Event_00000425_Exhbit_1_Requirements.pdf

Exhibit #1

Requirements: The bid response must reflect for each requirement on Exhibit 1, titled “Technical Response” detailed below.

1. Mandatory Requirements for Digital Tool Providers

a. At the time of RFP submission, digital tool vendors must submit a list of digital resources they wish to include in the Horizon Consortium toolkit. The list should include:

i. The product name

ii. How the product interfaces with other technologies, including minimum operational requirements

iii. The product price. Each product offered through the Horizon Consortium must be offered at a price that does not exceed the lowest price at which the product is offered for use or sale to any state, public school, or school district in the United States. The price of any item or service must automatically be reduced to the extent that, and at the same time as, the price is reduced or offered for a lesser fee elsewhere in the United States.

2. Mandatory Requirements for Online Course Providers

a. Courses for Submission

i. At the time of RFP submission, course providers must submit a list of courses they wish to include in the Oklahoma Online Course Catalog. The list should include:

a) The course title

b) Whether the course delivery format is content-only, instructor-embedded, or both

c) The course price). Each course offered through the Oklahoma Online

Course Catalog must be offered at a price that does not exceed the lowest price at which the course is offered for use or sale to any state, public school, or school district in the United States. The price of any course or item or service for the course must automatically be reduced to the extent that, and at the same time as, the price is reduced or offered for a lesser fee elsewhere in the United States. A course or item or service for the course must be provided free of charge or at a price discount to the same extent that it is provided to any state, public school, or school district anywhere in the United States.

b. Hosted Solution Security

i. Course Providers acknowledge and agree to the following with their bid submission; all prospective vendors must answer the following questions in their responses:

a. Does the vendor or supplier have an information security policy in place? If so, please provide a copy

b. Does the vendor or supplier provide information security awareness training? If so, please describe the information covered and the frequency at which the training is required.

c. Does the vendor or supplier separate physical access between their suppliers, vendors from the access that employees have?

d. Is an inventory or register maintained with the assets associated with each information system? If so, please describe.

e. Are the security roles and responsibilities outlined in the Organizations Information Security Policy documented? If so, please tell us what section in the document provided above.

f. Were verification checks performed on permanent staff at the time of job applications? If so, please describe the verifications completed.

g. Did these pre-employment checks include character reference, confirmation of academic and professional qualifications, and independent identity checks?

h. Were employees required to sign a Confidentially or Non-disclosure Agreements as part of their initial terms and conditions of employment? Is so, please provide a copy of a blank agreement.

i. Is there a procedure in place to report security incidents through management channels as quickly as possible? If so, please describe.

j. What physical border security facilities (such as card control entry gates, walls, or manned reception areas) have been implemented to protect the information processing service?

k. Have controls been adopted to minimize risk from potential threats such as theft, fire, explosives, smoke, water, dust, vibration, chemical effects, electrical supply interfaces electromagnetic radiation flood, etc.? If so, please describe.

l. Are there policies and procedures such as back-up, equipment maintenance etc. in place? If so, please describe.

m. Are audit logs maintained for any changes made to the productions programs?

n. Is there a managed process in place for developing a maintained business continuity throughout the organizations? This might include organizational wide business plan, regular testing and updating of the plan, formulating documenting a business continuity strategy, etc. If so, please describe.

o. Have all relevant statutory, regulatory, and contractual requirements been explicitly defined and documented for each information system?

If so, please describe.

p. Does the organization undergo regular risk assessments for security threats and risks as well as compliance to security and regulatory policies? If so, please describe.

c. Additional Documentation to be provided as applicable

i. Any bid shall include, as applicable, hosting provisions, Service Level Agreements (SLA’s), Billing Information, Documentation, Training Account Team/Support Provision, Escalation Process and Pricing for each service.

Such provisions, SLA’s and other information are subject to negotiations and additional provisions related to hosting services and SLA’s may be required prior to any award being issued.

a. A Service Level Agreement (SLA) outlines the minimum service that a customer may expect for services, warranties, and support.

b. Billing Information outlines what information is provided in billing and how it is delivered.

c. Documentation outlines how detailed documents of services that are provided to entities on an on-going basis to include services by location and account information can be obtained.

d. Training outlines the general requirements for providing training for implementing and using the solution at the End-User level and at Administrative/Operational Personnel levels.

e. Account Team and Support Provisions outline the Suppliers capabilities of providing world class support and account service.

f. Escalation Process outlines the predetermined levels of escalation in the event of an emergency.