ATTACHMENT B: SCDE GROWTH MEASURES SOLUTION REQUIREMENTS.xlsx
XLSX spreadsheet 157 KB Posted
- Attached to
- GROWTH MEASURES State and local contract opportunity
- Solicitation number
- 5400026848
- Issued by
- Richland County, South Carolina
About this file
This document is a Solution Requirements specification issued by the South Carolina Department of Education (SCDE) for a Growth Measures software solution. The specification outlines comprehensive functional, technical, and operational requirements across multiple categories including state-level, district-level, and school-level capabilities. Core requirements include the ability to capture student-level state assessment data, calculate school-level growth measures, integrate with the Ed-Fi API for enrollment data, and generate reports on student performance across subgroups. The solution must provide web-based reporting on growth metrics at state and Local Education Agency (LEA) levels, support formative and summative assessments for math and ELA, and enable comparative analysis across districts, schools, and grade levels. Additional mandatory features include projection summary reports predicting future proficiency and college-readiness levels, diagnostic tools identifying student progress patterns, and an online portal with definable security, user-configurable settings, and real-time processing capabilities without batch processing requirements.
The specification establishes extensive technical requirements organized into discrete functional areas, all designated as mandatory unless otherwise noted. The solution must comply with accessibility standards including ADA, Section 508, and WCAG 2.x compliance with current VPAT documentation, prohibit advertising and user tracking, maintain comprehensive audit trails with 6-12 months of retention capacity, and support multiple data integration standards including CSV and XML imports. Security requirements mandate robust password protocols, encryption at rest and in transit, role-based access control, multi-factor authentication, and SQL injection prevention. The solution must operate as a hosted offering with 99.99% uptime availability (excluding scheduled maintenance), include disaster recovery and business continuity testing, and support Ed-Fi API integration with error handling and unsuccessful event logging capabilities. The vendor must provide current documentation, training platforms, 24/7 end-user support, and maintain a Service Level Agreement (SLA), while accommodating current and future state and federal reporting requirements through customization capabilities.
View the file
Other files for this state and local contract opportunity
| File | Type | Posted |
|---|---|---|
| Amendment 1.docx | DOCX document | |
| ATTACHMENT C: PRICE PROPOSAL WORKBOOK.xlsx | XLSX spreadsheet | |
| ATTACHMENT D: SERVICE PROVIDER SEURITY ASSESSMENT QUESTIONNAIRE.docx | DOCX document | |
| SOLICITATION 5400026848.docx | DOCX document |
On GovTribe
Work with this file on GovTribe
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Cover Page
SCDE Growth Measure Solution
ATTACHMENT A - SOLUTION REQUIREMENTS
This material is the Confidential, Proprietary and Trade Secret product of the South Carolina Department of Education. Any unauthorized use, reproduction or transfer of these materials is strictly prohibited.
Copyright 2023 South Carolina Department of Education. ALL RIGHTS RESERVED.
Solution Reqs SCDE Growth Measure Solution
| Functional Requirements | |||
| Mandatory (M) | |||
| or Optional (O) | Is this done today? (Yes/No) | If no, what date will this be available? | Please identify each function as: |
C=Core O=Optional
| OC=Optional, w/ add'l cost | Comments | ||||||
| for the vendor response | for the vendor response | for the vendor response | for the vendor response | ||||
| SOLUTION REQUIREMENTS - STATE-LEVEL | |||||||
| 1 | The solution must capture student level state assessment data. Please describe. | M | |||||
| 2 | The solution must capture student performance levels. Please describe. | M | |||||
| 3 | The solution must capture student enrollment data from a state designated system (currently an Ed-Fi API). Please describe. | M | |||||
| 4 | The solution must be able to calculate school level growth for all students participating in prescribed assessments. Please describe. | M | |||||
| 5 | The solution must be able to calculate growth of students to the lowest quintile based on performance of the students within the schools. Please describe. | M | |||||
| 6 | The solution must be able to measure growth across subgroups and deliver reports at the state and LEA level. Please describe. | M | |||||
| 7 | The solution must deliver web reports on growth across groups and subgroups at the state and LEA level. Please describe. | M | |||||
| 8 | The solution must be able to create a state math summative assessment file. Please describe. | M | |||||
| 9 | The solution must be able to create a state ELA summative assessment file. Please describe. | M | |||||
