EXHIBIT A – STATEMENT OF WORK

1. DEPARTMENT BACKGROUND

A. The Colorado Department of Public Safety (CDPS) operates with the mission to have engaged employees, working together, to safeguard the public and deliver diverse public safety services. CDPS employees are dedicated to a safer Colorado, with each division coordinating work and acting as a piece of the puzzle that constitutes the department.

B. CDPS comprises approximately 2,400 employees distributed across six distinct divisions:

a. Colorado Bureau of Investigation (CBI)

b. Division of Criminal Justice (DCJ)

c. Division of Fire Prevention & Control (DFPC)

d. Division of Homeland Security & Emergency Management (DHSEM)

e. Colorado State Patrol (CSP)

f. Executive Director's Office (EDO)

C. The primary users of the new Distance Learning Management System (DLMS) will be CDPS employees, who will also assume the role of system administrators, instructors, content creators, performance review authors and learners.

Secondary users of the system will include around 15,000 external learners, specifically local Colorado law enforcement officers, correctional officers, and other organizational partners that receive specialized training provided by one or more of CDPS's divisions, offices, or grant programs.

2. PROJECT BACKGROUND

A. CDPS requires a new Distance Learning Management System (DLMS) to replace its current Software as a Service (SaaS) solution, Saba. This replacement is necessitated by the retiring and sunsetting of the Saba platform by its parent

Exhibit A 1 of 19 company, Cornerstone. The objective of this project is to implement a new DLMS solution on a 5-year contract that matches or exceeds the legacy system's capabilities while resolving current operational pain points.

B. Improvements and goals for the new DLMS include:

a. System Integration: Integration with CDPS's human resources system, the

Central Payroll Processing System (CPPS).

b. Authentication: Capability for Single Sign-On (SSO) integration compatible with existing CDPS systems. Possibilities include Google, Ping ID.

c. Content & Standards: Enhanced support content standards, media with modern file formats, SCORM, Experience API (xAPI), and Tin Can API.

Regarding hosting, archiving and downloading

d. Platform Customization: Upgraded internal wiki functionalities and the ability to host custom webpages directly inside the platform.

e. Performance Management: Improved features for creation, importing and exporting performance management reviews.

f. Accessibility: Improved compliance with current Colorado digital accessibility laws to ensure equitable access for all users.

C. Data Migration and Outcomes

a. The awarded vendor will work collaboratively with CDPS to migrate historical training records, existing courses, and content from Saba into the new DLMS. CDPS will dictate the final scope of this data migration.

b. Key performance outcomes and success metrics:

i. Complete system implementation and data migration by June 2027.

ii. Early availability of both self-directed and vendor-led instructor training.

iii. Platform training materials supplied to CDPS ahead of the system launch to facilitate employee training.

Exhibit A 2 of 19

3. LOCATION OF WORK, RESOURCES, EQUIPMENT, AND FACILITIES

A. Work will primarily be performed remotely by the vendor, with required participation in virtual meetings and select on-site meetings. The provided solution is expected to be a Software as a Service (SaaS) platform hosted on servers located within the United States.

B. Work Locations and Meetings

a. Primary Work Location: Vendor Remote facilities within the United States

b. On-Site Engagements: Product demonstrations and designated in-person group training sessions may take place at CDPS, located at 700 Kipling St, Denver, CO 80215.

c. Virtual Engagement: The vendor will participate in weekly virtual meetings for project coordination, migration, support, and remote training delivery until launch. Decreasing in frequency post launch.

C. Resources, Equipment, and Access

a. State Equipment & Software: CDPS will not provide state hardware, software, or network access prior to the execution of a signed contract.

