Extracted text (via pymupdf_layout)
299072 characters
CONTRACT PURSUANT TO RFP SERIAL 14111-RFP This Contract is entered into this eighteenth (18th) day of November, 2015 (the “Effective Date”) by and between Maricopa County (“County”), a political subdivision of the State of Arizona, and Cornerstone OnDemand, Inc., a Delaware corporation, (“Contractor”) for the purchase of Talent Management Hosted Services. 1.0 CONTRACT TERM: 1.1 This Contract is for a term commencing on the Effective Date and ending on the fifth (5th) anniversary of June 30, 2016 “Initial Term”). 1.2 The County may, at its option and with the agreement of the Contractor, renew the term of this Contract for additional terms up to a maximum of Five (5) years, (or at the County’s sole discretion, following the Initial Term, extend the contract on a month-to- month basis for a maximum of six (6) months after expiration). The County shall notify the Contractor in writing of its intent to extend the Contract term at least sixty (60) calendar days prior to the expiration of the original contract term, or any additional term thereafter. 2.0 FEE ADJUSTMENTS: Any request for a fee adjustment must be submitted sixty (60) days prior to the current Contract expiration date. Requests for adjustment in cost of labor and/or materials must be supported by appropriate documentation. If County agrees to the adjusted fee, County shall issue written approval of the change. The reasonableness of the request will be determined by comparing the request with the (Consumer Price Index) or by performing a market survey, in conjunction with the increased value of the service. 3.0 PAYMENTS: 3.1 As consideration for performance of the duties described herein, County shall pay Contractor the sum(s) stated in Exhibit A (Pricing): 3.1.1 The Annual fees in Exhibit A. 3.2 Payment shall be made upon the County’s receipt of a properly completed invoice as set forth in Section 3.5 below. In addition, Implementation Services, operational costs, and other costs will be based on payments in Exhibit A (Pricing). 3.3 Implementation Service fees specified in Exhibit A (Pricing) will be invoiced based on the deliverables included in Exhibit B (Scope of Work), and Exhibit A (Pricing). Invoices will be submitted in accordance with Exhibit A (Pricing). County will withhold ten percent (10%) of the Implementation Services fees; such withheld amount will be paid within thirty (30) days following the Implementation completion date. 3.4 Payment shall be made upon the County’s receipt of a properly completed invoice. Services are subject to suspension for failure to timely remit payment therefor. SERIAL 14111-RFP 3.5 INVOICES: 3.5.1 The Contractor shall submit in a manner acceptable to the County one (1) legible copy of their detailed invoice before payment(s) can be made. At a minimum, the invoice must provide the following information: Company name, address and contact County bill-to name and contact information Contract serial number County purchase order number Invoice number and date Payment terms Date of services Quantity Contract Item number(s) Description of service provided Pricing per unit of service Extended price Total Amount Due 3.5.2 Problems regarding billing or invoicing shall be directed to the County as listed on the Purchase Order. 3.5.3 Payment shall be made to the Contractor by Accounts Payable through the Maricopa County Vendor Express Payment Program. This is an Electronic Funds Transfer (EFT) process. After Contract Award the Contractor shall complete the Vendor Registration Form located on the County Department of Finance Vendor Registration Web Site (http://www.maricopa.gov/Finance/Vendors.aspx). 3.5.4 EFT payments to the routing and account numbers designated by the Contractor will include the details on the specific invoices that the payment covers. The Contractor is required to discuss remittance delivery capabilities with their designated financial institution for access to those details. 3.6 PAYMENT RETENTION: (for Service fees during implementation) 3.6.1 Ten percent (10%) of monies paid for Project Management and Project Labor earned by CONTRACTOR related to work under this agreement shall be retained by COUNTY until Final Completion of the implementation services herein described in accordance with Exhibit B-1. COUNTY may elect to release specific retention payments based on mutually agreed milestones, but in no case shall retention be released prior to Final Completion. All other payment terms and conditions shall not be affected by the retention. In the event of termination or cancellation of this contract by County through no fault of CONTRACTOR, CONTRACTOR shall be entitled to the refund of any funds in the retention account. 3.6.2 After fifty percent (50%) of the work has been completed, the Maricopa County may reduce the retainage to five percent (5%) of all monies previously earned and all monies earned thereafter. Any reduction in retainage shall be in the discretion of the Maricopa County. Any interest earned on retainage shall accrue solely to the benefit of COUNTY. 3.7 APPLICABLE TAXES: 3.7.1 Payment of Taxes: The Contractor shall pay all applicable taxes. With respect to any installation labor on items that are not attached to real property performed by Contractor under the terms of this Contract, the installation labor cost and the gross receipts for materials provided shall be listed separately on the Contractor’s invoices. SERIAL 14111-RFP 3.7.2 State and Local Transaction Privilege Taxes: Maricopa County is subject to all applicable state and local transaction privilege taxes. To the extent any state and local transaction privilege taxes apply to sales made under the terms of this contract it is the responsibility of the seller to collect and remit all applicable taxes to the proper taxing jurisdiction of authority. 3.7.3 Tax Indemnification: Contractor and all subcontractors shall pay all Federal, state, and local taxes applicable to its operation and any persons employed by the Contractor. Contractor shall, and require all subcontractors to hold Maricopa County harmless from any responsibility for taxes, damages and interest, if applicable, contributions required under Federal, and/or state and local laws and regulations and any other costs including transaction privilege taxes, unemployment compensation insurance, Social Security and Worker’s Compensation. 3.8 TAX: (SERVICES) Contractor’s proposal prices do not include any applicable taxes. Any and all applicable taxes shall be paid by the County directly to the State of Arizona. 4.0 AVAILABILITY OF FUNDS: 4.1 The provisions of this Contract relating to payment for services shall become effective when funds assigned for the purpose of compensating the Contractor as herein provided are actually available to County for disbursement. The County shall be the sole judge and authority in determining the availability of funds under this Contract. County shall keep the Contractor fully informed as to the availability of funds. 4.2 If any action is taken by any state agency, Federal department or any other agency or instrumentality to suspend, decrease, or terminate its fiscal obligations under, or in connection with, this Contract, County may amend, suspend, decrease, or terminate its obligations under, or in connection with, this Contract. In the event of termination, County shall be liable for payment only for services rendered prior to the effective date of the termination, provided that such services are performed in accordance with the provisions of this Contract. County shall give written notice of the effective date of any suspension, amendment, or termination under this Section, at least ten (10) days in advance. 5.0 DUTIES: 5.1 The Contractor shall perform all duties stated in Exhibit “B”, B-1 and B-2 or as otherwise agreed in writing by the Procurement Officer and Contractor. 5.2 During the Contract term, County may provide Contractor’s personnel with adequate workspace for consultants and such other related facilities as may be required by Contractor to carry out its contractual obligations. 6.0 TERMS and CONDITIONS: 6.1 INDEMNIFICATION: 6.1.1 To the fullest extent permitted by law, Contractor shall defend, indemnify, and hold harmless County, its agents, representatives, officers, directors, officials, and employees from and against all third party claims, damages, losses and expenses, including, but not limited to, attorney fees, court costs, expert witness fees, and the cost of appellate proceedings, relating to, arising out of, or alleged to have resulted from the negligent acts, errors, omissions, mistakes or malfeasance relating to the Contractor’s performance of this Contract. Contractor’s duty to defend, indemnify and hold harmless County, its agents, representatives, officers, directors, officials, and employees shall arise in connection with any claim, damage, loss or expense that is caused by any negligent acts, errors, omissions or mistakes in the performance of this Contract by the Contractor, as SERIAL 14111-RFP well as any person or entity for whose acts, errors, omissions, mistakes or malfeasance Contractor may be legally liable. 6.1.2 The amount and type of insurance coverage requirements set forth herein will in no way be construed as limiting the scope of the indemnity in this paragraph. 6.1.3 The scope of this indemnification does not extend to any claim, damage, loss, or expense to the extent resulting from the sole negligence of County. 6.1.4 Indemnification Procedures. To obtain indemnification, County shall: (i) give written notice of any claim promptly to Contractor; (ii) give Contractor, at Contractor’s option, sole control of the defense and settlement of such claim, provided that Contractor may not, without the prior consent of County (not to be unreasonably withheld), settle any claim unless it unconditionally releases County of all liability; (iii) provide to Contractor all available information and assistance; and (iv) not take any action that might compromise or settle such claim. 6.2 INSURANCE: 6.2.1 Contractor, at Contractor’s own expense, shall purchase and maintain the herein stipulated minimum insurance from a company or companies duly licensed by the State of Arizona and possessing a current A.M. Best, Inc. rating of B++. In lieu of State of Arizona licensing, the stipulated insurance may be purchased from a company or companies, which are authorized to do business in the State of Arizona. 6.2.2 All insurance required herein shall be maintained in full force and effect until all work or service required to be performed under the terms of the Contract is satisfactorily completed and formally accepted. 6.2.3 Contractor’s insurance shall be primary insurance as respects County, and any insurance or self-insurance maintained by County shall not contribute to it. 6.2.4 Any failure to comply with the claim reporting provisions of the insurance policies or any breach of an insurance policy warranty shall not affect the County’s right to coverage afforded under the insurance policies. 6.2.5 The insurance policies may provide coverage that contains deductibles or self-insured retentions. Such deductible and/or self-insured retentions shall not be applicable with respect to the coverage provided to County under such policies. Contractor shall be solely responsible for the deductible and/or self-insured retention and County, at its option, may require Contractor to secure payment of such deductibles or self-insured retentions by a surety bond or an irrevocable and unconditional letter of credit. 6.2.6 County reserves the right to request and to receive, within 10 working days, certified copies of any or all of the herein required insurance certificates. County shall not be obligated to review policies and/or endorsements or to advise Contractor of any deficiencies in such policies and endorsements, and such receipt shall not relieve Contractor from, or be deemed a waiver of County’s right to insist on strict fulfillment of Contractor’s obligations under this Contract. 6.2.7 The insurance policies required by this Contract, except Workers’ Compensation, and Errors and Omissions, shall name County, its agents, representatives, officers, directors, officials and employees as Additional Insured’s. 6.2.8 The policies required hereunder, except Workers’ Compensation, and Errors and Omissions, shall contain a waiver of transfer of rights of recovery (subrogation) against County, its agents, representatives, officers, directors, officials and employees for any claims arising out of Contractor’s work or service. SERIAL 14111-RFP 6.2.9 The Contractor's policies shall stipulate that the insurance afforded the Contractor shall be primary insurance and that any insurance carried by the Department, its agents, officials, employees or the State of Arizona shall be excess and not contributory insurance, as provided by A.R.S. § 41-621 (E). 6.2.10 Coverage provided by the Contractor shall not be limited to the liability assumed under the indemnification provisions of this Contract. 6.2.11 Commercial General Liability: Commercial General Liability insurance and, if necessary, Commercial Umbrella insurance with a limit of not less than $2,000,000 for each occurrence, $2,000,000 Products/Completed Operations Aggregate, and $4,000,000 General Aggregate Limit. The policy shall include coverage for bodily injury, broad form property damage, personal injury, products and completed operations and blanket contractual coverage, and shall not contain any provision which would serve to limit third party action over claims. There shall be no endorsement or modification of the CGL limiting the scope of coverage for liability arising from explosion, collapse, or underground property damage. 6.2.12 Automobile Liability: Commercial/Business Automobile Liability insurance and, if necessary, Commercial Umbrella insurance with a combined single limit for bodily injury and property damage of not less than $1,000,000 each occurrence with respect to any of the Contractor’s hired, and non-owned vehicles assigned to or used in performance of the Contractor’s work or services under this Contract. 6.2.13 Workers’ Compensation: 6.2.13.1 Workers’ Compensation insurance to cover obligations imposed by federal and state statutes having jurisdiction of Contractor’s employees engaged in the performance of the work or services under this Contract; and Employer’s Liability insurance of not less than $1,000,000 for each accident, $1,000,000 disease for each employee, and $1,000,000 disease policy limit. 6.2.13.2 Contractor waives all rights against County and its agents, officers, directors and employees for recovery of damages to the extent these damages are covered by the Workers’ Compensation and Employer’s Liability or commercial umbrella liability insurance obtained by Contractor pursuant to this Contract. 6.2.14 E&O (Professional) If necessary, Commercial Umbrella insurance, which will insure and provide coverage for errors or omissions of the CONTRACTOR, with limits of no less than $2,000,000 for each claim. Contractor shall maintain Professional Liability insurance which will provide coverage for any and all acts arising out of the work or services performed by the Contractor under the terms of this Contract, with a limit of not less than $1,000,000 for each claim, and $3,000,000 aggregate claims. 6.2.15 Certificates of Insurance. 6.2.15.1 Prior to Contract AWARD, Contractor shall furnish the County with valid and complete certificates of insurance, or formal endorsements as required by the Contract in the form provided by the County , issued by Contractor’s insurer(s), as evidence that policies providing the required coverage, conditions and limits required by this Contract are in full force and effect. Such certificates shall identify this contract number and title. SERIAL 14111-RFP 6.2.15.2 In the event any insurance policy (ies) required by this contract is (are) written on a “claims made” basis, coverage shall extend for two years past completion and acceptance of Contractor’s work or services and as evidenced by annual Certificates of Insurance. 6.2.15.3 If a policy will expire during the life of the Contract, a renewal certificate must be sent to County fifteen (15) days prior to the expiration date. Contractor’s failure to provide the County a renewal certificate in accordance with this section shall not constitute a breach of contract, provided, however, that Contractor shall endeavor to provide such renewal certificate in a timely manner. 6.2.16 Cancellation and Expiration Notice. Insurance required herein shall not be permitted to expire, be canceled, or materially changed without thirty (30) days prior written notice to the County. 6.3 FORCE MAJEURE 6.3.1 Neither party shall be liable for failure of performance, nor incur any liability to the other party on account of any loss or damage resulting from any delay or failure to perform all or any part of this Contract if such delay or failure is caused by events, occurrences, or causes beyond the reasonable control and without negligence of the parties. Such events, occurrences, or causes will include Acts of God/Nature (including fire, flood, earthquake, storm, hurricane or other natural disaster), war, invasion, act of foreign enemies, hostilities (whether war is declared or not), civil war, riots, rebellion, revolution, insurrection, military or usurped power or confiscation, terrorist activities, nationalization, government sanction, lockout, blockage, embargo, labor dispute, strike, interruption or failure of electricity or telecommunication service. 6.3.2 Each party, as applicable, shall give the other party notice of its inability to perform and particulars in reasonable detail of the cause of the inability. Each party must use best efforts to remedy the situation and remove, as soon as practicable, the cause of its inability to perform or comply. 6.3.3 The party asserting Force Majeure as a cause for non-performance shall have the burden of proving that reasonable steps were taken to minimize delay or damages caused by foreseeable events, that all non-excused obligations were substantially fulfilled, and that the other party was timely notified of the likelihood or actual occurrence which would justify such an assertion, so that other prudent precautions could be contemplated. 6.3.4 The County shall reserve the right to terminate this Contract and/or any applicable order or contract release purchase order upon non-performance by Contractor with 30 days’ notice. The County shall reserve the right to extend the Contract and time for performance at its discretion. 6.4 WARRANTY OF SERVICES: 6.4.1 The Contractor warrants that all services provided hereunder will materially conform to the requirements of the Contract, including all descriptions, specifications and attachments made a part of this Contract. County’s acceptance of services or goods provided by the Contractor shall not relieve the Contractor from its obligations under this warranty. 6.4.2 In addition to its other remedies, County may, at the Contractor's expense, require prompt correction of any services failing to meet the Contractor's warranty herein. Services corrected by the Contractor shall be subject to all the provisions of this Contract in the manner and to the same extent as services originally furnished hereunder. SERIAL 14111-RFP 6.4.3 Warranty Disclaimer. EXCEPT AS OTHERWISE SET FORTH IN THE AGREEMENT, CORNERSTONE DISCLAIMS ALL OTHER WARRANTIES, EXPRESS OR IMPLIED, STATUTORY OR OTHERWISE, INCLUDING WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT (EXCEPT FOR THE INFRINGEMENT INDEMNIFICATION PROVIDED HEREUNDER) AND ANY WARRANTIES ARISING FROM A COURSE OF DEALING, USAGE OR TRADE PRACTICE. 6.5 INSPECTION OF SERVICES: 6.5.1 The Contractor shall provide and maintain an inspection system acceptable to County covering the services under this Contract. Complete records of all inspection work performed by the Contractor shall be maintained and made available to County during contract performance and for as long afterwards as the Contract requires. 6.5.2 County has the right to inspect and test all services called for by the Contract, to the extent practicable at all times and places during the term of the Contract. County shall perform inspections and tests in a manner that will not unduly delay the work. 6.5.3 If any of the services do not conform to Contract requirements, County may require the Contractor to perform the services again in conformity with Contract requirements, at no cost to the County. When the defects in services cannot be corrected by re-performance, County may: 6.5.3.1 Require the Contractor to take necessary action to ensure that future performance conforms to Contract requirements; and 6.5.3.2 Reduce the Contract price to reflect the reduced value of the services performed. 6.5.4 If the Contractor fails to promptly perform the services again or to take the necessary action to ensure future performance in conformity with Contract requirements, County may: 6.5.4.1 Terminate the Contract for default. 6.6 Suspension of Work The Procurement Officer may order the Contractor, in writing, to suspend, delay, or interrupt all or any part of the work of this contract for the period of time that the Procurement Officer determines appropriate for the convenience of the County. No adjustment shall be made under this clause for any suspension, delay, or interruption to the extent that performance would have been so suspended, delayed, or interrupted by any other cause, including the fault or negligence of the Contractor. No request for adjustment under this clause shall be granted unless the claim, in an amount stated, is asserted in writing as soon as practicable after the termination of the suspension, delay, or interruption, but not later than the date of final payment under the contract. 6.7 Stop Work Order The Procurement Officer may, at any time, by written order to the Contractor, require the Contractor to stop all, or any part, of the work called for by this contract for a period of 90 days after the order is delivered to the Contractor, and for any further period to which the parties may agree. The order shall be specifically identified as a stop work order issued under this clause. Upon receipt of the order, the Contractor shall immediately comply with its terms and take all reasonable steps to minimize the incurrence of costs allocable to the work covered by the order during the period of work stoppage. Within a period of 90 days after a stop-work is delivered to the Contractor, or within any extension of that period to which the parties shall have agreed, the Procurement Officer shall either— 6.7.1 Cancel the stop-work order; or SERIAL 14111-RFP 6.7.2 Terminate the work covered by the order as provided in the Default, or the Termination for Convenience of the County, clause of this contract. 6.7.3 The Procurement Officer may make an equitable adjustment in the delivery schedule and/or contract price, or otherwise, and the contract shall be modified, in writing, accordingly, if the Contractor demonstrates that the stop work order resulted in an increase in costs to the Contractor. 6.8 UNCONDITIONAL TERMINATION FOR CONVENIENCE: 6.8.1 Maricopa County may terminate the resultant Contract for convenience by providing sixty (60) calendar days advance notice to the Contractor. 6.8.2 Cornerstone may terminate this Agreement if the County materially breaches its obligations under Section 3.2 (“County Restrictions” EXHIBIT B) and/or its payment obligations hereunder, if, where capable of remedy, such breach has not been cured within thirty (30) days of the County’s receipt of written notice describing the breach in reasonable detail. Immediately following termination of this Agreement, County shall cease using all Products. If the Agreement is terminated, upon request, at no additional charge, Cornerstone will return County Data to County via County’s secure FTP site in the same format in which the County Data was originally inputted into the Software. Alternatively, County Data can be returned in a mutually agreed format at a scope and price to be agreed. Cornerstone will maintain a copy of County Data for no more than six (6) months following termination of the Agreement, after which time any County Data not retrieved will be destroyed. 6.9 TERMINATION FOR DEFAULT: The County may, by written notice of default to the Contractor, terminate this contract in whole or in part if the Contractor fails to: 6.9.1 Deliver the supplies or to perform the services within the time specified in this contract or any extension; 6.9.2 Make progress, so as to endanger performance of this contract; or 6.9.3 Perform any of the other provisions of this contract. 6.9.4 The County’s right to terminate this contract under these subparagraph may be exercised if the Contractor does not cure such failure within 30 days (or more if authorized in writing by the County) after receipt of the notice from the Procurement Officer specifying the failure. 6.10 Liability. 6.10.1 Liability Cap: EXCEPT FOR (i) A PARTY’S INTELLECTUAL PROPERTY INDEMNIFICATION OBLIGATIONS; (ii) BREACH BY COUNTY OF SECTION “COUNTY RESTRICTIONS”; OR (iii) A PARTY’S WILLFUL MISCONDUCT, EACH PARTY’S MAXIMUM AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THIS AGREEMENT, REGARDLESS OF THE THEORY OF LIABILITY, WILL BE LIMITED TO THE TOTAL FEES PAID OR PAYABLE BY COUNTY TO CORNERSTONE HEREUNDER FOR THE TWELVE-MONTH PERIOD IMMEDIATELY PRECEDING THE DATE THE CAUSE OF ACTION AROSE. THE EXISTENCE OF MORE THAN ONE CLAIM SHALL NOT EXPAND SUCH LIMIT. THE PARTIES ACKNOWLEDGE THAT THE FEES AGREED UPON BETWEEN COUNTY AND CORNERSTONE IS BASED IN PART ON THESE LIMITATIONS, SERIAL 14111-RFP AND THAT THESE LIMITATIONS WILL APPLY NOTWITHSTANDING ANY FAILURE OF ANY ESSENTIAL PURPOSE OF ANY LIMITED REMEDY. THE FOREGOING LIMITATION SHALL NOT APPLY TO A PARTY’S PAYMENT OBLIGATIONS UNDER THE AGREEMENT. 6.10.2 Exclusion of Consequential Damages: NEITHER PARTY WILL BE LIABLE FOR LOST PROFITS, LOST REVENUE, LOST BUSINESS OPPORTUNITIES, LOSS OF DATA, INTERRUPTION OF BUSINESS, PROVIDING REPLACEMENT SOFTWARE (EXCEPT AS SET FORTH IN SECTION “INFRINGEMENT CURES”), OR ANY OTHER INDIRECT, SPECIAL, PUNITIVE, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF OR RELATING TO THIS AGREEMENT, REGARDLESS OF THE THEORY OF LIABILITY, EVEN IF IT HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. 6.11 STATUTORY RIGHT OF CANCELLATION FOR CONFLICT OF INTEREST: Notice is given that pursuant to A.R.S. § 38-511 the County may cancel any Contract without penalty or further obligation within three years after execution of the contract, if any person significantly involved in initiating, negotiating, securing, drafting or creating the contract on behalf of the County is at any time while the Contract or any extension of the Contract is in effect, an employee or agent of any other party to the Contract in any capacity or consultant to any other party of the Contract with respect to the subject matter of the Contract. Additionally, pursuant to A.R.S § 38-511 the County may recoup any fee or commission paid or due to any person significantly involved in initiating, negotiating, securing, drafting or creating the contract on behalf of the County from any other party to the contract arising as the result of the Contract. 6.12 CONTRACTOR LICENSE REQUIREMENT: The Respondent shall procure all permits, insurance, licenses and pay the charges and fees necessary and incidental to the lawful conduct of his/her business, and as necessary complete any required certification requirements, required by any and all governmental or non-governmental entities as mandated to maintain compliance with and in good standing for all permits and/or licenses. The Respondent shall keep fully informed of existing and future trade or industry requirements, Federal, State and Local laws, ordinances, and regulations which in any manner affect the fulfillment of a Contract and shall comply with the same. Contractor shall immediately notify both Office of Procurement Services and the using agency of any and all changes concerning permits, insurance or licenses. 6.13 SUBCONTRACTING: The Contractor may not assign to another Contractor or Subcontract to another party for performance of the terms and conditions hereof without the written consent of the County. All correspondence authorizing subcontracting must reference the Contract Serial Number. 6.14 AMENDMENTS: All amendments to this Contract shall be in writing and approved/signed by both parties. Maricopa County Office of Procurement Services shall be responsible for approving all amendments for Maricopa County. 6.15 ADDITIONS/DELETIONS OF SERVICE: 6.15.1 If additional materials or services are required from a Contract, prices for such additions will be negotiated between the Contractor and the County. 6.15.2 The County reserves the right of final approval on proposed staff for all Task Orders. Also, upon request by the County, the Contractor will be required to remove any SERIAL 14111-RFP employees working on County projects and substitute personnel based on available resources within a commercially reasonable time. 6.16 VALIDITY: The invalidity, in whole or in part, of any provision of this Contract shall not void or affect the validity of any other provision of the Contract. 6.17 SEVERABILITY: The invalidity, in whole or in part, of any provision of this Contract shall not void or affect the validity of any other provision of this Contract. 6.18 RIGHTS IN DATA: The County shall have the use of data and reports resulting from a Contract without additional cost or other restriction except as may be established by law or applicable regulation. Each party shall supply to the other party, upon request, any available information that is relevant to a Contract and to the performance thereunder. 6.19 NON-DISCRIMINATION: CONTRACTOR agrees to comply with all provisions and requirements of Arizona Executive Order 2009-09 including flow down of all provisions and requirements to any subcontractors. Executive Order 2009-09 supersedes Executive order 99-4 and amends Executive order 75-5 and may be viewed and downloaded at the Governor of the State of Arizona’s website http://www.azgovernor.gov/dms/upload/EO_2009_09.pdf which is hereby incorporated into this contract as if set forth in full herein. During the performance of this contract, CONTRACTOR shall not discriminate against any employee, client or any or any other individual in any way because of that person’s age, race, creed, color, religion, sex, disability or national origin. 6.20 CERTIFICATION REGARDING DEBARMENT AND SUSPENSION 6.20.1 The undersigned (authorized official signing for the Contractor) certifies to the best of his or her knowledge and belief, that the Contractor 6.20.1.1 is not presently debarred, suspended, proposed for debarment, declared ineligible, or voluntarily excluded from covered transactions by any Federal Department or agency; 6.20.1.2 have not within 3-year period preceding this Contract been convicted of or had a civil judgment rendered against them for commission of fraud or a criminal offense in connection with obtaining, attempting to obtain, or performing a public (Federal, State or local) transaction or contract under a public transaction; violation of Federal or State antitrust statues or commission of embezzlement, theft, forgery, bribery, falsification or destruction of records, making false statements, or receiving stolen property; 6.20.1.3 are not presently indicted or otherwise criminally or civilly charged by a government entity (Federal, State or local) with commission of any of the offenses enumerated in paragraph (2) of this certification; and 6.20.1.4 have not within a 3-year period preceding this Contract had one or more public transaction (Federal, State or local) terminated for cause of default. 6.20.2 The Contractor agrees to include, without modification, this clause in all lower tier covered transactions (i.e. transactions with subcontractors) and in all solicitations for lower tier covered transactions related to this Contract. SERIAL 14111-RFP 6.21 Background Check: Contractor needs to aware that there may be multiple background checks (Sheriff’s Office, County Attorney's Office, Courts as well as Maricopa County general government) to determine if a particular Contractor employee or subcontractor is acceptable to the County to perform Maricopa County-specific Services. If Maricopa County requires a background check (or multiple background checks) on any individual, then Maricopa County may conduct such background check(s), at its own cost and expense. This applies to (but is not limited to) the company, sub- contractors and employees. 6.22 VERIFICATION REGARDING COMPLIANCE WITH ARIZONA REVISED STATUTES §41- 4401 AND FEDERAL IMMIGRATION LAWS AND REGULATIONS: 6.22.1 By entering into the Contract, the Contractor warrants compliance with the Immigration and Nationality Act (INA using e-verify) and all other federal immigration laws and regulations related to the immigration status of its employees and A.R.S. §23-214(A). The contractor shall obtain statements from its subcontractors certifying compliance and shall furnish the statements to the Procurement Officer upon request. These warranties shall remain in effect through the term of the Contract. The Contractor and its subcontractors shall also maintain Employment Eligibility Verification forms (I-9) as required by the Immigration Reform and Control Act of 1986, as amended from time to time, for all employees performing work under the Contract and verify employee compliance using the E-verify system and shall keep a record of the verification for the duration of the employee’s employment or at least three years, whichever is longer. I-9 forms are available for download at USCIS.GOV. 6.22.2 The County retains the legal right to inspect contractor and subcontractor employee documents performing work under this Contract to verify compliance with paragraph 6.21.1 of this Section. Contractor and subcontractor shall be given reasonable notice of the County’s intent to inspect and shall make the documents available at the time and date specified. Should the County suspect or find that the Contractor or any of its subcontractors are not in compliance, the County will consider this a material breach of the contract and may pursue any and all remedies allowed by law, including, but not limited to: suspension of work, termination of the Contract for default, and suspension and/or debarment of the Contractor. All costs necessary to verify compliance are the responsibility of the Contractor. 6.23 INFLUENCE As prescribed in MC1-1202 of the Maricopa County Procurement Code, any effort to influence an employee or agent to breach the Maricopa County Ethical Code of Conduct or any ethical conduct may be grounds for Disbarment or Suspension under MC1-902. An attempt to influence includes, but is not limited to: 6.23.1 A Person offering or providing a gratuity, gift, tip, present, donation, money, entertainment or educational passes or tickets, or any type valuable contribution or subsidy, 6.23.2 That is offered or given with the intent to influence a decision, obtain a contract, garner favorable treatment, or gain favorable consideration of any kind. If a Person attempts to influence any employee or agent of Maricopa County, the Chief Procurement Officer, or his designee, reserves the right to seek any remedy provided by the Maricopa County Procurement Code, any remedy in equity or in the law, or any remedy provided by this contract. SERIAL 14111-RFP 6.24 ACCESS TO AND RETENTION OF RECORDS FOR THE PURPOSE OF AUDIT AND/OR OTHER REVIEW: 6.24.1 In accordance with section MCI 371 of the Maricopa County Procurement Code the Contractor agrees to retain all books, records, accounts, statements, reports, files, and other records and back-up documentation relevant to this Contract for six (6) years after final payment or until after the resolution of any audit questions which could be more than six (6) years, whichever is latest. The County, Federal or State auditors and any other persons duly authorized by the Department shall have full access to, and the right to examine, copy and make use of, any and all said materials. 6.24.2 If the Contractor’s books, records , accounts, statements, reports, files, and other records and back-up documentation relevant to this Contract are not sufficient to support and document that requested services were provided, the Contractor shall reimburse Maricopa County for the services not so adequately supported and documented. 