User Guide - Request Types

Check to see if funding is required; if funding is required, you must have funding to start this process and submit a request.

To understand high level timeframe estimates for purchasing and implementing your product, check to the product detail pages to review the specific uses that have been approved and whether the product is marked as “No VA Data”

• If a product is “No VA Data” that means your team will not be required to get a VA authority to operate (ATO) for security compliance (because the product isn’t using any VA data that requires these security documents); your team will only be required to do a VA Privacy Threshold Assessment (PTA) — which generally means this type of product can be implemented in 2-3 months, depending on purchasing timeline. (Note this is a general estimate and will vary.)
• Most products will use “VA data” and therefore need to be in compliance with all VA security and privacy requirements. By reusing a product that’s already “Approved” on the catalog, your team will save time because you can reuse that ATO for the same uses listed on the detail page. (If you plan to use the product in a way that differs from the described “Uses,” you will need to do some security work, but it will still be faster than starting security compliance work for a new product not listed on the catalog.
• The DTC team will help you navigate this process, but your team will complete the work with VA security and privacy experts, so please anticipate this in your team resource planning.

Fill out the cloud product request from the product detail page.

• This form should take 5-10 minutes to complete.
• Once you submit the form, you will receive a confirmation email with details about next steps.
• The DTC team will schedule a kickoff or consultation with your team per the details in your confirmation email.

Our team of expert technologists can help integrate your products to meet your needs. The DTC process can support your integration with just a few questions to get a better understanding.

You must have funding to start this process.

Fill out the integration request.

“Pending approval” means that a product has completed a majority of security compliance activities, and should be approved within 2-4 months; this is a general estimate. The entire security compliance process can take more than a year, so products marked “pending approval” will be ready for use at VA faster than requesting a new product.

Once the product is approved you will follow the same process as the first scenario.

Browse the catalog to see if there is a product that meets most of your needs. Reusing a product on the catalog will be faster, easier, and less expensive for your team.

If there is no product that meets your need on the catalog, and you have funding, please fill out the generic product request form.

Getting a new product fully compliant with all VA security, privacy, and other requirements will likely take more than a year. The entire process will require your team to work with the product vendor team to comply with VA security policies; this means the product will need an authority to operate (ATO) as well as external security controls (FedRAMP).

The DTC team will help you navigate this process, but your team will be required to do much of the work in collaboration with the vendor team.

Vendors will need to get “FedRAMP” compliant if they are not already compliant, so this will require costs for vendor.

Fill out a New Product Request:

• This form should take 5-10 minutes to complete.
• Once you submit the form, you will receive a confirmation email … with details about next steps.
• The DTC team will schedule a kickoff or consultation with your team per the details in your confirmation email.