Select data from the existing system may be provided to facilitate discussion.

b. Post-Contract Access Restrictions: Following contract execution, any provided network or system access will be strictly limited to the minimum necessary to fulfill contractual duties and perform required system integrations. Access to existing system data identified and required for migration may also be provided.

c. Vendor should have Soc 2 Type 2 Compliance Attestation

4. TESTING, TRAINING, SUPPORT

A. Testing Requirements

Exhibit A 3 of 19

a. CDPS should have continuous access to both testing and production environments during the migration period for testing parallel to migration efforts.

b. The vendor will conduct and support sample testing of various data import types throughout the data migration phase.

c. Testing should be performed on various training content formats to ensure seamless compatibility and functionality.

d. The DLMS must be tested to verify compliance with current Colorado digital accessibility laws through vendor supplied VPAT and CDPS internally completed accessibility.

B. Training Requirements

a. Vendor offers product training through virtual meetings, in-person group training, and access to self-directed online platform training materials are encouraged.

b. CDPS will communicate and host training offerings to our employees using these vendor training resources.

c. The vendor must provide access to comprehensive system administrator-level manuals and system configuration documentation.

d. CDPS should have access to platform user level training materials ahead of the system launch to facilitate training employees.

C. Support and Maintenance Requirements

a. CDPS will handle and provide front-line support for both internal and external learners post launch.

b. The vendor provides ongoing, specialized technical support for CDPS system administrators and select users with elevated privileges.

c. Vendor support should include, business-hours phone and email assistance, alongside a dedicated support ticketing system. Same business day response time expectation.

d. SaaS solution guarantees a 99.99% system uptime SLA.

Exhibit A 4 of 19

e. The vendor provides proactive notifications to CDPS regarding any preventative maintenance, system upgrades, or patches that may impact testing or production environments.

5. REQUIREMENTS AND TASKS

A. Requirements.

REQUIREMENT MEETS

REQUIREMENT

Isolated Learning Environments

Isolated Environment Creation: Solution supports the creation and administration of distinct, separate learning environments within a single

DLMS platform.

Choose

Comprehensive Environment Capabilities: Each isolated learning environment fully supports all learning, performance, security, and administrative features available on the main platform.

Choose

Strict User and Content Isolation: Prevents basic user accounts in one environment from viewing or interacting with users, data, and learning content in another isolated environment.

Choose

Internal and External CDPS Support: Fulfills CDPS requirements by accommodating an internal employee environment alongside multiple external stakeholder learning environments for various divisions and offices.

Choose

Account Creation and Management

Learner Account Self-Creation: Supports the ability for users in external

CDPS learning environments to sign up for a new account while utilizing security measures, such as security keywords, to discourage spam during initial signup.

Choose

Account Creation Triggered Roles: Provides system tools to automatically assign security roles, system privileges, user categorization, and course assignments triggered by both automatic and user-initiated account creation.

Choose

User Account Modification: Provides system tools that allow users to update their personal account information, with permissions restricted on a per-field basis by administrators.

Choose

Self-Service Password Reset: Enables users to securely recover and reset forgotten passwords through an automated, self-service function.

Choose

Analytics

Exhibit A 5 of 19

REQUIREMENT MEETS

REQUIREMENT

Comprehensive Platform Analytics: Ensures that data from all major functions and modules of the DLMS platform are available to the analytics system and reports generated.

Choose

Multiple Report Types: Solution provides a variety of pre-built and custom report types, including tabular, graphical, and metric-based reports to analyze different data sets.

Choose

Report Scheduling and Emailing: Allows administrators to configure automated schedules to generate and email specific reports directly to designated users or stakeholders.

Choose

Role-Based Report Access: Enables administrators to manage data visibility by explicitly granting basic users or managers access to view specific reports and dashboards.

Choose

Multi-Format Report Export: Supports the generation and exporting of report data into multiple standard file types, including CSV, Excel, PDF, and plain text.

Choose

Learning & Document Acknowledgements

Courses, Curriculums, and Certifications: Offers structured learning paths including standalone courses, multi-course curriculums, and certifications that support expiration tracking and automated recertification.

Choose

Course Transcripts: Provides administrators, instructors, and learners with direct access to comprehensive course transcripts through the system's analytics and reporting tools.

