RFI___DCA_OIS_24-25-006_-_Attachment_I_Requirements.xlsx
XLSX spreadsheet 43 KB Posted
- Attached to
- RFI DCA OIS 24-24-006
- Solicitation number
- 0000034110
- Issued by
- California
About this file
This is a functional and non-functional requirements document from the California Department of Consumer Affairs (DCA) outlining technical specifications for a user portal and licensing system. The document contains 229 functional requirements and 43 non-functional requirements covering areas including user registration, application processing, payment handling, workflow management, and system interfaces. The requirements specifically focus on capabilities needed to process various types of pharmacy-related licenses and applications, including pharmacist licenses, pharmacy technician permits, facility licenses, and automated drug delivery systems.
The technical specifications emphasize security compliance with NIST standards, FedRAMP requirements, and California privacy laws. The system must maintain 99.99% uptime, provide real-time data replication to the state's data warehouse, support modern web browsers, enable API integration, and include robust security features like multi-factor authentication and encrypted data storage. The system must be ADA compliant, support mobile devices, maintain code coverage of at least 80%, and undergo annual third-party security assessments. Critical vulnerabilities must be remediated within 3 business days.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Func. Requirment- RFI
| Attachment I | RFI # DCA OIS 24-25-006 | ||||||||
| FR ID | Description | Requirement Type | Module | Mandatory/ Optional | Provided out of the box (Yes/No)? | Provided through Product configuration? (Yes/No) | Provided through Product customization? Yes/No | Not provided? | |
| provide brief explanation | Respondent Comments | ||||||||
| FR1 | The system must allow external user to register and create a user profile account using an email address | Registration & Login | User Portal | ||||||
| FR2 | The system must verify that the user profile email is authentic | Registration & Login | User Portal | ||||||
| FR3 | The system must present an option to setup secure MFA which is optional to setup. - MFA must be compliant with SIMM 5360-C | Registration & Login | User Portal | ||||||
| FR4 | The system must allow registration page to be configurable and changeable include inline instructions | Registration & Login | System - Customization & Configuration | ||||||
| FR5 | The System must allow authorized user to create a user profile account for an external user | Registration & Login | Administrative | ||||||
| FR6 | The System must present an option to reset password by sending reset link to registered user email | Registration & Login | User Portal | ||||||
| FR7 | The system must require login CAPTCHA based on reputation scoring set in the system configuration | Registration & Login | User Portal, System - Customization & Configuration | ||||||
| FR8 | The system must allow to configure the password requirement | Registration & Login | System - Customization & Configuration | ||||||
| FR9 | The system must allow user to link its user profile to License Entity | User Account | User Profile | ||||||
| FR10 | The system must allow user to link its user profile to Application Entity | User Account | User Profile | ||||||
| FR11 | The system must interface with DCA system of records for licensing lifecycle | Interface Type | Interface Management | ||||||
| FR12 | The system must allow authorized internal user to create an online record of application from paper-based application for an existing user entity and send an email to create a user profile account | Create/Edit Application | Application Management | ||||||
| FR13 | The system must require a configurable number of identification attributes to match before linking to exiting system record (access to the existing system record grants permission to all associated licenses and applications) to existing user entity. The identification attributes must be configurable. | User Profile | System - Customization & Configuration, Application Management, User Portal | ||||||
| FR14 | The system must provide authorized users ability to assign authorized users to a license by sending invitation to delegates to signup | Business Entity Hierarchy, Registration & Login | User Portal, Account Management | ||||||
| FR15 | The system will allow user to edit/update the user profile | User Profile | User Portal | ||||||
| FR16 | The system will allow authorized user to reset passwords for the users and send email to the registered email on the account | Registration & Login | Administrative | ||||||
| FR17 | The system will allow authorized user to be able to link a license to an external user account | User Account | Account Management | ||||||
| FR18 | The system must logically group & display historical user data to user. | Audit Trail | Reporting | ||||||
| FR19 | The system must display records for each enity based on filters available to setup. Search filters must be configurable. | All | All | ||||||
| FR20 | The System must allow users to upload documents required for submission in the congifurable formats. For eg. - pdf,docx, doc, xls,gif,jpeg,tiff,png,bmp,txt | Application, User Profile | User Portal, Application Management | ||||||
| FR21 | The System must be able to interface with other systems using various protocols SOAP, SFTP, REST, FTPs, - as required | Interface Protocols | Interface Management | ||||||
| FR22 | The system allow to create scheduled jobs that may run based on business rules or interface | Interface , Scheduled Jobs | Interface Management, Automation | ||||||
| FR23 | The system must be able to self-recover from errors during scheduled job | Interface Jobs | Exception Handling, Automation | ||||||
| FR24 | The system must send out notification of success or failure on coompletion of an automated job | Notification | Communication | ||||||
| FR25 | The system must encrypt all interface data | Interface, Security | System | ||||||
