8-Exhibit A Technical Requirements.xlsx

XLSX spreadsheet 46 KB Posted

Attached to
BACKGROUND SCREENING SERVICES
Solicitation number
548009
Issued by
Wayne County, Detroit City, Michigan

About this file

This file is an Attachment F Technical Requirements Matrix for a system procurement by the City of Detroit, Michigan. The document establishes detailed technical specifications and functional requirements across multiple system categories that potential vendors must address in their proposals. The requirements are organized into distinct functional areas including General Technical capabilities, Document Management, Reporting, User Interface, Security, Cloud Services, Backup and Recovery, Mobile Access, and Support and Training. Vendors are required to respond to each requirement using a standardized matrix format, indicating whether requirements are "Met and Proposed" (C), "Intent Met with Alternative" (A), or "Not Met" (N), along with relevant comments and modules required to fulfill each requirement. The matrix covers approximately 200 individual requirements across all functional categories, requiring comprehensive vendor responses that demonstrate system capabilities and compatibility with City of Detroit operational needs.

The technical requirements encompass critical system functionalities including integrated module workflows, multi-format data import/export capabilities (txt, csv, Excel, Word, SQL), API integration support, OCR functionality, and advanced search capabilities. Security requirements are extensive, including Microsoft Entra ID and Azure Active Directory integration, multi-factor authentication, role-based security at multiple levels (department, division, role, user, screen, menu, report, and field), encryption of data at rest and in transit, HIPAA and CJIS compliance, and comprehensive audit trail capabilities. The system must support modern web browsers without desktop client installation, provide mobile accessibility across iOS, Android, Windows, and Chrome devices with 256-bit encryption, and deliver advanced reporting features including interactive dashboards, scheduled report distribution, and integration with tools such as Tableau and SSRS. Business continuity requirements mandate geographic redundancy across Tier III data centers, with specified recovery time objectives and recovery point objectives, while support and training requirements include 24/7 web-based support, online documentation, live webinar training at no additional cost, and recorded training sessions for City staff.

View the file

Other files

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

General Technical

ATTACHMENT F - REQUIREMENTS MATRIX
RFP Name & RFP # _________Enter vendor name here
Available Responses
CRequirement Met and Proposed (Standard features available in the product)0
AIntent of Requirement Met and Proposed with Alternative0
NRequirement Not Met with Proposal0

. TOTAL 0

Req #FunctionGeneral Technical RequirementCriticalityVendor Response
(C, A, N)Modules Required to Fulfill RequirementsComments
1Integrated modulesThe system has the ability to flow all changes made in the system throughout all proposed system features without the need for duplicate data entry.
2Data ExportThe system has the ability to import and export data from (or to) standard file formats including but not limited to: (Please specify import/export or both in the Comments column)
3Data Export.txt;
4Data Export.csv;
5Data ExportMS Excel
6Data ExportMS Word
7Data ExportMS SQL
8Data ExportUse the comments column to specify other file formats that apply.
9File ImportThe system has the ability to accommodate and manage large file sizes for import. Please indicate max file size allowed.
10APIThe system has the ability to support API's (Application Programming Interface) for third-party system integration, imports, and exports of data.
11Data DictionaryThe system has the ability to provide a centralized data dictionary, that fully describes table structure and appropriate levels of metadata.
12Web browsersThe system has the ability to support modern web browsers (i.e. Chrome, Edge, Firefox).
13No desktop client installedThe system has the ability to be fully operational without an instance of an installed client on the desktop.
14Retention schedulesThe system has the ability to support management of records' and associated files' retention schedules.
15OCRThe system has the ability to electronically capture and store files, with Optical Character Recognition (OCR) capabilities.
16Search functionalityThe system has the ability to search by fragment or portion of a word.
17Search functionalityThe system has the ability to search by wild cards.
18System navigationThe system has the ability to provide links to associated modules from any display screen to minimize backing out of one screen to access another.
19System navigationThe system has the ability for multiple windows to be open at the same time, allowing City staff to view and edit multiple projects or application simultaneously.
20System navigationThe system has the ability to warn a user that they are about to execute a process and ask if they want to proceed.
21Field Label ControlThe system has the ability to allow the City system administrator to rename field labels.
22Field Label ControlThe system has the ability to view history of field label changes made by a City system administrator.
23Mobile screen optimizationThe system has the ability to recognize the device that is being used to view the software to make the necessary window adjustments (screen optimization).
24System updatesThe system has the ability to allow properly authorized users to configure and maintain all system settings from any workstation on the local/wide area network.
25System updatesThe system has the ability to allow remote deployment of system updates and system maintenance.
26System AdministrationThe vendor must proactively notify the System Administrator regarding which releases of third-party software (JAVA virtual machine, Internet Explorer, Mozilla, Safari, etc.) are known to create problems with the current version of the vendor software.