Choose

Self-Service Transcripts: Allows learners to independently view, download, and export their personal training transcripts for their own records.

Choose

Customizable Certificate Templates: Enables the creation of course certificates using customizable features like dynamic keywords and images, with the ability to export the final certificate to a flat image or PDF file.

Choose

Prescriptive System Assignments: Enables administrators to automatically assign learning requirements based on prescriptive system rules.

Choose

Criteria-Based Learner Categorization: Groups users based on specific demographic, job, or custom criteria to drive targeted learning assignments and detailed analytics.

Choose

Multiple Course Types: Supports the delivery and tracking of web-based training, traditional instructor-led training, and blended learning environments.

Choose

Class Management: Facilitates the creation of class sessions with tools for learner self-registration, as well as admin or instructor-led registration.

Choose

Exhibit A 6 of 19

Roster and Attendance Tools: Provides instructors with digital sign-in sheets and roster management tools to track class registration, attendance, and completion status.

Choose

Criteria-Based Notifications: Sends automated, criteria-triggered email notifications to learners and managers regarding upcoming sessions, required training, and registration changes.

Choose

Catalogs and Playlists: Offers customized learning catalogs and curated training playlists tailored for different employee roles.

Choose

Personalized Learning Paths: Creates unique learning journeys adapted to individual learner behaviors, required competencies, and career goals.

Choose

Content Management: Supports the hosting and delivery of various standard-compliant formats like SCORM, AICC, and Tin Can, alongside videos and documents.

Choose

Assessments and Evaluations: Includes built-in tools for creating tests, checklists, and surveys with automatic grading functionality.

Choose

Social Learning: Enables collaborative environments through discussion boards, peer-to-peer sharing, and collaborative workspaces.

Choose

Gamification: Motivates learners by awarding points, badges, stars, and tangible rewards for completing training modules.

Choose

Document Acknowledgement: Provide tools to create, manage, assign and track document acknowledgements.

Choose

Performance Management

Review Cycle Creation: Streamlines the setup of recurring performance check-ins and formal review cycles with assignments based on specific user criteria.

Choose

Role-Based Approval Workflows: Routes performance reviews through customizable approval chains based on the reviewee's role and organizational hierarchy. Alternatively options to manually set and update approval chain while review is in progress.

Choose

Customizable Performance Reviews: Allows the creation of tailored review templates featuring custom questions, narrative sections, and both manual and automatically calculated ratings.

Choose

Audit Trails for Reviews: Maintains a secure, time-stamped approval and comment audit trail of all changes made during the performance review process.

Choose

Performance Analytics and Reporting: Captures comprehensive data to provide analytics and reporting support on employee performance metrics and review completion status.

Exhibit A 7 of 19

Bulk PDF Export: Provides administrators with the ability to generate and export completed performance reviews in bulk as PDF files.

Choose

Goal Setting and Alignment: Allows users to establish, track, and align individual performance goals with broader organizational objectives.

Choose

360-Degree Feedback: Gathers comprehensive performance insights by soliciting feedback from an employee's managers, peers, and subordinates.

Choose

Continuous Feedback: Facilitates real-time coaching and feedback exchanges between managers and team members to drive continuous improvement.

Choose

Skills Gap Analysis: Analyzes current workforce competencies against required roles to identify development areas and direct career paths.

Choose

Succession Planning: Identifies high-potential employees and builds talent pools to prepare them for future leadership roles.

Choose

Compensation Management: Connects performance metrics to compensation planning, helping managers allocate salary increases and bonuses fairly.

Choose

Kudos: Provided tools to allow users to send kudos or thank you messages for later use by performance reviews.

Choose

System Security & Accessibility

Single Sign-On (SSO): Integrates with external identity providers using protocols like OpenID Connect and SAML for secure, centralized login access.

Choose

2FA / MFA: Supports two-factor and optional multi-factor authentication, including the admin-level ability to mandate it system-wide, per learning environment, or per account, as well as allowing basic users to enable or disable it themselves.