6.24.3 If at any time it is determined by the County that a cost for which payment has been made is a disallowed cost, the County shall notify the Contractor in writing of the disallowance. The course of action to address the disallowance shall be at sole discretion of the County, and may include either an adjustment to future invoices, request for credit, request for a check or deduction from current billings Submitted by the Contractor by the amount of the disallowance, or to require reimbursement forthwith of the disallowed amount by the Contractor by issuing a check payable to Maricopa County. 6.25 AUDIT DISALLOWANCES: If at any time, County determines that a cost for which payment has been made is a disallowed cost, such as overpayment, County shall notify the Contractor in writing of the disallowance. County shall also state the means of correction, which may be but shall not be limited to adjustment of any future claim submitted by the Contractor by the amount of the disallowance, or to require repayment of the disallowed amount by the Contractor. 6.26 OFFSET FOR DAMAGES; In addition to all other remedies at Law or Equity, the County may offset from any money due to the Contractor any amounts Contractor owes to the County for damages resulting from breach or deficiencies in performance of the contract. 6.27 PUBLIC RECORDS: Under Arizona law, all Offers submitted and opened are public records and must be retained by the Records Manager at the Office of Procurement Services. Offers shall be open to public inspection and copying after Contract award and execution, except for such Offers or sections thereof determined to contain proprietary or confidential information, By the Office of Procurement Services. If an Offeror believes that information in its Offer or any resulting Contract should not be released in response to a public record request under Arizona law, the Offeror shall indicate the specific information deemed confidential or proprietary and submit a statement with its offer detailing the reasons that the information should not be disclosed. Such reasons shall include the specific harm or prejudice which may arise from disclosure. The Records Manager of the Office of Procurement Services shall determine whether the identified information is confidential pursuant to the Maricopa County Procurement Code. 6.28 INTEGRATION: This Contract represents the entire and integrated agreement between the parties and supersedes all prior negotiations, proposals, communications, understandings, representations, or agreements, whether oral or written, express or implied. SERIAL 14111-RFP 6.29 RELATIONSHIPS: In the performance of the services described herein, the Contractor shall act solely as an independent contractor, and nothing herein or implied herein shall at any time be construed as to create the relationship of employer and employee, co-employee, partnership, principal and agent, or joint venture between the County and the Contractor. 6.30 GOVERNING LAW: This Contract shall be governed by the laws of the state of Arizona. Venue for any actions or lawsuits involving this Contract will be in Maricopa County Superior Court or in the United States District Court for the District of Arizona, sitting in Phoenix, Arizona 6.31 ORDER OF PRECEDENCE: In the event of a conflict in the provisions of this Contract and Contractor’s license agreement, if applicable, the terms of this Contract shall prevail. 6.32 INCORPORATION OF DOCUMENTS: The following are to be attached to and made part of this Contract: 6.32.1 Exhibit A, Pricing; 6.32.2 Exhibit B, Scope of Work; 6.32.3 Exhibit B-1, Implementation Plan 6.32.4 Exhibit B-2, Project Plan 6.32.5 Exhibit C, Service Level Agreement 6.32.6 Exhibit D, Vendor response Matrix (non-functional requirements) 6.32.7 Exhibit E, Vendor , (Vendor response matrix, Business Requirements) 6.32.8 Exhibit F, Office of Procurement Services Contractor Travel and Per Diem Policy. NOTICES: All notices given pursuant to the terms of this Contract shall be addressed to: For County: Maricopa County Office of Procurement Services ATTN: Contract Administration 320 West Lincoln Street Phoenix, Arizona 85003-2494 For Contractor: Cornerstone OnDemand ATTN: General Counsel 1601 Cloverfield Boulevard Blvd Suite 620S Santa Monica, California 90404 SERIAL 14111-RFP SERIAL 14111-RFP EXHIBIT A PRICING SERIAL 14111 NIGP CODE: 20851, 20952 RESPONDENT'S NAME: Cornerstone OnDemand COUNTY VENDOR NUMBER : 2011006359 0 ADDRESS: 1601 Cloverfield Blvd, Santa Monica, CA 90404 P.O. ADDRESS: 6082 S. Forest Ct, Centennial, CO 80121 TELEPHONE NUMBER: 303-618-1550 FACSIMILE NUMBER: 303-740-9493 WEB SITE: http://www.cornerstoneondemand.com/ CONTACT (REPRESENTATIVE): Steve Carmine REPRESENTATIVE'S E-MAIL ADDRESS: scarmine@csod.com PAYMENT TERMS. [x] NET 30 DAYS, ROI COUNTS 10700 2000 1.0 PRICING OPERATING: Subscribers** - EMPLOYEES Limited Use Subscriber** - CASUAL USER PUBLIC CLOUD 1.1 MONTHLY SERVICE PRICE* $2.54 $0.72 PER MONTH, PER 1.2 ANNUAL COST* $ 326,136.00 $ 17,280.00 USER* 1.3 PAYMENT SCHEDULE AND TERMS 1.3.1 The project starts 11/18/2015 and County pays for implementation, based on the Payment Schedule below. 1.3.2 “Limited Use Subscriber” means a Subscriber who is a seasonal employee or contractor who works for Client no more than four (4) months per year in aggregate.** "Subscriber" is as defined in the Contract. 1.3.3. County will be invoiced for annual fees every June 30 (due net 60 = August 30) starting June 30, 2016 and continuing for the Initial Term of the Agreement (which will end June 29, 2021). 1.4 Payment Schedule: Invoice Date Amount December 31, 2015 (net 120)* $229,500.00 Upon completion of UAT Phase for Learning and Connect $25,500.00 Implementation (net 60)* June 30, 2016 (net 60) – Year 1 $343,416.00 Software Fees June 30, 2017 (net 60) – Year 2 $343,416.00 Software Fees June 30, 2018 (net 60) – Year 3 $343,416.00 Software Fees June 30, 2019 (net 60) – Year 4 $343,416.00 Software Fees June 30, 2020 (net 60) – Year 5 $343,416.00 Software Fees 2.0 IMPLEMENTATION* $255,000 INCLUDES ALL TRAVEL EXPENSES 2.1 TRAINING PRICE Included $0 2.2 CONFIGURATION COSTS Included $0 SERIAL 14111-RFP 2.3 CUSTOMIZATIONS COST Included $0 2.4 THIRD PARTY COSTS Included $0 2.5 TOTAL IMPLEMENTATION AND TRAINING SERVICES (ALL COSTS IN SECTION 2.0)* $ 255,000.00 * SECTION 1.2 INCLUDES ALL HELPDESK SUPPORT AND PRODUCT ON-GOING SUPPORT 7 BY 24 Includes Help Desk via the Cornerstone Client Success Center with unlimited access, 24x7x365, for 100 Administrators with access to the Client Success Center. Cornerstone will provide 24x5 support to Client's Administrators. 3.0 TRAVEL EXPENSES Included CONNECT ☒ Connect 10,700 10,700 Subscribers + 2,000 ☒ Learning Limited Use Subscribers $343,416 ☒ Certifications 10,700 ☒ Competencies 10,700 *LEARNING ☐ Extended Enterprise ☐ eCommerce ☐ Certifications ☐ Competencies ☐ Cornerstone for Salesforce* Support Package: N/A included ☒Professional ☐ Professional Plus ☐Premier ☐Premier Plus ☒Administrator Training Package 100 included ☒Course Publisher 2 included All capitalized terms used but not defined herein shall be as defined in the Statement of Work. SERIAL 14111-RFP EXHIBIT B SCOPE OF WORK 1.0 INTENT: To provide the Maricopa County Human Resources Office with a fully integrated Cornerstone Talent Management System including Learning Management System (LMS) with the ability to integrate Performance Management functionality the following fiscal year. 2.0 CORNERSTONE ONDEMAND: 2.1 The complete LMS system including all future updates and the following. 2.1.1 Development Plans 2.1.2 Competency Assessment 2.1.3 Competency Management 2.1.4 Observation Checklists 2.1.5 Talent Planning & Mobility 2.1.6 360 Standalone Competency Assessments 2.2 Product will be delivered as a Software as a Service (SaaS) to the County. 2.3 System shall meet all requirements in the vendor’s responses Matrix Exhibit E (non-functional requirement) and Exhibit E-1 (Functional Requirements) for those Products that have been purchased by the County. 3.0 TERMS OF SERVICES: 3.1 Definitions. 3.1.1 “Active User” means, in a given calendar month, a user established on the Software with a designation of “active” at any time during that month. County has the ability to determine who is an Active User. 3.1.2 “County” means Maricopa County. 3.1.3 “County Content” means any and all courses, learning objects, certifications, quizzes, tests, materials, instructor-led sessions, or documents created and/or supplied by County. 3.1.4 “County Data” means proprietary or personal data regarding County or any of its users under this Agreement. 3.1.5 “Content Delivery” means the delivery of County Content to Active Users. Content Delivery volume is calculated as follows: size of County Content (in gigabytes) multiplied by the number of Active Users receiving the County Content. 3.1.6 “Cornerstone” means Cornerstone OnDemand, Inc. 3.1.7 “Implementation” means implementation, deployment, and/or training relating to the Software. 3.1.8 “Products” means any and all Services, work product resulting from Services, and Software. 3.1.9 “Service” means any service rendered by Cornerstone specifically to County, including, but not limited to: (i) hosting of the Software; (ii) hosting, delivery, and/or distribution of eLearning content; (iii) provision of customer and/or technical support for the Software; (iv) Implementation; (v) development of Software functionality specially requested by County; and/or (vi) any consulting service. 3.1.10 “Software” means: (i) any and all of Cornerstone’s proprietary web-based applications, including, without limitation, all updates, revisions, bug-fixes, upgrades, and enhancements thereto, as well as applications that have been modified in any way by Cornerstone at the request of a County; and (ii) application functionality provided by Cornerstone-contracted third parties. 3.1.11 “Subscriber” means an Active User that accesses the Software for a flat fee. 3.1.12 “Transaction” applies only to the Extended Enterprise Product and means a course registration, self-assessment, or task undertaken by an Active User who is grouped in a specially-designated organizational unit separate and apart from Subscribers. Unused SERIAL 14111-RFP Transactions expire upon the earlier of: (i) termination of the applicable Order; or (ii) one year from purchase date. For clarity, employees of County or any of its Affiliates may only access the Software as Subscribers. 3.2 County Restrictions. County may only use the Products for its own lawful, internal business purposes. County shall not: (i) use or deploy the Software in violation of applicable laws or this Agreement; (ii) resell the Products except through Transactions; (iii) create any derivative works based upon the Products; (iv) reverse engineer, reverse assemble, decompile or otherwise attempt to derive source code from the Software or any part thereof (except to the extent that such restriction is not permitted under applicable law); (v) make the Products available to any unauthorized parties, including without limitation, competitors of Cornerstone; or (vi) perform, or release the results of, benchmark tests or other comparisons of the Products with other software, services, or materials. Should unexpected or inappropriate use of the Software result in denial of service with respect to the Software, Cornerstone may disable the implicated County Content and/or deny access to County’s portal as necessary to remedy the issue. County will be responsible for Active Users’ compliance with the Agreement and liable for Active Users’ breach thereof. County will ensure that it has obtained all necessary consents and approvals for Cornerstone to access County Data for the purposes permitted under this Agreement. If County is in breach of this section, Cornerstone may suspend Services, in addition to any other rights and remedies Cornerstone may have at law or in equity. 3.3 Services. At the end of a given project, County shall either accept or reject the project based on whether the deliverables for that project have been performed in substantial and material accordance with the applicable order. Any of the following shall be deemed acceptance of a project: (i) failure to provide written notice of objections to Cornerstone within twenty (20) days of project completion; or (ii) with respect to an Implementation, use of the implemented Product in a live environment for a total of twenty (20) days. 3.4 Support. After Implementation is completed, Cornerstone shall provide the level of technical support stated in the applicable order. Only the number of administrators set forth in the applicable support package (i.e., not all Subscribers) may contact Cornerstone for support. County agrees to promptly provide Cornerstone with sufficient documentation, data and assistance with respect to any reported errors, and to reasonably cooperate with Cornerstone, in order for Cornerstone to comply with its support obligations hereunder. In no event shall Cornerstone be responsible or liable for any errors, bugs or other problems caused by hardware or software not provided by Cornerstone. 3.5 Intellectual Property. As between the parties, Cornerstone will and does retain all intellectual and proprietary rights, title and interest in and to the Products. County retains all ownership rights to County Data and County Content. 3.6 No Third Party Beneficiaries. The representations, warranties and other terms contained herein are for the sole benefit of the parties hereto and their respective successors and permitted assigns, and shall not be construed as conferring any rights on any other persons. 3.7 Statistical Data. Without limiting the confidentiality rights and Intellectual Property Rights protections set forth in this Agreement, Cornerstone has the perpetual right to use aggregated, anonymized, and statistical data (“Statistical Data”) derived from the operation of the Software, and nothing herein shall be construed as prohibiting Cornerstone from utilizing the Statistical Data for business and/or operating purposes, provided that Cornerstone does not share with any third party Statistical Data which reveals the identity of County, County’s users, or County’s Confidential Information. 3.8 Suggestions. Cornerstone shall have a royalty-free, worldwide, perpetual license to use or incorporate into the Products any suggestions, ideas, enhancement requests, feedback, recommendations, or other information provided by County or its users relating to the operation of the Products. SERIAL 14111-RFP 3.9 Responsibility for Third-Party Offerings. The Software may contain features capable of interoperating with third-party applications. Cornerstone will notify the County if it purchases any such features. To use such features, County may be required to obtain access to such applications from a third-party provider. Cornerstone shall not be responsible for County’s access to, or operation of, third-party applications not offered or sold by Cornerstone to County Notwithstanding the foregoing, Cornerstone’s obligations pertaining to its Products and its Service Level Agreement shall remain unchanged. SERIAL 14111-RFP EXHIBIT B-1 IMPLEMENTATION PLAN PROJECT PLAN and STATEMENT OF WORK 1.0 SCOPE OF SERVICES AND DELIVERABLES 1.1 System Readiness Set-up The system-readiness process and the corresponding deliverables provided by Cornerstone are documented below. System Readiness Set-up takes approximately 10 business days in duration and is performed remotely by Cornerstone. Phase Cornerstone Deliverable System Deliver welcome email, which includes Client Success Center access credentials Readiness Deliver access to online administrator training courses Set-up Activate Client portals (live, pilot, stage) Create Client administrator user login Complete basic configuration tasks ■ Configure default preferences ■ Create Organization Units ■ Configure initial security roles System Administrator roles Default role for every user in the system Manager role Cost Center Approver Configure initial branding Activate purchased functionality Deliver access credentials to portals Set-up Client in MySuccess Set-up Client in Cornerstone operational systems 1.2 Timeline and Delivery The end of the System Readiness Set-up phase is defined as the completion of the above deliverables. Acceptance of the deliverables will be in accordance with the Agreement. At the end of the System Readiness Set-up phase, the Software is ready for use by Client. Project Components Price System Readiness Set-up Included 1.3 Project resources The table below outlines recommended resources and time estimates for each phase. Each phase overlaps and may require a shifting of hours among phases based on Client’s processes. The project lifecycle may be repeated for each additional module and/or cloud. Estimated Phase Cornerstone Resources Client Resources Duration Project 1-2 Weeks Engagement Manager Project Manager Initiation Implementation Consultant Core Project Team Integration Consultant Business Process Owners Requirements 1-2 Weeks Engagement Manager Project Manager Documentation Implementation Consultant Core Project Team Integration Consultant Business Process Owners SERIAL 14111-RFP Estimated Phase Cornerstone Resources Client Resources Duration Discovery & 2-4 Weeks Engagement Manager Project Manager Planning Implementation Consultant Core Project Team Integration Consultant Business Process Owners Technical Resources Design 2-4 Weeks Engagement Manager Project Manager Implementation Consultant Core Project Team Client Success Manager Business Process Owners Integration Consultant Technical Resources Execution 2-4 Weeks Engagement Manager Project Manager Implementation Consultant Core Project Team Integration Consultant Business Line Admins Technical Resources Acceptance 1-2 Weeks Engagement Manager Project Manager Testing Implementation Consultant Core Project Team Integration Consultant Business Process Owners Client Success Manager Group of Key Process Users Project Project Engagement Manager Project Manager Management Lifecycle Change 1-2 Weeks Implementation Consultant Project Manager Management Change Management Resource Key Stakeholders 1.4 Project Roles The Cornerstone and Client roles and responsibilities for the Implementation Services are described below. Cornerstone Roles Client Roles Executive Endorse the solution Executive Endorse the solution Sponsor Serve as the relationship manager Champion Serve as the relationship for Client manager for Cornerstone Monitor project status and ensure Monitor project status and resource commitments are met ensure resource Resolve high level issues / risks commitments are met Approve the rollout plan Resolve high level issues / risks Engagement Develops and owns confederated N/A Manager project plan Resolves issues to ensure project traction Participates in monthly status meetings with project manager Practice Administers discovery N/A Consultant questionnaires Drives the onsite discovery session and makes process recommendations SERIAL 14111-RFP Cornerstone Roles Client Roles Implementation Manage project tasks, staffing, and Project Manager Co-manage project staffing Consultant milestones and milestones Ensure completion of project Ensure completion of project deliverables deliverables Manage issues and resolutions Manage the rollout plan Integration Ensure portal creation Technical Resources Unit test all integrations Consultant Assist design and data flows Complete single sign on Process data feed files and data Provide legacy system data integrations extracts Transform data to agreed formatting Education Create the administrator training System Administrator(s) Become self-sufficient in Services agenda product administration Consultant Deliver administrator training to Own configuration changes Client after the Implementation Services are completed Serve as a primary point of contact for Cornerstone product support team Subject Matter Provide business process expertise Process Owners Provide business unit specific Experts (SMEs) Provide input on issues or risks knowledge regarding data and roll-out requirements Participate in configuration reviews Participate in acceptance testing Client Success Understanding business Change Management Manage change management Manager requirements for Client configuration and communication plans decisions Train end users Endorse the solution Receive hand-off from implementation Ensure on-going relationship management 2.0 IMPLEMENTATION SERVICES The Scope of Services outlined below provides a breakdown of the key components of the Implementation Services and the corresponding deliverables to be provided by Cornerstone and Client. Phase Cornerstone Deliverables Client Deliverables Project Confirm project scope with Client project Assemble project team Initiation team Complete introductory training, pre-work, and discovery Establish and document project controls and questionnaires processes for status reporting, issue Provide branding / marketing requirements resolution, and risk management processes Provide organization chart(s) to assist in designing Deliver discovery document and technical Organization Unit (OU) structure projects questionnaires Provide measures of project success Schedule kickoff meeting to review Client Provides sample user profile record and definition SERIAL 14111-RFP Phase Cornerstone Deliverables Client Deliverables design decision points Client content provider listing and courses Document learning processes (approvals and evaluations) External user approval workflows Provide external training requirements Review and accept Cornerstone deliverables Discovery & Review Client documentation Participate in remote kick-off meeting Planning Create project plan for Implementation Validate project plan and meeting schedule Services Complete discovery questionnaires Create meeting schedule for project lifecycle Provide use case scenarios to model recommended Complete remote kick-off meeting configuration Review technical projects in-scope Review and accept Cornerstone deliverables Design Cornerstone will configure pilot portal based Complete remote configuration workshop and workbook, on Client requirements presented in documenting decisions for the following: discovery questionnaire Global system preferences Complete remote configuration workshop and Page configuration Welcome workbook Learning management preferences Document decisions and remaining action items for : Connect preferences Extended Enterprise (eCommerce, if applicable) Organizational unit and user data design preferences Global system preferences Navigation tabs and links Welcome Page configuration Custom security roles matrix Learning management preferences Email management matrix update Connect preferences Complete Custom Login Page workbook Extended Enterprise (eCommerce, if Complete design specifications for technical projects: applicable) preferences Single Sign-On (SSO) Navigation tabs and links Inbound Data Feed – OU/user data Custom security roles matrix Custom Login Page Email management matrix Virtual Training Integration Documented technical projects: Inbound Data Feed(s) Single Sign-On (SSO) Historical Data Upload(s) Inbound Data Feed – OU/user data Master Data Upload(s) Custom Login Page Complete remaining configuration decisions post Virtual Training Integration configuration workshop and document remaining design Inbound Data Feed(s) specifications Historical Data Upload(s) Review and accept Cornerstone deliverables Master Data Upload(s) Web Services Design Conduct remote follow-up design sessions with Client for remaining configuration decisions post configuration workshop Execution Configure sample data in pilot portal for Complete sample data and setup in live portal including: Learning Cloud Global Configurations – emails triggers, security roles, Platform preferences, email triggers welcome page, preferences eLearning (SCORM/AICC) content load (1 Language translations, as necessary course) and one (1) survey example Configuration of additional Client security roles One (1) instructor-led training example Learning Cloud Configure sample data in pilot portal for Load eLearning course Content and materials SERIAL 14111-RFP Phase Cornerstone Deliverables Client Deliverables Extended Enterprise Cloud Load all required documents including curriculums, One (1) self-registration group configured test and evaluations, ILT events and sessions, Shopping cart and billing example instructors, facilities, and certifications Deliver sample test scripts Test content launching, tracking, and completion Complete technical projects: Extended Enterprise Cloud Single Sign-On (SSO) Configure Extended Enterprise self-registration Inbound Data Feed – OU/user data groups Custom Login Page Set shopping cart and billing preferences Training Integration Complete and implement technical projects including: Virtual Inbound Data Feed(s) Single Sign-On (SSO) Data Upload(s) Inbound Data Feed – OU/user data Historical Master Data Upload(s) Custom Login Page Web Services Design Virtual Training Integration Unit test system interfaces Inbound Data Feed(s) Historical Data Upload(s) Master Data Upload(s) Web Services Design Test system interfaces end-to-end Create customized acceptance test scripts Maintain configuration workbook Review and accept Cornerstone deliverables Acceptance Copy live portal to pilot portal Validate data: Testing Deliver sample user acceptance testing Single Sign-On (SSO) assessment template Inbound Data Feed – OU/user data Update issue log, including defects Custom Login Page Provide coaching for configuration updates Support Client during testing and validation: Virtual Training Integration Inbound Data Feed(s) Triage (categorize and prioritize) reported issues and address prior to go-live Historical Data Upload(s) Master Data Upload(s) Web Services Design Populate specific test data (tasks, users) Create and complete Client-specific test assessment template Create and complete user acceptance test scripts Update live portal configuration based on testing feedback Review and accept Cornerstone deliverables Project Manage implementation project plan Provide project status updates Management Manage Cornerstone resources Provide updated issues and risks Provide weekly project status updates Manage Client resources Manage project issues and risks Facilitate communication throughout Client organization Conduct Client Success Manager (CSM) and Manage project issues and risks Global Product Support (GPS) transition meeting SERIAL 14111-RFP 3.0 TECHNICAL PROJECTS SCOPE Custom Login Page (CLP) Brief Summary Create a Custom Login Page following Client's design and layout according to Cornerstone-provided design guidelines and templates. Tasks Cornerstone: Provide Client with Cornerstone's Custom Login Page design templates Cornerstone: Lead Client in Custom Login Page design workshops to review Custom Login Page process Client: Create Custom Login design based on Cornerstone’s Custom Login Page design templates Cornerstone: Create Custom Login Page in stage per Client’s design Client: Review and indicate corrections to errors detected in stage portal Cornerstone: Reload corrected Custom Login Page as necessary in stage portal Client: Review and approve Custom Login Page loaded to stage portal Cornerstone: Load Custom Login Page on pilot and live portals Assumptions Utilizes Cornerstone Custom Login Page design document template Client will provide written sign off on the Custom Login Page on the stage portal, which will be used as approval to push the Custom Login Page to pilot and live portals Client may ask for one (1) iteration of the Custom Login Page once the Custom Login Page is deployed on stage portal Any changes requested subsequent to the approval of the Custom Login Page on the stage portal will require creation of a change request document. Change requests are reviewed and could result in additional charges to Client. Welcome Page—Template Design Package Brief Summary One Welcome page will be created and set up in the clients portal within the following parameters and scope: Choice of one of the standard template designs Choice of color Client logo, graphic and text for template – client may provide one graphic or select from stock photo site graphics Choice of predesigned widget boxes Choice of standard button styles Choice of standard button icons All needed work to create the Welcome page including HTML coding for links will be completed by CSOD. Links must exist in client portal to enable linking from Welcome Page. There is one initial consulting session with client to determine choices and layout and one client review cycle of the Welcome Page after the initial mock-up is presented. Client will be able to review and confirm changes were made appropriately. CSOD will create the page in the client’s test portal or test division. Client will be able to review the page once it is created in the portal for the second review cycle and confirm changes were made appropriately. Additional review cycles or updates to the Welcome Page at a later time may incur additional cost. The project will begin (kickoff date) when the client’s live portal is fully configured related to functionality for the Welcome Page and delivered within 10 business days assuming a 2 day client review cycle. If client requires additional review time or multiple reviews, deliverable date will be based on the additional review time required. Maximum time for entire project cycle is 30 business days from Welcome Page project start date (kickoff date) and Cornerstone reserves the right to request final approval on design, code page in clients portal of choice and close project 30 business days after project start date. Client will provide CSOD a system admin ID in their live or pilot portal to create the Welcome Page and will provide a single point of contact for questions related to the specifics to be used in the Welcome Page and for signoff for the review cycle. SERIAL 14111-RFP Welcome Page—Template Design Package NOTE – Any stock photos, buttons or other graphics used for the Welcome Page can be used only for use within this specific Welcome page and may not be reutilized or redistributed in any other manner. Virtual Classroom Integration (vILT) Brief Summary Integration of one (1) of the following Cornerstone supported Virtual Training providers with Cornerstone’s Instructor-Led training module: WebEx; or Live Meeting; or Adobe Connect; or GoToMeeting. Tasks Cornerstone: Conduct project kick-off Cornerstone: Deliver questionnaire kick-off template Cornerstone: Lead Client in Virtual Classroom Integration workshop to review process and support the functional decisions of the Client Client: Complete questionnaire that includes account information for vILT provider account, as follows: Enabled for URL and XML APIs Site ID Partner ID Username and password Create administrator account (WebEx Only) Client: Provide names of instructors to be associated to the WebEx provider (WebEx only) Cornerstone: Create provider and links to third party provider in the Cornerstone application Cornerstone: Conduct quality assurance and integration testing Cornerstone: Replicate integration on live and pilot portals (WebEx to live only) Assumptions Integration between Cornerstone’s Instructor Led Training (ILT) module and the third party virtual training tools has clearly defined features and functionality based on the vendor’s product as documented in the Cornerstone Virtual Training Integration specifications Virtual training vendor account fees and support are the responsibility of the Client Administrative accounts cannot change after integration is in place Inbound Data Feed – User/Organizational Unit (IDF User/OU) Brief Summary Integration with data from Client’s system enabling automated maintenance of user and organizational units (OU) via a scheduled Inbound Data Feed (IDF) of the following data sets: User Profile data Organizational Unit (OU) data Tasks Cornerstone: Provide Client with the Cornerstone standard Inbound Data Feed of User/OU (IDF User/OU) design document and template Cornerstone: Lead Client in IDF User/OU workshop to review data feed process and support the functional decisions of Client Cornerstone: Create IDF User/OU design document for Client Client: Sign off on IDF User/OU design document SERIAL 14111-RFP Inbound Data Feed – User/Organizational Unit (IDF User/OU) Client: Load files on pilot FTP folder for load, complying with Cornerstone’s formatting requirements Cornerstone: Schedule IDF User/OU to run in pilot portal on a regular basis to allow testing by Client Cornerstone: Email the pilot portal IDF User/OU log file to identify load errors, after each load attempt Client: Review, update, and sign off the IDF User/OU process in pilot portal Client: Load files on live FTP folder for load, complying with Cornerstone’s formatting requirements Cornerstone: Schedule and automate IDF User/OU in live portal Cornerstone: Email the live IDF User/OU log file to identify load errors, after each load attempt Client: Review, update, and sign off on the IDF User/OU process in live portal Assumptions Client utilizes Cornerstone standard IDF User/OU design document and template for all data types Client is responsible for uniquely identifying records across all data types All data records referencing user data are by user’s unique identifier value (UserID) Client has skilled software resources that can extract data from source systems and transform data to the format(s) defined by the approved IDF design document Client will perform all data file consolidations necessary and provide data files in formats defined in the approved IDF User/OU design document. All mandatory data fields must be populated for all records Client is responsible for properly validating data and identifying any errors prior to signing off on feed in live portal Client acknowledges that once the design document is approved, any changes or modifications to the work, scope, or the feed will require creation of a change request document. Change requests are reviewed and could result in additional charges to Client Any changes following Client signoff will require a work order or SOW submission Historical Data Load – Learning (HDLL) Brief Summary Migration of learning system data from legacy system to the Cornerstone portal. Migrated data includes the following data types: User transcript-centric records and supporting SCORM/AICC e-learning, event / session, external training, materials, curriculum (transcript only) Tasks Cornerstone: Provide Client with the Cornerstone standard data design document template Cornerstone: Lead Client in data loading workshops to review data load process and support the functional decisions of Client Cornerstone: Create data design document for Client Client: Sign off on data design document Client: Prepare files per approved data design template provided by Cornerstone Cornerstone: Load files into the pilot portal system Client: Review and correct any errors detected in the data load process Cornerstone: Reload corrected files as necessary in pilot portal (up to three (3) iterations per data type) Client: Review and approve data loaded to pilot portal Cornerstone: Load data on live portal Assumptions Utilizes Cornerstone data design template All data loads referencing user data does so by a common unique identifier Client is responsible for providing unique records per data type Client has the ability to transform data to the format(s) defined by the Cornerstone data design template Client has skilled software resources that can extract master data from source systems Client will perform all data file consolidations by data type defined above Maximum of three (3) iterations of loads by data type for the purpose of correcting errors SERIAL 14111-RFP Master Data Load – Learning (MDLL) Brief Summary Migration of master system data to the Cornerstone portal. Migrated data includes the following data types: E-learning courses in SCORM or AICC format only:up to a maximum of 1,000 courses Materials (documents including .pdf, .docx, .xlsx,.pptx; other assets including .bmp, .jpg,.gif, .m4a, .mp3, .wma, .wav, .mid, .avi, .mpeg, .m4v, .swf; or URLs), including up to a maximum of 1,000 materials Videos as learning objects (.mpg, .mpeg, .wmv, .flv, .mp4, .m4v format or URL from YouTube), including up to a maximum of 1,000 videos Questions and exams, including up to a maximum of 1,000 questions and up to a maximum of 300 exams Tasks Cornerstone: Provide Client with the Cornerstone standard data design document template Cornerstone: Lead Client in data loading workshops to review data load process and support the functional decisions of Client Cornerstone: Create data design document for Client Client: Sign off on data design document Client: Prepare files for loading by Cornerstone integration consultant Cornerstone: Load files into the pilot portal system Client: Review and correct any errors detected in the upload process Cornerstone: Reload corrected files as necessary in pilot portal (maximum of three (3) iterations per data type) Client: Review and approve data loaded to pilot portal Cornerstone: Load data on live portal Assumptions