Document Management

ATTACHMENT F - REQUIREMENTS MATRIX
RFP Name & RFP # _________Enter vendor name here
Available Responses
CRequirement Met and Proposed (Standard features available in the product)0
AIntent of Requirement Met and Proposed with Alternative0..
NRequirement Not Met with Proposal0

. TOTAL 0

Req #FunctionGeneral Technical RequirementCriticalityVendor Response
(C, A, N)Modules Required to Fulfill RequirementsComments
1Document ManagementThe system has the ability to provide Document Management functionality to track electronic files associated with specific system records.
2Document ManagementThe system has the ability to hyperlink to different system document record(s)
3Document ManagementThe system has the ability to detect duplicate documents or files and store a single instance.
4Document ManagementThe system has the ability to use "drag and drop" or file upload functionality to associate documents to transactions within the system.
5Document ManagementThe system has the ability to link imported documents to specific records.
6Document ManagementThe system has the ability to allow a user to scan documents directly into the system.
7Document ManagementThe system has the ability to export a file directly for document storage.
8Document ManagementThe system has the ability to allow users to select exported file type.
9Document ManagementThe system has the ability to email a linked image file to another party (internally or externally).
10Document ManagementThe system has the ability to email a linked case file to another party (internally or externally).

Reporting

ATTACHMENT F - REQUIREMENTS MATRIX
RFP Name & RFP # _________Enter vendor name here
Available Responses
CRequirement Met and Proposed (Standard features available in the product)0
AIntent of Requirement Met and Proposed with Alternative0
NRequirement Not Met with Proposal0

TOTAL 0

Req #FunctionReporting RequirementsCriticalityVendor Response
(C, A, N)Modules Required to Fulfill RequirementsComments
1Report writerThe system has the ability to provide an integrated report writer.
2Report writerThe system has the ability to provide an integrated report writer that has a consistent look and feel across all proposed system features.
3Report writerThe system has the ability to provide an integrated report writer that allows the creation of reports comprised of any discrete data field throughout the system.
4Report writerDescribe any output limitations of the system's native report writer.
5ReportingThe system has the ability to drill down on reports.
6ReportingThe system has the ability to provide a library of standard reports (i.e. "canned" reports).
7ReportingThe system provides authorized users with a canned Report Wizard that will let the user select filtering data such as (specify as appliable to the software)
8ReportingThe system has the ability to save a report as a new template after a user copies and modifies an existing report, with appropriate security permissions.
9ReportingThe system has the ability to allow a user to modify existing reports, with appropriate security permissions.
10ReportingThe system has the ability to configure and save ad hoc reports by individual user, with the ability to provide access to other users with appropriate security permissions.
11Data exportThe system allows for ad-hoc reporting based and can be exported to excel for further analysis
12ReportingThe system has the ability to save favorite reports in a menu or pick-list by individual user.
13ReportingThe system has the ability to allow one or more users to query information and run reports at the same time.
14ReportingThe system has the ability to allow generated reports to be viewed on screen prior to printing.
15ReportingThe system has the ability to allow reports to be generated that are searchable.
16DashboardsThe system has the ability to provide interactive dashboards for consumption by City staff.
17DashboardsThe system has the ability to drill down on dashboard results.
18DashboardsThe system has the ability to display data on dashboards in real-time.
19DashboardsThe system has the ability to allow a user to manually refresh dashboards.
20Scheduled reportsThe system has the ability to schedule reports to run in the future.
21Report distributionThe system has the ability to configure automatic distribution paths for generated reports (i.e. automatically send a report to a particular user).
22Report distributionThe system has the ability to schedule and to distribute reports via email.
23ReportingThe system has the ability to display when a report is being run, or in process, so that a user does not run the report again.
24GIS integrationThe system provides reports by location through an integration with GIS (e.g. street, or other spatially-related).
25CompatibilityThe system's reporting features are compatible with MS SQL environment.
26CompatibilityThe system has the ability to integrate with Tableau.
27CompatibilityThe system has the ability to support the creation of reports using SSRS.
28ReportingThe system has stored procedures that prepare data for output to a crystal Report (or equivalent) that is executed by a report shell
29Data schema documentationThe system has the ability to provide the City full access to all data within the system and data and includes clear, up-to-date schema documentation
30Reporting documentationDocumentation, training, and procedures provided that will outline:
31Reporting documentationHow to access reports
32Reporting documentationHow to prepare reports
33Reporting documentationHow to utilize the data for the Department's reporting needs
34Reporting documentationHow to develop and edit stored procedures
35Reporting documentationHow bad data is identified and scrubbed

