REVISED Attachment F - System Requirements_.xlsx

XLSX spreadsheet 158 KB Posted

Attached to
Provider Management Platform RFP
Solicitation number
S-58100-00007532
Issued by
Marion County, Oregon

About this file

This document is a Requirements Traceability Matrix (RTM) for the Provider Management Platform (PMP) Implementation Project for the State of Oregon (OR), Department of Early Learning and Care (DELC). The project aims to implement a new solution to guide child care providers through licensing, background check, and ERDC enrollment processes, enable DELC employees to conduct compliance and oversight activities, and generate ERDC subsidy bills and payments. The RTM outlines functional and non-functional requirements for the system, which must support desktop, tablet, and mobile users with an intuitive interface, allow for customized reporting and dashboards, and meet stringent security and compliance standards. The system must also integrate with external systems such as the Oregon Records Management System and allow for configuration of workflows, letters, and checklists.

The RTM indicates that the PMP Implementation Project is a contract opportunity for the State of Oregon, involving the jurisdictions of Marion County and the City of Salem. The system must be cloud-based and FedRAMP-certified, with the ability to support at least 1,000 concurrent users without performance degradation and a minimum uptime of 99.9%. DELC will evaluate the vendor's ability to meet the specified requirements during the selection process.

View the file

Other files

Show all 12

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Cover Page

State of Oregon (OR), Department of Early Learning and Care (DELC)
Provider Management Platform (PMP) Implementation Project
Requirements Traceability Matrix (RTM)
Version:2.0
TabDescription
Cover PageCover page of RTM
Document ControlVersion control and additional descriptive information.
MethodologyMethodology utilized for formulate requirements.
RequirementsFormulated list of requirements of PMP solution.
Common AcronymsAcronyms frequently utilized in the RTM.
DefinitionsDefinitions for common terms used in the RTM.

Document Control

Document Control Information
Document Information
Document NameRequirements Traceability Matrix (RTM)
Project NameState of Oregon (OR), Department of Early Learning and Care (DELC) Provider Management Platform (PMP) Implementation Project
Document AuthorDELC / Deloitte
Document Version2
Document StatusFinal
Date Released6/20/23
Document Edit History
VersionDateAdditions/ModificationsPrepared/Revised By
1.0006/02/2023Document CreatedDELC/Deloitte
2.0006/13/2023Incorporated EIS FeedbackDELC/Deloitte
Document Review/Approval History
DateNameOrganization/TitleComments
6/8/23Jim ZunigaOregon Enterprise Information ServicesReviewed and resubmitted to DELC on 06/08/23 with feedback on the requirements tab.

Methodology

Methodology to Formulate PMP Requirements
Below is a list and overview of the process areas used to break out the requirements for the new solution. The process areas breakout the functionalities desired for the platform and the requirements which correspond to these areas. For a full overview of the methodology used, please see the Requirements Management Plan.
Process AreaOverviewReq. IDL1 #
Non-Functional RequirementsMaintain the technical, security, and administrative functionality to provide transparent, secure, and accurate information for staff and partners.NF1-9
Child Care Provider ManagementGuide providers through license, background check, and ERDC enrollment processes, through an online portal, to enhance user experience and provide self-service capabilities.PM10-16
Child Care Program Oversight and GovernanceEnable DELC employees to conduct compliance, oversight, investigative and administrative processes, at both the main office and field offices, with minimal administrative burden.OG17-24
ERDC Subsidy Billing and PaymentGenerate ERDC subsidy bills and issue payments, or corrections, to providers and labor unions in a timely and effective manner.BP25-30
ERDC Family Support ServicesProvide ERDC families self-service capabilities and access to transparent information.FS31-35

-The following user groups are used throughout the RTM to ensure the platform can provide the capabilities needed for these users types.

-The actual user permissions and roles of the specific users will be determined once the vendor is selected.

-Please use this table to better understand the definition and examples of the types of users within the user groups used in the requirements.

RTM User GroupsDefinition of User GroupExamples of Types of Users Associated with User Group
Internal UserDepartment of Early Learning and Care Agency Employees that will need to be able to log into the system to assign or work on assigned tasks in order to; facilitate license processes, oversight and compliance processes, background checks, ERDC program enrollment, billing and payments for subsidy providers and conduct additional internal functions the PMP will host for the agency.Billing Team, Field Staff, Managers of Departments, Investigative Specialists, Background Check Unit employees, Compliance Officers, Accounting Team, Data and Analytics team members
Administrative UserDepartment of Early Learning and Care Agency System Administrators with the highest level of permissions over the system.System Administrators
External UserNew or Existing Providers that will need to create accounts to access the system so they can maintain compliance and status as a provider (licensed and license exempt), apply for the ERDC program, undergo the background check process, send/receive payments and conduct additional external functions the PMP will host for the agency.Facility owners/administrators, ERDC program providers, individuals undergoing a background check, Regulated Subsidy (license exempt) providers
Family UserNew or Existing Families that use services provided by DELC so that they can view actions, information, and upload information to their online portals.
While the Agency would like the system to be capable of creating this user grouping, this user group and type of external portal is not the immediate priority for the initial release of the Platform.Families / Parents receiving benefits from the ERDC Program

