121962 O3 Coast Professional Inc Attachment 1.xlsx

Instructions

Minimal Requirements

Required Responses

Coast understands the importance of protecting the sensitive information and data entrusted to our care. We limit employee access to information to only those who have a business reason to know such information. Coast requires a signed employee acknowledgment of the requirement to keep protected information private. Existing policies establish a procedure for the prompt reporting of the loss or theft of protected information.

All Coast offices and storage facilities that maintain protected information limit unauthorized access and are appropriately secured. Coast production, support, and systems facilities are under 24/7/365 monitored alarm, electronically monitored and controlled access card system, 24/7 camera surveillance, and all operations are contained inside physically locked door areas with stringent security password and access policies. Our database hardware is housed in a locking rack chassis located within a further access-controlled, restricted-entry data center.

Coast facilities have both physical and administrative controls to prevent unauthorized entry. Coast has 100% controlled access and requires all employees to wear a blue lanyard with a photo identification badge (around the neck only) at all times. Employees must utilize their key cards (badges) to enter the building and various doors within the facilities, providing both authorization and accountability. The following physical access controls are in place at each Coast facility:

Coast distinguishes itself from competitors by offering a unique combination of security, operational efficiency, training excellence, and a strong, employee-focused culture. These differentiators reflect Coast’s commitment to delivering superior call center services while ensuring compliance, security, and employee satisfaction. By leveraging a secure infrastructure, a proven training program, and a culture of continuous improvement, Coast consistently exceeds client expectations. Below are the key factors that set Coast apart from others in the industry.

Physical Security: Facility Visitors

Coast has extremely stringent policies regarding visitors at its facilities. Visitors are only allowed if they have a business purpose to be in the facility (interviews, maintenance, vending machine vendors, etc.). Visitors must have an escort at all times and are not permitted to bring cellphones into the building. The following visitor physical access controls are in place at each Coast facility:

Coast requires all visitors to sign in, present photo identification, and be escorted throughout its facilities at all times. Coast's visitor log captures the following information:

Coast keeps all visitor logs in a secured storage closet which only specific HR employees have access to. Coast keeps all visitor logs indefinitely.

Environmental Security Controls:

Network components are housed in an environmentally controlled data center at the Coast facility. The following environmental controls have been implemented to protect the system resources:

Security Overview

Coast’s commitment to security is a cornerstone of its operations. As a trusted call center provider for multiple federal agencies, Coast upholds the highest security standards required for large-scale contracts. With a security-first approach, Coast ensures that all employees undergo extensive background checks and vetting, which includes employment history verification, reference checks, and additional screening procedures. This thorough hiring process guarantees that all staff members meet strict security requirements and are prepared to handle sensitive data. In addition, Coast integrates internal compliance measures, including call monitoring and a dedicated compliance team, to maintain the highest standards of data protection.

To maintain compliance and data security, all employees completed annual Health Insurance Portability and Accountability Act (HIPAA) training, reinforcing strict adherence to regulations regarding Protected Health Information (PHI). Coast’s physical and network security measures further safeguarded sensitive data, ensuring compliance across all emergency response contracts.

Security Systems

Coast has developed a robust risk monitoring strategy focusing on the development of company audits, monitoring tools, and federal requirements. We utilize advanced tools to monitor our actions, including, but not limited to:

activity

Coast is proud of its efforts to audit, assess, and control our call center services to high standards of compliance, caller experience, and performance.

Network Security Controls

Coast has developed a robust risk monitoring strategy focused on the investment of monitoring tools, the creation of detailed reports, company audits, and a management oversight process to ensure our network security controls are compliant with caller protections and State requirements. We utilize Identity Services Engine (ISE) port switching and network segmentation capabilities to ensure Coast’s information systems are protected from unauthorized access from outside our network.

Data Encryption

Coast has invested heavily into the policies, procedures, and technologies used to secure the IT environment and data residing within it. All caller data is encrypted at rest and in transit. This includes encryption within our system software, Secure File Transfer Protocol (SFTP) servers, and file server where this data is sitting at rest. To access our data, Coast utilizes role-based access methodologies to permit staff access to only necessary data to perform their jobs. While data at rest encryption is important to us, we also work to make sure that all data that is transmitted, is encrypted during that transmission. Coast utilizes a file transfer product which allows Coast to receive data via secure methods such as SSH, SSL, and HTTPS. In addition, all data stored on our SFTP server is encrypted at rest and when in transit with 256-bit AESFIPS 140-2 validated encryption.