User Interface

ATTACHMENT F - REQUIREMENTS MATRIX
RFP Name & RFP # _________Enter vendor name here
Available Responses
CRequirement Met and Proposed (Standard features available in the product)0
AIntent of Requirement Met and Proposed with Alternative0
NRequirement Not Met with Proposal0

TOTAL 0

Req #FunctionUser Interface RequirementCriticalityVendor Response
(C, A, N)Modules Required to Fulfill RequirementsComments
1ADA ComplianceThe system has the ability to provide American Disability Act (ADA)-compliant online help documentation.
2ADA ComplianceThe system has the ability to comply with the American Disability Act (ADA):
3ADA ComplianceThe system has the ability to allow users to access using a screen reader with a text-to-speech (TTS) system.
4ADA ComplianceThe system has the ability to accept data entry through the use of constituent's or user's voice recognition software (i.e. speech to text functionality).
5ADA ComplianceThe system has the ability to provide text alternatives on all visuals
6ADA ComplianceThe system has the ability to accommodate keyboard support (i.e. anchor links to allow disabled users to access content using a keyboard).
7ADA ComplianceThe system has the ability to include and support Accessible Rich Internet Applications (ARIA) landmarks.
8ADA ComplianceThe system has the ability to provide functionality or integrate with third-party products to enlarge the print on computer screens (i.e. screen magnification).
9HyperlinksThe system has the ability to provide hyperlink capability.
10Required FieldsThe system has the ability to allow the City to determine which fields are required, beyond standard system keys.
11Spell checkThe system has the ability to spell check on any field with the ability for a user to accept or ignore suggestion.
12User InterfaceThe system includes an intuitive user interface that promotes usability and ease of navigation throughout all system components.
13User InterfaceThe system has the ability to provide drop down boxes or other pick list function for data selection.
14User InterfaceThe system has the ability to provide integration with the Microsoft clipboard.
15User InterfaceThe system has the ability to store field-level metadata and display it in the user interface when appropriate.
16User InterfaceThe system has the ability to provide data validation on entry.
17User InterfaceThe system has the ability to provide drill down capability on all screens where applicable.
18User InterfaceThe system has the ability to provide the user with standard field editing capabilities including but not limited to: navigation forward and backward to complete data entry and the ability to correct spelling mistakes.
19User InterfaceThe system has the ability to provide predictive text capability with the ability to turn this functionality on or off, by field .
20User InterfaceThe system has the ability to support pre-filled fields in appropriately pre-formatted screens eliminating redundant data entry.
21User InterfaceThe system has an intuitive user interface and simple design which enables users to accomplish tasks with minimal number of clicks and keystrokes.
22User InterfaceThe system has the ability to provide links to associated features from any display screen to minimize backing out of one screen to access another, with appropriate security.
23User InterfaceThe system has the ability to provide the user with integrated application features that offer a consistent user interface to minimize user training and administration of the system.

