24-RQ150385-KR- College Readiness -Addendum1.pdf

North Carolina Solicitation Addendum Version Date: 11/2021

Page | 1 of 2

SOLICITATION ADDENDUM

Issuing Agency: North Carolina Department of Public Instruction

Solicitation Number: 24-RQ150385-KR

Solicitation Description: College Readiness Assessment

Solicitation Opening Date and Time:

October 7, 2026, at 10:00 AM ET

Addendum Number: 1

Addendum Date: September 24, 2026

Purchasing Agent: Krystle Rice

THIS ADDENDUM IS REQUIRED TO BE RETURNED WITH THE PROPOSAL RESPONSE, IF THE ADDENDUM IS NOT RETURNED, THE BID SHALL BE DEEMED NON- RESPONSIVE AND SHALL NOT BE EVALUATED

FURTHER.

1. The Solicitation is hereby modified as follows:

Modification # Solicitation Section

Current Solicitation Language

Updated Solicitation Language

1.0 Anticipated

Procurement Schedule

Offer Opening Deadline:

October 7, 2026

Offer Opening Deadline:

October 7, 2026, 10:00 AM ET

2 3.4.19 Grade Eighth and Tenth Diagnostics Test

3.4.19.1 Describe how your

solution offers a diagnostic test in the eighth grade that aligns to the nationally norm-referenced college admissions test adopted by the State Board through the competitive bid process pursuant to N.C.G.S. § 115C-174.11(c)(4).

3.4.19.1 Describe how your

solution offers diagnostic tests in the eighth and tenth grades that align to the nationally norm-referenced college admissions test adopted by the State Board through the competitive bid process pursuant to N.C.G.S. § 115C-174.11(c)(4).

3 3.4.20 Grade 11 College Admissions Test

N/A 1. Describe how your solution provides a nationally norm-referenced college admissions test adopted through the State Board though a competitive bid process pursuant to N.C.G.S. § 115C-174.11

2. Describe how your solution’s results will provide NCDPI and the student with the student scores.

4 ATTACHMENT D:

COST FORM

Include the description, details on pricing, billing/invoicing, how home school tests and/or assessments will be differentiated from public school tests and/or assessments, details of administration sites and online accessibility, and ordering and reporting (separate from state’s contract) details. The Vendor ensures that the state is only charged once if a student tests twice

3.4.21

HOME SCHOOL TESTS

Vendor shall include the following in its proposal response:

Include the description, details on pricing, billing/invoicing, how home school tests and/or assessments will be differentiated from public school tests and/or assessments, details of administration sites and online accessibility, and ordering and reporting (separate from state’s contract) details. The Vendor ensures that the state is only charged once if a student tests twice.

5 ATTACHMENT D:

COST FORM

Retesting opportunity

When a student is interrupted during an online administration and retakes the assessment on a different day, describe if there will be fees and to whom.

3.4.22

Vendor shall include the following in its proposal response:

RETESTING OPPORTUNITY

When a student is interrupted during an online administration and retakes the assessment on a different day, describe if there will be fees and to whom.

6 ATTACHMENT D:

COST FORM

Optional Assessments or Assessment Configurability (3.4.15)

Grade 8 Diagnostics Test is not optional

7 ATTACHMENT D:

COST FORM

Assessments Please see page 3 for the revised Attachment D: Cost Form; the Vendor shall submit the revised cost form with its proposal response.

ATTACHMENT D: COST FORM

Item Description Approximate Number of Students to be Tested (# of Students)

UNIT PRICE (per student test scored)

TOTAL PRICE

(Unit Price x Number of Students)

Test One (Grade 11 College Admissions Test)

125,000

Test Two (Grade 10 Diagnostic Test)

Test Three (Grade 8 Diagnostic Test)

Total Extended Price (Items 1-3)

QUESTIONS AND ANSWERS BEGIN ON THE FOLLOWING PAGE

2. The following questions and answers are provided as an addendum to the solicitation.

Question

Document Section

Vendor Question State’s Response

1 Contract Structure Section 2.6, Page 7

Does the State currently anticipate a single statewide award, multiple awards by functional area, or a prime contractor with subcontractors?

If partial or multiple awards are contemplated, please identify the functional areas that may be awarded separately.

The State anticipates a single, statewide award.

2 Grade 8 Scope Sections 2.1 and 3.4.19, Pages 6 and 25; Attachment D Cost Form

When does NCDPI expect to determine whether funding is available for the Grade 8 diagnostic assessment, and should vendors price Grade 8 as a separate optional component?

Timing expectations will be determined during evaluation process. Vendors should price grade 8 as an itemized cost included in the assessments required for this RFP.

See Modification 5.

3 Volumes / Concurrency Sections

3.4.1.5 and 3.4.18.3, Pages 14 and 24

Please provide the expected number of students, schools, districts/PSUs, testing sessions, peak concurrent users, and peak concurrent test submissions by grade and assessment windows for capacity planning and pricing to put together the best and most efficient plan for this organization.

Estimated current enrollment for requested grade levels is between 115,000-125,000 students. Vendor should propose testing windows that allow the State flexible options.

4 Testing Windows Section 7.15.3, Page 36; Sections 3.4.2 and 3.4.18, Pages 15- 16 and 24-25

Please provide the anticipated annual testing windows, expected duration per grade, make-up/retest windows, and any blackout or maintenance restrictions.