Requirements

Requirement IDProgram AreaL1 IDL1 Requirement
Note: L1 requirements represent primary functionality area.L1 StatusL2 IDL2 Requirement
Note: L2 requirements represent high level capabilities of the system.L2 StatusL3 IDL3 Requirement
Note: L3 requirements represent system design elements.L3 StatusRecommended PriorityDELC NotesVendor Ability to Meet Requirement CriteriaVendor Comments

(Rationale behind meets with exception or plan / intent to meet this requirement in the future)

NF-001-001Non-Functional Requirements1UX/UIValidated1The system shall allow for intuitive cross-system search by standard and custom data fields and display custom fields as needed by standard report.ValidatedTo be defined upon vendor selectionCritical
NF-001-002Non-Functional Requirements1UX/UIValidated2The system shall support desktop, tablet, and mobile users with a user friendly interface.ValidatedTo be defined upon vendor selectionCritical
NF-001-003Non-Functional Requirements1UX/UIValidated3The system shall allow all users to reorganize landing pages in the application to allow for the display of information most relevant to the user in accessible locations.ValidatedTo be defined upon vendor selectionCritical
NF-001-004Non-Functional Requirements1UX/UIValidated4The system shall allow for user selection of page layouts and short-cuts utilized in all system functionality.ValidatedTo be defined upon vendor selectionCritical
NF-001-005Non-Functional Requirements1UX/UIValidated5The system shall allow for the ability to perform searches that include a wildcard, date ranges, and/or numerical values.ValidatedTo be defined upon vendor selectionCritical
NF-001-006Non-Functional Requirements1UX/UIValidated6The system shall provide a customized landing page that displays logical information based on the user type and modules utilized (i.e., pending tasks assigned to the user, applications or visits assigned to the user, and any past due actions assigned to the user) and is configurable by Administrative User.ValidatedTo be defined upon vendor selectionCritical
NF-001-007Non-Functional Requirements1UX/UIValidated7The standard system shall be able to generate all reports in a format compatible with Adobe Reader, Microsoft Word, or Microsoft Excel.ValidatedTo be defined upon vendor selectionCritical
NF-001-008Non-Functional Requirements1UX/UIValidated8The standard system shall allow Administrative Users to manage field labels in the user interface.ValidatedTo be defined upon vendor selectionCritical
NF-001-009Non-Functional Requirements1UX/UIValidated9The system shall support upload operations performed in the background to allow Internal Users continued access to all interface capabilities while files are being uploaded.ValidatedTo be defined upon vendor selectionCritical
NF-002-001Non-Functional Requirements2ReportingValidated1The system shall allow Internal Users to create, run, save, and re-run parameterized reports utilizing any data in the application for which the Internal User has the required permissions to access.ValidatedTo be defined upon vendor selectionCritical
NF-002-002Non-Functional Requirements2ReportingValidated2The system shall allow for billing information and billing history to be accessible for both external and Internal Users.ValidatedTo be defined upon vendor selectionCritical
NF-002-003Non-Functional Requirements2ReportingValidated3The system shall allow for scheduling and results information related to an field visit (i.e., date and outcomes of a visit) to be viewed on the External Users screens.ValidatedTo be defined upon vendor selectionCritical
NF-002-004Non-Functional Requirements2ReportingValidated4The system shall send automated text messages, emails and posts onto the Internal Users and External Users portals to create awareness of all upcoming deadlines.ValidatedTo be defined upon vendor selectionCritical
NF-002-005Non-Functional Requirements2ReportingValidated5The system shall incorporate state holidays into applicable reports.ValidatedTo be defined upon vendor selectionCritical
NF-002-006Non-Functional Requirements2ReportingValidated6The system shall provide the ability to create dashboards that combine information from all databases in the system.ValidatedTo be defined upon vendor selectionCritical
NF-002-007Non-Functional Requirements2ReportingValidated7The system shall enable the Internal Users to save searches for reuse.ValidatedTo be defined upon vendor selectionCritical
NF-002-008Non-Functional Requirements2ReportingValidated8The system shall enable users to view/report on aggregated activity and drill down on selected results to view supporting detail.ValidatedTo be defined upon vendor selectionCritical
NF-002-009Non-Functional Requirements2ReportingValidated9The system shall enable Internal Users to view and search by the External User information, date, billing number, facility, license number and assigned employees to see records.ValidatedTo be defined upon vendor selectionCritical
NF-002-010Non-Functional Requirements2ReportingValidated10The system shall maintain a historical archive of all events involving Criminal Justice Information (CJI).ValidatedTo be defined upon vendor selectionCritical
NF-003-001Non-Functional Requirements3IAMValidated1The system shall support SAML (current version).ValidatedTo be defined upon vendor selectionCritical
NF-003-002Non-Functional Requirements3IAMValidated2The system shall support MFA (Multi-Factor Authentication) for External Users.ValidatedTo be defined upon vendor selectionCritical
NF-003-003Non-Functional Requirements3IAMValidated3The system shall support configurable role based access control.ValidatedTo be defined upon vendor selectionCritical
NF-003-004Non-Functional Requirements3IAMValidated4The system shall be able to track and report on the following activities:

Login attempts Assessments, creation, or changing/editing of permissions on user accounts, files, directories, and other solution resources Attempts to modify passwords Actions by privileged accounts

Attempts to access, modify, or destroy history/log filesValidatedTo be defined upon vendor selectionCritical
NF-003-005Non-Functional Requirements3IAMValidated5The systems shall allow administrator user to utilize an active directory to configure user groups and user permissions.ValidatedTo be defined upon vendor selectionCritical
NF-003-006Non-Functional Requirements3IAMValidated6The system shall allow for Administrative Users to create custom roles within the role based access functionality.ValidatedTo be defined upon vendor selectionCritical
NF-004-001Non-Functional Requirements4SecurityValidated1The system shall employ network segregation.ValidatedTo be defined upon vendor selectionCritical
NF-004-002Non-Functional Requirements4SecurityValidated2The system shall be cloud-based and FedRAMP-certified.ValidatedTo be defined upon vendor selectionCritical
NF-004-003Non-Functional Requirements4SecurityValidated3The system shall utilize a DELC-approved anti-virus software, firewall solution, and Intrusion Prevention System (IPS).ValidatedTo be defined upon vendor selectionCritical
NF-004-004Non-Functional Requirements4SecurityValidated4The system shall require External Users to change their password at the first login after their password has been created or reset by an administrator.ValidatedTo be defined upon vendor selectionCritical
NF-004-005Non-Functional Requirements4SecurityValidated5The system shall support mandated reset of user passwords periodically and the ability to time out upon inactivity after configurable time.ValidatedTo be defined upon vendor selectionCritical
NF-004-006Non-Functional Requirements4SecurityValidated6The system shall allow a maximum of 5 unsuccessful login attempts per user, after which user credentials must be reset.ValidatedTo be defined upon vendor selectionCritical
NF-004-007Non-Functional Requirements4SecurityValidated7The system shall support transport layer encryption 1.3 (TLS 1.3) or higher.ValidatedTo be defined upon vendor selectionCritical
NF-004-008Non-Functional Requirements4SecurityValidated8The system must use encryption of data at rest and data in transit (AES 256 or better).ValidatedTo be defined upon vendor selectionCritical
NF-004-009Non-Functional Requirements4SecurityValidated9The system shall segregate, at least logically, all data created or used by DELC from other customer's data and disallow comingling of the data.ValidatedTo be defined upon vendor selectionCritical
NF-004-010Non-Functional Requirements4SecurityValidated10The system shall support endpoint detection and response through continuous threat and malware monitoring.ValidatedTo be defined upon vendor selectionCritical
NF-004-011Non-Functional Requirements4SecurityValidated11The system shall support set up and authentication for administrative privileged actions from a standard user account.ValidatedTo be defined upon vendor selectionCritical
NF-004-012Non-Functional Requirements4SecurityValidated12The system shall support encryption keys, and access to encryption keys, in a cloud deployment that must be controlled by the agency by using CMK on top of FIPS 140 (current stable version) validated KMS.ValidatedTo be defined upon vendor selectionCritical
NF-004-013Non-Functional Requirements4SecurityValidated13The system shall support a minimum of 128 bit encryption, and the decryption keys must be at least 10 characters long, a mix of upper and lowercase letters, numbers, and special characters.ValidatedTo be defined upon vendor selectionCritical
NF-004-014Non-Functional Requirements4SecurityValidated14The system shall automatically change the encryption keys when a user no longer needs access to the encrypted data.ValidatedTo be defined upon vendor selectionCritical
NF-004-015Non-Functional Requirements4SecurityValidated15The system shall operate any add-ons in a secure government cloud at a GCC moderate level.ValidatedTo be defined upon vendor selectionCritical
NF-004-016Non-Functional Requirements4SecurityValidated16The system shall provide immutable logs (logging that would assist in a forensic investigation in the event of a compromise or for audit by either the CJIS Audit Unit (CAU) or the CJIS Systems Agency (CSA)).ValidatedTo be defined upon vendor selectionCritical
NF-004-017Non-Functional Requirements4SecurityValidated17The system shall ensure that any logs created with DELC data are only available to authorized Internal Users.ValidatedTo be defined upon vendor selectionCritical
NF-004-018Non-Functional Requirements4SecurityValidated18The system shall dispose of files/ data that fall outside of the data retention policy defined by DELC.ValidatedTo be defined upon vendor selectionCritical
NF-004-019Non-Functional Requirements4SecurityValidated19The system must meet or have the ability to meet the current Statewide Information and Cyber Security Standards V1.0 or be FedRamp compliant (https://www.oregon.gov/das/OSCIO/Documents/2019StatewideInformationAndCyberSecurityStandardsV1.0.pdf)ValidatedTo be defined upon vendor selectionCritical
NF-005-001Non-Functional Requirements5ConfigurationValidated1The system shall have the ability to configure letters, checklists, and workflows to DELC division-specific requirements.ValidatedTo be defined upon vendor selectionCritical
NF-005-002Non-Functional Requirements5ConfigurationValidated2The system shall have the ability to refund payments and generate send refunded payment notices to Users.ValidatedTo be defined upon vendor selectionCritical
NF-005-003Non-Functional Requirements5ConfigurationValidated3The system shall support all Accounting to generate transaction and balance statement for background check contract/accounting pool on monthly, quarterly, yearly frequency, and on demand.ValidatedTo be defined upon vendor selectionCritical
NF-005-004Non-Functional Requirements5ConfigurationValidated4The system shall have the ability to archive data, documents and correspondences attached to legal action in Oregon Records Management System for reference.ValidatedTo be defined upon vendor selectionCritical
NF-005-005Non-Functional Requirements5ConfigurationValidated5The system shall track and reconcile Oregon State Police bills for background checks (fingerprints and sex offender registry checks) performed to create an payment history.ValidatedTo be defined upon vendor selectionCritical
NF-005-006Non-Functional Requirements5ConfigurationValidated6The system shall reconcile Field Print bill for DELC Accounting for the fingerprinting services with the figure prints requested and processed by Field Print to maintain accuracy.ValidatedTo be defined upon vendor selectionCritical
