ATTACHMENT B: SCDE GIFTED AND TALENTED SOLUTION REQUIREMENTS.xlsx

XLSX spreadsheet 157 KB Posted

Attached to
GIFTED AND TALENTED APPLICATION SOFTWARE State and local contract opportunity
Solicitation number
5400025700
Issued by
Richland County, South Carolina

About this file

This is a Scope of Work and Technical Requirements document from the South Carolina Department of Education (SCDE) for a Gifted and Talented Application Software solution. The RFP seeks a comprehensive software platform to serve as the authoritative source for gifted and talented student data management across school districts. The solution must support core functionalities including tracking and reporting of student gifted status with entry and exit dates, maintenance of parent withdrawal data, documentation of services provided, evidence recording for giftedness identification with focus on historically underreported subgroups, assessment data tracking, and integration with multiple assessment platforms such as Riverside, Pearson, iReady, and MAP. The system must accommodate state and federal reporting requirements, including Office of Civil Rights (OCR) data extraction, support custom and ad-hoc reporting capabilities, integrate with Ed-Fi ODS for nightly student roster uploads, calculate student GPA from academic records, and maintain detailed student profiles with printable notes fields. The platform must support role-based access control, single sign-on capabilities, multi-language support (minimum English and Spanish), and twelve-month year-round operations across multiple schools and districts.

The technical requirements mandate that the solution operate as a hosted offering with 24/7 availability and a minimum 99.99% uptime guarantee, excluding scheduled maintenance. The platform must comply with accessibility standards including ADA, Section 508, and WCAG 2.x compliance with current VPAT documentation, implement robust security measures including encryption at rest and in transit, multi-factor authentication, and comprehensive audit trails with minimum six to twelve months of retention. The solution must adhere to FERPA requirements, prevent SQL injection and other common security vulnerabilities, support industry-standard protocols including TCP/IP and SOA architecture, and maintain disaster recovery and business continuity processes with regular testing. All functional and technical requirements are designated as mandatory unless specifically marked as optional or optional with additional cost, indicating the SCDE's strict requirements for system capabilities and security posture.

View the file

Other files for this state and local contract opportunity

Other files attached to GIFTED AND TALENTED APPLICATION SOFTWARE, newest first.
File Type Posted
ATTACHMENT C: PRICE PROPOSAL WORKBOOK.xlsx XLSX spreadsheet
Award Extension Notice.doc DOC document
Solicitation.doc DOC document
Attachment G- Sample Report.pdf PDF
Amendment 1.docx DOCX document
ATTACHMENT E: SERVICE PROVIDER SECURITY ASSESSMENT QUESTIONNAIRE.docx DOCX document
ATTACHMENT D: DEMONSTRATION SCRIPT.docx DOCX document
Attachment F- List of Fields in the Current Solution.xlsx XLSX spreadsheet
Award Posting Notice.doc DOC document

On GovTribe

Work with this file on GovTribe

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Cover Page

SCDE GIFTED & TALENTED SOLUTION RFP

ATTACHMENT A - SOLUTION REQUIREMENTS

This material is the Confidential, Proprietary and Trade Secret product of the South Carolina Department of Education. Any unauthorized use, reproduction or transfer of these materials is strictly prohibited.

Copyright 2019 South Carolina Department of Education. ALL RIGHTS RESERVED.

G&T Reqs SCDE GIFTED & TALENTED SOLUTION REQUIREMENTS (Include this document along with your proposal)

Functional Requirements
Mandatory (M)
or Optional (O)Is this done today? (Yes/No)If no, what date will this be available?Please identify each function as:

C=Core O=Optional

OC=Optional, w/ add'l costComments
Enter M or OOfferor's responseOfferor's responseOfferor's responseOfferor's response
GIFTED AND TALENTED
1The solution shall be the authoritative source for gifted data (district goals, funding, & planning)M
2The solution shall provide the ability to track and report students’ gifted and talented status, including entry and exit dates, when gifted and talented status has been assigned to, changed, or removed from a student.M
3The solution shall provide the ability to track and maintain parent withdraw from service data for a student (reporting, data range, and flags to exclude).M
4The solution shall provide the ability to track and report Gifted and Talented services provided including but not limited to program models.M
5The solution shall provide the ability for a user to record evidence for giftedness including providing the ability to report on historically underreported subgroups and other groups as desired.M
6The solution shall provide the ability to track and report Gifted and Talented assessment data for students.M
7The solution shall provide the ability to track gifted assessment history.M
8The solution shall provide for data platform uploads transitional with the program (riverside, pearson, iready, map, etc.)M
9The solution shall provide the ability to maintain assessment information for Gifted and Talented students, including but not limited to:

• Name of Test

• Date of test

• Scores - (1) Quantitative (Math) Giftedness

• Scores - (2) Language Arts (Verbal) Giftedness

• Scores - (3) Non-Verbal Reasoning Giftedness

• Date identified

• Indicators for: General Intellectual; Verbal; Quantitative

• Narrative commentsM
10The solution shall provide the ability to integrate with other solutions.M
11The solution shall allow districts to apply state requirements and state activity codes for funding.M
12The solution shall allow districts and/or schools to set local identification criteria within the program.M
13The solution shall upload student rosters from the Ed-Fi ODS at least nightly and provide the ability to do a manual data push as needed (all enrollments).M
14The solution shall allow for the calculation of student GPA scores through uploads from the Ed-Fi ODS from the student academic record tables. These calculations should be limited to core courses as specified by the state.M
15The solution shall allow for referrals (input referral and produce list of referrals).M
16The solution shall maintain a student profile to hold student data.M
17The solution shall include a printable Notes field in the student profile that can be included in reports.M
STATE AND FEDERAL REPORTING
1The solution shall provide the ability to generate data for all state and federal reports requiring gifted & talented student data.M
2The solution shall provide the ability for a user to create and update state and federal reports without modifying other user-defined or pre-defined reports.M
3The solution shall provide the ability to support all state reporting requirement formats.M
4The solution shall provide the ability to select which schools to include when processing state reporting.M
5The solution shall provide the ability to extract and report data for all questions on federal reporting for the Office of Civil Rights (OCR).M
6The solution shall provide the ability to validate student accountability-related data on entry, import, and export.M
7The solution shall provide the ability for a user to create custom reports, including reports based on ad-hoc queries.M
8The solution shall provide the ability for the user to generate and print multiple reports at one time.M
9The solution shall provide the ability to extract student, teacher, and course information required for State reporting.M
10The solution shall provide the ability to report student, class, school, grading and district level dataM
11The solution shall provide the ability to report student data across an unrestricted number of school years, e.g., all assessments, grades earned, attendanceM
12The solution shall provide a user friendly GUI based interface that does not require in depth knowledge of SQL or database schema to create or generate reports.M
13The solution shall provide the ability create shareable custom reports.M
14The solution shall provide the ability to make custom reports available based on user role.M
15The solution shall provide the ability to roll back imports to the previous data within a defined set of parameters. For example: if changes have already been made to the imported data, no rollback can occur without notification and approval.O
GENERAL FUNCTIONS
1The solution shall provide the ability to support single sign-on .M
2The solution shall provide an authorized user the ability to view, update, and generate reports on any student assigned to them at any campus the student attends within the district.M
3The solution shall provide the ability for an authorized user to retrieve reports and data based on the assigned level of access. Both the reports available to the user and the content of the reports will vary depending on the user’s level of access.M
4The solution shall allow for customization by authorized users and within the confines of the solution functionality and state mandate.M
5The solution shall provide a comprehensive search function that can be used across the solution and be filterable based on user authorizationM
6The solution shall provide the ability to run form letters (for example: do not qualify or qualify letters) out of the system with ability to modify at district level to share to schoolsM
7The solution shall provide the ability for a user to select student demographic data for inclusion in standard or custom letters.M
8The solution shall provide the ability to be able to support twelve month year-round LEA and school operations.M
9Can the solution support multiple languages at minimum English and Spanish. Please describe?M
10The solution shall wrap text when a field length is exceeded for the space defined, e.g. course description text wrapping.M
11Does the solution include a data analytics feature to allow users to select data, apply filters, sort, export, and view in list/tabular format as well as graphically?O

Tech Reqs

SCDE GIFTED & TALENTED SOLUTION TECHNICAL REQUIREMENTS

RequirementsMandatory (M)
or Optional (O)Is this done today? (Yes/No)If no, what date will this be available?Please identify each function as:

C=Core O=Optional

OC=Optional, w/ add'l costComments
Categories with * are from the 1EdTech Core Rubric. Items with ** are 1EdTech Extensions.Enter M or OOfferor's responseOfferor's responseOfferor's responseOfferor's response
Accessibility**
1Does the solution adhere to accessibility standards in compliance with the Americans with Disabilities Act (ADA), Section 508 and WCAG 2.x? Please describe and include current WCAG 2.0 rating.M
2Has a VPAT or ACR been created or updated for the product and version under consideration within the past year? If yes, please attach.M
3Has a third-party accessibility expert conducted an accessibility audit of the most recent version of your product? If yes, please attach.M
4Is there a documented and implemented process for verifying accessibility conformance? If yes, please attach.M
5Does the product rely on activating a special "accessibility mode," a "lite version," or accessing an alternate interface for accessibility purposes? Please describe.M
6Is there documentation to support the accessibility features of the product? Please describe.M
Advertising*
1Advertising must not be displayed in the solution.M
2Users must not be targeted for advertisements.M
3Third parties must not track or collect information for advertising.M
4Web beacons or other tracking methods must not be used for ad purposes.M
Application Audit
1Does the solution permit authorized users to view an audit record of past logins? Please describe.M
2Does the solution provide an audit trail of all changes to data fields; the record shall include IP address, User ID, date, and time? Please describe.M
3Does the solution provide a detailed, configurable audit trail on any field? Please describe.M
4Does the solution provide enough storage to retain a minimum of 6 months to 12 months of audit storage. SCDE Requirements are that a solution must allocate sufficient audit storage capacity to ensure compliance with audit log retention requirements of minimum 6mo with a preference for 12 monthsM
5Does the solution allow authorized users to configure which fields are audited?M
6Does the solution allow different levels of auditing to be selected, where a "level" specifies the fields to be audited?M
7Does the solution audit all failed login attempts, including IP address, timestamp, date stamp, and user ID?M
8Does the solution provide an audit screen showing history of changes?M
9Is all audit information/data reportable, preferably with an analytics interface including export options to allow the ability to view and export audit data? Please describe.M
Change Management
1Does the solution support the addition of district-defined fields/objects that protect user-defined fields and data in those fields from being altered by future vendor software updates and releases?O
2Does the solution provide an easy way for the vendor to block user access to the system during system maintenance?M
3Does the solution vendor provide advanced notification to end users prior to changing anything in the solution? Please explain.M
4Does the solution vendor provide a full back out (rollback) plan for any new upgrade or release? Please describe.M
5Does the solution change management system provide an avenue to prioritize change requests? Please describe.M
6Does the change management system store the history of changes (software, hardware, network configuration, etc.) to the system?M
7Does the solution include a UAT environment with high availability for users to test and approve all changes before they are deployed to the production system?M
8Does the solution vendor provide release notes that describe the changes that will be applied with a patch or version upgrade? Please describe.M
9Does the solution vendor have an approval process in place for planned outages? Please describe.M
10Does the solution vendor perform all necessary testing before releases and preserve the testing results for a minimum of 90 days for reference?M
Data Collected*
1List all data collected by the solution. Include information provided by the user explicitly as well as information collected by the application during its use.M
2Describe how data is collected.M
3Do users or data owners have the ability to delete their data entirely? Please describe.M
4Describe the retention of data collected.M
Data Handling**
1Does the solution provide a method for authorized users to specify a date or time period upon which an attachment will be automatically deleted from the archive? Please describe.M
2Does the solution vendor have a standard decommissioning process that includes removing all information from decommissioned equipment? Please describe.M
Database
1Does the solution provide a regular database backup and recovery process? Please describe.M
2Does the solution include a transaction log for purposes of recovery and audit?M
3The solution must perform database transaction log backups at specified interval. Please describe.M
