parking software evalution & proposal (284062) unf ... … · web viewto assist in the...

Page | 1

To assist in the submission of Tab 6 of the ITN submittal, the

following specifications have been provided in Word.

SPECIFICATIONS

Specifications Table Columns

ID: Each specification is labeled with an ID that is for internal use only.

Description: This is the actual specification as elicited from a stakeholder

Specification Priority: This describes the priority for each specification as follows: Must Have Prefer to Have Nice to Have

Vendor/Product Can Satisfy Specification: The vendor indicates whether the proposed

solution can meet the functionality as described. The acceptable responses are as follows:

Vendor/Product Can Satisfy Requirement

Definition

1 - Yes The vendor/product can meet the specification and will not have to make any changes to their solution to meet the specification.

2 - Yes with Modifications

The vendor can meet the specification but will need to perform additional software customizations as part of the implementation services. The vendor should provide details regarding this in the Notes column.

3 - No The vendor currently does not have the capability to meet the specification. If the vendor has the opportunity to meet this specification in the future (e.g. it is already in the product development roadmap), the vendor should provide the timeframe for being in compliance in the Notes column.

Notes: Provide additional information here to help clarify any information in the other

columns

Page | 2

AdministrationIn order to meet the Parking Administration Specifications, the solution will provide the following:

ID(For Internal Use Only)

Description Specification Priority(Must have, Prefer to Have, Nice to Have)

Vendor Can SatisfySpecification

Notes

Yes YesWith

Modifications(specify in

notes)

No

SR001 Ability to track login and actions taken by the customer (e.g. add a plate, attempt to appeal or pay citation of late, 2nd level appeal placement attempts).

Page | 3

AppealsIn order to meet the Parking Appeals Specifications, the solution will provide the following:




Notes

Yes YesWith


notes)

No

SR002 Violator can get instructions to on how to appeal the citation by reading the note at the bottom of the citation (i.e. on paper and online)

SR003 Guest customer (e.g. not part of campus community) can create a parking account to appeal citations or pay fees.

SR004 Violator can complete an appeal (e.g. online)SR005 Violator can upload documents for appeal

SR006 Violator placing the appeal can view photos and all other information related to the violation while completing appeal form

SR007 Violator can provide an appeal statement over 250 characters in length

SR008 Violator is offered alternative method to submit appeal (e.g. email)

SR009 Once an appeal has been placed, Parking Software should automatically notify the campus community appellate, by email of receipt of the appeal

SR010 Appeals Clerk can review and adjudicate 1st and 2nd level appeal

Page | 4




Notes

Yes YesWith


notes)

No

SR011 System will automatically notify (e.g. email) violator that appeal has been approved.

SR012 System will automatically notify (e.g. email) violator that appeal has been denied, with instructions on how to apply to appeal to the second level

SR013 System will automatically apply a late fee if violator does not take action within a certain time period (e.g. within 14 day) after the violator is instructed to perform the action

SR014 Parking Services can manually void citations

SR015 Parking Services can generate and manage appeals board scheduling

SR016 Appeals Clerk can review and adjudicate 1st and 2nd level appeals and have the ability to schedule/cancel if needed

SR017 System will automatically notify (e.g. email) violator that second level has been scheduled, with two dates and times options, location, and guidelines and procedures for second level appeal process

SR018 Appeals Clerk can review and modify docket

Page | 5




Notes

Yes YesWith


notes)

No

SR019 Appeals Clerk can deny appeal if the violator fails to appear at second level appeal hearing. Late fee is added automatically after 14 days.

SR020 Appeals Clerk can reduce, deny or zero out citation fee based on judgement of Judicial Branch Appeals Court. Appeals clerk needs the ability to change fee if an error is made.

SR021 Parking Services needs to control the time period within which customer can submit an appeal (e.g. within 24 hours of citation issue)

SR022 System will allow a customer to make a late appeal and submit related documents.

SR023 Provide the ability to assign specific roles and rights to specific users (e.g. A select level of Parking Services management needs the ability to overturn an appeal decision)

Page | 6

Cash Management

In order to meet the Parking Cash Management Specifications, the solution will do the following:




Notes

Yes Yes With Modifications(specify in notes)

No

SR024 Provide the ability to track the amount of cash in the kiosk.