NF-005-007Non-Functional Requirements5ConfigurationValidated7The system shall allow only Administrative Users to make configuration changes to systems that store CJI.ValidatedTo be defined upon vendor selectionCritical
NF-005-008Non-Functional Requirements5ConfigurationValidated8The system shall support self-service password reset for all Users.ValidatedTo be defined upon vendor selectionCritical
NF-005-009Non-Functional Requirements5ConfigurationValidated9The system shall allow for the creation of online portals for Internal Users, External Users, Administrative Users, and Family Users, with differing permissions and dashboard views.ValidatedTo be defined upon vendor selectionCritical
NF-005-010Non-Functional Requirements5ConfigurationValidated10The system shall allow for the configuration of External User pages, in which all pages, fields, and workflows can be customized based on the status of their background checks, license database, and/or ERDC program.ValidatedTo be defined upon vendor selectionCritical
NF-005-011Non-Functional Requirements5ConfigurationValidated11The system shall allow for the configuration of Internal Users pages, in which all pages, fields, and workflows can be customized based on the employee's role and credentials.ValidatedTo be defined upon vendor selectionCritical
NF-005-012Non-Functional Requirements5ConfigurationValidated12The system shall allow for the configuration of Family User pages, in which all pages, fields, and workflows can be customized based on the status of their enrollment in ERDC program.ValidatedTo be defined upon vendor selectionCritical
NF-005-013Non-Functional Requirements5ConfigurationValidated13The system shall allow for the configuration of context sensitive fields, with dynamic display or hiding of data fields, based on value contained in another associated data field and is configurable by Administrative Users.ValidatedTo be defined upon vendor selectionCritical
NF-005-014Non-Functional Requirements5ConfigurationValidated14The system shall allow for the configurable organization of data fields within the External Users, Internal Users, Administrative Users, and Family Users portals.ValidatedTo be defined upon vendor selectionCritical
NF-005-015Non-Functional Requirements5ConfigurationValidated15The system shall allow for the creation of custom data fields without additional code development and should be maintainable with workflow.ValidatedTo be defined upon vendor selectionCritical
NF-005-016Non-Functional Requirements5ConfigurationValidated16The system shall allow for custom fields to be named.ValidatedTo be defined upon vendor selectionCritical
NF-005-017Non-Functional Requirements5ConfigurationValidated17The system shall allow for the configuration of the data type in a custom field (to include text, URL, drop down with expected values, number, decimal, currency, pick list).ValidatedTo be defined upon vendor selectionCritical
NF-005-018Non-Functional Requirements5ConfigurationValidated18The system shall allow Administrative Users custom fields to be configured as required fields.ValidatedTo be defined upon vendor selectionCritical
NF-005-019Non-Functional Requirements5ConfigurationValidated19The system shall allow for the assignment of custom fields to User application, status, and billing pages.ValidatedTo be defined upon vendor selectionCritical
NF-005-020Non-Functional Requirements5ConfigurationValidated20The system shall allow for the assignment of custom fields to the ERDC pages.ValidatedTo be defined upon vendor selectionCritical
NF-005-021Non-Functional Requirements5ConfigurationValidated21The system shall have the ability to perform calculations on standard and custom data fields.ValidatedTo be defined upon vendor selectionCritical
NF-005-022Non-Functional Requirements5ConfigurationValidated22The system shall display the result of any calculations for quantitative statistics on reporting screens.ValidatedTo be defined upon vendor selectionCritical
NF-005-023Non-Functional Requirements5ConfigurationValidated23The system shall allow for the dynamic display or hiding of data fields based on the selected value in another field.ValidatedTo be defined upon vendor selectionCritical
NF-005-024Non-Functional Requirements5ConfigurationValidated24The system shall allow for any activities that can be performed on a standard field to be performed on a custom field.ValidatedTo be defined upon vendor selectionCritical
NF-005-025Non-Functional Requirements5ConfigurationValidated25The system shall allow for the creation of custom data fields in the employee data entry fields for visit reports, compliance tracking, and updates to letters.ValidatedTo be defined upon vendor selectionCritical
NF-006-001Non-Functional Requirements6InfrastructureValidated1The system shall operate and store all data within the U.S., its possessions, and territories.ValidatedTo be defined upon vendor selectionCritical
NF-006-002Non-Functional Requirements6InfrastructureValidated2The system shall support a minimum of 1,000 concurrent users without instability or a degradation in performance.ValidatedTo be defined upon vendor selectionCritical
NF-006-003Non-Functional Requirements6InfrastructureValidated3The system shall support an uptime of 99.9% (three nines).ValidatedTo be defined upon vendor selectionCritical
NF-006-004Non-Functional Requirements6InfrastructureValidated4The system shall provide support from the U.S., its possessions, and territories.ValidatedTo be defined upon vendor selectionCritical
NF-006-005Non-Functional Requirements6InfrastructureValidated5The system shall support a transactional response time of no more than 1 second for 95% of actions.ValidatedTo be defined upon vendor selectionCritical
NF-006-006Non-Functional Requirements6InfrastructureValidated6The system shall provide an indicator (progress bar) of action in progress for actions with a response time greater than 5 seconds.ValidatedTo be defined upon vendor selectionCritical
NF-006-007Non-Functional Requirements6InfrastructureValidated7The system shall not have a reduced rate of speed during peak times of concurrent use.ValidatedTo be defined upon vendor selectionCritical
NF-006-008Non-Functional Requirements6InfrastructureValidated8The system shall adhere to DELC's Patch Management Policy.ValidatedTo be defined upon vendor selectionCritical
NF-006-009Non-Functional Requirements6InfrastructureValidated9The system shall not have a system downtime outside of the regular maintenance schedule without DELC approval 72 hours prior to the downtime.ValidatedTo be defined upon vendor selectionCritical
NF-006-010Non-Functional Requirements6InfrastructureValidated10The system shall be restored within the agreed Recovery Time Objective (RTO) in the event of unscheduled downtime.ValidatedTo be defined upon vendor selectionCritical
