculture and Consumer Services recently migrated all of its websites and web-facing applications to a new hosting and operations and maintenance functions to AIS Network through a new eGovernment contract. VDACS executed multiple agreements using the legacy contract over the course of more than a decade, resulting in the deployment of several dozen web sites and citizen and business services. Our agency was impressed by AISN’s professionalism and their ability to tackle and complete a challenging project within a very short time period.”

Cathy Nott, Virginia Department of Agriculture and Consumer Services

“AISN’s capabilities in secure, compliant managed hosting and its deep understanding of secure data center operations were critical to our needs. We began working with the AISN team to develop a detailed plan for the data center migration, identifying prerequisite activities and developing redundant risk mitigations to maximize success. We were impressed with their ability to migrate all of our data, including our production web hosting server, within a very brief time period.”

Bethann Canada, Virginia Department of Education

Highest Security & Compliance Standards Federal law and common sense dictate that sensitive information should be kept private and protected. AISN maintains the highest levels of security and compliance to serve our clients, who range from federal and state agencies to international pharmaceutical and financial services companies. For 23 years, we’ve made it our business to handle and protect the most sensitive data. We pass our audits every time, so that you can pass yours. An independent third party auditor regularly employs a comprehensive Risk Assessment process to certify that AISN has the policies, procedures, controls and equipment in place to ensure the security of client information. AISN continually invests in the most up-to-date security policies, procedures, infrastructure, and equipment to maintain ongoing compliance with multiple regulatory standards.

9



AISN maintains a written Privacy Policy that governs the collection, maintenance, use and dissemination of personally identifiable information (PII). As part of its overall compliance strategy, including compliance with FISMA, AIS has implemented the NIST

security control framework (800-53). These controls are reviewed annually by an independent third party as part of a comprehensive Risk Assessment process.

AISN has successfully completed a Federal Information Security Management Act (FISMA) Moderate Compliance Audit. FISMA is a federal security requirement of the utmost protection of cyber security. This verifies that AISN recognizes the importance of information security by following a tailored set of baseline security controls from NIST Special Publication 800-53; it documents the

physical, administrative, and technical safeguards AISN has implemented, the effectiveness of the AISN Risk Management Strategy, and how AISN’s controls achieve FISMA Moderate compliance.

The Health Insurance Portability and Accountability Act (HIPAA) sets the standard for sensitive patient data protection, and AISN’s audit program ensures that we stay abreast of the latest developments, including recent HIPAA Security Rule changes. Companies that deal with protected health information (PHI) and electronic health records (EHR) must have physical, network, and

process security measures in place and follow them to ensure HIPAA compliance. Covered entities (anyone providing treatment, payment & operations in healthcare) and business associates (anyone who has access to patient information & provides support in treatment, payment or operations) must meet HIPAA Compliance. Other entities, such as subcontractors and any other related business associates must also be in compliance. AISN takes the security and safekeeping of our clients’ Protected Health Information (PHI) and Electronic Health Records (EHR) extremely seriously. All of our hosting services are HIPAA compliant and include the high security required to safeguard your PHI/EHR data.

We strive to comply with HIPAA regulations by implementing and maintaining a multi-faceted, stringent Risk Assessment Process that takes into account the threats against PHI. AISN’s Risk Assessment Program contains the following elements:

Annual risk assessments Risk-based selection and implementation of controls Ongoing monitoring of controls Semi-annual testing and adjustment of controls Reporting to management for annual program update

10



AISN adheres to the industry standard known as the Payment Card Industry Data Security Standard (PCI DSS), which ensures the proper handling and security of cardholder information for the major debit, credit, prepaid, e-purse, ATM, and POS cards. The standard applies to all organizations that store, process or transmit cardholder data. AISN provides PCI compliant solutions and services for client

organizations engaged in the transmission of PII through our network. AISN maintains compliance with Self-Assessment Questionnaire C, and as an additional measure, this compliance is verified in our FISMA audits. Ongoing compliance measures include SSL Certificate Encryption, quarterly network scans by an approved scan vendor, server security monitoring and an annual self-assessment.

Operating within a Statement of Standards for Attestation Engagements No. 16 (SSAE 16) audited data center does not make the hosting company itself SSAE 16 compliant. Rather, our SSAE 16 Type II certification demonstrates that our company AND data centers have rigorous controls in place to maintain the highest level of information security. SSAE 16 auditing standards focus on the controls of a service organization that are relevant to an audit of a user entity’s financial statements. Federal regulations such as HIPAA, Sarbanes-Oxley and

Gramm-Leach-Bliley require organizations to audit the internal controls of their suppliers, including technology services providers.