| FR26 | The system must allow authorized user to add/update/delete status for a workflow task | Automated Worflow | Administrative, Workflow Management | ||||||
| FR27 | The system must allow authorized user to create security based roles that can be assigned to the users | User, Security | Security, User Profile | ||||||
| FR28 | The System must allow authorized user to configure application workflows to align with business rules | Application, Automated Worflow | Workflow Management, Administrative | ||||||
| FR29 | The system must maintain detailed audit logs of all activities (view/add/update/delete) for all users for all modules of the system | Audit Trail | Reporting | ||||||
| FR30 | The system must allow users to complete various forms online for submission | Create/Edit Application | Application Management | ||||||
| FR31 | The system must allow users to save their progress during online application process and allow them to continue at a later date | Create/Edit Application | Application Management | ||||||
| FR32 | The system shall generate and assign a unique application ID for each new application | Create/Edit Application | Application Management | ||||||
| FR33 | The system shall assign status to each application based on configurable, pre-defined and assigned business rules | Application Tracking | Application Management, System - Customization & Configuration | ||||||
| FR34 | The system must process applications based on the business rules applicable during each stage/status | Application Tracking | Application Management | ||||||
| FR35 | The system must assign status to each application based on configurable criteria | Application Tracking | Application Management, System - Customization & Configuration | ||||||
| FR36 | The system shall have progress check validations and display inline messages for required fields and data field formatting before being able to progress through the application. | Data Validation, Create/Edit Application | Application Management | ||||||
| FR37 | The system shall allow authorized users to review submitted application | Application Processing | Administrative | ||||||
| FR38 | The system shall allow authorized user to send out notification to applicant requesting additional information and change the status of the application | Application Processing, Notification | Administrative, Communication | ||||||
| FR39 | The system shall allow authorized users and/or system to manually/automatically assign status to application based on business rules | Application Processing | Administrative | ||||||
| FR40 | The system allow authorized users to configure different payment schedules based on the business rules | Payment | Payment Management, System - Customization & Configuration | ||||||
| FR41 | The system must allow authorized users to configure Application ID format | Application | System-Customization & Configuration | ||||||
| FR42 | The system must allow users to select preferred method of communication | User Profile | User Portal | ||||||
| FR43 | The system must allow correspondances to be addressed to multiple recipients | Correspondance | Communication | ||||||
| FR44 | The system must notify the responsible owner(s) of status change of entities as defines in business rules | Notifications | Communication, System - Customization & Configuration | ||||||
| FR45 | The system must automatically generate correspondances/letters/notices for pre-defined entities based on business rules using configurable templates | Correspondance, Templates, Automated Workflow | System - Customization & Configuration, Workflow Management | ||||||
| FR46 | The system must allow authorized user to edit autogenerated correspondances/letters/notices | Correspondance | Communication | ||||||
| FR47 | The system must send out notifications regarding next steps of an automated workflow request, the frequency shall be configurable. | Correspondance, Templates, Automated Workflow | System - Customization & Configuration, Workflow Management | ||||||
| FR48 | The system must be able to request digital signature for entities based on business rules | Digital Signatures | System - Customization & Configuration | ||||||
| FR49 | The systems rules driven workflow shall allow a process to request additional data, confirmation of data, digital signatures and/or completed forms from responsible parties or external stakeholders without an online user profile (e.g. new pharmacist applicant may be required to have education or experience confirmed by a third party. This shall be done digitally as a part of the application process.) | Digital Signatures | System - Customization & Configuration | ||||||
| FR50 | The system must provide secure storage repository for all uploaded/generated documents | Repository, Configuration | System - Customization & Configuration, Storage | ||||||
| FR51 | The system will interface with DCA's inspection system to send and receive information as per pre-defined contracts | Interface | Interface Management | ||||||
| FR52 | The system must allow applications forms to be configurable by authorized users | Application | Application Management, System - Customization & Configuration | ||||||
| FR53 | The system must allow authorized users to configure the system to display customizable messages to users upon login | Login, Configuration | User Portal, System - Customization & Configuration | ||||||
| FR54 | The system will allow authorized users to edit data which was auto-generated by the system | Reviewing Applications | Security, Administrative | ||||||
| FR55 | The system must allow authorized user to transfer/consolidate revenues between different transaction types | Transaction | Payment Management | ||||||
| FR56 | The system must store and label (categorize) uploaded or generated documents/photos upon upload to system | System | System | ||||||
| FR57 | The system must allow user to change/update data based on business rules including but not limited to address, officer, facility etc. | User Profile | User Portal, System - Customization & Configuration | ||||||
