Multi Year Public Facing Regional Website Services

The Vendor is required to provide a company to design, develop, and deploy three public-facing regional websites—each serving a specific program—with a secure backend.
- The system should also support inquiry management, dissemination of public information, search engine exclusion to prevent indexing by crawlers, and emergency communication management across three department grant-supported focus areas.
- Objectives
•    Develop and deploy three branded, accessible, mobile-responsive public websites, each serving program-specific audiences.
•    Enable secure login and role-based access for vetted users, ensuring protected access to confidential and grant-related materials.
•    Provide user-friendly tools that support communication, inquiry management, and training logistics.
•    Ensure interoperability with key enterprise and emergency management systems, including Microsoft 365, Esri ArcGIS Online, and future third-party integrations via documented APIs.
•    Implement robust security, compliance, and service-level standards to protect sensitive information and ensure reliable performance.
•    Deliver comprehensive support, training, and documentation for system deployment, maintenance, and future scalability.
- This platform will enable administrators, volunteers, and stakeholders to collaborate effectively from any location, while ensuring secure, compliant, and reliable service delivery.
- This platform will enable administrators, volunteers, and stakeholders to collaborate effectively from any location, while ensuring secure, compliant, and reliable service delivery.
- The solution must provide a secure, cloud-based, software-as-a-service (SaaS) platform with the following core capabilities:
•    Content creation, management, and publishing, including intuitive, mobile responsive web content management supporting multiple program sites.
•    Role-based security, including granular access controls, authenticated sessions, and audit logging to protect sensitive content.
•    Collaboration and inquiry handling, including tools to support stakeholder communication (e.g., bulk emails, contact groups, surveys/forms with conditional logic) and inquiry management across program audiences.
•    Integration and interoperability, including compatibility with enterprise systems, such as Microsoft 365 and Esri ArcGIS Online, with documented APIs for future integrations.
•    Scalability and performance, including infrastructure designed for unlimited users, high availability, and disaster recovery.
- Regional Coordination of Homeland Security Grant and Programmatic Management Website
•    Features:
•    Public transparency section, including agendas, meeting outcomes, calendar, news
•    Secure document repository, including grant reports, strategic plans, projects, budgets
•    Secure user logins with role-based permissions
•    Shared access for authorized users from all participating jurisdictions
•    Governance tools for submitting, reviewing, and approving documents
- CERT Volunteer Information Website
o    Community Emergency Response Team (CERT) volunteers, community members
o    Features:
•    Volunteer resources, news, alerts, and registration information
•    Interactive training and registration portal, including:
o    The ability to browse upcoming training courses and events
o    Self-service online signup and waitlist management
o    Automated confirmations and reminders via email/SMS
•    Volunteer opportunity signups, including the ability to:
o    View and register for local and regional volunteer events and activations
o    View an opportunity calendar with filters (e.g., location, date, event type)
o    Post event feedback submissions and volunteer hour tracking
•    Volunteer profile management, including the ability to:
o    Access a secure personal profile where volunteers or internal staff can update contact information and availability
o    Track completed training, certifications, and volunteers
o    Download certificates and badges earned
•    A repository of public safety toolkits and instructional documents 
•    Inquiry/Contact form
•    Secure login for access to internal documents, sensitive updates, and personalized dashboards
•    The ability to push notifications and newsletters
- To ensure resilience and uninterrupted service, the hosted system must include the following:
•    Database clustering and replication.
•    Nethreerk load balancing.
•    Continuous monitoring of infrastructure health.
•    Auto-scaling capacity to handle demand spikes without performance degradation
- Secure Content Protection
o    Authenticated Session Access: Secure files and pages must require login; direct URLs must not bypass controls.
o    Search Engine Exclusion: Restricted content must be excluded from indexing by crawlers using server-side controls (robots.txt alone is insufficient).
o    Granular Role-Based Permissions: Access control at page, folder, and document levels; example roles include Public, Volunteer, Participant, Admin, Power User, and Reviewer.
o    Native File Security: Files must be secured within the platform removing the current necessity to add security to individual files.
o    Audit Logging: All secure file access logged (date, user, action). Logs must be exportable for compliance reviews.

- Contract Period/Term: 3 years
- Questions/Inquires Deadline: October 27, 2025