Choose

Role-Based Access Control: Restricts user access to specific system features and sensitive data based on their designated organizational role and permissions.

Choose

System Audit Trails: Records system changes, administrative actions, and login events to maintain accountability and support strict security audits.

Choose

Data Privacy Management: Provides tools to manage user consent, data retention policies, and compliance with global data privacy regulations.

Choose

Infrastructure Security: Utilizes geo-redundant servers and secure protocols to ensure maximum uptime and end-to-end data protection.

Choose

Secure File Management: Employs secure protocols to ensure files, internal documents, and learning materials are safely stored and transmitted.

Exhibit A 8 of 19

Colorado OIT Security Standards: Platform must adhere to all applicable

Colorado OIT security standards. This includes providing SOC 2 compliance reports.

Choose

US Based Servers: Servers must be located in the USA. Choose

The DLMS platform must meet or exceed Colorado laws and regulations regarding accessibility. This includes providing a recent VPAT Choose

Admin Features

Automated Workflows: Reduces administrative burden by automating repetitive tasks such as course assignments, enrollment reminders, and escalation notifications.

Choose

Customizable Dashboards: Allows administrators to configure interface layouts and widgets to prioritize the most relevant metrics and daily tools.

Choose

Multi-Lingual Support: Enables global deployment by offering the platform interface and localized content in various languages.

Choose

Integration APIs: Connects seamlessly with third-party HRIS systems, content providers, and web-conferencing tools.

Choose

People Admin: Defines and structures the corporate hierarchy, talent profiles, user groups, and reporting lines within the platform.

Choose

Notification Management: Configures and schedules automated email alerts and mobile push notifications for upcoming training, deadlines, and required approvals.

Choose

B. Tasks

TASK MEETS

REQUIREMENT

Central Payroll Processing System (CPPS) Integration

Configure, build, and test standard technical interfaces to integrate the

Distance Learning Management System (DLMS) with CDPS's CPPS.

Choose

Coordinate with CDPS technical staff to establish secure data exchanges adhering to State of Colorado technology and security standards.

Choose

Collaborative Data Migration & Handling

Vendor supplies a general migration implementation plan to CDPS for review prior to the start of migration activities.

Exhibit A 9 of 19

TASK MEETS

Execute data migration activities as a joint effort between CDPS and the vendor.

Choose

CDPS will define the scope and criteria of data (historical training records, existing courses, and content) to be transferred from the legacy Saba platform.

Choose

The vendor should supply specialized tools, templates, documentation, and instructions to facilitate data extraction, mapping, and loading processes.

Choose

Quality Assurance (QA) & Testing

Perform collaborative Quality Assurance (QA) testing alongside CDPS staff during the data migration phase to validate data accuracy and functional integrity.

Choose

Provide ongoing collaborative QA testing, system monitoring, and operational support for at least one calendar quarter (3 months) post-launch.

Choose

6. EVALUATION CRITERIA & OFFEROR SUBMISSION INSTRUCTIONS

A. Evaluation Overview & Scoring Weight

Proposals will be evaluated based on the criteria outlined in the table below totaling 100%. Offerors must submit verifiable documentation and narrative responses for each category to demonstrate capability.

CRITERIA DESCRIPTION WEIGHT

1.

Section 5 Compliance Matrix & Technical/Functional Capabilities

Matrix Completion: Offerors must complete Section 5.A (Requirements) of Exhibit A by selecting either "Yes" or "No" from the dropdown menu for every individual requirement.

Functional Demonstration: Written narratives and system artifacts proving platform capabilities for:

· Isolated learning environments (segregation of CDPS internal users and ~15,000 external law enforcement/correctional partners).

· Account self-creation, role-triggered permissions, password resets, and admin controls.

35%

Exhibit A 10 of 19

CRITERIA DESCRIPTION WEIGHT

· Course paths, curriculums, certifications, transcripts, document acknowledgements, and multi-standard support

(SCORM, xAPI, Tin Can).