Transmit Personal Protected Information (PPI)

Coast will utilize our call center system, AWS, to capture and transmit PPI. This system is customizable through programable elements that allow our application development team to create tailored functionality based on our client’s requirements. In addition to PPI security at the system level, Coast provides employees with PPI handling training and processes that ensure human interaction with PPI is compliant. We discourage employees from writing any PPI down and require that any PPI is disposed of securely in one of our many secure shred bins. This hard copy documentation is routinely securely disposed of through our shred vendor who provides an attestation of destruction at every pickup.

Data Security

Our Data Storage and Retention Policy is intended to ensure all sensitive data is retained in full compliance with Coast’s business, legal, and regulatory policies. Data storage beyond the retention period specified by this policy and Coast’s contract with the client puts both Coast and its clients at unnecessary risk. In general, payment card numbers and associated cardholder data are stored for only six (6) months from the last payment, and all payment card and Social Security numbers are fully encrypted and stored on our databases, but only the last four digits of both are visible. Additionally, payment card information stored in the system is not accessible to staff. This retention period allows for potential charge backs within the six-month period. The quality control coordinator and system administrators are responsible for defining procedures to identify the electronic data that exceeds the retention period and to securely dispose of it. Such procedures must be consistent with the following:

• On-Line Electronic Data: Once stored data exceeds the retention period, it will be removed on a quarterly basis via an automated process. If an automated process is not available, the various Department Directors are responsible for conducting quarterly audits to ensure that stored data in excess of the retention period is securely removed.

• Backup/Removable Media: Backup or removable media storing cardholder data must be classified so it can be identified as confidential, inventoried and physically secured. System Administrators are responsible for reviewing media inventories on a monthly basis and securely disposing of cardholder data which exceeds the retention period.

• Paper Records: Paper reports containing cardholder data must be labeled so they can be identified as confidential and securely disposed of once there is no longer a business reason to retain them. Paper reports are physically secured (e.g. stored in a locked file cabinet) when not in use. On a quarterly basis, the Quality Control Coordinators are responsible for auditing files to ensure that there are no reports containing cardholder data in excess of the retention period.

• Secure Transportation: If transported, paper and/or electronic media must be sent via a traceable method and the System Administrator or Account Manager must provide written approval prior to transportation.

• Secure Disposal: To provide proper assurance that data is irrecoverable, the following disposal methods must be used:

o On-Line Electronic Data: Cardholder data stored in files must be wiped using a program approved by the Director of IT.

o Backup/Removable Media: Cardholder data must be destroyed beyond recovery by using a wipe program to delete files or via degassing or physically destroying the media beyond recovery. Removable media must be stored in a secure location until it has been destroyed.

o Paper Records: Documents containing cardholder data must be cross-cut shred, incinerated, or pulped. Employees are responsible for disposing of sensitive paper records, including those containing cardholder data, in the provided locked shred bins or alternatively flagging the box of documentation for shredding by an approved and licensed outsource provider.

The shredding firm maintains several secure shred bins at Coast. Each week, firm representatives arrive at our facilities to pick up the contents of the shred bins for secure on-site destruction. A Coast employee escorts the representatives to each shred bin to verify the contents are emptied and shredded. After the process is complete, the pickup log is signed by both the Coast employee and the representative. A copy of the log is kept on file.

Communications Security

At the edge of our network, Coast has deployed a redundant set of Cisco Adaptive Security Appliance firewalls with Intrusion Prevention System (IPS) modules to prevent intrusion attempts. All Coast devices, including the firewalls, are centrally logging all security logs for alerts and review based on the severity of the event type. We have dedicated security staff that is responsible for monitoring the firewall, IPS, and system logs. As an additional measure of security, Coast has deployed a Cisco Ironport device to help not only with email spam and virus blocking but also as a Data Leak Prevention (DLP) measure to ensure confidential caller information is not sent through non-secure communication channels, such as email. We have web filtering software in place to detect malicious websites as well as to control the sites that employees are allowed to access. Coast also undergoes annual third-party audits that validate our compliance with HIPAA, FISMA, ISO 27002, and many different state regulations and laws.