Utilize Cornerstone standard data design document template for all data types E-learning courses are published in the SCORM 1.2, v2004, or AICC 3.5 format standards only All data records referencing user data does so by user’s unique identifier value (UserID) Client is responsible for uniquely identifying records across all data types Client has skilled software resources that can extract master data from source systems Client has the ability to transform data to the format(s) defined by Client-approved data design document Client will perform all data file consolidations necessary by data type defined above Maximum of three (3) iterations of loads by data type for the purposes of correcting errors Single Sign On (SSO) – AES Encrypted, SAML 1.1, or SAML 2.0 Brief Summary Cornerstone to provide support on one of the following Single Sign On (SSO) integration from and outsider portal to Client’s Cornerstone Portal: AES Encrypted SAML 1.1 SAML 2.0 Tasks Cornerstone: Provide Client with the Cornerstone SSO Technical Documentation Cornerstone: Lead the Client in SSO workshops to review SSO process and support the functional decisions of the Client AES Encrypted Single Sign On (SSO) Cornerstone: Provide sample code for Pilot Portal and Live Portal to deploy the AES SSO Cornerstone: Provide the AES end point URLs to the Client Client: Populate, encrypt and post the token as per Cornerstone requirements Client: Deploy, test and sign off the AES Encrypted SSO in Pilot Portal Client: Deploy, test and sign off the AES Encrypted SSO in Live Portal SAML V 1.1 OR SAML 2.0 Single Sign On (SSO) Client: Provide: SERIAL 14111-RFP Single Sign On (SSO) – AES Encrypted, SAML 1.1, or SAML 2.0 ■ Base64 encoded – X.509 public Certificate (.crt, .cer) ■ Base64 encoded sample SAML Response Assertion (.txt) Cornerstone: Configure Client’s Pilot Portal with SSO SAML 1.1 OR 2.0 Client: Review and sign off on SSO SAML 1.1 OR 2.0 in Pilot Portal Cornerstone: Configure Client’s Live Portal with SSO SAML 1.1 OR 2.0 Client: Review and sign off on SSO SAML 1.1 OR 2.0 in Live Portal Assumptions Client utilizes Cornerstone standard SSO Design Specifications and complies to Cornerstone requirements to integrate AES Encrypted SSO, SAML 1.1 SSO, or SAML 2.0 SSO only. Any other type of Single Sign On Solution Integration other than the above mentioned items is outside the scope of this project and considered a custom Single Sign On Solution. Client is responsible to make sure User Identification values (UserID, Username OR Email address) are unique and matching existing users in the CSOD portal AES Encrypted Single Sign On (SSO) Client has skilled software resources (Java or .Net programming) available who can establish an AES Encrypted SSO protocol and configure authentication to support CSOD’s AES Encrypted SSO Client has skilled software resources available who can establish an SSO SAML protocol and configure authentication to support Cornerstone‘s SSO SAML V1.1 OR 2.0 SAML V 1.1 OR 2.0 Single Sign On (SSO) Client will transfer the Assertion and Certification files to Cornerstone as per Cornerstone requirements defined on design specification document and will only transfer them through FTP folder (not email) The assertion is signed using an X.509 certificate, sha1RSA algorithm and is Base64 encoded Client acknowledges that once the design document is approved, any changes or modifications to the work scope will require creation of a Change Request document. Change requests are reviewed and could result in additional charges to the Client Any changes following Client signoff will require a Work Order or SOW submission Custom Integration Project for Requirements 28.2-28.5, 23.11 Brief Summary Scope the integration of Requirements 28.2-28.5, 23.11, and design a solution using standard integration technologies, then implement the solution. Tasks Client: provide specific business requirements for integrations referred to in functional requirements document in RFP as 28.2, 28.3, 28.4, 28.5 and 23.11 Cornerstone: Provide design document for solution using CSOD standard integration technologies Client: Review and sign off design document Cornerstone: Develop solution from design document Client: Test and sign off solution Cornerstone: promote solution to production Assumptions Client is responsible for validation of solution in test Any changes following Client signoff will require a Work Order or SOW submission TIMELINE AND DELIVERY The Implementation Services will take approximately 80-120 business days in duration and will be conducted remotely by Cornerstone, except for any outside services so expressly identified herein. Pre-approved travel expenses for on-site activities are the responsibility of Client. Per the agreed scope of the Implementation Services, Cornerstone anticipates this effort to include the professional services hours set forth below, which will be tracked and reported weekly during the project. Changes to the scope of this statement of work and/or Client delays that result in an increase to this estimate by more than 10% will require a change order, and may result in additional expense. The professional Services time will be tracked throughout the SERIAL 14111-RFP implementation and Client will be notified prior to actual hours exceeding the estimate, as well as whether a change request and SOW addendum will be required. Cornerstone delays will NOT require an SOW addendum or result in additional expense to Client. Project Components Cost System Readiness Setup SVCSIMP0001 Included Engagement Manager SVCSIMP0114 Included Learning o Learning Implementation (150 hours) Included o Competency Management Implementation Included o Certification Management Implementation Included Inbound Data Feed - OU/Users (IDF) from ADP EV5 SVCSTEC0006 Included Single Sign On Standard (SSO) using Active Directory SVCSTEC0021 Included Master Data Load - Learning (MDLL) from Pathlore SVCSTEC0009 Included Learning Historical Data Load (LHDL) from Pathlore SVCSTEC0101 Included Virtual Classroom Integration (VILT) SVCSTEC0022 Included Welcome Page – Template Design Package SVCSTEC0027 Included Custom Login Page (CLP) SVCSTEC0003 Included Custom Integration Project (CUS) for 28.2-28.5, 23.11 Included Extended Enterprise o Extended Enterprise Implementation Included Master Data Load - Extended Enterprise (MDLX) SVCSTEC0010 Included Extended Enterprise - Historical Data Load SVCSTEC0103 Included Total Additional Services Cost $255,000.00 Optional Project Components Cost Change Management Workshop SVCSBUS0006 $10,000.00 Governance Workshop SVCSBUS0003 $10,000.00 Premium Two Day System Admin Training – two sessions SVCSEDS0017 $20,000.00 Custom Course/Docs (per day/per 15 min segment) SVCSEDS0006 $8,000.00 Business Process Alignment Learning SVCSBUS0017 $33,000.00 The end of the Implementation Services is defined as the completion of the above Cornerstone deliverables as outlined under the Implementation Services section of this document. Acceptance of the deliverables will be in accordance with the Agreement. ASSUMPTIONS AND CLIENT OBLIGATIONS In order for Cornerstone to provide the Services outlined in this Statement of Work, Client shall provide the necessary resources to fulfill the obligations listed below: Project Specific Client will provide defined processes for Learning Extended Enterprise Client will document or provide functional requirements Client will utilize the Cornerstone course publisher to upload online content to the portal. All Client content is SCORM v1.2 or AICC v3.5 compliant Client is solely responsible for testing (Tracking, Completion, etc.) all content loaded to the Cornerstone portal. Client is solely responsible for testing all processes during the UAT phase SERIAL 14111-RFP Any Historical Data Load (HDL) or Data Migration not expressly listed in this Statement of Work with an accompanying price will be scoped as a separate work effort and is not included in the scope of this document Requests for application code changes are out of scope Retire Client pilot portal within 60 days after implementation; stage and live portals to remain for the term The Configuration Workshop is to determine the overall configuration decisions on workflow and set-up of the system. Cornerstone will complete a Configuration Workbook for Client documenting the configuration decisions made, the outstanding decisions to be made and the configuration tasks to be completed. Follow-up meetings will occur to assist Client with the remaining configuration decisions. The Workbook will document all decisions. Cornerstone will complete 2 versions: 1. Initial: following all design sessions 2. Final: post-UAT. Cornerstone will provide the final Configuration Workbook in Word to Client. Client can continue to update it post-delivery of completed Workbook Except where otherwise stated or agreed by the parties, Cornerstone’s obligation to perform an Implementation-related Service expires at the earlier of: (i) acceptance of the Service by Client; (ii) if Client does not commence the project, one year from the purchase date; or (iii) if Client commences the project but subsequently does not proceed with the project, six (6) months from the date Client ceased working on the project. Business Consulting – Change Management Workshop Brief Summary Business Consulting services are focused on ensuring our Clients are positioned to successfully deploy Cornerstone OnDemand’s Integrated Talent Management System across the Client’s enterprise. The Change Management Workshop includes the following phases and deliverables: Phase Cornerstone Deliverables Client Deliverables Provide Client Change Management questions for Determine change management Pre- consideration. team Workshop Host workshop planning call Review questions for Review Client’s feedback to prepare for workshop consideration Review the organization to understand the affected populations Facilitate onsite workshop including: Provide representative Workshop Define success metrics for the program organization unit support to Define deployment expectations attend in person Establish ongoing plan for project controls Participate in onsite workshop Review past experiences Complete audience analysis Identify barriers to the change Review process for Client completion of impact analysis Establish building blocks for message creation Build communication, marketing and training draft plans SERIAL 14111-RFP Business Consulting – Change Management Workshop Brief Summary Business Consulting services are focused on ensuring our Clients are positioned to successfully deploy Cornerstone OnDemand’s Integrated Talent Management System across the Client’s enterprise. The Change Management Workshop includes the following phases and deliverables: Package and deliver workshop documentation, including As needed, complete the Post Success metrics draft impact analysis process to Workshop Expectations draft further understand resistance, Audience list influencers, communication, Impact Analysis question matrix template marketing, and training needs Concise message bullets by audience Communications plan draft Finalize and distribute success Marketing plan draft metrics Training plan draft Finalize and distribute deployment expectation goals Finalize communication plan, build messages, and execute Finalize marketing plan, build marketing strategies, and execute Finalize training plan, build training methods, and execute Monitor plans and adjust as needed Assumptions This project will take approximately 10-15 business days in duration to complete This project will be conducted remotely unless specified above as onsite activities Travel related expenses for onsite activities are the responsibility of the Client Business Consulting – Governance Workshop Brief Summary Business Consulting services are focused on ensuring our Clients are positioned to successfully deploy and maintain Cornerstone OnDemand’s Integrated Talent Management System across the Client’s enterprise. The Governance Workshop is intended to create a framework for effective decision making during implementation and ongoing use of the platform. The workshop includes the following phases and deliverables: Phase Cornerstone Deliverables Client Deliverables Discovery questionnaire delivered to Client Complete the discovery Pre- Host workshop planning call to identify participants and questionnaire including Workshop timing Current state governance Review Client-provided documentation and feedback to structure prepare for workshop organizational Potential changes Talent Management environment Coordinate schedules for identified participants to attend workshop SERIAL 14111-RFP Business Consulting – Governance Workshop Facilitate onsite workshop to develop a governance Ensure participation in onsite Workshop framework workshop including: Establish a governing body sponsor Program Establish a governance process for : Business unit representation Best practices for configuration standards development manager Project Configuration or permission change request processing Administrators Key Stakeholder communication mechanisms Establish governance manager(s) Configuration standards decision point review to own implementation decision Global platform functional decisions governance and governance functional decisions operations going forward Cloud-specific Identify and empower decision Centralized administrator vs distributed administrator maker(s) by business unit functional permissions decisions during implementation and Create draft action plan for the ongoing execution of the beyond governance framework Deliver updated workshop deck (PPT) to include Implement governance Post Workshop Governance body framework Establish a regular meeting Governance processes schedule Configuration standards Configure recommended Action plan and recommendations security roles and permission settings during implementation Assumptions This project will take approximately 10-15 business days in duration to complete This project will be conducted remotely unless specified above as onsite activities Travel related expenses for onsite activities are the responsibility of the Client Premium Two Day System Admin Training – Onsite or Live Webcast Brief Summary Cornerstone will provide a two day training customized to the clients portal configuration for Client System Administrators delivered either onsite or via webcast. Tasks Cornerstone will conduct two consecutive full days of training (eight hour day with a one hour lunch break) onsite at client’s location. These can also be delivered as two full day or four 3.5 hour webcast sessions at the client’s discretion. The Client can select specific topics to include in the training agenda from an options menu. The training session will be conducted using the client’s portal and configuration, including demonstrating functionality and creating customized versions of hands on exercises specifically for the client’s portal. Word versions of customized exercises will be provided to the client and can be used by the client in any capacity. No other material will be created or provided. The Client will provide User ID’s in one security role for the trainer and for class participants to use for the training sessions. The client will also ensure that the portal to be used for training is updated or copied down with the configuration and security roles needed to conduct the training. The Client will provide specific examples or use cases for the training consultant to incorporate into the training. Assumptions The Client will provide an appropriate room for the training to be conducted. The delegates will require their own workstations with internet access. The training consultant will bring their own laptop but will need to connect to the internet and to a projector client provides. Travel costs are additional and based on round trip travel from a pool of available training consultants and vary depending on their base location. Training can be conducted either live onsite or via live webcast at client discretion, however live webcast cannot be conducted simultaneously with live onsite training. SERIAL 14111-RFP Premium Two Day System Admin Training – Onsite or Live Webcast Webcast sessions may not be recorded. A date will be agreed upon for the Training Consultant to prepare the exercises for the client’s stage or pilot portal, as well as a date for the actual delivery of the training. Between these two dates no copy down from Production to either stage or pilot can be performed, as this would overwrite any preparatory work done by the Training Consultant. Business Consulting – Business Process Alignment Learning Brief Summary Business Consulting services are focused on ensuring our Clients are positioned to successfully deploy Cornerstone OnDemand’s Integrated Talent Management System across the Client’s enterprise. The Business Process Alignment project is designed to identify/ review the Client’s current state and recommend leading industry practices to move Client to the next level while aligning to the Cornerstone system capabilities. An outcome of this project will be the documentation and discovery materials (business requirements) needed to build a recommended configuration during implementation. The project may include the following Learning business processes: Catalog Management Instructor Led Training Administration Compliance / Certification Management Curricula Management Approval Workflow Custom Training Programs Phase Cornerstone Deliverables Client Deliverables Request current state documentation Attend planning call Pre-Discovery Host Discovery Workshop Planning Call Provide current state review Workshop Review Client’s documentation in preparation for with documented processes and workshop supporting forms Determine participants for Discovery Workshop Facilitate an onsite discovery workshop including: Participate in onsite discovery Discovery Review of current state process workshop including: Workshop Gather /collect requirements and supplemental materials Business unit / process owner representatives attendance Decision maker attendance Package initial draft of Cornerstone Deliverables Provide support / answer Process Analysis & Business Process Alignment report containing: questions as needed for Design ■Current Situation Cornerstone to complete draft ■Business Issues deliverables ■Relevant Leading Practices Receive Cornerstone draft ■Requirements and Fit/Gap deliverables and prepare for ■Recommendations process review meeting ■Implementation Considerations ■Use Cases ■Reporting Recommendations Process Maps Distribute documentation to Client Coordinate / schedule process review Facilitate a remote process review meeting via WebEx Participate in review meeting Process session Review Review Report and Process Maps Capture any feedback and adjust documents if needed SERIAL 14111-RFP Business Consulting – Business Process Alignment Learning Revise and distribute deliverables if needed Review / Approve Deliverables Post -Review Business Process Alignment Report Process Maps in MS Visio format Assumptions This project will take approximately 20-30 business days in duration to complete This project will be conducted remotely unless specified above as onsite activities Travel related expenses for onsite activities are the responsibility of the Client EXHIBIT B-2 PROJECT PLAN SERIAL 14111-RFP SERIAL 14111-RFP SERIAL 14111-RFP EXHIBIT C SERVICE LEVEL AGREEMENT (STANDARD) This Service Level Agreement is subject to the terms and conditions of Client’s agreement with Cornerstone (the “Agreement”), and does not become operative until Client has signed off on Implementation and Client's portal is live on Cornerstone's production environment. For clarity, this Service Level Agreement applies only to “live” portals. DEFECTS A "Defect" is a technical defect with the Cornerstone application and/or those portions of software integrations within Cornerstone’s control. Defects fall into two general categories: major (Severity 1 and Severity 2) and minor (Severity 3). The "Severity" of a Defect is determined by Cornerstone, subject to the following definitions and parameters. Major Defects Severity 1 (S1): A Defect that results in at least one of the following: (i) the Cornerstone URL produces no results, or (ii) Client's authorized users cannot log in to Cornerstone's application after repeated attempts. "Severity 1" does not include downtime for maintenance. Severity 2 (S2): A Defect that results in any of the following: (i) an entire application module (e.g., Learning Cloud, Performance Cloud, Extended Enterprise Cloud, etc.) is inaccessible; (ii) no course is being delivered; (iii) no queue will process any transactions; (iv) no report within the application produces any data or the data has not been refreshed in fewer than twenty-four (24) hours; or (v) no tasks will launch. S1 S2 Initial One (1) hour via an Incident Report Notification Status Updates Every two (2) hours until resolution or as indicated in the Incident Report Resolution Twelve (12) hours Twenty-four (24) hours In the event that Cornerstone has not complied with its "Resolution" obligations set forth above, then, for each calendar day (or portion thereof) that Cornerstone has not so complied, Client shall be entitled, as its sole and Remedy exclusive remedy therefor, to a credit against Client's next invoice equal to 1/365th of the annual fees for Software set forth in the Agreement. Minor Defects Severity 3 (S3): A Defect in one or more application features. For "Severity 3" Defects, Client determines its priority in having the Defect resolved (i.e., Priority 1 (P1), Priority 2 (P2), or Priority 3 (P3)). Any issue not clearly labeled "Priority 1" or "Priority 2" by Client at the time of initial submission will be deemed a "Priority 3" issue. As a guideline, below are some examples of the three priority levels: Priority 1 = A prominent feature I routinely use that is important to my business, where multiple users are prevented from progressing with important tasks. There is no work-around. “I get mad whenever I think about it not working.” An example: The submit button on a task is greyed out and a user cannot submit a performance review. Priority 2 = A feature that is annoying when it doesn’t work, but multiple users are not prevented from progressing with important tasks. A work-around exists. “I get annoyed but can deal with it not working.” An example: Users' transcripts do not accurately reflect course completions. A temporary work-around is available via Cornerstone manually running reports for the client to access this data. Priority 3 = A feature issue that is neither Priority 1 nor Priority 2, including without limitation, cosmetic issues with the application. “I can deal with it.” An example: An image is scaled too large on certain printed transcripts. S3/P1 S3/P2 S3/P3 Case Upon submission Generation Twenty-one Diagnosis/ Six (6) Four (4) days (21) business Validation business days days Status Available 24/7 via MySuccess Updates Within a T Sixty (60) Resolution reasonable time h calendar days period i A Client business stakeholder (i.e., not a Client administrator) may escalate an S3/P1 defect to the Global Product Support Manager with a Escalation N/A N/A written statement of business impact relating to the Defect. Cornerstone may agree to shorten the resolution time for the Defect following an In the event that Cornerstone has not complied with its "Resolution" obligations for S3/P1 and S3/P2 set forth above, then Client shall give Cornerstone prompt, written notice of such non-compliance. If, after five (5) business days from receipt of such Remedy N/A notice of non-compliance, Cornerstone still has not resolved the problem, then Client shall be entitled, as its sole and exclusive remedy therefor, to a one- time credit** against Client's next invoice equal to 1/365th of the annual fees for Software set forth in GENERAL QUERIES Cornerstone endeavors to respond to all general queries about the application within one (1) business day. OFFLINE PLAYER AND MOBILE SUPPORT For Offline Player, Cornerstone support is limited to troubleshooting one model PC in Client’s environment that meets the minimum technical requirements specified by Cornerstone (requirements available in the Cornerstone Success Center). It is the responsibility of the primary administrator to ensure all other machines in their environment conform to the model PC requirements. Should Client desire troubleshooting assistance with issues other than on the model PC, Cornerstone may be available to provide support services for an additional fee. Client agrees to provide WebEx access (or other means of remote diagnostics) to the model PC upon request to aid troubleshoot efforts. Cornerstone will periodically release new versions of Offline Player and its mobile applications. Accordingly, technical support will be available for the then-current version and immediate prior version only. In addition, if a code change or update is required to resolve an issue, Client may be required to upgrade to the then-current version. Client’s primary administrator is responsible for ensuring that the Offline Player and mobile applications are kept up-to-date, including applying available software updates. SOFTWARE AVAILABILITY Cornerstone will provide at least 99.5% availability per calendar month to Software (excluding reasonable and scheduled maintenance periods, which usually occur at or after 5:30pm US Pacific Standard Time on Fridays). In the event that Cornerstone has not complied with this Software availability obligation, then, for each 0.3% (or portion thereof) of availability below 99.5%, Client will be entitled, as its sole and exclusive remedy therefor, to a credit** against Client's next invoice equal to 1/365th of the annual fees for Software set forth in the Agreement. **To claim a credit, Client must submit a credit request within thirty (30) days of the event giving rise to a credit. Upon receiving the request, Cornerstone shall have five (5) business days to respond. SERIAL 14111-RFP EXHIBIT D VENDOR RESPONSE MATRIX (NON-FUNCTIONAL REQUIREMENTS) Mandatory Vendor Requirement Business Requirement “M” or Non- Meets Vendor Req. No. Category Area Description Mandatory “Yes”, “No” Comment(s) “N” or “Partial” 1.0 SUPPORT, MAINTENANCE, AND WARRANTY Cornerstone OnDemand is committed to providing clients unparalleled support to maximize our solutions. The Global Product Support team is focused on ensuring the day- to-day success of your Cornerstone solution owners and administrators by: • Providing frontline support The Respondent on will provide feature/function support to questions to Maricopa County ensure your for application use effective use of Support , and technical the application Maintenance, and Support 1.1 M Yes support including • Conducting Warranty the reporting of initial diagnosis issues, and on technical emergency issues resolution • Managing the 24x7x365. scoping, tracking, and delivery of requests for standard engineering services through a case • Communicating with you on the progress of any product issues through to resolution • Researching complex issues with internal subject matter experts to provide you with solutions The County will SERIAL 14111-RFP have 24x7 access to self-service resources in the Cornerstone Success Center, an online knowledge base and customer community. Here you can self-assist or seek best- practice advice from Cornerstone subject matter experts and peer organizations. Cornerstone offers four support packages with varying levels of access, availability, and services for a wide range of organizations. Professional support (which the majority of our clients use) is included in the software subscription fee at no additional cost and includes 24x5 live support during the week. In addition, clients can submit an unlimited number of cases and have 24 hour visibility to those cases through our online portal, MySuccess. For those clients who have complex, business-specific requirements that require more comprehensive support for a globally distributed workforce, we also offer a Professional Plus, Premier, and SERIAL 14111-RFP Premier Plus support package (at an additional cost). Depending on the package chosen, services can include named Support Specialists, enhanced service levels, and 24x7 live support. The Respondent will provide helpdesk services for ticket Support , Please see submission for Maintenance, and Support 1.2 M Yes attached, Standard issues and/or Warranty SLA. service request by Maricopa County to Respondent with agreed upon SLAs. Cornerstone OnDemand performs software upgrades referred to as “releases” four times per year. Releases contain both new functionality and defect (a.k.a. “bug”) fixes. The Respondent Minor releases will provide (service patches) upgrades/patches/fi generally occur xes/workarounds as every two weeks. required to A calendar of maintain secure, upcoming release Support , reliable, redundant, and patch dates is Maintenance, and Support 1.3 access including M Yes published on our Warranty the ability for the client portal, County to Success effectively and Center.System efficiently utilize upgrades are the application to deployed conduct County instantaneously to business. all customers – no patches, no lagging behind versions – and at no additional cost. Since Cornerstone is a Software-as- a-Service, only one active code exists. There is no need for a client to opt-out of a SERIAL 14111-RFP release. If new release functionality is not germane to a client’s project scope, the new features are delivered in the “off” position where they will remain until such a time as the client deems them appropriate. Every client will have the opportunity to review and critique new upgrade functionality through product specs and the online staging environment. SERIAL 14111-RFP 2.0 PERFORMANCE Cornerstone provides an SLA for all clients that guarantees initial response and resolution in regards to defined priority and severity levels. Cornerstone’s SLA also guarantees 99.5% uptime (excluding reasonable and scheduled The Respondent maintenance must ensure that periods) per any information month. Uptime is systems required measured by for proper Keynote, an functioning of the external third hosted application party monitoring have 24x7x365 service that uptime with the executes a exception of synthetic login scheduled and and tracks coordinated whether the downtime windows attempt succeeded Availabilit Performance 2.10 with the M Yes or failed for any y Respondent reason. Any Uptown communicated measurements must and scheduled be met for all downtime is servers, and their removed from the connectivity to the calculation. Using Internet or an external dedicated service that connection to the connects from the County, whichever internet ensures is applicable to that the uptime ensure application number accurately availability. reflects the customer experience.Downt ime is scheduled for planned quarterly releases at least 4 months in advance and deployed during off-peak hours, typically 8:30PM EST Fridays to 1AM EST Saturday (4.5 hours). Patch fixes typically SERIAL 14111-RFP occur every two weeks between 8:30PM EST and 12:00AM EST. The typical downtime for a patch deployment is approximately 10 minutes.Client administrators can access a calendar of upcoming release and patch dates at any time through our client portal, Success Center. In addition, multiple email reminders are sent in advance. The Cornerstone application, as per the Software-as-a- Service model, is designed to scale horizontally. It is multi-tenant- efficient, offering a load balanced farm of identical instances known as swim lanes. When additional server equipment is added, the application The proposed capacity scales to application must fill the available User allow for 1000 hardware.This Performance 2.20 Yes Capacity users at peak times allows virtually and 250 users at unlimited growth average times. capacity. There is also no practical limit to the number of concurrent users.As opposed to a classical behind the firewall or hosted architecture, our application and our hardware platforms are designed to:• Efficiently support a high number of users SERIAL 14111-RFP and customers• Redistribute load easily• Add additional capacity easily and quicklyWe manage capacity proactively by in- depth monitoring of system utilization and address any growth trends by optimizing software, rebalancing clients across swimlanes, or by adding and upgrading hardware. We support multiple client deployments of over 150,000 users, including three with over 350,000 users. Currently, Cornerstone provides services to 16.6 million active users per year with a scalable configuration that is virtually unlimited. SERIAL 14111-RFP 3.0 SECURITY / HOSTING Password policy is configurable by the client. Password preferences allow client administrators to specify a variety of options and requirements for passwords including:• Require both upper and lower case letters• Require user to reset their password by answering XX number of security questions• Send email notification The system must to user upon support strong password change• password policy Require enforcement, such confidential as mixed case, password reset Authentic Security 3.1 numerals, and non- M Yes and send email ation alphanumeric notification to characters. user• Require Password should alpha and numeric expire after 60 characters• Do not days. allow three or more consecutive same characters • Require at least one special character (e.g., !, @, #, $)• Expire passwords every XX days• Passwords cannot be the same as any previous XX passwords• Set minimum password length• Set maximum password length • Forgot password message (clients can define message that is displayed)Differe nt password requirements can SERIAL 14111-RFP be established by Organizational Unit. The system must System lockout is support the ability configurable by to disable or lock the client. This Authentic Security 3.2 out user accounts M Yes relates to ation after a given password number of login preference failures. options. The session state that is maintained for a user will be deleted after a default 30 minutes of inactivity. However, this is a client configurable option. If the user The system must times out after a not allow for user credential sessions that have authentication, expired after a they will be designated period returned to the Authentic Security 3.3 of inactivity, or M Yes login page with a ation have been timeout message. manually closed, to If they were regain access signed-on using without explicit re- Single Sign-On, authentication. they can optionally be returned to a URL as specified in the security token of the authentication, or to the Cornerstone default timeout message (no logon page). SERIAL 14111-RFP Cornerstone supports any role that a client may require. Clients configure their own roles based on their organizational needs.The application is The system must entirely rights and allow for Maricopa roles-driven. The County to application administer features hundreds application users of security and groups, and permissions, assign security related to the privileges to those Authorizat thousands of Security 3.4 users or groups, M Yes ion features, which thereby controlling can be configured user access to the to roles or various screens and individual users. reports that These permissions comprise the are all stored as application when part of the user’s proper privileges information. are applied. Cornerstone rights and permissions system, in tandem with the Organizational Units approach, means that clients can develop virtually any type of role. The Respondent Cornerstone’s must report all Security Incident suspected breaches Response Plan to the County clearly defines the immediately and in Breach appropriate steps writing. The Security Notificati 3.5 M Yes and processes in Respondent must on communication. also fully cooperate Clients will be with any County notified within 24 investigation into hours of the the breach, unless identified issue. prohibited by law. Should a breach of the hosted service occur, the Respondent must Upon down- Breach bear the full cost of selection this Security Notificati 3.6 breach notification M Partial requirement will on and any follow-up be negotiated services. Follow-up further. services include, but are not limited to, credit SERIAL 14111-RFP monitoring of affected individuals. Should a breach of the hosted service Upon down- Breach occur, the selection this Security Notificati 3.7 Respondent shall M Partial requirement will on pay all fines be negotiated associated with the further. breach. Breach notification requirements shall be determined by all applicable laws We comply with and contracts breach including, but not notification, but limited to, Arizona not through Breach Revised Statutes Not HIPAA, as the Security Notificati 3.8 M 44-7501, California applicable. application does on SB 1386, the not house Health Insurance healthcare related Portability and information for Accountability Act users (HIPAA), and Payment Card Industry (PCI). The Respondent shall make the information in the Upon request, the Breach security incident County can be Security Notificati 3.9 response policy M Yes granted access to on and procedure the security available to the policy. County at any time upon request. SERIAL 14111-RFP Cornerstone works with each client on an individual basis to determine what regional privacy laws are applicable to the services we provide and/or of concern to the client. Cornerstone maintains data centers in both the United States and the European Union. Where appropriate, Cornerstone enters into local data processing agreements. The Respondent Cornerstone must apply with all consults with applicable laws, legal and other regulations, and resources as contracts including needed to ensure (but not limited to) compliance with Complian Criminal Justice Security 3.10 M Yes applicable local ce Information laws. Systems (CJIS), Cornerstone’s Health Insurance security practices Portability and are audited on an Accountability Act, annual basis by an and Payment Card independent third Industry (PCI). party to verify compliance with stated security measures.The HIPAA Rules apply to covered entities and business associates. Our system has no interaction with Protected Health Information (PHI). Therefore, we are not considered a covered entity. We are willing to explore this issue further if you deem it necessary.Paymen t Card Industry SERIAL 14111-RFP regulations require that Cornerstone be in compliance with the PCI Security Standards. Cornerstone does hold minimal transaction information but does not retain primary account number (PAN), service code, magnetic stripe data, CAV2/CVC2/CV V2/CID, or PIN data. Cornerstone is categorized PCI Level 4 SAQ D under the Payment Card Industry Data Security Standards. Standards include: building and maintaining a secure network, protecting cardholder data, and maintaining an information security policy.