Website Design, Development and Hosting Services

The Vendor is required to provide full-service website solution, including strategy, design, development, deployment, and ongoing support.
1. Website design 
• Custom visual design aligned with facility and group standards. 
• Responsive design optimized for desktops, tablets, and mobile devices. 
• Wireframes, mockups, and design revisions based on stakeholder feedback. 
2. Website development 
• Development of a secure, scalable website using a widely supported CMS. 
• Template-based page structures for flexibility and long-term maintainability. 
• Integration of third-party tools such as ticketing platforms, CRM systems, email marketing solutions, and social media feeds. 
• Performance optimization, SEO-friendly implementation and Json/google event schema.
3. Content management
• Configuration of the CMS with appropriate user roles and permissions. 
• Training for group staff on content updates, page creation, and media management. 
4. Accessibility, security, and compliance 
• Compliance with WCAG 2.1 AA accessibility standards. 
• Implementation of modern security best practices, including SSL, secure hosting recommendations, and data protection measures. 
• Ongoing updates to address security vulnerabilities.
• Support for Microsoft entra id authentication, single sign-on (SSO), and role-based access controls.
• Protection against common web application vulnerabilities, including OWASP top 10 risks.
• Audit logging and monitoring of administrative and content management activities.
• Support for privacy and data protection regulations applicable to website visitors and subscribers.
• Secure API access and integration methods for third-party systems and mobile applications.
• SSL/TLS certificate management and automated certificate renewal processes.
• Regular backup, disaster recovery, and business continuity capabilities.
5. Hosting, maintenance, and support 
• Recommendations for hosting architecture (cloud-based or managed hosting preferred). 
• Ongoing maintenance, updates, backups, and uptime monitoring. 
• Defined support response times and escalation procedures. 
6. Reporting, data, and ownership
• Website analytics setup and reporting (e.g., google analytics or equivalent). 
7. All website code, content, and data shall be owned by county and group. 
• Administrative access shall be provided to authorized group and county staff.