Security Scoop The 

July 2018

VA Enterprise Cloud Solutions

What is Cloud Computing?

Cloud computing is a model for 

enabling ubiquitous, convenient, ondemand network access to a shared 

pool of configurable computing 

resources (e.g., networks, servers, 

storage, applications, and services) that 

can be rapidly provisioned and released 

with minimal management effort or 

service provider interaction.

Learn more about cloud computing.

Looking for cloud resources to share 

with VA stakeholders? Visit the 

Cybersecurity Technology and Metrics 

(CTM) Security Center to download 

printable posters and infographics. 

Why is VA Migrating Applications to 

the Cloud? 

VA currently has applications operating 

in many environments including VA data 

centers and a variety of different cloud 

environments. Applications must manage 

and solve multiple issues such as security, 

network, Active Directory integration 

and others. Doing this on an application 

by application basis results in operating 

environments which are project-specific, 

siloed, redundant, and ineffective.

Migrating select applications to the cloud 

enables VA to leverage greater economies 

of scale provided by commercial Cloud 

Service Providers (CSPs) using a scalable, 

on-demand approach. Leveraging the 

cloud also enables VA to move away from 

a capital expense (e.g., buying lots of 

hardware) to an operating expense model 

(pay what you use, when you use it).

The Enterprise Cloud Solutions Office 

(ECSO) in the Enterprise Program 

Management Office (EPMO) has 

developed the VA Enterprise Cloud 

(VAEC), which will host all suitable VA 

cloud applications including new systems 

and existing applications migrating to 

the cloud. The ECSO team will work with 

project managers and business owners to 

determine an application’s suitability for 

the VAEC.

Use of the VAEC is required based on 

the VA Cloud Policy memo jointly issued 

by the OIT’s Demand Management and 
Strategic Sourcing offices. To support 

this effort, the ECSO, working with the 

Technical Acquisition Center (TAC), has 

developed cloud contract vehicles and 

artifacts to be used to acquire cloud 

services.

Cloud.gov is an alternative to the VAEC for 

projects with a Moderate security impact 

profile.

Need help getting started? Email ECSO 

with your question or comments: 

VAITECIntakeMailbox@va.gov, submit 

a service request, or stay up to date with 

the latest information by signing up for 

VAEC updates and critical information. 

What is VA Enterprise Cloud? 

The VA Enterprise Cloud or VAEC is a multivendor platform for the development 

and deployment of VA cloud applications. 

The VAEC provides a set of common, 

general support services (GSS) such 

as authentication and performance 

monitoring which each application can 

leverage, speeding and simplifying the 

development of new applications in or 

migration of existing applications to the 

cloud. The VAEC also implements many 

of the NIST, FedRAMP and VA-required 

security controls reducing the time each 

application should take to obtain a VA 

Authority to Operate or ATO.

Initially, the VAEC will include the two 

leading commercial cloud platforms: 

Amazon Web Services (AWS) and 

Microsoft Azure. Both have met stringent 

federal security requirements including a 

FedRAMP High authorization.

WITHOUT VA ENTERPRISE CLOUD VS. WITH VA ENTERPRISE CLOUD

vaww.portal.va.gov/sites/ECS/SitePages/VA-Enterprise-Cloud-VAEC.aspx

The VAEC will also include an on-site, 

VA Private Cloud, for applications with 

data sensitivity, technical architecture or 

performance requirements that require 

them to be hosted in an on-premises 

cloud. The VA Private Cloud is planned 

to be available in FY19 via a Service Level 

Agreement Modification (SLAM) with 

Information Technology Operations and 

Services (ITOPS). 

Security Scoop The

Juy 2018

Want to learn more about the VAEC? 

Check out the VA Enterprise Cloud FAQs 

or download the 

VA Enterprise Cloud Factsheet.
Security Scoop The

What General Support Services (GSS) 

will be provided?

To simplify support and development, the 

GSS provided to each cloud environment 

(initially AWS and Azure and eventually the 

VA Private Cloud) will be the same where 

possible. The initial GSS which will be 

offered can be found in General Support 

Services V1.0.

Additional support services are planned 

including certificate management, DNS, 

LDAP and application performance 

monitoring.

Get your new PIV card! 

Unless you recently replaced your PIV, all VA employee and contractor PIV cards 

expire on or before Aug. 6, 2018. Due to the large volume of requests for new cards, 

anticipate longer processing times and plan ahead to replace your PIV card early. 

Employees are required to have a PIV card to enter VA buildings and connect to the VA 

network as referenced in Appendix F of VA Handbook 6500 (Control IA-2, page F-87).

Follow these four simple steps to get your new card and to ensure continuous access to the VA network and VA systems:

1 2 3 4 CONTACT YOUR 

SPONSOR

If you are unsure of your 

sponsor, please contact 

vacohspd12pmo@vaco.

gov. Contractors will 

need their Contracting 

Officer’s Representative 

to initiate sponsorship.

ENROLL

Once you notify your 

sponsor, your local PIV 

Credential Issuance 

Facility will call you to 

enroll. They will take your 

picture and fingerprints.

PRINT

The facility will print your 

new PIV card, which will 

activate your certificates.

VERIFY

A fingerprint match will 

verify your identity. You 

will select a six-digit PIN, 

sign your acceptance 

agreement, and get your 

card.

Juy 2018

For more information, visit the PIV Card Reissuance website.

The Security Scoop

Read previous issues of