| FR58 | The system must provide a robust search engine with configurable searchable entities and data fields | Reporting, Configuration | Reporting, System - Customization & Configuration | ||||||
| FR59 | The system must be able to support multi-layer web like ownership hierarchy structure | Entities | Ownership Hierarchy | ||||||
| FR60 | The system must allow one license to be linked to multiple licenses and multi-layered ownership structure | Entities | Account Management, Ownership Hierarchy | ||||||
| FR61 | The system must be able to accept online payments by interfacing State of CA contracted payment processers and must be PCI compliant. For ex. CC, echeck, ACH, Debit, etc. | Payment | Payment Management | ||||||
| FR62 | The system must allow authorized users to process and refund payments | Payment | Payment Management | ||||||
| FR63 | The system must allow multiple payments for a single transaction fee | Transaction | Payment Management | ||||||
| FR64 | The system must autogenerate payment recipts and send payment notifications via preferred communication method setup by that user | User, Notifications, Payments | Communication, Payment Management | ||||||
| FR65 | The system must display real time transaction status | Transaction | Payment Management | ||||||
| FR66 | The system must generate daily, weekly and monthly financial reports to track total payments, refunds, outstanding balances, and any adjustments made | Reporting, Payments | Payment Management, Reporting | ||||||
| FR67 | The system must provide authorized users detailed cashier reports to reconcile cash and electronic payments | Reporting, Payments | Payment Management, Reporting | ||||||
| FR68 | The system must allow authorized user to reconcile cash drawers and payment transactions at the end of each batch and automatically report any discrepencies | Reporting, Payments | Payment Management, Reporting | ||||||
| FR69 | The system must allow authorized user to input physical check, money order or cash received by mail | Transaction | Payment Management | ||||||
| FR70 | The system must produce licensing, compliance, education, and administrative reports which span configurable duration and record specific data from all data fields within system - | Reporting - replication | Reporting | ||||||
| FR71 | The system must be able to associate communications with an application | System | System | ||||||
| FR72 | The system must have a built in exception handler to handle business exception and report them | Exceptions | Exception Handling | ||||||
| FR73 | The system must have built in collaboration tools so the users can collaborate from within the system | Collaboration tools | Collaboration Tools | ||||||
| FR74 | The system must be able to assign automated processing workflows to applications based on the business rules | Workflow Management | Workflow Management | ||||||
| FR75 | The system must provide authorized users with configurable dashboards | Dashboard | Administrative | ||||||
| FR76 | The system must allow authorized user to develop customizable reports | Reporting - replication | Reporting | ||||||
| FR77 | The system must support real time secure replication of data to DCA's data warehouse | interface type | Interface Management | ||||||
| FR78 | The system will allow user to edit/update configurable associated license data | User Profile | User Portal | ||||||
| FR79 | The system must allow multiple methods of communication which are configurable including but not limited to email and SMS | Correspondance | Communication | ||||||
| FR80 | The user portal shall display a visual progression of all applications/transactions (including historical for a configurable amount of time) based on its status. | Application | Application | ||||||
| FR81 | Display history of all entity transaction - retention shall be configurable | History | System | ||||||
| FR82 | UI to display all the outcomes of automated jobs | Automated Worflow | System, Workflow Management | ||||||
| FR83 | The System Scheduler shall be integrated with primary UI | Interface | Interface Management | ||||||
| FR84 | The System must support FTB Requirements for payment management | Payments | Payment Management | ||||||
| FR85 | Provide the ability to allocate one payment to multiple revenue accounts. | Payments | Payment Management | ||||||
| FR86 | The system must provide shopping cart feature for payment | Payments | Payment Management | ||||||
| FR87 | The System must allow configuration for document upload size threshold | Application | Application Management | ||||||
| FR88 | The system must scan all upload for malware and/or malicious content | Application | Application Management | ||||||
| FR89 | The system must interface with licensing system of record in order to establish and maintain relationship between external user accounts & license records | License | Interface Management | ||||||
| FR90 | The system must interface with licensing system of records in order to keep the current license status | License | Interface Management | ||||||
| FR91 | The system must allow formatted PDF of all application forms. These PDFs shall not be rendered screenshots but exact replicas of published forms. | System, Application | Application Management, System Management, User Portal | ||||||
| FR92 | The system shall abandon incomplete, non-submitted applications based on a configurable amount of time per license type | Application | Application Management, System | ||||||
| FR93 | The system shall provide an authorized, external user a list of available applications/transactions in the user portal. The available transactions shall be based on the license and license type the external user account is linked to, as well as open application status and current license expiration date | Application | Application Management | ||||||
| FR94 | The system shall provide a configurable application designer to include and format required input data for an application/transaction | Application | Application Management | ||||||
