Attachment C - Revised 3-17-2020 Mandatory Requirements.xlsx

This is a Mandatory Requirements Checklist for RFP 758 2000000335 issued by the Commonwealth of Kentucky, specifically the Commonwealth Office of Technology (COT). The document establishes compliance requirements that all offerors must satisfy to have their proposals deemed responsive and eligible for consideration. The checklist is organized into two primary sections: Section 30, which encompasses 25 Commonwealth Office of Technology requirements covering hosting, security standards, compliance frameworks, software development, and system management; and Section 50, which contains over 100 mandatory requirements addressing scope of work, vendor experience, key personnel qualifications, functional and technical capabilities, system performance, usability standards including Section 508 accessibility compliance, interface requirements, testing protocols, organizational change management, training deliverables, project management documentation, technical design specifications, security requirements, service level agreements, and vendor performance accountability measures including penalties and report card requirements.

The document requires offerors to indicate "YES" or "NO" for each mandatory requirement, with proposals failing to meet all stated requirements to be deemed non-responsive and excluded from further evaluation. Attachment C must be submitted as part of the technical proposal. The checklist encompasses comprehensive technical and operational standards including Commonwealth Security Standards compliance, EU GDPR compliance, Kentucky Information Technology Standards (KITS) adherence, privacy assessments, vulnerability and security assessments, data quality requirements, metadata specifications, software version requirements, network connection standards, operating system requirements, project governance frameworks, and performance monitoring capabilities for both on-premise and cloud-based solutions.