(NASIS) Requirements Definition Document - Bureau of Indian ...

NASIS Requirements Definition Document (RDD)
Version 1.0
17 February 2006
2.3.4 Recoverability
In the event that the system is unavailable to users because of a major system failure, the maximum time
period required for restoring function and data is 8 hours. The system must be capable of being restored
to a prior condition existing just prior to system failure.
In the event of destruction of the processing site, the backup site should be available within 12 hours of failure.
A Disaster Recovery Plan is required, and must be approved by BIA. It must be updated and tested annually.
2.3.5 Scalability
The current student population is approximately 47,000 students. The number of students is not expected to
change significantly. Access to NASIS by parents will increase the user population accordingly.
2.3.6 Adaptability
NASIS will be capable of evolving with technological developments. NASIS will employ open standards
and open source technology.
2.3.7 System Status Monitoring
In the event that NASIS is operated outside of BIA facilities, BIA shall have the ability to monitor the
status of the system via reports or dashboards. Data required by BIA includes operational status, number
of active users, number of sessions/users per day, number of open trouble tickets (cumulative and by
category), and general trouble ticket statistics.
2.3.8 Reliability
The minimum acceptable level of availability is 99.99%.
2.3.9 Capacity
The system must be able to store, provide access to, and generate reports from student records as needed.
2.3.10 Data Retention
All data for BIA schools must be retained permanently. Therefore, copies of the data must be furnished to BIA
at monthly intervals for data storage purposes if NASIS is delivered via an ASP.
All student records will be kept in the system a maximum of five years after graduation, or until the student
reaches age 27, at which time said records will be turned over to BIA for data storage.
All data furnished and turned over to BIA will be in a mutually agreed format which is, at minimum, SIF and
ODBC compliant such that BIA will be able to store and access the data at a later time.
2.4 Security
2.4.1 General
The data storage facility must ensure that the data is not visible for anyone outside of the IA Schools. This
requires the following:
• NASIS will have a capability for defining rights to data and functions.
• No other interface can be added to the system without prior approval and/or notification of BIA.
• NASIS and supporting contractor staff will comply with the Federal Information Security
Management Act (FISMA), and DOI and BIA information security policies.
11