NF-006-011Non-Functional Requirements6InfrastructureValidated11DELC shall receive a communication from the vendor within 10 minutes of unscheduled and unplanned downtime.ValidatedTo be defined upon vendor selectionCritical
NF-006-012Non-Functional Requirements6InfrastructureValidated12In the event of a decommissioning of the system, the vendor must certify that the data and infrastructure is securely sanitized and/or destroyed using methods acceptable by the National Security Agency (NSA)/Central Security Service (CSS).ValidatedTo be defined upon vendor selectionCritical
NF-006-013Non-Functional Requirements6InfrastructureValidated13The system shall operate a COOP strategy that utilizes Cloud as the primary infrastructure and an alternative Cloud as a fallback infrastructure.ValidatedTo be defined upon vendor selectionCritical
NF-006-014Non-Functional Requirements7InfrastructureValidated14The system shall be capable of being served on assets owned (or instances) and controlled by DELC.ValidatedTo be defined upon vendor selectionImportant
NF-006-015Non-Functional Requirements8InfrastructureValidated15The system shall allow an Administrative User to access the full data stored in its raw form.ValidatedTo be defined upon vendor selectionCritical
NF-007-001Non-Functional Requirements7RegulatoryValidated1The system shall only store data that is compliant with regulatory policies set by the Oregon Government and associated agencies.ValidatedTo be defined upon vendor selectionCritical
NF-008-001Non-Functional Requirements8IntegrationValidated1The system shall utilize a RESTful API with read and write functions, preferably Oauth2 and with multiple service accounts with restricted scope and audit trail, in order to access and push data on all grants received by a User so there is traceability with all associated benefits records to use to and from external systems.ValidatedTo be defined upon vendor selectionCritical
NF-008-002Non-Functional Requirements8IntegrationValidated2The system shall utilize a RESTful API with read and write functions, preferably Oauth2 and with multiple service accounts with restricted scope and audit trail, in order to access and push data on financial transactions to use to and from external systems.ValidatedTo be defined upon vendor selectionCritical
NF-008-003Non-Functional Requirements8IntegrationValidated3The system shall utilize a RESTful API with read and write functions, preferably Oauth2 and with multiple service accounts with restricted scope and audit trail, in order to access and push data to the Oregon Records Management System to use to and from external systems.ValidatedTo be defined upon vendor selectionCritical
NF-008-004Non-Functional Requirements8IntegrationValidated4The system shall utilize a RESTful API with read and write functions, preferably Oauth2 and with multiple service accounts with restricted scope and audit trail, in order to access and push data on Users trainings records to use to and from external systems.ValidatedTo be defined upon vendor selectionCritical
NF-008-005Non-Functional Requirements8IntegrationValidated5The system shall utilize a RESTful API with read and write functions, preferably Oauth2 and with multiple service accounts with restricted scope and audit trail, in order to access and push data on Users accessible from the public to use to and from external systems.ValidatedTo be defined upon vendor selectionCritical
NF-008-006Non-Functional Requirements8IntegrationValidated6The system shall utilize a RESTful API with read and write functions, preferably Oauth2 and with multiple service accounts with restricted scope and audit trail, in order to access and push data related to quality ratings of Users to use to and from external systems.ValidatedTo be defined upon vendor selectionCritical
NF-008-007Non-Functional Requirements8IntegrationValidated7The system shall utilize a RESTful API with read and write functions, preferably Oauth2 and with multiple service accounts with restricted scope and audit trail, in order to access and push information on how to get a fingerprint and a voucher to use to and from external systems.ValidatedTo be defined upon vendor selectionCritical
NF-008-008Non-Functional Requirements8IntegrationValidated8The system shall utilize a RESTful API with read and write functions, preferably Oauth2 and with multiple service accounts with restricted scope and audit trail, in order to access and push criminal history and background check data to and from external systems.ValidatedTo be defined upon vendor selectionCritical
NF-008-009Non-Functional Requirements8IntegrationValidated9The system shall utilize a RESTful API with read and write functions, preferably Oauth2 and with multiple service accounts with restricted scope and audit trail, in order to access and push fingerprint data to and from external systems.ValidatedTo be defined upon vendor selectionCritical
NF-008-010Non-Functional Requirements8IntegrationValidated10The system shall utilize a RESTful API with read and write functions, preferably Oauth2 and with multiple service accounts with restricted scope and audit trail, in order to access and push family eligibility data for the ERDC Program to and from external systems.ValidatedTo be defined upon vendor selectionCritical
NF-008-011Non-Functional Requirements8IntegrationValidated11The system shall utilize a RESTful API with read and write functions, preferably Oauth2 and with multiple service accounts with restricted scope and audit trail, in order to access and push Users listed in the union database to and from external systems.ValidatedTo be defined upon vendor selectionCritical
NF-009-001Non-Functional Requirements9System AdministrationValidated1The system shall allow Administrative Users to access the user permissions associated with users accounts.ValidatedTo be defined upon vendor selectionCritical
NF-009-002Non-Functional Requirements9System AdministrationValidated2The system shall allow Administrative Users to reset the credentials for locked accounts so the access to this function is restricted.ValidatedTo be defined upon vendor selectionCritical
NF-009-003Non-Functional Requirements9System AdministrationValidated3The system shall support website accessibility standards as referenced at https://www.oregon.gov/pages/accessibility.aspxValidatedTo be defined upon vendor selectionCritical
PM-010-001Child Care Provider Management10Process applicationsValidated1The system shall create a unique account for an External User with the their email address and phone number they want to use to apply, so that they can access their information and updates online.ValidatedTo be defined upon vendor selectionCriticalApplications include background checks, for a License or for the ERDC Program
PM-010-002Child Care Provider Management10Process applicationsValidated2The system shall send External Users an email and text with their account credentials for an online portal, to allow them to log in to complete required actions and view status.ValidatedTo be defined upon vendor selectionCritical