| 10 | The solution must include of growth index of all students, school composite comparison for all students, and subgroup reporting as required by ESSA. Please describe. | M | |||||
| 11 | The solution must provide a means of displaying information including but not limited to: formative assessments, state summative assessments, MVT, and AVT; as well as, providing authorized teacher and school level adminstrators access to student level and classroom level historic scores. Please describe. | M | |||||
| 12 | The solution must provide a graphical representation of progress over time at the student level by tested subject area (ELA and math). Please describe. | M | |||||
| 13 | The solution must provide district, school and grade level comparitive aggregate data (i.e. comparing a seventh grade classroom to seventh grade school level, seventh grade school level to seveth grade district performance). Please describe. | M | |||||
| 14 | The solution must provide an annual report by December 31st of the previous years formative assessment data indicating the number of unique test takers by subject area, school district. Please describe. | M | . | ||||
| SOLUTION REQUIREMENTS - DISTRICT-LEVEL | |||||||
| 1 | The solution must be able to report up to 3 years of reporting on growth measures for each grade and subject. Therefore, must be able to import data from prior years and systems, and generate reporting on growth measures from those years. | M | |||||
| 2 | The solution must be able to create a value added summary report displaying growth measures for each grade and subject for all schools in the district. This will include the present year along with 3 year averages if available. The vendor will be required to load the previous three years’ assessments to produce three growth ratings for years prior to the beginning of the contract, including the rating for the current year. | M | |||||
| 3 | The solution must create a diagnostic report helping educators identify patterns or trends of progress among students at various achievement levels and performance levels that align with state assessment programs | M | |||||
| 4 | The solution must be able to produce a district performance report that helps educators identify patterns or trends of progress among students at different performance levels for schools | M | |||||
| 5 | The solution must creating a projection summary report that shows the probability those students within a grade at a district will score at or above proficiency on future tests | M | |||||
| 6 | The solution must create a projection summary report that shows the probability that students within a grade at a district will score a college-readiness levels. | M | |||||
| 7 | The solution must have the ability for educators to drill down the projection summary report to see individuals in each probability group and target their interventions accordingly | M | |||||
| 8 | |||||||
| SOLUTION REQUIREMENTS - SCHOOL-LEVEL | |||||||
| 1 | The solution must have the ability to display information from the value-added diagnostic reports on a single page for educators to examine patterns of growth across grades, subjects, and levels of achievement. | M | |||||
| 2 | The solution must have the ability to capture the data necessary to report growth measurements for a specific subgroup of students and by subject area. | M | |||||
| 3 | The solution must be able to provide a diagnostic tool providing educators the ability to identify patterns or trends of progress among students with achievement and performance levels aligning with state assessments. | M | |||||
| 4 | The solution must have the ability to provide projection summaries that will predict the probability that a students within a grade at a school will score at or above proficiency on future tests. | M | |||||
| 5 | The solution must have the ability to drill down into the projection summaries to each individual student in each probability group which gives them the ability to target their interventions accordingly. | M |
| ONLINE PORTAL | ||
| 1 | The solution must provide definable security to control data access at each online screen and database table by user account. | M |
| 2 | The solution must provide user definable configuration allowing flexibility to match site-specific processes. | M |
| 3 | The solution must provide the ability for users to add accessibility information (ALT-Tags) when uploading images and make that required functionality. | M |
| 4 | The solution must provide easy navigation within the application using standard windows functionality that allows multiple applets to display simultaneously. | M |
| 5 | The solution must provide drop down lists for all codes displaying both the code and description. | M |
| 6 | The solution must provide “real time” work in progress screens that display work order statuses, assigned tasks, location of work, and assigned labor. | M |
| 7 | The solution must provide date fields selectable from a dropdown calendar | M |
