Software_Assessment_Application_Questions.docx
DOCX document 30 KB Posted
- Attached to
- GED AND ABE SOFTWARE FY26
- Solicitation number
- 09172025
- Issued by
- Escambia County, Florida
About this file
The document is a comprehensive Software Assessment Application Questionnaire from Escambia County Corrections seeking educational software solutions for High School Equivalency (HSE) preparation and Adult Basic Education (ABE) programs within a correctional setting. The request for quotes (RFQ) is for Fiscal Year 2026 and aims to support adult learners in achieving academic milestones and career readiness through software aligned with GED and TABE assessments.
The questionnaire provides an extensive technical evaluation framework covering critical software aspects including support model, technology infrastructure, hosting capabilities, security architecture, data management, and access controls. Key areas of inquiry include system architecture, user capacity, development cycles, security compliance (such as SSAE 18 Type II, CJIS), encryption standards, data protection mechanisms, user authentication methods, and integration capabilities with existing systems. The document demonstrates a thorough approach to assessing software solutions for an institutional educational environment, with specific emphasis on security, performance, and operational reliability within a correctional context.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| GED_AND_ABE_SOFTWARE_FY26.pdf | ||
| Price_Quote_Sheet_-_GED_and_ABE_Software.docx | DOCX document |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Support
1. Please describe your support model. Including office location(s) and hours of operation.
2. How do clients submit incidents and how can they be tracked and escalated?
3. What is your response time for incidents?
4. Do you offer in-application online help? Please describe.
5. Please provide a description of your organization’s disaster recovery plan.
Technology
1. Please describe the basic system architecture of your application. Provide a diagram if available.
2. What are the minimum system requirements to run your application?
3. Describe your software development cycle including frequency of releases, patches/hotfixes, and upgrade process. What are the client’s responsibilities with regards to upgrades?
4. What documentation is provided with each new release of the application?
5. How many concurrent users can your application support? Please provide performance benchmarks if available.
6. Please describe how your application is able to interface with our existing third-party applications. (If Applicable)
7. Is the public-facing web site, documents, and mobile applications ADA compliant? How do you verify it is ADA compliant? (If Applicable)
Hosting
1. Please describe your hosting model (i.e. SaaS, on premise, vendor hosted).
2. Who owns the Data?
3. Where is your data center located? Please describe the security features of your data center.
4. Is your hosting center SSAE 18 Type II Compliant?
5. Do you provide clients with additional environments in addition to the production environment (i.e. testing, training, configuration, etc.)? Is there an additional cost?
Security
1. Please describe your security architecture.
2. Please describe the security features of your hosting center(s).
3. Does your company undergo SSAE 18 Type II audits? Any third-party audits to validate security (OWASP 10, etc.)? Does your organization comply with any additional governmental regulations? (SOX, HIPPA, PCI DSS, etc.)
1. What is your organization’s polices and procedures for notifying clients in the event of a security-related incident? What insurance does your organization have in the event of a data breach?
2. Is your organization CJIS compliant? **Corrections Only**
Data Management
1. How and where does your organization encrypt data at rest and data in motion? Does your company use Advanced Encryption Standard (AES) with 256-bit keys encryption?
2. What safeguards do you have in place for social security numbers and other Personally Identifiable Information (PII)?
3. How is data backed up and stored? Are backups ever moved offsite? How are backups encrypted and secured?
4. What happens to our data if your organization is purchased by another organization?
5. How will we be able to retrieve our data if the contract is terminated?
Access Controls
1. Does your application support integration with any Enterprise Identity Management solution and allow for Single Sign On (SSO)?
2. What criteria does your application enforce for secure user credential creation and does your application allow for multi-factor authentication?
3. Does your application support role-based security and limit access based on the principle of least privilege?
File details come from the government source that posted it. Updated .