24Q0010_PWS_122023.docx

PERFORMANCE WORK STATEMENT

Department of Defense Education Activity 4800 Mark Center Drive Alexandria, VA 22350

DoDEA Grades 6-12 Digital Music Learning Tool

1. General Information and Scope of Work

1.1 Agency

1.1.1 For school year (SY) 2023-24, the Department of Defense Education Activity (DoDEA) will provide PK-12 instruction to almost 66,000 dependents of military and civilian employees. Student enrollment is based primarily on deployment of military troops worldwide. In the Americas, DoDEA operates 50 schools located in seven states, Puerto Rico, and Cuba. In Europe and the Middle East, DoDEA operates 64 schools located in Germany, England, Netherlands, Belgium, Spain, Turkey, Bahrain, and Italy. In the Pacific, DoDEA operates 45 schools located in Korea, Japan (mainland and Okinawa), and Guam. DoDEA's curriculum, resources and student achievement scores on standardized assessments compare favorably to those of high-performing US public school systems. DoDEA also operates a fully accredited virtual high school option with teaching hubs in each DoDEA region: Americas, Europe, and Pacific.

1.1.2 DoDEA schools have various grade configurations, with the most common being PK-5, 6-8, and 9-12. Of DoDEA’s 159 brick-and-mortar schools, 77 have at least one of the 6-12 grades, including five elementary schools that also serve sixth graders.

Table 1: School Year 2023-24 Projected Enrollment (rounded to the nearest 25)

1.2 Background

Table 2: Enrollment in Selected Music Courses

1.2.4 SY2022-23 music teachers, music specialists, and support personnel numbers are shown below:

Table 3: Educators at the School and Above-School Levels

1.2.5 DoDEA has an expiring contract for a Music Performance Assessment Tool for grades 3-12 and for Music Appreciation Curriculum Resources. DoDEA also does not currently offer a systemwide resource for AP® Music Theory.

1.3 Scope of Work

To take advantage of recent developments in music technology, DoDEA requires a Digital Music Learning Tool (DMLT) as an instructional resource to increase student learning and achievement. The DMLT will be used for the following secondary level music courses: alternative ensemble, band, chorus, computer music, guitar, music appreciation, music theory, piano, and strings. The DMLT will include the following five features: music performance assessment tool, music library database, music notation software, video lesson database, and digital audio workstation. For the DMLT platform, DoDEA requires the following tools:

1) Music Performance Assessment Tool

2) Music Library Database

3) Music Notation Software

4) Video Lesson Database

5) Digital Audio Workstation

6) Music Appreciation Resources

7) AP® Music Theory Resources.

DoDEA prefers to make one award but may make multiple awards.

2 Requirements

2.1 DMLT and Related Support: The Contractor(s) shall provide the DMLT with a music performance assessment tool, music library database, music notation software, video lesson database, and digital audio workstation as well as professional learning and technical support.

Supporting Tasks

The tasks below are to help Contractor(s) gain a better understanding of the requirements to successfully meet the objective. They are not all inclusive, so the Contractor is expected to develop the total solution to meet all the requirements in accordance with a performance-based approach.

2.2 Task 1, Digital Music Learning Tool (DMLT)

2.2.1 DMLT Access: The Contractor(s) shall provide subscriptions/licenses for a cloud-based DMLT, whose primary users are over 8,000 students enrolled in the courses (Table 2) and school and above-school level educators (Table 3). The DMLT shall:

1) Work fully functionally with standard web browsers such as Google Chrome and Microsoft Edge and on standard school computing equipment such as laptops and Chromebooks.

2) Provide access for students and teachers enrolled in alternative ensemble, band, chorus, computer music, guitar, music appreciation, music theory, piano, and strings classes for grades 6–12.

3) Provide access for approximately 69 school-level education technologists, for approximately 12 above-school-level education technologists, and for approximately five above-school level subject matter experts.

4) Note: Access for AP® Music Theory will be provided via the Music Theory Resources.

1) Record their performance at school or at home using a variety of digital devices.