Security

ATTACHMENT F - REQUIREMENTS MATRIX
RFP Name & RFP # _________Enter vendor name here
Available Responses
CRequirement Met and Proposed (Standard features available in the product)0
AIntent of Requirement Met and Proposed with Alternative0
NRequirement Not Met with Proposal0

TOTAL 0

Req #FunctionSecurity RequirementCriticalityVendor Response
(C, A, N)Modules Required to Fulfill RequirementsComments
1SSOThe System has the ability to utilize the City's Microsoft Entra ID service for user validation, regardless of deployment method.
2AD integrationThe system has the ability to inherit groups from Active Directory for application authentication.
Multi Factor AuthenticationThe system has the ability to support Multi Factor Authentication (MFA)
3SAMLThe system has the ability to utilize the City's SAML Authentication (Azure Active Directory) for user validation to achieve single-sign-on, regardless of deployment method.
4SAMLThe system has the ability to map SAML groups or App roles from Azure Active Directory for application permissions .
5Password EncryptionThe system has the ability to store passwords in encrypted form, if applicable.
6EncryptionThe system has the ability to encrypt data stored in the database.
7EncryptionThe system has the ability to encrypt data stored in the application.
8EncryptionThe system has the ability to encrypt data in transit.
9EncryptionPlease provide information as to what level of encryption/encryption methods are used in transit and at rest.
10Role based securityThe system has the ability to provide read, write, update, and delete access using role based security.
11Role based securityThe system has the ability to provide security at the following levels:
12Role based securityDepartment or Agency;
13Role based securityDivision;
14Role based securityRole or group;
15Role based securityUser ID;
16Role based securityScreen;
17Role based securityMenu;
18Role based securityReport;
19Role based securityField;
20Role based securityThe system allows for departmental administrative self-service (e.g. ability to make changes to roles and workflows) with audit trail capability.
21Role based securityThe system has the ability to update all user profiles automatically (user discretion) when a change in their role (s) is/are made.
22Role based securityThe system has the ability to allow a City system administrator to add and change permissions for system access.
23User GroupsThe system has the ability to establish, deactivate, and archive user groups.
24User GroupsThe system has the ability to delete user groups that do not have historical data, with an audit trail.
25ComplianceThe system is HIPAA compliant and vendor will enter into a BAA with the City.
26ComplianceThe system is CJIS compliant
27ComplianceThe system is IRS Publication 1075 compliant
28ComplianceThe system meets compliance rules / regulations in order to ensure the sensitive digital assets are guarded against loss, theft and misuse
29ComplianceThe system is compliant with applicable compliance regulations.
30Security CertificationsPlease list any industry standard security certifications the solution / vendor has. (Ex: ISO 27001).

Please note annual SOC 2 type reports will be required via the City’s contract.

31Audit CapabilitiesThe system has the ability to track and audit changes throughout the system that creates a log of all records maintained and includes:
32Audit CapabilitiesDate;
33Audit CapabilitiesTime;
34Audit CapabilitiesUser;
35Audit CapabilitiesInformation prior to change;
36Audit CapabilitiesChanged information
37Audit CapabilitiesThe system has the ability to allow the audit trail to have a date/time stamp to the nearest second.
38Audit CapabilitiesThe system has the ability to allow a City system administrator to configure the duration that time audit logs are retained (e.g. 90 days). Proposer to describe how this feature works.
39Audit CapabilitiesThe system has the ability to provide customizable audit reports.
40Access Time OutThe system has the ability to log users off the system after an administrator-defined period of inactivity, based on user-defined roles.
41Access Time OutThe system has the ability to allow a system administrator to log out users.
42SecurityThe system has the ability to allow authorized users to have access to a log of security activity to determine users that have signed on and off the system, as well as unsuccessful attempts to sign on to the system.
43SecurityThe system has the ability to scan attached files for viruses, malware, or other cybersecurity threats (vendor to specify capability for using City preferred anti-virus solutions).
44Applicable to submissions from the publicThe system has the ability to capture IP addresses from a requestor.