PM-010-003Child Care Provider Management10Process applicationsValidated3The system shall provide External Users the ability to change their password to maintain a secure login and access to their account.ValidatedTo be defined upon vendor selectionCritical
PM-010-004Child Care Provider Management10Process applicationsValidated4The system shall prompt returning, External Users to login so External Users do not try to make a new account every time they want to log in.ValidatedTo be defined upon vendor selectionCritical
PM-010-005Child Care Provider Management10Process applicationsValidated5The system shall allow for the External User to opt-in for paperless documentation only, so that all communications will be performed electronically.ValidatedTo be defined upon vendor selectionCritical
PM-010-006Child Care Provider Management10Process applicationsValidated6The system shall prohibit a new account to be made with the same email address and application details so duplicate accounts are not created for the same user in the system for different application types.ValidatedTo be defined upon vendor selectionCritical
PM-010-007Child Care Provider Management10Process applicationsValidated7The system shall provide External Users the ability to initiate an online application to start the background check process.ValidatedTo be defined upon vendor selectionCriticalDELC currently stores the Users that pass a background check in a "Central Background Registry".
PM-010-008Child Care Provider Management10Process applicationsValidated8The system shall provide External Users the ability to initiate online applications for various license types, so they can begin the process.ValidatedTo be defined upon vendor selectionCriticalLicense Applications include: Certified Center, Certified Family, Registered Family, and Recorded Programs. There are also License Exempt Applications
PM-010-009Child Care Provider Management10Process applicationsValidated9The system shall provide External Users the ability to initiate an online application to be a listed for the Employment Related Day Care (ERDC) program so they can receive subsidy payments.ValidatedTo be defined upon vendor selectionCritical
PM-010-010Child Care Provider Management10Process applicationsValidated10The system shall allow External Users to select the application type they are looking for so that they can begin their application.ValidatedTo be defined upon vendor selectionCriticalNot all types of applications should be available to the public upon first application.
PM-010-011Child Care Provider Management10Process applicationsValidated11The system shall automatically prompt required content from the selected application so the External User fills out the data fields required.ValidatedTo be defined upon vendor selectionCriticalDifferent application types require different fields to be included, so the system must store and reference the information on the specified application.
PM-010-012Child Care Provider Management10Process applicationsValidated12The system shall allow External Users to apply for license/facility modifications by selecting another application to fill out from a drop down menu so that they can apply online to update their status.ValidatedTo be defined upon vendor selectionCritical
PM-010-013Child Care Provider Management10Process applicationsValidated13The system shall auto populate new applications an External User begins with information from their profiles so that they do not need to duplicate manual data entries.ValidatedTo be defined upon vendor selectionCriticalFor example, a License User may initiate an application for change (e.g. capacity, ownership, address) in a license, so the system should pre-populate the application with data associated with the existing license.
PM-010-014Child Care Provider Management10Process applicationsValidated14The system shall provide External Users with existing accounts the ability to submit applications for other programs or licenses so that all of their information is consolidated in one account.ValidatedTo be defined upon vendor selectionImportant
PM-010-015Child Care Provider Management10Process applicationsValidated15The system shall automatically populate the required fields and additional documentation requests based on the application type selected by the External User.ValidatedTo be defined upon vendor selectionCritical
PM-010-016Child Care Provider Management10Process applicationsValidated16The system shall enable External Users the ability to see the status of their applications through their online portal to provide self service capabilities and minimize the need for manual status updates.ValidatedTo be defined upon vendor selectionImportant
PM-010-017Child Care Provider Management10Process applicationsValidated17The system shall prompt External Users to fill out required fields, depending on the application type, to limit follow up needed for additional information.ValidatedTo be defined upon vendor selectionCritical
PM-010-018Child Care Provider Management10Process applicationsValidated18The system shall automatically route applications to the correct DELC business unit based on the type of application submitted to decrease the need for manual assignments.ValidatedTo be defined upon vendor selectionCriticalFor example, if an application is a background check application, the system should alert and route the application to the background check unit based on the user role.
PM-010-019Child Care Provider Management10Process applicationsValidated19The system shall prompt External Users applying for a background check to associate their accounts to a facility name, address, and owner/administrator/license primary so the owner/administrator/license primary can see the status of their employees applications and eligibility.ValidatedTo be defined upon vendor selectionCritical
PM-010-020Child Care Provider Management10Process applicationsValidated20The system shall send the External User automatic alerts when their application status has been changed to increase visibility into the application process.ValidatedTo be defined upon vendor selectionImportant
PM-010-021Child Care Provider Management10Process applicationsValidated21The system shall automatically record the date/time of all application submissions in order to track the lifecycle of applications.ValidatedTo be defined upon vendor selectionCritical
PM-010-022Child Care Provider Management10Process applicationsValidated22The system shall require an External User associated with a facility to enter and update the site information for facilities so that the information is available for Internal Users to reference.ValidatedTo be defined upon vendor selectionCritical