| 8 | The solution must use codes stored in data tables that can be accessed, viewed, printed and modified by users with appropriate levels of permission. | M |
| 9 | The solution must be capable of interfacing with other applications such as value-added data systems. The requirements for import/ export functions are outlined in a separate section. | M |
| 10 | The solution must use real-time processing where all files affected by a transaction are updated at the time of the actual transaction without the need for batch processing. | M |
| 11 | The solution must include executable run time reports providing quick and easy access to comprehensive file and system data. | M |
| 12 | The solution must include updated documentation and necessary scripts for any database structure changes. | M |
| 13 | The solution must support an industry-standard, report-writing/data-retrieval tool. Please provide recommended third-party product. | M |
| 14 | The solution must include a “Help” button within the application | M |
| 15 | The solution must provide a search engine for those with the appropriate permissions to search for individual teachers or groups of teachers. | M |
| REPORTING | ||
| 1 | The solution must be able to provide a report on all teachers receiving value-added reports including Value added measure by test, subject, and grade. | M |
| 2 | The solution must deliver web reports on growth across groups and subgroups at the state and LEA level | M |
| 3 | ||
| 4 | ||
| 5 | Reports generated by the solution must be free of grammatical, typographical, and formatting errors. If errors are discovered, these shall be corrected in a timely manner. | M |
| INTERFACE | ||
| 1 | The solution must offer web-based features accessible from any internet connection | M |
| 2 | The solution must interface is easy to use and offers breadcrumb-like navigation. | M |
| 3 | The solution must have a mobile interface with user-agent detection and appropriate security of personally identifiable information. | M |
| 4 | The solution must provide a mobile and tablet optimized interface and appropriate security of personally identifiable information. | M |
| 5 | The solution must have a mobile application for all major mobile platforms (i.e. iOS, Android) and appropriate security of personally identifiable information. | M |
| 6 | The solution's mobile application must support all major functions in the Web System. | M |
| 7 | The solution's mobile application must have the appropriate level of security for personally identifiable information. | M |
| 8 | The solution's mobile application must provide a single interface theprovides users with role-based content. | M |
| INTEGRATION | ||
| 1 | The solution must be able to integrate with student level assessment results. | M |
| 2 | The solution must be able to integrate with student-teacher linkages coming from the student roster file. | M |
| 3 | The solution must be able to integrate with a student enrollment file which would include what school the students are enrolled in and the period of enrollment. | M |
| 4 | The solution must be able to integrate with SCREADY, SCPASS, Career Readiness Assessment(s), and EOCEP. | M |
| 5 | ||
| ADDITIONAL FEATURES | ||
| 1 | The solution may export results to Excel/Word/PDF. | M |
Tech Reqs SCDE Growth Measure Solution
| Requirements | Mandatory (M) | ||
| or Optional (O) | Is this done today? (Yes/No) | If no, what date will this be available? | Please identify each function as: |
C=Core O=Optional
| OC=Optional, w/ add'l cost | Comments | ||||||
| Categories with * are from the 1EdTech Core Rubric. Items with ** are 1EdTech Extensions. | for the vendor response | for the vendor response | for the vendor response | for the vendor response | |||
| ACCESSIBILITY** | |||||||
| 1 | Does the solution adhere to accessibility standards in compliance with the Americans with Disabilities Act (ADA), Section 508 and WCAG 2.x? Please describe and include current WCAG 2.0 rating. | M | |||||
| 2 | Has a VPAT or ACR been created or updated for the product and version under consideration within the past year? If yes, please attach. | M | |||||
| 3 | Has a third-party accessibility expert conducted an accessibility audit of the most recent version of your product? If yes, please attach. | M | |||||
| 4 | Is there a documented and implemented process for verifying accessibility conformance? If yes, please attach. | M | |||||
| 5 | Does the product rely on activating a special "accessibility mode," a "lite version," or accessing an alternate interface for accessibility purposes? Please describe. | M | |||||
| 6 | Is there documentation to support the accessibility features of the product? Please describe. | M | |||||
| ADVERTISING* | |||||||
| 1 | Advertising must not be displayed in the solution. | M | |||||
| 2 | Users must not be targeted for advertisements. | M | |||||
| 3 | Third parties must not track or collect information for advertising. | M | |||||
| 4 | Web beacons or other tracking methods must not be used for ad purposes. | M | |||||
| APPLICATION AUDIT | |||||||