• Cornerstone takes the following measure to remain in compliance with PCI: • Completes an annual self- assessment questionnaire (SAQ).• Completes and obtains evidence of a passing monthly vulnerability scan with a PCI SSC Approved Scanning Vendor (ASV). A certificate of compliance is updated on a quarterly basis and made SERIAL 14111-RFP available to clients upon request• Completes the relevant Attestation of Compliance in its entirety (located in the SAQ tool).• Submits the SAQ evidence of a passing scan (if applicable), and the Attestation of Compliance, along with any other requested documentation, to our primary payment processor (Cybersource). The Respondent Upon request, the must make County can be compliance reports, granted access to audit findings, and Complian these items. For Security 3.11 3rd party M Yes ce instance, clients attestations can request copies available at any of penetration time to the County reports as needed. upon request. The Respondent must immediately notify the County, Cornerstone can in writing, upon a make audit confirmed violation findings available Complian of the compliance Not Security 3.12 M upon request. This ce requirement. The applicable. question requires notification must further include any clarification. information provided by the regulatory body. The HIPAA Rules Respondents that apply to covered host applications entities and containing HIPAA- business protected data must associates. Our enter into a system has no Business Associate interaction with Complian agreement (as Not Protected Health Security 3.13 M ce defined by HIPAA) applicable. Information with the County. (PHI). Therefore, The Business we are not Associate considered a agreement must be covered entity. maintained for the We are willing to life of the contract. explore this issue further if you SERIAL 14111-RFP deem it necessary. Cornerstone is a multi-tenant, multi-user, on- demand application The Respondent providing true shall provide Software-as-a- connectivity to the Service (SaaS) Internet or use delivery. There Virtual Private are no hardware Networking requirements. Connectiv (VPN), whichever Clients do not Security 3.14 M Yes ity is appropriate. The maintain software County shall not be or provide financially network responsible for administration. networking The application equipment at the can be securely Respondent site. accessed 24x7 by all users through any internet connected computer with a standard browser. Client applications installed on user workstations that must contact the off-site hosting The Cornerstone environment must application is not Connectiv be able to do so Not installed on user Security 3.15 M ity through HTTP applicable. workstations. proxy architecture. Cornerstone is a Workstations must SaaS. not be required to directly connect over the Internet for any reason. SERIAL 14111-RFP Cornerstone OnDemand has multiple types of encryption ensuring that data is protected both at rest and while in transit. The Cornerstone application is secured with 128- bit SSL encryption of HTTP traffic. The certificates used to encrypt the traffic are issued from publically Hosted applications trusted certificate must support authorities. All encrypted protocols information is for sensitive data. encrypted all the Preferred way from the encryption client, through the protocols are Akamai network Secure Sockets and into our Layer (SSL) and servers. For file Internet Protocol transfer, Security (IPSec). Cornerstone Connectiv Security 3.16 Encryption ciphers M Yes supports FTP, ity must use at least a SFTP (FTP over 128-bit key length. SSH), and FTPS Hashing algorithms (FTP over SSL). used must be of the File transfers are Secure Hash secured using Algorithm (SHA) SFTP or FTPS family. The encryption. minimum Authentication for acceptable file transfers can algorithm shall be be accomplished SHA-1. by either username/passwor d or PGP certificates. The certificate used to encrypt the FTPS traffic is issued from a publically trusted certificate authority. SFTP is the recommended protocol. For clients that elect to add encryption at rest onto their contract, Cornerstone offers the ability to encrypt database SERIAL 14111-RFP files using AES- 256 encryption. The databases files are encrypted using Microsoft’s TDE (Transparent Data Encryption) technology. This ensures that the databases and all associated files are encrypted at rest, including any backups written to disk as well as the transaction logs. The keys used to encrypt the databases are stored on NIST/DOD FIPS 140-2 Level 3 certified USB storage keys. These keys are held by select members of the operations team and kept offsite. Each key is secured with a PIN only known to the key holder. In the event of a lost key or PIN, the keys are retrieved from an alternate key holder. Lastly, SHA-2 is used for SSH FTP. The system must Each client has its keep all Maricopa own independent County data database for their segregated from live, pilot, and other Respondent stage portals. Data client(s) data in is never shared that it must not be across tenants. stored in the same Each client's Security Data 3.17 database. And if M Yes database is fully hosted within the segregated from same database other clients as instance or server, each client’s proper security portal is only mechanisms must accessible to the be in place to client's users and prevent un- authorized authorized access Cornerstone SERIAL 14111-RFP to Maricopa support personnel. County's data. No third parties have direct access No County data to a client's data. will be transferred Data will not be or made available shared with any to a 3rd party in third party. Please Security Data 3.18 unencrypted form M Yes see attached, without the Cornerstone express, written Master consent of the Agreement, for County. additional information. The Company operates two data No County data centers which are will be transferred located at Equinix or transmitted collocation outside the United facilities in El Security Data 3.19 States for any M Yes Segundo, reason without the California and express, written London. The consent of the County’s would County. be stored at our California location. Cornerstone's backup procedures can be provided to clients. However, logs are not. Cornerstone performs daily An industry- backups of the recognized backup full database and methodology must hourly be employed, transactional including the use of backups to off-site storage. separate hot disks. Security Data 3.20 The Respondent M Partial Two days of hot must make backup backups are stored procedures and on a local SAN logs available at disk for any time upon immediate request from the recovery. County. Cornerstone performs full backups and daily differential backups of our data onto tape. Daily backups are stored for one week, weekly backups for five SERIAL 14111-RFP weeks, and monthly backups for six months. All backups are encrypted before they are written to tape and reside in an encrypted mode on the tapes (AES-256). Iron Mountain collects tapes each week and transports them in locked boxes to a secure vault. Cornerstone uses Iron Mountain locations in Compton, California facility and Cowley in Oxford, UK Backups to removable media must be encrypted using the Advanced Encryption Standard (AES) Cornerstone's key with a minimum of handling a 128-bit key. procedures can be Industry provided to recognized key clients. However, handling logs are not. All procedures must be Security Data 3.21 M Partial backups are utilized. At no time encrypted before will the key be they are written to stored on the tape and reside in backup media in an encrypted clear text, mode on the tapes including but not (AES-256). limited to table labels. The Respondent must make key handling procedures and logs available upon request. SERIAL 14111-RFP Backup tapes are encrypted and overwritten over after designated retention period The Respondent effectively wiping shall destroy all the current data offline copies of stored. Any tapes County data at the containing client time the data data are Security Data 3.22 ceases to be useful. M Yes physically Destruction destroyed once no procedures must be longer in service. made available to the County upon Cornerstone's request. "Media Disposal and Reuse Policy" can be provided to clients upon requst. In the event that a client does not renew their contract, Cornerstone will return the client’s data via their secure FTP site in the same format in which the data At the conclusion was originally of the contract, all inputted into the Maricopa County software. data and working Alternatively, the papers must be client’s data can returned to the be returned in a County and all mutually agreed Respondent copies format at a scope destroyed. The and price to be Security Data 3.23 M Partial Respondent must agreed. confirm in writing Cornerstone will to the County that maintain a copy of all data was the client data for destroyed in no more than six accordance with months following this agreement and termination of the state the agreement, after methodology used. which time any client data not retrieved will be destroyed. Cornerstone can confirm in writing if required. Written confirmation of destruction is not standard. SERIAL 14111-RFP The Respondent must maintain a non-disclosure agreement (NDA) Please see Employee with the County. Security 3.24 M Yes attached, Mutual s All employees of NDA. the Respondent must maintain an NDA with the Respondent. All candidates who are made formal offers of employment with Cornerstone OnDemand are required to undergo a background check before becoming All employees of an employee. the Respondent Additionally, must pass a federal, current employees state, and local who move into a criminal new role may also background check. require an Any employee who additional fails the background check background check depending on the will not have any new role.This access to County screening process Employee data unless Security 3.25 M Yes verifies the s specifically following authorized by information:• Maricopa County Criminal Felony in writing. The & Misdemeanor• Respondent will Educational make personnel Report• and background Employment check procedures History• available for Professional inspection at any Reference Check time upon request Report• SSN from the County. Trace• SSN ValidationPersonn el and background checks procedures can be provided to clients upon request through our "Human Resources Security Policy". SERIAL 14111-RFP Sensitive information such as social security For those projects numbers, health and contracts information, bank where Maricopa account numbers, County has etc. is not required provided data to by Cornerstone. enable the The application Respondent for stores a number of contracted services configurable pick or products, unless list and freeform otherwise specified values as part of and agreed to in the user data writing by including: user Maricopa County, ID, name (First, Respondent shall Middle, Last, treat, control, and Suffix), email limit access to said address, phone, information as fax, original hire confidential and date, last hire under no date, username, circumstances division, position, release any data grade, cost center, provided by location, manager, County during the approver(s), term of this required training agreement and approvals, thereafter, language, and including but not Security Hosting 3.26 M Yes many limited to personal customizable identifying fields. information as Other personal defined by A.R.S. information § 44-1373, and is depends on the further prohibited functionality a from selling such client uses such as data directly or training data, through a third performance party. Upon reviews, and termination of the compensation associated numbers. agreement or Additionally, no completion of the third parties have required direct access to a contractual intent, client's data. Data whichever occurs will not be shared sooner, Respondent with any third shall either return party. Please see all data to County attached, or shall destroy Cornerstone such data and Master confirm destruction Agreement, for in writing in a additional timely manner not information to exceed 60 In the event that a calendar days. client does not renew their contract, SERIAL 14111-RFP Cornerstone will return the client’s data via their secure FTP site in the same format in which the data was originally inputted into the software. Alternatively, the client’s data can be returned in a mutually agreed format at a scope and price to be agreed. Cornerstone will maintain a copy of the client data for no more than six months following termination of the agreement, after which time any client data not retrieved will be destroyed. Cornerstone contracts leading information security consulting and services companies such as iSEC Partners to run external penetration tests All hosted against our solutions must be staging, pilot, and audited by a third production party at least once environments. per year. The Full penetration Respondent must tests are executed Security Hosting 3.27 provide attestation M Yes on a quarterly by a 3rd party (e.g., basis. SAS 70 Type II or Additionally, SSAE 16 SOC 2 monthly external Type 2) at any time vulnerability upon the County's scans validate request. both the patch level and protection from known attacks, and numerous penetration tests are run on a regular basis.Upon request, the SERIAL 14111-RFP County can be granted access to said documents. For login access, The system must Cornerstone log all material tracks the user actions, Username, login Security Logging 3.28 M Yes including but not time, and IP limited to, logon address. All audit and log off. history is stored indefinitely. The system must Cornerstone log all material maintains an audit administrator history for user actions, including record changes, but not limited to, learning object Security Logging 3.29 M Yes user creation, user changes, task deleting, password completions, and resets, and other functionality privilege level throughout the changes. application. The system must Security Logging 3.30 log failed login M Yes Comply. attempts. Much of this information is available to the administrator via Logs must be made reports, allowing Security Logging 3.31 available to the M Partial ad-hoc review. County at any time. More extensive requests can be scoped on an as needed basis. Symantec Anti- virus protection has been implemented on the server and workstation levels All servers used in to protect the hosting of company application applications and components for use data from by Maricopa infection by County must have malicious code or Security Risk 3.32 active, industry M Yes viruses. It is setup recognize, virus to send alerts protection software directly into the enabled on each DEFCON alerting server with system any time a frequent virus virus or piece of pattern updates. malware is found on any system. The Cornerstone I.T. team ensures that the latest releases of SERIAL 14111-RFP Symantec anti- virus protection software are in use and updated/pushed to the user community. The anti-virus signature on all machines is updated regularly, on at least a daily basis. Cornerstone OnDemand contracts leading information security consulting and services companies such as iSEC Partners to run external penetration tests against our staging, pilot, and production environments. Full penetration All applications tests are executed that host Maricopa on a quarterly County data must basis. undergo a risk Vulnerability assessment at least classes tested for twice per year. The include the risk assessment following:• Cross Security Risk 3.33 M Yes must include Site Request system and Forgery (CSRF)• application testing. Cross Site The results must be Scripting (XSS)• made available to Command the County upon Injection request. (including SQL, LDAP, and OS command injection)• Server Side Includes (SSI) Injection• Forced Browsing• Format String Vulnerabilities• Response Splitting• Directory Traversal and Data Exposure• SSL Cipher Strength Analysis• Cookie SERIAL 14111-RFP Analysis• HTTP Method Analysis• Hostile Link attacks• Cookie Injection Attacks• Session Fixation• Session Management (Subversion, Timeouts/Logouts )• Vulnerabilities Within the Username/Passwo rd Recovery MethodBoth automated testing and manual validation is performed. Additionally, monthly external vulnerability scans validate both the patch level and protection from known attacks, and numerous penetration tests are run on a regular basis.Results are provided to Cornerstone I.T. personnel for review and remediation purposes. Clients can access the patch schedule at any time through the client portal, Success Center. Clients can request copies of penetration reports as needed. SERIAL 14111-RFP Cornerstone maintains a Security Incident Response Policy and an Incident Management SOP in order to organize resources to respond in an effective and efficient manner to an adverse event related to the safety and security of a computer resource The system must under proactively monitor Cornerstone’s for outside threats, management. An including but not adverse event may limited to, denial of be malicious code service attacks, attack, Security Risk 3.34 M Yes cross sight unauthorized scripting, and SQL access to injection and Cornerstone invoke alerts when managed this type of activity networks or if identified. systems, unauthorized utilization of Cornerstone services, denial of service attack, or general misuse of systems. The plan clearly defines the appropriate steps and processes in communication. Clients are notified within 24 hours of the identified issue. SERIAL 14111-RFP EXHIBIT E, VENDOR (VENDOR RESPONSE MATRIX, BUSINESS REQUIREMENTS) Respondent’s Statement of Compliance with RFP Specifications Respondent: RFP Section: 14111-RFP 1) Respondent shall indicate compliance or exception to each requirement. If exception, a reason and an alternative must be provided. 2) Respondents shall indicate Requirement Core Delivered/ the feature being provided is a Requirement Comply/ Section/ Configurable/ Custom/ Standard feature, requires Description Exception Subsection 3rd Party Customization, or is being provided by 3rd Party equipment or software. 3) Failure to respond to every requirement may cause the Respondent's proposal to be deemed non-responsive. Reason for exception and (Choose (Choose one) alternative to specification one) requirement. 1.1 Enrollment Management Once a user finds a learning event or object, they would click on the ‘Request’ button. Request training is the process that enables users to instantaneously Uses a simple request all types of training, process for automatically solicit the 1.1.1 learner Comply Core Delivered necessary approvals, and initiate registration/enr the appropriate registration ollment process. Training approvals, waitlists, prerequisites, pre-work, interest tracking, and registrations all begin with one click to request/register/enroll in training. The County can configure your workflow based on your Allows learners organizational needs whether it’s 1.1.2 to auto-enroll Comply Core Delivered self-registration (auto-enroll), for courses manager assigned registration, or proxy enrollment. Cornerstone's waitlist feature can be auto-managed by the system, Waitlist manipulated by the 1.2 Comply Core Delivered Management administrator/instructor, or set as first come first serve when the waitlist is opened. Ability for the admin to Waitlist functionality is highly configure the Core configurable including 1.2.1 Comply number of Delivered/Configurable configuring the number of users learners in the on the waitlist. waitlist SERIAL 14111-RFP Waitlist functionality is highly configurable at both the Event and Session level. Options Learners are include: first on / first off, added to the everyone notified but first waitlist by first Core come/first serve, and time based 1.2.2 come, first Comply Delivered/Configurable releases (i.e., notify waitlist served logic participants one-by-one at (enrollment intervals defined date/time) administratively). Similarly, administrators can manually reorder the priority of the list. Cornerstone includes automated waitlisting functionality, which can be auto-managed by the system, manipulated by the admin/instructor, or set as first come first serve when the waitlist is opened. A user who tries to register for a full session can request to be put on the waitlist. From their personal homepage, users can access their waitlist Automatically widget. Theuser can view the date places learners requested and the position in in wait lists if which they are on the waitlist. courses are full, The user also has the ability to 1.2.3 Comply Core Delivered with automatic remove themselves from the notification to waitlist. Cornerstone affected administration is also supported stakeholders through automatic email notification. This tool sends email confirmations, notifications, reminders, and promotional emails based upon specified action triggers. Waitlist related email triggers include: ▪ Waitlist request ▪ Grant waitlist request ▪ Deny waitlist request ▪ Waitlist acceptance deadline ▪ Waitlist expiration ▪ Seat available ▪ Withdraw from waitlist If a class is full and a user cancels, ability for the system to automatically enroll the next 1.2.4 person in the Comply Core Delivered Supported. waitlist queue into the class and send them a notification; not a manual process. SERIAL 14111-RFP Ability for the admin to Administrators can establish configure a time waitlist expiration dates. The parameter when waitlist will no longer exist after wait listing is that date and all the users who no longer valid; 1.2.5 Comply Core Delivered were previously on the waitlist example: do not will be removed. If enabled, an want to auto- automatic email notification will enroll a be sent to the user indicating the waitlisted user expired waitlist. on the morning of the class day. Once logged in, the user is presented with a personalized learning portal, which includes a customized transcript that As a contains their entire learning configuration history. option (where This transcript also provides courses are not several options to register, launch, mandatory), select, withdraw, renew, and allows students complete training. The transcript to select, displays the status of each register, and training item requested by, remove courses assigned to, or required of the 1.3 Comply Core Delivered or curricula user. The status column on the from their transcript allows users to course determine if the training is listing/learning pending, approved, denied, and track on their many other potential stages. own with no Depending on the status, users supervisory or can register, launch, and perform administrator a variety of other training intervention functions directly from the transcript. Users have the ability to print their transcripts as well. Users can easily archive and de- archive training items as needed. Displays visual interface options such as map and tree metaphors to 1.4 Comply Core Delivered Supported. display organization of curricula and course selection within them SERIAL 14111-RFP Global Search allows users to search for online courses, quick courses, events, curricula, libraries, postings, materials, videos, and tests. Users can use predictive keyword search, advanced search, and browse for training.Advanced Search allows a user to better refine their search Navigation and parameters. The user can search predictive by title, description, provider, search options subject, competencies, instructor, 1.5 within course Comply Core Delivered location, contributor, and locator catalogs to find number. The search can be further and register for refined by learning object (e.g., courses only search for events). With Browse for Training, users can browse the catalog using a variety of filters such as title, subject, date, and training type. Training can also be sorted by popularity, rating, duration, and most recent. Administrators can also designate training items to be filtered by featured and suggested. Provides the 1.6 ability to "cross Comply Core Delivered Supported. list" courses. Cornerstone provides unique flexibility in how clients deploy the system to different groups of users— without any required programming skills or custom projects. The software supports application of different business rules, functionality, and even colors and logos to any Organizational Unit (OU). Allows Groups are used to create an OU registration and based on multiple criteria. The enrollment 1.7 Comply Core Delivered users within a Group are based on dynamically updated, based on multiple group the user criteria, every time the memberships. Group is processed. Groups can be used to set availability for learning objects or tasks, to proxy enroll, or to filter for reporting. Administrators can also proxy enroll individuals, groups, or the entire enterprise into a training course, curricula, test, or any other type of learning object based on specified criteria. SERIAL 14111-RFP Manages Through Proxy Enrollment, recurring administrators can assign any training such type of learning object(s) to that learners are multiple audiences based on their auto-enrolled at Organizational Unit—division, the appropriate position, location, cost center, intervals and custom groups of users, etc. sent a This feature supports a one-time corresponding learning object assignment or email dynamic behavior. A dynamic notification proxy enrollment processes daily and looks for new users who match the defined criteria (e.g., new employees, transitions, new responsibilities assigned) and assigns them the learning activity. Another option is a recurring 1.8 Comply Core Delivered proxy enrollment. This will reset the user’s status in their transcript on a periodic basis to allow them to retake the learning objects and show multiple completions. A best practice for using a dynamic recurring proxy is when you have training such as a compliance course that a group of users need to take every year. Once a proxy enrollment is administered, the training is automatically entered into each designated user’s personalized learning transcript and an email is sent informing them of their new assignment. Approvals include due 1.9 Comply Core Delivered Standard system functionality. dates associated with them. Allows training Approval workflow is highly managers and configurable by the County. instructors to Different workflows can be enroll and/or established for any 1.10 Comply Core Delivered approve Organizational Unit (such as enrollments for position, division, location, cost learners. center, etc.) and can include multi-layered approvals. Saves of sets of configurations as templates 1.11 Comply Core Delivered Supported. that can be applied to future courses Routes enrollment 1.12 Compy Core Delivered Standard system functionality. requests to instructors SERIAL 14111-RFP Allows Administrators can automatically automated activate and deactivate user identification, records by setting an Active disabling, and Period on the user record. archiving of Note that no data is ever deleted student from the system by Cornerstone. 1.13 Comply Core Delivered accounts and All historical data will exist for course sections the lifetime of our partnership. that have been Data can be "archived" and "de- inactive for a activated" so as to ensure data set amount of integrity and accurate metrics in time the system. An FTP or web services integration can be made to an existing system (e.g., an HRIS for internal employees or a system that houses all channel partner users). Cornerstone can pull the information on whatever basis is necessary (e.g., nightly, weekly, monthly). The majority of our clients populate the system this Interfaces with way. HRIS to New users can also be imported provide user into the system through our Data lists based on Load Wizard. This tool enables specified fields, organizations to upload a list or 1.14 to automatically Comply Core Delivered table of information into the add new users system, eliminating the need to and deactivate manually insert individual users who have records. Data can be loaded to left the different parts of the system with organization. a consistent process, allowing you to upload, review, and import data. The Data Load Wizard can import new records or adjustments and export existing data in multiple file formats (.xls, .xlsx .csv, .txt). Editable templates and helpful hints guides are available for each file type for accurate importing. Links and/or enrolls learners in appropriate courses or curriculum 1.15 Comply Core Delivered Standard system functionality. automatically based on organizational/ job level requirements As part of our Entended Allows guest Enterprise - LMS component, 1.16 (audit) access to Comply Core Delivered guests are able to access/enroll courses for courses, and submit payment, if needed. SERIAL 14111-RFP Can store and report course credits in Supported. Credits, training units, different etc., can be stored in different 1.17 number Comply Core Delivered number formats, from whole formats, from numbers down to decimal places. whole numbers down to decimal places. Administrators can assign prerequisites, pre-work, and post- work to training courses. As users request and register for training, Cornerstone automatically checks Allow setting the users transcript for designated course prerequisites to ensure that users allotments and have met the appropriate prioritizing 1.18 Comply Core Delivered requirements for attending or learner taking a training course. Those enrollments to users who have not met the courses based proper prerequisites will not be on them. able to register for a training course, but can submit an exception request to their manager in order to waive the prerequisite requirements. Instructor 1.19 Comply Core Delivered Supported. Management Ability to assign multiple 1.19.1 Comply Core Delivered Supported. instructors to a class Ability to maintain 1.19.2 Comply Core Delivered Supported. instructor qualifications Instructors can be listed by course (event). Administrators (or other users with the proper Ability to permissions) can view and report record classes on courses taught. A photograph 1.19.3 authorized to Comply Core Delivered can be uploaded to the teach by instructor’s user record and a instructor standard instructor field includes language(s) spoken. Effectiveness rating and area of expertise can be included as custom user fields. Every Instructor is provided with a personal training calendar with Ability for all training sessions listed. instructor to Training sessions are color coded view a calendar to indicate Tentative, Confirmed within the and Completed sessions, allowing 1.19.4 Comply Core Delivered system which instructors an “at-a-glance” view shows classes of their session schedule. he/she is Provided in monthly, weekly and facilitating daily format, instructors can filter their session schedule easily by simply selecting a month and a SERIAL 14111-RFP year using drop-down menus. Cornerstone administration is supported through automatic Ability for email notification. This tool sends instructor to email confirmations, email all of notifications, reminders, and 1.19.5 their students Comply Core Delivered promotional emails based upon for a specific specified action triggers. class in an easy Emails can be set up to go out to manner specific users as well as users in specific roles. Instructors can easily manage session rosters by individual, or for an entire session. Instructors can mark an entire session complete, including all session Ability for an attendees in two clicks, which instructor to automatically updates the session manage status within each attendee’s attendance personal learning transcript. By easily; ex: mark 1.19.6 Comply Core Delivered eliminating the administrative all students as chore of managing individual attended and attendees within a roster, then remove the instructors are free to focus on few that did not creating and delivering training attend content and training sessions. Instructors can access course rosters and generate printable rosters and sign-in sheets for each training course. Cornerstone’s automated conflict Functionality to detection capabilities identify prevent an conflicts at the time of scheduling instructor from 1.19.7 Comply Core Delivered based on the location, event time being over- and day, enabling instructors to booked/over- immediately remedy scheduling scheduled issues. Reporting functionality Accomplised via Cornerstone's which shows 1.19.8 Comply Core Delivered reporting and advanced Analytics scheduled tools. classes by instructor Allows administrators to override Administrators with the 1.20 settings made Comply Core Delivered appropriate permissions can for groups to override this type of setting. account for particular SERIAL 14111-RFP training needs of individuals Allows Curriculum functionality allows administrators administrators to create blended to combine and learning programs that are un-combine flexible and easy for users to course sections manage. Training curricula can / modules / include any learning object in the learning objects catalog (such as classroom events, online courses, tests, 1.21 Comply Core Delivered materials, postings, etc.) and even defined action steps or free form items. Once created, a curriculum acts as a single learning object for users to search for and request, for managers to assign and approve, and for administrators to track and report. Allows a variety of billing options: Cornerstone supports a wide credit card, range of payment methods corporate including:• Credit Card • Send purchase orders, Bill / Purchase Order• Training departmental Units• E-Check• Wire TransferIn account addition, promotion codes allow numbers, etc. administrators to create single use or multiple use coupons, which provide a discounted price on 1.22 Comply Core Delivered learning objects to users. Coupon codes may have a start date and an expiration date. Once coupons are created, they can then be distributed by an organization through marketing emails outside of the system. Users then apply them to their order on the review step of the checkout process. Automates Tuition assistance requests can be tuition easily managed/tracked with any assistance approval workflows through the requests and utilization of our "external allow for training" feature. This supervisor and functionality allows a user enter other tuition assistance requests with administrative approval routing, along with 1.23 Exception Core Delivered approvals of robust automated these in the tracking/reporting. Targeted system. This Tuition reimbursement includes functionality is being considered automating for the product roadmap, although tuition no release date has been