SR025 Provide the ability to match the actual cash received with transactions.

SR026 Provide the ability to consolidate revenue streams to simplify departmental deposit process.

CollectionsIn order to meet the Collections Specifications, the solution will do the following:




Notes


No

SR027 Provide the ability to collect permit payment of former employees who are no longer on payroll deduction but are still using the permit.

Page | 7

Enforcement

In order to meet the Enforcement Specifications, the solution will provide the ability to:




Notes


No

SR028 Mark a citation as “on hold” to make citation not countable for scofflaw violations

SR029 Confirm that a vehicle parked in a space has the correct valid permit category for that space/lot (leveraging license plate recognition or LPR, matched against a permit category hierarchy table of the space inventory and permit type associated to the space the vehicle is parked in).

SR030 Identify vehicle owner by license plate for vehicles that are not permitted.

SR031 Confirm that the results of the scan of the plate (via LPR) match the actual physical plate.

SR032 Generate and issue citations at the vehicle with hand held units and be able to put a citation on window of car, keep electronic record or send citation virtually to a member of the campus community who has an active “N” number.

Page | 8




Notes

Yes YesWith

Modifications(specify in notes)

No

SR033 Notify campus community offender within 24 hours by e-mail.

SR034 Notify Parking Enforcement of special circumstances (such as scofflaw with 3 or more outstanding citations) and notes.

SR035 Identify the locations, using UNF language or site map, of vehicles that have a shared permit violation (i.e. two cars sharing same permit and parking at the same time)

SR036 Allow Parking Enforcement to use their own judgement to accept or override enforcement of the vehicle. Software needs to record the violation and the actions taken by Enforcement.

SR037 Software must be able to produce citations and receive notifications from both the equipment in the LPR vehicles and the handheld equipment.

SR038 Provide the ability to modify language on a citation at any time without character limitation.

SR039 Allow Parking Enforcement to take up to six (6) photos as evidence of issuance of citation.

Page | 9




Notes

Yes YesWith


No

SR040 After then Enforcement team has issued a boot citation, the parking software will be updated within two minutes to show the citation and associated pictures.

SR041 Provide the ability to whitelist plates (e.g. stop reading a plate or non-plate like a stop sign).

SR042 Maintain space inventory and geofencing of lots and valid permit types (verified against the permit category hierarchy table) and have the ability to make onsite changes.

SR043 Automatically notify (e.g. by e-mail) anyone in the campus community who has received a citation.

SR044 Place a hold on student’s ability to register for classes when late in making a payment.

SR045 Track and alert Parking Enforcement about “be-on-the-lookout” (BOLO) vehicles.

SR046 Issue promissory note for customer outstanding citations after vehicle is booted, including $50 booting fee.

SR047 Collect on promissory note through payroll deduction.

SR048 Send notes, in real-time, to all vehicle and handheld enforcement equipment (i. e. Parking Services can designate a parking area as “do not cite” for an event, and Parking Enforcement is notified upon entering that area).

Page | 10




Notes

Yes YesWith


No

SR049 Alert enforcement team when the team enters a lot that has a special note associate with that lot.

SR050 Provide the ability to decide if an e-mail communication is generated for a particular action (e.g. When a citation has been voided, Parking Services needs the ability to select if an e-mail notification is to be sent to the vehicle owner).

SR051 Write citations using equipment (Toughbook) inside LPR vehicle.

SR052 Prepopulate parking account information for citations if the vehicle is already in our database.

SR053 Communicate “Do Not Cite” area with warning message once location is selected, before a citation has begun to be generated.

SR054 Note the start time of when a vehicle is parked in a temporary space and be notified when that time has expired (i. e. virtual tire chalks).

SR055 Notify Enforcement and release the boot once an account has been paid in full.

SR056 Ability to view the scofflaw message through both the LPR vehicle and handheld enforcement equipment (e.g. not have to call the office).

SR057 Ability to associate the vehicle that has received a citation with a parking account.

