Measure K Website Services

Measure K website and its related technical, accessibility, and support services.
- Security, WordPress Maintenance, and Technical Quality
• Maintain supported and secure versions of WordPress core, themes, plugins, server-side components, and other dependencies.
• Apply updates through a documented staging, backup, testing, approval, and production-release process. Emergency security updates may be expedited with notice to the County.
• Use least-privilege access, multi-factor authentication where available, secure credential management, backups, vulnerability monitoring, SSL/TLS, and other reasonable security controls.
• Avoid unsupported, abandoned, duplicative, or unnecessary plugins and document all approved thirdparty components.
• Use maintainable coding practices and preserve a current inventory of themes, plugins, integrations, custom code, licenses, and administrative access.
- Content Management and Reusable Components
• Use WordPress and Gutenberg, or another County-approved content-authoring approach, to enable appropriate County staff to create and update content without routine vendor intervention.
• Develop reusable, accessible templates, patterns, blocks, custom post types, taxonomies, and editorial workflows when needed.
• Provide clear content-author guidance for accessible headings, links, alternative text, documents, tables, images, video, and forms.
• Do not introduce vendor lock-in. County staff must retain practical access to administer and export County content and data.
- Onboarding, Discovery, and Transition-In
• Review the current Measure K website, WordPress configuration, hosting arrangement, plugins, themes, custom code, integrations, domain and DNS configuration, analytics, user roles, and available
documentation.
• Prepare a transition-in plan that identifies access dependencies, risks, outdated components,
accessibility issues, security concerns, licenses, and recommended early actions.
• Establish County and TSD points of contact, escalation procedures, service-request intake process, maintenance calendar, and reporting format.
• Document baseline conditions and maintain a current site inventory.