assistance scheduled. In the interim, verifications administrators can create a SERIAL 14111-RFP after courses are custom report to capture tuition completed reimbursement details submitted via external training requests. Provides the ability to print a variety of enrollment- 1.24 related items, Comply Core Delivered Standard system functionality. including class schedules, seat vacancies, and class rosters Provides the ability to restore All coursework completed (e.g. student artifacts pre-tests, surveys., forms, etc) is in a course if a 1.25 Comply Core Delivered stored/tracked and available if student who has user withdraws and re-enrolls in a withdrawn class. subsequently re-enrolls Manages registration and enrollment not 1.26 only by Comply Core Delivered Standard system functionality. individual, but by group and cohort group. Emails Cornerstone administration is dependent on supported through automatic group or email notification. This tool sends individual email confirmations, requesting notifications, reminders, and course. (e.g. promotional emails based upon when the class specified action triggers. is restricted to a Email tags can be included in certain dept. of email templates that allow you to 1.27 Comply Core Delivered which they are automatically substitute specific not a part) information, such as the user’s name, the approver’s name, the price of the training, the date of the request, etc., in any new email created. Emails can be set up to go out to specific users as well as users in specific roles. SERIAL 14111-RFP Physical Asset Cornerstone enables instructors Inventory and and administrators to manage Scheduling resources and equipment for geographic locations, buildings, 1.28 Comply Core Delivered and rooms. This feature tracks reusable and non-reusable resources such as computer assets, projectors, notepads, computer configurations, etc. Asset Cornerstone’s automated conflict scheduling detection capabilities identify conflict conflicts at the time of scheduling 1.28.1 avoidance Comply Core Delivered based on the location, event time, and day. This allows instructors to immediately remedy scheduling issues. Track 1.28.2 training aids, Comply Core Delivered Supported. computers, etc. Assets 1.28.3 can be grouped Comply Core Delivered Supported. by category Multi- The ILT Scheduling Wizard training/multi- allows the administrator to create session support more than one session part at a time, or create more than one session at a time (Batch Session Creation). The schedule wizard 1.29 Comply Core Delivered creates a date pattern or equation. At the conclusion of completing all steps of the session creation process, multiple sessions will have cascading dates and copies parts. Indivi dual session 1.29.1 Comply Core Delivered Supported. times/days supported Sessio ns can be mapped to 1.29.2 Comply Core Delivered Supported. locations, assets, instructors, etc. Time-based 1.30 event Comply Core Delivered Standard system functionality. scheduling SERIAL 14111-RFP All Cornerstone supports a wide training types range of learning activities and can be provides real-time tracking scheduled through the user’s personalized learning transcript. Out-of-the- box training types include: • E-learning classes • Instructor-led training (ILT) 1.30.1 Comply Core Delivered sessions; • Virtual classroom training; • Posted documents, white papers, and online resources; • Externally completed training; • Custom tests and assessments; and • Training curricula to support blended learning initiatives. Empl oyees may be Administrators with the registered for appropriate permissions can 1.30.2 Comply Core Delivered restricted override predefined system courses by workflows. Admin Custo 1.30.3 mizable title Comply Core Delivered Supported. and description Suppo Administrators can set minimum rt for maximum and maximum registration event size guidelines when creating sessions. Enrollment restrictions can also be set by Organizational 1.30.4 Comply Core Delivered Unit (OU), allowing administrators to limit the number of users from each OU (e.g., Division, Location, Position) that can register for the course. Auto Waitlist functionality is highly matic wait configurable at both the Event listing available and Session level. Options include: first come/first serve, first on / first off, and time based 1.30.5 Comply Core Delivered releases (i.e., notify waitlist participants one-by-one at intervals defined administratively). Similarly, administrators can manually reorder the priority of the list. Enabl Workflow in the application is e/Disable Self extremely configurable to match registration an organization's needs whether it’s self-registration, manager assigned registration, proxy enrollment, etc. If managerial 1.30.6 Comply Core Delivered approval (or multiple layers of approval) is required, Cornerstone can track these workflows. Different workflows can be established for any Organizational Unit (such as SERIAL 14111-RFP position, division, location, custom group of users, etc.). Set All learning activities support 1.30.7 registration Comply Core Delivered active and expiration dates. open/close date Do Through Proxy Enrollment, group administrators can assign any enrollments by type of learning object(s) to category, job multiple audiences based on their title, Organizational Unit—division, competency gap position, location, cost center, custom groups of users, etc. This feature supports a one-time learning object assignment or dynamic behavior. A dynamic proxy enrollment processes daily and looks for new users who match the defined criteria (e.g., new employees, transitions, new responsibilities assigned) and assigns them the learning activity. 1.30.8 Comply Core Delivered Another option is a recurring proxy enrollment. This will reset the user’s status in their transcript on a periodic basis to allow them to retake the learning objects and show multiple completions. A best practice for using a dynamic recurring proxy is when you have training such as a compliance course that a group of users need to take every year.Once a proxy enrollment is administered, the training is automatically entered into each designated user’s personalized learning transcript and an email is sent informing them of their new assignment. Can manually 1.30.9 Comply Core Delivered Supported. update preregistration Instru Instructors may access and ctor can manage class rosters to generate customize printable rosters and sign-in 1.30.10 course roster Comply Core Delivered sheets. Administrators can use Cornerstone's analytics reporting tool should they wish to create a more customized form. SERIAL 14111-RFP Ability for a Training schedules can be viewed user/learner to graphically in the user’s access a individual Events Calendar. calendar 1.31 Comply Core Delivered Events and sessions are listed interface within here and are color coded based on the system to the enrollment status and seat view their availability. enrollments 2.0 Notifications and Annotations Notifies users when actions are taken in the system that Cornerstone administration is affect them, supported through automatic e- both through mail notification. With over 100 internal system triggers, this tool sends e-mail 2.0.1 Comply Core Delivered notification confirmations, notifications, functions and reminders and promotional e- by email. mails based upon specified action Notifications triggers. can be triggered by such actions as: Chan 2.0.1.1 ge in user Comply Core Delivered Supported. profile status Chan 2.0.1.2 ge in course Comply Core Delivered Supported. status When a user registers for a Confi training activity a confirmation 2.0.1.3 rmation of Comply Core Delivered email will fire once they click on enrollment the register link. Class 2.0.1.4 Comply Core Delivered Supported. cancellation Emails are configurable and can include email tags that allow you to automatically substitute specific information. Waitlist related email triggers include: Being ▪ Waitlist request 2.0.1.5 wait-listed for a Comply Core Delivered ▪ Grant waitlist request course ▪ Deny waitlist request ▪ Waitlist acceptance deadline ▪ Waitlist expiration ▪ Seat available ▪ Withdraw from waitlist Learn 2.0.1.6 er dropped from Comply Core Delivered Supported. class Perio dic reminders to attend or finish 2.0.1.7 course Comply Core Delivered Supported. reminders to complete a survey SERIAL 14111-RFP The Email Export Log contains a list of all emails sent for the related trigger within the past 30 Notification days. The log contains the email 2.1 history function Comply Core Delivered address the email was sent to, the is included date and time sent, and the subject line. The log does not contain the content of the email. Emails can be set up to go out to Allows pushing specific users or groups as well as of general users in specific roles, such as 2.2 notifications out Comply Core Delivered training approvers, cost center to only specific approvers or the employee’s groups manager. Cornerstone supports course Sends completion deadlines. Automatic reminders about reminder/warning emails can be 2.3 certifications Comply Core Delivered triggered at predetermined dates that are about to (30 days, 15 days, 5 days, etc.) expire prior to the training expiration date. Provides the ability to annotate and communicate actions taken, approvals, 2.4 errors, etc. in Comply Core Delivered Supported. regards to administrative actions, for future reference or for other administrators Cornerstone administration is supported through automatic email notification. The emails are sent through the company’s email system, such as Outlook or Lotus Notes. Has robust In addition, Cornerstone provides internal email seamless integration with a user's editor features Outlook calendar. 2.5 resembling Comply Core Delivered Administrators can configure standalone Outlook Meeting emails to not email programs only add Sessions to the user’s such as Outlook calendar but also manage updates to the Session. This functionality is available from any device used to manage one's Outlook calendar, such as a PC, laptop, mobile phone, or tablet computer. SERIAL 14111-RFP The Email Export Log contains a list of all emails sent for the related trigger within the past 30 Maintains a log days. The log contains the email of address the email was sent to, the 2.6 undeliverable/fa Exception Core Delivered date and time sent, and the iled email subject line. A log of notifications undeliverable/failed email notifications would be available via a custom project. 3.0 Batch administration workflow Offers batch options for 3.1 tasks involving Comply Core Delivered Standard system functionality. groups of system objects Through Proxy Enrollment, administrators can assign any type of learning object(s) to multiple audiences based on their Organizational Unit—division, position, location, cost center, custom groups of users, etc. This feature supports a one-time learning object assignment or dynamic behavior. A dynamic proxy enrollment processes daily and looks for new users who match the defined criteria (e.g., new employees, transitions, new responsibilities assigned) and Allows assigns them the learning activity. administrators Another option is a recurring 3.2 to batch register Comply Core Delivered proxy enrollment. This will reset groups of the user’s status in their transcript learners on a periodic basis to allow them to retake the learning objects and show multiple completions. A best practice for using a dynamic recurring proxy is when you have training such as a compliance course that a group of users need to take every year. Once a proxy enrollment is administered, the training is automatically entered into each designated user’s personalized learning transcript and an email is sent informing them of their new assignment. Allows administrators 3.3 to create Comply Core Delivered Supported. backups in batch mode SERIAL 14111-RFP Cornerstone supports any role that a client may require. Clients configure their own roles based on their organizational needs. The application is entirely rights and roles-driven. The application features hundreds of security Allows permissions, related to the administrators thousands of features, which can 3.4 to batch set Comply Core Delivered be configured to roles or permissions and individual users. These roles for users permissions are all stored as part of the user’s information. Cornerstone rights and permissions system, in tandem with the Organizational Units approach, means that clients can develop virtually any type of role. Allow administrators to batch 3.5 configure Comply Core Delivered Supported. courses, learning tracks, and curricula Allows time shifting of batch processes of database to Scheduled FTP feed (nightly, 3.6 minimize Comply Configurable weekly, monthly). performance disruption during peak usage times 4.0 Prerequisite handling Administrators can assign prerequisites, pre-work, and post- work to training courses. As users Allows request and register for training, administrators Cornerstone automatically checks to set the user’s transcript for prerequisites so designated prerequisites to ensure that learners are that users have met the 4.1 evaluated for Comply Core Delivered appropriate requirements for meeting attending or taking a training prerequisites course. Those users who have not before being met the proper prerequisites will able to enroll in not be able to register for a a course training course, but can submit an exception request to their manager in order to waive the prerequisite requirements. Can be Tests can be geared towards configured to specific subjects and used for a 4.2 deliver pre- Comply Core Delivered variety of purposes. Custom tests assessments to can be created for test out, allow learners product tests, and for other SERIAL 14111-RFP to "test out" if proprietary assessment needs. they demonstrate mastery of the materials for a course Includes options for the configuration of waiving course/curriculu Administrators with the m requirements 4.3 Comply Core Delivered appropriate permissions can based on override such activities. demographic attributes other than course completion or pre-assessments Establishes equivalencies so that learners The County can set up equivalent can receive training items. Users will be credit for exempted from newly assigned courses and / or training based on previously 4.4 waive the Comply Core Delivered taken training items that are requirements to similar. Users can also view and take courses select from a group of equivalent that share the trainings based on permission. same material as a course already taken 5.0 Content importing and configuration Cornerstone offers a Learning Content Management System (LCMS) to author, publish, and deploy media-rich content. With pre-loaded templates and authoring, test, assessment, and collaboration tools, clients can design customized, SCORM Provides a compliant courses without prior process for programming knowledge. In 5.1 importing and Comply Core Delivered addition, all industry recognized configuring authoring tools are supported, content including but not limited to Lectora, Articulate, Captivate, Dreamweaver, Flash, and WYSIWYG/HTML programming tools. Cornerstone also works with non-standards compliant content providers to provide basic tracking functionality. SERIAL 14111-RFP Provides the Administrators can upload ability to attachments/documents (PDF, internally create PPT, Excel, etc.) as well as other and/or rich media (audio, webcasts, configure podcasts, etc.) to learning objects ancillary within the training catalog learning objects including ILT sessions. The 5.2 like glossaries Comply Core Delivered visibility of each attachment can or that can be determined by the interwork with administrator. For example, some courses and attachments may only be visible apply globally to administrators or instructors, to more than while others may be visible to all one course users. within the LMS Cornerstone provides full support for the AICC 3.5 API Data Model and SCORM 1.2 & 2004 Content Packaging specifications. These courses can be tracked in Cornerstone and provides bookmarking, progress tracking, the recording of testing scores embedded in the content, and other rich data tracking.AICC courses can be housed by Cornerstone, the City, or by a third party. SCORM courses must be hosted by Cornerstone. Cornerstone also works with non- standards compliant content providers to provide basic tracking functionality.In addition, Is interoperable Cornerstone Content Services with 3rd party delivers the most efficient way to content. (List enhance the success of any major vendors organization’s talent management 5.3 you contract Comply Core Delivered strategy while meeting a range of with or have end-user needs. Cornerstone prior experience completely removes the burden of with- SkillSoft online content management, etc.) reduces costs, increases training efficiency, and greatly improves the user experience.Clients can choose from a wide-variety of premier vendors, titles, and subjects that always deliver the most accurate and updated course content. E-learning partners include Skillsoft, Cegos, getAbstract, Harvard Business Publishing, JJ Keller, and Speexx, among others. Cornerstone provides complete vendor management services with respect to e-learning partners. The company assists organizations in the selection and pricing of e- learning content along with other SERIAL 14111-RFP benefits. Cornerstone includes complete e- commerce functionality secured by Cybersource. The system can be configured to support a range of e-commerce models, including functionality to edit the cost allocation of any learning object. Cost centers are supported as well as corporate credits, and a large number of other options. The Cornerstone platform supports Offers secure virtually any desired payment billing/payment model desired by options - the client. Users can pay by internal and credit card, invoice, purchase external - for 5.4 Comply Core Delivered order, or through training units. courses. Cornerstone can automate billing (Accounting across all levels of the string handling organization, as well as outside and reporting the organization. We can and other) generate billing reports that summarize all transactions by cost center, provider, user or transaction code as well as provide detailed reporting on individual transactions. Cornerstone’s reporting tools and the advanced Analytics tools give clients ready access to all internal and external training costs, allocations, and trends. For content purchased through Cornerstone, there is no limit for storage and usage. For content not purchased through us, clients can monitor their hosted/delivery allocation at any time via the standard report “Delivery Report for Billing”. Cornerstone’s Course Publisher also allows administrators to effectively manage content by Imports course uploading, validating, and learning integrating SCORM and AICC 5.5 Comply Core Delivered packages of courses into the application. The unlimited size Course Publisher allows administrators to upload a new version of a course as well as replace files in existing publications. Up to 100 AICC courses or 100MB of SCORM courses can be zipped together and uploaded at once. Individual SCORM courses which exceed 100 MB in size may require upload by Cornerstone. SERIAL 14111-RFP Cornerstone provides for version management. Once content has been published, you may edit its settings, update it, or even create a new version of a course previously published so as not to affect any users participating in the current version. Similarly, administrators can edit or re- version curricula for users Registered or In Progress and for future users of that curriculum. If Allows/disallow the structure of the curriculum is s elements of a modified and there are users course to be registered for that curriculum, 5.6 updated without Comply Core Delivered then the modified curriculum is creating a new saved as a new version so that the version of the two versions can be tracked course. separately. The Modification History Table appears at the bottom of the page displaying when the curriculum was created and also every time the curriculum was modified. When a new version is created, the administrator is required to enter comments describing what was changed. These comments appear in the Modification History Table. Presents options to automatically move learners to a new version of a 5.7 course when a Comply Core Delivered Supported. new version of it is created, or allows them to continue on the old version. Learners are able to seamlessly experience 5.8 updated content Comply Core Delivered Supported. with no interruption in their learning flow or plans SERIAL 14111-RFP 6.0 System Access and Security Clients only access the presentation layer of the system through the Internet. Users need a unique username and password to access the application. All passwords are stored in the database in a hashed format to minimize security liability. Passwords are hashed using PBKDF2 with 1000 iterations. Uses robust Alternatively, clients can be security authenticated using security 6.1 architecture to Comply Core Delivered tokens, utilizing a symmetric maintain system algorithm, passed by the client’s access local authenticator for Single Sign-On functionality. Clients can also be authenticated via their identity provider with SAML assertions. Client browser access to the web servers utilizes 128-bit SSL encryption (version 3.0 or higher) to minimize network packet snooping vulnerability for any transmitted sensitive data. Cornerstone Extended Enterprise is the most comprehensive solution for training, connecting, and enabling your organization’s extended network of customers, members, and partners. Whether you want to build out a new profit center from your existing customer training program or you want to drive partner effectiveness in selling your Allows learners products, Cornerstone gives you to self-register complete control with the right for an LMS technology, content, and 6.2 account; ex: Comply Core Delivered supporting services. learners from ACCESS outside of the Match your specific needs - fully County decentralized administration with centralized control and reporting. • Build highly configurable domains and portals for easy audience segmentation • Allow guest and self- registration • Require authentication or allow users to browse specific areas of the solution prior to signing in • Process transactions with e- commerce tools SERIAL 14111-RFP Allows Cornerstone has multiple types of encryption of encryption ensuring that data is 6.3 sensitive data Comply Core Delivered protected both at rest and while in and session transit. activity Password policy is configurable by the client. Password preferences allow client administrators to specify a variety of options and requirements for passwords including: • Require both upper and lower case letters • Require user to reset their password by answering XX number of security questions • Send email notification to user upon password change • Require confidential password reset and send email notification Enforces strong to user passwords and • Require alpha and numeric 6.4 Comply Core Delivered password characters changes • Do not allow three or more consecutive same characters • Require at least one special character (e.g., !, @, #, $) • Expire passwords every XX days • Passwords cannot be the same as any previous XX passwords • Set minimum password length • Set maximum password length • Forgot password message (clients can define message that is displayed) Different password requirements can be established by Organizational Unit. Cornerstone has broad experience in developing highly stable Single Provides an Sign-On linkages with its clients. option for Users can seamlessly launch into single sign-on, Cornerstone from another site so that users without having to re-authenticate who have or enter login credentials a second logged in to the time. Once a user is logged into 6.5 enterprise Comply Core Delivered their corporate network, they can intranet enter Cornerstone simply by (through a clicking on a link. portal, etc.) can Cornerstone offers clients two get into the technical solutions based on their LMS without needs: SSO Private Shared Key additional login Authentication (Cornerstone’s) and SSO SAML (1.1 and 2.0). Allows login to the LMS to 6.6 Comply Core Delivered Standard system functionality. transfer to other enterprise SERIAL 14111-RFP systems such as Performance Management systems Requires users logon only once Configurable by client 6.7 Comply Core Delivered per LMS/PMS administrators. session Access and AuthenticationClients only access the presentation layer of the system through the Internet. Users need a unique username and password to access the application. All passwords are stored in the database in a hashed format to minimize security liability. Passwords are hashed using PBKDF2 with 1000 iterations.Alternatively, clients can be authenticated using security tokens, utilizing a symmetric algorithm, passed by the client’s local authenticator for Single Sign-On functionality. Clients can also be authenticated via their identity provider with SAML assertions.Client browser access to the web servers utilizes 128-bit SSL encryption (version Supports 3.0 or higher) to minimize industry- network packet snooping standard vulnerability for any transmitted 6.8 authentication Comply Core Delivered sensitive data. Access by IP (please list key AddressClients may control standards access to their portal by IP supported) address. Clients with this requirement can provide Cornerstone with their “white list” with acceptable IP addresses for accessing the portal. Cornerstone configures the client’s portal to only allow access from users with IPs on the white list. If the IP address from which the user attempts to access the portal is not on the white list, the user cannot access the portal and receives an error message.Single Sign-On (SSO) LoginThe Single Sign-On (SSO) process allows a user to seamlessly launch into Cornerstone from another site without having to re-authenticate or enter login credentials a second time. Once a user is logged into his corporate network, he can enter Cornerstone simply by SERIAL 14111-RFP clicking on a link.The Cornerstone application provides added security as it prevents multiple sessions by the same user to be run from different machines. If a user is logged into Cornerstone from his machine, and then goes to another machine and tries to log in, his initial session will be timed out.SSO Technical SolutionsCornerstone offers clients two technical solutions based on their needs: SSO Private Shared Key Authentication (Cornerstone’s) and SSO SAML (1.1 and 2.0). Shared Key Authentication: The standard SSO process involves passing an encrypted string between the client’s corporate network and Cornerstone. A private key, used in the encryption, is shared between Cornerstone and the client. AES is utilized for encryption of the data. SAML Authentication: 1. User initiates the request via a link.2. Client’s server intercepts and generates SSO assertion.3. SAML assertion is posted to SSO URL by the browser.4. Signature, timestamp, and recipient are posted.5. Payload is examined for destinations.6. User looked-up, must be active.7. User logged-in and redirected to destination (login page or deep link). The session state that is maintained for a user will be deleted after a default 30 minutes of inactivity. However, this is a client configurable option. If the Ability to user times out after a credential configure a authentication, they will be standard time- 6.9 Comply Core Delivered returned to the login page with a out parameter timeout message. If they were for non-use on signed-on using Single Sign-On, the system they can optionally be returned to a URL as specified in the security token of the authentication, or to the Cornerstone default timeout message (no logon page). Ability to auto- bookmark a 6.10 user's course if Comply Core Delivered Standard system functionality. the forced time- out occurs SERIAL 14111-RFP Administrators are presented with an extensive set of web-based administrative tools which enable Ability for an them to easily configure graphics, admin to setup colors, key words, layout, and the layout of the business rules. No special learner's computer programming skills are 6.11 homepage and Comply Core Delivered required by the administrators to lock it down so configure the system. that an end user Additionally, this functionality is cannot change rights and roles driven. Thus, the layout uses/learner's without the proper permissions are unable to change the layout. 7.0 Permissions and Roles Cornerstone is entirely rights and roles-driven. The application features hundreds of security permissions, related to the thousands of features, which can Defines a wide be configured to roles or variety of individual users. permission and For example, general rules may role levels that be established for certain types of are applicable administrators, but each user may 7.1 to a range of Comply Core Delivered also be granted their own unique organizational permissions. These permissions structures and are all stored as part of the user’s use case information. Hence, users only scenarios for see what they have been given the system permission to see. As such, their view to data in the system is constrained by their specific availability rights. Security roles are fully managed by the client Can Restrict course 7.2 enrollment to Comply Core Delivered Supported. pre-authorized learners Uses templates to easily set 7.3 Comply Core Delivered Standard system functionality. group permissions Restricts access to functions for individual courses based 7.4 Comply Core Delivered Permissions as well as OU's. on membership in groups associated with that course SERIAL 14111-RFP Cornerstone offers several options for proxy/delegation throughout our integrated modules. For example, manager delegation allows managers to choose a delegate to share their learning permissions. This allows the proxy to perform various functions for the manager’s direct and indirect reports such as the ability to view user transcripts, assign training, and depending on Allows the workflow, approve training. delegating Within Cornerstone Performance, permissions for 7.5 Comply Core Delivered managers may have the ability to users at a lower add co-planners for performance, level of succession, and compensation permission/role tasks. For example, if so enabled by the client, co-planners can perform reviews as though they were the manager who was assigned the review task. Lastly, the Proxy as Another User feature allows authorized client administrators the ability to login as another user from their own portal. This allows for more efficient troubleshooting and a convenient tool for managing user activity. Cornerstone supports any role that a client may require. Clients configure their own roles based on their organizational needs. The application is entirely rights and roles-driven. The application features hundreds of security Allows creation permissions, related to the of subgroups thousands of features, which can 7.6 that inherit Comply Core Delivered be configured to roles or permissions of individual users. These parent groups permissions are all stored as part of the user’s information. Cornerstone rights and permissions system, in tandem with the Organizational Units approach, means that clients can develop virtually any type of role. Can be set so learners are anonymous to 7.7 each other, Comply Configurable Configurable by an administrator. instructors, and administrators for surveys SERIAL 14111-RFP Offers "organization aware" features that allow administration based on 7.8 Comply Core Delivered Supported. external data feeds concerning organizational roles and permissions Supports mirroring an organizations' structure in the database to Note, our data integration manage concultants will assist the County 7.9 students, Comply Core Delivered in determining the best method of supervisors and integraton to me business approvers based objectives. on where they exist with the organizational structure Features levels of permission corresponding to clearly 7.10 Comply Core Delivered Supported. defined levels of administrative responsibility SERIAL 14111-RFP 8.0 Course Catalogue Database The course catalog serves as the repository for all learning objects in the system including online courses, quick courses, ILT events, libraries, tests, curricula, and materials (e.g., documents, videos, audio, postings). The catalog enables administrators to associate learning with subjects, Provides a skills, competencies, single, certifications, acknowledgements, integrated OR emails, and Level 1-3 evaluations. multiple course Administrators control access and catalogs whose options from a unified catalog. 8.1 overall and Comply Core Delivered Cornerstone allows for the internal management of one master organization catalog and any number of sub- can be defined catalogs for specific audiences. by a variety of Clients can deploy completely characteristics personalized training catalogs to individuals who meet the correct criteria or for any Organizational Unit (such as Position, Division, Location, Cost Center, etc.).Users have several options to search the catalog including Basic Search, Browse for Training, and Advanced Search. For content purchased through Cornerstone, there is no limit for storage and usage. For content not purchased through us, clients can monitor their hosted/delivery allocation at any time via the standard report “Delivery Report for Billing”. Cornerstone’s Course Publisher Does not limit also allows administrators to the number of effectively manage content by levels, items, or uploading, validating, and sizes of items Comply / Core Delivered / 3rd integrating SCORM and AICC 8.2 included in the Exception Party courses into the application. The catalog of Course Publisher allows courses administrators to upload a new delivered or version of a course as well as imported replace files in existing publications. Up to 100 AICC courses or 100MB of SCORM courses can be zipped together and uploaded at once. Individual SCORM courses which exceed 100 MB in size may require upload by Cornerstone. SERIAL 14111-RFP Cornerstone provides a high degree of flexibility with respect to course catalogs and targeted training options. The system allows for the easy creation and management of one master Catalogues can catalog and any number of sub- 8.3 be defined for Comply Core Delivered catalogs for specific audiences. job classes Clients can deploy completely personalized training catalogs to individuals who meet the correct criteria or for any Organizational Unit (such as Position, Division, Location, Cost Center, etc.). Contains a course catalog 8.4 including many Comply Core Delivered Supported. details - especially: Objec 8.4.1 Comply Core Delivered Supported. tives Assoc 8.4.2 iated Comply Core Delivered Supported. Competencies Credit 8.4.3 Comply Core Delivered Supported. s Cours 8.4.4 Comply Core Delivered Supported. e ID 8.4.5 Cost Comply Core Delivered Supported. Assoc 8.4.6 iated career Comply Core Delivered Supported. tracks Deliv 8.4.7 Comply Core Delivered Supported. ery Methods Prere 8.4.8 Comply Core Delivered Supported. quisites Funct 8.4.9 Comply Core Delivered Supported. ional area Locati 8.4.10 Comply Core Delivered Supported. on Job 8.4.11 Comply Core Delivered Supported. Skill Produ 8.4.12 Comply Core Delivered Supported. ct line Subje 8.4.13 Comply Core Delivered Supported. ct Assoc 8.4.14 Comply Core Delivered Supported. iated resources Seat 8.4.15 Comply Core Delivered Supported. time Certif 8.4.16 Comply Core Delivered Supported. ication Hours Cours e star-rating and review 8.4.17 Comply Core Delivered Supported. comments entered by end users/learners SERIAL 14111-RFP Provides predictive search Users can use predictive keyword 8.5 capability, in Comply Core Delivered search, advanced search, and addition to browse for training. keyword searches Cornerstone provides extensive search capabilities including: Predictive search, wildcard search, search by learning type, title, description, subject, provider, competency and Provides the keyword. Through global search ability to search the system searches people, 8.6 for text within Exception Not Applicable certifications, online communities courses and forms in additional to specifically training. Searching for text within a SCORM or AICC course is not supported as those items uploaded and considered an attached asset within the system. Clients can choose from a wide- Can be linked variety of premier vendors, titles, dynamically to 8.7 Comply Core Delivered and subjects that always deliver external the most accurate and updated catalogs course content. Can be updated with release updates and 8.8 Comply Core Delivered Supported. additional courses from external sources Cornerstone provides for version management. Once content has been published, you may edit its settings, update it, or even create a new version of a course previously published so as not to affect any users participating in the current version. Similarly, administrators can edit or re-version curricula for users Version control Registered or In Progress and for and other future users of that curriculum. If 8.9 management Comply Core Delivered the structure of the curriculum is functions for modified and there are users course updates registered for that curriculum, then the modified curriculum is saved as a new version so that the two versions can be tracked separately. The Modification History Table appears at the bottom of the page displaying when the curriculum was created and also every time the curriculum was modified. When a new version is created, SERIAL 14111-RFP the administrator is required to enter comments describing what was changed. These comments appear in the Modification History Table. Can be configured such that different versions of the course that are treated functionally the same for training administration purposes use the same reference ID in 8.10 Comply Core Delivered Standard system functionality. the LMS database. In other words, the LMS tracks and reports that learners have taken the same course, even if there are different language or department versions. Administrators can easily add to, edit, or remove announcements from a user’s welcome page. These announcements can be Allows for directed towards a specific group 8.11 course Comply Core Delivered of employees or the entire marketing/email organization. In addition, personalized marketing emails can be generated to a user, group, or Organizational Unit. Through Cornerstone’s content partnerships, the company is able to seamlessly integrate corporate training and executive education content into a single e-learning Includes platform. Our partnerships Catalogue of include top online content courses providers in each content vertical 8.12 prepackaged Comply Core Delivered (business training, technology with LMS training, skills training, securities, (provide accounting, law, self- catalogue) development, etc.) to develop a comprehensive source for content offerings. Some of our content partners include SkillSoft, Korn Ferry, Cegos, WeComply, HRSG, J.J. Keller, and many others. SERIAL 14111-RFP All courses will automatically update when new versions are created/uploaded, and a version Regulatory/Cert history is tracked. ification 8.13 Comply Core Delivered Regulatory/Certification courses courses updated purchased from our Content within 60 days Partners will also seamlessly and automatically update when a new version is available. 