Exhibit 9- Technical Specifications.xlsx
XLSX spreadsheet 33 KB Posted
- Attached to
- FL WINS Customer Portal
- Solicitation number
- ITN-07176
- Issued by
- Leon County, Florida
About this file
This document contains information about a state and local contract opportunity issued by the Division of Workforce Services, in conjunction with the REACH Office and other Workforce Agency Partners, for the FL WINS Customer Portal Project. The procurement will use the Invitation to Negotiate competitive method. The project overview, key dates, and jurisdictions involved are as follows:
The contract opportunity is for the FL WINS Customer Portal Project. It covers services for the customer portal application, with the Division of Workforce Services and other Workforce Agency Partners as the procuring entities. The contract opportunity has had multiple addendums issued, with the latest being Addendum 11 on 03/14/2024. The key dates include a reply opening on 01/10/2024 and a respondent shortlist notice on 01/25/2024. The jurisdictions involved are Leon County and Tampa City.
The document does not provide details on pricing terms, set asides, incumbents, funding requirements or sources, or other financial information. It focuses on the high-level project details, procurement method, and key dates for the solicitation process.
View the file
Other files
Show all 24
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Commerce
| EXHIBIT 9- Technical Specifications | ||
| System | Question | Response |
| Re-CONNECT | SSO Provider currently being used? | Azure Entra ID |
| Re-CONNECT | Running on Cloud or Prem? If Cloud what type? | Cloud, Azure Gov Cloud |
| Re-CONNECT | Capabilities to perform data exchanges (API/File Exchanges/other - explain) | API, SFTP |
| Re-CONNECT | Do you have a customer call center engaged with this system? If so, who? | Yes, Gensys cloud |
| Re-CONNECT | What is the application traffic during peak and non peak hours? | NA |
| Re-CONNECT | What is the application number of users (internal and external), concurrent and total per month? | NA |
| Re-CONNECT | What software is currently being used for IAM? | None |
| Re-CONNECT | What are the protocols and methods for any IAM connections internally currently? | LDAP |
| Re-CONNECT | What is the current protocol for connection to the system/application currently? | HTTPS, TLS 1.2, SFTP |
| Re-CONNECT | How much notice does the system/application vendor need to make enhancements (if needed)? | Depends on scope |
| Re-CONNECT | Does the system/application have Master Data Management within the Program/Agency currently? | None |
| Re-CONNECT | Has the system/application's data security level been categorized and cataloged yet? | FIPS-199 Moderate |
| Re-CONNECT | What are the current cyber standards framework being used currently for the system/application? | Organization and system security ideology is derived from: |
NIST guidance (CSF/RMF/800-53, etc.).
60GG-2, FAC
OWASP (For web app development) System and application configuration and security baselines are typically derived from CIS Benchmarks.
| Re-CONNECT | What software is currently being used in the system/application for document management? | IBM FileNet |
| Re-CONNECT | What is the current system/application's modernization timeline currently (if applicable)? | 24-Jun |
| Re-CONNECT | How many integrations with other systems, applications or data sources are there currently? | Approx 200 |
| Re-CONNECT | What are the methods of integrations with other systems, applications or data sources currently? Please list the type | Webservices, SFTP |
| Re-CONNECT | What is the frequency of updates on any current integrations with other systems, applications or data sources currently? Please list. | As needed by the service provider, not often |
| Re-CONNECT | What are the current real-time communication capabilities for the system/application currently? | Webservices |
| Re-CONNECT | Are there any known restrictions on using any Large Language Model platforms for customer service, data processing, communications, and other types of services? | Compliance Requirements (specific to wherever relevant data may be processed or stored; it’s possible not all of these data types will be integrated): |
FBI CJIS Policy IRS Office of Safeguards Publication 1075
PCI DSS
State cloud Requirements: 60GG-4, FAC Various data exchange agreements (SSA, FLHSMV, etc.)
RA confidentiality requirements Ch. 443, Florida Statutes
| Re-CONNECT | What are the current mechanisms in place for system/application security audits, vulnerability assessments, and any penetration testing currently? | SonarQube, Burp Suite, Splunk SEIM |
| Re-CONNECT | How many existing licenses are in use for the system/application currently? | Approx 500 |
| Re-CONNECT | Does the system/application ready to interface or is there a requirement to build a connectivity path for API or custom built? | Dependedning upon scope, not readly available |
| Re-CONNECT | What type of underlying technology is used for architecture in the system/application currently? | .Net 4.8.2 SOA, Oracle stack |
| Re-CONNECT | Are there any existing repository housing mapped business processes for the system/application currently? | Design documentation available |
| Re-CONNECT | What type of integration tools are being utilized for the system/application and for the Agency currently? List out. | Point to point integration, no integration tools being used currently. Where as MuleSoft and Azure API is being developed for modernization projects |
| Re-CONNECT | How is data received ingested into the system? (manually, real time, file upload, etc) | Real Time, Batch and RPA |
| EmployFlorida | SSO Provider currently being used? | N/A |
| EmployFlorida | Running on Cloud or Prem? If Cloud what type? | Data center hosting services provided by Cologix and NTT GDC |
| EmployFlorida | Capabilities to perform data exchanges (API/File Exchanges/other - explain) | API & File Exchange |
| EmployFlorida | Do you have a customer call center engaged with this system? If so, who? | Bureau of Workforce Services- Customer Information Center |
| EmployFlorida | What is the application traffic during peak and non peak hours? | See Site Traffic Report |
| EmployFlorida | What is the application number of users (internal and external), concurrent and total per month? | See Site Traffic Report |
| EmployFlorida | What software is currently being used for IAM? | N/A |
| EmployFlorida | What are the protocols and methods for any IAM connections internally currently? | N/A |
| EmployFlorida | What is the current protocol for connection to the system/application currently? | Web/Mobile |
| EmployFlorida | How much notice does the system/application vendor need to make enhancements (if needed)? | Enhancements are based on priority level |
| EmployFlorida | Does the system/application have Master Data Management within the Program/Agency currently? | N/A |
| EmployFlorida | Has the system/application's data security level been categorized and cataloged yet? | N/A |
| EmployFlorida | What are the current cyber standards framework being used currently for the system/application? | N/A |
| EmployFlorida | What software is currently being used in the system/application for document management? | N/A |
| EmployFlorida | What is the current system/application's modernization timeline currently (if applicable)? | N/A |
| EmployFlorida | How many integrations with other systems, applications or data sources are there currently? | Dep. of Revenue (wage data), Dep. of Education (Reporting), FL Commerce (RA, WID), etc. |
| EmployFlorida | What are the methods of integrations with other systems, applications or data sources currently? Please list the type | File exchange |
| EmployFlorida | What is the frequency of updates on any current integrations with other systems, applications or data sources currently? Please list. | Daily, quarterly |
| EmployFlorida | What are the current real-time communication capabilities for the system/application currently? | Real-time |
| EmployFlorida | Are there any known restrictions on using any Large Language Model platforms for customer service, data processing, communications, and other types of services? | N/A |
| EmployFlorida | What are the current mechanisms in place for system/application security audits, vulnerability assessments, and any penetration testing currently? | See SOC reports |
| EmployFlorida | How many existing licenses are in use for the system/application currently? | N/A |
| EmployFlorida | Does the system/application ready to interface or is there a requirement to build a connectivity path for API or custom built? | Ready |
| EmployFlorida | What type of underlying technology is used for architecture in the system/application currently? | N/A |
| EmployFlorida | Are there any existing repository housing mapped business processes for the system/application currently? | Yes housed in the Online Project Communication (OPC) system |
| EmployFlorida | What type of integration tools are being utilized for the system/application and for the Agency currently? List out. | Redgate |
| EmployFlorida | How is data received ingested into the system? (manually, real time, file upload, etc) | Manually real time |
| WIDb | SSO Provider currently being used? | |
| WIDb | Running on Cloud or Prem? If Cloud what type? | Cloud, Azure Commercial |
| WIDb | Capabilities to perform data exchanges (API/File Exchanges/other - explain) | WIDb feeds data to few public facing reports and XML feeds |
| WIDb | Do you have a customer call center engaged with this system? If so, who? | No |
| WIDb | What is the application traffic during peak and non peak hours? | Press Release Week/Day - 3rd Friday of each month |
| WIDb | What is the application number of users (internal and external), concurrent and total per month? | max 20 |
| WIDb | What software is currently being used for IAM? | N/A |
| WIDb | What are the protocols and methods for any IAM connections internally currently? | N/A |
| WIDb | What is the current protocol for connection to the system/application currently? | Active Directory - Integrated Security |
| WIDb | How much notice does the system/application vendor need to make enhancements (if needed)? | N/A |
| WIDb | Does the system/application have Master Data Management within the Program/Agency currently? | Not aware of |
| WIDb | Has the system/application's data security level been categorized and cataloged yet? | Not aware of |
| WIDb | What are the current cyber standards framework being used currently for the system/application? | N/A |
| WIDb | What software is currently being used in the system/application for document management? | N/A |
| WIDb | What is the current system/application's modernization timeline currently (if applicable)? | Infrastructure current; WIDb data structure determined by USDOL |
| WIDb | How many integrations with other systems, applications or data sources are there currently? | Various |
| WIDb | What are the methods of integrations with other systems, applications or data sources currently? Please list the type | File uploads through sql server SSIS or sql scripts |
| WIDb | What is the frequency of updates on any current integrations with other systems, applications or data sources currently? Please list. | Weekly |
| WIDb | What are the current real-time communication capabilities for the system/application currently? | WIDb powers tableau data extracts and web-based reports (ASP) |
| WIDb | Are there any known restrictions on using any Large Language Model platforms for customer service, data processing, communications, and other types of services? | N/A |
| WIDb | What are the current mechanisms in place for system/application security audits, vulnerability assessments, and any penetration testing currently? | On the Azure SQL managed instance we are using Microsoft Defender for Cloud |
| WIDb | How many existing licenses are in use for the system/application currently? | N/A. SQL licensed on Agency's azure sql managed instances |
| WIDb | Does the system/application ready to interface or is there a requirement to build a connectivity path for API or custom built? | Yes. WIDb powers a few XML feeds |
| WIDb | What type of underlying technology is used for architecture in the system/application currently? | Database – Azure SQL managed instance |
| WIDb | Are there any existing repository housing mapped business processes for the system/application currently? | No |
| WIDb | What type of integration tools are being utilized for the system/application and for the Agency currently? List out. | Alteryx for some file uploads |
| WIDb | How is data received ingested into the system? (manually, real time, file upload, etc) | File uploads |
| OSST | SSO Provider currently being used? | No. (OSST uses a table having user credentials. LWDB users are not in COM AD, and OSST is a public facing application). |
| OSST | Running on Cloud or Prem? If Cloud what type? | Prem |
| OSST | Capabilities to perform data exchanges (API/File Exchanges/other - explain) | Yes - FTP to/from Mainframe (because it doesn't allow SFTP), |
a custom API in Java Sockets, and interface to access DCF's datamart (sql server) with credentials.
