Specifications include, but are not limited to: Scope: This standard applies to ASPs who provide services to EWU. ASPs must meet this standard to be considered to provide application services to EWU unless a requirement of this standard is specifically waived in writing by EWU. Standard General Description of Hosted Service Environment 1. Using the requirements of this document as a guide, the ASP shall provide a detailed description of the hosted service environment that describes the typical flow of data between the client computer and ASP networks and servers (including those of subcontractors), and the technologies and security measures employed. Areas to be addressed shall include: a) Security of networks, servers and facilities b) Data exchange methodologies c) Server platforms and operating systems d) Web Servers and databases used e) Application program development environment (development framework, programming languages, scripting languages used in the application) f) Directory integration capabilities g) Disaster recovery and business continuity provisions