2) Send recordings of their performance to their music teachers.

3) Follow and track musical notation and identify errors in their performance.

4) Select a note on the interface which will then sound the pitch.

5) See the note names.

6) See a fingering chart with their respective instrument.

7) Receive immediate feedback on performance (e.g., correct performance; early, late, or accurate rhythm; pitch too sharp, flat, or in tune).

8) Hear their part in context with pitch and rhythmic references.

9) Perform their instrument or sing with an accompaniment.

10) Have access to an automatic assessment score.

11) Have access to a comprehensive library of sheet music at varying ability levels.

12) Have access to a comprehensive library of middle- and high-school instrumental method books (e.g., band, strings, jazz band).

2.2.2.2 The MPAT shall provide, at a minimum, the following features that allow teachers to do the following:

1) Have the same access to navigation, materials, and features as student accounts.

2) Create assignments and assign them to students.

3) Assign music exercises (e.g., sight reading, rhythm, scales, arpeggios), excerpts of repertoire, and etudes to students.

4) Organize student users into classes or other groupings.

2.2.2.3 The MPAT’s performance assessment tool shall be able to do the following:

1) Receive audio through microphones built-into the main device (e.g., computer, table) or peripheral microphones (e.g., pickup, handheld) connected to the main device via USB or other connection.

2) Produce audio through speakers built-into the main device (e.g., computer, table) or peripheral speakers connected to the main device via USB or other connection.

2.2.3 Music Library Database I: The Contractor(s) shall provide a digital library of repertoire with developmentally appropriate instrumentation and voice repertoire for beginning to advanced musicians and ensure that teachers can print from the database for classroom instruction.

2.2.3.1 The digital library of repertoire shall be available for performance assessment via the MPAT.

2.2.3.2 Repertoire for instrumentation shall include:

1) Large ensembles to include, at minimum, wind band, string orchestra, full orchestra, percussion ensemble, and flex instrumentation.

2) Small ensembles must include, at minimum, duets, trios, quartets, and quintets for strings, woodwinds, brass winds, percussion, and flex instrumentation.

3) Instruments such as guitar, piano, and ukulele.

2.2.3.3 Repertoire for voice parts shall include one, two, three, or four separate parts, which may consist of varying configurations of sopranos (S), alto (A), tenors (T), baritones (Ba), and basses (B). The majority of vocal repertoires shall include audio accompaniment and practice tracks. More specifically, repertoire for voice parts shall include:

1) Single voice parts for S, A, T, Ba, and B.

2) Two-voice parts for any combination of S, A, T, Ba, and B.

3) Three-voice parts for any combination of S, A, T, Ba, and B.

4) Four-voice parts for SATB, SSAA, TTBB, or any other combination.

2.2.3.4 Repertoire shall also have the following features:

1) Themes, styles, cultures, composers and arrangers to support inclusivity of all students.

2) Repertoire accessible for performance assessment via the MPAT.

3) Repertoire providing performing rights in live and virtual settings.

4) Supplemental teaching materials, which may include such things as piece-specific exercises focused on skills/techniques, videos featuring instructional tips/recommendations, and repertoire-specific lesion plans aligned to the National Arts Standards.

2.2.4 Music Library Database II: The Contractor(s) shall provide a robust digital library of music method books with developmentally appropriate instrumentation and voice repertoire for beginning to advanced musicians and ensure that teachers can print from the database for classroom instruction.

2.2.4.1 The music method book database shall be accessible for performance assessment via the MPAT.

2.2.4.2 The database shall include the following:

1) Standards instrumental and vocal method books to include guitar, piano, band, and orchestra ensembles as well as selected vocal method books, etudes, and supplemental materials include audio accompaniment and practice tracks.

2) Technical skill building exercises such as the technical skills of articulation, breathing, dynamics, sight reading, note reading, and rhythms.

3) Scale and arpeggio exercises for instrumental parts.

4) Etudes for instrumental music.