Page | 11

EventsIn order to meet the Events Specifications, the solution will provide the ability to:




Notes

Yes YesWith


No

SR058 Track event information related to an event validation code used at a Kiosk (e.g. Parkeon) (e.g. event date/time, parking location, estimated attendance).

SR059 Manage an event calendar with all booked events (currently using EMS).

SR060 Communicate event information to the campus.

SR061 Host/department can request parking “buy-out” for an even (>250 spaces needed) and have different rates and requirements for weekdays and weekends.

SR062 For special events, provide the ability to enter information for multi-day events using recurring events feature.

SR063 Track event validation code usage (e.g must have an event management capability that can integrate with kiosk software (e.g. Parkeon).

Page | 12

IntegrationIn order to meet the Integration Specifications, the solution will provide the ability to:




Notes

Yes YesWith


No

SR064 Leverage institutional knowledge from Banner ERP, including student data and employee data, to establish parking accounts and to assign classifications and sub-classifications to customer (See “Classifications and Subclasses and Data Sources” Document).

SR065 Allow customer to use their UNF N# and password to securely log in.

SR066 Use Banner FOAPAL information (e.g. Banner index for billing).

SR067 Post financial transactions to the UNF general ledger.

SR068 Add all charges (e. g. permits and citations) to student accounts receivable (e.g. Banner).

SR069 Integrate financial transactions from the kiosk with the UNF accounting process.

Page | 13




Notes

Yes YesWith


No

SR070 Integrate non-sufficient funds (NSF) or other errors on payments, as well as other miscellaneous charges (e.g. property damage) with student holds in Banner Student.

SR071 Perform journal transfer to Banner (e.g. for billing UNF departments through Banner Finance).

SR072 Integrate with existing pay by plate solution (e.g. Parkeon Kiosks) (e.g. send purchased permits to parking software).

SR073 Integrate with existing License Plate Recognition solution (i.e. currently Genetec)

SR074 Ensure that upon purchase of a day pass or use of a validation code from the kiosk, the virtual permit is made valid within 2 minutes or less of the transaction.

SR075 Ability to identify owners of vehicles who’s license plate is not permitted (i.e. FL DMV and other states – David, Rover).

Page | 14

Inventory

In order to meet the Inventory Specifications, the solution will provide the ability to:


Description Specification Priority(Must have, etc)


Notes

Yes YesWith


No

SR076 Maintain an asset inventory.

SR077 Define geofences (e.g. take measures based on campus map to show where parking spaces of which permit type are physically located).

SR078 Monitor the available term/annual permit number inventory, including what is being used (sold) and what is being returned to the inventory, on a daily basis (e.g. there should be one screen in real-time/auto refresh that shows permits levels, blue/gray, housing).

SR079 Provide the permit inventory, by category at any given point in time.

Page | 15

Maintenance

In order to meet the Maintenance Specifications, the solution will provide the ability to:




Notes

Yes YesWith


No

SR080 Report maintenance issues back to the office via vehicle or mobile device (e.g. broken wheel stops, pot holes).

SR081 Document Asset Maintenance issue, including the ability to capture photo/document and enter work request for any damage to property, garages, lots, etc. on handheld units.

Page | 16

Payment and Billing

In order to meet the Payment and Billing Specifications, the solution will provide the ability to:




Notes

Yes YesWith


No

SR082 Define different payment methods for different customer classifications/subclasses and different permit types.

SR083 Allow customers to make online purchase of permits appropriate to their classification/subclass, using the purchasing method that is also appropriate to their classification/subclass. [See “Parking Permit Purchase Matrix document”].

SR084 Allow students to request permit payment be applied to their student AR.

SR085 Allow the use of the existing UNF payment gateway (CashNet) for credit card and e-check purchase.

SR086 Account for the permit price and for applicable tax as part of the total permit cost to the customer for payroll deduction.

SR087 Allow Parking Services to stop the payroll deduction process and revers charge for the permit (24 period payroll deduction).

SR088 Send auto-generated receipt to the customer via e-mail at the time of purchase.

Page | 17




Notes

Yes YesWith


No

SR089 Offer a mobile option to pay for single day parking (e.g. Parkeon’s Whoosh!)