9.0 Standards and Language Support Supports the current and all required legacy Cornerstone provides full support versions of for the AICC 3.5 API Data Model relevant and SCORM 1.2 & 2004 Content standards such Comply/ 9.1 Core Delivered Packaging specifications. as SCORM, Exception Support for Tin Can is on the AICC, Tin Can. product roadmap and scheduled (Please list all for release later this year. applicable standards supported.) On their transcript page, a learner Supports can select to “View Training attempted status Details.” From there, the Training 9.2 as well as Comply Core Delivered Progress section provides completed information like progress status percentage, date last accessed, total views, view time, status, etc. For attempted status, tracks 9.2.1 time spent in Comply Core Delivered Supported. course on each attempt Ability to configure a Administrators can set a number 9.2.2 specific number Comply Core Delivered of automated proctoring criteria of attempts such as attempts allowed. permitted The Cornerstone system is in compliance with Section 508 of Complies with the Rehabilitation Act of 1973 as Section 508 certified by Criterion 508 9.3 requirements Comply Core Delivered Solutions, Inc., an independent for system Section 508 auditor. This ensures interfaces that all user features are accessible to people with disabilities. Unicode characters are accepted Supports Comply / 9.4 Core Delivered for test questions, categories, etc., Unicode fonts Exception and one corp preference. SERIAL 14111-RFP 10.0 Training Infrastructure and Performance Analysis Training Demand Forecasting allows managers and trainers to submit forecast training needs and requests for learning content within the context of a plan template defined by administrators. Managers request Includes the specific training titles from your ability to enter catalog, training around a certain and capture subject matter, or even training 10.1 such items as Comply Core Delivered from external vendors or other course sources. Training plans are development consolidated automatically and costs reported on by estimated hours, number of employees, subject area, and cost. Cornerstone’s reporting and advanced Analytics tools give clients ready access to all internal and external training costs, allocations, and trends. Cornerstone delivers online survey capabilities to allow organizations to deliver dynamic assessments or surveys to meet a wide range of requirements. These tools support complex requirements like delivery randomization; specified percentage of employees receiving a survey; and iteration of the same survey for necessary number of subordinates. Surveys can be based on any group of users, or regions, or divisions. The variety of question types and Student and response formats allows 10.2 Training Needs Comply Core Delivered information to be captured in a Surveys variety of ways. Reports on survey responses can then be generated for each task or for recurring surveys over time. Question types include Likert scale, Multiple Choice – Multiple Answer, Multiple Choice – Single Answer, True/False, Yes/No, and Text Only. Comments boxes can be included and required for a question. In addition, Cornerstone can support all of the standard, third party testing and assessment tools. SERIAL 14111-RFP Cornerstone’s test engine provides administrators with the ability to create, categorize, and deliver tests to meet your training goals. The tests can be delivered as stand-alone learning objects, or can be associated with any variety of learning objects contained in Cornerstone. Pre and post-course tests, prerequisite assessments, and certification programs can be developed using the test engine. The Question Bank can be used to create, store and repurpose custom test questions. The question bank is organized by category and provides Ability to administrators the ability to view enter/create a the categories; view question item survey using analysis; and filter questions by 10.2.1 functionality Comply Core Delivered ID, Question, Question Type, which is Category, Active status, who the embedded in question was Created By, and the system Added By.In addition, Cornerstone Surveys provide you with the power of the Evaluation tool free from the restriction of tying your survey to a course. The variety of question types and response formats allows information to be captured in a variety of ways. Reports on survey responses can then be generated for each task or for recurring surveys over time. Use surveys to help you collect hard to capture information such as interest in employee developmental opportunities or a skills survey for new job positions. Ability to copy an existing Administrators can copy existing survey and use 10.2.2 Comply Core Delivered surveys/assessments to aid in the it as a base creation of new items. survey for a new one The question bank for surverys/forms does not support For embedded specific editor and spell check survey tool, funtionality (other than standard 10.2.3 support editor Exception Custom web browser spell check). This and spellcheck would require customization. This functionality requirement would need to be scoped further. SERIAL 14111-RFP Ability to assign a specific survey to a course/class and have it sent 10.2.4 Comply Core Delivered Standard system functionality. automatically to a class roster based upon a timing parameter Ability to select a group of users and assign a 10.2.5 training needs Comply Core Delivered Supported. survey to them and trigger this automatically Through our proprietary reporting Ability to track and analytics tool, essentially any survey data in the application can be responses and 10.2.6 Comply Core Delivered reported on. For example, two of execute our standard reports display corresponding summary information of all test reports and survey data. Ability to interface with a third-party survey application such Cornerstone can support all of the as 10.2.7 Comply Core Delivered standard, third party testing and SurveyMonkey; assessment tools. list all supported survey applications here Includes training budget/cost tracking and projecting features that 10.3 Comply Core Delivered Standard system functionality. store and reports (by learner, course, organization, year, etc.) such items as: Any additional budget/cost tracking fields necessary can be created via custom form fields within the Cost Center Budge organizational unit feature or the 10.3.1 Comply Core Delivered t Authorizations Training Forecast/Training Plans feature. These fields are also available for reporting purposes through our Standard Custom Reports. SERIAL 14111-RFP Any additional budget/cost tracking fields necessary can be created via custom form fields within the Cost Center Funds organizational unit feature or the 10.3.2 Comply Core Delivered allocated Training Forecast/Training Plans feature. These fields are also available for reporting purposes through our Standard Custom Reports. Any additional budget/cost tracking fields necessary can be created via custom form fields within the Cost Center Funds organizational unit feature or the 10.3.3 Comply Core Delivered still available Training Forecast/Training Plans feature. These fields are also available for reporting purposes through our Standard Custom Reports. Any additional budget/cost tracking fields necessary can be created via custom form fields within the Cost Center Funds organizational unit feature or the 10.3.4 Comply Core Delivered source Training Forecast/Training Plans feature. These fields are also available for reporting purposes through our Standard Custom Reports. Cornerstone utilizes a proprietary reporting engine that is included with the application. In addition to dozens of standard Performs skill 10.4 Comply Core Delivered performance related reports, the gap analysis application also includes a custom reporting tool (Analytics) for the creation of a number of highly specific reports. 11.0 Learning Object Management Allows attaching, Administrators can upload associating, and attachments to all types of consolidating learning objects within the diverse content catalog . pieces into a The visibility of each attachment single course can be determined by the (for example, administrator. For example, some 11.1 core course Comply Core Delivered attachments may be visible to content only administrators and delivered as e- instructors while other learning with attachments may be visible to all auxiliary PDF users. and video In addition, attachments can be resources made visible to users only if they included are registered for the separately) corresponding learning object. SERIAL 14111-RFP Includes ways to link content and assignments in blended learning courses 11.2 so that the Comply Core Delivered Standard system functionality. components are part of a single course and can be assessed and tracked accordingly Is optimized for reusability in general (not just measured by SCORM support). 11.3 Learning Comply Core Delivered Standard system functionality. objects can be mixed and matched for curricula and course customization 12.0 Delivery Architecture Supports a wide variety of delivery architectures. For instance, an eLearning architecture Content can be hosted by involving a Cornerstone, the client, or a third- 12.0 Comply Core Delivered content party. SCORM courses must be repository that hostd by Cornerstone. may be on a different server than the LMS and is supplied by another vendor. Can deliver and/or manage as large a variety of learning objects 12.1 and activities as Comply Core Delivered Suported. possible based on such fundamentally different approach's as: SERIAL 14111-RFP Cornerstone brings together the best of Enterprise 2.0 technologies with the latest in social networking to enable effective workplace collaboration, improve employee performance, and drive innovation from customer and partner communities. Cornerstone delivers a complete social networking and workplace communities platform. This includes communities of practice, rich user profiles, expertise Infor 12.1.1 Comply Core Delivered location, tag clouds, mal learning rating/sharing content, knowledge management, blogs, wikis, podcasts, RSS feeds, and much more. For example, discussion forums can be created within the Cornerstone solution and monitored by administrators. Chats and forums can be assigned to specific users around appropriate topics and used as learning resources and collaboration points for user's across the organization. Const Any learning object can include ructivist predefined resources and learning attachments. Additionally, our environments Connect Platform allows for (problem- 12.1.2 Comply Core Delivered interactivity during any training centered, through Learning Communities, discovery- Course Blogs/Postings, Topics, based, game- Learning Activities and based, Learning/Course Teams. inductive, etc.) Colla 12.1.3 borative/social Comply Core Delivered Suported. learning Curriculum functionality allows administrators to create blended learning programs that are flexible and easy for users to manage. Training curricula can include any learning object in the catalog (such as classroom Blend events, online courses, tests, 12.1.4 Comply Core Delivered ed learning materials, postings, etc.) and even defined action steps or free form items. Once created, a curriculum acts as a single learning object for users to search for and request, for managers to assign and approve, and for administrators to track and report. SERIAL 14111-RFP In addition to Cornerstone’s social collaboration tool, Cornerstone Connect, a user can recognize and award badges to others in the system. The user Game would simply go to that person’s -based Feedback page and click on the learning; badge icon. The user will be able gamification to choose the badge that best 12.1.5 support Comply Core Delivered represents the person’s (ribbons, accomplishment. points, honors, Client administrators can create tracking any number of custom badges boards) appropriate for your organization. Administrators can also associate a point value to the badge, and can limit the ability to award badges to the person’s direct and indirect managers Allows courses not residing in the LMS domain to be launched within LMS, including launching courses from 12.2 Comply Core Delivered Supported. content repositories in different locations within the county intranet, as well as on the Internet Provides an audit trail for Cornerstone maintains an audit required history for user record changes, deployments of learning object changes, task 12.3 Comply Core Delivered mandated completions, and other training functionality throughout the (compliance application. training) Social collaboration elements Provides such as blogs, podcasts, wikis, integration with and discussion forums can be 12.4 social Comply Core Delivered imported and published as part of networking a curriculum, certification, or services made as pre/post work. SERIAL 14111-RFP The following file types can be uploaded into the application: .jpg, .jpe, .jpeg/ image, .gif/image, .png/ image, .bmp/ image, .txt/ text plain, .docx/ word document, .dotx/ word document, .doc/ word document, .dot/ application/ms-word, .xlsx/ excel, .xls/ excel, .pptx/ powerpoint, .ppt/ powerpoint, Allows delivery .ppsx/ powerpoint, .pps/ of a wide application/vnd.ms-powerpoint, variety of .pdf/ application, .vsd/ 12.5 content in Comply Core Delivered application, .wma/ audio/x-ms- diverse file wma, .mp3/ audio/mpeg, .wav/ formats (List audio, .mid/ audio/midi, .html/ formats) text/htm, .htm/ text/html, .swf/ application/shockwave-flash, .avi/ video, .mpeg/ video, .mpg/ video, .wmv/ video, .m4v/ audio, .m4a/ audio, .flv/ video, .png/ graphic, .arf/ webex recording, .mpp/ ms project, .rtf/ rich text format, .msg/ outlook mail message, .rm/ application/vnd.rn-realmedia. Cornerstone’s offline player allows users to complete online courses while not connected to the internet. While using the offline player, online classes and quick courses behave as though they are being used online: bookmarks are kept, progress is saved, etc. After reconnecting to the internet, the user can upload the results of their offline training into Cornerstone.To use the Has offline Offline Player, your player organization’s IT department 12.6 Comply Core Delivered capabilities must first install it on each user’s (List players) computer. Clients are provided an MSI package to assist their IT departments with deployment. Once installed, users can retrieve their own personal key from their transcript page. Using the Offline Player, users can download available training courses while online, and complete the training while offline. Finally, when they are back online, users can upload the results of their offline training. Offers a browse mode whereby This requirement would need to 12.7 testing Exception Custom be further scoped. requirements are suspended; SERIAL 14111-RFP ex: to be used for audits - a department head can audit/review course content Allows Just-in- 12.8 Time learning Comply Core Delivered Supported. modules launch. There are too many variables to provide this information. Latency times are typically impacted by the size of the page or report Launches being accessed, and potentially on courses the user’s connection to the regardless of 12.9 Comply Core Delivered internet as well. For example, their source large reports take longer than without delay or basic pages. Additionally, page loss of fidelity load time for someone with a poor connection can take longer than someone with a broadband connection. Includes configuration management and version control features for content, including The application provides for 12.10 Comply Core Delivered checking files complete version management. in and out, revision tracking for audit changes, and roll back to earlier versions. Native mobile applications are available on devices running iOS 5 and above, and Android 3.3 and Supports above. Additionally, Cornerstone 12.11 delivery to Comply Core Delivered is mobile browser accessible via mobile devices native browsers in Windows Phone 8 and above, iOS 5 and above, and Android 3.3 and above. Any SCORM 1.2 & 2004- compliant content provider (or Permits providers with AICC and bookmarking SCORM tagged meta-data files) locations in can be tracked in Cornerstone and courses and offers bookmarking, progress other content as tracking, the recording of testing 12.12 well as storing Comply Core Delivered scores embedded in the content, commonly and other rich data tracking. accessed Additionally, users can add screens in the topics, authors, and postings to LMS as their “My Favorites” folder. favorites Users can allow other users to view their favorites or can hide SERIAL 14111-RFP them and keep them private. Includes a user system requirement checker that test learner systems for appropriate plugins and versions before 12.13 Exception Custom Not supported. courses are launched. The LMS should not allow the learner to launch content unless it passes the test. 13.0 Assessment Authoring and Delivery Cornerstone’s test engine Provides an provides administrators with the internal ability to create, categorize, and function to deliver tests to meet your training create and goals. The tests can be delivered deliver a wide as stand-alone learning objects, or Comply Core Delivered variety of can be associated with any variety assessment of learning objects contained in types (with Cornerstone. Pre and post-course template tests, prerequisite assessments, options) and certification programs can be developed using the test engine. Allows Question types supported include authoring and Yes/No, True/False, Multiple delivery of a Choice – Single Answers, 13.1 variety of Comply Core Delivered Multiple Choice – Multiple assessment item Answers, Text Only, Free Form types, (essay), and Click on Image. including: Questions also support video. Multiple choice 13.1.1 - single and Comply Core Delivered Supported. multiple answer Fill in the blank - which allows for multiple correct answers (upper case, 13.1.2 Comply Core Delivered Supported. lower case, various wordings); that is also auto- scored 13.1.3 Matching Exception Custom Not supported. SERIAL 14111-RFP The Cornerstone test engine tool supports multiple question types, including: yes/no, true/false, multiple choice/single answer, 13.1.4 Drag and drop Exception Not Applicable multiple choice/multiple answer, text only, free form (essay) and click on image. Currently we do not support drag-and-drop question types. Ranking/Orderi 13.1.5 Comply Core Delivered Supported. ng 13.1.6 Image selection Comply Core Delivered Supported. 13.1.7 Word scramble Exception Custom Not supported. Labeling an 13.1.8 Comply Core Delivered Supported. image Essay or short answer implemented as online forms/fields for easy review, not downloadable 13.1.9 Comply Core Delivered Supported. Word documents; system will auto-score other non-essay questions in the assessment Includes a grade book function for instructor- led or blended courses/assignm ents, with The Attendance and Scoring tab possibility of allows administrators and 13.2 revising grades; Comply Core Delivered instructors to manage attendance, includes an enter scores, and pass/fail values. audit trail showing the user/date/time in which changes were made Allows grades to be assignable A test, whether standalone LO or to a variety of part of another LO, can be part of 13.3 objects, Comply Core Delivered Connect Learning Communities, including etc. discussion and blog postings Provides the ability to export Grades/scores can be exported 13.4 and import from Comply Core Delivered through a standard or custom Excel into the report. grade book SERIAL 14111-RFP Tracks time it takes for students to answer questions via 13.5 time stamps, Comply Core Delivered Supported. including time stamps on essay submissions and video viewing Assessments can be set as either summative or 13.6 formative with Comply Core Delivered Standard system functionality. appropriately different features applied to each The test engine is used to create, categorize, and deliver tests/assessments to meet your organizational training goals. The tests/assessments can be delivered as stand alone learning objects, or Provides a can be associated with any variety rating or of learning objects contained in assessment 13.7 Comply Core Delivered Cornerstone. Administrators can function for use this tool to create follow-up mentor/coach/O exams for compliance training, to JT assessments measure employee competence in strategic knowledge areas, to perform placement exams for new hires, to evaluate the effectiveness of certain training programs, and more. SERIAL 14111-RFP Through our test engine, free form (essay) is a response type option. This response type requires users to enter a free form or essay response to the question (e.g., what makes the sky blue?). The character limit for responses is 4000. This question type must be scored by a test grader on a point scale. The maximum point value for the question is determined by the weight of the question in the test. Tests are not scored until all free form questions are scored. All test graders have equal access to score Allows test questions upon user input/upload submission. A free form question 13.8 and Comply Core Delivered can only be scored by one grader management of and you may add any number of essay questions graders to a test. Each question appears individually to allow different graders to score different questions. Upon submission of a test with a free form question, the user has a status of Pending Grade. Once all free form questions are graded, the user is moved to a status of Complete or Failed based upon their score.Test graders will be given dynamic access to grade open ended questions added to a test. Test graders receive an email notification that a test is waiting to be graded. SERIAL 14111-RFP Through our test engine, free form (essay) is a response type option. This response type requires users to enter a free form or essay response to the question (e.g., what makes the sky blue?). The character limit for responses is 4000. This question type must be scored by a test grader on a point scale. The maximum point value for the question is determined by the weight of the question in the test. Tests are not scored until all free form Allows questions are scored. All test instructors to graders have equal access to score view and grade test questions upon user essay submission. 13.9 assignments Comply Core Delivered A free form question can only be online without scored by one grader and you having to may add any number of graders to download them a test. Each question appears as files individually to allow different graders to score different questions. Upon submission of a test with a free form question, the user has a status of Pending Grade. Once all free form questions are graded, the user is moved to a status of Complete or Failed based upon their score. Test graders will be given dynamic access to grade open ended questions added to a test. Test graders receive an email notification that a test is waiting to be graded. Allows embedding of videos, Comply/ Yes. However, animation is not 13.10 Core Delivered animations, and Exception supported. graphics into assessments Cornerstone supports the process of remediating learners based on Can be assessment scores in a couple configured to different ways. First at the test remediate level you can set remediation students to based on the response. Second, particular 13.11 Comply Core Delivered you can create curriculums that content or prescribe learning based on locations in responses. For example, a user content based takes a test, and based on the on assessment responses actions for users will be results dictated by how they progress through a learning object. Allows 13.12 importing sets Comply Core Delivered Supported. of questions SERIAL 14111-RFP formatted in a standardized format Randomizes the order of questions within an 13.13 Comply Core Delivered Supported. assessment and the answers within a question Allows creating pools of questions per objective, such This requirement needs to be 13.14 that different Exception Custom futher scoped. items can be presented in subsequent student tries Allows assigning weights to Administrators can enter custom individual 13.15 Comply Core Delivered point/weight distribution for test answer choices sections. for assessment elements, so that it: Gives learners partial credit for correct answer chosen 13.15.0 in an Comply Core Delivered Supported. assessment element with multiple correct answers Penalizes learners more 13.15.1 for answers that Comply Comply Supported. are obviously incorrect Allows customizing Hints can be embedded into the 13.16 Comply Core Delivered hints and question itself. feedback Allows browser lockdown to prevent an end user from opening another 13.17 Exception Custom Not supported. browser window to look up answers from a resource site Allows use of 13.18 proctor Comply Core Delivered Could be a user role/permission. passwords SERIAL 14111-RFP Allows IP restrictions to ensure Not supported. Falls on customer 13.19 assessment can Exception Custom resources. only be taken in certain locations Allows setting of assessments 13.20 to either Comply Core Delivered Supported. practice or test mode Allows export of assessments 13.21 Comply Core Delivered Supported. to Word and PDF Supports accepting informal learning Through our Connect platform, assessments which enables informal learning such as learner activities, users are able to upload Web pages and 13.22 Comply Core Delivered required assessments while the collaborative administrator is able to ability to projects with set and change file size limits for multimedia, these. with ability to set and change file size limits for these Supports the ability to tie assessments to learning objectives and outcomes that 13.23 Comply Core Delivered Supported. are input into the system or linked to Performance Management Systems The Cornerstone system is in Assessments compliance with Section 508 of created by the the Rehabilitation Act of 1973 as LMS certified by Criterion 508 13.24 assessment Comply Core Delivered Solutions, Inc., an independent authoring tool Section 508 auditor. This ensures are Section 508 that all user features are compliant. accessible to people with disabilities. Allows When creating a test, the assessments to administrator can enter a number be set up with a to define the time limit for users configurable to take the test. If left blank, there 13.25 Comply Core Delivered timer, with the is no time limit associated to the running timer test. Administrators can also being visible to choose to allow the timer to run the end even after the user has exited their SERIAL 14111-RFP user/learner test attempt. Prevents end users from capturing screen shots of questions; to prevent the sharing of Not supported. Falls on customer 13.26 Exception Custom assessment resources. information with other learners; example: certification exams Supports the ability to copy one assessment The Question Bank can be used to 13.27 as a base Comply Core Delivered create, store, and repurpose assessment to custom test questions. create another one Supports full editor and spellcheck We do not support a specific functionality for editor/spell check for the test 13.28 all of the Exception Custom engine (other than standard assessment browser spell check). elements (titles, questions, answers) Through our proprietary reporting and analytics tool, essentially any data in the application can be reported on. For example, two of our standard reports display summary information of all test and survey data. Reporting The Test Question Item Analysis functionality report is a powerful standard which allows an report included with the system admin the that enables you to analyze the ability to print a value, clarity, and difficulty level full assessment of test questions. The report (questions and displays each question on a test, 13.29 Comply Core Delivered answers) in an as well as the percentage of easy manner; correct and incorrect responses. without having In addition, the Test Analysis to drill down report displays information about into each users’ test attempts, grouped by individual test name. These two reports question provide clients with great analytical detail on the quality and effectiveness of your assessments. All reporting is web-based with the option to prepare printable reports or export reports to various formats. SERIAL 14111-RFP The Cornerstone application, as per the Software-as-a-Service model, is designed to scale horizontally. It is multi-tenant- efficient, offering a load balanced farm of identical instances known as swim lanes. When additional server equipment is added, the application capacity scales to fill the available hardware.This allows virtually unlimited growth Share a case capacity.As opposed to a classical study which behind the firewall or hosted details the architecture, our application and largest our hardware platforms are assessment designed to:• Efficiently support a (number of high number of users and questions, customers• Redistribute load duration of easily• Add additional capacity assessment) and easily and quicklyWe manage the largest capacity proactively by in-depth 13.30 Comply Core Delivered number of monitoring of system utilization simultaneous and address any growth trends by users optimizing software, rebalancing completing the clients across swimlanes, or by assessment to adding and upgrading hardware. highlight what Our solution has been in use by your system has Fortune 100 companies since supported from 2001. Cornerstone has over two a load dozen clients with more than perspective. 50,000 users. We service 14 multi-national corporations with over 150,000 active users each, including three with over 350,000 users. Cornerstone has over 2,153 clients representing 18.1 million users across 191 countries and 42 languages. Currently, Cornerstone provides services to 16.6 million active users per year with a scalable configuration that is virtually unlimited. SERIAL 14111-RFP 14.0 Mentoring, Coaching, and Other Developmental Scenarios Supports management 14.1 assigned on an Comply Core Delivered Standard system functionality. individual or class basis of : Through development plans, managers can assign activities to their direct reports including coaches or mentors. These activities would be logged and progressed tracked within the user’s development plan. In addition, Cornerstone Connect delivers a complete social networking and workplace communities platform. This enables a more collaborative form of coaching and mentoring. For example, discussion forums can be created within the Cornerstone solution and monitored by administrators. Chats and forums can be assigned to specific users 14.1.1 Mentoring Comply Core Delivered around appropriate topics and used as learning resources and collaboration points for users across the organization. Another example is Expert Q&A. This is an Expert Query tool to align subject matter experts with those seeking expertise. Finally, the user can add external training to their transcript which can include coaching and mentoring sessions. Once entered onto the transcript this information becomes searchable and reportable for analytical reporting. Managerial approval is required before an item will be added to the user's transcript. 14.1.2 Coaching Comply Core Delivered Supported. 14.1.3 Groups Comply Core Delivered Supported. 