2.2.5 Music Notation Software—The Contractor(s) shall provide all users access to a browser-based music notation software. The music notation software shall:

2.2.5.1 Allow users to compose, arrange, or transcribe musical compositions using music notation.

2.2.5.2 Have a user interface allowing users to create music projects using standard music notation and to use keyboard shortcuts. Note: Music notation includes, but is not limited to, noteheads, staves, clefs, key signatures, time signatures, articulations, dynamics, and tempo markings.

2.2.5.3 Provide templates of various instrumentation and voice parts.

2.2.5.4 Provide audio playback of written music compositions.

2.2.5.5 Include support for interface using USB MIDI devices.

2.2.5.6 Be accessible at any with a web browser and internet access.

2.2.5.7 Import music notation files (e.g., MIDI, MXL, XML, MusicXML, SMZ) to allow editing.

2.2.5.8 Export projects as music notation files, PDF, or audio files.

2.2.5.9 Allow users to share projects for the purpose of collaboration.

2.2.5.10 Allow teachers to create assignments and assign them to students.

2.2.5.11 Allow students to share projects with the teacher and other students in their class.

2.2.6 Music Video Lesson Database—The Contractor shall provide all users access to a library of music video lessons for each instrument listed below that is developmentally appropriate for the beginner to advanced levels of musical ability. The library of video lessons shall:

2.2.6.1 Include the following instruments:

1) Woodwind such as flute, clarinet, oboe, bassoon, and saxophone.

2) Brasswind such as trumpet, trombone, horn, euphonium, and tuba.

3) Percussion such as pitched and unpitched.

4) Bowed-string such as violin, viola, cello, and double bass.

5) Preferred but not required: Plucked-string instruments such as the guitar and ukulele.

6) Preferred but not required: Piano.

2.2.6.2 Be arranged or categorized using the following criteria:

1) Content in sequential order

2) Videos by course

3) Videos on the basis of musical ability, e.g., Level I, Level 2, etc.

2.2.6.3 Be aligned to the method books in the digital library of method books, per PWS 2.2.3.8.

2.2.6.4 Be presented by instructors that meet the following qualifications:

1) Teaching their primary instrument, e.g., a violinist teaches the violin—not the tuba.

2) Minimum of three years of teaching their primary instrument to school-age students.

3) Performing experience on their primary instrument in a professional capacity.

2.2.7 Digital Audio Workstation (DAW)—The Contractor shall provide all users access to a cloud-based DAW that meets the following requirements:

2.2.7.1 Allow users to compose, record, edit, and remix audio to create new musical compositions.

1) Users must be able to record audio using an external recording device via USB and other input connections (e.g., microphones, USB audio interface).

2) Users must be able to import and export a variety of audio formats including WAV, AIFF, MP3, AAC, OOG, ACC, and more at various levels of bit rates and sample rates.

3) User must be able to composer, record, edit, and remix audio using multiple tracks for a minimum of 16 tracks.

4) Audio input latency must be no higher than 10ms.

5) Users must be able to edit projects using destructive and non-destructive editing features.

2.2.7.2 Include a user interface that allows users to do the following:

1) Create musical projects using a timeline.

2) Mix and manipulate audio tracks.

3) Apply effects to audio tracks.

4) Include keyboard shortcuts.

2.2.7.3 Permit collaboration on projects by allowing users to access and share projects with the students they are working with and with their teachers.

2.2.7.4 Allow the use of musical instrument digital interface (MIDI) in all projects for the following purposes:

1) Importing MIDI files.

2) Exporting projects as a MIDI file.

3) Editing MIDI data to include velocity, pitch, duration, and other parameters.

4) Connecting to MIDI controllers, e.g., digital keyboards, as input to create MIDI information.

5) Using a virtual keyboard to input MIDI data.

6) Using a computer keyboard with keyboard shortcuts to input MIDI data.

