Major Modification The system is undergoing a major change, development, or transition. ☐ Other Explain: Click here to enter text. ☐ The makes use of unique managed service provider <Information System Abbreviation> architecture layer(s). Information systems, particularly those based on cloud architecture models, are made up of different service layers. Below are some questions that can help system owners determine if their system is a cloud followed by specific questions to help system owners determine the type of cloud. Table 9.1. Determining a Cloud System Question (Yes/No) Conclusion Does the system use virtual machines (VM)? A no response means that system is most likely not a cloud. Does the system have the ability to expand its A no response means that the system is most likely not a capacity to meet customer demand? cloud. Does the system allow the customer to build A no response means that the system is an Infrastructure as a anything other than servers? Service (IaaS). A yes response means that the system is either a Platform as a Service (PaaS) or a SaaS. Does the system offer the ability to create A yes response that the system is a PaaS. databases? Does the system offer various developer A yes response means that the system is a PaaS. toolkits and Application Programming Interfaces (APIs)? Does the system offer only applications that A yes response that system is a SaaS. A no response are available by obtaining a login? means that the system is either a PaaS or an IaaS. The layers of the defined in this FedRAMP <Information System Abbreviation> Tailored Framework are indicated in 9.2, Service Layers Represented in this FedRAMP LI-SaaS Framework, which follows. Tailored Table 9.2. Service Layers Represented in this FedRAMP Tailored LI-SaaS Framework Service Provider Architecture Layers Software as a Service (SaaS) Major Application ☐
☐ Major Modification The system is undergoing a major change, development, or transition. ☐ Other Explain: Click here to enter text. The <Information System Abbreviation> makes use of unique managed service provider architecture layer(s). Information systems, particularly those based on cloud architecture models, are made up of different service layers. Below are some questions that can help system owners determine if their system is a cloud followed by specific questions to help system owners determine the type of cloud. Table 9.1. Determining a Cloud System Question (Yes/No) Conclusion Does the system use virtual machines (VM)? A no response means that system is most likely not a cloud. Does the system have the ability to expand its capacity to meet customer demand? A no response means that the system is most likely not a cloud. Does the system allow the customer to build anything other than servers? A no response means that the system is an Infrastructure as a Service (IaaS). A yes response means that the system is either a Platform as a Service (PaaS) or a SaaS. Does the system offer the ability to create databases? A yes response that the system is a PaaS. Does the system offer various developer toolkits and Application Programming Interfaces (APIs)? A yes response means that the system is a PaaS. Does the system offer only applications that are available by obtaining a login? A yes response that system is a SaaS. A no response means that the system is either a PaaS or an IaaS. The layers of the <Information System Abbreviation> defined in this FedRAMP Tailored Framework are indicated in 9.2, Service Layers Represented in this FedRAMP Tailored LI-SaaS Framework, which follows. Table 9.2. Service Layers Represented in this FedRAMP Tailored LI-SaaS Framework Service Provider Architecture Layers ☐ Software as a Service (SaaS) Major Application
APPENDIX-B-FedRAMP-Tailored-LI-SaaS-Template-2017-11-14-v4.0.docx