Refer to the NC Operational Testing Calendar for guidance located on the NCDPI website here - download

5 GovRAMP Section 3.2.2(d), Pages 9-10

Please confirm the minimum acceptable security evidence at offer submission for a product that does not yet hold GovRAMP Authorized status: Security Snapshot Score only, or both the score and complete Snapshot Matrix?

For products that are not currently GovRAMP authorized, vendors are required to provide both the letter from the GovRAMP PMO with their snapshot score and the complete Snapshot Matrix. Prior to contract award, the State may, in its discretion require the Vendor to provide additional security documentation (see Section 3.2.2. Additional Security Documentation).

6 GovRAMP Section 3.2.2(e), Page 10

Please confirm whether a current FedRAMP Rev. 5 Moderate authorization will satisfy the Restricted requirement at award, and whether the State will require GovRAMP Fast Track pursuit in all such cases or only at NCDPI/NCDIT discretion.

If the Vendor holds a FedRAMP Rev.5 authorization at the time of award, the State may require GovRAMP Fast Track at their discretion.

7 GovRAMP Section 3.2.2, Pages 8-10; DIT Terms, Pages 56-57

For a multi-party solution, must each SaaS, reporting, support, proctoring, and integration component independently meet the Restricted GovRAMP requirement, or may components be covered within the prime platform authorization boundary?

Please refer to the GovRAMP Verification Boundary Guidance, which can be found in the GovRAMP Document Library here:

https://govramp.org/document-library

8 GovRAMP Section 3.2.2(d), Pages 9-10

Will the State accept a proposed platform that enters the GovRAMP Progressing Snapshot program after award and achieves GovRAMP

The vendor is required to meet the requirements documented in Section 3.2.2.

https://www.dpi.nc.gov/nc-operational-testing-calendar/download?attachment https://govramp.org/document-library

Authorized status within 21 months, provided no State data is transferred until enrollment requirements are met?

9 Licensing Section 3.1.5, Page 8; Section 7.4, Page 33

Does the State prefer a direct license with the LMS/assessment platform provider, or may the prime vendor include platform subscription licenses and support within the prime contract and cost proposal?

The State anticipates awarding a single contract for all deliverables.

10 Licensing Section 3.1.5, Page 8

Please identify any existing statewide licenses, enterprise contracts, identity services, reporting tools, or integration platforms that NCDPI expects the vendor to leverage.

Vendors are encouraged to leverage applicable State enterprise contracts and services where doing so provides best value, as described in Section 3.1.5 and the NCDIT Vendor Resources referenced in the RFP.

No specific reporting, application platform, cloud platform, or integration product is mandated beyond the requirements stated in the RFP. Vendors should identify any State enterprise agreements or services they propose to leverage and clearly identify all additional products, licenses, or services required by their solution.

Vendors should also describe the proposed solution’s integration points and methods for inbound and outbound data exchange, including support for external reporting, downstream analytics, operational data feeds, APIs, standards-based interfaces, and other integrations that may be required to exchange data with NCDPI or other authorized State systems.

11 IAM / NCEdCloud Section 3.3.3, Pages 11-12

Please confirm the preferred NCEdCloud provisioning and authentication method for each user group and whether SAML auto-provisioning is mandatory or data synchronization/LDAP may be used where appropriate.

NCDPI does not require a single provisioning method for all use cases. As described in Section 3.3.3, SAML is the preferred authentication approach for NCEdCloud-integrated applications. Account provisioning and lifecycle management may be supported through SAML-based auto-provisioning or automated data synchronization, as appropriate to the proposed solution.

Vendors should describe the recommended integration approach, including provisioning, authentication, role/attribute mapping, and de-provisioning.

12 IAM / NCEdCloud Section 3.3.3.1 - 3.3.3.2, Pages 11-12

If NCDPI decides on a SSO system via NCEdCloud, does NCDPI prefer real-time SAML auto-provisioning upon first login, or near-real-time automated batch synchronization (DSS/LDAP) from the state Student Information System (NCSIS / Infinite Campus) for pre-populating ~125,000 student accounts per grade band?

NCDPI does not prescribe either just-in-time SAML provisioning or batch/data synchronization as the exclusive method.

Vendors should propose the approach that best supports secure, scalable statewide administration while meeting the NCEdCloud integration requirements in Section 3.3.3.

The proposed approach should address initial provisioning, updates, de-provisioning, scale, and operational support.

13 IAM / NCEdCloud Section 3.3.3, Pages 11-12

Who will provide NCEdCloud test credentials, integration endpoints, attribute mappings, test data, and acceptance testing support, and when will these be

NCDPI Project Manager will coordinate with the awarded Vendor and appropriate stakeholders to plan all integration and acceptance testing, including the provision of necessary test credentials, integration information, attribute mappings, test data, available to the awarded vendor?

and testing support, as applicable. The timing and availability of these items will be established during implementation planning following contract award and will depend on the award date and agreed-upon implementation schedule.

NCDPI, in coordination with its IAM/NCEdCloud service team and other applicable technical teams, will provide or coordinate the necessary integration information for the awarded Vendor, including applicable test credentials, integration endpoints, attribute mappings, and integration testing support. Specific test data, environments, roles, responsibilities, and availability dates will be established as part of the post-award implementation plan.

Vendors should identify in their proposal the IAM integration dependencies, required attributes, test-environment needs, technical prerequisites, and acceptance criteria necessary to support their proposed integration approach.

14 Integration Sections

3.3.4 and 3.3.7, Pages 12-13

Please provide an inventory of required inbound and outbound interfaces, system owners, standards, APIs, expected file formats, exchange frequency, volume, validation rules, and error-handling requirements.

NCDPI has not prescribed a complete interface inventory beyond the integration and data exchange requirements identified in the RFP. Known integration domains include identity and access management/NCEdCloud, assessment registration and roster data, score and reporting data exchange, and other authorized State or NCDPI systems required to support administration, reporting, analytics, and downstream data use.

Vendors should describe all required inbound and outbound integration points for their proposed solution, including supported standards, APIs, file-based exchanges, data formats, frequency, expected dependencies, validation/error-handling capabilities, and any proprietary integration requirements. Detailed interface specifications, system ownership, mappings, schedules, and acceptance criteria will be finalized with the awarded Vendor during implementation.

15 Data Migration Section 3.3.6, Page 13

What historical student, assessment, school, user, configuration, or reporting data must be migrated, and will NCDPI provide source extracts, data dictionaries, quality rules, and record counts?

None

16 Reporting / Score Files Section 3.4.5, Pages 17-18

Please provide sample student, school, district, and State reports, dashboard requirements, required score-file layouts, data dictionaries, delivery methods, and required file formats.

Vendors should determine an appropriate response based on specifications and requirements outlined in the RFP.

The proposed solution should provide the assessment-specific reporting and analytics capabilities described in Section 3.4.5, including student-level reports, school and district reporting, operational reports, reconciliation information, and aggregated dashboards. Specific report layouts and configuration requirements will be finalized with the awarded Vendor during implementation.

In addition to reporting provided within the solution, NCDPI requires the ability to extract and exchange assessments and related data for authorized downstream reporting, analytics, accountability, longitudinal analysis, and other enterprise data uses outside of the proposed solution. Vendors should describe available score-file formats, data dictionaries, APIs, bulk data exports, delivery methods, metadata, and other mechanisms that support reliable and automated downstream data exchange with

NCDPI.

Vendors should identify any limitations, additional licensing, proprietary formats, or technical dependencies associated with accessing or using State data outside of the proposed solution.

17 Reporting / Reconciliation Sections 3.4.5.3.1- 3.4.5.3.3, Page 18;

Section 7.15.5, Page

Please define the reconciliation workflow, responsible NCDPI/PSU roles, error-correction windows, approval steps, and timeline between testing completion, final score-file approval, and report release.

Vendors should determine an appropriate response based on specifications and requirements outlined in the RFP.

The detailed reconciliation workflow, roles, correction windows, and approval schedule will be finalized with the awarded Vendor during implementation. The proposed solution must support the reconciliation and final score-file review requirements identified in Sections 3.4.5.3.1–3.4.5.3.3.

Vendors should describe their proposed workflow for identifying and resolving discrepancies, tracking corrections and approvals, maintaining an audit trail, validating completeness and data quality, and producing the final authoritative score file for NCDPI acceptance.

Following NCDPI acceptance, the approved score data must be available for downstream State data processing, reporting, analytics, accountability, and other authorized uses.

Vendors should describe how the final approved dataset is distinguished from preliminary or unreconciled data and how the approved dataset can be securely transmitted or accessed by NCDPI.

18 Reporting / Analytics Section 3.4.5.2, Page

Please identify the required comparison populations, benchmark levels, longitudinal periods, demographic or subgroup views, drill-down capabilities, and item/domain analytics expected in the dashboards.

Vendors should determine an appropriate response based on specifications and requirements outlined in the RFP.

The proposed solution should provide assessment-specific analytics appropriate to the intended users and use cases described in the RFP, including student, school, district, and State-level views, diagnostic feedback, appropriate comparison groups, and drill-down capabilities.

Vendors should describe the comparison populations, benchmark levels, longitudinal views, subgroup analyses, item/domain analytics, and drill-down capabilities available within the proposed solution.

In addition, the proposed solution must support downstream access to the underlying assessment data and related metadata so that NCDPI can perform broader longitudinal, cross-program, accountability, and enterprise analytics outside of the vendor platform.

19 Content / Psychometrics Sections 3.4.1.2 and 3.4.19, Pages 14 and

May vendors propose an assessment instrument, content license, and psychometric model delivered through a separate SaaS platform, provided the combined solution supplies all required validity, reliability, norming, alignment, and scoring evidence?

Yes, vendors may propose a solution composed of multiple products, platforms, or licensed components, provided the combined solution meets all applicable RFP requirements.

The Vendor must clearly describe the architecture, component responsibilities, data flows, integration points, security and authorization boundaries, licensing dependencies, support model, and how the combined solution operates as a cohesive service.

The Vendor remains responsible for demonstrating that the proposed assessment solution, as implemented, satisfies all applicable validity, reliability, norming, alignment, scoring, security, accessibility, and operational requirements.

20 Content / Psychometrics Section 3.4.1.2, Page 14;

Section 2.1, Page 6

Please specify the required recency, population, sample size, and independent-review expectations for validity, reliability, national norming, equating, and college-readiness benchmark studies.

Vendors should determine an appropriate response based on specifications and requirements outlined in the RFP.

21 Content / SMEs Sections 2.1, 2.3,

3.4.1 and 3.4.19, Pages 6, 14 and 25

Please identify the NCDPI SMEs and approval authorities who will define the assessment structure, content, blueprints, standards, and reporting requirements.