SR090 Track payment history on a permit.

SR091 Allow customer to pay at a kiosk by credit card, cash or use validation code.

SR092 Allow Parking Services to reconcile credit card transactions and make adjustments.

SR093 Allow Parking Services to apply a late fee (after 14 days) to a delinquent account.

SR094 Process payments from multiple payment methods (e. g. online, mail, cash, credit card).

SR095 Add a fee for non-sufficient funds (NSF) or other errors on payments, as well as other miscellaneous charges (e.g. property damage) and make them visible in the payment portal.

SR096 Handle partial payments.

SR097 Allow an employee to purchase a permit using payroll deduction.

SR098 Provide necessary information to UNF Payroll to establish, modify or stop payroll deduction.

Page | 18




Notes

Yes YesWith


No

SR099 Allow employee to request to stop payroll deduction.

SR100 Bill departments for “vendors” green permits allocated to the departments.

SR101 Accept payment (e.g. electronic fund transfer) from third parties (e.g. Veteran’s association) paying on behalf of customer.

SR102 Exempt certain customers from sales tax.

SR103 Bill violator for fee associated with citation.

SR104 Allow violators to pay fees online, in office or by mail.

SR105 Automatically zero out fee associated to citation that is successfully appealed.

SR106 Manually remove fees associated to a citation.

SR107 Invoice host/department for any parking signage and labor provided.

SR108 Charge back UNF host/department for the event cost.

SR109 Invoice host/department for “buy-out” event.

SR110 Invoice hots/department based on tracked usage of validation code (e.g. via Banner journal transfer).

Page | 19

Permitting

In order to meet the Permitting Specifications, the solution will provide the ability to:ID(For Internal Use Only)



Notes

Yes YesWith


No

SR111 Reverse credit card payment if credit card payment is disputed.

SR112 Use a validation code online, at kiosk, or via phone app to acquire payment.

SR113 Define unlimited number of customer classifications (e.g. Emeritus faculty, housing, adjunct, retired employee, student).

SR114 Provide hierarchical classifications (e.g. Student classification supersedes employee classification).

SR115 Assign one or more customer classifications to a customer (e.g employee, student) or no classification (e.g. guest, DMV unknown, ELP student, Mayo student).

SR116 Define unlimited number of permit types.

SR117 Accommodate special circumstance parking (e.g. Reserved admin, Resident Assistant, FSCJ student in Flats, Student Wellness Member).

SR118 Create permits including the ability to display a physical permit.

SR119 Control the availability of permits to be sold (e.g. by date ranges).

ID(For Internal

Description Specification Priority(Must have,


Notes

Yes Yes No

Page | 20

Use Only)

Prefer to Have, Nice to Have)

With Modifications

(specify in notes)SR120 Control date ranges when permits are valid.

SR121 Create type of permit and reuse information for different time periods when the permits are valid.

SR122 Set a purchase limit for each subclass of customer for each type of permit.

SR123 Identify valid facilities for parking (e.g. Blue, Grey, Night Blue, Faculty/Staff, and Certified Vendor).

SR124 Allow Parking Services to issue permits to customers.

SR125 Separate a permit type (e.g. Blue) between different customer subclasses with different permit control group rules for each (e.g. cap sales to Students, allow unlimited sales to faculty and staff), with shared lots, different payment methods by different customer subclasses.

SR126 Manage 3rd party ongoing permits for vendors using personal vehicles, including offering different timeframes for permit validity (e.g. 1 year, 4 months, 1 month), assigned by license plate.

SR127 Allow employees to temporarily park in designated “Vendor” (Green) spaces.

SR128 Provide a “super-permit” option to override parking violations on vehicles which are not technically permitted to park in the location they are parked in but have business reasons for doing so.

ID(For Internal

Description Specification Priority(Must have,


Notes

Yes Yes No

Page | 21

Use Only)

Prefer to Have, Nice to Have)

With Modifications

(specify in notes)SR129 Sell special permits (e.g. board members) to

departments that will then assign permits to individuals to allow parking in most parking spaces (e.g. excluding reserved), renewable annually.