Cloud Checklist

ATTACHMENT F - REQUIREMENTS MATRIX

RFP Name & RFP # _________

Cloud Service Provider Security Checklist
Please provide an answer or statement to all issues listed
Enter vendor name here
Prompt #TopicVendor Response
1Describe who is responsible uptime, maintenance, patching and administration of the server.
2The provider must show diagram (and possible past examples) of their governance and notification processes for their services.
3Describe how the provider will guarantee legal and regulatory compliance with government and sectorial (industry specific) laws and regulations.
4Does the solution follow one of the following sets of security and privacy control best practices? Indicate which.
4aNIST Series
4bISO/IEC Series
4cCOBIT
4dITIL
5The vendor will provide to the City, at no additional cost, the most recent SOC 2 Type 2 report from its cloud hosting provider covering the environments used by the City.
6Describe process for Account Management
7Define who is responsible for security monitoring. If the City will be responsible for securing the environment, describe how the City will obtain logs to ingest into its SIEM.
8Describe how a data inventory of City of Detroit Data Assets will be kept.
9Will subcontractors be used? If yes, will all security controls be inherited by subcontractors?
10Describe Public Key Infrastructure
11Process for separation of data belonging to different consumers in a multi‐tenant environment.
12Does the solution use a private, shared or hybrid cloud?
13Process used to separation of network traffic in a shared multi‐tenant provider environment
14Statement guaranteeing adherence to all privacy laws governing the physical areas of data storage.
15Willing to participate in a Risk Assessment and Privacy Impact Assessment covering the storage of PII.
16Network traffic must be screened and firewall protected network must have intrusion detection & prevention in place.
17Network must have detailed logging and documented alerting capabilities.
18Dedicate VLANs with dedicated virtual firewall.
19Describe how the City of Detroit network access separated from provider network access.
20Are the City of Detroit VMs are on a dedicated hypervisor?
21Will provider's servers only communicate with the City of Detroit logical disk units?
22Will online storage and backup media be scrubbed when retired or replaced?
23Identify system environments that will be available to the City (e.g. production, development, test)
24Identify shared components of the system (e.g., network segments, backup tapes, etc.)
25Identify Data storage and transfer limits
26Identify normal and peak bandwidth requirements

Backup-Recovery

ATTACHMENT F - REQUIREMENTS MATRIX

RFP Name & RFP # _________

Backups / Business Continuity and Recovery RFP Questions
Please provide an answer or statement to all issues listed
Enter vendor name here
Prompt #TopicVendor Response
1Proposers shall have a backup and recovery capability for the system and application, including incremental and full backup capabilities. Additionally, system backups shall be accomplished without taking the application out of service and without degradation of performance or disruption to City operations.
2Proposers shall be able to provide the service from at least two geographically diverse data centers that do not share common threats (e.g., the data centers cannot be in the same earthquake zone, likely hurricane path, same flood zone, etc.). The data centers shall at a minimum meet Tier III standards for redundancy of power, telecommunications, HVAC, security, fire suppression and building integrity.

• Where are the data center and storage facilities?

• The Proposer shall not store or transfer non-public City of Detroit data outside of the United States without the written consent of the City. This includes backup data and Disaster Recovery locations.

3Proposers shall specify whether, in the event of a technology or other failure at the primary processing center, the alternate system will meet the following tiers, for which the City’s use should be identical regardless of which location is processing the City’s work:
3a• High Availability – Continuous operation without interruption or degradation in service
3b• Standard availability – Available for City use within 48 hours with no degradation in service
3c• Non-Critical Availability – Available for City use within 96 hours with no degradation in service
4Proposers shall implement crisis management, business continuity and disaster recovery plans, subject to City approval, which the City will not reasonably withhold. These plans shall outline how the Proposer will support the City’s recovery at the alternate site, including backup staff required to implement the plan in an emergency if the Proposer’s primary staff is unavailable. Such plans may also include annual testing in coordination with the City.
5Proposers shall specify the System’s proven, maximum tolerable length of time that a computer, system, network, or application can be down after a failure or disaster occurs or its recovery time objective (“RTO”) and the amount of data at risk, as determined by the amount of time between data protection events, and as it reflects the amount of data that potentially could be lost during a disaster recovery point objective, (“RPO”) in case the primary site becomes unavailable. The selection of the RTO and RPO will be agreed upon objectives between the Proposer and the City.
6Proposers shall specify whether the System will meet the following availability tiers, which tier, and shall specifically describe how the System meets such tier:
6a• High Availability, 99.982%

RTO Characteristics and RPO: Intra-day, Typically involves data replication, to a hot-site for each transaction, or at short intervals, like 15 minutes.

6b • Standard Availability, 99.741% RTO Characteristics and RPO: 24 to 48 hours Nightly imaging to cloud / data center. System reestablished at time of disaster from cloud / data center. May lose up to one day of data.

