Specifications include, but are not limited to: Enterprise level solution and scalability • LMS selected must be able to accommodate a minimum of 250,000 active accounts and 20,000 active courses. • Must be able to accommodate 10,000 users enrolled in a single course. • Must include an Application Programming Interface (API) that allows automated class creation, enrollments, and withdrawals. • LMS selected must auto-scale to adjust its resources to balance different loads and demands. Security • Must meet or exceed industry data security standards, as assessed by SOC Type 2 assessments. (In response, affirm understanding compliance with the data security requirements and provide the following: o A Higher Education Cloud Vendor Assessment Tool (HECVAT) spreadsheet completed by the vendor. 2.5.1 o A completed SOC 2 Type 2 report. This is an internal controls report capturing how a company safeguards customer data and how well those controls are operating. These reports are issued by independent third-party auditors covering the principles of Security, Availability, Confidentiality, and Privacy o Address the ability to provide the same levels and types of security through multiple data access methods (e.g., Web, mobile devices, or network). Both the HECVAT and SOC 2 Type 2 report must be completed by the appropriate experts in this area. • Must provide campus users access to the solution through seamless integrations with campus specific authentication applications such as: Azure AD & LDAPS • Secure connections (SSL) required for web and mobile device app access to the LMS. • If selected the Offeror will have access to KCTCS Education records as defined under the Family Educational Rights and Privacy Act (FERPA). The Offeror acknowledges that for the purposes of the subsequent agreement, it will be designated as a “school official” with “legitimate educational interests” in KCTCS Education records, as those terms have been defined under FERPA and its implementing regulations, and the selected offeror agrees to abide by the limitations and requirements imposed on school officials. The Selected Offeror will use the Education records only for the purpose of fulfilling its duties under the resultant agreement for KCTCS and its End User’s benefit and will not share such data with or disclose it to any third party except as provided for in the agreement, required by law, or authorized in writing by KCTCS. (In response, affirm understanding and compliance with FERPA requirements.)