SR130 Allow Parking Services to void a permit if financial transaction fails and place the permit back in inventory.

SR131 Determine if payroll deduction is for new/additional permit (e.g. has motorcycle permit and wants a Grey permit) or a permit upgrade (e.g. has Grey and wants Blue).

SR132 Allow Parking Services to deactivate a permit at any time (e.g. when terminated employee stops payroll deduction for the permit).

SR133 Issue a validation code and set the expiration date when it is invalid (e.g. duration of an event).

SR134 Allow a customer to purchase online.

SR135 Allow host/department to request a validation code for a visitor. Codes can be valid for multiple days.

SR136 Allow host/department to provide a single or multi-day validation code to a visitor.

SR137 Allow host/department to request a validation code for an event, providing event details (e.g. event name, date/time, location, number of people expected, signage requirements, Banner index for billing).

Page | 22




Notes

Yes YesWith


No

SR138 Track usage of validation code.

SR139 Allow Parking Services to assign temporary passes for a specified period of time (e.g. assign Green Vendor pass for staff).

SR140 When renewing a permit, customer must be able to confirm plates that are still valid.

SR141 When renewing a permit, customer must be able to confirm correct mailing address.

SR142 Link physical plate to permit to determine if there is a valid permit assigned.

SR143 Allow Parking Services to permanently remove a vehicle from an account.

SR144 Allow the customer to rank their vehicles on their account so the desired five are active and the others are inactive.

SR145 Allow the customer to add a permit end date to vehicles on their account (e.g. rental cars).

Page | 23

ReportingIn order to meet the Reporting Specifications, the solution will provide the ability to:




Notes

Yes YesWith


No

SR146 Track unpaid parking citations, issue garnishment letters to violators and garnish wages through payroll deduction and zero the amount out of Parking Services accounts.

SR147 Report in real time which license tags have kiosk (e.g. Parkeon) validations and which have term/annual permit numbers.

SR148 Produce semi-annual “void” report, to show UNF leadership for accountability and transparency on voiding tickets, joining citation information with void reason information.

SR149 Produce pay station citation and boots semi-annual report, how many in six months including voids and warnings, revenue, and event impacts, for strategic planning.

Page | 24




Notes

Yes YesWith


No

SR150 Produce semi-annual report, including which ones reached level 1 and level 2 for both students and non-students, also broken out by month, to monitor consistency in process and enforcement strictness.

SR151 Report on all license plates associated with permit category and type of space (e.g. Blue, Grey, Staff).

SR152 Provide standard reports for citations, permit sales, asset management, customer, events and vehicle categories.

SR153 Allow Parking Services to create customized reports accessing all data (e.g. report generator tool).

SR154 Allow Parking Services to create a single report for citations and permit sales broken down by Parking Services station and payments. Provide the ability to modify/search by dates.

SR155 Allow Parking Services to create and modify a customizable dashboard with tabs for boot info, permits sold, totals, bad checks, repeat offenders, day passes, board permits, etc.

Page | 25

Non-Functional Specifications – ALL Hosting EnvironmentsThe following specifications apply to ALL types of solutions. Please complete this section.


Description Specification Priority(Must Have, Prefer to Have, Nice to Have)

Vendor Can Satisfy Specification NotesYes Yes with


No

NR001 Solution supports CAS and/or Shibboleth-based authentication

Prefer to Have

NR004 Solution supports automated account provisioning

Prefer to Have

NR011 Vendor provides separate production and development/test environments

Prefer to Have

NR012 Vendor provides separate pre-production environment for quality assurance

Nice to Have

NR013 Solution provides ability to transfer configuration/development and automation of items between environments (i.e. create in dev, move to pre, QA, move to prod where each move doesn't involve manual recreation)

Prefer to Have

NR019 Vendor provides robust online support model and resources (e.g. system user manual, help guides, phone support, remote assistance, on-site repairs assistance where applicable, online support portal with access to documentation and submitting support requests) and healthy user community