Please clarify their roles and the content, guidance, review, and approvals NCDPI will provide for the vendor to develop, configure, manage, and maintain the assessments.

Vendors should determine an appropriate response based on specifications and requirements outlined in the RFP.

22 Scoring Sections 3.4.2.8-3.4.2.10, Page 16; Sections 3.4.5 and 7.15.5, Pages 17-18 and 36

Please provide required score turnaround times by grade and test mode, including online, paper, accommodated, make-up, retest, homebound, and home-school administrations.

Vendors need to meet timelines as stated in G.S. 115C-174.15

23 Paper Testing Section 3.4.2.8, Page 16;

Section 7.15.4, Page

Please clarify whether paper materials are required only for training/practice and operational testing assessments, or whether paper will also be required for additional purposes, such as accommodated, make-up/retest, homebound, home-school, or contingency administrations.

Based on NCDPI’s analysis of student and school needs, what percentage of total assessment administrations is expected to

Refer to the RFP https://www.ncleg.gov/EnactedLegislation/Statutes/HTML/BySection/Chapter_115C/GS_115C-174.15.html require paper, by grade and use case? Please also provide anticipated paper-testing volumes by grade, expected ordering windows, packaging requirements, secure-storage expectations, delivery locations, return volumes, and chain-of-custody requirements.

24 Accommodations Section 3.3.9.2, Page 13; Section 3.4.2, Pages 15-16

Please provide historical or projected volumes by accommodation and language-support type and identify which accommodations must be native to the online platform versus supported through paper or alternate formats.

Refer to the RFP

25 Accommodations Section 3.3.9.2, Page 13; Section 3.4.2, Pages 15-16

Is there a requirement to have assessments or other supporting documentation translated into any other language besides English?

American Sign Language only

26 Homebound / Home School Sections 3.4.2.9-3.4.2.10, Page

Please provide expected volumes and operational procedures for homebound and home-school testing, including registration, identity validation, materials control, proctoring, school attribution, and reporting exclusions. Will the school supply them with equipment for technology readiness or are you expecting what they have at home to be evaluated as well?

What % of the 125K studuents per year do you expect to be in this catageory?

Refer to North Carolina Policies and Procedures Test Coordinator’s Handbook, found on the NCDPI website, on current procedures for these student populations.

2627 NC Test Coordinator's Policies and Procedures Handbook

27 Technology Readiness Sections 3.4.1.5 and 3.4.18.3, Pages 14 and 24

Does NCDPI have a required readiness-certification template, pass/fail thresholds, approved load-testing methodology, or minimum device/network standards that vendors must use? If so, will NCDPI provide standardized bandwidth testing scripts, device compatibility criteria, or mandatory mock-testing windows that vendors must incorporate into the school technology readiness?

No

28 Service Levels Section 3.4.7, Pages 19-20;

DIT Terms, Pages 53-

Please clarify how monthly 99.9% availability will be measured across production, assessment delivery, reporting, identity, APIs, and other components, and identify any assessment-window service levels that supersede the standard terms. If this every day or during testing windows, etc.

The 99.9% availability requirement applies during the State-defined testing windows and required system availability periods identified in the RFP. The system is to be operational and available for use for at least 99.9% of those required periods. Refer to Section 2 – Terms and Conditions applicable to SaaS paragraph 4 for details.

29 DR / Business Continuity Section 3.3.5, Pages 12-13;

Section 3.4.7.6, Page

Does NCDPI require minimum RTO, RPO, backup frequency, retention, geographic separation, and annual end-to-end DR test criteria beyond the vendor’s proposed values? Are you part

NCDPI follows the DIT Statewide Information Security Manual (SISM) to include DR/BC requirements.

https://www.dpi.nc.gov/documents/accountability/testing/north-carolina-test-coordinators-handbook/open https://www.dpi.nc.gov/documents/accountability/testing/north-carolina-test-coordinators-handbook/open of the NCDIT standards for this

DR/BC?

30 Environments Section 3.4.12.1, Page 21;

Section 3.2.2, Pages 8-10

Please confirm whether separate development/configuration, test/UAT, training, production, and disaster-recovery environments are required and whether each environment must be included within the GovRAMP/FedRAMP authorization boundary.

Yes, all environments supporting/processing North Carolina data are required to be part of the authorization boundary. Please refer to the GovRAMP Verification Boundary Guidance, which can be found in the GovRAMP Document Library here:

31 Accessibility Section 3.3.9.1, Page 13

Will NCDPI accept an ACR documenting partial conformance when accompanied by a committed remediation roadmap, and are there mandatory remediation dates relative to implementation or the first assessment window?

No, partial conformance will not be permitted.

32 Customer Support Section 3.4.13, Pages 22-23

Please specify required support hours by implementation phase and assessment window, expected user populations by channel, Tier 1/Tier 2/Tier 3 responsibilities, escalation targets, and response/resolution SLAs by severity.

To be determined after the contract is awarded.

33 Conversational AI Section 3.4.13.4, Page

If a chatbot is included but disabled for the NCDPI contract, should the vendor still provide the full data-access, logging, security, and disablement response requested in Section 3.4.13.4?

The response to the questions in Section

3.4.13.4 are required if the proposed solution supports conversational AI or a chatbot component.

34 Training Sections 3.4.12.3-3.4.12.4, Pages 22; Section 7.15.8, Page 37

Please provide estimated counts by training audience and clarify whether NCDPI expects the vendor to deliver all recurring training directly or may use a train-the-trainer model supported by vendor materials and subject-matter experts. This is important as we are not clear if it all teachers/staff, etc or are these selected teachers, etc.

Options for both direct and indirect training models should align with the NCDPI's train-the-trainer model. For additional information about the training model utilized by the NCDPI Office of Testing refer to the North Carolina Policies and Procedures Test Coordinator’s Handbook, found on the NCDPI website. 2627 NC Test Coordinator's Policies and Procedures Handbook

35 Training Section

3.4.11 & Section 3.4.12.3, Pages 21-22

May vendors incorporate AI-powered interactive learning tools (e.g. Articulate360 tool suite) and live-actor AI avatar technology for educator and test coordinator professional development and administration training, provided no student PII is added or used for building or delivering the training?

The use of AI-enabled tools may be proposed; however, any AI use case is subject to applicable State requirements and must undergo the required NCDIT privacy and security reviews and approval process prior to implementation or use.

36 Implementation Section 3.4.10, Page 21; Section 7.15.7, Pages 36-37

Please identify the target implementation start date, first operational assessment window, key NCDPI dependencies, required approval gates, and maximum time allowed for configuration, integration, UAT, training, readiness certification, and go-live.

Please refer to Section 7.15.7 and 7.15.8.

Assessment window to be determined after contract award. Implementation start date unknown at this time, will be determined after contract award.

https://govramp.org/document-library https://www.dpi.nc.gov/documents/accountability/testing/north-carolina-test-coordinators-handbook/open https://www.dpi.nc.gov/documents/accountability/testing/north-carolina-test-coordinators-handbook/open

37 Data Retention / Purge Section 3.4.3.1, Page 17; Sections 3.4.15.1- 3.4.15.4, Page 23; DIT Terms, Pages 56-59

Please provide required retention and purge schedules for student-level PII, responses, score files, reports, audit logs, support records, backups, and paper materials, including any legal hold requirements.

Please refer to Section 3.4.15.2-4.

38 Security Incidents Sections 3.4.17 and 3.4.18.8-3.4.18.9, Pages 24-25; Section 7.15.6.2, Pages 36-37

Please clarify whether the 15-minute active-window notification expectation applies to all defects and latency events or only events that materially affect testing, and identify required recipients and notification channels.

The 15-minute notification applies to active testing events.

39 Cost Proposal Section 4.1, Page 25;

Attachment D Cost Form

Should costs be separated by grade, assessment instrument/content, platform licenses, environments, implementation, integrations, paper logistics, training, support, reporting, security/GovRAMP activities, and optional services?

Or are you looking for a per year cost /12 for a year 1 cost and what the five year cost is total is if you sign for the initial award/contract for five years and this questions is including SaaS total cost including licenses as well.

Refer to Attachment D of the RFP and provide the required summary pricing in accordance with the cost categories identified therein. Vendors may provide additional itemized cost breakdown applicable under each cost category in Attachment D. Any supplemental itemized costs should be reconciled to the corresponding amounts and the total costs provided in Attachment D.

40 Cost Proposal Attachment D, 25, 64-

Should annual SaaS platform operations, infrastructure, and training be included within the per-student test scoring fee or quoted as distinct implementation/annual service line items?

Distinct implementation/annual service line items.

41 Cost Proposal Section 2.1, Section 3.4.19, Pages 6

Should optional Grade 8 & Grade 10 diagnostic assessment costs be separately itemized from the mandatory Grade 11 10 assessments in Attachment D?

Yes

42 Alternate Offers Section 6.2.6, Page 29

If a vendor submits a base offer and a separate alternate platform or service model, must each offer independently include all attachments, pricing, diagrams, and supporting documentation?

Refer to 6.2.6 for guidance on submitting alternate offers. General Company information does not need to be duplicated and may be incorporated by reference.

Each alternate proposal should provide sufficient solution specific information and supporting documentation to independently evaluate the proposed solution. References should also be relevant to the solution or service proposed.

43 Security Submission Section 3.2.2(d)-(e), Pages 9-10; Section 6.3.2(c), Page 31

Please confirm whether the Security Vendor Readiness Assessment Report is required from the prime vendor only or separately for each proposed cloud service provider and subcontractor within the solution.

The Security Vendor Readiness Assessment Report should cover the full scope of the solution to include subcontractors. It is up to the vendor’s discretion as to whether this requires multiple reports.

44 Subcontractors / Teaming DIT Terms, Attachment B, Section 1, Paragraph 4, Page 39; Section 6.3.2, Pages 30-31

At offer submission, what subcontractor information, agreements, commitments, or letters of authorization must be included for assessment-content licensors, LMS providers, Refer to the RFP for specifications and psychometric specialists, paper-logistics providers, proctoring providers, or other subcontractors?

45 Acceptance Testing DIT Terms, Attachment B, Section 1, Paragraph 9, Pages 40-41; Section 3.4.10, Will NCDPI provide acceptance criteria, test scenarios, test data, and acceptance timelines for platform configuration, integrations, reporting, security, accessibility, training, and operational readiness?

Refer to response to question 13.

46 Application Management Section 3.3.8, Page 13;

Section 3.4.7, Pages 19-20

Please identify the application-performance, user-administration, audit, availability, latency, capacity, and incident metrics NCDPI expects to receive, including required reporting frequency and format.