14.1.4 Projects Comply Core Delivered Supported. Users can add OTJ and external training to their transcript. Once entered onto the transcript this information becomes searchable and reportable. Managerial approval is required before an 14.1.5 OJT Comply Core Delivered item will be added to the user’s transcript. The user can also upload supporting documents related to the OTJ or external training such as diplomas, transcripts, SERIAL 14111-RFP certifications, etc. Shadowing and 14.1.6 Comply Core Delivered Supported. apprenticing Rotational 14.1.7 Comply Core Delivered Supported. assignments Career 14.1.8 Comply Core Delivered Supported. programs Conferences/for 14.1.9 ums/seminars/w Comply Core Delivered Supported. orkshops 15.0 Collaboration and communication options Allows learners to take notes as they interact with learning materials. These notes should be persistent between sessions and automatically associated with locations in the Connect social platform allows content. If the for interactivity during any learner wishes, training through Learning their notes can Communities, Course be posted, Blogs/Postings/Wikis, Topics, 15.1 Comply Core Delivered either internally Learning Activities and in the LMS, or Learning/Course Teams, thus publicly outside enabling a learner to input notes of the LMS, that can be referenced for later through APIs to use. applications like Twitter and Facebook. Ability to limit user access to APIs that can reach external, public applications like Twitter and Facebook. SERIAL 14111-RFP Cornerstone Connect fosters social (informal) learning, organizational memory, professional networking, and Includes better communication across your collaboration employee base and the extended functions to enterprise. enable users to Cornerstone delivers a complete communicate social networking and workplace with each other, communities platform. This instructors, includes communities of practice, course rich user profiles, expertise administrators, location, tag clouds, system rating/sharing content, knowledge administrators, management, blogs, wikis, 15.2 etc. LIST ALL Comply Core Delivered podcasts, RSS feeds, and much YOUR more. SYSTEM Threaded discussion depends on SUPPORTS the web conferencing tool that the (e.g. email, client is using. Cornerstone threaded Learning provides seamless discussions, integration with WebEx, dedicated team Microsoft Live Meeting, Adobe spaces, surveys, Connect, and Citrix products such chat, et al) and as GoToMeeting. basic Lastly, Chats and forums can be limitations. assigned to specific users around appropriate topics and used as learning resources and collaboration points for learners across the organization. Supports full editor and spellcheck functionality for Cornerstone Connect supports 15.3 all of the Comply Core Delivered spell check. collaboration and communication content 16.0 Competency Management and Development/Learning Plans Supports competency management and Individual Development 16.1 Comply Core Delivered Supported. Plan infrastructures, with employee performance plan Automatically links training interventions 16.2 and competency Comply Core Delivered Supported. objects based on user approval SERIAL 14111-RFP Features advanced natural language matching 16.3 algorithms and Exception Custom Not supported. associated linking functionality; Word Clouds for example. The Universal Profile allows for students to manage their Allows students portfolios (using career/resume to create and 16.4 Comply Core Delivered fields defined by system manage e- administrators), as well as portfolios managing and storing documents/files of their choice. Maps individuals/grou ps to a course/curriculu m dynamically 16.5 Comply Core Delivered Supported. based on rule sets determined by Performance Management System Cornerstone's employee performance management system provides comprehensive tools to direct and measure performance at the individual, departmental and organizational level. This includes goal management, performance reviews, competency assessments, Uses a variety observation checklists, and of competency development plans. Goals and frameworks, competencies can be included in providing a within the performance review as 16.6 Comply Core Delivered range of choices well. Because the reviews are for methods of integrated with the other aspects measuring of the performance management competencies process, the user is evaluated more objectively and given clear and direct feedback based on specific achievements and performance. Organizations achieve better accountability, and managers minimize the amount of time required to create such an extensive review of an employee’s performance. SERIAL 14111-RFP Rating scales are configurable by administrators. You are not limited by the number of rating scales you use in the system. Uses a variety Additionally, you can have 16.7 of competency Comply Core Delivered multiple rating scales in the same rating scales review. For example, some customers might use one scale for goals and another for competencies. Includes built- in Update functions to reconcile linkages due to 16.8 Comply Core Delivered Supported. changes in training interventions or competency objects Imports/exports competency- related data in common 16.9 Comply Core Delivered Supported. database formats such as XML or MS Access Can provide Individual Development Plan (IDP) progress, training completion, and other related 16.10 input to Comply Core Delivered Standard system functionality. competency management, performance appraisal and other Performance Management systems Can provide automated analysis/assess Based on an employee’s ment survey of competency assessment, employee's Cornerstone can dynamically current and generate an individual anticipated development plan. Alternatively, 16.11 Comply Core Delivered skills and based on assessment scores, the competencies. platform can dynamically Gaps are recommend training experiences identified with to close identified skill gaps or to appropriate bolster strengths. courses indicated to SERIAL 14111-RFP address closure of gaps. The system will allow for anything from self-assessments to 360 degree views. When setting up 360’s, administrators can set Ability for self- specific weights for the different 16.11.1 Comply Core Delivered assessment assessors or groups of assessors (e.g., peers). This will be taken into account when the system ultimately calculates the overall rating. Ability for 16.11.2 manager Comply Core Delivered Supported. assessment Ability for 16.11.3 multi-rater peer Comply Core Delivered Supported. assessment Ability for 16.11.4 direct reports Comply Core Delivered Supported. assessment Assessments allow for both 16.11.5 Comply Core Delivered Supported. score ratings and comments Reporting functionality which displays/compa res assessment Established through our standard 16.11.6 Comply Core Delivered inputs by self, reports and analytics tool. manager, direct reports, and peers to identify gaps Provides career tracking tools for students to 16.12 set and monitor Comply Core Delivered Standard system functionality. progress towards career objectives Prioritizes competencies and courses based on changes in 16.13 Comply Core Delivered Supported. career, regulations, funding, or organizational vision/mission SERIAL 14111-RFP Cornerstone Performance (which is tightly integrated with Cornerstone Learning) allows for the creation and management of single- or multi-level competency models based on any number of Can import categorized items, behaviors, and competency associated developmental inventories and activities. A model may contain a 16.14 rubrics as well Comply Core Delivered nested framework of:• Model as learner data Category (Job Family)• Model from external (Profiles)• Competency Category systems (Cluster)• Competency• Individual Raters / Behavioral AnchorsIt should also be noted that development activities can be assigned at the competency level or at the individual rater / behavioral anchor level. Development plans allow users to create plans and manage their growth and development. Customized development plans allow administrators and Supports managers to more accurately individual capture the user's strengths, development weaknesses, objectives, and 16.15 plans (IDPs) Comply Core Delivered resources needed. with the Users can create objectives which following consist of training items from the options: training catalog and free-form, job-related action steps. After creation, users can view and manage those components to track progress Dynamic IDP that is updated as employee registers, attends, 16.15.1 Comply Core Delivered Supported. completes, or does not complete approved training SERIAL 14111-RFP In the certification creation process, the Scheduling page contains all scheduling functionality for certificates with or without renewals. Administrators can define one period for certificates without a renewal period, or they can define multiple periods for certificates with renewals. From the Transcript Details Page for certifications, users can view certification expiration as well as view and launch the training associated with the certification, Certification/re view the certification history, and certification 16.15.2 Comply Core Delivered print any past certificates. schedules and Automated, scheduled reminders notification can be sent to users and managers to inform them of open compliance requirements, increasing completion ratios for training while minimizing administrative pampering. E-mail reminders can be triggered for any highly specific reason. Automatic reminders/warning emails can be triggered at predetermined dates (30 days, 15 days, 5 days, etc.) Emails can automatically be escalated to the user’s manager, manager’s manager, or other distribution. Competency 16.15.3 Comply Core Delivered Supported. decay refresher Mandatory/opti 16.15.4 onal training Comply Core Delivered Supported. requirements Ad- hoc/emergent 16.15.5 Comply Core Delivered Supported. training requirements Full reporting Via Cornerstone's reporting and 16.15.6 Comply Core Delivered capability analytics tool. Compatibility with any 16.15.7 Comply Core Delivered Supported. competency framework Custom rating scales, in terms of Compatibility type and design, can be created with any by the County without any 16.15.8 Comply Core Delivered competency programming knowledge. These rating scale scales may be numeric, alpha, text, or item-based. Performance thresholds 16.15.9 Comply Core Delivered Supported. (times to complete) SERIAL 14111-RFP 17.0 Learner Tracking Once logged in, the user is presented with a personalized learning portal, which includes a customized transcript that contains their entire learning history. This transcript also provides several options to register, launch, select, withdraw, renew, and complete training. The transcript displays the status of each training item requested by, assigned to, or required of the user. The status column on the transcript allows users to Capable of determine if the training is tracking, pending, approved, denied, and reporting and many other potential stages. storing a wide Depending on the status, users range of learner can register, launch, and perform 17.1 Comply Core Delivered performance a variety of other training data by functions directly from the individual, by transcript. Users have the ability group and by to print their transcripts as well. cohort groups Users can easily archive and de- archive training items as needed.From the manager’s Universal Profile, they can easily view all of their direct and indirect reports. Managers can drill down to view all of their talent management of their employees.From their employee’s Universal Profile, managers can also assign training, launch off- cycle performance reviews and compensation tasks, provide feedback, award badges, create goals, and run reports. Every user has a Universal Profile. This profile serves as the center of an employee’s universe and enables them to view and complete action items, update their personal information, find colleagues, give and receive Contains an feedback, and connect to specific electronic tasks across the talent training jacket management suite. 17.2 providing a Comply Core Delivered This page displays the user’s view of career image, contact information, information, summary information, skills, including: interests, team hierarchy, and additional information. Depending on the modules the client is using, the user can also access their resume, career preferences, and volunteer activities from this page. SERIAL 14111-RFP Graphical tabs on the left side allow access to the following areas with one click: Feedback: This page allows the user to view their feedback, recognition, and milestone posts. They can also request feedback from another user from here. Actions: The page displays all of the user’s action items to be completed. Depending on the functionality being used by the client, these items may include training, performance reviews, goals, succession tasks, development plans, compensation tasks, volunteer activities, and more. Snapshot: This page enables users to view and manage performance and succession information such as competencies, development plans, goals, performance reviews and succession data. Transcript: This page enables the user to manage their training. The transcript displays the status of each learning object (LO) requested by, assigned to, or required of the user, which allows the user to determine if the training is pending, approved, denied, or many other potential statuses. Depending on the training status, users can register, launch, and perform a variety of other training functions directly from the transcript. Additionally, from the user’s Universal Profile page, users can also use our Global Search feature. Users will be able to search for people, training, content, documentation, topics, and resources across your workforce in one place to streamline access to information. Global Search ensures a dynamic people directory and information source that’s updated in real time. Traini 17.2.1 ng and Comply Core Delivered Supported. education Qualif 17.2.2 ications and Comply Core Delivered Supported. certifications Caree 17.2.3 Comply Core Delivered Supported. r History SERIAL 14111-RFP Advancement 17.2.4 Comply Core Delivered Supported. status 17.2.5 Awards Comply Core Delivered Supported. Tracks learner data while Learner data (such as total # of learners are views, percent completed, taking e- training hours, etc.) is tracked 17.3 Comply Core Delivered learning in a while learners are taking wide variety of elearning SCROM & AICC file formats and formatted courses. authoring tools Cornerstone brings together the best of Enterprise 2.0 technologies with the latest in social networking to enable effective workplace collaboration, improve employee performance, and drive innovation from customer and partner communities.By encouraging collaboration and making it easy to join communities of practice, Cornerstone Connect fosters social (informal) learning, Incorporate organizational memory, social media professional networking, and and other better communication across your features to employee base and the extended support enterprise.Cornerstone delivers a 17.4 informal Comply Core Delivered complete social networking and learning, workplace communities platform. tracking This includes communities of includes "social practice, rich user profiles, monitoring" expertise location, tag clouds, tools that track: rating/sharing content, knowledge management, blogs, wikis, podcasts, RSS feeds, and much more.For example, discussion forums can be created within the Cornerstone solution and monitored by administrators. Chats and forums can be assigned to specific users around appropriate topics and used as learning resources and collaboration points for users across the organization. One of the standard reports allows administrators to view comments that have been left on users’ Profiles. They can filter by conversation date that the comments were rate (volume of made or Organizational Unit 17.4.1 comments about Comply Core Delivered criteria to determine which user learning profiles are included in the report. objects) Another report allows administrators to view topics that users have been designated Topic Moderators for and the number of SERIAL 14111-RFP postings associated with those topics. Amplification rate (volume of 17.4.2 sharing of Exception Custom Not supported. learning objects) Applause rate (volume of 17.4.3 sharing of Exception Custom Not supported. learning objects) The high configurability of Cornerstone allows for the creation of an unlimited number of customizable fields throughout the application. Custom fields help provide needed information to users and administrators, allow organizations to create precise reports, and enable the collection Includes the of important data. Each custom ability to add field has a unique email tag that custom fields to can be used in system generated track additional email communications. learner 17.5 Comply Core Delivered Depending on the type of custom information, so fields you are creating, options that they can be include branched dropdown, included in check boxes, conditional numeric analyses and fields, date fields, dropdowns, reports hierarchy, multiple check boxes, numeric fields, radio buttons, scrolling text boxes, and short text boxes. Client administrators can easily create these fields with no assistance from Cornerstone. All custom fields can be reported on. Tracks Cornerstone Certifications accredited delivers powerful tools to track learning units, all types of recurring, renewal- for instance, based, multi-year designations. continuing This includes setup and learning units deployment of any type of 17.6 Comply Core Delivered (CLUs), designation; requirement changes continuing from initial to renewal periods; education units ongoing tracking of compliance (CEUs), and status; and production of continuing complete reports. professional Three of our standard reports SERIAL 14111-RFP education include the Certification Report, (CPEs, CoJet) Certification Details Report, and Certification Summary Report. Provides the ability to print a variety of 17.7 Comply Core Delivered Supported. tracking-related items, including test scores Can track a wide variety of 17.8 Comply Core Delivered Supported. relevant items, including: 17.7.1 Enrollments Comply Core Delivered Supported. 17.7.1 Withdrawals Comply Core Delivered Supported. 17.7.2 Launches Comply Core Delivered Supported. 17.7.3 Completions Comply Core Delivered Supported. 17.7.4 Attendance Comply Core Delivered Supported. Competencies 17.7.5 Comply Core Delivered Supported. acquired Use of 17.7.6 Comply Core Delivered Supported. materials 17.7.7 Evaluations Comply Core Delivered Supported. 17.7.8 Grades Comply Core Delivered Supported. Assessment 17.7.9 Comply Core Delivered Supported. scores Users can view their online learning results through the Allows a transcript page in their Universal learner to view Profile. The Training Progress their own online section, under Training Details, 17.8 course results Comply Core Delivered provides information such as on a lesson-by- course progress percentage, date lesson basis as last accessed, number of times the well as: course was viewed, status (in progress, complete), etc. 17.8.1 Time spent Comply Core Delivered Supported. Date and time 17.8.2 Comply Core Delivered Supported. last accessed Number of test 17.8.3 Comply Core Delivered Supported. tries 17.8.4 Course grade Comply Core Delivered Supported. SERIAL 14111-RFP 18 Certificates, Forms, and Surveys Clients can create, edit, and manage multiple certificates themselves using an advanced HTML editor within the system. Allows Administrators can also copy, administrator delete, print, and deactivate design/upload certificates from the depository. and learner Custom tags can be used in the 18.0 Comply Core Delivered delivery of certificates. Organizations can course then associate any certificate with completion any Learning Object at the certificates Organizational Unit level. Completion certificates can be issued upon course completion. Users can then save and/or print the certificate. Allows easy printing of 18.1 certificates, Comply Core Delivered Supported. surveys, and evaluations Cornerstone delivers online survey capabilities to allow organizations to deliver dynamic assessments or surveys to meet a wide range of requirements. These tools support complex requirements like delivery randomization; specified percentage of employees receiving a survey; and iteration of the same survey for necessary Provides survey number of subordinates. Surveys 18.2 functions as Comply Core Delivered can be based on any group of follows: users, or regions, or divisions. The variety of question types and response formats allows information to be captured in a variety of ways. Reports on survey responses can then be generated for each task or for recurring surveys over time. In addition, Cornerstone can support all of the standard, third party testing and assessment tools. 18.2.0 Create and edit Comply Core Delivered Supported. 18.2.1 Import Comply Core Delivered Supported. 18.2.2 Copy Comply Core Delivered Supported. Define 18.2.3 Comply Core Delivered Supported. properties 18.2.4 Preview Comply Core Delivered Supported. Define survey 18.2.5 Comply Core Delivered Supported. link location SERIAL 14111-RFP Question types include Likert Has different scale, Multiple Choice – Multiple options for Answer, Multiple Choice – Single design of 18.3 Comply Core Delivered Answer, True/False, Yes/No, and surveys, such as Text Only. Comments boxes can multiple choice, be included and required for a Likert scale question. 19.0 Metadata Support Any learning object within the training catalog can be associated Includes a with a variety of metadata such as convenient training type, provider, title, mechanism for description, language, skill, adding subject, price, availability criteria, 19.1 metadata or Comply Core Delivered competencies, certifications, and descriptive more. labeling to In addition, the County can easily courses and create their own custom fields other objects tied to learning objects without any vendor assistance or programming knowledge. Search results can be filtered by Uses metadata ILT properties such as location, 19.2 to search the Comply Core Delivered location number, and instructor, course catalogs in addition to the other metadata available. Presents options for display of metadata to learners and 19.3 Exception Custom Not applicable. administrators at relevant nodes in their workflow Allows configuring how metadata tags will be 19.4 input by content Exception Custom Not applicable. developers (checkbox, date, dropdown, text box, etc.) 20.0 User Profiles Has the ability to manage “Super” administrators are those 20.1 profiles for Comply Core Delivered with access to the entire portal. organizations, not just users Has the ability to matrix learner Users can belong to multiple 20.2 characteristic Comply Core Delivered organizational units. demographicall y, organizationally SERIAL 14111-RFP , etc. (for example, assign students to more than one job role, in more than one organization 21.0 Resource Management 21.1 Manage: Comply Core Delivered Supported. 21.1.1 Expendables Comply Core Delivered Supported. Supplementing Instructor Led Training Administration is integrated facilities management. Employees who create events can request facilities and equipment during scheduling. This feature tracks resources such as computer assets, classroom and lab PC 21.1.2 Training Assets Comply Core Delivered configurations, and audio visual needs. An office manager can be notified via email of facility and equipment requests for their location. Cornerstone identifies conflicts based on the location, event time and day, enabling instructors to remedy scheduling issues. Learning facilities - buildings, classrooms, number of seats 21.1.3 per classroom, Comply Core Delivered Supported. equipment in classroom, third-party vendor sites/locations Staff 21.1.4 Comply Core Delivered Supported. assignments Cornerstone’s reporting and Reporting advanced Analytics tools give functionality 21.2 Comply Core Delivered clients ready access to all internal tied to resources and external training costs, listed above allocations, and trends. Cornerstone learning focuses on Physical electronic classroom mentoring 21.3 Library Exception Custom but does not track physical library Management resources. Ability to add physical library Cornerstone learning focuses on items to a electronic classroom mentoring 21.3.1 library with Exception Custom but does not track physical library titles, resources. descriptions, authors, ISBN SERIAL 14111-RFP numbers; ex: books, videos, DVDs, etc. Ability to Cornerstone learning focuses on define/configure electronic classroom mentoring 21.3.2 a check-out Exception Custom but does not track physical library period of time; resources. ex: two weeks Cornerstone learning focuses on Ability to electronic classroom mentoring define/manage 21.3.3 Exception Custom but does not track physical library the quantity of resources. the items Cornerstone learning focuses on Ability for end electronic classroom mentoring users to search 21.3.4 Exception Custom but does not track physical library the library for resources. items Cornerstone learning focuses on Ability for end electronic classroom mentoring users to check 21.3.5 Exception Custom but does not track physical library out library resources. items Cornerstone learning focuses on Ability for an electronic classroom mentoring 21.3.6 admin to check Exception Custom but does not track physical library in library items resources. Ability for end Cornerstone learning focuses on users to add electronic classroom mentoring 21.3.7 star-ratings and Exception Custom but does not track physical library comments to resources. library items Ability for end users to receive an email Cornerstone learning focuses on notification that electronic classroom mentoring 21.3.8 Exception Custom they have but does not track physical library checked out an resources. item and how to pick it up Ability for end users to receive Cornerstone learning focuses on a reminder electronic classroom mentoring 21.3.9 email Exception Custom but does not track physical library notification that resources. item is due by a specific date Ability for end Cornerstone learning focuses on users to receive electronic classroom mentoring a reminder 21.3.10 Exception Custom but does not track physical library email resources. notification that item is overdue Ability for an Cornerstone learning focuses on admin to electronic classroom mentoring 21.3.11 Exception Custom remove library but does not track physical library items; ex: lost resources. SERIAL 14111-RFP book Reporting functionality for admin to print Cornerstone learning focuses on full list of electronic classroom mentoring 21.3.12 library items, Exception Custom but does not track physical library list of most- resources. utilized items, and list of most active users 22.0 Reports Contains a 22.1 robust internal Comply Core Delivered Supported. reporting tool Cornerstone includes a proprietary reporting engine that Offers comes with over 120 pre-defined predefined reports. These reports can be reports ( filtered by date range, user 22.2 Comply Core Delivered provide a list criteria, and more. Reports can be predefined generated and sorted by any reports) Organizational Unit (such as position, division, location, etc.) or a combination of. Uses permission levels with different kinds Content within reports and of access to 22.3 Comply Core Delivered dashboards will be constrained reports and based on the user’s permissions. reporting tool(s), including "run- only" role(s) Cornerstone offers a custom reporting tool, Analytics, which allows authorized users to create highly specific reports from hundreds of available data points. These ad hoc reports are created by applying filters and conditions via simple “drag and drop” Ability to capability to present a precise customize/confi view of desired data. 22.4 Comply Core Delivered gure existing Custom reports and dashboards reports can be scheduled at pre-defined intervals, shared with others, and delivered to an FTP site or emailed to the user’s designated account. All reporting is web- based with the option to print or export reports to various formats including Microsoft Excel, PDF, and Text. SERIAL 14111-RFP Clients can export their data at any time through our reporting engine and analytics tool. In addition, an outbound data feed can be established from Cornerstone to an internal client system such as a data warehouse. Cornerstone does offer data Delivers warehouse replication services. A additional client’s entire Data Warehouse is internal/external replicated to a separate server in 22.5 Exception Custom reporting tools our data center to allow clients to such as Crystal make direct SQL connections Reports over a Virtual Private Network (VPN). Clients can report against all data in the replicated data warehouse directly without having to use our Analytics module. Clients can then use their favorite reporting tool, such as Business Objects, Crystal Reports, Excel, etc. All reporting is web-based with Ability to print the option to print or export reports with 22.6 Comply Core Delivered reports to various formats appropriate including Microsoft Excel, PDF, options and Text. Can adjust the layout and 22.7 Comply Core Delivered Supported. formatting of reports Required Reporting 22.8 Comply Core Delivered Supported. capabilities including: Administer and maintain 22.8.1 performance Comply Core Delivered Supported. and evaluation metrics Track individual and 22.8.2 Comply Core Delivered Supported. group usage statistics Integrate evaluation 22.8.3 forms internal Comply Core Delivered Supported. and external to the course SERIAL 14111-RFP With Cornerstone analytics, the ability to create, run, automate and share reporting data is a standard feature within our suite. Reports can be run to query database information on standard Perform and custom fields and can be statistical sorted, summarized and filtered 22.8.4 analysis on the Comply Custom (or not at all) to support further database analytic analysis. This data can information then be printed, exported to Excel and Text.Additional discovery would be required to determine specific data needed and requirements analysis to meet the needs of the County Report on learner performance 22.8.5 Comply Core Delivered Supported. data by individual and group Perform summative 22.8.6 Comply Core Delivered Supported. evaluations of courses Administrators can run a custom report detailing the last time a particular user accessed the system. Administrators can also run a number of standard reports to help better assess system usage. For example, the “Enterprise Analytics Training Report” will help clients reporting on analyze the utilization of your system training offerings across the performance; organization down to the number of users individual. For Cornerstone logged into the Performance, the administrator 22.8.7 Comply Core Delivered system at can run a report and compare various times dates of when tasks were assigned per day; to and the current status. These trend peak and kinds of reports will give lull administrators a much better performance picture of system usage than simple page views and such. In addition, organizations using UberTags have the ability to track and deploy tags across any pages in the system. This includes any type of tag, including Google Analytics tags, retargeting tags, and live chat tags. Provides Through our proprietary reporting reporting on and analytics tool, essentially any 22.9 certification Comply Core Delivered data in the application can be status of groups reported on, including all learning and individuals, activities such as curriculum, SERIAL 14111-RFP including certification, course, etc. upcoming renewals, missed renewal deadlines, etc. Provides measures of employee 22.10 Comply Core Delivered Supported. learning progress and certifications Notification 22.11 Comply Core Delivered Supported. email history 23.0 Application Administration Once logged in, the user is presented with a personalized talent management portal. This portal can be personalized based on the user’s assigned division, position, location, etc., and can be configured to include unique navigation, logos, colors, images, functionality, and more. The “look and feel” of the user interface is established by the Provides user client, and can be customized for configurable different Organizational Units. interface so The Cornerstone Home Page is that both Core highly configurable. The custom 23.1 learners and Comply Delivered/Configurable page builder allows administrators administrators to add over 20 can optimize for predefined Widgets including an their particular image place holder, and header needs and footer messages. In addition, 10 HTML boxes are available. A YouTube video can be embedded as well. Administrators can configure which and how many of these widgets and HTML boxes are used to configure a user’s personalized home page, all without any required programming skills or custom projects. Create and restore archives Users can easily archive and de- 23.2 Comply Core Delivered of courses and archive training items as needed. curricula. Workflow in the application is extremely configurable to match Manages the your organization's needs. administration Administrators are presented with Core 23.3 process with Comply an extensive set of web-based Delivered/Configurable built-in administrative controls which workflows enable them to easily configure workflows and business rules. No special computer programming SERIAL 14111-RFP skills are required, and no assistance from Cornerstone is needed. Note Remote Desktop (RDP) to production servers is granted per user role and is only enabled to the team who manages the environment. There are only a small number of authorized Includes Cornerstone individuals who options for 23.4 Comply Core Delivered manage the environment. All remote access is captured in the administration Windows event log and aggregated in Splunk. External access to the data center occurs over an encrypted VP tunnel and requires two-factor authentication. Allows administrators to view role 23.5 Comply Core Delivered This is the Organizational Chart. structures in a graphical representation The system has a variety of system error messages that are Provides clear and support multiple levels configurable such as warning and error. Some and built-in 23.6 Comply Core Delivered messages are specific while error messages others are more general with that aid in accompanying error code that trouble shooting only a Cornerstone Product Support member can interpret. Users can add topics, authors, and Can store postings to their “My Favorites” favorite folder. Users can allow other 23.7 Comply Core Delivered locations within users to view their favorites or system can hide them and keep them private. Allows saving 23.8 Comply Core Delivered Supported. of a workspace Auditing function 23.9 Comply Core Delivered Supported. throughout system Enables add-on Cornerstone's open-system and integration 23.10 Comply Core Delivered architecture allows easy using an open integration with other interfaces. architecture SERIAL 14111-RFP An FTP or web services integration can be made to an existing system (e.g., an HRIS for internal employees or a system that houses all channel partner users). Cornerstone can pull the information on whatever basis is necessary (e.g., nightly, weekly, monthly). The majority of our clients populate the system this way. New users can also be imported into the system through our Data Load Wizard. This tool enables Allows Imports organizations to upload a list or 23.11 and exports to Comply Core Delivered table of information into the external system, eliminating the need to systems in real- manually insert individual time and batch records. Data can be loaded to mode. Includes different parts of the system with but is not a consistent process, allowing you limited to to upload, review, and import student data. demographics, The Data Load Wizard can identification, import new records or competencies, adjustments and export existing certifications, data in multiple file formats (.xls, and IDPs .xlsx .csv, .txt). Editable (individual templates and helpful hints guides development are available for each file type for plans). accurate importing. The Data Load Wizard can Import and import new records or export of adjustments and export existing learner and data in multiple file formats (.xls, course tracking .xlsx .csv, .txt). Editable data using templates and helpful hints guides 23.12 SML, CSV or Comply Core Delivered are available for each file type for other accurate importing. standardized Reporting is available to provide data information regarding error logs interchange and counts of records that are (List formats) added or updated. Cornerstone offers a Learning Content Management System (LCMS) to author, publish, and deploy media-rich content. With pre-loaded templates and authoring, test, assessment, and Is interoperable collaboration tools, clients can with a variety design customized, SCORM 23.13 of authoring Comply Core Delivered compliant courses without prior tools. (List programming knowledge. In tools) addition, all industry recognized authoring tools are supported, including but not limited to Lectora, Articulate, Captivate, Dreamweaver, Flash, and WYSIWYG/HTML SERIAL 14111-RFP programming tools. Cornerstone also works with non-standards compliant content providers to provide basic tracking functionality. The “look and feel” of the user interface is established by the client, and can be customized for different Organizational Units (such as Position, Division, Location, etc.). The custom page builder allows administrators to add over 20 predefined Widgets including an image place holder, and header and footer messages. In addition, 10 HTML boxes are Includes available. A YouTube video can "widgets" that be embedded as well. allow the 23.14 Comply Core Delivered Administrators can configure learner to which and how many of these access other widgets and HTML boxes are data used to configure a user’s personalized home page, all without any required programming skills or custom projects.The user has the ability to change some preferences, if enabled by the client. This includes the ability to change passwords, email address, vacation status, system display language, and upload a photo. Includes automatic student Supported. Dynamic Proxy registration of 23.15 Comply Core Delivered Enrollment for 'new hires' based new hires based on data feed from HR System. on data that is input to HR system Includes automatic updating of reporting 23.16 structures Comply Core Delivered Supported. (Reports to ID) based on data from HR system Ability to link employee 23.17 Comply Core Delivered Supported. records in an external system Automatically deactivates Student ID and 23.18 Comply Core Delivered Supported. training records when employees SERIAL 14111-RFP terminate based on action in the external system The high configurability of Cornerstone allows for the creation of an unlimited number of customizable fields