· Performance management workflows, reviews, 360 feedback, audit trails, and bulk PDF generation.

· Analytics engine, pre-built/custom reporting, scheduling, and multi-format exports.

2.

Data Migration & Systems Integration

Matrix Completion: Offerors must complete Section 5.B (Tasks) of Exhibit

A by selecting either "Yes" or "No" from the dropdown menu for every task.

Proof of Integration & Migration:

· Architectural interface plan detailing connection and data exchange with CDPS's Central Payroll Processing System (CPPS).

· Single Sign-On (SSO) configuration protocols (Google, Ping ID, SAML, OpenID Connect).

· Saba migration strategy, including specific tools, mapping templates, validation steps, and past migration examples for historical records, courses, and content.

20%

3.

Security, Accessibility & State Compliance

Mandatory Documentation:

· Current SOC 2 Type II Compliance Attestation report.

· Current Voluntary Product Accessibility Template (VPAT) demonstrating compliance with Colorado digital accessibility laws.

· Formal certification that all data and SaaS infrastructure are hosted on servers located exclusively within the United States.

· Written security plan demonstrating compliance with Colorado

Information Security Policies (CISP), role-based access controls, and 2FA/MFA management.

15%

4.

Implementation Plan, Timeline & Quality Assurance

Project Artifacts:

10%

Exhibit A 11 of 19

CRITERIA DESCRIPTION WEIGHT

· Detailed Work Breakdown Structure (WBS) and project schedule validating milestone achievement: Sandbox/Production access and training by March 2027, and full migration/launch by

June 2027.

· Joint Quality Assurance (QA) testing plan during migration and commitment to at least one calendar quarter (3 months) of post-launch collaborative support.

· Staffing plan, project manager resume, and governance framework for weekly virtual meetings and deliverable sign-offs.

5.

Training, Documentation & Ongoing Support

Program Outline & SLAs:

· Comprehensive training curriculum: delivery plan for virtual instruction, on-site group sessions (700 Kipling St, Denver), and self-directed digital resources.

· Timeline ensuring admin documentation and end-user training materials are delivered to CDPS prior to go-live.

· Support Service Level Agreement (SLA) confirming 99.99% system uptime, business-hours phone/email/ticketing support, and same-business-day response times for Tier-2/3 administrator inquiries.

10%

6.

No Exceptions to State IT Contract

Contract Confirmation:

· Offeror statement confirming acceptance of the State of

Colorado Information Technology Contract without redlines, reservations, or modifications.

· Confirmations must preserve State terms regarding CDPS full data/content ownership, liability, confidentiality, governing law, and indemnification.

10%

7.

Price – Not part of initial evaluations, however, will be considered as part of the overall proposal submission.

B. Mandatory Section 5 Compliance Instruction (Exhibit A)

a. Mandatory Response Requirement:

Exhibit A 12 of 19

Offerors must complete the tables in Section 5.A (Requirements) and

Section 5.B (Tasks) of Exhibit A.

i. For each individual requirement and task line item, the Offeror must choose either “Yes” (Meets Requirement/Task) or “No” (Does Not Meet

Requirement/Task) from the provided dropdown list in the MEETS

REQUIREMENTS column.

ii. A selection of "Yes" indicates that the proposed platform natively supports or the vendor commits to fulfilling the requirement/task as written at no additional cost beyond the proposed pricing.

iii. Any item marked "No", left as "Choose", or altered will be evaluated accordingly and may result in point deductions or disqualification if the item is a mandatory operational or statutory requirement.

iv. For all items marked "Yes", Offerors must cite the specific section and page number in their technical proposal where verifiable narrative proof, architecture, or workflow details are provided.

C. Pricing Evaluation

Price - Not part of the initial evaluations, however, will be considered as part of the overall proposal submission.

Cost proposals submitted via Exhibit B (Pricing Sheet) will not receive numerical weighting during the initial technical evaluation. Following technical scoring, cost proposals from qualified Offerors will be reviewed to determine total cost of ownership, budget feasibility, and best value for the Base Performance Period through June 30, 2027, and the five (5) optional 12-month extension periods

(FY28 through FY32).