| 1 | Does the solution permit authorized users to view an audit record of past logins? Please describe. | M | |||||
| 2 | Does the solution provide an audit trail of all changes to data fields; the record shall include IP address, User ID, date, and time? Please describe. | M | |||||
| 3 | Does the solution provide a detailed, configurable audit trail on any field? Please describe | ||||||
| M | |||||||
| 4 | Does the solution provide enough storage to retain a minimum of 6 months to 12 months of audit storage. SCDE Requirements are that a solution must allocate sufficient audit storage capacity to ensure compliance with audit log retention requirements of minimum 6mo with a preference for 12 months | M | |||||
| 5 | Does the solution allow authorized users to configure which fields are audited? | M | |||||
| 6 | Does the solution allow different levels of auditing to be selected, where a "level" specifies the fields to be audited? | M | |||||
| 7 | Does the solution audit all failed login attempts, including IP address, timestamp, date stamp, and user ID? | M | |||||
| 8 | Does the solution provide an audit screen showing history of changes? | M | |||||
| 9 | Is all audit information/data reportable, preferably with an analytics interface including export options to allow the ability to view and export audit data? Please describe. | M | |||||
| CHANGE MANAGEMENT | |||||||
| 1 | Does the solution preserve ALL local customizations when a new patch or upgrade is deployed? | O | |||||
| 2 | Does the solution support the addition of customer-defined fields/objects that protect user-defined fields and data in those fields from being altered by future vendor software updates and releases? | O | |||||
| 3 | Does the solution provide an easy way for the vendor to block user access to the system during system maintenance? | M | |||||
| 4 | Does the solution vendor provide advanced notification to end users prior to changing anything in the solution? Please explain. | M | |||||
| 5 | Does the solution vendor provide a full back out (rollback) plan for any new upgrade or release? Please describe | M | |||||
| 6 | Does the solution change management system provide an avenue to prioritize change requests? Please describe | M | |||||
| 7 | Does the change management system store the history of changes (software, hardware, network configuration, etc.) to the system? | M | |||||
| 8 | Does the solution include a UAT environment with high availability for users to test and approve all changes before they are deployed to the production system? | M | |||||
| 9 | Does the solution vendor provide release notes that describe the changes that will be applied with a patch or version upgrade? Please describe | M | |||||
| 10 | Does the solution vendor have an approval process in place for planned outages? Please describe. | M | |||||
| 11 | Does the solution vendor perform all necessary testing before releases and preserve the testing results for a minimum of 90 days for reference? | M | |||||
| DATA COLLECTED* | |||||||
| 1 | List all data collected by the solution. Include information provided by the user explicitly as well as information collected by the application during its use. | M | |||||
| 2 | Describe how data is collected. | M | |||||
| 3 | Do users or data owners have the ability to delete their data entirely? Please describe. | M | |||||
| 4 | Describe the retention of data collected. | M | |||||
| DATA HANDLING** | |||||||
| 1 | Does the solution provide a method for authorized users to specify a date or time period upon which an attachment will be automatically deleted from the archive? Please describe. | M | |||||
| 2 | Does the solution vendor have a standard decommissioning process that includes removing all information from decommissioned equipment? Please describe. | M | |||||
| DATABASE | |||||||
| 1 | Does the solution provide a regular database backup and recovery process? Please describe | M | |||||
| 2 | Does the solution include a transaction log for purposes of recovery and audit? | M | |||||
| 3 | The solution must perform database transaction log backups at specified interval. Please describe. | M | |||||
| 4 | The solution must maintain data integrity across all modules by implementing data entry validation rules for all methods of inserting or updating data. Please describe. | M | |||||
| 5 | The vendor must maintain, and keep current, a data dictionary. | M | |||||
| 6 | The vendor must share the data dictionary and data model. | M | |||||
| 7 | Does the solution support standard data import formats, including but not limited to csv and xml? Please describe. | M | |||||
| 8 | Does the vendor periodically perform standard maintenance practices to maintain reasonable response times? Please describe. | M | |||||
| 9 | Does the solution provide a report generation architecture that allows queries to be run without affecting the operation of the main database? Please describe. | M | |||||
| 10 | Does the solution include a transaction audit capability for database maintenance? | M | |||||