| FR95 | The system shall provide searchable queues to authorized internal users based on configurable application status or statuses | Application | Workflow Management | ||||||
| FR96 | The system shall allow authorized, internal users to view a non-editable application/transaction prior to online submission | Application | Application Management | ||||||
| FR97 | The system shall allow certain application/transaction input fields to be required of the authorized, external user and not mandatory for the authorized, internal user. And vice versa | Application | Application Management | ||||||
| FR98 | The system shall allow authorized, internal users to review and define pre-populated and custom deficiencies for every section of an application/transaction | Application | Application Management | ||||||
| FR99 | The system shall allow authorized, internal users to generate a templated correspondence which includes all open and selected application/transaction deficiencies | Application | Application Management | ||||||
| FR100 | The system shall allow authorized, internal users to edit generated, templated email correspondence before sending | Application | Application Management | ||||||
| FR101 | The system shall store all transmitted correspondence with appropriate metadata (eg. date, time, user, etc.) | Application | Application Management | ||||||
| FR102 | The system shall allow authorized, external users to remediate deficiencies online via their user portal. Only application/transaction section with defined deficiencies shall be editable by the external user | Application | Application Management | ||||||
| FR103 | The system shall allow authorized, internal users to progress an application/transaction to its next or final step based on configurable business rules, which may include correspondence | Application | Application Management | ||||||
| FR104 | The system shall allow authorized, internal users to modify fees for an individual application/transaction. Fee modification shall provide capability to store a justification comment, date stamp and user initiator | Application | Application Management | ||||||
| FR105 | The system shall allow configurable purge/retention schedule based on business rules | System | System | ||||||
| FR106 | The system shall allow licensed authorized users online submission of renewal for Advanced Practice Pharmacist (APH) | Application | User Portal, Application | ||||||
| FR107 | The system shall allow licensed authorized users online submission of renewal for Automated Drug Delivery System (ADD) | Application | User Portal, Application | ||||||
| FR108 | The system shall allow licensed authorized users online submission of renewal for Automated Drug Delivery System EMS (ADE) | Application | User Portal, Application | ||||||
| FR109 | The system shall allow licensed authorized users online submission of renewal for Automated Patient Dispensing System 340B Clinic (ADC) | Application | User Portal, Application | ||||||
| FR110 | The system shall allow licensed authorized users online submission of renewal for Centralized Hospital Packaging (CHP)/Government Owned (CHE) | Application | User Portal, Application | ||||||
| FR111 | The system shall allow licensed authorized users online submission of renewal for Clinics (CLN)/Government Owned (CLE) | Application | User Portal, Application | ||||||
| FR112 | The system shall allow licensed authorized users online submission of renewal for Correctional Pharmacy (LCF) | Application | User Portal, Application | ||||||
| FR113 | The system shall allow licensed authorized users online submission of renewal for Designated Paramedic (DPM) | Application | User Portal, Application | ||||||
| FR114 | The system shall allow licensed authorized users online submission of renewal for Designated Representative (EXC) | Application | User Portal, Application | ||||||
| FR115 | The system shall allow licensed authorized users online submission of renewal for Designated Representative-3PL (DRL) | Application | User Portal, Application | ||||||
| FR116 | The system shall allow licensed authorized users online submission of renewal for Designated Representative-Reverse Distributor (DRR) | Application | User Portal, Application | ||||||
| FR117 | The system shall allow licensed authorized users online submission of renewal for Designated Representatives Vet (EXV) | Application | User Portal, Application | ||||||
| FR118 | The system shall allow licensed authorized users online submission of renewal for Drug Room (VRM)/Government Owned (DRE) | Application | User Portal, Application | ||||||
| FR119 | The system shall allow licensed authorized users online submission of renewal for Hospitals (HSP)/Government Owned (HPE) | Application | User Portal, Application | ||||||
| FR120 | The system shall allow licensed authorized users online submission of renewal for Hospital Satellite Sterile Compounding (SPC)/Government Owned (SCE) | Application | User Portal, Application | ||||||
| FR121 | The system shall allow licensed authorized users online submission of renewal for Hypodermic Needle and Syringes (HYP)/Government Owned (HYE) | Application | User Portal, Application | ||||||
| FR122 | The system shall allow licensed authorized users online submission of renewal for Outsourcing Facility (OSF) | Application | User Portal, Application | ||||||
| FR123 | The system shall allow licensed authorized users online submission of renewal for Outsourcing Facility Nonresident (NSF) | Application | User Portal, Application | ||||||
| FR124 | The system shall allow licensed authorized users online submission of renewal for Pharmacist (RPH) | Application | User Portal, Application | ||||||
| FR125 | The system shall allow licensed authorized users online submission of renewal for Pharmacy (PHY)/Government Owned (PHE) | Application | User Portal, Application | ||||||
| FR126 | The system shall allow licensed authorized users online submission of renewal for Pharmacy Nonresident (NRP) | Application | User Portal, Application | ||||||
