Attachment C - Mandatory Requirements.xlsx

This is a Mandatory Requirements Checklist for RFP 758 2000000335 issued by the Commonwealth of Kentucky for a UI Modernization System. The document serves as an evaluation instrument to ensure that proposals submitted by offerors comply with all mandatory requirements necessary for consideration. Proposals failing to meet any mandatory requirement will be deemed non-responsive and excluded from further evaluation. Attachment O must be submitted concurrently with the Technical Proposal as part of the compliance documentation.

The mandatory requirements are organized into two primary sections. Section 30 encompasses Commonwealth Office of Technology (COT) requirements covering 25 distinct areas, including hosting specifications, adherence to COT policies and standards, compliance with Kentucky Information Technology Standards (KITS), Commonwealth Security Standards, industry-accepted reporting standards based on Trust Service Principles, system vulnerability and security assessments, privacy assessments, EU GDPR compliance, data quality, metadata requirements, software development standards, license agreements, Section 508 accessibility compliance, network connection requirements, operating system specifications, project governance, and monitoring capabilities for both on-premise and cloud-based solutions. Section 50 addresses business and technical mandatory requirements spanning 32 categories, including scope of work alignment, vendor experience and implementation history, key personnel qualifications, functional and technical specifications, system availability and performance metrics, configuration management, usability and accessibility standards, interface requirements, 69 distinct technical requirements, testing protocols, organizational change management, training delivery, deliverables documentation including project management and configuration management plans, technical design documentation, security requirements, service level agreements, turnover procedures, performance-based penalties, vendor reporting, and retainage terms.