Communication with Employees

Coast utilizes various methods of communication to help ensure that employees understand their individual role, as well as company policies and procedures. Certain communication methods, such as floor meetings and companywide internal emails guarantee that significant events are communicated in a timely manner. Time-sensitive information is communicated verbally and by email to all employees. Company owners and team supervisors hold regular staff meetings as needed. Furthermore, employees receive written job descriptions that clearly define roles, responsibilities, and expectations.

System Access

Coast has implemented many layers of security which starts at the perimeter of the network and has implemented highly available firewalls with IPS/IDS modules that are configured to alert to Coast’s centralized Security and Event Log server. On local networks, Coast has implemented identify based network access and all systems are hardened to NIST best practices following strict group policy and hardening procedures. These procedures are completed on each system individually to ensure that specific applications are locked down according to best practices. For traffic leaving the network via email, Coast has implemented data loss prevention technology that prevents the unauthorized sending of emails containing confidential information or that contain information pertinent to HIPAA and other caller information.

Coast uses a centralized security log and file integrity monitoring system. Coast’s monitoring system alerts staff of system level file changes, as well as logs any activity happening across all devices in the environment, including firewalls, IPS’s, servers, applications and antivirus. Coast utilizes its centralized security logging system to aggregate the logs for all systems and devices so that a real-time view of all activity occurring within the environment can be generated. Coast has a list of alerts that are considered important and that trigger alerts to the IT team for review or investigation. These alerts include user logical access events, administrator activity, account modifications, and the detection of malicious code. In the event of a breach that requires a notification, Coast will follow the appropriate state or federal breach notification laws that pertain to the data in question.

Secure Data Transfer

Our firewall protects internal servers and internal/external access through layers of passwords and encryption at multiple levels of our network. To protect data, accessibility to menu features is allowed only by authorized personnel. Passwords are changed frequently to protect the integrity of the system. Passwords are a combination of alpha/numeric keys and cannot be reused. With assignment of password and PIN access and levels of access granted on a need-for-access basis, anyone who logs in is recorded and tracked by keystroke.

Externally, Coast uses its secure web portal to receive data from the State, and the State may access caller information, reports and other information through that portal. Coast creates a SFTP for uploading and downloading information via the online access. All access is encrypted and secure.

Innovative Technology

We have the knowledge and resources to expand our operations, implement new technologies, interface with existing systems, and maintain detailed information security protocol. This includes telephony, network, and server systems; a custom electronic operational environment; and information security resources. Coast will provide its services from its Geneseo, New York location that has a secured perimeter and badged employees. We conduct annual audits on our business practices and annual disaster recovery and incident testing. Additional information security controls include, but are not limited to:

Compliance Information Security Standards

Coast employs significant information security standards to ensure protection of our systems and the information entrusted to us by our clients. Coast complies with all federal and state requirements pertaining to data security and management of confidential information. This includes:

Coast has developed a management control process that focuses on the documentation, audit trail, and management control of our operations. This has culminated in a document library containing more than 300 policies, 125 procedures, and 600 work instructions. Policies represent company standards; procedures are high level overviews of our process; and work instructions cover detailed step by step instructions of work processes. These documents demonstrate Coast’s thorough development of a compliance system and information security standards.

As part of Coast’s data security and compliance requirements, third-party service provider due diligence is conducted on an annual basis. Part of that evaluation is verifying that all service providers comply with the same standards, laws, and regulations with which Coast maintains compliance.

Coast maintains a dedicated Information Security Team as part of our Information Technology department. This team is responsible for the management of company information security audits; the maintenance of information security documentation including the company’s disaster recovery/business continuity plans; the response to perceived or actual threat of potential data security issues; and the prevention, mitigation, and controlling of information security concerns.

FISMA Compliant

As a contractor for the Department of Education, Coast was required to follow FISMA, 44 U.S.C. § 3541, et seq, a federal law intended to strengthen information security systems and refine the transmission of electronic data. This law extends beyond the systems managed by the federal government to cover any third-party service providers who aid in the management of government data.

FISMA compliance is obtained by an agency submitting to a process in which the company’s complete IT structure, equipment and security controls are recorded, assessed, certified and accredited. Once FISMA compliance is achieved, regulations require annual monitoring to maintain compliance. Although our contractual obligations to the Department of Education was the catalyst for Coast to pursue compliance, all business lines benefit from working with a FISMA compliant agency due to the advanced security practices it requires.

This has allowed Coast to invest and focus on compliance. Through this process, we have created complete security protocols to monitor accounts. Additionally, our IT and compliance staff are the most talented, knowledgeable, and experienced professionals in the industry.