| OSST | Do you have a customer call center engaged with this system? If so, who? | CustomerInfoCenter - COM |
| OSST | What is the application traffic during peak and non peak hours? | This is a hosted solution. Data is available from NWRDC database team. |
| OSST | What is the application number of users (internal and external), concurrent and total per month? | This is a hosted solution. Data is available from NWRDC database team. |
| OSST | What software is currently being used for IAM? | None |
| OSST | What are the protocols and methods for any IAM connections internally currently? | Manual |
| OSST | What is the current protocol for connection to the system/application currently? | All OSST users must log into the system. |
LWDB (i.e., internal) user accounts are managed by COM's Internal Security Unit. DCF sends case records of benefit applicants (i.e., external users), and an OSST batch job creates user accounts and OTPs for the external client portal.
| OSST | How much notice does the system/application vendor need to make enhancements (if needed)? | Depends on nature of the requirement. OSST intake interfaces and related batch jobs are very complex which typically requires 4 weeks advance notice, sometimes more. |
| OSST | Does the system/application have Master Data Management within the Program/Agency currently? | No |
| OSST | Has the system/application's data security level been categorized and cataloged yet? | No |
| OSST | What are the current cyber standards framework being used currently for the system/application? | None used, but the application has customized access controls depending on user types. |
| OSST | What software is currently being used in the system/application for document management? | MS Word, Visio, Excel, PDF |
| OSST | What is the current system/application's modernization timeline currently (if applicable)? | Upgrade to Windows Server 2019 and ColdFusion 2023 is in works now. Options of migration to Cloud vs Outsourcing are being considered. |
| OSST | How many integrations with other systems, applications or data sources are there currently? | 2 external systems - DCF FLORIDA and FISedge (for EBT). Altogether 7 interfaces. |
| OSST | What are the methods of integrations with other systems, applications or data sources currently? Please list the type | File exchanges via FTP with DCF, |
a custom java socket API , interface to access DCF's datamart (sql server) with credentials.
| OSST | What is the frequency of updates on any current integrations with other systems, applications or data sources currently? Please list. | Interface updates are rare but do happen due to business requirement or govt policy changes - 2 or 3 in a year. |
| OSST | What are the current real-time communication capabilities for the system/application currently? | OSST accesses DCF FLORIDA in realtime using an API to retrieve and display WT & SNAP program benefits for customers. |
| OSST | Are there any known restrictions on using any Large Language Model platforms for customer service, data processing, communications, and other types of services? | OSST is a 22-year old system. It is unknown how LLM could be used. Highly unlikely. |
| OSST | What are the current mechanisms in place for system/application security audits, vulnerability assessments, and any penetration testing currently? | Password change every 3 months, deactivating user accounts unused for 3 months, Annual and semi-annual user account audits by IG office. |
| OSST | How many existing licenses are in use for the system/application currently? | 1 Coldfusion 2018, 2012 windows server license, Oracle 12c , SQL Server (Eddy may have full info). |
| OSST | Does the system/application ready to interface or is there a requirement to build a connectivity path for API or custom built? | Custom built API has been operational for 15 years |
| OSST | What type of underlying technology is used for architecture in the system/application currently? | Windows, Java, Javascript, Coldfusion, Oracle, SQL server, Solaris OS, Bash Shell scripting |
| OSST | Are there any existing repository housing mapped business processes for the system/application currently? | Yes, on COM network share. |
(\\deofs\root\Shares\IT\ITWorkforceServices\OSST\Documentation_OSST\)
| OSST | What type of integration tools are being utilized for the system/application and for the Agency currently? List out. | None |
| OSST | How is data received ingested into the system? (manually, real time, file upload, etc) | Files received from DCF are processed by scheduled batch jobs. OSST also accesses DCF FLORIDA system in realtime (via javasocket based custom API) to retrieve certain data elements on program participants' case. |
DCF
| System | Question | Response |
| ACCESS SSP | SSO Provider currently being used? | No |
| ACCESS SSP | Running on Cloud or Prem? If Cloud what type? | On Prem in State Data Center |
| ACCESS SSP | Capabilities to perform data exchanges (API/File Exchanges/other - explain) | Yes, however we would neded to develop new interfaces. |
| ACCESS SSP | Do you have a customer call center engaged with this system? If so, who? | Yes |
| ACCESS SSP | What is the application traffic during peak and non peak hours? | Log-ins Peak = 800/minute non-Peak 100/minute (no method to track concurrent users, anticipated to be higher) |
| ACCESS SSP | What is the application number of users (internal and external), concurrent and total per month? | 12,000,000 Pass Logins 9/2023 |
| ACCESS SSP | What software is currently being used for IAM? | Inbuilt IAM credentially within the application |
| ACCESS SSP | What are the protocols and methods for any IAM connections internally currently? | N/A |
| ACCESS SSP | What is the current protocol for connection to the system/application currently? | HTTPS |
| ACCESS SSP | How much notice does the system/application vendor need to make enhancements (if needed)? | System updates and enhancements occur monthly or on a need by need basis. Planning is done quarterly. |
| ACCESS SSP | Does the system/application have Master Data Management within the Program/Agency currently? | Yes, using Mainframe Soundex Clearance process |
