Administrative Protocol 3723A Information Security Risk Evaluation Summary

This file is an information security risk evaluation document prepared for the Los Angeles Community College District (LACCD) in support of RFP 26-04 for a Case Management Software System. The RFP seeks a comprehensive cloud-based solution to manage Title IX and Discrimination, Harassment, and Retaliation (DHR) cases across nine colleges within the district. The system must provide core functionalities including multi-channel intake and reporting, case tracking and workflow management, centralized case repository, document management, secure communication tools, regulatory reporting compliance, analytics and dashboards, mobile access, automated notifications, customizable templates, and comprehensive audit trails. A mandatory pre-proposal conference is scheduled for March 18, 2026, at 10:30 a.m. Pacific Standard Time, with questions due by March 25, 2026, at 2:00 p.m. Pacific Time and answers posted by April 6, 2026. Proposals must be submitted by April 13, 2026, at 2:00 p.m. Pacific Daylight Time. Interviews and demonstrations are scheduled for May 13-14, 2026, with a tentative award date of May 15, 2026, and anticipated Board approval on June 3, 2026. The contract term is three years with two optional one-year renewal periods for a potential total of five years.

The evaluation process consists of three phases assessing written proposals (qualifications and experience at 20 points, functionality and technical requirements at 25 points, implementation approach and data migration at 25 points, cost at 20 points, and SLEDV certification at 10 points), followed by interviews and demonstrations, and negotiations with the three highest-scoring proposers. The solution must comply with WCAG 2.2 Level AA accessibility standards by July 2026 and incorporate FIPS 140-3 encryption standards, multi-factor authentication, role-based access controls, and data residency within the continental United States. Pricing proposals require firm, fixed pricing covering software licensing, implementation, data migration, training, maintenance, and support services across the five-year period. A SLEDV set-aside consideration worth 10 percent of the evaluation criteria applies to encourage participation from Small, Local, Emerging, and Disabled Veteran Business enterprises. No specific budget or incumbent vendor information is disclosed; however, vendors must address data migration from the existing system as a key deliverable.