Specifications include, but are not limited to: The purpose of this RFP is to receive proposals from qualified vendors who have the ability to both create a modern and simplistic website for the City of Lynchburg “City” while managing the City’s content, as well as, partnering with the same vendor for a re-design of the City’s current website. 1. General IT Requirements: a. Ongoing CMS updates that will be applied in the test environment prior to production. b. 99.9% uptime availability. c. At least one disaster recovery site. d. Separate testing and production environments. e. Data must always reside on US-based data centers. f. Department level content access. 2. IT Security Requirements: a. Statement of Cybersecurity Standards Compliance (Name the standard and compliance/implementation level if applicable) b. Annual vendor security audits c. Rapid testing and deployment of critical vulnerability patches d. Daily backups (or higher frequency) e. Statement of Recovery Time Objective f. Statement of Recovery Point Objective g. Ability to recover from 30 days prior to current h. Statement of Recovery testing practices i. 2FA-capable authentication j. 15 character password minimum k. Advanced security protection (Application firewall, robust endpoint detection, etc.) l. Properly managed, trusted SSL certs (All sites SSL secured) 3. Key Components, links, embedded iframes: a. NeoGov Jobs – Job advertisements and applications. b. ArcGIS – Multiple mapping applications and our open data portal. c. Parcel Viewer d. RecPro e. Lucity – Citizen Portal f. eTrakit & Online Submissions (permits and zoning) g. Azure Active Directory – Microsoft accounts and single sign-on for staff. h. ZenDesk – online chat i. Others may be included (YouTube, etc.) since content managers have the ability to add these
