What if my high-risk procurement is cloud-based/SaaS?
If any component of your high-risk IT solicitation is for cloud services, you will need to obtain an enterprise cloud oversight service (ECOS) assessment form, which you can access on the VITA service portal: https://vccc.vita.virginia.gov/vita.
Search for “Cloud Service Assessment” and then scroll to the bottom of the page to “Attachment for 1-1003 – Appendix A” and download the form. The ECOS assessment must be included as an attachment to your high-risk IT solicitation, and completed by offerors per the instructions in your request for proposal (RFP).
Contact scminfo@vita.virginia.gov for access to the appropriate cloud terms and conditions.