| 11 | Does the solution provide data validation at point of entry? | M | |||||
| 12 | Does the solution support TCP/IP network protocol? | M | |||||
| DISASTER RECOVERY AND BUSINESS CONTINUITY | |||||||
| 1 | Does the solution vendor test the DR/BC process? Please describe, include how often. | M | |||||
| 2 | In the event of system failure, how long before the solution can be fully operable? Please describe. | M | |||||
| DOCUMENTATION AND TRAINING | |||||||
| 1 | Does the solution vendor provide up-to-date, accurate, extensive, online, and searchable documentation identifying step-by-step procedures for completing tasks and activities? Please describe. | M | |||||
| 2 | Does the solution vendor provide updated user guides, help systems, and training concurrently with new releases or changes to the system? Please describe. | M | |||||
| 3 | Does the solution vendor's online help system include an index and a search feature? | M | |||||
| 4 | Are error messages integrated with the online help function? For example, can a data entry user click on an error message and have the solution open the online help to the appropriate page? | O | |||||
| 5 | Does the solution allow authorized users to add comments to the application Help, which will then be visible to other users? | O | |||||
| 6 | Does the solution vendor facilitate a user group to discuss feature functionality and share information among users. | O | |||||
| 7 | Does the solution vendor offer different types of training? Please describe each type and how it is offered. | M | |||||
| 8 | Does the solution vendor maintain a permanent training platform that can be used to train staff members on the system? The training platform must be current and contain appropriate sample data corresponding to the examples in the user's guide/training materials, to be used for training purposes. | O | |||||
| 9 | If the solution vendor maintain a permanent training platform, is it kept current and contain appropriate sample data corresponding to the examples in the user's guide/training materials, to be used for training purposes? | O | |||||
| 10 | Does the solution vendor provide end user support staff and hours of availability ? Please describe all services and support offered. | M | |||||
| GENERAL | |||||||
| 1 | Is the solution offered as a hosted solution? Please describe. | M | |||||
| 2 | What are the solution's accessibility requirements? i.e. - Wi-Fi, Broadband, Low Speed Internet, etc. Please describe all requirements. | M | |||||
| 3 | Does the solution provide 24/7 availability with a minimum of 99.99% up time (excluding scheduled maintenance)? | M | |||||
| 4 | Is the vendor willing to customize the solution as needed in order to satisfy current and future state and federal reporting requirements? Please describe. | M | |||||
| INTEROPERABILITY | |||||||
| 1 | Does the solution support all current versions of the Ed-Fi API? | M | |||||
| 2 | Does the solution address error handling and recovery procedures in the Ed-Fi API? If yes, please describe. | M | |||||
| 3 | Does the solution capture unsuccessful Ed-Fi write events and log them for recovery? | M | |||||
| 4 | If yes, does the solution have a process for administrators to resolve such events? | M | |||||
| 5 | Does the solution handle Ed-Fi extensions? The desired outcome is to successfully load the data and drop the extensions. | M | |||||
| 6 | Does the solution support sourcing data from or to an Ed-Fi API? | M | |||||
| 7 | Does the solution support IMS Global Interoperability standards such as OneRoster, Caliper, LTI, QTI etc.? Please list. | M | |||||
| LEGAL** | |||||||
| 1 | Does the solution retain audit and event logs per Department of Archives and History or statutory requirements? | M | |||||
| 2 | Does the solution adhere to procedures to protect records in compliance with GDPR when applicable? | O | |||||
| 3 | Does the solution adhere to procedures to protect records in compliance with the Family Educational Rights and Privacy Act of 1974 (FERPA)? | M | |||||
| 4 | Does the solution adhere to procedures to protect records in compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA)? | M | |||||
| NETWORK INFRASTRUCTURE | |||||||
| 1 | If hosted, does the solution use intrusion detection systems and intrusion prevention systems (IDS/IPS) in the network configuration? | M | |||||
| 2 | If hosted, does the solution configuration use a load balancer? | M | |||||
| 3 | If hosted, does the solution use a load balancer? Please describe. | M | |||||
| 4 | Does the solution provide industry standard secure communication among servers between various entities? Please describe. | M | |||||
| 5 | Does the solution use commercial network/systems management tools? Please describe. | M | |||||
| PERFORMANCE | |||||||
| 1 | Does the solution include a governor or other performance manager for controlling and limiting the processing? Please describe. | M | |||||
| 2 | Does the solution provide a dashboard for viewing performance and optimization statistics? Please describe. | M | |||||