throughout the application. Custom fields help provide needed information to users and administrators, allow organizations to create precise reports, and enable the collection Administrative of important data. Each custom options that field has a unique email tag that allow can be used in system generated 23.19 modification Comply Core Delivered email communications. and creation of Depending on the type of custom system or user fields you are creating, options defined fields. include branched dropdown, check boxes, conditional numeric fields, date fields, dropdowns, hierarchy, multiple check boxes, numeric fields, radio buttons, scrolling text boxes, and short text boxes. Client administrators can easily create these fields with no assistance from Cornerstone. Ability to assign more than one owner 23.20 Comply Core Delivered Supported. to an Administrator’s profile. SERIAL 14111-RFP The County can define their own organizational classifications and hierarchical structures within Cornerstone. This key differentiator is termed “Organizational Units”. These are similar to "Domains" in other applications, but far more flexible and powerful. Organizational Units (OU’s) are distinct containers to capture, store, categorize, and publish information. OU’s can govern the user interface (e.g., branding, navigation, look & feel), Ability to create functionality, workflows, different processes, and content. Clients 23.21 profiles for each Comply Core Delivered have used OU’s to group department and employees by Division, Position, user. Location, Cost Center, External Groups, and numerous other criteria. OU’s can be organized both laterally and hierarchically with multiple levels. For example, clients can create an OU named Employees, which can then be grouped more specifically by Division, and again more specifically by Position within a Division. Organizational Units provide a powerful and limitlessly flexible opportunity to configure Cornerstone based on your business needs. Ability to add Client administrators can easily 23.22 new and modify Comply Core Delivered create and modify fields with no existing fields. assistance from Cornerstone. Ability to set up 23.23 personal Comply Core Delivered Supported. preferences. Ability to print An individuals Events Calendar 23.24 customized Comply Core Delivered can be filtered/printed. calendars. Ability to Future. Tuition reimbursement import tuition functionality is being considered reimbursement for the product roadmap, although classes and no release date has been registrations on 23.25 Exception Custom scheduled. In the interim, a daily basis, if administrators can create a tuition custom report to capture tuition reimbursement reimbursement details submitted is not built into via external training requests. the solution. Ability to sort 23.26 columns across Comply Core Delivered Supported. the application SERIAL 14111-RFP List class sessions 23.27 separately if Comply Core Delivered Supported. class is 2 or more days. Cornerstone administration is Ability to send supported through automatic email to those email notification. This tool sends 23.28 registered Comply Core Delivered email confirmations, directly from notifications, reminders, and the roster. promotional emails based upon specified action triggers. Ability to establish and administer capacity 23.29 Comply Core Delivered Supported. allocation, prerequisites, and eligibility screening Cornerstone is entirely rights and roles-driven. The application Ability to features hundreds of security configure read permissions, related to the or view rights 23.30 Comply Core Delivered thousands of features, which can to a specific be configured to roles or field(s) based individual users. on a user profile Security roles are fully managed by the client. Ability to look When a user browses for training, up on-line and they can specify the "Type" of 23.31 instructor-led Comply Core Delivered class they are looking for (i.e. classes Online Class, Instructor-Led separately. Training, etc.). Delivers advanced search options Cornerstone provides advanced for returning search options, including back onscreen button sticky functionality. information, 23.32 Comply Core Delivered Search results and filters will including remain (displaying search/filtered previous resutls) until search/filters are searches and cleared. back-button sticky functionality Ability to control data formats, define field attributes, and create and assign user 23.33 Comply Core Delivered Supported. defined attributes for courses/classes for online help/communic ation assistance 23.34 Ability to save Comply Core Delivered Supported. SERIAL 14111-RFP course generations Includes registration screening settings (time conflict, course 23.35 Comply Core Delivered Supported. conflict, cancel dates, free allocate date, exceed capacity) Ability to allocate and manage registration 23.36 Comply Core Delivered Supported. based on specific dates, user data, or other attributes Ability to calculate dates 23.37 Comply Core Delivered Supported. based on start date of class. Ability to control settings 23.38 Comply Core Delivered Supported. on a per class basis Normally, all user information is loaded and updated via a data Ability to feed from the client’s HRIS. 23.39 globally update Comply Core Delivered Administrators with the proper records permissions can also manually update the information. Ability to copy records 23.40 (transcript to Comply Core Delivered Supported. transcript and roster to roster) Groups are used to create an Organizational Unit based on multiple criteria. The users within Ability to have a Group are dynamically updated, static and based on the user criteria, every 23.41 Comply Core Delivered dynamic time the Group is processed. groups. Groups can be used to set availability for learning objects or tasks, to proxy enroll, or to filter for reporting. Ability for users to populate 23.42 profile Comply Core Delivered Supported. information not fed from HRIS System contains consistent edits 23.43 and validation Comply Core Delivered Supported. regardless of the point of SERIAL 14111-RFP entry (required formatting) Ability to view Override permissions can be mail logs in 23.44 Comply Core Delivered configured by administrators for person and class roles or individual users. record. Ability to override status 23.45 Comply Core Delivered Supported. in transcript or roster Ability to email 23.46 from a class Comply Core Delivered Standard system functionality roster Ability to mail merge from 23.47 Comply Core Delivered Standard system functionality transcript and/or roster. Ability to view groups and 23.48 Comply Core Delivered Permissions based. curriculums in Person record. Email recipients can be Ability to email configured by administrators to based on 23.49 Comply Core Delivered notify users based on department, specified query position, location, or any other population Organizational Unit. Ability to view 23.50 Comply Core Delivered Supported. pending mail Ability to Courses can be deactivated. The automatically course will remain in the system, or manually but the training will not be 23.51 archive Comply Core Delivered accessible to any users through classes/course any search mechanisms except for globally administrators with the proper (inactivate) catalog permissions. Ability to open classes or 23.52 people from the Comply Core Delivered Standard system functionality registration screen Ability to find active classes and courses 23.53 Comply Core Delivered Supported. versus inactive classes and courses Ability to view at least the last 10 classes or people records The system has audit logging opened in the capability and in custom reports 23.54 registration Comply Custom (Analytics) can report on a screen, last 10 variety of variables. classes and courses opened, and last 10 people opened SERIAL 14111-RFP Ability to see how long employee spent taking a class, when registration was created/started, 23.55 when Comply Core Delivered Supported. registration was finished, and when registration was modified (different from created) Ability to set pretest status 23.56 Comply Core Delivered Supported. for online classes Ability to identify what status an online 23.57 Comply Core Delivered Supported. class is (in progress, completed, etc) Ability for administrator to 23.58 Comply Core Delivered Supported. arrange fields on screen Ability to add a The system has audit logging comment when capability and in custom reports 23.59 a attribute is Comply Custom (Analytics) can report on a changed on a variety of variables. field. Ability to add a The system has audit logging data entry capability and in custom reports 23.60 prompt/help Comply Custom (Analytics) can report on a and field level variety of variables. descriptions. Ability to assign user access levels for role based on 23.61 business unit(s) Comply Core Delivered Supported. to administer classes belonging to business unit(s) Ability to copy The system has audit logging data from one capability and in custom reports 23.62 field in a table Comply Custom (Analytics) can report on a to a like-field in variety of variables. a second table. Ability to create a non-employee The system has audit logging record using a capability and in custom reports 23.63 Comply Custom specific unique (Analytics) can report on a format. variety of variables. (Customer SERIAL 14111-RFP Unique Key Assignment (CUKA) for example: number starting with Z ) Ability to customize The system has audit logging database capability and in custom reports 23.64 identification Comply Custom (Analytics) can report on a text per variety of variables. database. (prod and test) Ability to define lookup table fields as The system has audit logging drop down only capability and in custom reports 23.65 Comply Custom or support and (Analytics) can report on a allow for free variety of variables. form values (combo box) All permission are security role Ability to driven. Restricting users with 23.66 disconnect a Comply Core Delivered permissions (or lack thereof), or user. placing constraints on the security roles/permissions. Courses can be deactivated. The Ability to course will remain in the system, globally delete but the training will not be 23.67 class, course Comply Core Delivered accessible to any users through and person any search mechanisms except for records. administrators with the proper catalog permissions. Ability to increase the 23.68 Comply Core Delivered Supported. length of a user defined field. Ability to manually or Session timeout is configurable 23.69 automatically Comply Configurable by the client. The system default logoff inactive setting is 30 minutes. or idle users Ability to only report on active classes, on-line 23.70 Comply Core Delivered Supported. classes, history classes. System field setting. Override permissions can be configured by administrators for Ability to roles or individual users. Core 23.71 override course Comply Different administrators can have Delivered/Configurable or class different permissions, but the conflicts as client overall has full capability needed for exceptions. SERIAL 14111-RFP Cornerstone provides for version management. Once content has Ability to save been published, you may edit its previous settings, update it, or even create 23.72 changes. Comply Core Delivered a new version of a course (course previously published so as not to generation) affect any users participating in the current version. Email messages and recipients are easily configurable by administrators without the need for any IT computer programming skills. Email Management allows administrators to create and edit emails and associate these emails with pre-defined triggers. Email tags can be included in email templates that allow you to automatically substitute specific information, such as the User’s name, the Approver’s name, the Price of the training, the Date of Ability to copy the Request was made, etc., in Core 23.73 email Comply any new email created. Emails Delivered/Configurable notifications. can be set up to go out to specific users as well as users in specific roles, such as training approvers, cost center approvers or the employee’s manager. The WYSIWYG (what you see is what you get) tool enables administrators to use images, fonts, colors, formatting, tables, etc. There is also a Copy from Word feature, which enables administrators to import from Microsoft Word, preserving the formatting used in the Word document. HTML code can also be used in the editor. Ability to create The system has audit logging data entry 'rules' capability and in custom reports 23.74 for fields. (data Comply Custom (Analytics) can report on a type, edits, variety of variables. validations) Ability to assign data 23.75 Comply Core Delivered Supported. entry in a field as required. Default value assignment at 23.76 record creation Comply Core Delivered Supported. where applicable Ability to export and 23.77 Comply Core Delivered Supported. import information to a SERIAL 14111-RFP lookup table. Ability to identify employee termination 23.78 status to Comply Core Delivered Supported. automatically move person records to inactive status. Ability to only allow creation 23.79 of classes from Comply Core Delivered Supported. a course. (System setting) Ability to remove direct reports in 23.80 Admin Center Comply Core Delivered Supported. when an employee terminates. Ability to restrict other owners from The application is entirely rights registering 23.81 Comply Core Delivered and roles driven. Security roles and/or changing are fully managed by the client. registrations. (Reserve for Owner) Cornerstone administration is supported through automatic email notification. This tool sends email confirmations, notifications, reminders, and promotional emails based upon specified action triggers. Ability to send Email tags can be included in instant email templates that allow you to 23.82 Comply Core Delivered notifications. automatically substitute specific Modify notice. information, such as the user’s name, the approver’s name, the price of the training, the date of the request, etc., in any new email created. Emails can be set up to go out to specific users as well as users in specific roles. Ability to set different 23.83 registration Comply Core Delivered Supported. statuses for on- line classes. Session timeout is configurable Ability to set Core 23.84 Comply by the client. The system default idle times. Delivered/Configurable setting is 30 minutes. SERIAL 14111-RFP Password policy is configurable by the client. Password preferences allow client administrators to specify a variety of options and requirements for passwords including: • Require both upper and lower case letters • Require user to reset their password by answering XX number of security questions • Send email notification to user upon password change • Require confidential password reset and send email notification Ability to set to user number of days Core • Require alpha and numeric 23.85 Comply a password will Delivered/Configurable characters expire. • Do not allow three or more consecutive same characters • Require at least one special character (e.g., !, @, #, $) • Expire passwords every XX days • Passwords cannot be the same as any previous XX passwords • Set minimum password length • Set maximum password length • Forgot password message (clients can define message that is displayed) Different password requirements can be established by Organizational Unit. Ability to allow different status groups and/or 23.86 statuses to be Comply Core Delivered Supported. used for prerequisite checking. Ability to view The system has audit logging student and capability and in custom reports 23.87 administrator Comply Custom (Analytics) can report on a currently variety of variables. online. 24.0 Application Administrators are presented with an extensive set of web-based Formatting and administrative tools which enable layout is them to easily configure graphics, consistent and 24.1 Comply Core Delivered colors, key words, layout, and standardized business rules. No special throughout all computer programming skills are screens required by the administrators to configure the system. SERIAL 14111-RFP Provides a dashboard that indicates to the Users with the proper permissions learner their can access personalized progress dashboards for instantaneous towards access to a variety of training 24.2 Comply Core Delivered meeting their data, all in one place. Different learning and classes of dashboards can be performance custom built, on the fly, with no goals, as well as programming knowledge. common system functions. Uses intuitive paths for performing 24.3 Comply Core Delivered Supported. administrator and learner job task functions Users can add topics, authors, and Has a feature to postings to their “My Favorites” store favorite folder. Users can allow other 24.4 Comply Core Delivered locations within users to view their favorites or the system. can hide them and keep them private. Cornerstone administration is supported through automatic email notification. The emails are sent through the company’s email system, such as Outlook or Lotus Notes. In addition, Cornerstone provides User calendar seamless integration with a user's and email Outlook calendar. 24.5 Comply Core Delivered interfaces with Administrators can configure MS Outlook Outlook Meeting emails to not only add Sessions to the user’s calendar but also manage updates to the Session. This functionality is available from any device used to manage one's Outlook calendar, such as a PC, laptop, mobile phone, or tablet computer. SERIAL 14111-RFP Cornerstone provides unique flexibility in how The County can deploy the system to different groups of users. Different branding, business rules, and functionality can be established for any Organizational Unit (such as Division, Location, Position, custom group of individuals, etc.). The end result is an unparalleled level of personalization for the user.Cornerstone was designed to be administered by the client and Allows visual not the vendor. The County has branding of the complete control to configure the interface and look and feel of the application to 24.6 Comply Core Delivered throughout your specific business units with additional specific functionality and screens branding. Client administrators are presented with an extensive set of web-based controls which enable them to easily configure graphics, colors, key words, layout, and business rules. Clients can make configuration changes on their own without any assistance from Cornerstone or for any additional costs. Not all vendors can make this claim. The high configurability of the Cornerstone system is one of the distinct advantages that we offer among our competitors. The “look and feel” of the user interface is established by the client, and can be customized for different Organizational Units (such as Position, Division, Location, etc.). The custom page Allows use of builder allows administrators to skins to visually add over 20 predefined Widgets brand the LMS including an image place holder, dynamically and header and footer messages. according to the In addition, 10 HTML boxes are role, available. A YouTube video can organizational 24.7 Comply Core Delivered be embedded as well. membership, or Administrators can configure other which and how many of these parameters of widgets and HTML boxes are the individual used to configure a user’s user who is personalized home page, all logged into the without any required LMS programming skills or custom projects.The user has the ability to change some preferences, if enabled by the client. This includes the ability to change passwords, email address, SERIAL 14111-RFP vacation status, system display language, and upload a photo. Provides the ability to customize and filter individual 24.8 tables, vs. Comply Core Delivered Supported. whole screens, such as lists of courses in progress 25.0 Transcripts and Other Documentation Allows learners and administrators to print transcripts, Learners and administrators (with course the proper permissions) can print 25.1 Comply Core Delivered completion transcripts, course completion certificates, and certificates, and records. learner records with appropriate options Allows a learner to be able to view a transcript of all Active, completed, and archived training that has training is viewable. Each course 25.2 been recorded Comply Core Delivered contains the "Status" and "Due" in the LMS for date. their account along with status and status date Ability for a user to sort their transcript records on the Users can sort their trainscript: screen by By Title, By Status, By Date 25.3 column; ex: Comply Core Delivered Added to Transcript, By Training course Date, By Due Date, and By completion Completion Date. date, course name, course start date, etc. 26.0 Media and Content Support Provides Cornerstone supports the most support for common industry file formats industry- used for rich media. They can be 26.1 standard Comply Core Delivered uploaded into the system and streaming made available to users, and can protocols for also be set as pre and post-work. audio and video SERIAL 14111-RFP Materials such as posted Provides direct documents, online resources, 26.2 access to web- Comply Core Delivered video, and audio are available. based media Courses can also include hyperlinks. Provides an enterprise This requirement needs further 26.3 Exception Custom Glossary clarification. function Supports 26.4 immersive Comply Core Delivered Supported. learning content The following file types can be uploaded into the application: .jpg, .jpe, .jpeg/ image, .gif/image, .png/ image, .bmp/ image, .txt/ text plain, .docx/ word document, .dotx/ word document, .doc/ word document, .dot/ application/ms-word, .xlsx/ excel, .xls/ excel, .pptx/ powerpoint, .ppt/ powerpoint, .ppsx/ powerpoint, .pps/ Supports a wide application/vnd.ms-powerpoint, variety of .pdf/ application, .vsd/ 26.5 media. List Comply Core Delivered application, .wma/ audio/x-ms- supported wma, .mp3/ audio/mpeg, .wav/ types: audio, .mid/ audio/midi, .html/ text/htm, .htm/ text/html, .swf/ application/shockwave-flash, .avi/ video, .mpeg/ video, .mpg/ video, .wmv/ video, .m4v/ audio, .m4a/ audio, .flv/ video, .png/ graphic, .arf/ webex recording, .mpp/ ms project, .rtf/ rich text format, .msg/ outlook mail message, .rm/ application/vnd.rn-realmedia. 26.5.1 Audio: Comply Core Delivered Supported. 26.5.2 Video: Comply Core Delivered Supported. 26.5.3 Documents: Comply Core Delivered Supported. 26.5.4 Graphics: Comply Core Delivered Supported. Please see supported file types, 26.5.5 2D animation: Exception Not applicable above. Please see supported file types, 26.5.6 3D animation: Exception Not applicable above. SERIAL 14111-RFP 27.0 Training Plan and Administration All client administrators have access to our client portal, Cornerstone Success Center. This online community, with over 13,000 members, allows our clients to learn the product, connect and collaborate with others, resolve product and System contains technical questions, and grow as robust support professionals and users of the for training of Cornerstone solution. Clients can all categories of also provide product suggestions users: learners, and access information on 27.1 Comply Core Delivered instructors, current, past, and future system Cornerstone releases. administrators, Available within the knowledge content repository clients find managers, etc. whitepapers, JIT training, best practices documentation, recorded webcasts, user guides, presentations, archived feature reviews, and FAQ’s and other collaborative tools. Cornerstone also has an extensive online help system embedded in the application. All our system documentation is contained within Online Help. Online Help is a context sensitive, searchable repository for all system information and is kept up to date with new functionality and enhancements. There are separate Online Topics System contains sections for administrators, robust support managers, and end users. While documentation we strongly encourage its use as in a wide an online resource, these topics variety of forms can be downloaded and printed. 27.2 Comply Core Delivered including Clients are free to customize them tutorials, help, to their portal configurations to examples, use internally for end user and references, and manager documentation. user manuals Within Online Help, administrators also have access to the OnDemand Support section. The information contained within this section provides instant answers to top questions, templates, and recommendations on how to use various functions of the system. SERIAL 14111-RFP Clients can provide feedback (product suggestions) through the Cornerstone Success Center. Cornerstone OnDemand places Client Success at the core of everything we do. We have numerous processes for reviewing the status and quality of our relationships with clients. This includes both transactional surveys (at case or project closure, for example) and relationship surveys (typically on an annual basis) to learn directly from our clients how we are doing. All feedback is reviewed and followed up on at an individual respondent level and at an overarching trend level. This allows us to continuously improve and drive business decisions from client input. Additionally, we do have standard quarterly and annual relationship review sessions conducted by our client-facing Solution has a personnel. feedback Our Business Reviews, typically function for 27.3 Comply Core Delivered done quarterly, involve the suggestions on Executive Sponsor and key improving the players at our clients’ LMS organizations. Reviews include key metrics and an exchange of company updates. Examples of metrics are the volume and nature of support cases to how actively a client is utilizing our software. Cornerstone OnDemand’s updates encompass upcoming product improvements that all clients benefit from (given the Software-as-a-Service model) and any significant enhancements to our service delivery model or market presence. More important to us are the updates we receive from our clients’ leaders during these business reviews, as it gives us the opportunity to ensure we understand any shifts in company direction or strategic goals. This will ensure we continue to align on your business requirements and how you can successfully use our software to position you for maximum success. Lastly, on an annual basis, we conduct Client Solution Reviews SERIAL 14111-RFP to help optimize the use of modules purchased and identify any unmet business needs that could be solved by broadening the use of other Cornerstone solutions. Cornerstone OnDemand is committed to providing clients unparalleled support to maximize our solutions. The Global Product Support team is focused on ensuring the day-to-day success of your Cornerstone solution owners and administrators by:• Providing frontline support on feature/function questions to ensure your effective use of the application • Conducting initial diagnosis on technical issues • Managing the scoping, tracking, and delivery of requests for standard engineering services through a case • Communicating with you on the progress of any product issues through to resolution • Researching complex issues with internal subject matter experts to provide you with solutions The County will have Solution 24x7 access to self-service delivers a resources in the Cornerstone variety of Help Success Center, an online 27.4 Desk support Comply Core Delivered knowledge base and customer options for community. Here you can self- administrators assist or seek best-practice advice and learners from Cornerstone subject matter experts and peer organizations. Cornerstone offers four support packages with varying levels of access, availability, and services for a wide range of organizations. Professional support (which the majority of our clients use) is included in the software subscription fee at no additional cost and includes 24x5 live support during the week. In addition, clients can submit an unlimited number of cases and have 24 hour visibility to those cases through our online portal, MySuccess. For those clients who have complex, business-specific requirements that require more comprehensive support for a globally distributed workforce, we also offer a Professional Plus, Premier, and Premier Plus support package (at an additional SERIAL 14111-RFP cost). Depending on the package chosen, services can include named Support Specialists, enhanced service levels, and 24x7 live support. 28.0 Interfaces Cornerstone's open-system architecture allows easy integration with other interfaces including payroll systems. Our Ability to application does not require 28.1 interface with Comply Core Delivered integration with any specific ADP system or version. The requirement is that the customer is able to provide data based on our data specifications. We are system agnostic. Cornerstone's open-system architecture allows easy integration with other interfaces. Cornerstone has amassed significant experience in integrating the application to client HRIS, ERP, and CRM systems for both ongoing user data and historical data loads. Our application does not require integration with any specific system or version. We are system agnostic. The requirement is that the County can provide data based on our data specifications. Most data feeds inbound or outbound are exchanged via Comma Separated Values with a Ability to specified column, type, and interface with length designation as defined in 28.2 Comply Core Delivered other HRIS our Technical Specifications. We systems also encourage Web Services integration and XML data exchanges as needed. Once the feed process is set up, we schedule a job to automate the retrieval and loading of your data. A log file is maintained and sent to you, providing the results of the load. Cornerstone can have the system push/pull information on whatever basis is necessary (e.g., nightly, weekly, monthly). To transfer data to or from your system, Cornerstone uses Secure FTP (sFTP), ConnectDirect and other solutions. For added security, Cornerstone supports PGP encryption of your data files. Cornerstone's team also has SERIAL 14111-RFP extensive experience utilizing web services to transmit data to and from multiple database environments. Our data integration consultants will assist the County in determining the best method of integration to meet your business objectives. Cornerstone provides full support for the AICC 3.5 API Data Model and SCORM 1.2 & 2004 Content Packaging specifications. These courses can be tracked in Cornerstone and provides bookmarking, progress tracking, the recording of testing scores embedded in the content, and other rich data tracking.AICC courses can be housed by Cornerstone, the County, or by a third party. SCORM courses must be hosted by Cornerstone. Cornerstone also works with non- standards compliant content providers to provide basic tracking functionality.In addition, Cornerstone Content Services delivers the most efficient way to enhance the success of any Ability to organization’s talent management interface with 28.3 Comply Core Delivered strategy while meeting a range of content end-user needs. Cornerstone repositories completely removes the burden of online content management, reduces costs, increases training efficiency, and greatly improves the user experience.Clients can choose from a wide-variety of premier vendors, titles, and subjects that always deliver the most accurate and updated course content. E-learning partners include Skillsoft, Cegos, getAbstract, Harvard Business Publishing, JJ Keller, and Speexx, among others. Cornerstone provides complete vendor management services with respect to e-learning partners. The company assists organizations in the selection and pricing of e-learning content along with other benefits. SERIAL 14111-RFP Cornerstone's open-system architecture allows easy integration with other databases. Cornerstone has amassed significant experience in integrating the application to client HRIS, ERP, and CRM systems for both ongoing user data and historical data loads. Ability to These systems range from niche interface with 28.4 Comply Core Delivered players to mainstream systems other learning such as Workday, ADP, Ceridian, systems PeopleSoft, Oracle, SAP, Lawson, and many others. Our application does not require integration with any specific system or version. The requirement is that the County can provide data based on our data specifications. We are system agnostic. Cornerstone has integrated Ability to leading competency content interface with libraries from Lominger and 28.5 Comply Core Delivered electronic HRSG for immediate, off-the- libraries shelf access. This requires an additional cost. SERIAL 14111-RFP EXHIBIT F OFFICE OF PROCUREMENT SERVICES CONTRACTOR TRAVEL AND PER DIEM POLICY 1.0 All contract-related travel plans and arrangements shall be prior-approved by the County Contract Administrator. 2.0 Lodging, per diem and incidental expenses incurred in performance of Maricopa County/Special District (County) contracts shall be reimbursed based on current U.S. General Services Administration (GSA) domestic per diem rates for Phoenix, Arizona. Contractors must access the following internet site to determine rates (no exceptions): www.gsa.gov 2.1 Additional incidental expenses (i.e., telephone, fax, internet and copying charges) shall not be reimbursed. They should be included in the contractor’s hourly rate as an overhead charge. 2.2 The County will not (under no circumstances) reimburse for Contractor guest lodging, per diem or incidentals. 3.0 Commercial air travel shall be reimbursed as follows: 3.1 Coach airfare will be reimbursed by the County. Business class airfare may be allowed only when preapproved in writing by the County Contract Administrator as a result of the business need of the County when there is no lower fare available. 3.2 The lowest direct flight airfare rate from the Contractors assigned duty post (pre-defined at the time of contract signing) will be reimbursed. Under no circumstances will the County reimburse for airfares related to transportation to or from an alternate site. 3.3 The County will not (under no circumstances) reimburse for Contractor guest commercial air travel. 4.0 Rental vehicles may only be used if such use would result in an overall reduction in the total cost of the trip, not for the personal convenience of the traveler. Multiple vehicles for the same set of travelers for the same travel period will not be permitted without prior written approval by the County Contract Administrator. 4.1 Purchase of comprehensive and collision liability insurance shall be at the expense of the contractor. The County will not reimburse contractor if the contractor chooses to purchase these coverage. 4.2 Rental vehicles are restricted to sub-compact, compact or mid-size sedans unless a larger vehicle is necessary for cost efficiency due to the number of travelers. (NOTE: contractors shall obtain pre-approval in writing from the County Contract Administrator prior to rental of a larger vehicle.) 4.3 County will reimburse for parking expenses if free, public parking is not available within a reasonable distance of the place of County business. All opportunities must be exhausted prior to securing parking that incurs costs for the County. Opportunities to be reviewed are the DASH; shuttles, etc. that can transport the contractor to and from County buildings with minimal costs. 4.4 County will reimburse for the lowest rate, long-term uncovered (e.g. covered or enclosed parking will not be reimbursed) airport parking only if it is less expensive than shuttle service to and from the airport. 4.5 The County will not (under no circumstances) reimburse the Contractor for guest vehicle rental(s) or other any transportation costs. 5.0 Contractor is responsible for all costs not directly related to the travel except those that have been pre- approved by the County Contract Administrator. These costs include (but not limited to) the following: in- room movies, valet service, valet parking, laundry service, costs associated with storing luggage at a hotel, fuel costs associated with non-County activities, tips that exceed the per diem allowance, health club fees, SERIAL 14111-RFP and entertainment costs. Claims for unauthorized travel expenses will not be honored and are not reimbursable. 6.0 Travel and per diem expenses shall be capped at 15% of project price unless otherwise specified in individual contracts. 7.0 Contractor shall provide, (upon request) with their invoice(s), copies of receipts supporting travel and per diem expenses, and if applicable with a copy of the written consent issued by the Contract Administrator. No travel and per diem expenses shall be paid by County without copies of the written consent as described in this policy and copies of all receipts.