| ACCESS SSP | Has the system/application's data security level been categorized and cataloged yet? | Verified as MARS-E compliant |
| ACCESS SSP | What are the current cyber standards framework being used currently for the system/application? | NWRDC Security Provided |
| ACCESS SSP | What software is currently being used in the system/application for document management? | Custom Built ACCESS Document Imaging using dotNet, Oracle and Isilon |
| ACCESS SSP | What is the current system/application's modernization timeline currently (if applicable)? | In process with anticapated go-live in 2023. |
| ACCESS SSP | How many integrations with other systems, applications or data sources are there currently? | ~20 |
| ACCESS SSP | What are the methods of integrations with other systems, applications or data sources currently? Please list the type | API and Batch |
| ACCESS SSP | What is the frequency of updates on any current integrations with other systems, applications or data sources currently? Please list. | Real Time, periodically sceduled, and On Demand during application e-signature |
| ACCESS SSP | What are the current real-time communication capabilities for the system/application currently? | Real Time Eligibility with Business Rules Engine, List of post esign web services |
| ACCESS SSP | Are there any known restrictions on using any Large Language Model platforms for customer service, data processing, communications, and other types of services? | No restrictions that we are aware of |
| ACCESS SSP | What are the current mechanisms in place for system/application security audits, vulnerability assessments, and any penetration testing currently? | MARS-E Compliance per CMS schedule. Routine scans prior to Code Deployments and Monthly by SDC. |
| ACCESS SSP | How many existing licenses are in use for the system/application currently? | We have a large number of hardware and software liscesces |
| ACCESS SSP | Does the system/application ready to interface or is there a requirement to build a connectivity path for API or custom built? | Requirement to build connectivity path/API |
| ACCESS SSP | What type of underlying technology is used for architecture in the system/application currently? | Java and Oracle |
| ACCESS SSP | Are there any existing repository housing mapped business processes for the system/application currently? | No |
| ACCESS SSP | What type of integration tools are being utilized for the system/application and for the Agency currently? List out. | DataPower |
IBM Integration Bus MuleSoft
| ACCESS SSP | How is data received ingested into the system? (manually, real time, file upload, etc.) | User entry, saved at completion. |
| ACCESS CP | SSO Provider currently being used? | No |
| ACCESS CP | Running on Cloud or Prem? If Cloud what type? | Cloud via AWS |
| ACCESS CP | Capabilities to perform data exchanges (API/File Exchanges/other - explain) | Yes, however we would neded to develop new interfaces. |
| ACCESS CP | Do you have a customer call center engaged with this system? If so, who? | Yes |
| ACCESS CP | What is the application traffic during peak and non-peak hours? | Log-ins Peak = 800/minute non-Peak 100/minute (no method to track concurrent users, anticipated to be higher) |
| ACCESS CP | What is the application number of users (internal and external), concurrent and total per month? | 12,000,000 Pass Logins 9/2023 |
| ACCESS CP | What software is currently being used for IAM? | Microsoft IAM for customers, OKTA for CBOs |
| ACCESS CP | What are the protocols and methods for any IAM connections internally currently? | Unknown |
| ACCESS CP | What is the current protocol for connection to the system/application currently? | HTTPS |
| ACCESS CP | How much notice does the system/application vendor need to make enhancements (if needed)? | System updates and enhancements occur monthly or on a need by need basis. Planning is done quarterly. |
| ACCESS CP | Does the system/application have Master Data Management within the Program/Agency currently? | Yes, using Mainframe Soundex Clearance process |
| ACCESS CP | Has the system/application's data security level been categorized and cataloged yet? | No, will be MARS-E Compliant Verified prior to go-live |
| ACCESS CP | What are the current cyber standards framework being used currently for the system/application? | Cloud Infrastucture Security |
| ACCESS CP | What software is currently being used in the system/application for document management? | Custom Built ACCESS Document Imaging using dotNet, Oracle and Isilon |
| ACCESS CP | What is the current system/application's modernization timeline currently (if applicable)? | N/A This section is in reference to the modernized version. |
| ACCESS CP | How many integrations with other systems, applications or data sources are there currently? | ~20 |
| ACCESS CP | What are the methods of integrations with other systems, applications or data sources currently? Please list the type | API and Batch |
| ACCESS CP | What is the frequency of updates on any current integrations with other systems, applications or data sources currently? Please list. | Real Time, periodically sceduled, and On Demand during application e-signature |
| ACCESS CP | What are the current real-time communication capabilities for the system/application currently? | Real Time Eligibility with Business Rules Engine, List of post esign web services |
| ACCESS CP | Are there any known restrictions on using any Large Language Model platforms for customer service, data processing, communications, and other types of services? | No restrictions that we are aware of |
| ACCESS CP | What are the current mechanisms in place for system/application security audits, vulnerability assessments, and any penetration testing currently? | MARS-E Compliance per CMS schedule. Routine scans prior to Code Deployments and Monthly by Agency/Vendor |
| ACCESS CP | How many existing licenses are in use for the system/application currently? | We have a large number of hardware and software liscesces |