| 3 | Does the solution vendor have a Service Level Agreement (SLA)? Please attach. | M | |||||
| 4 | Is the solution scalable to accommodate overall system growth? How would the SCDE request additional resources? | M | |||||
| 5 | Does the solution vendor have a regular maintenance window during non-business hours? Please describe. | M | |||||
| PRIVACY AND ACCESS | |||||||
| 1 | Does the solution provide robust password security? Please describe in detail. SCDE mandates the following minimum password requirements: |
- Does not contain the user's account name or parts of the user's full name that exceed two consecutive characters
- Does not match the last 10 password used
- Max password age is 90 days (max password age is 60 days for a privileged user)
- Must be at least eight characters in length (twelve characters in length for a priveleged user)
- Must contain characters from three of the following four categories:
- English uppercase characters (A through Z)
- English lowercase characters (a through z)
- Base 10 digits (0 through 9)
| - Non-alphabetic characters (for example, !, $, #, %) | M | ||
| 2 | The solution must perform data encryption at rest and in transit. Please describe. | M | |
| 3 | Does the solution use an industry standard encryption technology to encrypt private data in the database? | M | |
| 4 | Does the solution support role-based access control configured by an authorized user? Please describe. | M | |
| 5 | Does the solution provide the option to designate the following to assigned roles/modules: update/delete/view/no access | M | |
| SECURITY – APPLICATION LEVEL | |||
| 1 | Does the solution support configurable access control for mass data changes? Please describe | M | |
| 2 | Does the solution provide for users to alert solution administrators of security or other issues? Please describe. | M | |
| 3 | If hosted, can application session timeout be configurable by authorized users? Please describe. | M | |
| SECURITY –PLATFORM LEVEL | |||
| 1 | Does the solution support security certificates (validation and authentication devices)? Please describe. | M | |
| 2 | If hosted, does the solution follow standard security guidelines from OWASP (the Open Web Application Security Project, http://www.owasp.org) and the Web Application Security Consortium (http://www.webappsec.org/)? Please describe. | M | |
| 3 | Does the solution prevent SQL injection? | M | |
| 4 | Does the solution accept query strings from the browser URL (for example, DO use server.com/app/article.aspx?article=b1705; NOT server.com/app/article.aspx?xml=/articles/b1705.xml.)? | M | |
| 5 | Does the solution accept double encoding from the browser? Please describe. | M | |
| 6 | Does the solution discard data that fails a check for double encoding? Please describe. | M | |
| 7 | Does the solution prevent browser history replay attacks? | M | |
| 8 | Does the solution use encryption for browser communication? | M | |
| 9 | Does the solution perform a virus check on all files uploaded to the system by the user, quarantine all infected files, and inform the user of the infected and quarantined files? Please describe. | M | |
| 10 | Does the solution use compression or dedupe technology to compress or dedupe attachment files? Please describe compression technology and dedupe technology. | M | |
| 11 | Does the solution create its own unique file identifier for all files uploaded by the user? | M | |
| 12 | Does the solution prevent certain files from being uploaded to the system by the user (for example, ?exe files)? Please describe and include excluded file types. | M | |
| 13 | Does the solution provide multi-factor authentication? | M | |
| 14 | Does the solution use industry standard security protocol services for user authentication and centralized user management? | M | |
| 15 | Does the solution always encrypt login credentials? | M | |
| 16 | Does the solution reuse a session established prior to authentication, after authentication? Please explain. | M | |
| 17 | Does the solution enforce a user lockout policy if the system suspects the account information (login/password) is compromised? | M | |
| 18 | Does the solution implement automatic idle timeout? Please describe. | M | |
| 19 | Does the solution allow multiple concurrent logins by a single user from separate device? Please describe. | O | |
| 20 | Does the solution allow an authorized user to open multiple views (or windows) within the same session? | O | |
| 21 | Does the solution use alerts to notify designated users/administrators of critical system changes or unavailability of services? | M | |
| 22 | Does the solution keep data in the session, not on the client browser or in form fields? | M | |
| 23 | Does the solution allow master passwords? If yes, please explain why. | M | |
| SECURITY* | |||
| 1 | If hosted, what point-to-point encryption capabilities and other communications security do you have? Please describe. | M | |