2.2.7.5 Provide a database with a minimum of 10,000 royalty-free loops, instruments, sound effects, and samples which could be included in student projects. The database shall include a variety of genres that include but are not limited to, hip hop, Afrobeats, dubstep, EDM loops, 80s synths vocal shops, and trap piano samples. The database for instrument sounds shall include a variety of instruments including but not limited to acoustic, electronic, digital, and synthesized.

2.2.8 Music Appreciation Resources—The Contractor shall provide subscriptions for an online cloud-based Music Appreciation Resource (MAR) for middle school and high school instruction.

2.2.8.1 These resources shall meet the following curricular requirements:

2.2.8.2 These resources shall include activities, assessments, and student projects as follows:

1) Activities such as essay prompts, questions, worksheets, and other learning activities.

2) Assessments such as quizzes and tests that address the National Arts Standards.

3) Lesson plans with learning objectives, connection to the National Arts Standards, learning activities, and ability to print for classroom use.

4) Written assessments, rubrics, answer keys, using such assessment types as multiple choice, fill in the blank, short answer, and short essay and all of which are printable for classroom use.

5) Student projects which may be individual or collaborative and which include a grading rubric.

2.2.9 AP® Music Theory Resources—The Contractor shall provide subscriptions for an online cloud-based AP® Music Theory Resource (APMTR) and shall allow all the resources listed below to be printed for instructional purposes. The APMTR shall possess the following features:

2.2.9.1 Resources and activities to assist AP® Music Theory instruction as outlined by the College Board, per https://apstudents.collegeboard.org/courses/ap-music-theory.

2.2.9.2 Listening guide with musical examples that complement the scope & sequence of instruction.

2.2.9.3 Interactive learning interface to introduce/review the course concepts.

2.2.9.4 Student projects which may be individual and/or collaborative and which include a grading rubric.

2.2.9.5 Teacher-specific resources for instruction that include (1) lesson plans with learning objectives, connections to the College Board requirements, and learning activities and (2) written assessments, rubrics, and projects to assess student learning with a variety of assessment types such as multiple choice, fill in the blank, short answer, true/false, short essay) and which include answer keys and which are printable for classroom use.

2.3 Task 2, DMLT Related Support—The Contractor shall provide product training and professional learning on the DMLT platform for DoDEA teachers and educational technologists—approximately 170 educators. The Contractor shall:

2.3.1 Product Training—Provide asynchronous webinars and/or Sharable Content Object Reference Model® (SCORM®)-compliant digital modules on how to use the DMLT platforms. See PWS 3.9 for additional information about SCORM® compliance. The product training shall cover, a minimum the navigation, interface, and features and be approximately as long as specified in Table 4:

Table 4 - Base Year Product Training

Post the product training on DoDEA’s learning management system (LMS, Schoology).

2.3.2 Base Year Professional Learning—Provide professional learning on using DMLT platforms in the classroom. Professional learning must occur asynchronously through video webinars or learning modules as SCORM®-compliant packages. The professional learning shall cover at minimum the following topics and meet the specified length, per Table 4:

2.3.2.1 The topics discussed professional learning must include, but is not limited to, the following: instructional purposes (e.g., incorporating into the classroom, lesson plans, pedagogical techniques) and incorporating the National Core Arts Standards.

2.3.2.2 The topics discussed for AP® Music Theory Resources must include (e.g., incorporating into the classroom, lesson plans, pedagogical techniques) and incorporating the National Core Arts Standards and topics outlined by the College Board.

Table 4: Base Year Professional Learning

2.3.2.3 Make each asynchronous video webinar or learning module as SCORM®-compliant packages available for posting on DoDEA’s learning management system (LMS), currently Schoology, soon to be Cornerstone on Demand for the life of the contract.

2.3.3 Option Year Professional Learning—The Contractor shall provide asynchronous webinars and/or SCORM®-compliant digital modules and post them on DoDEA’s LMS. Provide professional learning on DMLT platforms delivered annually or quarterly for each platform after the first year for the life of the contract. The webinars and/or modules shall highlight any changes and updates and provide additional professional learning on topics that will be determined by DoDEA in consultation with the Contractor post-award.