D. Scoring Scale (0-5 Points per Category)

5 – Exceptional: The proposal exceeds baseline requirements with robust proof, including a fully completed Section 5 matrix ("Yes" across items), verified SOC

Exhibit A 13 of 19

2/VPAT documentation, demonstrated integration track record (CPPS/Saba), and no contract exceptions.

4 – Good: Meets all SOW specifications with complete documentation, a fully completed Section 5 matrix, solid proof of integration capabilities, and feasible timelines. Low project risk.

3 – Satisfactory: Meets baseline requirements and includes Section 5 selections;

provides standard documentation but lacks depth or advanced technical artifacts.

2 – Marginal: Incomplete evidence; some "No" responses or unverified claims in

Section 5; unclear migration/integration approach or tight timeline risks.

1 – Unsatisfactory: Substantial omissions, failure to provide required compliance reports (e.g., missing VPAT or SOC 2), or multiple contract redlines.

0 – Non-Responsive: Category unaddressed, failure to submit Section 5 compliance tables, or failure to meet mandatory prerequisites (e.g., US server hosting).

7. DELIVERABLES SCHEDULE

A. Milestone Acceptance

All deliverables and milestones must receive written sign-off from both the awarded vendor and CDPS to be considered complete. CDPS will review each deliverable within ten (10) business days of receipt before granting approval.

B. Deliverables Schedule Table

The table below identifies project deliverables, target completion dates, and approval requirements:

Milestone / Deliverable Anticipated Time to

Completion

Signed Off by

Vendor & CDPS?

Sandbox and Production environment access March 2027 Yes

Exhibit A 14 of 19

Milestone / Deliverable Anticipated Time to

Completion

Signed Off by

Vendor & CDPS?

CDPS access to training & documentation March 2027 Yes

DLMS Migration starts March 2027 Yes

DLMS Migration completed June 2027 Yes

Production environment launch June 2027 Yes

Post-launch review August 2027 Yes

8. PERFORMANCE PERIOD

A. The performance period for this contract begins upon contract execution

(anticipated March 2027) and consists of a base implementation period. Followed by a total of five (5) optional years. Aligning with the state fiscal year starting

July 2027.

B. Base Performance Period: Begins upon contract execution anticipated to be in

March 2027 and runs through June 30, 2027. This initial period covers system configuration, data migration, quality assurance testing, training, and launch.

C. Option Extension Period: Up to five consecutive twelve month option periods spanning July 1, 2027 through June 30, 2032. Annual extensions are at the discretion of CDPS and will be executed via a signed State Option Letter prior to the start of each subsequent fiscal year. This covers Platform access, Vendor maintenance and platform upgrades, Support and access to current platform training and documentation.

Exhibit A 15 of 19

9. PAYMENT TERMS AND SCHEDULE

A. Payments under this contract will be processed on an annual schedule aligned with the State Fiscal Year (July 1 through June 30). Pricing details shall be provided separately in Exhibit B – Pricing Sheet.

a. Initial Term Payment (Base Performance Period): Payment for the Initial

Performance Period will cover only the actual base term (system migration, implementation, and launch activities from contract execution through June

30, 2027). The Contractor shall invoice CDPS following the successful completion and acceptance of base term deliverables or milestones, as detailed in Exhibit B. Under no circumstances will upfront advance payment for future option years be authorized.

b. Option Period Payments: Subject to the availability of appropriated funds, payment for Software as a Service (SaaS) subscription, maintenance, and ongoing operations for each subsequent option period (e.g., Option Period 1:

July 1, 2027 through June 30, 2028; Option Period 2: July 1, 2028 through

June 30, 2029) shall be processed separately on an annual basis upon the formal bilateral execution of an Option Letter by CDPS.

c. Invoicing and Acceptance Process: For each executed option period, the

Contractor shall submit an itemized invoice to CDPS no earlier than the start date of the applicable State Fiscal Year (July 1). Payment is contingent upon formal acceptance of services by CDPS and shall comply with the State of

Colorado Fiscal Rules and Prompt Payment provisions.

d. Price Increase Notification and Approval: Any proposed price increases must be submitted to CDPS for approval and execution through an Option Letter and/or Contract Amendment a minimum of 120 days prior to the next optioned year to take effect for the upcoming optioned year if CDPS chooses to exercise the option.

