ARB Meeting Participant Names Project Technologies (Check all that apply) Application Development Server Radio IES / SAP Database – SQL Server Security (not Telecom) Desktop/Laptop/Tablet Database – Oracle Telecom – Data GIS Disaster Recovery Telecom – Voice Document Management DOH Help Desk Telecom – Security Identity Management Web/Domain Naming Telecom – Video Large Storage Requirements DOH Network Data Networking Other Mobile Application Type Specify: Intranet Internet Client/Server Hosting Location(s) (Check all that apply) Herr Street Managed Services Cloud (Azure/Amazon, etc) PACS Managed Services Lite
4b If yes, explain if the application will utilize enterprise reference tables for common data. 5a Have all reporting needs been identified? YES | NO | N/A 5b If yes, briefly explain the architecture of the reporting function. 6 Have all data elements needed to satisfy the reporting requirements been identified? YES | NO | N/A 7a Will all reporting needs be satisfied through the new system being proposed? YES | NO | N/A 7b If no, please explain any report generation that will be done outside of the system. 8 Has an ETL (Extract, Transform, Load) or similar process been setup for loading the data collected into the DOH Data Warehouse? YES | NO | N/A 9 Will the Department of Health own all of the data being collected? YES | NO | N/A 10 Will appropriate Department of Health staff members have direct access to the raw (record level) data. YES | NO | N/A 11 Does the project require data reporting that includes locational data (e.g. - latitude, longitude, county, minor civil division, census tract, census block group, etc.)? YES | NO | N/A 12 Does the project require locational data to be created and stored for internal and/or external reporting purposes? YES | NO | N/A 13a Does the project employ, or plan to employ, geospatial technologies, such as mapping or geocoding of address data? YES | NO | N/A 13b If yes, what technology will be utilized?
2a Will system implementation, administration and management comply with all privacy-related Management Directives that apply? YES | NO | N/A 2b If no, identify the specific Management Directives, justification for non-compliance and compensating controls planned. 3a Beyond CoPA ITP’s and Management Directives, do other privacy laws, regulations, legislation, executive orders, policies, agreements, standards, specifications obligations, MOU’s or other privacy-related governance requirements apply to the implementation, administration and management of system and data? YES | NO | N/A 3b If yes, identify specific laws, regulations, agreements, standards, etc. 4a Beyond Commonwealth ITP’s and Management Directives, will system implementation, administration and management comply with all privacy laws, regulations, legislation, executive orders, policies, agreements, standards, specifications, obligations, MOU’s or other privacy related governance requirements that apply? YES | NO | N/A 4b If no, identify the specific governance requirements, justification for non-compliance and compensating controls planned. Project Management Domain (Responses will be reviewed by the Project Management Office) ID Review Item Response 1a Have the required deliverables for this phase been completed, which includes the required business signoffs? YES | NO | N/A
22b If yes, will a detailed data dictionary with coding definitions be included? YES | NO | N/A 22c If yes, explain where the data will be housed and how it will be formatted and secured during the transfer. 23a Does the vendor supply source code to DOH? YES | NO | N/A 23b If yes, can the software be placed in an escrow account that the source code over to the Commonwealth in the event the company goes out of business or drops support for the product? YES | NO | N/A 24a Does the vendor have a model to estimate resource requirements for the recommended hardware configuration? YES | NO | N/A 24b If yes, please describe. 25a Does the system’s database require System Administrator level access? YES | NO | N/A 25b If yes, please explain why a lower level security role cannot be used.