60FF-1.002. Definitions

(1) The following terms as defined below are applicable to Chapters 60FF-1, 60FF-2 and 60FF-3, F.A.C.:

(a) Authorizing Official – An individual appointed by the Eligible User who shall assume one or several roles, and have the ability to exercise the secure and exclusive rights granted through those roles, in the CSAB System(s) on behalf of the Eligible User. Authorizing Officials shall have the authority to obligate funds on behalf of the Eligible User and to approve expenditures for communications services through their actions in the CSAB System(s) or by their receipt of uncontested electronic mail notifications from SUNCOM staff regarding changes to Customer services as reflected in the CSAB System(s). At least one Authorizing Official appointed by the Eligible User shall have the authority to establish other Authorizing Officials for the same Eligible User, thus granting the associated authorities, within the CSAB System(s). Some or all of the Authorizing Officials shall be knowledgeable about the Electronic Communications needs and conditions of the Eligible User.

(b) Backdoor – Any connection to a network outside of the State Intranet that directly or indirectly circumvents the State firewalls.

(c) Billing Data – Data, in standardized formats, established by the Department, used by the Department to charge Customers for the relative portions of SUNCOM Services they use.

(d) Business Objective – An operational or cost savings benefit expected from use of Network Equipment, Software or Services. The mere implementation, ownership or use of Network Equipment, Software or Services or Communications Devices shall not be considered to be a genuine Business Objective.

(e) Clearance Request – A request from a Customer, that is not a Required User, to implement a Network Solution that uses Internet technology and is not provided through SUNCOM.

(f) Communications Device – Any device or software that renders audio, video and/or data into Electronic Communications.

(g) Communications Purchase or Lease Authorization – The means that was used by Required Users to seek and obtain approval from the Department to purchase or lease communications equipment prior to establishment of Chapter 60FF, F.A.C.

(h) Communications Service Authorization and Billing System (CSAB Systems) – The Department system(s) for ordering SUNCOM Services, billing Customers for SUNCOM Services and the associated electronic repository of CSA and Billing Data that is available to Customers by accessing through the Web site http://SUNCOM.myflorida.com.

(i) Communications Service Authorization (CSA) – Order from Eligible User requesting a SUNCOM Service placed through the CSAB System(s), authorizing its installation/implementation and implicitly or explicitly acknowledging the associated Eligible User payment obligations. 

(j) Communication Service Provider – Entity providing communications services, circuits, hardware or software within the State of Florida.

(k) Connection – A link between two devices or networks to facilitate Electronic Communications.

(l) Customer – An entity that is a qualified Eligible User and has accepted access to the CSAB System, has ordered, retains usage of or is paying for a SUNCOM Service.  In instances where different entities order, use or pay for a specific SUNCOM Service, the using entity is considered to be the Customer.

(m) Customer’s Physical Network – All of the devices, software and circuits facilitating the Customer’s Electronic Communications in one location. The Customer’s Physical Network ends at the point(s) where it is connected to any circuits provided by SUNCOM, a Communications Service Provider or any public network.

(n) Custom Network Solution – A Network Solution that is designed for a Customer using communications and network resources not provided by SUNCOM.

(o) Department – The Florida Department of Management Services.

(p) Electronic Communications – The exchange of electronic information between networks and/or devices including voice, data, video and multimedia using physical, virtual and/or wireless transport methods.

(q) Eligible User – Qualifying user of SUNCOM Services including state agencies, county and municipal agencies, public schools and districts, private, nonprofit elementary and secondary schools (provided they do not have an endowment in excess of $50 million), state universities, community colleges, libraries, water management districts, state commissions and councils, and nonprofit corporations. Any entity ordering or using or paying for a SUNCOM Service must be an Eligible User.

(r) Exemption Request – A request from Required Users seeking Department approval to use Network Solutions that are not provided through SUNCOM.

(s) Maintenance – Activity to ensure the ongoing availability of a Network Solution through replacement of parts, software patches and associated services without expanding the scope, functionality, volume by more than 10% over the volume that was approved by the Department, or changes to the architecture of the Network Solution.

(t) Network Equipment – Any device or circuit that establishes Physical or Virtual Connections from within the Customer’s Physical Network to networks or devices outside of the Customer’s Physical Network to facilitate communications on behalf of Communications Devices or other Network Equipment. A Communications Device, regardless of its primary use, shall be classified as Network Equipment if it also performs this Network Equipment function.

(u) Network Service – Any service that includes establishment of Physical or Virtual Connections from within the Customer’s Physical Network to networks or devices outside of the Customer’s Physical Network to facilitate communications on behalf of Communications Devices or Network Equipment. This also includes any services to install, configure or manage Network Software or Network Equipment.

(v) Network Security – The protection of network topologies and associated services from unauthorized modification, destruction, or disclosure and the reassurance that the network performs its critical function without harmful side effects and retains its integrity, availability and predictability.

(w) Network Software – Any software that establishes Physical or Virtual Connections from within the Customer’s Physical Network to networks or devices outside of the Customer’s Physical Network to facilitate communications on behalf of Communications Devices or Network Equipment.

(x) Network Solution – Use of Network Equipment, Network Software and/or Network Services to meet a Business Objective.

(y) Network Solution Replacement Declaration – A commitment from a Customer to replace a Custom Network Solution with a SUNCOM solution by a specific date.

(z) Notice of Security Concern – A statement warning the Department that a condition exists that may violate the Department Security Standards.

(aa) Physical Connection – Hardware and/or circuit used to establish and/or maintain a Connection.

(bb) Portfolio of Services – The electronic publication located on the official Web site of the Department defining SUNCOM contemporary Services and providing the latest associated technical standards based upon current SUNCOM contracts, modern industry standards, new software and hardware releases, recent security threats, and/or technological improvements. The Portfolio shall also provide sample templates for requests and notices to the Department as they become available. The Web site address is: http://dms.myflorida.com/cits/portfolio_of_services.

(cc) Required User – All state agencies and state universities mandated to use SUNCOM in Section 282.103, F.S.

(dd) Sanctioned Filtering – A configuration of a Network Solution designed to protect a network from Unauthorized Activity that has been evaluated in accordance with the process under subsection 60FF-3.004(3), F.A.C., and approved by the Department in accordance with the standards under Rule 60FF-3.004, F.A.C.

(ee) Security Breach – Any instance where Florida government data or software is accessed or becomes accessible to unauthorized parties or instances where the resources owned or leased by Florida government entities, their partners or vendors are rendered inoperable, unavailable or impaired due to actions of an unauthorized party.

(ff) Security Exposure – Any condition that is in violation of Rule 60FF-3.004, F.A.C., Network Protection Standards for State Network, or may lead to a Security Breach.

(gg) State Intranet – That portion of the SUNCOM network protected from other networks or the Internet via the State Firewall maintained or sanctioned by the Department.

(hh) State Network – The entire SUNCOM offering including the State Intranet, extranet from the State Intranet, virtual private network connections through the State Intranet and all portions of the SUNCOM infrastructure regardless of whether it is leased or owned by the Department. This includes the private and public portions and the portion in between the private and public portions.

(ii) Sub-network – Network established by Customers within, or attached to, the broader State Network that is maintained by the Department.

(jj) SUNCOM Provider – Communication Service Provider authorized by the Department to sell, deliver, configure and/or maintain hardware, circuits, software and/or services under the SUNCOM name to SUNCOM Customers. SUNCOM Providers must be in compliance with all applicable laws, including rules or regulations promulgated by the Florida Public Service Commission and the Federal Communications Commission if the SUNCOM Provider is a Communication Service Provider regulated by these agencies.

(kk) SUNCOM Services – Network Equipment, Network Services, Network Software, Communications Devices or the configuration or management of any of these obtained, secured or provided by the Department and rendered into services that are made available to Customers by the Department or SUNCOM Providers under agreements with the Department.

(ll) System Failure – Any condition where Florida government Electronic Communications are impaired or inoperable.

(mm) Traffic – Flow of Electronic Communications over Network Hardware and circuits.

(nn) Traffic Monitoring – Information collected regarding communications over the State Network including destination/source address, volume, pattern, and date and time information that may be recorded and analyzed by the Department for any given session.

(oo) Unauthorized Access – Any sign-on and/or log-on activity accessing any part of the State Network and/or connected devices performed by an Unauthorized User.

(pp) Unauthorized Activity – Unauthorized Access to, Unauthorized Connection to, Unauthorized Traffic on and Unauthorized Use of the State Network.

(qq) Unauthorized Connection – Any virtual private network, private virtual circuit, extranet and/or point-to-point connection to the State Network that has not been disclosed to and recorded by the Department.

(rr) Unauthorized Traffic – Any communications transported across the State Network that is not directly relevant to state business and/or that is directed to or from an Unauthorized User.

(ss) Unauthorized User – Individual user not affiliated with and authorized by a current Customer of SUNCOM who is using the State Network.

(tt) User – Person authorized, through an user identification and password, to enter and/or see data in any Department of Management Services electronic system for establishing, maintaining, monitoring, auditing or accounting for SUNCOM services.

(uu) Virtual Connection – The configuration or use of software to establish and/or maintain a Connection.

(2) Other terms shall have their commonly understood meanings.

Specific Authority 282.102(9) FS. Law Implemented 282.102(2), (8), (12), 282.103, 282.104, 282.105, 282.106, 282.107 FS. History–New 6-25-08.