| ACCESS CP | Does the system/application ready to interface or is there a requirement to build a connectivity path for API or custom built? | Requirement to build connectivity path/API |
| ACCESS CP | What type of underlying technology is used for architecture in the system/application currently? | Java and AWS |
| ACCESS CP | Are there any existing repository housing mapped business processes for the system/application currently? | Figma and DES Documents |
| ACCESS CP | What type of integration tools are being utilized for the system/application and for the Agency currently? List out. | DataPower |
IBM Integration Bus MuleSoft
| ACCESS CP | How is data received ingested into the system? (manually, real time, file upload, etc) | User entry, saved at completion. |
| HopeFL | SSO Provider currently being used? | Azure AD/Okta |
| HopeFL | Running on Cloud or Prem? If Cloud what type? | Cloud - MS Dynamics Platform |
| HopeFL | Capabilities to perform data exchanges (API/File Exchanges/other - explain) | Yes |
| HopeFL | Do you have a customer call center engaged with this system? If so, who? | Yes |
| HopeFL | What is the application traffic during peak and non peak hours? | Peak - up to 200 users; Non-Peak - 0 usage |
| HopeFL | What is the application number of users (internal and external), concurrent and total per month? | 300 licensed for app; 6000 active for portal |
| HopeFL | What software is currently being used for IAM? | Tivoli |
| HopeFL | What are the protocols and methods for any IAM connections internally currently? | AD/Azure AD |
| HopeFL | What is the current protocol for connection to the system/application currently? | Web Browser |
| HopeFL | How much notice does the system/application vendor need to make enhancements (if needed)? | Dependent on size of request |
| HopeFL | Does the system/application have Master Data Management within the Program/Agency currently? | No |
| HopeFL | Has the system/application's data security level been categorized and cataloged yet? | No |
| HopeFL | What are the current cyber standards framework being used currently for the system/application? | ? |
| HopeFL | What software is currently being used in the system/application for document management? | MS Dynamics |
| HopeFL | What is the current system/application's modernization timeline currently (if applicable)? | N/A |
| HopeFL | How many integrations with other systems, applications or data sources are there currently? | 1 |
| HopeFL | What are the methods of integrations with other systems, applications or data sources currently? Please list the type | API/Power Automate |
| HopeFL | What is the frequency of updates on any current integrations with other systems, applications or data sources currently? Please list. | Rare |
| HopeFL | What are the current real-time communication capabilities for the system/application currently? | Inherent |
| HopeFL | Are there any known restrictions on using any Large Language Model platforms for customer service, data processing, communications, and other types of services? | None known |
| HopeFL | What are the current mechanisms in place for system/application security audits, vulnerability assessments, and any penetration testing currently? | No regular audits |
| HopeFL | How many existing licenses are in use for the system/application currently? | 300 case management licenses for app; 6000 per login for portal |
| HopeFL | Does the system/application ready to interface or is there a requirement to build a connectivity path for API or custom built? | Yes |
| HopeFL | What type of underlying technology is used for architecture in the system/application currently? | Microsoft Dynamics |
| HopeFL | Are there any existing repository housing mapped business processes for the system/application currently? | No |
| HopeFL | What type of integration tools are being utilized for the system/application and for the Agency currently? List out. | Power Automate |
| HopeFL | How is data received ingested into the system? (manually, real time, file upload, etc) | Manually |
| HopeFL - Future State CLRS Procurement | SSO Provider currently being used? | Okta |
| HopeFL - Future State CLRS Procurement | Running on Cloud or Prem? If Cloud what type? | Cloud/TBD |
| HopeFL - Future State CLRS Procurement | Capabilities to perform data exchanges (API/File Exchanges/other - explain) | TBD |
| HopeFL - Future State CLRS Procurement | Do you have a customer call center engaged with this system? If so, who? | Hope Line |
| HopeFL - Future State CLRS Procurement | What is the application traffic during peak and non peak hours? | TBD |
| HopeFL - Future State CLRS Procurement | What is the application number of users (internal and external), concurrent and total per month? | TBD |
| HopeFL - Future State CLRS Procurement | What software is currently being used for IAM? | Okta/TBD |
| HopeFL - Future State CLRS Procurement | What are the protocols and methods for any IAM connections internally currently? | TBD |
| HopeFL - Future State CLRS Procurement | What is the current protocol for connection to the system/application currently? | TBD |
| HopeFL - Future State CLRS Procurement | How much notice does the system/application vendor need to make enhancements (if needed)? | TBD |
| HopeFL - Future State CLRS Procurement | Does the system/application have Master Data Management within the Program/Agency currently? | No |
| HopeFL - Future State CLRS Procurement | Has the system/application's data security level been categorized and cataloged yet? | No |
| HopeFL - Future State CLRS Procurement | What are the current cyber standards framework being used currently for the system/application? | TBD |
| HopeFL - Future State CLRS Procurement | What software is currently being used in the system/application for document management? | TBD |
| HopeFL - Future State CLRS Procurement | What is the current system/application's modernization timeline currently (if applicable)? | TBD |
| HopeFL - Future State CLRS Procurement | How many integrations with other systems, applications or data sources are there currently? | TBD |