Must Have

NR020 Solution supports a web-based client with no plug-in required

Must Have

NR021 IE 11+, Chrome, Firefox, and Safari all supported on latest releases

Must Have

Page | 26


Description Specification Priority(Must Have, Prefer to Have, Nice to



No

NR026 Solution supports Bulk data import capability

Prefer to Have

NR027 Solution provides and supports full CRUD operation REST-based API

Prefer to Have

NR028 Solution provides ability to programmatically work with all primary data structures and user properties

Prefer to Have

NR030 Vendor provides a site/enterprise or concurrent user licensing model

Nice to Have

NR031 Vendor does not require named user/seat-based licensing

Nice to Have

NR032 Vendor has successful track record with providing solutions to higher education clients and can demonstrate this through years in business serving higher education and number of higher ed customers

Prefer to Have

NR033 Vendor will provide references of other higher education clients

Prefer to Have

NR034 Vendor will provide technical and functional documentation during the evaluation of their solution

Prefer to Have

NR035 Solution supports a minimum of 15 character passwords (if Active Directory or other UNF-managed single sign-on integration is not available)

Must Have

NR036 Solution supports account lockout when login credentials entered are incorrect (if Active Directory or other UNF-managed single sign-on integration is not available)

Must Have

NR037 Locally stored passwords are hashed in the Must Have

Page | 27





No

systemNR041 Data at rest is encrypted at the database

levelNice to Have

NR042 Data at rest is encrypted at the field level Nice to HaveNR043 Data in motion is encrypted Nice to HaveNR044 Vendor has ensured that the application is

not vulnerable to OWASP top 10Must Have

NR102 Vendor will provide specific in-bound and out-bound network ports required to be open for the application to function

Must Have

NR114 Where applicable, the solution must be FERPA compliant

Must Have

NR115 Where applicable, the solution must be HIPAA compliant

Must Have

NR116 Where applicable, the solution must be PCI compliant

Must Have

NR117 Solution provides adequate security for the storage and transmission of any Personally Identifiable Information (PII) or other sensitive information (e.g. passwords, credit card information)

Must Have

NR121 Mac client-based is provided and supported Prefer to HaveNR122 If Mac client software available, can be

packaged and deployed remotely (e.g. Casper)

Must Have

NR123 Solution end-users are expected to contact UNF Information Technology Services (ITS) as the first point of contact for all support needs

Must Have

Page | 28





No

NR124 Approval process for granting enduser access to solution

Must Have

NR125 Required training completed by enduser before granting enduser access to solution

Must Have

NR126 Solution is compliant with the relevant requirements enumerated in the Voluntary Product Accessibility Template (VPAT) (Version 2.0 of the document is linked here: https://www.unf.edu/uploadedFiles/anf/purchasing/WCAG%202.0%20AA%20VPAT%20Attachment%20A.pdf)

Must Have

Page | 29

Non-Functional Specifications for On Premise SolutionThe following specifications only apply if an On Premise Solution will be provided. If not providing an On Premise solution, skip this section.

ID (For Internal Use Only)

Description Specification Priority(Must have, Prefer to have, Nice to have


Notes

Yes Yes with Modifications

(Specify in notes)

No

NR002 Solution supports Microsoft Active Directory integration for user authentication

Must Have

NR003 Solution application rights determined by Microsoft Active Directory groups

Prefer to Have

NR005 Solution supports current Microsoft-based server platform (Windows 2012+, SQL 2014+, IIS 8.5+)

Must Have

NR007 Solution leverages an ASPX.NET code base Nice to HaveNR008 Solution provides X64 support for scalability Prefer to HaveNR009 External, application-specific load balancing Prefer to HaveNR010 Allow adding of additional/redundant nodes

to achieve high availability, redundancy, load balancing

Prefer to Have

NR015 Vendor will allow UNF to perform system upgrades/updates

Prefer to Have

NR039 Installation of new security patches is performed within two weeks of release

Must Have

NR046 Solution supports virtualization technologies (e.g. VMWare)

Must Have

NR049 Vendor can provide base server requirements (e.g. CPU, RAM, storage) based on expected utilization in first through third year

Must Have

NR054 Solution supports clustering Must Have

Page | 30


Description Specification Priority(Must have, Prefer to have, Nice to have


Notes


(Specify in notes)