Exhibit A 16 of 19

e. Annual Price Adjustment Cap: Any annual price increase for subsequent option years is strictly capped at a maximum of 5% and requires prior written approval from CDPS via a fully executed Option Letter and/or

Contract Amendment.

10. MISCELLANEOUS/SPECIAL REQUIREMENTS

A. Data and Content Ownership: The Colorado Department of Public Safety (CDPS) retains full and exclusive ownership of all uploaded content, training materials, learner records, and learner data. CDPS retains access to CDPS owned data from the DLMS for a reasonable time period after the end of any contract service terms period for purposes of exporting and archiving.

B. Accessibility Standards: The Distance Learning Management System (DLMS) must meet or exceed all current Colorado digital accessibility laws, including standards established by the Governor's Office of Information Technology (OIT). The vendor must ensure compliance with the statutory guidelines detailed at:

https://oit.colorado.gov/accessibility-rules-to-accessible-web-services/accessibil ity-law-for-colorado-state-0

C. Security and Compliance: The proposed DLMS must meet applicable OIT Colorado

Information Security Policies (CISP). The vendor is required to adhere to State of

Colorado technology and security standards regarding data protection, incident response, and continuous vulnerability management.

11. PROJECT AND DELIVERABLES ACCEPTANCE

A. Review Process Migration Phase: CDPS will have a two week window to review system changes and individual project deliverables submitted during the data migration phase.

Exhibit A 17 of 19 https://oit.colorado.gov/accessibility-rules-to-accessible-web-services/accessibility-law-for-colorado-state-0?utm_source=gemini https://oit.colorado.gov/accessibility-rules-to-accessible-web-services/accessibility-law-for-colorado-state-0?utm_source=gemini https://oit.colorado.gov/accessibility-rules-to-accessible-web-services/accessibility-law-for-colorado-state-0?utm_source=gemini

B. Review Process Post-Launch: Following the production environment launch, CDPS will have a thirty day review period to evaluate the live platform for final system acceptance.

C. Criteria for Acceptance: Work will be considered acceptable and ready for final approval when the following criteria have been met and verified by CDPS:

a. All required historical records, courses, and content data are fully and accurately migrated.

b. All mandated system features and integrations (including CPPS) are fully implemented, functional, and active.

c. Agreed-upon ongoing support channels and all platform user training resources are actively available to CDPS users.

d. The platform is verified to meet all applicable State of Colorado technology, security, and accessibility standards.

D. Sign-Off Authority: Final approval and acceptance of the project deliverables will require formal written sign-off from multiple designated CDPS positions, including executive CDPS leadership.

12. ACRONYMS

Acronym Definition

2FA Two-Factor Authentication

CBI Colorado Bureau of Investigation

CDPS Colorado Department of Public Safety

CISP Colorado Information Security Policies

CPPS Central Payroll Processing System

CSP Colorado State Patrol

DCJ Division of Criminal Justice

DFPC Division of Fire Prevention & Control

DHSEM Division of Homeland Security & Emergency Management

DLMS Distance Learning Management System

EDO Executive Director's Office

MFA Multi-Factor Authentication

OIT Office of Information Technology

Exhibit A 18 of 19

QA Quality Assurance

SaaS Software as a Service

SCORM Sharable Content Object Reference Model

SOC 2 Systems and Organization Controls 2

SSO Single Sign-On

VPAT Voluntary Product Accessibility Template xAPI Experience API

Exhibit A 19 of 19