| FR127 | The system shall allow licensed authorized users online submission of renewal for Pharmacy Technician (TCH) | Application | User Portal, Application | ||||||
| FR128 | The system shall allow licensed authorized users online submission of renewal for Remote Dispensing Pharmacy (PHR) | Application | User Portal, Application | ||||||
| FR129 | The system shall allow licensed authorized users online submission of renewal for Advanced Practice Pharmacist (APH) | Application | User Portal, Application | ||||||
| FR130 | The system shall allow licensed authorized users online submission of renewal for Sterile Compounding (LSC)/Government Owned (LSE) | Application | User Portal, Application | ||||||
| FR131 | The system shall allow licensed authorized users online submission of renewal for Sterile Compounding Nonresident (NSC) | Application | User Portal, Application | ||||||
| FR132 | The system shall allow licensed authorized users online submission of renewal for Surplus Medication Collection Distribution Intermediary (SME) | Application | User Portal, Application | ||||||
| FR133 | The system shall allow licensed authorized users online submission of renewal for Third-Party Logistics Providers (TPL) | Application | User Portal, Application | ||||||
| FR134 | The system shall allow licensed authorized users online submission of renewal for Third-Party Logistics Provider Nonresident (NPL) | Application | User Portal, Application | ||||||
| FR135 | The system shall allow licensed authorized users online submission of renewal for Veterinary Food-Animal Drug Retailer (VET) | Application | User Portal, Application | ||||||
| FR136 | The system shall allow licensed authorized users online submission of renewal for Wholesaler (WLS)/Government Owned (WLE) | Application | User Portal, Application | ||||||
| FR137 | The system shall allow licensed authorized users online submission of renewal for Wholesaler Nonresident (OSD) | Application | User Portal, Application | ||||||
| FR138 | The system shall allow licensed authorized users online submission of change notice for Change of Pharmacist in Charge | Application | User Portal, Application | ||||||
| FR139 | The system shall allow licensed authorized users online submission of change notice for Change of Permit Officer/Admin/Beneficial Interest | Application | User Portal, Application | ||||||
| FR140 | The system shall allow licensed authorized users online submission of change notice for Change of Address, not location site licenses | Application | User Portal, Application | ||||||
| FR141 | The system shall allow licensed authorized users online submission of change notice for Change of Address Individual | Application | User Portal, Application | ||||||
| FR142 | The system shall allow licensed authorized users online submission of change notice for Change of Name Individual | Application | User Portal, Application | ||||||
| FR143 | The system shall allow licensed authorized users online submission of change notice for Change of Designated Representative in Charge | Application | User Portal, Application | ||||||
| FR144 | The system shall allow licensed authorized users online submission of change notice for Change of Responsible Manager | Application | User Portal, Application | ||||||
| FR145 | The system shall allow licensed authorized users online submission of change notice for Change of Professional Director | Application | User Portal, Application | ||||||
| FR146 | The system shall allow licensed authorized users online submission of change notice for Change of Location Site | Application | User Portal, Application | ||||||
| FR147 | The system shall allow licensed authorized users online submission of change notice for Notification to Operate or Discontinue a Mobile Unit | Application | User Portal, Application | ||||||
| FR148 | The system shall allow licensed authorized users online submission of change notice for Notification of Temporary Closure | Application | User Portal, Application | ||||||
| FR149 | The system shall allow licensed authorized users online submission of change notice for Notification of Discontinuance of Business | Application | User Portal, Application | ||||||
| FR150 | The system shall allow licensed authorized users online submission of change notice for Notification of Discontinuance or Replacement of Automated Drug Delivery License | Application | User Portal, Application | ||||||
| FR151 | The system shall allow licensed authorized users online submission of change notice for Change of license from Active to Inactive or the reverse | Application | User Portal, Application | ||||||
| FR152 | The system shall allow licensed authorized users online submission of change notice for Military Active | Application | User Portal, Application | ||||||
| FR153 | The system shall allow licensed authorized users online submission of change notice for Military Inactive | Application | User Portal, Application | ||||||
| FR154 | System shall allow one unique ID per user that can be associated with a number of application types (e.g. a pharmacy technician license and intern license) | Application | User Portal, Application | ||||||
| FR155 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Individual Applications type Designated Representatives (EXC) | Application | User Portal, Application | ||||||
| FR156 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Individual Applications type Designated Representatives Vet (EXV) | Application | User Portal, Application | ||||||
| FR157 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Individual Applications type Designated Representatives-3PL (DRL) | Application | User Portal, Application | ||||||
| FR158 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Individual Applications type Designated Representatives-Reverse Distributor (DRR) | Application | User Portal, Application | ||||||
| FR159 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Individual Applications type Designated Paramedic (DPM) | Application | User Portal, Application | ||||||
| FR160 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Individual Applications type Intern Pharmacist (INT) | Application | User Portal, Application | ||||||
| FR161 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Individual Applications type Pharmacist Exam Applications (RPH) | Application | User Portal, Application | ||||||
| FR162 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Individual Applications type Pharmacist Retake Exam Applications (RPH) | Application | User Portal, Application | ||||||
| FR163 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Individual Applications type Pharmacist Initial License Application (RPH) | Application | User Portal, Application | ||||||
| FR164 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Individual Applications type Advanced Practice Pharmacist (APH) | Application | User Portal, Application | ||||||
| FR165 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Individual Applications type Pharmacy Technician (TCH) | Application | User Portal, Application | ||||||
| FR166 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Individual Applications (Military Spouses/Partners) type Temp-Designated Representatives-Wholesaler (TEX) | Application | User Portal, Application | ||||||
| FR167 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Individual Applications (Military Spouses/Partners) type Temp-Designated Representatives-3PL (TDR) | Application | User Portal, Application | ||||||
| FR168 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Individual Applications (Military Spouses/Partners) type Temp-Designated Representatives-Reverse Distributor (TRR) | Application | User Portal, Application | ||||||
| FR169 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Individual Applications (Military Spouses/Partners) type Temp-Designated Paramedic (TDP) | Application | User Portal, Application | ||||||
| FR170 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Individual Applications (Military Spouses/Partners) type Temp-Intern Pharmacist (TIN) | Application | User Portal, Application | ||||||
| FR171 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Individual Applications (Military Spouses/Partners) type Temp-Pharmacist (TRP) | Application | User Portal, Application | ||||||
| FR172 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Individual Applications (Military Spouses/Partners) type Temp-Advanced Practice Pharmacist (TAP) | Application | User Portal, Application | ||||||
| FR173 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Individual Applications (Military Spouses/Partners) type Temp-Pharmacy Technician (TTC) | Application | User Portal, Application | ||||||
| FR174 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Automated Drug Delivery System (ADD(AUD)) | Application | User Portal, Application | ||||||
| FR175 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Automated Drug Delivery System (ADD(APD)) | Application | User Portal, Application | ||||||
| FR176 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Automated Drug Delivery System EMS (ADE) | Application | User Portal, Application | ||||||
| FR177 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Automated Patient Dispensing System 340B Clinic (ADC) | Application | User Portal, Application | ||||||
| FR178 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Centralized Hospital Packaging Government Owned (CHE) | Application | User Portal, Application | ||||||
| FR179 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Centralized Hospital Packaging (CHP) | Application | User Portal, Application | ||||||
| FR180 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Clinics (CLN) | Application | User Portal, Application | ||||||
| FR181 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Clinics Government Owned (CLE) | Application | User Portal, Application | ||||||
| FR182 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Drug Room (DRM) | Application | User Portal, Application | ||||||
| FR183 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Drug Room Government Owned (DRE) | Application | User Portal, Application | ||||||
| FR184 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Hospital (HSP) | Application | User Portal, Application | ||||||
| FR185 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Hospital Government Owned (HPE) | Application | User Portal, Application | ||||||
| FR186 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Hospital Satellite Sterile Compounding (SCP) | Application | User Portal, Application | ||||||
| FR187 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Hospital Satellite Sterile Compounding Government Owned (SCE) | Application | User Portal, Application | ||||||
| FR188 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Hypodermic Needle and Syringes (HYP) | Application | User Portal, Application | ||||||
| FR189 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Correctional Pharmacy (LCF) | Application | User Portal, Application | ||||||
| FR190 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Outsourcing Facility (OSF) | Application | User Portal, Application | ||||||
| FR191 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Outsourcing Facility Nonresident (NSF) | Application | User Portal, Application | ||||||
| FR192 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Pharmacy (PHY) | Application | User Portal, Application | ||||||
| FR193 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Pharmacy (PHY) Chain | Application | User Portal, Application | ||||||
| FR194 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Pharmacy Government Owned (PHE) | Application | User Portal, Application | ||||||
| FR195 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Remote Dispensing Pharmacy (PHR) | Application | User Portal, Application | ||||||
| FR196 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Pharmacy Nonresident (NRP) | Application | User Portal, Application | ||||||