No

NR057 System supports installation of anti-virus software (e.g. Symantec)

Must Have

NR094 Solution supports SAN storage Prefer to HaveNR097 Solution utilizes unicast network protocols

only for communicating with other devicesMust Have

NR100 Where wireless communication is utilized, enterprise-level security protocols are employed

Must Have

NR106 Solution will leverage existing, UNF provided network services (e.g. DHCP, DNS, AD, NTP)

Must Have

NR109 Vendor accepts that remote access to the solution by the Vendor will be granted by way of screening sharing with UNF personnel observing Vendor actions in real time

Must Have

NR112 Vendor will provide information on the services necessary for the operation of the system

Must Have

NR119 Solution will support remote management (e.g. RDP)

Must Have

Page | 31

Non-Functional Specifications for SaaS (Cloud-Based) with On-Premises ServerThe following specifications only apply if providing a SaaS Cloud-Based environment with an On-Premise Server. If not providing this type of solution, skip this section.




Notes


(Specify in notes)

No


Prefer to Have

NR018 Vendor agrees to allow to UNF determine release cycle of upgrades/updates

Prefer to Have


Must Have


Must Have


Must Have

NR052 Vendor provides unlimited data storage space Prefer to HaveNR053 Solution supports clustering Must HaveNR056 System supports installation of anti-virus

software (e.g. Symantec)Must Have

NR060 Vendor must provide a SOC 2 or SOC 3 report demonstrating compliance of the hosting environment

Must Have

NR062 Separate database is provisioned and dedicated for UNF apart from the other clients of the Vendor

Must Have

NR064 Encryption key for the database is different for UNF than other encrypted databases for other

Must Have

Page | 32




Notes


(Specify in notes)

No

clientsNR066 UNF data will be backed up on a nightly basis Must Have

NR068 UNF data backups will be encrypted Prefer to Have

NR070 Vendor can provide information and location(s) of hosting centers, both main and HA/DR

Must Have

NR072 Employees of Vendor's hosting provider have access to UNF data only for the purposes of performing their job duties, and that who has access to UNF data is logged and the logs are maintained

Must Have

NR074 UNF data backups will be shipped off-site from the hosting center to a separate, secure facility, either by physical media or disk-to-disk transfer

Must Have

NR076 Employees of Vendor's hosting provider cannot recover passwords stored locally in the system

Must Have

NR078 When there are outages from hardware failures, configuration errors, or compromises, the Vendor will provide to UNF a root cause analysis in each case for those events

Must Have

NR080 Solution supports UNF vanity URLs (i.e. support for accessing the application via the URL https://application.unf.edu/ versus https://www.hostingcompany.com/unf/)

Prefer to Have

NR082 Vendor will provide all or portions of UNF's Must Have

Page | 33




Notes


(Specify in notes)

No

data to UNF upon requestNR084 Vendor will permanently purge UNF's data,

including backups, upon request by UNFMust Have

NR086 When requested by UNF to purge UNF's data, Vendor will provide to UNF evidence that UNF's data, including backups, have been permanently purged

Must Have

NR088 Vendor's hosting provider has policies to perform secure hard drive wipes/destruction before sending devices out for repair or replacing them, and the Vendor will provide those policies to UNF

Must Have

NR090 Vendor will provide explanation to UNF of how the company protects their systems from attacks from the Internet, including any security devices, applications and procedures employed

Must Have

NR092 Employees of Vendor's hosting provider have login access to systems provisioned for UNF only for the purposes of performing their job duties, and that who has access to UNF data is logged and the logs are maintained

Must Have

NR093 Solution supports SAN storage Prefer to HaveNR096 Solution utilizes unicast network protocols

only for communicating with other devicesPrefer to Have


Prefer to Have

NR104 Vendor will provide specific IP addresses or IP Must Have

Page | 34




Notes


(Specify in notes)

No

range for SaaS systemsNR105 Solution will leverage existing, UNF provided

network services (e.g. DHCP, DNS, AD, NTP)Must Have


Must Have


Must Have


Must Have

Page | 35

Non-Functional Specifications for SaaS (Cloud-Based) SolutionsThe following specifications only apply if providing a completely Cloud-Based solution. If you are not providing a completely Cloud-Based solution, skip this section.