6c • Non-Critical Availability, 99.671% RTO Characteristics and RPO: 48 to 56 hours, Nightly imaging to cloud / data center. System reestablished at time of disaster from cloud / data center. May lose up to one day of data.

7 Identify shared components of the system (e.g., network segments, backup tapes, etc.)

Mobile Access

ATTACHMENT F - REQUIREMENTS MATRIX
RFP Name & RFP # _________Enter vendor name here
Available Responses
CRequirement Met and Proposed (Standard features available in the product)0
AIntent of Requirement Met and Proposed with Alternative0..
NRequirement Not Met with Proposal0

. TOTAL 0

Req #FunctionMobile Access RequirementCriticalityVendor Response
(C, A, N)Modules Required to Fulfill RequirementsComments
1Mobile responsivenessThe system is accessible from mobile devices.
2Mobile responsivenessThe system has the ability to recognize the device that is being used to view the software to make the necessary window adjustments (screen optimization).
3Mobile AccessibilityThe system has the ability to monitor the connection status of mobile units and display this information in the administrative portal
4Mobile AccessibilityThe system supports the following platforms: iOS, Android, Windows, Google Chrome devices.
5Mobile AccessibilityThe system has the ability to support all popular browsers (i.e. Safari, Chrome, Edge, FireFox, etc.) and provide browser and device agnostic capability.
6Data encryptionThe system encrypts all data that is transmitted to and from the mobile devices with a minimum of 256-bit encryption.
7Mobile AccessibilityThe system has the ability to synchronize data from the field to ensure data is viewable in real-time, if applicable.
8Mobile AccessibilityThe system has the ability to allow field users to access all data and documents from a remote location, with ability to later upload or synchronize data at a later date due to no or low connectivity in the field.
9Mobile AccessibilityThe system has the ability to perform pre-defined queries from the field against the system database for those needing to view historical data.
10Mobile MessagingThe system has the ability for mobile messaging functionality to allow users to send/receive text messages to/from appropriate personnel within the system or to any valid email address.
11Mobile AccessibilityThe system has the ability to allow multiple users to use a single device, with different security access based on user logon.

Support & Training

ATTACHMENT F - REQUIREMENTS MATRIX
RFP Name & RFP # _________Enter vendor name here
Available Responses
CRequirement Met and Proposed (Standard features available in the product)0
AIntent of Requirement Met and Proposed with Alternative0
NRequirement Not Met with Proposal0
TOTAL0
.
Req #FunctionSupport and Training RequirementCriticalityVendor Response
(C, A, N)Modules Required to Fulfill RequirementsComments
1Vendor Support / UpgradesThe system has the ability to allow for outage times to be outside of standard business hours.
2Vendor Support / UpgradesThe vendor offers software application support during planned upgrades outside of typical operating hours, as requested by the City, if applicable.
3Vendor Support / UpgradesThe system has the ability to provide an administrative messaging system (e.g. a message to alert users of system maintenance activity).
4Vendor Support / UpgradesThe vendor has the ability to provide web-based support, with a searchable database of common problems.
5Vendor Support / UpgradesThe system has the ability to adhere to the City's security policy, which requires vendors to request for access to the on premise application for troubleshooting.
6Vendor Support / UpgradesVendor has the ablity to provide support through remote access to the application in accordance with City procedures, if applicable.
7Vendor Support / UpgradesThe system has the ability to create error logs with detail associated with the error.
8Vendor Support / UpgradesThe system has the ability to provide error messages that appear in a consistent format across all system features.
9Training / HelpThe system includes a suite of online training features.
10Training / HelpThe system includes access to an online user group community for City staff.
11Training / HelpThe system includes online software documentation for all software application features.
12Training / HelpThe system includes access to periodic live webinar training sessions to City staff at no additional cost.
13Training / HelpThe system includes recorded training sessions that may be viewed by City staff at no additional cost.
14Training / HelpThe system includes functional online help documentation for system end users of all types.
15Training / HelpThe system includes technical online help documentation for City system administrators.
16Training / HelpThe system has the ability to provide error messages that are integrated with online help functionality.
17Training / HelpThe system has the ability to provide contextual help (i.e. field descriptions that are displayed based on the location of the mouse or cursor).

File details come from the government source that posted it. Updated .