| FR197 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Sterile Compounding (LSC) | Application | User Portal, Application | ||||||
| FR198 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Sterile Compounding Government Owned (LSE) | Application | User Portal, Application | ||||||
| FR199 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Sterile Compounding Nonresident (NSC) | Application | User Portal, Application | ||||||
| FR200 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Surplus Medication Collection Distribution Intermediary (SME) | Application | User Portal, Application | ||||||
| FR201 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Third-Party Logistics Providers (TPL) | Application | User Portal, Application | ||||||
| FR202 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Third-Party Logistics Providers Nonresident (NPL) | Application | User Portal, Application | ||||||
| FR203 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Veterinary Food-Animal Drug Retailer (VET) | Application | User Portal, Application | ||||||
| FR204 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Wholesalers (WLS) | Application | User Portal, Application | ||||||
| FR205 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Wholesalers Government Owned (WLE) | Application | User Portal, Application | ||||||
| FR206 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Site Applications type Wholesalers Nonresident (OSD) | Application | User Portal, Application | ||||||
| FR207 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Drug Room -Temp (DRM) | Application | User Portal, Application | ||||||
| FR208 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Drug Room Government Owned -Temp (DRE) | Application | User Portal, Application | ||||||
| FR209 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Hospitals - Temp (HSP) | Application | User Portal, Application | ||||||
| FR210 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Hospital Government Owned -Temp (HPE) | Application | User Portal, Application | ||||||
| FR211 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Hospital Satellite Sterile Compounding - Temp (SCP) | Application | User Portal, Application | ||||||
| FR212 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Hospital Satellite Sterile Compounding Government Owned - Temp (SCE) | Application | User Portal, Application | ||||||
| FR213 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Correctional Pharmacy - Temp (LCF) | Application | User Portal, Application | ||||||
| FR214 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Outsourcing Facility - Temp (OSF) | Application | User Portal, Application | ||||||
| FR215 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Outsourcing Facility Nonresident - Temp (NSF) | Application | User Portal, Application | ||||||
| FR216 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Pharmacy - Temp (PHY) | Application | User Portal, Application | ||||||
| FR217 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Pharmacy Government Owned - Temp (PHE) | Application | User Portal, Application | ||||||
| FR218 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Remote Dispensing Pharmacy - Temp (PHR) | Application | User Portal, Application | ||||||
| FR219 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Pharmacy Nonresident - Temp (NRP) | Application | User Portal, Application | ||||||
| FR220 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Sterile Compounding - Temp (LSC) | Application | User Portal, Application | ||||||
| FR221 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Sterile Compounding Government Owned - Temp (LSE) | Application | User Portal, Application | ||||||
| FR222 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Sterile Compounding Nonresident - Temp (NSC) | Application | User Portal, Application | ||||||
| FR223 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Third-Party Logistics Providers - Temp (TPL) | Application | User Portal, Application | ||||||
| FR224 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Third-Party Logistics Providers Nonresident - Temp (NPL) | Application | User Portal, Application | ||||||
| FR225 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Veterinary Food-Animal Drug Retailer - Temp (VET) | Application | User Portal, Application | ||||||
| FR226 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Wholesalers - Temp (WLS) | Application | User Portal, Application | ||||||
| FR227 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Wholesaler Government Owned - Temp (WLE) | Application | User Portal, Application | ||||||
| FR228 | The system shall allow licensed authorized users online submission of Initial exam/license applications for Temporary Site License Request type Wholesalers Nonresident - Temp (OSD) | Application | User Portal, Application | ||||||
| FR229 | The system shall allow licensed authorized users online submission of change notice for the Intern Extension Request for the INT license type | Application | User Portal, Application |
Non-Func. Requirement-RFI
| Attachment I | RFI # DCA OIS 24-25-006 | |
| NFR ID | Category | Requirement |
| NFR1 | Non Security - Accessibility | ADA compliance practices must follow DCA ADA Standards. All screens, as well as generated materials |
| NFR2 | Non Security - Application Programming Interface (API) & Microservices | Provide API documentation using an Open API specification (e.g. Swagger) |
| NFR3 | Non Security - Application Programming Interface (API) & Microservices | The Software Development Plan (SDP) shall include API design and development guidance that includes API design standards, API documentation standards, API testing guidance, API versioning, API deployment, and API monitoring, troubleshooting and support |
| NFR4 | Non Security - Browser Support | The system shall support all modern web browsers (eg. Chrome, FireFox, Safari) |
| NFR5 | Non Security - Configurability & Extensibility | The system should allow DCA to configure all modules to fit the business needs |