4The solution must maintain data integrity across all modules by implementing data entry validation rules for all methods of inserting or updating data. Please describe.M
5The vendor must maintain, and keep current, a data dictionary.M
6The vendor must share the data dictionary and data model.M
7Does the solution support standard data import formats, including but not limited to csv and xml? Please describe.M
8Does the vendor periodically perform standard maintenance practices to maintain reasonable response times? Please describe.M
9Describe how users can access the raw data?M
10Does the solution support storage of audio and image data? Please describe.O
11Does the solution provide a report generation architecture that allows queries to be run without affecting the operation of the main database? Please describe.M
12Does the solution include a transaction audit capability for database maintenance?M
13Does the solution provide data validation at point of entry?M
14Does the solution support TCP/IP network protocol?M
Disaster Recovery and Business Continuity
1Does the solution vendor test the DR/BC process? Please describe, include how often.M
2In the event of system failure, how long before the solution be fully operable? Please describe.M
Documentation and Training
1Does the solution vendor provide up-to-date, accurate, extensive, online, and searchable documentation identifying step-by-step procedures for completing tasks and activities? Please describe.M
2Does the solution vendor provide updated user guides, help systems, and training concurrently with new releases or changes to the system? Please describe.M
3Does the solution vendor provide online help features for all screen elements that include database table name and field (fields and screen error codes)?O
4Does the solution vendor's online help system include an index and a search feature?M
5Are error messages integrated with the online help function? For example, can a data entry user click on an error message and have the solution open the online help to the appropriate page?O
6Does the solution vendor offer different types of training? Please describe each type and how it is offered.M
7Does the solution vendor provide end user support staff and hours of availability ? Please describe all services and support offered.M
General
1Is the solution offered as a hosted solution? Please describe.M
2What are the solution's accessibility requirements? i.e. - Wi-Fi, Broadband, Low Speed Internet, etc. Please describe all requirements.M
3Does the solution provide 24/7 availability with a minimum of 99.99% up time (excluding scheduled maintenance)?M
4Is the vendor willing to customize the solution as needed in order to satisfy current and future state and federal reporting requirements, and SEA or LEA needs (per service level agreement)?M
Interoperability
1Does the solution support being populated by a local district Ed-Fi ODS and the state’s Ed-Fi ODS?M
2Does the solution support all current versions of the Ed-Fi API?M
3Does the solution address error handling and recovery procedures in the Ed-Fi API? If yes, please describe.M
4Does the solution capture unsuccessful Ed-Fi write events and log them for recovery?M
5If yes, does the solution have a process for administrators to resolve such events?M
6Does the solution handle Ed-Fi extensions? The desired outcome is to successfully load the data and drop the extensions.M
7Does the solution support sourcing data from or to an Ed-Fi API?M
8Does the solution support IMS Global Interoperability standards such as OneRoster, Caliper, LTI, QTI etc.? Please list.M
Legal**
1Does the solution retain audit and event logs per Department of Archives and History or statutory requirements?M
2Does the solution adhere to procedures to protect records in compliance with the Family Educational Rights and Privacy Act of 1974 (FERPA)?M
Network Infrastructure
1If hosted, does the solution use intrusion detection systems and intrusion prevention systems (IDS/IPS) in the network configuration?M
2If hosted, does the solution use a load balancer? Please describe.M
3Does the solution provide industry standard secure communication among servers between various entities? Please describe.M
4Does the solution use commercial network/systems management tools? Please describe.M
Performance
1Does the solution include a governor or other performance manager for controlling and limiting the processing? Please describe.M
2Does the solution provide a dashboard for viewing performance and optimization statistics? Please describe.M
3Does the solution vendor have a Service Level Agreement (SLA)? Please attachM
4Is the solution scalable to accommodate overall system growth? How would the SCDE request additional resources?M
5Does the solution vendor have a regular monthly maintenance window during non-business hours? Please describe.O
Privacy and Access
1Does the solution provide robust password security? Please describe in detail. SCDE mandates the following minimum password requirements:

Does not contain the user's account name or parts of the user's full name that exceed two consecutive characters Does not match the last 10 password used Max password age is 90 days (max password age is 60 days for a privileged user) Must be at least eight characters in length (twelve characters in length for a priveleged user) Must contain characters from three of the following four categories:

English uppercase characters (A through Z) English lowercase characters (a through z) Base 10 digits (0 through 9)

Non-alphabetic characters (for example, !, $, #, %)M
2The solution must perform data encryption at rest and in transit. Please describe.M
3Does the solution use an industry standard encryption technology to encrypt private data in the database?M
4Does the solution support role-based access control configured by an authorized user? Please describe.M
5Does the solution provide the option to designate the following to assigned roles/modules: update/delete/view/no accessM
Security – Application Level
1Does the solution support configurable access control for mass data changes? Please describeM
2Does the solution provide for users to alert solution administrators of security or other issues? Please describe.M
3If hosted, can application session timeout be configurable by authorized users? Please describe.M
Security –Platform Level
1Does the solution support security certificates (validation and authentication devices)? Please describe.M
2If hosted, does the solution follow standard security guidelines from OWASP (the Open Web Application Security Project, http://www.owasp.org) and the Web Application Security Consortium (http://www.webappsec.org/)? Please describe.M
3Does the solution prevent SQL injection?M
4Does the solution accept query strings from the browser URL (for example, DO use server.com/app/article.aspx?article=b1705; NOT server.com/app/article.aspx?xml=/articles/b1705.xml.)?M
5Does the solution accept double encoding from the browser? Please describe.M
6Does the solution discard data that fails a check for double encoding? Please describe.M
7Does the solution prevent browser history replay attacks?M
8Does the solution use encryption for browser communication?M
9Does the solution perform a virus check on all files uploaded to the system by the user, quarantine all infected files, and inform the user of the infected and quarantined files? Please describe.O
10Does the solution use compression or dedupe technology to compress or dedupe attachment files? Please describe compression technology and dedupe technology.M
11Does the solution create its own unique file identifier for all files uploaded by the user?M
12Does the solution prevent certain files from being uploaded to the system by the user (for example, ?exe files)? Please describe and include excluded file types.M
13Does the solution provide multi-factor authentication?M
14Does the solution use industry standard security protocol services for user authentication and centralized user management?M
15Does the solution always encrypt login credentials?M
16Does the solution reuse a session established prior to authentication, after authentication? Please explain.M
17Does the solution enforce a user lockout policy if the system suspects the account information (login/password) is compromised?M
18Does the solution implement automatic idle timeout? Please describe.M
19Does the solution allow multiple concurrent logins by a single user from separate device? Please describe.M
20Does the solution allow an authorized user to open multiple views (or windows) within one instance?O
21Does the solution use alerts to notify designated users/administrators of critical system changes or unavailability of services?M
22Does the solution keep data in the session, not on the client browser or in form fields?M
23Does the solution allow master passwords? If yes, please explain why.M
24Does the solution allow users to rename files? Please describe.M
Security*
1If hosted, what point-to-point encryption capabilities and other communications security do you have? Please describe.M
2Is the solution hosted in a secure data center? Please include all information on firewalls, DMZs, and other security controls.M
3If hosted, does the data center have 24×7 security personnel?M
4If hosted, does the data center provide 24×7 video recording of all activities in the datacenter and retain those recordings? Please describe and include retention information.M
5Describe the use of cookies by the solution. Please explain the type of information being collected.M
6If hosted, does the solution provide the ability for authorized users and the system administrator to view a list of all users currently logged in, the time of their login, and whether or not they are active?M
7If hosted, does the solution use 508-compatible CAPTCHA technology for all forms exposed to the public prior to user authentication? Please describe.M
Servers
1If hosted, does the solution vendor provide all hardware/software components needed to comply with the implementation?M
Software Application
1Do you have a business application flow diagram that describes the flow relevant to this offering, including:

- presentation layer (i.e., user interfaces, content management, web based technologies)

- integration layer (i.e., SOA, Web services, APIs, messaging, ETL processing, 3rd party vendor, Client)

- business application layer (i.e., application server, languages, framework)

- data layer technology (i.e., databases, storage)

- reporting capabilities (i.e., tools, dashboard, ETL capabilities)

If yes, please attach.M
2Is your platform architected to separate Client data physically or logically? For example, would our data reside in a dedicated hardware/software environment or are platforms physically shared with others? Please describe.M
3What are your minimum Network/Communication requirements?M
4The solution must not require redundant data entry.M
5Does the solution store the same data in multiple tables? If yes, please explain.M
6Does the solution permit a user to sign online documents with a digital signature? Please explain.O
Software Infrastructure
1Does the solution support service-oriented architecture (SOA) to integrate with modules from other vendors and other software solutions, including HR systems and financial systems?M
2Does the solution support single sign-on/Federated Security? Please describeM
3Does the solution provide the ability to manage background task and batch queue execution priorities and sequencing? Please describe.M
4Does the solution offer and support an API? Please describe.M
Third Party Data Sharing*
1What information is shared with each third party? Please describe in detail.M
2Can users opt out of third party data sharing? Please describe.M
3Is the business owner notified of a change in third parties?M
Third Party Integrations**
1How does the solution keep integrated systems in sync? Please describe.M
2Are there any required third party vendor solutions required? Please describe.M
3Does the solution interface with an e-mail system? Please describe.M
4If applicable, does the solution integrate with other directory services in a secure way such as LDAPs. Please describe.M
User Interface
1Does the solution cache data in working memory from screen to screen until submit.M
2Does the solution support all main browser versions such as but not limited to Edge, Chrome, and Firefox? Please list any others.M
3Does the solution ensure that all required fields are indicated as required in the user interface, for example with bold formatting or asterisks? Please describe.M
4If the solution ensures that all required fields are indicated as required in the user interface, is this configurable by authorized users?O
5Does the solution provide an out of the box dashboard functionality that is configurable by authorized users? Please provide details.M
6Does the solution have the ability to display a list of all values for each field in which choices are limited to a predefined set of values and all of the edits? Please describe.M
7Does the solution provide typeahead functionality? Please describe.M
8Does the solution use more than two levels of submenus? Please describe.M
9Does the solution prompt the user to save changed data, discard the data, or cancel the action before exiting the application? Please describe.M
10Does the solution enforce format on date fields to ensure consistancy?M
11Are error messages displayed in a consistent format across all solution modules, for both batch and online processing? Error messages should be fully described with consistent codes, text, and screen locations.M
12Does the solution automatically spell-check data entered in any text box? Please describe include if this functionality is configurable.M

image1.png

File details come from the government source that posted it. Updated .