IRS and Federal Compliance

As a vendor to federal agencies, including the IRS, we comply with all relevant federal and state regulations governing data protection and compliance. This includes adherence to IRS Publication 1075/4812, which ensures the protection of taxpayer information. We also comply with HIPAA and other applicable regulations to ensure the highest standards of data security and compliance.

Health Insurance Portability and Accountability Act

Coast complies with applicable regulations and requirements of the HIPAA. To protect against the unauthorized access or disclosure of information, Coast has implemented multiple access protocols from an information security standpoint. This includes, but is not limited to:

Separate Computing Environments

In accordance with contract conditions, Coast standards, and regulatory requirements, Coast segments client data appropriately. This can be accomplished through various methods such as logical separation or physical separation. Coast has experience implementing both standards of data segregation and will comply with the State's expectation of data segregation. Coast will not co-mingle information with any other contract or data.

Printing/Shredding of Client Information

Coast only prints client information when necessary, and never in a space that is publicly accessible. We are vigilant about protecting any paper documents. We safely store all paper documents in a format that can easily be retrieved and reviewed. This is achieved by scanning documents and shredding the originals in house. Coast contracts for onsite shredding and destruction of all regular correspondence, documents containing personal information, and other sensitive documents.

Coast's shredding firm maintains several secure shred bins onsite. Each week, firm representatives arrive at our facilities to pick up the contents of the shred bins for secure, on-site destruction. A Coast employee escorts the representatives to each shred bin to verify the contents are emptied and shredded. After the process is complete, the pickup log is signed by both the Coast employee and the representative. A copy of the log is kept on file.

Coast understands the importance of protecting the sensitive information and data entrusted to our care. We limit employee access to information to only those who have a business reason to know such information. Coast requires a signed employee acknowledgment of the requirement to keep protected information private. Existing policies establish a procedure for the prompt reporting of the loss or theft of protected information.

All Coast offices and storage facilities that maintain protected information limit unauthorized access and are appropriately secured. Coast production, support, and systems facilities are under 24/7/365 monitored alarm, electronically monitored and controlled access card system, 24/7 camera surveillance, and all operations are contained inside physically locked door areas with stringent security password and access policies. Our database hardware is housed in a locking rack chassis located within a further access-controlled, restricted-entry data center.

Coast facilities have both physical and administrative controls to prevent unauthorized entry. Coast has 100% controlled access and requires all employees to wear a blue lanyard with a badge displaying photo identification (around the neck only) at all times. Employees must utilize their cardkeys (badges) to enter the building and various doors within the facilities, providing both authorization and accountability. The following physical access controls are in place at each Coast facility:

Document Handling Procedures

To protect against the unauthorized access or disclosure of information, Coast has implemented multiple access protocols from an information security standpoint. This includes, but is not limited to:

Coast protects client and caller information based on industry standards.

Physically Destroy Storage Devices

Coast has developed a data sanitization process that can properly destroy data contained on physical storage devices in accordance with standards of destruction. Coast will destroy physical media in accordance with Office of Information Technology Services Policy for Sanitization/Secure Disposal in NYS-S13-003.

System Access and Termination Procedures

Coast’s Human Resources and Information Technology departments work together through a ticketing system to address the granting, modification, and termination of employee system access.

Security Breach

Coast has never had a data security breach in our 49 years of business. If an event occurred, Coast would immediately inform the State of a successful or unsuccessful breach of security. Because Coast maintains facilities and satellite offices in different regions of the United States, key personnel will be able to immediately notify the State via email (or by the means specified in State 's contract with Coast) of any information that may impact their information or our ability to perform under our contract during a period of disaster. Coast’s Disaster Recovery, Business Continuity and Cyber Incident Prevention and Reporting plans are designed to identify the strategies, resources, and actions necessary to resume essential business functions for critical operational units (departments) in the event of an unplanned disaster, loss of facility, or breach of data security protocols.

In the event of a breach that requires a notification to claimants, Coast will follow the appropriate state or federal breach notification laws that pertain to the data in question. Coast has a team consisting of our Chief Compliance Officer (CCO) and General Counsel and our Chief Information Officer (CIO) and Chief Information Security Officer (CISO) who would work with the State to determine the appropriate steps to notify claimants, if required.