AISN’s certification is based on continuous examinations performed by an independent third party auditing firm, which attests that AISN is in compliance with physical and electronic security measures, business continuity and disaster plans, systems and network accessibility, encryption systems and controls. Additional Compliances:

11



AISN Service Level Agreement (SLA) Our “Service Quality Guarantee” Is Our Premium SLA

At AISN, our Service Quality Guarantee provides unmatched customer service and support and offers better guarantees of reliability, scalability and performance over the Internet by combining a premium Service Level Agreement (SLA) with Service Quality Management. That's the power of AISN. We can guarantee these levels of reliability and performance, because we connect redundantly to and leverage major Internet backbone connections and use intelligent, performance-based routing technology to select a superior path to deliver your traffic.

Superior Response Time

AISN guarantees a response in 15 minutes or less to any network server alert that may occur. With 24x7x365 onsite network engineers providing coverage, you are assured of a superior and immediate around-the-clock response. Should a response take longer than 15 minutes, you will be eligible for a credit of 5% of your regular monthly fees for that month.

Latency and Packet Loss

While AISN proactively monitors latency and packet loss within its own network, we do not proactively do this for individual customers. If AISN becomes aware, through its own monitoring or by being alerted by a customer, that transmission latency in excess of 55 milliseconds (“Latency”) or packet loss in excess of one percent (1%) (“Excess Packet Loss”) is occurring between any two routers in the continental US, AISN will use reasonable efforts to determine and correct the cause of the excess latency and packet loss. If average packet loss exceeds 1% over a one-month period and the problem is on AISN’s LAN or WAN, customers will be eligible for a credit equal to one day on their monthly bill. Packet loss over the Internet will be calculated by averaging measurements between various points located in various represented geographies during a one-month period. If average latency exceeds 55 milliseconds over a one-month period, and the problem is on AISN’s LAN or WAN, affected customers will be eligible for a credit equal to one day on their monthly bill.

12



Network Uptime

AISN guarantees that our network will be available 100% of the time in a given month, excluding maintenance windows which are scheduled with the customer. Customers will be able to receive and transmit information from other portions of the Internet to the AISN network without “Downtime,” which is defined as a customer experiencing sustained packet loss of more than 50%. Customers who experience network downtime will be eligible for a credit of 5% of their monthly fees for each 30 minutes of downtime.

Power & HVAC

AISN guarantees that power and HVAC in our data centers will be functioning 100% of the time in any given monthly billing period, excluding scheduled maintenance. Customers who experience downtime due to power or HVAC failures will be eligible for a credit of 5% of their monthly fees for each 30 minutes of downtime.

Virtual Servers

AISN guarantees that all virtual servers including CPU, storage, and virtualization layer, will be functional. Should a virtual server fail, AISN guarantees that restoration or repair will be complete within one hour of problem identification. Should a virtual server not be restored to functionality within one hour, the affected customer will be eligible for a credit of 5% of their monthly fees for each hour of downtime in excess of the first hour.

Hardware

AISN guarantees that all server hardware components (including processor(s), RAM, hard drives, motherboards, NIC cards and related hardware) will be functional and will be replaced at no cost to you should they fail. Hardware replacement will be completed within one hour once AISN identifies the cause of the problem. Should a hardware failure take more than one hour from the time of problem identification, the affected customer will be eligible for a credit of 5% per additional hour of downtime.

13



Contact Us

Northern Virginia Office

8300 Greensboro Dr., Ste. 1100 McLean, VA 22102

Midwest Sales Office

1611 Colonial Parkway Inverness, IL 60067

Correspondence

P.O. Box 1697 Falls Church, VA 22041

By Phone

Main: 847.202.1400 Sales: 888.401.AISN (2476)

Support: 888-352-AISN Fax: 847.202.4460

Jay Atkinson, CEO

703.304.1523 [email protected]

Kurt Baumann, CTO

202.415.0088 [email protected]

Bill Peters, Director of Sales

888.401.2476 x. 123 [email protected]

14

Page Premier Provider of eGov Services - AIS Network · AIS Network 8300 Greensboro Dr., Ste. 1100,...

Documents

Transcript of Page Premier Provider of eGov Services - AIS Network · AIS Network 8300 Greensboro Dr., Ste. 1100,...