| HopeFL - Future State CLRS Procurement | What are the methods of integrations with other systems, applications or data sources currently? Please list the type | TBD |
| HopeFL - Future State CLRS Procurement | What is the frequency of updates on any current integrations with other systems, applications or data sources currently? Please list. | TBD |
| HopeFL - Future State CLRS Procurement | What are the current real-time communication capabilities for the system/application currently? | TBD |
| HopeFL - Future State CLRS Procurement | Are there any known restrictions on using any Large Language Model platforms for customer service, data processing, communications, and other types of services? | TBD |
| HopeFL - Future State CLRS Procurement | What are the current mechanisms in place for system/application security audits, vulnerability assessments, and any penetration testing currently? | TBD |
| HopeFL - Future State CLRS Procurement | How many existing licenses are in use for the system/application currently? | TBD |
| HopeFL - Future State CLRS Procurement | Does the system/application ready to interface or is there a requirement to build a connectivity path for API or custom built? | TBD |
| HopeFL - Future State CLRS Procurement | What type of underlying technology is used for architecture in the system/application currently? | TBD |
| HopeFL - Future State CLRS Procurement | Are there any existing repository housing mapped business processes for the system/application currently? | TBD |
| HopeFL - Future State CLRS Procurement | What type of integration tools are being utilized for the system/application and for the Agency currently? List out. | TBD |
| HopeFL - Future State CLRS Procurement | How is data received ingested into the system? (manually, real time, file upload, etc) | Manually/others TBD |
DOE
| System | Question | Response |
| VR AWARE | SSO Provider currently being used? | Microsoft 365 |
| VR AWARE | Running on Cloud or Prem? If Cloud what type? | Cloud - Azure Government Cloud |
| VR AWARE | Capabilities to perform data exchanges (API/File Exchanges/other - explain) | Interfaces: |
1. Payment Export to FLAIR
2. Payment Voucher Import from FLAIR
3. Payment Warrant Import from FLAIR
4. Vendor Info Export to AHCA
5. Vendor Import Interface with Pre-Select
6. Vendor License Import from DOH
7. Vendor License Import from DOE
8. Vendor License Import from AHCA
9. SVES Verification Export
10. SVES Verification Import
11. Ticket Tracker Export
12. Medicare Fees Import
13. EQUI Import with Employer Pre-Select
| VR AWARE | Do you have a customer call center engaged with this system? If so, who? | Application Ticketing System |
| VR AWARE | What is the application traffic during peak and non peak hours? | 8-5 Mon-Fri |
| VR AWARE | What is the application number of users (internal and external), concurrent and total per month? | Approximately 1200 in total |
| VR AWARE | What software is currently being used for IAM? | Active Directory for identification management. Azure is used for access management. |
| VR AWARE | What are the protocols and methods for any IAM connections internally currently? | |
| VR AWARE | What is the current protocol for connection to the system/application currently? | Web Traffic HTTPS |
| VR AWARE | How much notice does the system/application vendor need to make enhancements (if needed)? | At least a month |
| VR AWARE | Does the system/application have Master Data Management within the Program/Agency currently? | No, data is managed by the vendor |
| VR AWARE | Has the system/application's data security level been categorized and cataloged yet? | Yes |
| VR AWARE | What are the current cyber standards framework being used currently for the system/application? | NIST |
| VR AWARE | What software is currently being used in the system/application for document management? | Document management is housed within the Aware system |
| VR AWARE | What is the current system/application's modernization timeline currently (if applicable)? | N/A |
| VR AWARE | How many integrations with other systems, applications or data sources are there currently? | Ticket Tracker application |
| VR AWARE | What are the methods of integrations with other systems, applications or data sources currently? Please list the type | N/A |
| VR AWARE | What is the frequency of updates on any current integrations with other systems, applications or data sources currently? Please list. | N/A |
| VR AWARE | What are the current real-time communication capabilities for the system/application currently? | None |
| VR AWARE | Are there any known restrictions on using any Large Language Model platforms for customer service, data processing, communications, and other types of services? | No |
| VR AWARE | What are the current mechanisms in place for system/application security audits, vulnerability assessments, and any penetration testing currently? | Yes |
| VR AWARE | How many existing licenses are in use for the system/application currently? | Approximately 1200 in total |
| VR AWARE | Does the system/application ready to interface or is there a requirement to build a connectivity path for API or custom built? | Yes, need to work with the vendor for any modifications |
| VR AWARE | What type of underlying technology is used for architecture in the system/application currently? | SQL/.Net |
| VR AWARE | Are there any existing repository housing mapped business processes for the system/application currently? | Documented/Documenting as needed |
| VR AWARE | What type of integration tools are being utilized for the system/application and for the Agency currently? List out. | None |
| VR AWARE | How is data received ingested into the system? (manually, real time, file upload, etc) | Manual data entry, and file imports using interfaces |
| DBS AWARE | SSO Provider currently being used? | Currently none. Azure SSO when moved to Alliance (AMS) cloud |
| DBS AWARE | Running on Cloud or Prem? If Cloud what type? | Currently on prem. In process to move to vendor Alliance Managed Service (AMS) cloud |
| DBS AWARE | Capabilities to perform data exchanges (API/File Exchanges/other - explain) | future API |