PM-010-023Child Care Provider Management10Process applicationsValidated23The system shall prompt a External User to enter and update the employees that are employed at their facility and the individuals that reside at the residence to add them to their record.ValidatedTo be defined upon vendor selectionCritical
PM-010-024Child Care Provider Management10Process applicationsValidated24The system shall provide the External User on a licensed facility license the ability to set user permission for individuals linked to the facility.ValidatedTo be defined upon vendor selectionCritical
PM-010-025Child Care Provider Management10Process applicationsValidated25The system shall allow External Users that started the application process on paper, to receive login credentials via email and text message so they can access their online accounts.ValidatedTo be defined upon vendor selectionCritical
PM-010-026Child Care Provider Management10Process applicationsValidated26The system shall notify an External User via email and text if their application is missing submission elements so they can finish their application.ValidatedTo be defined upon vendor selectionCritical
PM-010-027Child Care Provider Management10Process applicationsValidated27The system shall automatically identify if an application has been submitted late or timely and flag the application as timely or not in the system.ValidatedTo be defined upon vendor selectionCritical
PM-010-028Child Care Provider Management10Process applicationsValidated28The system shall notify External Users and Internal Users when an application is untimely so that they are aware of the late submission.ValidatedTo be defined upon vendor selectionImportant
PM-010-029Child Care Provider Management10Process applicationsValidated29The system shall identify if an External User's application requires further review by the compliance team based on Self-attested entries.ValidatedTo be defined upon vendor selectionCriticalCompliance required actions include examples like self identifying of history with: Medical Marijuana, User of Foster Care, Negative Prior History, etc.
PM-010-030Child Care Provider Management10Process applicationsValidated30The system shall allow Internal Users to complete and submit an Application on behalf of an applicant (or referencing a paper based application) and create a portal/login credentials.ValidatedTo be defined upon vendor selectionCritical
PM-010-031Child Care Provider Management10Process applicationsValidated31The system shall allow the External User to communicate with Internal Users through their online portal through direct messaging page and field so information and inquiries are consolidated.ValidatedTo be defined upon vendor selectionUseful
PM-010-032Child Care Provider Management10Process applicationsValidated32The system shall capture a communication log to maintain the communication history between the External Users and the Internal User through their online portal.ValidatedTo be defined upon vendor selectionUseful
PM-010-033Child Care Provider Management10Process applicationsValidated33The system shall allow an External User to request to withdraw an application at any time during the application process and maintain related record keeping of the history and reason.ValidatedTo be defined upon vendor selectionCritical
PM-010-034Child Care Provider Management10Process applicationsValidated34The system shall notify External Users with employees listed / household members to have employees / house hold members apply for a background check if they have yet to.ValidatedTo be defined upon vendor selectionCritical
PM-010-035Child Care Provider Management10Process applicationsValidated35The system shall allow External Users to request to voluntarily close their account(s) so the request can be reviewed by Users.ValidatedTo be defined upon vendor selectionImportant
PM-010-036Child Care Provider Management10Process applicationsValidated36The system shall automatically sync training requirements to an External User's profile based on the application type so that the correct trainings are monitored for completion.ValidatedTo be defined upon vendor selectionCriticalDifferent types of applications require different types of training requirements to be fulfilled.
PM-010-037Child Care Provider Management10Process applicationsValidated37The system shall allow Internal Users to charge or wave the fee for an application, based on DELC policies, so the correct payment amount is being collected.ValidatedTo be defined upon vendor selectionCritical
PM-010-038Child Care Provider Management10Process applicationsValidated38The system shall allow the External User to submit payments for an application through Inbound Payment Processing capability supported by major payment modes (i.e. electronic check, credit card).ValidatedTo be defined upon vendor selectionCritical
PM-010-039Child Care Provider Management10Process applicationsValidated39The system shall provide custom calculation fields for fees to be paid for an application, based on the application type and information gathered.ValidatedTo be defined upon vendor selectionCriticalThe fee amount to be collected is based on multiple factors (i.e. application type, time-period, contracted rate, conditional fee waiver, etc.)
PM-010-040Child Care Provider Management10Process applicationsValidated40The system shall allow an Internal User to wave a fee for an application with a reason provided so that a record is kept and maintained.ValidatedTo be defined upon vendor selectionCritical
PM-010-041Child Care Provider Management10Process applicationsValidated41The system shall automatically populate the status of payments from Inbound Payment Processing function so the External Users and Internal Users know payment was received.ValidatedTo be defined upon vendor selectionCritical
PM-010-042Child Care Provider Management10Process applicationsValidated42The system shall send an alert to Internal Users and External Users if a payment is unable to be processed (i.e. if there is a Non-Sufficient Fund (NSF) error)ValidatedTo be defined upon vendor selectionCritical
PM-010-043Child Care Provider Management10Process applicationsValidated43The system shall provide Internal Users access to the list of rules and statutes for charging external organizations for their Applications to verify the system calculated amount is correct.ValidatedTo be defined upon vendor selectionUseful
PM-010-044Child Care Provider Management10Process applicationsValidated44The system shall identify the user permissions an Internal User or External needs based on the information inputted and type of profile created.ValidatedTo be defined upon vendor selectionCritical
PM-010-045Child Care Provider Management10Process applicationsValidated45The system shall allow the External User to choose the language preference for their language portal so they can understand the information on the screen.

