The guidance primarily focuses on Infrastructure as-a-Service (“IaaS’) cloud-based services and rarely focuses on other cloud-based services, such as Software as-a-Service (“SaaS”). The distinction between different types of cloud-based service is important because firms should have different considerations depending on the type of service they are procuring.

See above. For example, with SaaS offerings, DXC would expect the guidance to address issues such as: (i) updates and maintenance of applications and (ii) service level issues (such as response times for implementing patches). Providing guidance that distinguishes between various types of cloud-based services will help firms to better identify and contract for the service that meets their requirements.