| DBS AWARE | Do you have a customer call center engaged with this system? If so, who? | In house Aware Support Team- email Aware.Support@dbs.fldoe.org or call |
| DBS AWARE | What is the application traffic during peak and non peak hours? | We don't have hourly application traffic but Aggregated daily data activity for the Aware server is approximately 20GB |
| DBS AWARE | What is the application number of users (internal and external), concurrent and total per month? | Approximate 'Active' users- 524; Approximate 'Active' Worker users- 162; Approximate 'Active' Public users 362 |
| DBS AWARE | What software is currently being used for IAM? | currently internal application. local db authentication. Azure SSO in future |
| DBS AWARE | What are the protocols and methods for any IAM connections internally currently? | |
| DBS AWARE | What is the current protocol for connection to the system/application currently? | https |
| DBS AWARE | How much notice does the system/application vendor need to make enhancements (if needed)? | currently DBS team priortizies enhancements internally and then vendor includes in future releases. |
| DBS AWARE | Does the system/application have Master Data Management within the Program/Agency currently? | Unknown |
| DBS AWARE | Has the system/application's data security level been categorized and cataloged yet? | Yes |
| DBS AWARE | What are the current cyber standards framework being used currently for the system/application? | future state AMS. Alliance system/application standard - need to check |
| DBS AWARE | What software is currently being used in the system/application for document management? | Aware internal attachment database |
| DBS AWARE | What is the current system/application's modernization timeline currently (if applicable)? | AMS cloud ETA is 6/1/2024 |
| DBS AWARE | How many integrations with other systems, applications or data sources are there currently? | 6. Data warehouse, Flair, RCM, Tracker, conflict resolution, online application |
| DBS AWARE | What are the methods of integrations with other systems, applications or data sources currently? Please list the type | Currently QPIS, Conflict resolution, online application and RCM are real time SQL connection. Future AMS Aware will be by API for those systems. Currently flair and datawarehouse are scheduled batch jobs. |
| DBS AWARE | What is the frequency of updates on any current integrations with other systems, applications or data sources currently? Please list. | Currently flair scheduled batch is twice daily. datawarehouse are nightly scheduled batch jobs. |
| DBS AWARE | What are the current real-time communication capabilities for the system/application currently? | Currently real time SQL connection -QPIS, Conflict resolution, online application, RCM |
| DBS AWARE | Are there any known restrictions on using any Large Language Model platforms for customer service, data processing, communications, and other types of services? | unknown |
| DBS AWARE | What are the current mechanisms in place for system/application security audits, vulnerability assessments, and any penetration testing currently? | Currently onprem: Infosec team utilizes qualys scans, secure works, taegis. Future state cloud hosted: Alliance managed would need more information from alliance |
| DBS AWARE | How many existing licenses are in use for the system/application currently? | site license |
| DBS AWARE | Does the system/application ready to interface or is there a requirement to build a connectivity path for API or custom built? | Vendor will have to build an API for connectivity |
| DBS AWARE | What type of underlying technology is used for architecture in the system/application currently? | IIS SQL |
| DBS AWARE | Are there any existing repository housing mapped business processes for the system/application currently? | There is internal documentation saved on shared drive |
| DBS AWARE | What type of integration tools are being utilized for the system/application and for the Agency currently? List out. | no tools. currently use real time sql connection and scheduled batch. future state - API |
| DBS AWARE | How is data received ingested into the system? (manually, real time, file upload, etc) | real time sql connection and scheduled batch jobs |
| DEL EFS | SSO Provider currently being used? | SSO is not implemented in EFS Mod |
| DEL EFS | Running on Cloud or Prem? If Cloud what type? | EFS Mod is not hosted in the cloud, it's being hosted at NWRDC |
| DEL EFS | Capabilities to perform data exchanges (API/File Exchanges/other - explain) | There's an API portion. The API is limited in scope. There's also a bulk upload process from the web for the provider to upload VPK Attendance information. That's basically taking an excel file and uploading. |
| DEL EFS | Do you have a customer call center engaged with this system? If so, who? | We have an in-house prod support team that handles support calls. |
| DEL EFS | What is the application traffic during peak and non peak hours? | Unknown |
| DEL EFS | What is the application number of users (internal and external), concurrent and total per month? | THESE ARE NEW USERS PER MONTH. |
| DEL EFS | What software is currently being used for IAM? | Unknows |
| DEL EFS | What are the protocols and methods for any IAM connections internally currently? | IAM (Identity Access and Management) is being handled through a custom ASP.net Identity implementation. |
| DEL EFS | What is the current protocol for connection to the system/application currently? | IAM handled by ASP.Net Identity stores authentication information in cookies |
| DEL EFS | How much notice does the system/application vendor need to make enhancements (if needed)? | EFS Mod is a web based application that use the http protocol. |
| DEL EFS | Does the system/application have Master Data Management within the Program/Agency currently? | Enhancements are handled through in-house developers utilizing the Agile process. Currently software releases are on a monthly schedule which may include enhancements or bug fixes. |