No additional prescribed metric set is established beyond the RFP. Vendors should describe their standard monitoring/reporting for system performance, availability, capacity, latency, user administration, auditing, incidents, and SLA performance, including proposed reporting frequency.

47 Quality Assurance Sections 3.4.9.2- 3.4.9.4, Page 20

What constitutes a comparable district or state implementation for demonstrating quality control, and will NCDPI accept evidence from regulated high-stakes assessment or qualification programs outside K-12 if the scale, security, reconciliation, and audit requirements are comparable?

Vendor should refer to Attachment D for state implementation numbers and provide comparable measures as described in

3.4.9.2. NCDPI will not accept evidence

outside of the K-12 scope.

No.

48 Licensing / Configuration Rights Sections 3.1.5 and 3.4.8.1, Pages 8 and 20; Section 7.4, Page

May the prime vendor license the platform and perform solution setup, testing/compliance, configuration, administration, reporting, integration, training, and Tier 1/Tier 2 technical / operational support and Tier 3 additional configiuration, updates, new schools, modification to metric, etc., with the platform provider furnishing hosting of the servers/data center, maintenance of those servers, security compliance, and Tier 4 product software support only?

NCDPI does not prescribe a specific service delivery or support model. A prime-vendor model using a third-party platform provider is acceptable, provided all RFP requirements are met. The Prime Vendor remains fully responsible for the complete solution, including performance, integration, support, security, compliance, service levels, and subcontractors. The proposal must clearly define roles, responsibilities, dependencies, escalation paths, and provide NCDPI a single point of accountability.

The State may consider a prime-vendor model in which the prime Vendor provides licensing, implementation, configuration, administration, integration, reporting, training, and support services while leveraging a third-party platform provider for hosting, platform maintenance, security, and product-level support.

The prime Vendor shall remain fully responsible for the performance, integration, support, security, compliance, service levels, and contractual obligations of the complete proposed solution, including all subcontractors and third-party platform providers. Vendors must clearly describe the roles, responsibilities, support escalation model, licensing relationships, security responsibilities, and operational dependencies among all parties.

The proposed support model must provide NCDPI with a clear single point of accountability and must not require the State to independently coordinate resolution among multiple vendors.

49 Data Residency / Support Section 3.4.7.5, Pages 19-20;

Section 7.1, Page 32

Does the requirement that the solution be hosted in the continental United States with no data leaving the country also require all development/testing and production support, administrative access, security monitoring. etc access to be performed exclusively by U.S.-based personnel? Is there an additional requirement for personnel to be in NC and available remote and/or onsite.

The solution and State data must be hosted and maintained in the continental United States. Personnel requiring access to State data or State’s hosted environment must be located in the continental United States when performing such activities. Remote support is permissible.

50 Score Recipients / College Reporting Sections 2.3, 3.4.5.3 and 3.4.2.6, Pages 6, 16 and 18

Please identify whether score delivery to colleges or universities is in scope, which recipient systems or organizations must receive scores, required authorization/consent controls, file formats, transmission methods, and timing.

Please provide all available options for the state to consider.

51 State-Specific Website Section 3.4.1.3, Page

Please clarify whether the North Carolina-specific website must be a separate domain/application or whether a logically segregated, State-branded tenant or portal within the proposed SaaS solution is acceptable.

Please provide all available options for the state to consider.

52 Data Purge Timing Sections 3.4.15.1- 3.4.15.3, Page 23

Does the seven-day purge requirement apply only to non-permitted non-testing demographic data, or also to data residing in backups, logs, support tickets, analytics stores, exports, and downstream integrations?

Any non-permitted non-testing data must be purged within seven days regardless of location.

53 Offer File Format Section 6.3.3(d), Page

Section 6.3.3(d) lists .PDF, .JPEG, .DOC, or .XLS formats.

Will the Ariba Sourcing Module accept current Microsoft Office formats such as .DOCX and .XLSX for response files and supporting workbooks? Are you expecting one document or can we upload attachments as separate documents?

Yes, files and attachments can be uploaded as attachments or separate documents.

54 Incumbent Solution Sections 2.3, Page 6;

3.3.6, Page 13; 3.4.10, Please identify the incumbent assessment provider(s), current assessment platform(s), contract expiration date(s), and which components of the current solution NCDPI intends to retain, replace, or migrate. It seems this is new processes and requirements you are looking to implement but need to be clear.

thanks!

A full system replacement is anticipated. The awarded vendor shall provide a comprehensive solution starting next school year that meets the intended specifications and requirements of this RFP and no components of the existing assessment platform are anticipated to be retained.

55 Historical Volumes Sections 3.4.2 and 3.4.18.3, Pages 15-16 and 24

Please provide actual Grade 11, Grade 10, and Grade 8 participation volumes for the previous three administration

Refer to the RFP cost form, Attachment D, for student volume specifications.

years by assessment and delivery method.

56 Evaluation Criteria Section 5.2, Page 26

Will NCDPI provide numerical or percentage weighting for the evaluation criteria based on what is mandated by your office to follow listed in Section 5.2?

No. The evaluation criteria can be found in the first paragraph of Section 5.2. There is no mention of numerical, percentage or weighting in the evaluation criteria in the RFP document.