| 2 | Is the solution hosted in a secure data center? Please include all information on firewalls, DMZs, and other security controls. | M | |
| 3 | If hosted, does the data center have 24×7 security personnel? | M | |
| 4 | If hosted, does the data center provide 24×7 video recording of all activities in the datacenter and retain those recordings? Please describe and include retention information. | M | |
| 5 | Describe the use of cookies by the solution. Please explain the type of information being collected. | M | |
| 6 | If hosted, does the solution provide the ability for authorized users and the system administrator to view a list of all users currently logged in, the time of their login, and whether or not they are active? | M | |
| 7 | If hosted, does the solution use 508-compatible CAPTCHA technology for forms exposed to the public prior to user authentication? Please describe. | M |
| SERVERS | ||
| 1 | Does the solution vendor provide all hardware/software components needed to comply with the implementation? | M |
| SOFTWARE APPLICATION | ||
| 1 | Do you have a business application flow diagram that describes the flow relevant to this offering, including: |
- presentation layer (i.e., user interfaces, content management, web based technologies)
- integration layer (i.e., SOA, Web services, APIs, messaging, ETL processing, 3rd party vendor, Client)
- business application layer (i.e., application server, languages, framework)
- data layer technology (i.e., databases, storage)
- reporting capabilities (i.e., tools, dashboard, ETL capabilities)
| If yes, please attach. | M | ||
| 2 | Is your platform architected to separate Client data physically or logically? For example, would our data reside in a dedicated hardware/software environment or are platforms physically shared with others? Please describe. | M | |
| 3 | The solution must not require redundant data entry. | M | |
| 4 | Does the solution store the same data in multiple tables? If yes, please explain. | M | |
| SOFTWARE INFRASTRUCTURE | |||
| 1 | Does the solution support service-oriented architecture (SOA) to integrate with modules from other vendors and other software solutions, including HR systems and financial systems? | M | |
| 2 | Does the solution support single sign-on/Federated Security? Please describe | M | |
| 3 | Does the solution provide the ability to manage background task and batch queue execution priorities and sequencing? Please describe. | M | |
| 4 | Does the solution offer and support an API? Please describe. | M | |
| THIRD PARTY DATA SHARING* | |||
| 1 | What information is shared with each third party? Please describe in detail. | M | |
| 2 | Can users opt out of third party data sharing? Please describe. | M | |
| 3 | Is the business owner notified of a change in third parties? | M | |
| THIRD PARTY INTEGRATIONS** | |||
| 1 | How does the solution keep integrated systems in sync? Please describe. | M | |
| 2 | Are there any required third party vendor solutions required? Please describe. | M | |
| 3 | Does the solution interface with an e-mail system? Please describe. | M | |
| 4 | If applicable, does the solution integrate with other directory services in a secure way such as LDAPs. Please describe. | M | |
| USER INTERFACE | |||
| 1 | Does the solution provide the ability to move from one screen to a related screen and return, without losing data input on the first screen? | O | |
| 2 | Does the solution support all main browser versions such as but not limited to Edge, Chrome, and Firefox? Please list any others. | M | |
| 3 | Does the solution ensure that all required fields are indicated as required in the user interface, for example with bold formatting or asterisks? Please describe. | M | |
| 4 | If the solution ensures that all required fields are indicated as required in the user interface, is this configurable by authorized users? | O | |
| 5 | Does the solution provide an out of the box dashboard functionality that is configurable by authorized users? Please provide details. | M | |
| 6 | Does the solution have the ability to display a list of all values for each field in which choices are limited to a predefined set of values and all of the edits? Please describe. | M | |
| 7 | Does the solution provide typeahead functionality? Please describe. | M | |
| 8 | Does the solution use more than two levels of submenus? Please describe. | M | |
| 9 | Does the solution prompt the user to save changed data, discard the data, or cancel the action before exiting the application? Please describe. | M | |
| 10 | Does the solution enforce format on date fields to ensure consistancy? | M | |
| 11 | Are error messages displayed in a consistent format across all solution modules, for both batch and online processing? Error messages should be fully described with consistent codes, text, and screen locations. | M | |
| 12 | Does the solution automatically spell-check data entered in any text box? Please describe include if this functionality is configurable. | M |
image1.png
File details come from the government source that posted it. Updated .