Hi,
I have a copy of a memo that I would like the Vista community to verify is legit before I start 'complaining' about this. If this is legit then I will be 'complaining' very very loudly indeed, but I wanted to make sure this is for real and system wide in the VA before moving forward. If you are a VA employee and do not want to go on-record about this, please email me privately from a non-va address and just let me know that you know the letter is valid.
The key phrase below that concerns me is:
No new or modified Class III software and no further modifications to Class I
software will be installed in the production environment unless: (essentially it is not Class III software)
Essentially this fully halts the compromise that has been made to allow local hospitals to continue to develop and deploy locally using Class III software as the mechanism. It fully destroys the collaborative model that created VistA in the first place.
In times past, useful software features developed at one hospital could be moved to another. The only existing mechanism for the collaboration today -was- the Class III development space. This essentially means that the VA has fully moved to monolithic centralized software control and design which will stop dead more than 30 years of software evolution. In the height of arrogance, this letter also presumes to label this centralization as 'establish and evolve the following programs'. It is exactly not evolution.
From Evolutionary Dynamics: Exploring the Equations of Life by Martin A. Nowak
http://www.ped.fas.harvard.edu/people/faculty/The main ingredients of evolutionary dynamics are reproduction, mutation,
selection, random drift, and spatial movement. Always keep in mind that
the population is the fundamental basis of any evolution. Individuals, genes,
or ideas can change over time, but only populations evolve.
-FT
--
Fred Trotter
http://www.fredtrotter.comDepartment of
Memorandum
Veterans Affairs
Date: May 26, 2009
From: Executive Director, OI&T Field Operations & Development (005OP1)
Thru: Deputy CIO, OI&T Enterprise Operations and Field Development (005OP)
Subj: Integrity of the VA Enterprise/Class III Software (WebCIMS #429478)
To: VA OI&T Field Operations and Developmental Staff
1. The quality of many of the services we provide to our veterans depends directly on
the availability of IT services; anything that compromises that availability reduces our
effectiveness.
2. Recently, outages have occurred that are directly traceable to the deployment of
Class III software 1 . While such software is developed to address specific needs
identified at the local, network or regional level and represents an attempt to improve
service, the unregulated deployment of software presents an unacceptable risk.
3. The management of Class III software is a complicated challenge where innovation
must be balanced with the need to protect the integrity of the enterprise and the
security of the information it stores. As such, cross-functional groups have been
assigned to establish and evolve the following programs. Updates on the progress
of these programs will be issued via the IT Field Operations Newsletter
http://vaww.itfo.portal.va.gov and follow-on policy actions.
a. A Field Development process will ensure field-developed solutions to address
local requirements meet national standards and are adequately documented,
reviewed, and tested prior to deployment;
b. The existing Class III to Class I process expedites conversion of Class III
software to centrally managed software;
c. The Innovation Program will provide a safe, supported environment where
new concepts can be developed/refined/tested;
1
Class III software is defined on the IT Field Operations portal:
http://vaww.itfo.portal.va.gov/resources/Knowledge%20Library/Class%201-3%20Definitions.doc
d. The implementation of Configuration Management, Change Management and
Release Management Programs will ensure that standardized processes are
employed to manage changes to the production environment.
4. In cooperation with VHA, a series of surveys is under way to identify existing Class
III software deployed on the VA production system. Each Facility CIO will coordinate
with the Facility Director to ensure full response to these surveys; data to be
collected includes the following:
a. Identification of the software, including modified routines, files, GUIs or other
components required to run this software (descriptive name/nomenclature);
b. Purpose of the software;
c. Date deployed;
d. Any approvals obtained prior to deploying the software; and
e. Impact if the software is removed from the system.
5. No new or modified Class III software and no further modifications to Class I
software will be installed in the production environment unless:
a. The software completes the established Class III to Class I process; or
b. The software completes the approved IT Field Development Process; or
c. The software is included in the list of exemptions approved by the VA IT
Executive Change Control Board.
6. No software will be removed from the production system without the agreement of
the affected Administration (VHA, VBA, NCA) and OI&T. Discussions are under way
to establish a process to support these Class III programs until such time as they are
not needed anymore, are converted into Class I programs, or are specifically
exempted from the Class III to Class I program. Class III programs that continue to
reside in the production environment will be fully documented and brought into
compliance with established programming standards.
7. Nationally approved and released patches/updates are not affected by this
memorandum.
8. Each Facility CIO will coordinate with the Facility Director to ensure that personnel
under their cognizance observe the above requirements effective the date of this
memo.
9. Questions related to topics addressed in this memorandum should be directed to
Kathryn Daly at
Kathry...@va.gov.
Ray Sullivan