57 Demonstrations Section 1.0 Procurement Schedule, Page 5;

Section 5.3, Page 26

If product demonstrations are requested, please identify anticipated demonstration duration, required participants, required scenarios, and evaluation criteria.

Product demonstrations are mentioned in Section 1.0 as To Be Determined (TBD) and in Section 5.3. The product demonstration information will be provided to responsive Vendors invited to participate in demonstrations.

58 PSU Participation Sections 3.4.2 and 3.4.5, Pages 15-18

Will all Public School Units (PSUs), charter schools, and State-operated schools participate in the same assessment administration model, or are alternative participation approaches anticipated?

A standard assessment model will be required.

59 State Staffing Section 7.11, Page 35

Please identify anticipated NCDPI project roles, expected staffing levels, and responsibilities during implementation and ongoing operations. These are listed but not clear on what responsiblities will be as part of the implementation, content development/approvals, content updates/approvals, scheduling, delivery of testing onsite or online, etc. Need a role matrix really to ensure we do not miss anything you'd like your staff or vendor to be accountable for, etc.

To be specified after contract is awarded.

Refer to the specifications and requirements in the RFP.

60 Attachment D , Cost Form

Please clarify how the State intends to consider the pricing submitted for the Grade 11 College Admissions Test and the funding-dependent Grade 8 and Grade 10 Diagnostic Tests when evaluating Total Cost of Ownership and determining best value.

NCDPI will consider the pricing submitted in accordance with the evaluation methodology and best-value considerations established in the RFP. Funding dependency for the Grades 8 and 10 Diagnostic Tests does not eliminate the requirement for Vendors to provide the requested pricing for those components.

61 Section 5.2 , Evaluation Criteria

Section 5.2 states that a trade-off or ranking method will be used and identifies the evaluation criteria in order of importance. Will the State assign separate rankings to individual technical specification areas within the first evaluation criterion, or will the technical specifications be evaluated collectively when determining each Vendor's overall ranking?

All responsive offers will be evaluated based on stated evaluation criteria defined in section 5.2 of the RFP.

62 Section 5.2 , Evaluation Criteria

The RFP states that the Evaluation Criteria are listed in Order of Importance but doesn’t indicate the relative weight of each criterion in the overall evaluation/rankings. Please clarify whether the State will

The State will use the trade-off or ranking method as described in section 5.1 of the RFP. The evaluation criteria defined in section 5.2 listed in the order of importance will be considered in determining Best Value.

apply any weighting, points, or other methodology to reflect the relative importance each of the six criteria when determining Best Value and final rankings.

63 Section 5.2 , Evaluation Criteria

If one offer is substantially stronger in one of the Evaluation Criteria than all other offers, will the size of that difference be factored in the overall ranking or evaluation of the offers, or is the impact on the overall evaluation limited to that Vendor being ranked first in that one criterion?

Responsive offers will be evaluated in accordance with sections 5.1 and 5.2 of the RFP using a trade-off or ranking method of source selection.

64 6.3 , 6.3.1 For the TOC: which level of specification is required to be listed on the TOC? For example, for 3.4.15 Collection of Demographic Data, should the TOC also list 3.4.15.1 - 3.4.15.

3.4.15.4, or just 3.4.15?

Yes, as specified in 6.3.1(a)

65 Attachment H , N/A Will you provide the requested Excel form to be included with our Attachment H response?

Attachment H is located on Page 70-71

66 Section 5.2, Evaluation Criteria , N/A

Will the State require Vendors to disclose significant performance incidents from other statewide assessment programs, including technology disruptions, scoring or reporting errors, or data/privacy and cybersecurity incidents? If so, what lookback period and information should Vendors provide regarding resolution and corrective actions?

Refer to the RFP.

67 3.3.3.2 , 3.3.3.2 OIDC (§3.3.3.2): is OIDC available as a target-application integration method for NCEdCloud, and does §3.3.3.2 represent the complete current set?

The integration methods currently identified in the RFP for NCEdCloud are SAML, native authentication/data synchronization, and LDAP. OIDC is not identified in Section 3.3.3 as a required NCEdCloud target-application integration method. Vendors may describe OIDC capabilities as part of their proposed architecture, as it is a current capability of NCEdCloud.

68 3.4.2.1 , 3.4.2.1 OneRoster: is a OneRoster based enrollment or registration method available via NCSIS and NCedCloud?

The RFP does not prescribe OneRoster as the required enrollment or registration integration method between NCSIS, NCEdCloud, and the proposed solution.

Vendors should describe their supported standards and methods for roster/enrollment integration, including OneRoster if supported.

The final integration approach and authoritative data sources will be established with the awarded Vendor during implementation.

69 3.3.3 , 3.3.3 Student scope (§3.3.3, §3.4.2.1):

are students expected to authenticate via NCEdCloud for testing, or is student test-session access outside the IAM integration entirely as implied by §3.4.12.2.1's no student account creation rule?

Section 3.4.12.2.1 applies specifically to student access to digital preparation and practice materials, which are to be available anonymously without student account creation or demographic information. It does not prohibit authenticated student access for operational assessment administration.

Vendors should describe how operational student authentication and test-session access can integrate with NCEdCloud and the proposed testing solution.

70 3.3.3.1 , 3.3.3.1 Deprovisioning (§3.3.3.1): what mechanism does NCDPI expect for account de-provisioning under a SAML-only integration, given JIT creates but does not remove?

SAML authentication and just-in-time account creation alone do not satisfy the complete account lifecycle requirement where the target application maintains a persistent user account. The proposed solution should support an automated or otherwise controlled mechanism for removing or disabling access when a user's authorization is removed from NCEdCloud or the authoritative identity source.

Vendors should describe their supported de-provisioning approach, including how account disablement or removal, role and entitlement removal, session termination, and reconciliation of inactive or unauthorized accounts are handled. The mechanism may include NCEdCloud data synchronization, supported APIs or connectors, automated reconciliation, or another approach appropriate to the proposed solution.

The final integration method will be established with the awarded Vendor during implementation based on the capabilities of NCEdCloud and the proposed solution.

The proposed approach should minimize the persistence of orphaned or unauthorized accounts and should provide auditable evidence of lifecycle actions.

71 3.3.3.2.1 , 3.3.3.2.1 Assertion attributes (§3.3.3.2.1):

which attributes does NCEdCloud release: state UID, role, PSU code, school code, grade, email?

The specific NCEdCloud assertion attributes and mappings will be finalized with the awarded Vendor during integration and implementation. Vendors should identify the minimum attributes required by their proposed solution for authentication, authorization, account provisioning, role assignment, organizational affiliation, and reporting.

NCDPI intends to apply data-minimization and least-privilege principles and will provide only those attributes necessary to support the approved integration and business requirements. Required mappings may include identity, role, organizational, school/PSU, and other applicable attributes, subject to availability within NCEdCloud and approval by NCDPI.

Vendors should also identify any required attributes that are not available through the standard SAML assertion and describe any alternate mechanism needed to obtain or synchronize those attributes.

72 3.3.3 , 3.3.3 Integration enablement (§3.3.3):

for a statewide contract, is target-application integration enabled centrally, or opted into per PSU?

The awarded statewide solution shall integrate with NCEdCloud, the State’s Identity and Access Management service.

Vendors should not assume that each PSU will independently establish a separate technical integration with the proposed solution.

Depending on the final integration approach and user populations, some PSU-level configuration, authorization, role assignment, or organizational mapping may still be required. Vendors should describe any dependencies on PSU-level configuration, consent, tenant setup, identity-provider changes, local administration, or other actions required to enable statewide use.

The specific implementation responsibilities will be defined during implementation planning with the awarded vendor.

73 3.4.4.1.1 , 3.4.4.1.1 Non-PSU users (§3.4.4.1.1, §3.4.5.3.8): does NCEdCloud IAM cover all potential users, or are there expected populations the NCEdCloud IAM service doesn't cover?

NCEdCloud serves as the primary IAM integration point for applicable student and education workforce populations. However, vendors should not assume that NCEdCloud will necessarily contain every authorized user population required by the proposed solution.

The proposed solution should support secure access for authorized users who may not be represented in NCEdCloud, subject to approval and applicable security requirements. Vendors should identify any supported alternate authentication and provisioning mechanisms and describe how consistent role-based access control, lifecycle management, MFA where applicable, auditing, and de-provisioning would be maintained for those users.

Vendors should avoid creating unmanaged local accounts where an enterprise or federated identity mechanism is available.

74 3.3.6 Data Migration ,

3.3.6 Data Migration

Can NCIP please clarify which types of data need to be converted and/or migrated into the proposed solution? For example, Identity, User Profile/Preferences, Historical Scores, Historical Reports, etc.

No historical components of the existing assessment platform are anticipated to be retained or migrated.

75 3.4.1.6 & 3.4.5.3.8 ,

3.4.1.6 & 3.4.5.3.8

Please clarify if/how Regions will be expected to manage specific administrative responsibilities within the registration, test administration process and reporting areas of the solution

(vs. the state, districts, and schools.)

To be specified after contract is awarded.

76 Section 1 , N/A What time is the offer opening on Oct. 7?

See above where the offer solicitation language has been modified.

77 Attachment D , Cost Form

The RFP states that the Grade 8 and Grade 10 Diagnostic Tests are dependent upon funding and may not be included in the final contract award. If funding is not available at the time of award, will the final contract include the option for the State to add Grade 8 and Grade 10 Diagnostic Tests if funding becomes available during the contract term?

Yes

78 Section 1 , Notice of Award / Implementation Timing

The RFP states that the effective date will be provided in the Notice of Award, but does North Carolina’s Department of Public Instruction have guidance to provide Vendors for when the 8th, 10th and 11th grade tests will likely be first administered under the contract resulting from this RFP? This will allow Vendors to better hone implementation and support plans in the response.

Refer to the 2026-27 North Carolina Operational Testing Calendar for timing of sample test administration windows.

79 2.2 / 3.4.2 , Summary of the Problem Statement / Testing Mode

The RFP was issued under a software as a service Commodity Code, and the Summary of the Problem Statement announced that the State seeks a vendor for a SAAS solution. Given the foregoing, we understand that this RFP is for digital testing, with paper testing alternatives available for students who need accommodations and in exceptional cases. Is that accurate?

Yes

80 3.4.9 , 3.4.9.2 Quality Assurance

RFP 3.4.9.2 requires the Vendor to describe measures previously taken by Vendor “to ensure quality control of all aspects of test administrations, specifically in other districts and states comparable to the State of North Carolina.” Does this requirement also include describing test administrations where quality control measures, including for test delivery and scoring, were not effective?

Yes

81 3.2 , 3.2.2 Solutions…