Exam Preparation Software

Overview

Education, Training & Libraries

Daleville, Virginia, United StatesPosted about 2 months agoDeadline: March 25th, 2026

Fit Score

Settle Intelligence

Settle helps teams find, evaluate, and respond to public RFPs. We continuously surface new opportunities, score them against your company strengths, and draft proposal responses so you can focus on the work that wins business.

SUMMARY

Virginia seeks commercial exam preparation software with comprehensive assessment features, cloud hosting, and robust security practices for a two-year contract.

KEY REQUIREMENTS

Provide an online solution for comprehensive assessment and review programs, including adaptive assessments, instructional supports, comprehensive predictors, and customized Live NCLEX review.
Offer a fully developed, tested, and commercially available solution.
Demonstrate the use, functions, components, and features of the proposed solution.
Provide an executive summary detailing functionality of base and optional components.
Support substantive material and assessment-driven review for NCLEX.
Provide test prep bank questions with both static and adaptive options.
Describe features and alignment for comprehensive live NCLEX review.
Provide content mastery through remediation and adaptive assessment.
Offer case study scenarios (written and virtual).
Provide individualized data to support NCLEX success.
Accommodate custom content mid-curricular assessment.
Describe training options for students and faculty, including associated costs.
Detail support options, including ongoing application support and associated costs.
Specify applicable licensing, such as application/solution licenses, SLAs, and maintenance agreements, with associated costs.
Describe the escalation process for problem resolution.
Provide a typical implementation timeline and associated costs.
Explain the maintenance philosophy, update frequency, and services unavailable during scheduled maintenance.
Describe application security features for data.
Outline policies regarding customer data ownership, rights, and vendor/partner practices for data movement and copying.
Describe exit strategies.
Detail the billing process.
Present a plan to safeguard and transmit personally identifiable information (PII).
Allow trial access to the proposed solution if selected by VCCS.
Describe the solution's cloud or on-premise basis and any additional integration platform services or hardware requirements.
Detail data storage, disposition, and backup processes.
State the average initial system set-up time.
Describe institutional hardware requirements.
Provide a detailed description of the software upgrade methodology, frequency, and impact on service.
Describe the approach to handling software licenses and provide a copy of the license agreement(s).
Explain how system outages are prevented and maximum uptime is ensured.
Comply with all VCCS IT privacy and data security requirements, including SOC 2 Type II certification or equivalent (FedRAMP or ISAE 3000 Type 2).
Identify the hosting environment and provide supporting SOC 2 Type II certification for any third-party hosts.
Comply with all applicable federal, state, and industry standards and regulations.
Ensure all VCCS data in transit is encrypted with a minimum 128-bit SSL Certificate.
Encrypt work papers (attachments) within a database using AES-256.
Ensure Internet access uses Hypertext Transport Protocol Secure (https).
Back up all cryptographic keys with copies stored at an offsite location.
Ensure all information processing facilities that process, store, distribute, or manage VCCS data are physically located within the continental United States.
Operate all hosted systems under SSAE16/ISAE 3402 Type II SOC 2 hosting facility controls.
Provide VCCS an annual copy of the current SOC 2 Type II Audit Report.
Maintain nightly backups of all production databases, copied electronically to a remote SSAE 16 type II facility.
Retain full system backups for a minimum of two weeks and provide weekly full system backups with incremental daily backups for all application environments.
Monitor all servers 24/7/365 with system alerts.
Maintain logs of all end-user attempts (success and failure) to gain system access.
Generate high-priority alerts for security events.
Provide the ability to query all system logs and monitor for security breaches and intrusions.
Log all breaches of system security.
Ensure Internet connectivity is covered by a 99.9% Service Level Agreement.
Schedule patches and upgrades to operating or application software during normal maintenance windows.
If custom integrations are required, host three separate environments (development, test, production).
Process all hardcopy data containing PII by a certified data destruction vendor and maintain logs.
Encrypt all data on portable media.
Encrypt all data in transit or at rest when accessed over a public data-transmission network.
Require all users to have distinct user IDs, with separate IDs for elevated privilege users, prohibiting shared accounts.
Submit a complete electronic response through eVA.
Limit proposal response to 100 typed pages, excluding RFP and attachments, using a font no smaller than 11 point.
Organize the proposal by RFP paragraph number, repeating the text of the requirement.
Submit the RFP cover sheet, all addenda acknowledgements, Vendor Data Sheet (Attachment 1), State Corporation Commission Form (Attachment 2), Proprietary and Confidential Information Form (Attachment 3), Small Business Subcontracting Plan (Attachment 4), Disclosure of AI Use in Proposal Development (Attachment 5), Pricing Schedule (Attachment 6), and Exhibit 2.
Certify compliance with anti-discrimination laws (Federal Civil Rights Act, Virginia Fair Employment Contracting Act, Virginians With Disabilities Act, Americans With Disabilities Act, VPPA).
Certify the proposal is made without collusion or fraud, and no kickbacks or inducements were offered or received.
Certify no unauthorized alien employment for contracts over $10,000.
Certify not currently debarred by the Commonwealth of Virginia.
Participate in the eVA Internet e-procurement solution.
Be authorized to transact business in the Commonwealth of Virginia.
Ensure civility in state workplaces and prevent harassment, bullying, or discrimination.
Comply with sexual harassment training and policy requirements for contracts over $10,000.
Comply with Americans with Disabilities Act (ADA) and Information Technology Access Act, including WCAG 2.1 Level A or AA, and provide an Accessibility Conformance Report (ACR) or Voluntary Product Accessibility Template (VPAT).
Comply with nonvisual access standards for information technology.
Register and participate in the E-Verify program if an employer with more than 50 employees and a contract exceeding $50,000.
Indemnify the Commonwealth of Virginia from claims arising from the misuse of Artificial Intelligence (AI) technologies in proposal development.
Notify the other party within 24 hours of any AI-related issues, including data breaches, inaccurate, biased, or unrepresentative outputs.
Warrant the right to provide licensed services without violating third-party intellectual property rights.
Warrant that licensed services and the application conform to specifications and documentation.
Warrant that updates or changes will not degrade the application or breach warranty.
Warrant that documentation is sufficient for full utilization.
Agree that VCCS data remains VCCS property and will not be used for other purposes without approval.
Agree to transfer all data back to VCCS in machine-readable format upon contract end/termination and destroy remaining copies.
Ensure the application is free of computer viruses or undocumented features.
Notify the agency of security vulnerabilities and provide fixes within 90 days.
Ensure the application and services do not depend on unsupported operating systems or software.
Ensure the application and licensed services do not contain disabling code, viruses, or other harmful elements, and provide uninterrupted access.
Notify the agency if the application contains any open-source code.
Warrant financial capacity to perform obligations and confirm no legal proceedings affecting performance.
Warrant past experience with similar services without significant problems.
Conduct annual penetration testing by an independent third party for infrastructure and application vulnerabilities.