Notes

Yes Yes with modifications

(Specify in notes)

No

NR017 Vendor agrees to allow UNF to determine release cycle of upgrades/updates

Prefer to Have

NR029 Solution supports public key-based SFTP for secure transfer of files

Nice to Have

NR051 Vendor provides unlimited data storage space Prefer to Have

NR059 Vendor must provide a SOC 2 or SOC 3 report demonstrating compliance of the hosting environment

Must Have

NR061 Separate database is provisioned and dedicated for UNF apart from the other clients of the Vendor

Prefer to Have

NR063 Encryption key for the database is different for UNF than other encrypted databases for other clients

Must Have

NR065 UNF data will be backed up on a nightly basis Must Have

NR067 UNF data backups will be encrypted Prefer to Have

NR069 Vendor can provide information and location(s) of hosting centers, both main and HA/DR

Must Have

NR071 Employees of Vendor's hosting provider have Must Have

Page | 36




Notes


(Specify in notes)

No

access to UNF data only for the purposes of performing their job duties, and that who has access to UNF data is logged and the logs are maintained

NR073 UNF data backups will be shipped off-site from the hosting center to a separate, secure facility, either by physical media or disk-to-disk transfer

Must Have

NR075 Employees of Vendor's hosting provider cannot recover passwords stored locally in the system

Must Have

NR077 When there are outages from hardware failures, configuration errors, or compromises, the Vendor will provide to UNF a root cause analysis in each case for those events

Must Have

NR079 Solution supports UNF vanity URLs (i.e. support for accessing the application via the URL https://application.unf.edu/ versus https://www.hostingcompany.com/unf/)

Prefer to Have

NR081 Vendor will provide all or portions of UNF's data to UNF upon request

Must Have

NR083 Vendor will permanently purge UNF's data, including backups, upon request by UNF

Must Have

NR085 When requested by UNF to purge UNF's data, Vendor will provide to UNF evidence that UNF's data, including backups, have been permanently purged

Must Have

NR087 Vendor's hosting provider has policies to Must Have

Page | 37




Notes


(Specify in notes)

No

perform secure hard drive wipes/destruction before sending devices out for repair or replacing them, and the Vendor will provide those policies to UNF

NR089 Vendor will provide explanation to UNF of how the company protects their systems from attacks from the Internet, including any security devices, applications and procedures employed

Must Have

NR091 Employees of Vendor's hosting provider have login access to systems provisioned for UNF only for the purposes of performing their job duties, and that who has access to UNF data is logged and the logs are maintained

Must Have

NR103 Vendor will provide specific IP addresses or IP range for SaaS systems

Prefer to Have

Page | 38

Non-Functional Specifications for Client Server SolutionsThe following specifications only apply if providing a Client-Server Solution. If you are not providing a Client-Server Solution, skip this section.




Notes


(Specify in notes)

No

NR006 Solution supports current Microsoft-based server platform (Windows 2012+, SQL 2014+, IIS 8.5+)

Must Have


Prefer to Have

NR022 Solution utilizes Windows client-based software

Must Have

NR023 Windows client software can be packaged and deployed remotely (e.g. Altiris)

Must Have

NR024 Users are not required to have elevated rights (e.g. Admin rights) to check for updates / pre-requisites

Must Have

NR025 Solution provides ability to manage and control client deployments

Must Have


Must Have


Must Have


Must Have

NR055 Solution supports clustering Prefer to Have

Page | 39




Notes


(Specify in notes)

No

NR058 System supports installation of anti-virus software (e.g. Symantec)

Must to Have

NR095 Solution supports SAN storage Prefer to Have

NR098 Solution utilizes unicast network protocols only for communicating with other devices

Prefer to Have


Must Have

NR107 Solution will leverage existing, UNF provided network services (e.g. DHCP, DNS, AD, NTP)

Must Have


Must Have


Must Have


Must Have

Page | 40

parking software evalution & proposal (284062) unf ... … · web viewto assist in the...

Documents