Language Line* Client Services 1 Lower Ragsdale Drive, Building 2 Monterrey, CA 93940

(800) 752-6096 *Anticipated vendor pending award

Coast is an equal opportunity employer. We prohibit discrimination against qualified individuals based on their status as protected veterans, disability, race, color, religion, sex, sexual orientation, gender identity or national origin. Additionally, our staff is experienced to effectively work with telephonic interpretation services to assist all claimants, including English Language Learners, users of text telephone (TTY) services, and claimants with diverse cultural and ethnic backgrounds. Coast employees are sensitive to the needs of claimants with limited English capabilities and are well-versed in quickly identifying when interpretation services may be necessary. Coast staff is empowered to engage these services as needed to deliver effective and compassionate service to all claimants.

See also V.C.3.E.v The IVR shall provide monitoring and reporting capabilities to track the status and workload of agents, enabling management and NDOL to oversee queue performance and analyze key customer service metrics. Describe in detail your Interactive voice response system. Include the total capabilities and any self-service options. Coast utilizes Amazon Connect, which is a comprehensive cloud-based contact center solution designed to support millions of customer interactions. It includes intelligent automation and self-service features such as natural language chatbots, IVR (Interactive Voice Response), and automated voice authentication for customers.

IVR Use Cases and Key Benefits:

IVR systems offer a cost-efficient method for managing high volumes of incoming calls. They can address common inquiries and perform routine tasks without the need for human agents. This allows customer service representatives to concentrate on more complex or urgent issues, even during peak call times. Integrating computing capabilities with telephony, AWS IVR enhances customer experience, streamlines support workflows, and minimizes wait times, ultimately boosting satisfaction.

Automatic Call Distribution:

The AWS IVR system manages incoming calls automatically. It offers customers options such as queuing, requesting a callback, or selecting a self-service feature. Calls are distributed evenly among available agents, optimizing resource use and improving overall efficiency.

Caller Identification:

In industries like finance or healthcare, verifying the caller’s identity is a necessary step before addressing their issue. When done manually, this can be time-consuming and may introduce security risks. AWS IVR streamlines this process by collecting caller line identification details such as PINs, passwords, account numbers, or biometric data for secure authentication before routing the call to an agent.

Customized Service:

The AWS IVR system can categorize and prioritize claimants to enhance the customer experience. High-priority customers or urgent issues can be pushed to the front of the queue. The system also directs calls to the appropriate department or agent and gathers information in advance to help agents provide faster, more personalized service.

Better Customer Service:

IVR offers self-service solutions that allow users to resolve basic issues independently. The system collects relevant details and directs calls accordingly, improving first-call resolution rates. Segmenting and filtering calls also helps minimize wait times, enabling more efficient large-scale service.

Reduced Operational Costs:

AWS IVR helps cut expenses by reducing the workload of live agents. It supports 24/7 service availability—including evenings, weekends, and holidays—without increasing labor costs. A single IVR system can serve multiple applications within large organizations. Custom IVR menus tailored to each application support cost-effective scalability.

Increased Security:

The IVR system enhances data security by verifying customer identity before granting access to sensitive information. This ensures only authorized users can access confidential data. Agents can also transfer users to the IVR for secure processes like password verification, removing the need to handle such information directly. The system validates credentials like PINs or passwords without human involvement.

Improved Analytics:

IVR systems capture detailed call logs for reporting, auditing, and analytics. These insights can be used to optimize future customer interactions, refine IVR menu options, and address service gaps. For example, if many users abandon calls after several menu layers, routing them to a live agent sooner can improve satisfaction.

Telephone Network:

The IVR is compatible with standard public switched telephone networks (PSTN), allowing calls to be routed through traditional phone lines. It also works with VoIP networks, enabling call handling over the internet.

TCP/IP Network:

The IVR system connects via corporate networks to the application server or contact center software. Cloud-based IVR options are also available, facilitating communication between the telephone system and the cloud over standard network infrastructure.

IVR Application Server:

The AWS IVR application server hosts software for key features like DTMF recognition, speech-to-text, text-to-speech, and voice recognition. It interfaces with core systems to automate tasks. For example, when customers call to check flight status, the IVR system accesses flight data and responds without human assistance. Cloud contact center platforms provide this IVR functionality as a managed service.

