ATTACHMENT E - Mandatory Requirements Checklist - RFP 758 2700000012 - REV 7-28-2026.xlsx

This is a Mandatory Requirements Checklist for RFP 758 2700000012 issued by the Commonwealth of Kentucky for the HCM ERP System Replacement - Phase 1 project. The checklist establishes compliance requirements that all offerors must satisfy to be considered responsive. Proposals that offer only software or only services will be deemed non-responsive. The partnership structure requires Systems Integrators (SIs) to partner with a single Software Service Provider (SSP) in a joint proposal owned by the SSP, with each SSP partnering with only one SI and submitting a single proposal. All proposed software components must be fully integrated and provided by the same SSP. The SSP must ensure FedRAMP or HITRUST/HIPAA cloud compliance and provide hosting services for at least five instances across sandbox, development, preview, production, and training environments.

The SIs must quote a fixed-fee price for implementation and deployment services with a Statement of Work to be finalized as part of the final agreement. All solutions must include Business Analytics & Reporting and Mobility capabilities while ensuring security, compliance, and integration with the Commonwealth's enterprise systems. Vendors and subcontractors must comply with the Commonwealth Office of Technology's AI Policy (CIO-126) with approval required from COT and the AI committee. All vendors must cooperate fully with the Independent Verification & Validation (IV&V) vendor by providing timely access to project artifacts, environments, documentation, and personnel; participating in IV&V-led meetings and checkpoints; responding to IV&V findings within agreed timeframes; and supporting transparency in project status, risks, and issues.