8-Attachment D- VJF Scope of Work (1) (1).docx

Attachment D

SCOPE OF WORK

Virtual Job Fairs

I. Purpose/Background A mission of the Department of Workforce Services (DWS) is to assist employers connect with job seekers to fill open employment opportunities, stabilizing and growing the Utah economy. DWS facilitates this process through sponsoring job fairs. DWS is seeking a Contractor to provide a virtual job fair platform to assist DWS with this mission.

II. Contractor Responsibilities The Contractor will provide a virtual job fair platform for DWS to connect job seekers to employers.

A. Virtual Job Fair system requirements include, but are not limited to:

1. Unlimited capacity for

a. Events

b. Users

c. Employer booths

2. No downloads required for participants

3. Fully mobile-friendly

4. Accessible via Internet (standard web browsers)

5. Ability to organize job fair layout based on preference (e.g. industry, job type, location)

6. Ability for DWS administrators to:

a. Manage and configure events

b. Show or hide employer booths

c. Block users

d. Remove visitors from the fair in the event of misconduct

e. Spot-check booth content for quality B. Job Seeker Features

1. Job seekers shall have the ability to:

a. Create a profile. User profiles shall include:

i. First and Last name

ii. Username

iii. Password

iv. Email

v. Phone number

b. Upload and save resumes for employers to view

i. Resumes must be able to be saved for future events

2. The Contractor shall have sufficient safeguards in place to ensure the information obtained from job seekers is used only for the purpose disclosed. Information in electronic format shall be stored and processed in such a way that unauthorized persons cannot retrieve the information by computer, remote terminal, or any other means.

C. Employer Features

1. Employers shall have the ability to personalize booths and view job seeker registration information and resumes.

a. The Contractor shall have sufficient safeguards in place to ensure the information obtained from employers is used only for the purpose disclosed. Information in electronic format shall be stored and processed in such a way that unauthorized persons cannot retrieve the information by computer, remote terminal, or any other means.

D. Event Interaction Tools

1. Secure chat feature for communication during events

2. The ability for job seekers to block other job seeker chats

3. Chats remain visible after page refresh

4. Secure video functionality for live interviews

5. Virtual marketing/display options within the event platform E. Analytics Requirements

1. The Contractor shall provide analytics the day after each event. Analytics shall include, but are not limited to:

a. Number of participants

i. Number of job seekers

1. % of participants by city

2. Access data:

a. Methods (e.g. desktop, mobile, tablet)

b. City

c. Browser (e.g. Safari, Chrome)

d. Mobile Device used (e.g. Apple iPhone, Samsung Galaxy)

b. Demographics (age, gender)

c. Number of employers

i. Number of job seekers per employer booth

ii. Number of open jobs F. Support and Training

1. Dedicated support contact or representative

2. Employer training provided upon request G. Security Requirements The Contractor shall ensure compliance with the following security requirements:

1. Monitor, detect, analyze, protect, report, and respond against known vulnerabilities, attacks, and exploitations.

2. Continuously test and evaluate information security controls and techniques to ensure that they are effectively implemented.

3. Maintain network security that, at a minimum, includes network firewall provisioning and intrusion detection.

4. State Data Security: These security measures included but are not limited to maintaining secure environments that are patched and up to date with all appropriate security updates as designated (ex. Microsoft Notification). Ensure state data is encrypted at rest and in transit using no less than 128-bit encryption.

5. Software shall allow enforcement of strong passwords for user accounts.

6. All state data and services related to state data shall be performed within the borders and jurisdiction of the United States. All state data will be stored and maintained in data centers in the United States.

7. Immediately inform DWS of any security incident or data breach.

a. Comply with all applicable laws that require the notification of individuals in the event of a data breach or other events requiring notification in accordance with DTS Policy 5000-0002 Enterprise Information Security Policy.

b. In the event of a data breach or other event requiring notification under applicable law (Utah Code § 13-44-101 thru 301 et al), the Contractor shall:

i. Cooperate with DWS by sharing information relevant to the Data Breach

ii. Promptly implement necessary remedial measures, if necessary

iii. Document responsive actions taken related to the data breach, including any post-incident review of events and actions taken to make changes in business practices in relation to the data breach

iv. If the data breach requires public notification, all communication shall be coordinated with DWS. The Contractor is responsible for all notification and remedial costs and damages H. Additional Requirements In compliance with the Utah terms and conditions, where the product does not already have a FedRAMP or verified GovRAMP status, the following provisions apply:

1. At the time of contract execution, the product must be enrolled in the GovRAMP Progressing Snapshot Program and remain in the program until a verified status is achieved.

2. The product must achieve a verified status of GovRAMP Core no later than 12 months after the date of contract execution and achieve a verified status of GovRAMP Moderate Authorized no later than 24 months after the date of contract execution.

3. If the Contractor fails to maintain or achieve the security requirements outlined above, the Contractor may be subject to liquidated damages and the State of Utah may reevaluate the terms of the contract and determine whether the failure to comply justifies contract termination.

I. Accessibility Standards

1. The Contractor shall comply with the Accessibility Standards of Section 508 Amendment to the Rehabilitation Act of 1973.

2. The Contractor shall comply with Utah Administrative Code R895-14-3(3), which states that contractors developing new websites or applications for state agencies are required to meet accessibility guidelines subject to rule R895 and correct any items that do not meet these guidelines at no cost to the agency.

3. The Contractor shall comply with Utah Administrative Code R895-14-4(2), which states that contractors proposing IT products and services shall provide Voluntary Product Accessibility Template® (VPAT™) documents.

J. Audit and Monitoring Requirements

1. Audit

a. The Contractor shall, upon written notification permit DWS, or a third party designated by DWS, to perform an assessment, audit, examination, or review of all of the Contractor’s sites and environments, including physical, technical, and virtual sites and environments, in order to confirm the Contractor’s compliance with this contract; applicable laws and regulations, and industry standards.

b. The Contractor shall fully cooperate with such assessment by providing access to knowledgeable personnel, physical premises, records, technical and physical infrastructures, and any other person, place, or object which may assist DWS or its designee in completing such assessment.

c. Upon request, the Contractor shall provide the results of any audit performed by or on behalf of the Contractor that would assist DWS or its designee in confirming the Contractor’s compliance with this contract, applicable laws and regulations, and industry standards.

2. Monitoring DWS reserves the right to monitor the Contractor’s performance, perform plan checks, plan reviews, other reviews, and comment upon the services of the Contractor. This includes the Contractor’s Subcontractors, if any. Results of any evaluation may be made available to the Contractor at the Contractor’s request.

K. Delivery Requirements

1. The Contractor shall have the platform up, running, and customized by April 01, 2026.

2. Future events shall have a delivery time of no more than 10 days after receipt of the requirements from DWS.

III. Budget A. Bid should include costs for 5 years of the contract.

B. This is a fixed cost agreement not to exceed the bid amount set forth on Attachment E - Cost Bid Sheet.

1. All costs necessary to complete the requirements set forth in this Scope of Work must be included on the cost sheet or will not be allowed in the resulting contract.

2. The contract may be amended to add additional funds in the event additional services are needed.