| DEL EFS | Has the system/application's data security level been categorized and cataloged yet? | There is a data warehouse that's under construction at the moment. |
| DEL EFS | What are the current cyber standards framework being used currently for the system/application? | |
| DEL EFS | What software is currently being used in the system/application for document management? | NIST Cybersecurity Framework (CSF), ISO/IEC 27001, Florida Statue 60GG, HIPAA |
| DEL EFS | What is the current system/application's modernization timeline currently (if applicable)? | There is no document management software being used. |
| DEL EFS | How many integrations with other systems, applications or data sources are there currently? | Modernization to Microsoft Cloud Services by the end of FY 2024, Web API |
| DEL EFS | What are the methods of integrations with other systems, applications or data sources currently? Please list the type | N/A |
| DEL EFS | What is the frequency of updates on any current integrations with other systems, applications or data sources currently? Please list. | N/A |
| DEL EFS | What are the current real-time communication capabilities for the system/application currently? | N/A |
| DEL EFS | Are there any known restrictions on using any Large Language Model platforms for customer service, data processing, communications, and other types of services? | EFS mod operates in real time. There are no overnight batch processes that run that an end user will have to wait upon for any application decision etc. |
| DEL EFS | What are the current mechanisms in place for system/application security audits, vulnerability assessments, and any penetration testing currently? | EFS mod contains sensitive data that must comply with HIPAA rules. |
| DEL EFS | How many existing licenses are in use for the system/application currently? | Utilizing Florida Department of Education Security Tools such as Taegis, Microsoft Defender, ReliaQuest, on Infastructure and application scans. |
| DEL EFS | Does the system/application ready to interface or is there a requirement to build a connectivity path for API or custom built? | EFS Mod doesn't issue licenses to users for it's use. |
| DEL EFS | What type of underlying technology is used for architecture in the system/application currently? | There's an API that provides very limited functionality. Beyond that API, EFS Mod will need to build an API to interface with Family, Provider, or Coalition Portal. |
| DEL EFS | Are there any existing repository housing mapped business processes for the system/application currently? | EFS Mod is an ASP.NET MVC 5 web application. |
| DEL EFS | What type of integration tools are being utilized for the system/application and for the Agency currently? List out. | There is a wiki that has information on business processes. (It may need to be updated). Here's the link below: https://dev.azure.com/DEL-Applications/OEL%20Enterprise/_wiki/wikis/OEL-Enterprise.wiki/49/EFS-Mod-System |
| DEL EFS | How is data received ingested into the system? (manually, real time, file upload, etc) | Unknown |
| EMOP | SSO Provider currently being used? | NA |
| EMOP | Running on Cloud or Prem? If Cloud what type? | NA |
| EMOP | Capabilities to perform data exchanges (API/File Exchanges/other - explain) | NA |
| EMOP | Do you have a customer call center engaged with this system? If so, who? | NA |
| EMOP | What is the application traffic during peak and non peak hours? | NA |
| EMOP | What is the application number of users (internal and external), concurrent and total per month? | 100 users |
| EMOP | What software is currently being used for IAM? | NA |
| EMOP | What are the protocols and methods for any IAM connections internally currently? | NA |
| EMOP | What is the current protocol for connection to the system/application currently? | NA |
| EMOP | How much notice does the system/application vendor need to make enhancements (if needed)? | NA |
| EMOP | Does the system/application have Master Data Management within the Program/Agency currently? | NA |
| EMOP | Has the system/application's data security level been categorized and cataloged yet? | NA |
| EMOP | What are the current cyber standards framework being used currently for the system/application? | NA |
| EMOP | What software is currently being used in the system/application for document management? | NA |
| EMOP | What is the current system/application's modernization timeline currently (if applicable)? | NA |
| EMOP | How many integrations with other systems, applications or data sources are there currently? | NA |
| EMOP | What are the methods of integrations with other systems, applications or data sources currently? Please list the type | NA |
| EMOP | What is the frequency of updates on any current integrations with other systems, applications or data sources currently? Please list. | NA |
| EMOP | What are the current real-time communication capabilities for the system/application currently? | NA |
| EMOP | Are there any known restrictions on using any Large Language Model platforms for customer service, data processing, communications, and other types of services? | NA |
| EMOP | What are the current mechanisms in place for system/application security audits, vulnerability assessments, and any penetration testing currently? | NA |
| EMOP | How many existing licenses are in use for the system/application currently? | NA |
| EMOP | Does the system/application ready to interface or is there a requirement to build a connectivity path for API or custom built? | NA |
| EMOP | What type of underlying technology is used for architecture in the system/application currently? | NA |
| EMOP | Are there any existing repository housing mapped business processes for the system/application currently? | NA |
| EMOP | What type of integration tools are being utilized for the system/application and for the Agency currently? List out. | NA |
| EMOP | How is data received ingested into the system? (manually, real time, file upload, etc) | NA |
| Apprenticeship | NA | |
| Adult Education | NA |
File details come from the government source that posted it. Updated .