2.3.3.1 Coordinate with the Contracting Officer’s Representative (COR) during the development of all professional learning. Draft an outline of webinar content. Finalize each presentation based on written feedback from the COR.

2.3.3.2 Provide the COR with access to the webinars no less than ten business days prior to delivery of the webinars.

2.3.3.3 Table 5 summarizes the number of sessions and minimum time commitments per year.

Table 5: Option Year (OY) Professional Learning (Hours)

2.4 General Requirements—The Contractor shall:

2.5 Performance Standards and Acceptable Quality Levels

2.5.1 Performance Standard: Tasks shall be completed by the required completion date.

2.5.2 Acceptable Quality Level: See PWS 7, Performance Requirement Summary (PRS).

3 Constraints

3.1 Place of Performance: Work shall be performed at the Contractor’s facilities.

3.2 Liaison and Alternate Liaison—The Contractor shall:

3.3 Holidays and Hours of Operation: The liaison or alternate liaison shall be available during the hours of 9AM to 3PM Eastern Standard Time (EST), except for Federal holidays and Federal government closures/ shutdowns. The following list shows recognized Federal holidays: New Year’s Day, Martin Luther King Jr.’s Birthday, Presidents Day, Memorial Day, Juneteenth National Independence Day, Independence Day, Labor Day, Columbus Day, Veterans Day, Thanksgiving Day, and Christmas Day.

3.4 Availability: The Contractor shall make all resources available for the life of the contract.

3.5 Anti-Bias, Diversity, and Inclusion—The Contractor shall provide resources free of age, racial, color, national origin, disabling conditions, sexual, gender, religious, and ethnic bias and present balanced coverage of multi-cultural contributions and representation, where appropriate.

3.6 Privacy—The Contractor shall:

3.6.1 User Accounts: Require, wherever applicable, that individual accounts possess unique usernames and passwords that do not require personally identifiable information (PII) to access online content, i.e., first & last name and any other unique personal information.

3.6.2 Contractor Personnel: Ensure personnel assigned to this contract take proper precautions to protect information from disclosure. Collect and/or store all agency-owned or agency-controlled PII in accordance with the relevant requirements of the Privacy Act, 5 U.S.C, which may be found at the following URL: http://www.archives.gov/about/laws/privacy-act-1974.html.

3.6.3 Privacy Training: Ensure Contractor staff who have access to DoDEA’s student, teacher and/or staff personally identifiable information successfully complete the DoD Privacy Act/Personally Identifiable Information (PA/PII) training before gaining access to the data and yearly thereafter. Provide copies of the certificates of completion to the COR which can be audited at any time by the Chief Information Security Officer (CISO) or his/her designee.

3.6.4 Privacy Verification: Provide the COR written verification of compliance to the Privacy requirements (listed above) 120 calendar days prior to the expiration of each year’s contract option period or annually, as required. Note: After reviewing the Contractor’s verification, DoDEA reserves the right to ask for further verification data for DoDEA to comply with DoD’s evolving privacy mandates.

3.7 Section 508 Compliance—The Contractor shall:

3.8 Optical Character Resolution (OCR): The Contractor shall provide, upon request, two digital OCR copies of print materials in one or more of the following five formats: Digital Accessible Information System/National Instructional Materials; Accessibility Standard (NIMAS) with cascading style sheet; HyperText Markup Language (HTML); Portable Document Format (PDF, unlocked, embedded fonts, single page); and Rich Text Format (RTF)/Word document.

3.9 Sharable Content Object Reference Model® (SCORM®) Compliance: Provide digital modules, if included among the proposed/required resources, that are SCORM®-compliant. Note: Department of Defense Instruction (DoDI) 1322.26 mandates that modules comply with the latest possible version of SCORM®, per https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/132226_dodi_2017.pdf?ver=2017-10-05-073235-400.

3.10 Data: All data developed as a result of any work awarded under this contract is and shall remain the property of the Government.

