Specifications include, but are not limited to: The State of Delaware is seeking a Software as a Service (SaaS) for Classification, Recruitment, Onboarding, and Offboarding solution for the Department of Human Resources (DHR) and agency partners. ; Cloud Services (CS) Terms PROVIDER must satisfy Clause CS1-A OR Clauses CS1-B and CS1-C, AND Clause CS4 for all engagements involving non-public data. Clause CS2 is mandatory for all engagements involving non-public data. Clause CS3 is only mandatory for SaaS or PaaS engagements involving non-public data. CS1-A Security Standard Compliance Certifications: The PROVIDER shall meet, and provide proof of, one or more of the following Security Certifications. CSA STAR – Cloud Security Alliance – Security, Trust & Assurance Registry (Level Two or higher) FedRAMP - Federal Risk and Authorization Management Program ; Data Encryption: The PROVIDER shall encrypt all non-public data in transit, regardless of transit mechanism. For engagements where the PROVIDER stores Personally Identifiable Information (PII) or other sensitive, confidential information, it shall encrypt this non-public data at rest. The PROVIDER’s encryption shall meet validated cryptography standards as specified by the National Institute of