| NFR6 | Non Security - Data Management | Encryption of data in transit and select data encryption at rest is determined by the DCA’s data classification and risk assessment, using FIPS approved ciphers . All PII data shall be encrypted at rest |
| NFR7 | Non Security - Data Management | No PII in part or in whole will be logged in the application logs. Primary keys or other ways of identifying the entity will be used instead |
| NFR8 | Non Security - DevOps Pipeline | The system shall use a CI/CD pipeline to perform build, deployment, data migrations, security scans, and tests. |
| NFR9 | Non Security - Enterprise Alignment | The application should live behind a load balancer |
| NFR10 | Non Security - Enterprise Alignment | The platform shall be available and operational for 99.99% of the time |
| NFR11 | Non Security - Enterprise Alignment | Source code shall be readily availiable for DCA to review |
| NFR12 | Non Security - Interfaces | Platform shall replicate all system data to the State's data warehouse at near real-time, but not longer than 60 minutes |
| NFR13 | Non Security - Interfaces | All Platform configuration and Platform integration shall adhere to all current applicable Personal Credit Industry (PCI) requirements. Neither shall any Platform configuration or Platform integration nullify the Platform’s compliance with the PCI requirements. (Payment Card Industry Data Security Standard version 3.2) |
| NFR14 | Non Security - Mobile Support | When the system is used on mobile devices, it shall meet the same performance requirements as established in the Performance Management Plan |
| NFR15 | Non Security - Scalability & Performance | Implement Application Performance Monitoring (APM) that monitors system pages, services, microservices, database, and interfaces. |
| NFR16 | Non Security - Software Configuration Management and Traceability | All libraries will be retrieved from Artifactory (or DCA-approved repository) for DCA builds |
| NFR17 | Non Security - Technical Metrics & Reporting | Code coverage shall be at least 80%. Code coverage is the percentage of code that is covered by automated tests. Report to be included in each sprint report and provided on-demand |
| NFR18 | Non Security - Test & Verification | Passwords, integrations with databases and third-party systems, seeds and internal secrets, and API keys are managed securely and not included in the source code or stored within source code repositories |
| NFR19 | Non Security - Test & Verification | Automate regression test suite execution into pipeline to verify continued software stability |
| NFR20 | Security - Compliance | NIST SP 800-53 Rev. 5: Align with the latest NIST cybersecurity framework |
| NFR21 | Security - Compliance | FedRAMP Compliance: The system must meet all applicable FedRAMP security requirements and undergo the necessary security assessments and authorizations |
| NFR22 | Security- Compliance | NIST Cybersecurity Framework (CSF): Implement the CSF's five core functions: Identify, Protect, Detect, Respond, and Recover |
| NFR23 | Security - Access Control (AC) | User security shall conform to a role-based model |
| NFR24 | Security - Access Control (AC) | Follow OWASP Session Management guidance |
| NFR25 | Security - Enterprise Alignment | The platform shall have full audit trail of all actions, events, and modules |
| NFR26 | Security - Incident Response | Comply with DCA Incident Response policies and procedures as described in: |
DCA ISO Incident Response Plan DCA ISO 18-07 Incident Response Policy
| NFR27 | Security - Incident Response | Establish an operational incident-handling capability for organizational systems that includes preparation, detection, analysis, containment, recovery, and user response activities |
| NFR28 | Security - Incident Response | Track, document, and report incidents to designated officials and/or authorities both internal and external to the organization |
| NFR29 | Security - Incident Response | Comply with the California personal information breach notification requirements via compliance with the DCA ISO 06-01 Security Policy that requires: All actual or suspected breaches of information systems security shall be promptly reported to the DCA Information Security Office (ISO) |
| NFR30 | Security - Incident Response | The platform should undergo annual third-party security assessment (TPSA) to ensure security standards are met |
| NFR31 | Security - Planning | Develop System Security Plan (SSP) prior to the initial release and update annually |
| NFR32 | Security - Registration and Identification | Aibility to leverage SSO for internal and external users |
| NFR33 | Security - Risk Assessment | Comply with DCA Maintenance and Risk Assessment policies and procedures as described DCA ISO 06-01 Information Security Policy and DCA ISO Security Manual |
| NFR34 | Security - Risk Assessment | Remediate legitimate CRITICAL vulnerabilities within 3 business days or less |
| NFR35 | Security - Risk Assessment | Development and implementation of new software or systems shall include adequate documentation of the information system and its key security components. Information system documentation shall be readily available, adequately protected, and only distributed to authorized individuals |
| NFR36 | Security - Risk Assessment | Development and implementation of new software or systems and any upgrades shall have adequate testing performed and shall require approval before deployment |
| NFR37 | Security - System and Services Acquisition | Apply information system security engineering principles in the specification, design, development, implementation, and modification of the system |
| NFR38 | Security - System and Services Acquisition | Develop, document and implement a configuration management plan for the system. Configuration Management Plans shall address roles, responsibilities, and configuration management processes and procedures. |
This is the start of the file's text. The full file is on GovTribe.
File details come from the government source that posted it. Updated .