3.11 Organizational Conflict of Interest (OCI): The Contractor (including any subcontractor) personnel performing work under this contract may receive, have access to, or participate in the development of, proprietary or Privacy Act information (e.g., personal information, education, etc.) may create a current or subsequent OCI as defined in FAR Subpart 9.5. Whenever the Contractor becomes aware that such access or participation may result in actual or potential OCI, the Contractor shall (1) immediately notify the Contracting Officer (KO) in writing and (2) promptly submit a plan to the KO to avoid or mitigate any such OCI. Note: The KO will unilaterally determine if the Contractor’s plan is acceptable. If the KO determines the plan cannot satisfactorily avoid or mitigate an OCI, s/he may implement other remedies to include prohibiting the Contractor’s further participation in contracted requirements.

4 Government-Furnished Resources

5 Contract Deliverables

Frequency

Professional Learning

Technical Support & Privacy

6 Acronyms and Definitions

Contract Line Item Number (CLIN) – Basic structural element in a procurement instrument describing and organizing the required product or service for pricing, delivery, inspection, acceptance, invoicing, and payment. The use of the term “line item” includes “subcontract line number”, (SLIN), as applicable.

Contracting Officer (KO) – The only individual with expressed authority to obligate (bind) the Government by means of entering, administering, and terminating contracts within the limits of the authority delegated via a Contracting Officer’s warrant.

Contracting Officer’s Representative (COR) – Qualified and trained Government employee, nominated by the requiring activity (RA) and appointed in writing by a KO primarily to perform specific technical or administrative functions on a specific contract(s); serves as the ‘eyes and ears’ of a KO to assure the Government’s best interests are protected via the terms and conditions of the contract(s) appointed. COR’s do not have authority to obligate (i.e., bind) the Government.

Contractor - Supplier or vendor having a contract to provide specific supplies or service to the Government. The term used in this contract refers to the prime.

Deliverable – Usually physically delivered items but may include such items as digital documents/reports.

Musical Instrument Digital Interface (MIDI): Commonly known as MIDI, technical standard that describes a communications protocol, digital interface, and electrical connectors that connect a wide variety of electronic musical instruments, computers, and related audio devices for playing, editing, and recording music.

Music Notation: Music notation is any system that is used to visually represented any aurally perceived music that is generated by humans, whether through voice, a music instrument, or other means. There are several types of written notation systems which were created and used depending on the culture from which it was derived. Therefore, for the purposes of this document, “music notation” refers to Western music notation which utilizes 12 notes—C, D, E, F, G, A, B with sharps and flats—and its own system of key signatures, time signatures, dynamics, articulation, tempo markings, and other music symbols.

Music Notation Files: Computer files that are used for music notation software. Files extensions may include MIDI, MXL, XML, MusicXML, and SMZ.

Performance Requirements Summary (PRS) – Tabular listing of performance objectives and standards that provides the basis for a meaningful QASP.

Performance Work Statement (PWS) - A statement of work for performance-based acquisitions describing the required results in clear, specific, and objective terms with measurable outcomes.

7 Performance Requirement Summary

Base Year Professional Learning

PWS 2.3.1

Final: 100% correct except for possible errors in grammar and formatting.

COR inspection

Option Year Professional Learning

PWS 2.3.2

Final: 100% correct except for possible errors in grammar and formatting.

COR inspection

Technical Support

PWS 2.4.2

Privacy Training

PWS 3.6.3

Privacy Verification

PWS 3.6.4

Technical Exhibit #1 - TECHNICAL REQUIREMENTS

The Contractor shall comply with the applicable technical requirements detailed below.

1.1 Software and Cloud Security Requirements—The Contractor shall:

1.2 System Requirements—The Contractor shall:

1.3 Data Management Requirements—The Contractor shall:

1.4 DoDEA Software License Keys: The Contractor shall provide (1) license keys and electronic downloads for software required under this Contract to the COR and (2) software directly to DoDEA schools, districts, or regions only if explicitly required to do so in the contract or in writing by the COR.