tc={DC4E6CE1-BC8C-4226-83C6-A6B6B87F001A}: [Threaded comment]

Your version of Excel allows you to read this threaded comment; however, any edits to it will get removed if the file is opened in a newer version of Excel. Learn more: https://go.microsoft.com/fwlink/?linkid=870924

Comment:

Does DELC have a list of languages they are expecting to have the users choose from?ValidatedTo be defined upon vendor selectionCriticalAt the moment, the five most commonly used languages are Russian, English, Vietnamese, Mandarin and Spanish, however the language capabilities will need to be dynamic to the changing needs of the agency.
PM-010-046Child Care Provider Management10Process applicationsValidated46The system shall provide clear instructions and training for External Users on how to use the system so that they can effectively access their profiles and information.ValidatedTo be defined upon vendor selectionCritical
PM-011-001Child Care Provider Management11Request and process documentationValidated1The system shall prompt the External User to upload documentation based on application type to collect the inputs needed for all application processes.ValidatedTo be defined upon vendor selectionCritical
PM-011-002Child Care Provider Management11Request and process documentationValidated2The system shall prompt the External User to submit records of their training certificates so the system can log the training history.ValidatedTo be defined upon vendor selectionCritical
PM-011-003Child Care Provider Management11Request and process documentationValidated3The system shall process submitted documentation to determine if it has all of the required elements so the External User can be notified of unfulfilled submission requirements within the documentation.ValidatedTo be defined upon vendor selectionImportant
PM-011-004Child Care Provider Management11Request and process documentationValidated4The system shall provide External Users recommendations for trainings to take to fulfill outstanding requirements based on the type of application submitted to improve access to resources.ValidatedTo be defined upon vendor selectionCritical
PM-011-005Child Care Provider Management11Request and process documentationValidated5The system shall allow an External User that is the facility/license owner/administrator/license primaries to request individuals to be linked to their facility for association.ValidatedTo be defined upon vendor selectionCritical
PM-011-006Child Care Provider Management11Request and process documentationValidated6The system shall flag a background check application as "out-of state" if the External User has lived in a different state over last 5 years.ValidatedTo be defined upon vendor selectionImportantFor example, background checks completed by out of state applicants are much more time / labor intensive than a standard renewal of an in state applicant.
PM-011-007Child Care Provider Management11Request and process documentationValidated7The system shall process External User the recorded birth dates of all of a residents living at a facility, in order to mark that residents over 18 must have completed background checks.ValidatedTo be defined upon vendor selectionCritical

This is the start of the file's text. The full file is on GovTribe.

File details come from the government source that posted it. Updated .