CSD-RT RFP Recordkeeping_Administration Services Response 3-

This report is intended for use by the management of the Variable Annuity Life Insurance Company ("VALIC") and its subsidiaries.

VALIC Retirement Services Company ("VRSCO") and VALIC Financial Advisors, Inc. ("VFA"), its user entities, and the independent

auditors of its user entities, and is not intended and should not be used by anyone other than these specified parties.

Back to TOC

Click

VALIC

.com 42

Database Administration

V-System

TheMainframe DBA services teamperforms database administration for V-System. CTO owns the database

administration software (IMS, DB2, and all related utilities) and is responsible for obtaining it from the vendor and

installing it. At the request of VALIC, CTOwill acquire new releases of the software and perform configuration and

initial testing. Once initial validation is complete, CTO installs the database administration software and/or utilities in

a test environment and then VALIC completes the testing. Application DBA support is provided byMphasiS DBAs.

They work with application development teams on projects to design and develop new data structures, support IMS

and DB2 DBA process, as well as monitor and optimize the database access and performance.

Distributed Applications

Distributedapplications are supportedbyOracledatabaseswith the exception that theUVTapplication is supportedby

SQL database. Extracts fromthemainframeV-Systemdatabases and fromotherVALICsystems are runeachnight, and

the extract files aredownloaded to the LAN. Hardware, operating systemconfigurationand storage areprovidedbyAIG

Global Services. VALICDBAprovides storage requirements and layout tobe configured. AIGGlobal Services acquires

and installs thedatabase administration software. VALICDBAconfigures thedatabase administration software for the

application.

The VALIC DBA group designs, implements, monitors and tunes the physical databases, resolves technical

problems, and supports technical and operational staff in the use of the databases. VALICmanagers perform

annual reviews of Oracle and SQL database user access by reviewing current user profiles/privileges. A list of

corrections is prepared and forwarded to the security administrator for processing

(13.17)

. Database user access

requests are initiated and approved via the use of a Lotus Notes database. New user access requests to the Oracle

and SQL database are initiated and approved by appropriate VALICmanagement

(13.9)

. The DBA also works

with the system development staff on projects to design and develop new data structures, queries, and processes

and to optimize application programs accessing the databases.

The DBAmanager is responsible for monitoring database activity. Oracle and SQL database activity is monitored

daily to detect inappropriate activity within the database

(13.3)

Access is granted to appropriate personnel based on job responsibilities and must be approved by a manager

(13.11)

. Access to domains is approved in a Privileged Access Request (PAR) form and submitted via Service Now

to the Security team or submitted via a Service Now request to CTO for R1-Core servers. Users with privileged

access to the operating system are reviewed on an annual basis for appropriateness. Exceptions are researched

and resolved

(13.16)

SAP

The SAP application is supported by Oracle Databases which are administered by the SAP Basis team. The SAP

DBA acquires, installs, and configures the database administration software.

The SAP Basis group designs, implements, monitors and tunes the physical databases, resolves technical

problems, and supports technical and operational staff in the use of the databases. The SAP Basis group also

works with the SAP system development staff on projects to design and develop new data structures, queries and

processes, and to optimize application programs accessing the databases.

III. Description of the VALIC Defined Contribution Plan Administration System