1.5 Cybersecurity Supporting Elements/Requirements and Scalability—The Contractor shall:

1.5.1 Comply with the same Federal law and DoD policies and guidance to which DoDEA is subject. These requirements include but are not limited to the cybersecurity requirements defined in the following documentation:

· DoD Directive (DoDD) 8500.01E, Information Assurance, be found at the following URL: https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/850001_2014.pdf.

· DoD Security Technical Implementation Guidance (STIG), found at the following URL: https://public.cyber.mil/stigs/downloads/.

· DoD Risk Management Framework (DODRMF) per DoD Instruction 8510.01 found at https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/851001p.pdf?ver=2019-02-26-101520-3004.5.2.

1) Maintaining system security IAW the latest versions of the (1) DoD Cloud Computing Security Requirements Guide, (2) Family Educational Rights and Privacy Act (FERPA), and (3) Protection of Pupil Rights Amendment (PPRA).

2) Providing a solution robust enough to serve the needs of a large community of learners dispersed across the world using a variety of bandwidths and scalable to meet future growth, both in terms of instruction and the number of users.

3) Ensuring Contractor staff who have access to DoDEA’s student, teacher and/or staff personally identifiable information take the DoD Privacy Act/Personally Identifiable Information (PA and PPI/PII) training before gaining access to the data and yearly thereafter. Provide copies of the certificates of completion to the COR which can be audited at any time by the CISO or his/her designee.

1.6 Program and System Integration—The Contractor’s solution shall:

1.6.1 Provide Single Sign-On (SSO) Capabilities / Platform which (1) integrates with an Industry Standard SSO login solution. (ClassLink, Google, Azure, etc.); (2) supports Oauth 2.0, Security Assertions Markup Language (SAML) for integration with Azure, or Google; and (3) authenticates using Azure Active Directory (AD) or Google AD. Authenticates using Azure Active Directory (AD) or Google AD.

1.6.2. Support industry-standard data rostering standards via ClassLink and standard data formats such as OneRoster.

1.6.3. Ensure that data storage, handling, and security meet the following minimum standards:

1) DoDEA’s information and data shall be secured in data center located in the United States.

2) The system, including its server(s) and network devices, shall be in an environmentally controlled and secure facility under controlled circumstances (e.g., authorized personnel access lists, ID cards, entry logs).

3) All Contractor personnel that have access or may potentially have access to DoDEA data in any form shall be US citizens, including any third-party penetration (PEN)/security testers.

4) All data transit shall be secured with Transport Layer Security (TLS) encryption.

5) All data at rest shall be secured with Advanced Encryption Standard (AES)-256 encryption.

1.6.4 Ensure that data integration includes the following:

1) Automated industry standard form of data integration using Representational State Transfer Application Program Interface (RESTful API), Learning Tools Interoperability (LTI), or Secure File Transfer Protocol (SFTP) data sets (ClassLink, OneRoster, etc.).

2) Encryption of DoDEA’s data at rest to include unique encryption keys for each customer on systems hosting multiple customers.

3) Notification of DoDEA in writing within 72 hours of any changes made to corporate policies for data protection.

4) Use of only masked student data in a non-production environment.

5) Integration scheduling that meets DoDEA’s required timeframes.

6) Provision of fully automated data uploads per Agency schedule(s) and Agency requirements.

7) Support of SFTP capabilities using a single set of login credentials.

8) Provision of a single data set of DoDEA information. Note: The Contractor’s solution shall support DoDEA at all levels: school, community, district, region, and HQ.

9) Maintenance of a backup and restore plan for DoDEA data in the event of a disaster.

10) Provision of detailed feedback of what caused errors if an integration transmission results in errors.

1.6.5 System Features—The system shall:

1) Allow user accounts to be created automatically based on a file provided by DoDEA either nightly or on another pre-determined scheduled feed.

2) Allow DoDEA to be able to choose the format of user login identification, e.g., an email address, and be able to create manual accounts, if needed.

3) Require the user—for manually created accounts—to reset the password on the user’s initial login or, upon request, a password reset.

13 Oct 23 2