What this code covers
Security and Compliance support delivered as a service, by subscription, or service contract. Includes support of security policies/controls, processes, measuring compliance of relevant legal/compliance requirements, to include Section 508, and responding to security breaches. Also provides support for IT Security systems providing Continuous Diagnostics and Mitigation (CDM) for real-time Cyber Security and protection such as vulnerability scanning, managing firewalls, intrusion prevention systems, and security information and event management (SIEM). Includes Disaster Recovery (DR) services to support DR policy, process and means, dedicated failover facilities and perform DR testing.
Includes
Software that is licensed for use over a defined period of time. This can also be referred to term, temporary, provisional, or short-term.
Excludes
The implementation actions defined by Disaster Recovery policy (e.g. building DR servers) are not included in the Disaster & Recovery sub-tower and are part of the respective towers where the actions take place (e.g. Compute, Storage, Network).
Notes
Software as a Service, Service Contracts, Subscription based software provisioning, and device rentals are considered services.