Types of IVR Workflows:

Administrators can create IVR call flows using the software’s interface. While earlier systems relied on XML-style markup, modern IVRs use visual tools with drag-and-drop functionality for easy design. The three main IVR menu styles include:

1. Touch-Tone Replacement

This approach relies solely on DTMF signaling. Pre-recorded prompts instruct users to press numbers corresponding to specific options. For instance, “Press one for English, or two for French.” This method is limited to predefined numeric selections and doesn’t allow freeform verbal responses.

2. Directed Dialogue

Directed dialogue menus offer users specific verbal prompts, such as “Say ‘flight status’ or ‘flight time’.” The system proceeds only if the response matches one of the expected phrases. Otherwise, it asks the user to repeat or restarts the prompt.

3. Natural Language

These advanced IVRs use speech recognition and natural language processing to interpret user input. With a defined grammar and recognition capabilities, the system extracts important information from varied customer responses. Despite requiring more processing, natural language IVRs are more efficient and often resolve issues more quickly than traditional systems.

We currently have three (3) full-time Trainers and one (1) full-time Training Lead. Training class size is based on the needs of our different lines of business. There are normally five (5) to 10 trainees per class. Our organization conducts instructor-led and module-based training. Our training differs from ad hoc by allowing our trainers to pinpoint trainees who may need more one-on-one training, and our training is hands-on. This hands-on training allows our trainees to feel more confident in their skills and helps them develop critical thinking and problem-solving skills. Coast validates proficiency throughout training by requiring trainees to complete multiple quizzes after each topic is covered and a final test. We also do in-training gamification. This allows trainers to gauge if trainees need more assistance in certain areas of the training. Quizzes and final tests require a score of 80% to pass, and all federal tests require a score of 100%.

Training Delivery Methods

Coast’s training program, both new hire and ongoing, accommodates a full range of learning styles (what is most effective for each person) and embraces current technology advancements. We understand that everyone learns differently, and our Training Team develops conscientious techniques that accommodate all learners. Training is conducted through one-on-one intensive sessions, videos, in-person role-playing exercises, quizzes, voice recordings, interactive learning games, and a mix of media and methods that includes:

New Hire Training

Coast’s new hire onboarding program combines Human Resources (HR), Compliance, and Operational training to provide employees with the tools, knowledge, and support to be successful agents for our clients. Our new hire training objectives prepare staff for a successful career. We understand our staff is our most important asset, and their continual development is a top priority.

To ensure your needs are fully met, when hired, all Coast agents must attend an intensive four-week hands-on training program. This training encompasses all relevant regulations and their application, state laws and the rights, responsibilities, options of the caller, accessing and operating our system, tactics training, and daily routines. Full understanding and compliance are achieved on an ongoing basis with mentoring and monitoring to ensure employee success.

Compliance Training

Compliance training is provided continuously throughout employment, beginning at the time of hire, then at regular intervals, and, on rare occasions, when corrective action is necessary. The satisfactory completion of testing is a prerequisite for an agent to advance from new hire training. Subsequently, all agents must take part in yearly training related to Coast’s industry, including the Privacy Act and cybersecurity. In addition to these formal Compliance training requirements, all staff attend weekly floor meetings to discuss any regulatory changes or updates.

Ongoing Training

Coast employees undergo Security Awareness training semi-annually and are required to sign a statement indicating that training has occurred, as well as pass a quiz. This training is required of each employee, not just agents, as any employee of an agency could potentially have access to sensitive data in various formats.

Methods for Keeping Staff Up to Date

Coast takes pride in creating effective and professional agents. As industry requirements change, training is provided, and agents are kept in the information environment with access to updated laws, regulations and policies. When Coast adds a client, their assigned teams are briefed on the specifics of that client’s program and expectations. They become familiar with its location, culture, portfolio, staff, needs, and goals.

Coast believes in the consistent training of all employees, in part, due to the constant changes in the call center industry. There is always more to learn and skills to hone in striving for excellence. At Coast, we work hard to ensure our agents have the most up-to-date information available, providing ongoing training in-house, access to teleseminars and webinars, exposure to industry related publications, proven mentors, and active participation in simulated scenarios.

Learning Management System

Coast has implemented processes to ensure employees receive the necessary training to perform their roles effectively. Each department within the company is responsible for managing its own training plan, tailored to the specific needs and requirements of its respective teams. To facilitate standardized training and compliance, Coast utilizes an LMS that is implemented across the organization. The LMS enables the assignment of relevant training courses to employees based on their roles and responsibilities.

Through the LMS, employees can access and complete their assigned courses, and their progress, results, and outstanding training requirements are tracked and monitored.