BUDGET

Estimate

$5,000,000 – $20,000,000

CONTRACT DURATION

120 months

TIMELINE

Issue Date: March 10th, 2026

Questions will be accepted by e-mail through March 13th, 2026 at 5:00 pm EST.

Proposals will be received until March 25th, 2026, at 2:30 PM local time.

Notice of award decision will be posted on the DGS/DPS eVA web site for a minimum of ten (10) days.

QUESTION DEADLINE

March 13th, 2026

Issuing Agency

Virginia Community College System – Shared Services Center

Organization overview and procurement intelligence available on paid plans.

See Issuer Research

DESCRIPTION

The state of Virginia is seeking vendors to provide exam preparation software, including all related software, professional services, implementation, training, and staffing necessary for the solution. The desired online solution must support curriculums for a comprehensive assessment and review program, incorporating adaptive assessments, instructional supports, comprehensive predictors, customized live reviews, remediation, adaptive assessment, and case study scenarios. Solutions must accommodate custom content mid-curricular assessments.

Only commercial, off-the-shelf software solutions will be considered; proposals for custom-developed software will not be accepted. The vendor is also required to deliver public cloud services that adhere to applicable information security legislation and regulations, including implementing strong data protection practices. The cloud services provider must designate both a person responsible for information security at the hosting facility and a dedicated customer point of contact for the duration of service to ensure customer success. The proposed contract will span a two-year period.

Source attribution

This Settle analysis is based on the issuing organization’s public RFP listing.