| S-1 | Low | The solution is mobile responsive. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| S-2 | Medium | The solution enables users to set recipient language of emails, forms and other characteristics related to the routing of packet for review and signature. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-3 | Medium | The solution enables the language to be set on a per recipient and per email basis. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-4 | Medium | The solution dashboard and user interfaces are sensitive to users and signers who are unable to distinguish certain colors. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-5 | Medium | The solution is mobile device agnostic. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-6 | Low | The solution includes a mobile application for Windows devices. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| S-7 | Low | The solution includes a mobile application for iOS (Apple) devices. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| S-8 | Low | The solution includes a mobile application for Android devices. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| S-9 | High | The solution supports password rules for frequency of changes, length and acceptable characters. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-10 | Medium | The solution supports password reset. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-11 | Medium | The solution supports "forgotten password" user options. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-12 | Medium | The solution supports and provides auto-detection of the following languages at a minimum: English, Spanish, French, German, Chinese, Korean, and Russian. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-13 | Low | The solution includes the ability to send text messages to users and signers to alert them of items for which their action is requested and includes a link to the review/signing activity. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| S-14 | Medium | The solution includes the ability to send print commands to the solution from other applications. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-15 | High | The solution enables partially completed forms/work to be sent to users (mobile or otherwise) provided all required items are completed. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-16 | High | The solution enables fillable forms to be accessed by a public user from a variety of locations including, but not limited to, agency website, agency file server, and email attachment sent directly to the user. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-17 | Medium | The solution is configured by local users/administrators and requires no programming experience to do so. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-18 | Medium | Alerts are displayed to a user via a pop-up window. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-19 | Medium | The solution supports the export of analytics related to digital signature, routing activities, status, form attributes and completion status. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-20 | High | The solution provides analytics via visualizations on a dashboard that includes drill-down into data by grant research, grant awards, financials, key metrics, and subrecipient activity. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-21 | High | The solution provides that ability to create, run, save and print standard reports on grant research, grant awards, financials, key metrics, and subrecipient activity. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-22 | High | The solution provides that ability to create, run, save and print custom reports on grant research, grant awards, financials, key metrics, and subrecipient activity. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-23 | High | The solution provides the ability to access dashboards that reveal insights on grant research, grant awards, financials, key metrics, and subrecipient activity. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-24 | High | The solution provides the ability to configure and customize individual dashboards that reveal insights on grant research, grant awards, financials, key metrics, and subrecipient activity. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-25 | High | The solution includes a robust set of reporting analytics on grant research, grant awards, financials, key metrics, and subrecipient activity. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-26 | Medium | The solution provides Multi-factor authentication for the solution authentication. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-27 | Medium | The solution supports MS SSO. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-28 | Medium | The solution and all functionality is supported by the following browsers at a minimum: MS Edge, Chrome, Safari, FireFox. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-29 | High | The solution is compliant with ISO 27001. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-30 | High | The solution is compliant with PCI DSS. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-31 | High | The solution is compliant with SOC2. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-32 | High | The solution allows users to organize and search various documents that are at different stages of approval. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-33 | High | The System/unit test plan includes end‐to‐end testing, resource requirements, test scripts, data, and scenarios, specific business cases, anomaly transactions, daily work functions, and administrative tasks. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-34 | Medium | The service provider creates test plans in collaboration with DoITS. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-35 | Medium | All components of the Software are reviewed and tested to ensure they protect the County's technical infrastructure and its related Data assets. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-36 | High | The service provider provides results of all security testing to the County's DoITS department for review and acceptance prior to "go-live". | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-37 | High | The service provider performs application stress testing and tuning in accordance with the County's Security and Standards policies published in the RPF. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-38 | Medium | The solution does not require a "heavy client" installation on the individual workstations or on-site servers. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-39 | High | The solution architecture includes data replication and geo-diversity across data centers in the US. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-40 | High | The solution has a proven track record over at least 99.99% availability over the past five years. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-41 | High | Setting up and launching a complete an interactive fillable form does not require any developer training or expertise. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-42 | High | Before the data is routed to the correct agency legacy system, data checking of common typographical errors is performed. Errors are flagged for action by authorized agency personnel. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-43 | High | Data passed from the Interactive Fillable Forms to Gwinnett County's legacy systems are retained in data repository for audit purposes. Data is retained as data fields and as an image of the PDF document. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-44 | High | The solution's Interactive Fillable Forms support active directory integration for login and any drop-down or fillable fields with no development needed. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-45 | High | Any information input into an interactive fillable form in combination with user attributes can be used for creating automated conditional content in the form fields or their selection options. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-46 | High | Any information input into an interactive fillable form in combination with user attributes is usable for creating automated conditional display and auto-population of signatures requires and displayed. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-47 | High | The solution enables users to create an unlimited number of customer fields that can be placed on fillable forms and saved for use in templates. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-48 | High | The solution enables users to require field input validation on all forms and signature lines on the interactive fillable forms including, but not limited to, the following validations: number format (customer defined and industry standard), dates (based on Roman calendar), times (based on 24 hour and 12-hour clocks), postal codes, countries, states (within the US), providences (within countries and Canada), and days of week. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-49 | High | The solution enables users to add instructions to any and all forms that can appear to whichever users for any and all fields that the user designates. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-50 | High | The solution enables users to complete interactive fillable forms if Internet connection is lost and it will send the form once connection is restored. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-51 | High | The solution includes the ability to automatically recognize and convert the PDF fields to signer fields when a PDF is uploaded. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-52 | Medium | The solution includes the ability to create, store and reuse tag fields that include, but are not limited to, the following standard tags: notes, user title, company name, text, numbers, currency, initials, signature, and suffix/prefix to names. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-53 | Medium | The solution enables users to place tags and fields of text so that when they are dropped into a document, they automatically appear at the right location. The tags move automatically to the correct place if the document is changed. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-54 | High | The solution enables users to designate fields within the fillable forms as "masked fields" such that entered characters appear to authorized parties, are masked from unauthorized parties, and are masked if printed. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-55 | High | The solution enables users to designate fields to be locked by the creator to ensure that the contents can be changed or not changed by specific users or under specific conditions. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-56 | Medium | The solution enables users to setup fields in the fillable forms to self calculate based on data captured on the form or other external data such as date and time. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-57 | High | The solution enables users to setup fields in the fillable forms as linked fields such that all changes are reflected across multiple documents and instances of that field. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-58 | Medium | The solution enables public users to add attachments that are linked to the submitted form | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-59 | Medium | The proposed solution allows integration to a third party address verification service. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-60 | High | The proposed solution includes standard interfaces to insert data into numerous standard databases and file systems including, but not limited to, mapping drives to a file share, Oracle, MS SQL, MySQL, AS400 and DB2, as well as, csv files in fixed length format that can be inserted into the database by DoITS personnel. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-61 | High | The solution includes cloud-based unlimited storage of any and all documents created in, routed by, or signed within the solution. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-62 | High | The solution supports the ability to export the resulting documents to FileNet without a customer integration or interface being developed. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-63 | High | The solution includes an API and is open source. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-64 | High | The solution includes a seamless integration with Microsoft 365 and Teams so documents can be sent via these channels for signature as part of the automated conditional workflow. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-65 | High | The solution enables .xls and .csv files to be imported and made into fillable forms without recreating the form from scratch in the solution. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-66 | High | The solution supports attachments for routing in .xls and .csv formats. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-67 | Medium | The solution supports interactive fillable forms being exported to .xls, csv, KML, HTML, PDF, OpenOffice, GoogleDocs, Text, and XML. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-68 | High | The solution works with SOAP webservices using standard integrations and interfaces without developing any additional API or other development effort. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-69 | High | The solution works with Data Exchange Server webservices using standard integrations and interfaces without developing any additional API or other development effort. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-70 | High | The solution includes standards integration with all the following software application and systems without requiring any development or API customization: SalesForce, SAP, GoogleDocs, WorkPlace, LaserFiche, Oracle, Ntex, SharePoint, Adobe and DocuSign. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-71 | High | The solution is cloud-based. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-72 | High | The solution is Commercial-Off-The-Shelf (COTS) and require no customization to meet the requirements as described in the proposal. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-73 | Medium | The service provider has professional services available that include configuration and development services. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-74 | High | The service provider participates in an initial kick‐off meeting to initiate all aspects of the project initiation, execution and closure. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-75 | High | The service provider submits a finalized Work Plan once a contract has been fully executed. The Work Plan includes, without limitation, a detailed description of the Schedule, tasks, Deliverables, critical events, task dependencies, and payment Schedule. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-76 | High | The service provider provides detailed bi‐weekly status reports on the progress of the Project, which will include expenses incurred year to date. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-77 | High | All user, technical, and System Documentation, as well as, project schedules, plans, status reports, and correspondence will be provided and maintained as project documentation in a format agreed to by DoITS and the service provider once the contract has been fully executed. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-78 | Medium | The service provider provides detailed Documentation on System operation and maintenance, including detailed Documentation on System backups and restore. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-79 | Medium | The service provider provides detailed User Documentation for authorized agency personnel users of the full solution(s). All portal functionality available for users are documented. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-80 | High | The service provider provides training plans that identify the System users and Systems administrators that need training, the topics to be discussed, and the time required to complete training | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-81 | High | The service provider submits a logical design diagram that documents the conceptual design of the System. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-82 | High | The solution meets all Federal Security Requirements for capturing, storing and transmitting personal identity information (PII). | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-83 | High | The solution meets all Federal Security Requirements for capturing, storing and transmitting processing credit card information (PCI). | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-84 | High | The solution meets all Federal Security Requirements for capturing, storing and transmitting processing Health information (HIPAA). | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-85 | High | The system has levels of security so that access to all system objects such as fields, forms, reports, etc. can be controlled. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-86 | High | The proposed system is able to authorize user role access to the Solution Portal based on agency, division and bureau. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-87 | High | The system has administrator roles that allow access to all features and functions. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-88 | Medium | The proposed solution allows authorized agency personnel to explicitly terminate a session. No remnants of the prior session will remain. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-89 | High | The proposed solution verifies the identity or authenticate all of the system client applications before allowing use of the system to prevent access to inappropriate or confidential data or services. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-90 | High | The proposed solution verifies the identity or authenticate all of the authorized agency personnel before allowing them to use its capabilities to prevent access to inappropriate or confidential data or services. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-91 | High | The proposed solution enforces unique user names. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-92 | High | The proposed solution encrypts passwords in transmission and at rest within the database. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-93 | Medium | The proposed solution supports password expirations after 90 days. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-94 | High | The proposed solution establishes ability to enforce session timeouts during periods of inactivity. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-95 | High | The proposed solution includes logging all attempted accesses that fail identification, authentication and authorization requirements. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-96 | High | Subsequent application enhancements or upgrades do not remove or degrade security requirements. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-97 | Medium | The proposed solution hides explicit errors and implement custom error handling when exceptions are encountered. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-98 | High | All data is data encrypted at rest and in transit. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-99 | High | The permissions to attach files or other items to a packet can be controlled by the Agency Administrator based on user, external vs. internal user status, and specific routings. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-100 | High | The solution supports all incoming items being routed to the County's virus protection and applying other security measures to the items being routed, imported into the solution and exported from the solution. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-101 | High | The solution is UETA compliant. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-102 | High | All servers and data on which the solution is offered and data stored is based in the continental United States. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-103 | High | All service provider personnel and contractors accessing the data are based in the continental United States. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-104 | High | The solution is compliant with the following security protocols without customization: FERPA, GLBA, and FDA 21 CFR Part 11. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-105 | High | The solution audit trail information is retainable based on a retention schedule and rules configured and administrated by agency authorized administrator(s). | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-106 | High | The solution audit trail information is exportable and printable in a user-friendly format by agency authorized administrator(s). | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-107 | High | The proposed solution logs all activities to prevent parties from deleting application | | | | | | | | | | | | | | | | |
| transactions thus being able to deny that they have taken place. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 | | | |
| S-108 | High | The proposed solution detects and records all attempted accesses that fail identification, authentication and authorization requirements. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-109 | High | The proposed solution is tested and hardened to prevent critical application security flaws. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-110 | High | Access is limited to only what is required for their roles. The system roles are limited at the screen level and field level. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-111 | High | The proposed solution does not store authentication credentials or sensitive data in its code. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-112 | Medium | The service provider creates change management documentation and procedures on the proposed solution for use by DoITS technical staff. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-113 | High | The service provider makes available at no additional cost a developer environment for development, testing and deploying applications related to the proposed solutions including, but not limited to, integrations and interfacing to existing and potential third-party systems. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-114 | High | The service provider offers live helpdesk support that includes phones answered by an English-speaking agent 7 days a week from 8am to 5pm eastern time at a minimum. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-115 | Medium | The service provider offers live helpdesk support that includes email 7 days a week from 8am to 5pm eastern time at a minimum. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-116 | Low | The service provider offers live helpdesk support that includes text 7 days a week from 8am to 5pm eastern time at a minimum. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| S-117 | High | The solution allows for authorized online support and screen sharing provided permissions of the user and fields have been authorized by the Gwinnett County account administrator. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-118 | High | The solution enables Gwinnett users with administrative right the ability to setup user roles and permissions that include, but are not limited to the following: creating grants/budgets/metrics, publishing and editing grant applications, creating and initiating workflows, and creating and customizing reports. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-119 | High | Access to the solution is restricted to authorized agency personnel based on roles and permissions. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-120 | High | The proposed solution includes a mechanism to identify which security group is allowed to view and process the forms data. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| S-121 | Medium | Please describe how the cost of the solution was determined for the licensing model of the application (named users, concurrent users, number of grant funds managed, role based usage, etc.). Please clearly denote fixed versus variable costing factors tied to the solution (cloud compute consumption, bandwidth utilization, storage consumption, network/connectivity speed, transactional response time tiers, etc.). | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-122 | Medium | The solution has the ability to define notifications tied to emails or other SMS formats for all major state/status changes tied to workflow, defined system gates, or customized system functions tied to defined business processes. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| S-123 | High | The solution utilizes a GUI interface for the majority of administrative functions to be built and implemented. | | Select from drop down list | Select from drop down list | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |