https://hqt.org/articles/Reference articles for agency staff on procurement, technology, sectors, and compliance.en-ushttps://hqt.org/articles/how-state-and-local-agencies-buy-technology/https://hqt.org/articles/how-state-and-local-agencies-buy-technology/Contracts & ProcurementThe purchasing routes available to public agencies for technology work, and when each fits.https://hqt.org/articles/california-multiple-award-schedule-explained/https://hqt.org/articles/california-multiple-award-schedule-explained/Contracts & ProcurementWhat CMAS is, which agencies can use it, and how a purchase through it works.https://hqt.org/articles/cooperative-purchasing-and-piggyback-contracts/https://hqt.org/articles/cooperative-purchasing-and-piggyback-contracts/Contracts & ProcurementHow agencies buy through cooperative and piggyback contracts, and what to check before doing so.https://hqt.org/articles/writing-a-technology-rfp-that-gets-good-proposals/https://hqt.org/articles/writing-a-technology-rfp-that-gets-good-proposals/Contracts & ProcurementHow agencies structure a solicitation so that vendors can price it accurately and evaluators can score it fairly.https://hqt.org/articles/fixed-price-vs-time-and-materials/https://hqt.org/articles/fixed-price-vs-time-and-materials/Contracts & ProcurementWhen an agency should buy on a fixed price, when time and materials fits, and how to manage each.https://hqt.org/articles/due-diligence-before-contracting-with-a-technology-vendor/https://hqt.org/articles/due-diligence-before-contracting-with-a-technology-vendor/Contracts & ProcurementWhat an agency should verify about a vendor's registration, insurance, security, and capacity before award.https://hqt.org/articles/federal-grants-flowing-to-local-technology/https://hqt.org/articles/federal-grants-flowing-to-local-technology/Contracts & ProcurementWhere technology funding comes from and the obligations attached when federal money pays for a local project.https://hqt.org/articles/contract-terms-agencies-should-include-in-technology-contracts/https://hqt.org/articles/contract-terms-agencies-should-include-in-technology-contracts/Contracts & ProcurementThe clauses that protect an agency's data, budget, and ability to change vendors.https://hqt.org/articles/what-is-an-owners-representative-in-it-projects/https://hqt.org/articles/what-is-an-owners-representative-in-it-projects/Contracts & ProcurementWhy agencies hire independent technical oversight for large implementations, and what the role involves.https://hqt.org/articles/cloud-service-models-for-agencies/https://hqt.org/articles/cloud-service-models-for-agencies/TechnologyWhat each cloud service model means, who is responsible for what, and how agencies typically use them.https://hqt.org/articles/stateramp-and-fedramp-explained/https://hqt.org/articles/stateramp-and-fedramp-explained/TechnologyWhat the two cloud security authorization programs are, how they differ, and what an authorization actually tells an agency.https://hqt.org/articles/zero-trust-for-public-agencies/https://hqt.org/articles/zero-trust-for-public-agencies/TechnologyThe principles behind Zero Trust, the maturity model, and a realistic sequence for a small security team.https://hqt.org/articles/nist-cybersecurity-framework-for-local-government/https://hqt.org/articles/nist-cybersecurity-framework-for-local-government/TechnologyHow the framework is structured, why agencies adopt it, and how to use it without drowning in paperwork.https://hqt.org/articles/cjis-security-policy-overview/https://hqt.org/articles/cjis-security-policy-overview/TechnologyWhat the policy covers, who it binds, and the areas that most often cause compliance findings.https://hqt.org/articles/devsecops-pipelines-in-government/https://hqt.org/articles/devsecops-pipelines-in-government/TechnologyThe stages of a secure delivery pipeline and the evidence it produces for auditors.https://hqt.org/articles/legacy-modernization-strategies/https://hqt.org/articles/legacy-modernization-strategies/TechnologyThe main approaches to modernizing an old application, and how to choose among them.https://hqt.org/articles/api-design-for-public-sector-integration/https://hqt.org/articles/api-design-for-public-sector-integration/TechnologyPrinciples for designing interfaces between agency systems that will be maintained for years.https://hqt.org/articles/low-code-platforms-in-government/https://hqt.org/articles/low-code-platforms-in-government/TechnologyWhere low-code tools help agencies, where they cause trouble, and the governance that keeps them useful.https://hqt.org/articles/data-warehouse-vs-lakehouse-for-agencies/https://hqt.org/articles/data-warehouse-vs-lakehouse-for-agencies/TechnologyThe main data platform architectures, what each is good for, and a sensible default for a public agency.https://hqt.org/articles/responsible-ai-in-public-sector/https://hqt.org/articles/responsible-ai-in-public-sector/AI & AutomationWhat responsible use of AI means for agencies, the frameworks that guide it, and concrete practices.https://hqt.org/articles/gis-in-local-government/https://hqt.org/articles/gis-in-local-government/TechnologyThe role of geographic information systems across agency functions and the components of a modern GIS.https://hqt.org/articles/next-generation-911-overview/https://hqt.org/articles/next-generation-911-overview/TechnologyWhat NG911 changes about how emergency calls are routed and handled, and what agencies must prepare.https://hqt.org/articles/web-accessibility-wcag-for-agencies/https://hqt.org/articles/web-accessibility-wcag-for-agencies/TechnologyThe technical standard behind accessibility requirements, what it covers, and how agencies achieve and maintain conformance.https://hqt.org/articles/operational-technology-security-basics/https://hqt.org/articles/operational-technology-security-basics/TechnologyHow control systems differ from IT, the risks they face, and the practical controls that protect them.https://hqt.org/articles/identity-management-for-agencies/https://hqt.org/articles/identity-management-for-agencies/TechnologyDirectory services, single sign-on, multi-factor authentication, and lifecycle management as the foundation of agency security.https://hqt.org/articles/backup-and-ransomware-recovery/https://hqt.org/articles/backup-and-ransomware-recovery/TechnologyWhat a backup strategy must include to survive ransomware, and how to know it works before it is needed.https://hqt.org/articles/observability-and-monitoring-for-public-services/https://hqt.org/articles/observability-and-monitoring-for-public-services/TechnologyHow agencies know their online services are working, and what to measure.https://hqt.org/articles/software-supply-chain-security/https://hqt.org/articles/software-supply-chain-security/TechnologyThe risks in the components software is built from, and the practices that manage them.https://hqt.org/articles/containers-and-kubernetes-for-agency-applications/https://hqt.org/articles/containers-and-kubernetes-for-agency-applications/TechnologyWhat containers are, when orchestration is worth it, and a right-sized approach for public agencies.https://hqt.org/articles/network-segmentation-for-local-government/https://hqt.org/articles/network-segmentation-for-local-government/TechnologyWhy flat networks are dangerous, how to divide them, and how to do it without breaking operations.https://hqt.org/articles/technology-in-county-health-and-human-services/https://hqt.org/articles/technology-in-county-health-and-human-services/SectorsThe systems, data, and privacy rules behind eligibility, case management, and public health at the county level.https://hqt.org/articles/municipal-permitting-and-licensing-systems/https://hqt.org/articles/municipal-permitting-and-licensing-systems/SectorsHow cities manage permits, inspections, and licenses, and what a modern system needs to do.https://hqt.org/articles/public-safety-data-transparency/https://hqt.org/articles/public-safety-data-transparency/SectorsThe state mandates and community expectations for public safety data, and how to publish it responsibly.https://hqt.org/articles/smart-meter-data-for-utilities/https://hqt.org/articles/smart-meter-data-for-utilities/SectorsAdvanced metering produces far more data than billing needs. Here is how utilities use the rest.https://hqt.org/articles/student-data-privacy-for-districts/https://hqt.org/articles/student-data-privacy-for-districts/SectorsThe laws governing student data, the vendor agreements they require, and the practices districts need.https://hqt.org/articles/shared-services-and-joint-powers-authorities/https://hqt.org/articles/shared-services-and-joint-powers-authorities/SectorsHow small agencies pool technology through shared services, and what makes those arrangements work.https://hqt.org/articles/transit-technology-and-open-data/https://hqt.org/articles/transit-technology-and-open-data/SectorsThe systems transit agencies run and the data standards that connect them to riders and planners.https://hqt.org/articles/public-records-law-and-technology-systems/https://hqt.org/articles/public-records-law-and-technology-systems/Government & ComplianceHow public records obligations shape system design, from retention to search to redaction.https://hqt.org/articles/open-meeting-laws-and-technology-projects/https://hqt.org/articles/open-meeting-laws-and-technology-projects/Government & ComplianceHow public meeting requirements affect approvals, timelines, and the technology used to run meetings.https://hqt.org/articles/fiscal-year-cycles-and-technology-timing/https://hqt.org/articles/fiscal-year-cycles-and-technology-timing/Government & ComplianceHow annual budgets, encumbrances, and grant periods determine when agencies can start and pay for projects.https://hqt.org/articles/cybersecurity-grants-for-local-government/https://hqt.org/articles/cybersecurity-grants-for-local-government/Government & ComplianceThe federal and state programs that fund local cybersecurity improvements, and how agencies use them.https://hqt.org/articles/vendor-security-questionnaires/https://hqt.org/articles/vendor-security-questionnaires/Government & ComplianceThe purpose of security questionnaires, common questions, and how to make the process useful for both sides.https://hqt.org/articles/digital-service-standards-for-agencies/https://hqt.org/articles/digital-service-standards-for-agencies/Government & CompliancePrinciples that governments have adopted for designing online services, and how agencies can apply them.https://hqt.org/articles/hipaa-for-public-agencies/https://hqt.org/articles/hipaa-for-public-agencies/Government & ComplianceWhen the health privacy rules apply to government entities and what the security rule expects of their systems.https://hqt.org/articles/election-technology-security-basics/https://hqt.org/articles/election-technology-security-basics/Government & ComplianceThe systems involved in administering elections and the security practices that protect them.https://hqt.org/articles/generative-ai-in-agency-operations/https://hqt.org/articles/generative-ai-in-agency-operations/AI & AutomationThe agency tasks where large language models are already useful, the ones where they are not yet, and how to tell the difference.https://hqt.org/articles/retrieval-augmented-generation-for-agencies/https://hqt.org/articles/retrieval-augmented-generation-for-agencies/AI & AutomationHow an assistant can answer questions from the municipal code, policies, and records without inventing answers.https://hqt.org/articles/ai-assisted-public-records-redaction/https://hqt.org/articles/ai-assisted-public-records-redaction/AI & AutomationHow machine learning can find personal information, criminal justice data, and other exempt content faster, with a person making the final call.https://hqt.org/articles/intelligent-document-processing-for-agencies/https://hqt.org/articles/intelligent-document-processing-for-agencies/AI & AutomationHow agencies extract structured data from applications, invoices, and scanned records with modern document AI.https://hqt.org/articles/evaluating-ai-products-a-guide-for-procurement/https://hqt.org/articles/evaluating-ai-products-a-guide-for-procurement/Contracts & ProcurementQuestions to ask, evidence to require, and terms to include when an agency buys software with artificial intelligence in it.https://hqt.org/articles/ai-security-prompt-injection-and-model-risk/https://hqt.org/articles/ai-security-prompt-injection-and-model-risk/AI & AutomationThe new attack surface that language model applications create, and the controls that address it.https://hqt.org/articles/passkeys-and-phishing-resistant-authentication/https://hqt.org/articles/passkeys-and-phishing-resistant-authentication/TechnologyWhy one-time codes are no longer enough, what passkeys and security keys change, and how to roll them out.https://hqt.org/articles/post-quantum-cryptography-readiness/https://hqt.org/articles/post-quantum-cryptography-readiness/TechnologyQuantum computers will eventually break today's public-key encryption. The preparation is inventory and agility, not panic.https://hqt.org/articles/real-time-data-streaming-and-iot-for-cities/https://hqt.org/articles/real-time-data-streaming-and-iot-for-cities/TechnologyHow agencies collect and act on data from sensors, meters, vehicles, and signals as it happens.https://hqt.org/articles/serverless-and-managed-services-for-public-facing-apps/https://hqt.org/articles/serverless-and-managed-services-for-public-facing-apps/TechnologyHow agencies can run online services that scale for deadlines and cost little when idle, without managing servers.https://hqt.org/articles/digital-twins-for-utilities-and-infrastructure/https://hqt.org/articles/digital-twins-for-utilities-and-infrastructure/TechnologyWhat a digital twin is in practical terms, and where the concept delivers value for water, power, and facilities.https://hqt.org/articles/platform-engineering-and-internal-developer-platforms/https://hqt.org/articles/platform-engineering-and-internal-developer-platforms/TechnologyHow a shared, paved road for development teams speeds delivery and keeps security consistent across applications.https://hqt.org/articles/automating-agency-workflows-with-ai-and-integration/https://hqt.org/articles/automating-agency-workflows-with-ai-and-integration/AI & AutomationWhere automation removes manual steps between systems, and where AI extends it to tasks that used to need a person to read.https://hqt.org/articles/computer-vision-for-infrastructure-inspection/https://hqt.org/articles/computer-vision-for-infrastructure-inspection/TechnologyUsing imagery from vehicles, drones, and fixed cameras to find pavement defects, sign damage, and asset conditions at scale.https://hqt.org/articles/virtual-agents-for-311-and-resident-services/https://hqt.org/articles/virtual-agents-for-311-and-resident-services/AI & AutomationWhat a well-designed AI assistant for residents can do, the failure modes to avoid, and the requirements to set.https://hqt.org/articles/modern-data-stack-for-agency-reporting/https://hqt.org/articles/modern-data-stack-for-agency-reporting/TechnologyThe components that have replaced nightly exports and spreadsheets, and how they fit together for a public agency.https://hqt.org/articles/cloud-saas-colocation-or-on-premises-for-agency-workloads/https://hqt.org/articles/cloud-saas-colocation-or-on-premises-for-agency-workloads/Guides & ChecklistsHow public cloud, vendor-hosted SaaS, colocation, and on-premises infrastructure differ, and the criteria an agency uses to choose.https://hqt.org/articles/build-buy-or-configure-an-agency-system/https://hqt.org/articles/build-buy-or-configure-an-agency-system/Guides & ChecklistsHow custom development, commercial products, low-code configuration, and open source compare for an agency system, and how to decide.https://hqt.org/articles/integrated-suite-or-best-of-breed-systems/https://hqt.org/articles/integrated-suite-or-best-of-breed-systems/Guides & ChecklistsA comparison of single-vendor suites and best-of-breed systems, with the questions an agency should answer before choosing.https://hqt.org/articles/in-house-staff-managed-service-or-project-vendors/https://hqt.org/articles/in-house-staff-managed-service-or-project-vendors/Guides & ChecklistsHiring staff, contracting a managed service, or buying project by project: what each model costs an agency in money, risk, and retained knowledge.https://hqt.org/articles/replace-the-system-or-modernize-around-it/https://hqt.org/articles/replace-the-system-or-modernize-around-it/Guides & ChecklistsFull replacement, incremental modernization, re-platforming, or an API layer: how to compare four options for an aging system.https://hqt.org/articles/security-operations-in-house-or-managed-detection/https://hqt.org/articles/security-operations-in-house-or-managed-detection/Guides & ChecklistsFour models for continuous security monitoring, what each asks of staff and contracts, and how response decisions stay with the agency.https://hqt.org/articles/where-to-run-a-language-model/https://hqt.org/articles/where-to-run-a-language-model/Guides & ChecklistsHow agencies choose among a commercial AI service, a provider model in their own cloud tenancy, and a self-hosted open model.https://hqt.org/articles/fixed-price-time-and-materials-or-staff-augmentation/https://hqt.org/articles/fixed-price-time-and-materials-or-staff-augmentation/Contracts & ProcurementA side by side comparison of fixed-price, time-and-materials, and staff augmentation contracts, and how to choose between them.https://hqt.org/articles/go-live-readiness-checklist/https://hqt.org/articles/go-live-readiness-checklist/Guides & ChecklistsA checklist for agency project managers and department leads deciding whether a new system is ready to go live on its scheduled date.https://hqt.org/articles/pre-solicitation-readiness-checklist-for-technology-purchases/https://hqt.org/articles/pre-solicitation-readiness-checklist-for-technology-purchases/Guides & ChecklistsA readiness checklist for IT and program staff to work through before drafting a solicitation for technology products or services.https://hqt.org/articles/vendor-offboarding-checklist/https://hqt.org/articles/vendor-offboarding-checklist/Guides & ChecklistsA checklist for IT and contracting staff closing out a technology contract: notice, data return, access shutdown, and handover to the next supplier.https://hqt.org/articles/cyber-insurance-readiness-checklist-for-public-agencies/https://hqt.org/articles/cyber-insurance-readiness-checklist-for-public-agencies/Guides & ChecklistsWork through this checklist before completing a cyber insurance application or renewal so every answer you give is backed by evidence.https://hqt.org/articles/new-it-director-first-ninety-days-checklist/https://hqt.org/articles/new-it-director-first-ninety-days-checklist/Guides & ChecklistsA checklist for a newly appointed agency IT leader covering people, systems, contracts, security, work already in flight, and setting direction.https://hqt.org/articles/accessibility-conformance-checklist-before-launch/https://hqt.org/articles/accessibility-conformance-checklist-before-launch/Guides & ChecklistsA pre-launch checklist for agency project teams verifying that a resident-facing website or application conforms to WCAG 2.1 Level AA.https://hqt.org/articles/data-sharing-agreement-checklist/https://hqt.org/articles/data-sharing-agreement-checklist/Guides & ChecklistsA working checklist for program, legal, and IT staff negotiating or reviewing an interagency data sharing agreement.https://hqt.org/articles/public-records-readiness-checklist-for-agency-systems/https://hqt.org/articles/public-records-readiness-checklist-for-agency-systems/Guides & ChecklistsA checklist for records officers and IT staff testing whether an agency system can retain, find, produce, and redact public records.https://hqt.org/articles/market-research-before-a-solicitation/https://hqt.org/articles/market-research-before-a-solicitation/Contracts & ProcurementHow agencies learn what is available and what it costs before drafting a solicitation, without tainting the later competition.https://hqt.org/articles/scoring-technology-proposals-criteria-weights-committees/https://hqt.org/articles/scoring-technology-proposals-criteria-weights-committees/Contracts & ProcurementHow to build an evaluation rubric for a technology RFP: criteria, weights, price scoring, rating definitions, and committee mechanics.https://hqt.org/articles/bid-protests-grounds-and-how-agencies-reduce-risk/https://hqt.org/articles/bid-protests-grounds-and-how-agencies-reduce-risk/Contracts & ProcurementWhat a bid protest is, the grounds that most often appear, how the process runs, and the habits that prevent them.https://hqt.org/articles/sole-source-justification-for-software/https://hqt.org/articles/sole-source-justification-for-software/Contracts & ProcurementWhat a sole source justification for software has to prove, the evidence behind common fact patterns, and what gets one rejected.https://hqt.org/articles/change-orders-and-amendments-on-technology-contracts/https://hqt.org/articles/change-orders-and-amendments-on-technology-contracts/Contracts & ProcurementHow agencies separate a true scope change from a clarification or defect, and move a change from request to signed amendmenthttps://hqt.org/articles/software-license-models-metrics-true-up-audits/https://hqt.org/articles/software-license-models-metrics-true-up-audits/Contracts & ProcurementHow agency buyers should read license metrics, count users and cores in real environments, and negotiate audit and true-up termshttps://hqt.org/articles/saas-renewal-checklist-before-term-ends/https://hqt.org/articles/saas-renewal-checklist-before-term-ends/Guides & ChecklistsA month by month approach to a SaaS renewal: notice windows, price escalation caps, usage inventory, and exit readiness.https://hqt.org/articles/service-level-agreements-and-service-credits/https://hqt.org/articles/service-level-agreements-and-service-credits/Contracts & ProcurementHow availability is defined, measured, and reported in a SaaS contract, and what turns service credits into a real remedyhttps://hqt.org/articles/insurance-and-indemnification-in-technology-contracts/https://hqt.org/articles/insurance-and-indemnification-in-technology-contracts/Contracts & ProcurementWhat each required coverage responds to, how certificates and endorsements work, and how indemnities interact with liability caps.https://hqt.org/articles/subcontractor-approval-and-flow-down-terms/https://hqt.org/articles/subcontractor-approval-and-flow-down-terms/Contracts & ProcurementHow agencies keep visibility over subcontracted technology work through disclosure, written approval, and flow-down terms.https://hqt.org/articles/prevailing-wage-public-works-technology-contracts/https://hqt.org/articles/prevailing-wage-public-works-technology-contracts/Government & ComplianceWhen technology work crosses into public works territory, and the prevailing wage, certified payroll, and bonding rules that follow.https://hqt.org/articles/buying-with-federal-funds-procurement-thresholds-and-clauses/https://hqt.org/articles/buying-with-federal-funds-procurement-thresholds-and-clauses/Government & ComplianceHow federal procurement standards apply to grant-funded purchases: methods, documentation, and the contract provisions the award must carry.https://hqt.org/articles/surplus-it-equipment-disposal-and-data-sanitization/https://hqt.org/articles/surplus-it-equipment-disposal-and-data-sanitization/Government & ComplianceHow agencies declare IT equipment surplus, sanitize the data on it, and close out records, licenses, and inventory.https://hqt.org/articles/data-breach-notification-requirements-for-agencies/https://hqt.org/articles/data-breach-notification-requirements-for-agencies/Government & ComplianceHow state breach notification laws generally work for public entities: what triggers notice, what it must say, who else is told, and what vendor contracts need to say.https://hqt.org/articles/incident-response-plan-for-a-small-agency-team/https://hqt.org/articles/incident-response-plan-for-a-small-agency-team/Guides & ChecklistsWhat belongs in an incident response plan a small agency team can follow, from severity levels to who approves a public statement.https://hqt.org/articles/cyber-insurance-for-public-agencies/https://hqt.org/articles/cyber-insurance-for-public-agencies/Government & ComplianceWhat a cyber policy covers and excludes, how the underwriting questionnaire became a control checklist, and who an agency may call.https://hqt.org/articles/data-classification-and-handling-rules-for-agency-records/https://hqt.org/articles/data-classification-and-handling-rules-for-agency-records/Government & ComplianceHow to build a short data classification scheme, map it to the records agencies actually hold, and attach handling rules at each level.https://hqt.org/articles/spf-dkim-dmarc-agency-email-domain/https://hqt.org/articles/spf-dkim-dmarc-agency-email-domain/TechnologyWhat SPF, DKIM, and DMARC records do, how alignment works, and how to reach enforcement without blocking legitimate agency mail.https://hqt.org/articles/endpoint-detection-and-response-for-agencies/https://hqt.org/articles/endpoint-detection-and-response-for-agencies/TechnologyWhat EDR adds beyond antivirus, and how agencies decide whether to watch the alerts in house or buy managed detection.https://hqt.org/articles/privacy-impact-assessment-new-agency-system/https://hqt.org/articles/privacy-impact-assessment-new-agency-system/Guides & ChecklistsWhat a privacy impact assessment answers, and how to make it a gate in procurement rather than paperwork filed after go-livehttps://hqt.org/articles/security-logging-and-siem-retention/https://hqt.org/articles/security-logging-and-siem-retention/TechnologyA practical order for onboarding log sources into a SIEM, how to set retention periods, and why ingestion volume drives costhttps://hqt.org/articles/encryption-and-key-management-requirements/https://hqt.org/articles/encryption-and-key-management-requirements/TechnologyHow encryption in transit, at rest, and at the field level differ, who holds the keys, and what to require of vendors.https://hqt.org/articles/cis-benchmarks-secure-configuration-baselines/https://hqt.org/articles/cis-benchmarks-secure-configuration-baselines/TechnologyHow CIS Benchmarks and DISA STIGs give an agency a defensible hardening standard, and how to handle levels, exceptions, and drifthttps://hqt.org/articles/physical-security-for-server-rooms-and-devices/https://hqt.org/articles/physical-security-for-server-rooms-and-devices/TechnologyHow agencies control and log access to equipment spaces, manage power and water risk, and document media disposal for assessors.https://hqt.org/articles/scoping-a-penetration-test-rules-of-engagement/https://hqt.org/articles/scoping-a-penetration-test-rules-of-engagement/Guides & ChecklistsHow agencies define engagement types, authorization, testing windows, deliverables, and a required retest in a penetration test solicitationhttps://hqt.org/articles/security-awareness-training-phishing-simulations/https://hqt.org/articles/security-awareness-training-phishing-simulations/Guides & ChecklistsHow to run security awareness training and phishing simulations that change staff behavior and still satisfy auditors and insurershttps://hqt.org/articles/data-migration-system-replacement/https://hqt.org/articles/data-migration-system-replacement/Guides & ChecklistsThe sequence of a data conversion during a system replacement, who owns each decision, and what belongs in the statement of workhttps://hqt.org/articles/user-acceptance-testing-before-go-live/https://hqt.org/articles/user-acceptance-testing-before-go-live/Guides & ChecklistsHow agency staff plan and run user acceptance testing: scenario-based test scripts, tester recruitment, defect severity, and formal sign-off.https://hqt.org/articles/software-escrow-agreements-when-an-agency-needs-one/https://hqt.org/articles/software-escrow-agreements-when-an-agency-needs-one/Contracts & ProcurementWhat a source code escrow deposits, what triggers release, and when export rights or ownership terms serve an agency betterhttps://hqt.org/articles/reviewing-vendor-vpat-accessibility-conformance-reports/https://hqt.org/articles/reviewing-vendor-vpat-accessibility-conformance-reports/Government & ComplianceHow to read a vendor's VPAT or Accessibility Conformance Report, verify the claims yourself during evaluation, and set contract terms.https://hqt.org/articles/software-asset-management-and-license-audits/https://hqt.org/articles/software-asset-management-and-license-audits/TechnologyHow agencies keep an accurate software entitlement record, reconcile it against deployment, and prepare for a vendor license audit.https://hqt.org/articles/resident-identity-single-sign-on-across-agency-services/https://hqt.org/articles/resident-identity-single-sign-on-across-agency-services/TechnologyWhat it takes to give residents one account across permitting, utility billing, and court systems, and the tradeoffs of each approach.https://hqt.org/articles/online-payments-merchant-services-gateways-pci-scope/https://hqt.org/articles/online-payments-merchant-services-gateways-pci-scope/TechnologyHow agencies take card and ACH payments online: merchant accounts, gateways, PCI scope and SAQ choice, fee models, and reconciliation.https://hqt.org/articles/choosing-a-content-management-system-for-agency-websites/https://hqt.org/articles/choosing-a-content-management-system-for-agency-websites/TechnologyHow agency communications and IT staff compare hosted government platforms, commercial products, and open source CMS options during a redesign.https://hqt.org/articles/technical-debt-in-agency-systems-name-it-fund-it/https://hqt.org/articles/technical-debt-in-agency-systems-name-it-fund-it/TechnologyA practical guide for agency IT leaders on naming technical debt, ranking it by risk, and funding remediation in the budgethttps://hqt.org/articles/offline-capable-field-apps-for-inspectors-and-crews/https://hqt.org/articles/offline-capable-field-apps-for-inspectors-and-crews/TechnologyWhat changes when a field application must work without a signal: local storage, selective sync, conflict handling, and device security.https://hqt.org/articles/replacing-pdf-forms-with-online-forms/https://hqt.org/articles/replacing-pdf-forms-with-online-forms/Guides & ChecklistsHow to run a forms modernization effort, from inventory and process redesign to platform choice, accessibility, and ongoing ownership.https://hqt.org/articles/native-app-mobile-web-or-pwa-for-resident-services/https://hqt.org/articles/native-app-mobile-web-or-pwa-for-resident-services/Guides & ChecklistsHow to weigh native apps, responsive websites, and progressive web apps for resident services, and defend the choicehttps://hqt.org/articles/open-source-software-policy-for-agencies/https://hqt.org/articles/open-source-software-policy-for-agencies/Government & ComplianceHow agencies handle open source licenses, bills of materials, support and indemnification, approvals, and publishing their own code.https://hqt.org/articles/start-a-data-governance-program-in-a-public-agency/https://hqt.org/articles/start-a-data-governance-program-in-a-public-agency/Guides & ChecklistsThe parts of a working data governance program in a public agency, and the order to put them in place without new headcount.https://hqt.org/articles/interagency-data-sharing-agreements-what-to-include/https://hqt.org/articles/interagency-data-sharing-agreements-what-to-include/Government & ComplianceThe clauses that make an interagency data sharing agreement workable, from legal authority and field lists to breach notice and termination.https://hqt.org/articles/records-retention-schedules-and-the-systems-that-hold-the-records/https://hqt.org/articles/records-retention-schedules-and-the-systems-that-hold-the-records/Government & ComplianceHow an approved retention schedule maps onto databases, email, SaaS, and backups, covering disposition, legal holds, and vendor limitshttps://hqt.org/articles/deidentification-and-suppression-before-releasing-agency-data/https://hqt.org/articles/deidentification-and-suppression-before-releasing-agency-data/Government & ComplianceHow agencies remove identifiers, aggregate, and suppress small cells so a public data release can be defended and repeated.https://hqt.org/articles/master-data-management-one-record-person-place-asset/https://hqt.org/articles/master-data-management-one-record-person-place-asset/TechnologyHow agencies build one authoritative record for a resident, parcel, business, or asset across systems that disagreehttps://hqt.org/articles/building-an-authoritative-address-list/https://hqt.org/articles/building-an-authoritative-address-list/TechnologyHow local governments decide who assigns addresses, keep points, parcels, and centerlines aligned, and publish one list other systems can trusthttps://hqt.org/articles/geospatial-metadata-standards-for-agency-gis/https://hqt.org/articles/geospatial-metadata-standards-for-agency-gis/TechnologyHow agency GIS teams document coordinate systems, schemas, and metadata so shared layers can actually be trustedhttps://hqt.org/articles/data-catalog-vs-data-inventory-for-agencies/https://hqt.org/articles/data-catalog-vs-data-inventory-for-agencies/TechnologyHow agencies separate a technical data catalog from a statutory data inventory, what a minimum entry in each contains, and who keeps them current.https://hqt.org/articles/measuring-data-quality-completeness-accuracy-timeliness/https://hqt.org/articles/measuring-data-quality-completeness-accuracy-timeliness/TechnologyA practical way to define, profile, and automatically test data quality so the numbers on an agency dashboard can be trusted.https://hqt.org/articles/choosing-performance-measures-departments-will-use/https://hqt.org/articles/choosing-performance-measures-departments-will-use/Guides & ChecklistsA practical guide to picking inputs, outputs, outcomes, and efficiency measures a small staff can define, sustain, and reviewhttps://hqt.org/articles/benchmarking-agency-against-comparable-jurisdictions/https://hqt.org/articles/benchmarking-agency-against-comparable-jurisdictions/Guides & ChecklistsHow to choose peer jurisdictions, normalize the numbers, and document definitions so a comparison holds up in public.https://hqt.org/articles/getting-data-out-of-a-vendor-system/https://hqt.org/articles/getting-data-out-of-a-vendor-system/TechnologyCompares the realistic routes for getting agency data out of a hosted vendor system, and the access terms to settle before go-live.https://hqt.org/articles/open-data-licensing-and-terms-of-use-for-agency-datasets/https://hqt.org/articles/open-data-licensing-and-terms-of-use-for-agency-datasets/Government & ComplianceWhat license and terms to attach when an agency publishes a dataset or map service, and why public records status is not a license.https://hqt.org/articles/building-an-ai-use-case-inventory/https://hqt.org/articles/building-an-ai-use-case-inventory/AI & AutomationWhat belongs in an agency AI use case inventory, how to find AI already embedded in licensed products, and who keeps the record current.https://hqt.org/articles/ai-impact-assessment-before-a-system-goes-live/https://hqt.org/articles/ai-impact-assessment-before-a-system-goes-live/AI & AutomationWhat an AI impact assessment contains section by section, who signs it, when it is refreshed, and how much work it takes.https://hqt.org/articles/generative-ai-use-policy-for-agency-staff/https://hqt.org/articles/generative-ai-use-policy-for-agency-staff/AI & AutomationWhat a staff generative AI policy has to decide: approved tools, data limits, review obligations, disclosure, and personal accounts.https://hqt.org/articles/ai-prompts-and-chat-logs-as-public-records/https://hqt.org/articles/ai-prompts-and-chat-logs-as-public-records/Government & ComplianceHow prompts, uploads, and AI chat histories interact with state public records law, and what to log, keep, and disclose.https://hqt.org/articles/automated-decision-systems-notice-and-appeal/https://hqt.org/articles/automated-decision-systems-notice-and-appeal/Government & ComplianceWhat makes a system an automated decision system, and the notice, explanation, human review, and documentation duties that follow.https://hqt.org/articles/bias-testing-agency-ai-what-to-measure-and-how-often/https://hqt.org/articles/bias-testing-agency-ai-what-to-measure-and-how-often/AI & AutomationHow to test whether an agency AI system produces uneven results: comparison groups, error rates, thresholds, and retesting.https://hqt.org/articles/designing-human-review-for-ai-outputs/https://hqt.org/articles/designing-human-review-for-ai-outputs/AI & AutomationHow to design the human review step in an AI workflow so it catches real errors: triage, evidence, workload, and override data.https://hqt.org/articles/ai-screening-tools-in-public-sector-hiring/https://hqt.org/articles/ai-screening-tools-in-public-sector-hiring/Government & ComplianceWhat agency HR and IT should check before an AI resume screener or scored assessment touches a hiring process.https://hqt.org/articles/machine-translation-and-language-access/https://hqt.org/articles/machine-translation-and-language-access/AI & AutomationWhere machine translation fits in agency language access, which content still needs qualified human translators, and how to say so.https://hqt.org/articles/ai-coding-assistants-policy-and-code-review/https://hqt.org/articles/ai-coding-assistants-policy-and-code-review/AI & AutomationHow agencies and their contractors should govern AI coding assistants: data exposure, licensing, ownership, review, and disclosure.https://hqt.org/articles/ai-transcription-for-public-meetings/https://hqt.org/articles/ai-transcription-for-public-meetings/AI & AutomationHow councils and boards use speech recognition for meeting transcripts and live captions, and where it goes wrong.https://hqt.org/articles/ai-agents-that-take-actions-permissions-and-logging/https://hqt.org/articles/ai-agents-that-take-actions-permissions-and-logging/AI & AutomationHow agencies control AI agents that update records and send notices: service accounts, permitted actions, thresholds, and logs.https://hqt.org/articles/building-an-ai-test-set-from-your-own-records/https://hqt.org/articles/building-an-ai-test-set-from-your-own-records/Guides & ChecklistsHow to assemble an evaluation set from real agency cases, set the answer key, and hold vendors to a measured accuracy number.https://hqt.org/articles/parks-and-recreation-registration-and-reservation-systems/https://hqt.org/articles/parks-and-recreation-registration-and-reservation-systems/SectorsHow cities and counties evaluate recreation management platforms: registration, reservations, permits, payments, and finance reconciliation.https://hqt.org/articles/asset-management-and-work-order-systems-for-public-works/https://hqt.org/articles/asset-management-and-work-order-systems-for-public-works/SectorsHow public works agencies tell a work order CMMS from a GIS linked enterprise asset management system, and what to require.https://hqt.org/articles/integrated-library-systems-library-services-platforms/https://hqt.org/articles/integrated-library-systems-library-services-platforms/SectorsHow integrated library systems and cloud library services platforms work, and what agencies should weigh before migrating.https://hqt.org/articles/court-case-management-and-e-filing-replacement/https://hqt.org/articles/court-case-management-and-e-filing-replacement/SectorsWhat a court case management replacement covers: docketing, calendaring, orders, fines and distributions, e-filing, and interfaces.https://hqt.org/articles/code-enforcement-case-management-inspection-to-abatement/https://hqt.org/articles/code-enforcement-case-management-inspection-to-abatement/SectorsHow code enforcement software should handle complaint intake, inspections, photo evidence, notices, citations, and abatement.https://hqt.org/articles/hmis-requirements-continuum-of-care/https://hqt.org/articles/hmis-requirements-continuum-of-care/SectorsHow a Continuum of Care runs an HMIS: federal data standards, coordinated entry, data quality, consent, and comparable databases.https://hqt.org/articles/fleet-management-systems-maintenance-fuel-telematics/https://hqt.org/articles/fleet-management-systems-maintenance-fuel-telematics/SectorsHow agency fleet systems fit together: maintenance and parts, fuel data, telematics, motor pool, replacement planning, and charging.https://hqt.org/articles/eoc-incident-management-and-mass-notification-software/https://hqt.org/articles/eoc-incident-management-and-mass-notification-software/SectorsHow EOC incident management software differs from mass notification, including the IPAWS path and the opt-in alerting channels agencies run.https://hqt.org/articles/cad-and-rms-how-dispatch-and-records-work-together/https://hqt.org/articles/cad-and-rms-how-dispatch-and-records-work-together/SectorsHow computer aided dispatch and records management divide the work in a police or fire agency, and the interfaces that join them.https://hqt.org/articles/fire-and-ems-records-reporting-nfirs-neris-nemsis/https://hqt.org/articles/fire-and-ems-records-reporting-nfirs-neris-nemsis/SectorsHow fire incident reporting and EMS patient care records work: NFIRS, NERIS, NEMSIS, CAD times, and outcome exchange.https://hqt.org/articles/water-wastewater-compliance-reporting-and-operations-data/https://hqt.org/articles/water-wastewater-compliance-reporting-and-operations-data/SectorsHow water and wastewater utilities move data from SCADA and the lab to regulators, and what to require of the systems in between.https://hqt.org/articles/transit-fare-account-based-ticketing-open-payments/https://hqt.org/articles/transit-fare-account-based-ticketing-open-payments/SectorsHow account-based ticketing, open payments, fare capping, and regional interoperability work, and what to require in a fare system contract.https://hqt.org/articles/student-information-system-migrations/https://hqt.org/articles/student-information-system-migrations/SectorsWhat a student information system holds, how it connects to other school systems, and how districts and colleges plan a replacement.https://hqt.org/articles/technology-strategic-plan-what-to-include/https://hqt.org/articles/technology-strategic-plan-what-to-include/Guides & ChecklistsA practical structure for a technology strategic plan agency staff will read, plus an annual refresh routine that keeps it current.https://hqt.org/articles/it-steering-committees-charter-intake-prioritization/https://hqt.org/articles/it-steering-committees-charter-intake-prioritization/Guides & ChecklistsHow to charter an IT steering committee that decides: membership, decision rights, cadence, intake, and scoring.https://hqt.org/articles/total-cost-of-ownership-agency-software-system/https://hqt.org/articles/total-cost-of-ownership-agency-software-system/Contracts & ProcurementThe cost categories a full lifecycle software estimate should cover, from implementation and integrations through exit costs.https://hqt.org/articles/it-chargeback-and-cost-allocation-between-departments/https://hqt.org/articles/it-chargeback-and-cost-allocation-between-departments/Government & ComplianceHow general fund support, cost allocation plans, internal service funds, and direct chargeback change what agency departments do.https://hqt.org/articles/recruiting-and-retaining-it-staff-at-a-public-agency/https://hqt.org/articles/recruiting-and-retaining-it-staff-at-a-public-agency/Guides & ChecklistsA practical guide to fixing IT classifications, shortening hiring timelines, and keeping technical staff at a public agency.https://hqt.org/articles/managed-service-provider-scope-service-levels-oversight/https://hqt.org/articles/managed-service-provider-scope-service-levels-oversight/Contracts & ProcurementHow agencies scope an MSP contract, set service levels and credits that mean something, and keep oversight of vendor access.https://hqt.org/articles/running-an-agency-service-desk/https://hqt.org/articles/running-an-agency-service-desk/TechnologyHow agency IT teams set up a service catalog, intake and triage, support tiers, priority rules, and the metrics worth reporting.https://hqt.org/articles/it-change-management-approvals-maintenance-windows-freezes/https://hqt.org/articles/it-change-management-approvals-maintenance-windows-freezes/TechnologyHow to size an IT change process for a public agency: change types, approvers, review boards, maintenance windows, and freeze periods.https://hqt.org/articles/device-refresh-cycles-planning-funding-and-secure-disposal/https://hqt.org/articles/device-refresh-cycles-planning-funding-and-secure-disposal/TechnologyHow agencies set refresh intervals by device role, fund replacement predictably, and retire equipment on schedule.https://hqt.org/articles/planning-a-network-refresh-switches-and-wireless/https://hqt.org/articles/planning-a-network-refresh-switches-and-wireless/TechnologyHow to inventory network gear, rank switch and wireless replacements by risk, and plan for PoE, cabling, and closet limits.https://hqt.org/articles/managing-software-licenses-and-saas-subscriptions/https://hqt.org/articles/managing-software-licenses-and-saas-subscriptions/Contracts & ProcurementHow agencies build a software and subscription inventory, track renewal deadlines, reclaim seats, and handle audits.https://hqt.org/articles/preparing-staff-for-a-new-system-training-and-go-live-support/https://hqt.org/articles/preparing-staff-for-a-new-system-training-and-go-live-support/Guides & ChecklistsHow agencies prepare staff for a new system: naming super users, mapping role changes, timing training, and staffing go-live.https://hqt.org/articles/e-rate-schools-libraries-broadband-funding/https://hqt.org/articles/e-rate-schools-libraries-broadband-funding/Government & ComplianceHow the federal E-rate program discounts broadband and network equipment for schools and libraries, and what it requires.https://hqt.org/articles/chart-of-accounts-redesign-before-erp-replacement/https://hqt.org/articles/chart-of-accounts-redesign-before-erp-replacement/TechnologyHow to restructure fund, department, program, project, and object segments before an ERP conversion and document a crosswalk that survives audit.https://hqt.org/articles/fund-accounting-encumbrances-budgetary-control-government-erp/https://hqt.org/articles/fund-accounting-encumbrances-budgetary-control-government-erp/Government & ComplianceHow governmental ERP accounting differs from commercial packages: funds, budgetary control, encumbrances, and fund balance.https://hqt.org/articles/procure-to-pay-encumbrances-three-way-match/https://hqt.org/articles/procure-to-pay-encumbrances-three-way-match/Contracts & ProcurementA walkthrough of the government purchasing cycle, from requisition and encumbrance through three-way match, exceptions, and payment.https://hqt.org/articles/fit-gap-analysis-erp-finance-requirements/https://hqt.org/articles/fit-gap-analysis-erp-finance-requirements/Contracts & ProcurementHow to inventory finance processes, run fit-gap sessions with staff, and build a defensible ERP requirements matrix.https://hqt.org/articles/purchasing-card-program-limits-reconciliation-gl/https://hqt.org/articles/purchasing-card-program-limits-reconciliation-gl/Contracts & ProcurementHow agencies structure purchasing card limits and roles, run monthly reconciliation, and post card activity to the general ledger.https://hqt.org/articles/budget-preparation-software-vs-spreadsheets/https://hqt.org/articles/budget-preparation-software-vs-spreadsheets/TechnologyHow budget preparation software handles position budgeting, scenarios, decision packages, and the adopted budget book.https://hqt.org/articles/centralized-cash-receipting-counters-deposits-reconciliation/https://hqt.org/articles/centralized-cash-receipting-counters-deposits-reconciliation/TechnologyHow agencies run one receipting system across counters, balance drawers, tie deposits to the bank, and post revenue to the ledger.https://hqt.org/articles/parallel-payroll-testing-before-go-live/https://hqt.org/articles/parallel-payroll-testing-before-go-live/Guides & ChecklistsA practical method for running legacy and new payroll side by side: how many cycles, which cases to force in, and how to clear every variance.https://hqt.org/articles/public-safety-timekeeping-overtime-rules/https://hqt.org/articles/public-safety-timekeeping-overtime-rules/SectorsWhy fire and police timekeeping breaks generic systems: FLSA 7(k) work periods, shift trades, callback and court pay, and unit-specific MOU rules.https://hqt.org/articles/capital-improvement-program-tracking-budget-to-asset/https://hqt.org/articles/capital-improvement-program-tracking-budget-to-asset/TechnologyHow multi-year CIP budgets, multiple funding sources, change orders, retention, and construction in progress fit together in one system.https://hqt.org/articles/subrecipient-monitoring-uniform-guidance/https://hqt.org/articles/subrecipient-monitoring-uniform-guidance/Government & ComplianceHow pass-through agencies meet 2 CFR 200 subrecipient monitoring duties: subaward data, risk tiers, invoice review, and audit-ready files.https://hqt.org/articles/segregation-of-duties-access-reviews-financial-systems/https://hqt.org/articles/segregation-of-duties-access-reviews-financial-systems/Government & ComplianceHow agencies spot conflicting role pairs in a financial system, apply compensating controls, and run user access reviews.https://hqt.org/articles/gasb-96-sbitas-and-gasb-87-leases-contract-data/https://hqt.org/articles/gasb-96-sbitas-and-gasb-87-leases-contract-data/Government & ComplianceHow to inventory SBITAs and leases, decide what is in scope, pull terms from contracts, and produce GASB 96 and 87 disclosures each year.https://hqt.org/articles/replacing-a-utility-billing-and-customer-information-system/https://hqt.org/articles/replacing-a-utility-billing-and-customer-information-system/SectorsA scoping guide for replacing a municipal utility CIS, from rate structures and meter reads to collections and payment posting.https://hqt.org/articles/year-end-close-and-audit-readiness-checklist/https://hqt.org/articles/year-end-close-and-audit-readiness-checklist/Guides & ChecklistsA sequenced year-end close calendar, subledger tie-outs, and the reports and IT control evidence auditors ask for.https://hqt.org/articles/collecting-business-tax-tot-short-term-rental-revenue/https://hqt.org/articles/collecting-business-tax-tot-short-term-rental-revenue/SectorsHow business license tax, transient occupancy tax, and short-term rental collection systems differ from permitting software.https://hqt.org/articles/automating-accounts-payable-invoice-capture-routing-controls/https://hqt.org/articles/automating-accounts-payable-invoice-capture-routing-controls/AI & AutomationHow agency finance teams automate invoice intake, coding, and approval routing while keeping vendor bank change verification human.https://hqt.org/articles/automating-bank-and-subledger-reconciliation/https://hqt.org/articles/automating-bank-and-subledger-reconciliation/AI & AutomationHow rule-based and machine-assisted matching can clear routine reconciliations, and how to design exception queues auditors accept.https://hqt.org/articles/public-sector-hr-payroll-time-system-requirements/https://hqt.org/articles/public-sector-hr-payroll-time-system-requirements/Contracts & ProcurementA guide to the requirement areas that make public-sector HR, payroll, and time replacements different, and how to write each one so it can be tested.https://hqt.org/articles/hcm-implementation-contracts-milestones-parallel-payroll-holdback/https://hqt.org/articles/hcm-implementation-contracts-milestones-parallel-payroll-holdback/Contracts & ProcurementHow to structure HR and payroll implementation contracts so payment follows signed milestones, clean parallel payroll cycles, and a holdback.https://hqt.org/articles/applicant-tracking-systems-civil-service-hiring/https://hqt.org/articles/applicant-tracking-systems-civil-service-hiring/TechnologyWhat an applicant tracking system must do under merit system rules, from requisition approval through eligible lists, certification, and audit trails.https://hqt.org/articles/civil-service-testing-platforms-item-banks-proctoring-eligible-lists/https://hqt.org/articles/civil-service-testing-platforms-item-banks-proctoring-eligible-lists/TechnologyHow agencies run civil service exams at scale: item bank security, proctoring options, accommodations, scoring, and eligible lists.https://hqt.org/articles/employee-offboarding-checklist-access-assets-pay-records/https://hqt.org/articles/employee-offboarding-checklist-access-assets-pay-records/Guides & ChecklistsA working separation checklist for public agencies covering final pay, benefits, account access, physical assets, and records holds.https://hqt.org/articles/hr-driven-onboarding-automation-accounts-and-access/https://hqt.org/articles/hr-driven-onboarding-automation-accounts-and-access/AI & AutomationHow agencies can drive account, email, badge, device, and training provisioning from HR records, and where approvals belong.https://hqt.org/articles/learning-management-systems-mandated-training-agencies/https://hqt.org/articles/learning-management-systems-mandated-training-agencies/TechnologyWhat to look for in a learning management system that has to prove training compliance to auditors, not just deliver courses.https://hqt.org/articles/certification-and-license-tracking-for-agency-staff/https://hqt.org/articles/certification-and-license-tracking-for-agency-staff/TechnologyHow agencies keep an authoritative record of staff licenses and certifications, verify them with issuers, and alert before they expire.https://hqt.org/articles/peace-officer-training-records-state-post-reporting/https://hqt.org/articles/peace-officer-training-records-state-post-reporting/SectorsHow law enforcement training records move between agency systems and state POST commissions, and why the two sets of records so often disagree.https://hqt.org/articles/shift-scheduling-software-police-fire-dispatch/https://hqt.org/articles/shift-scheduling-software-police-fire-dispatch/TechnologyHow shift scheduling systems for police, fire, and dispatch handle minimum staffing, overtime callback lists, and audit trails.https://hqt.org/articles/mou-language-to-hr-system-rules/https://hqt.org/articles/mou-language-to-hr-system-rules/Government & ComplianceHow to translate bargaining agreement language into HR and payroll system rules you can cite, test, and keep current.https://hqt.org/articles/position-control-budgeted-positions-vacancies/https://hqt.org/articles/position-control-budgeted-positions-vacancies/TechnologyHow position control links adopted budget authority to filled and vacant seats, and how to reconcile HR and finance headcount monthly.https://hqt.org/articles/flsa-7k-overtime-timekeeping-configuration/https://hqt.org/articles/flsa-7k-overtime-timekeeping-configuration/Government & ComplianceHow public agency timekeeping systems should handle FLSA 7(k) work periods, regular rate, callback minimums, and comp time.https://hqt.org/articles/pension-reporting-payroll-retirement-systems/https://hqt.org/articles/pension-reporting-payroll-retirement-systems/Government & ComplianceHow payroll data reaches a public retirement system each cycle, and how to keep compensation, service credit, and contributions reconciled.https://hqt.org/articles/self-service-deskless-public-workforce/https://hqt.org/articles/self-service-deskless-public-workforce/TechnologyHow agencies extend HR self-service to field and shift staff: kiosk and mobile access, phishing-resistant login, and delegated approvals.https://hqt.org/articles/leave-management-fmla-workers-comp-intermittent-tracking/https://hqt.org/articles/leave-management-fmla-workers-comp-intermittent-tracking/Government & ComplianceWhat a public agency leave system must do beyond subtracting hours: entitlement math, intermittent tracking, workers' comp, and notices.https://hqt.org/articles/parallel-payroll-testing-checklist-hr-go-live/https://hqt.org/articles/parallel-payroll-testing-checklist-hr-go-live/Guides & ChecklistsA structured checklist for planning, running, and closing out parallel payroll testing before a new HR system goes live.https://hqt.org/articles/substitute-temporary-staffing-systems-school-districts/https://hqt.org/articles/substitute-temporary-staffing-systems-school-districts/SectorsHow school districts fill daily absences: absence reporting, dispatch, clearance gating, pay and hour rules, and payroll integration.https://hqt.org/articles/building-automation-systems-agency-network/https://hqt.org/articles/building-automation-systems-agency-network/TechnologyHow building automation systems land on agency networks, and how facilities and IT should divide patching, backups, accounts, and alarm routing.https://hqt.org/articles/specifying-hvac-controls-upgrade-without-proprietary-front-end/https://hqt.org/articles/specifying-hvac-controls-upgrade-without-proprietary-front-end/Contracts & ProcurementHow to write HVAC controls specifications that keep the graphics, programming tools, licenses, and passwords in agency hands.https://hqt.org/articles/fault-detection-diagnostics-bas-data-work-orders/https://hqt.org/articles/fault-detection-diagnostics-bas-data-work-orders/AI & AutomationHow fault detection and diagnostics software turns building automation trend data into work orders, and what it takes to act on them.https://hqt.org/articles/surveillance-video-retention-schedules-litigation-holds/https://hqt.org/articles/surveillance-video-retention-schedules-litigation-holds/Government & ComplianceHow agencies set camera retention periods, place litigation holds, and document auto-overwrite as an approved records disposition.https://hqt.org/articles/sizing-video-surveillance-storage-and-bandwidth/https://hqt.org/articles/sizing-video-surveillance-storage-and-bandwidth/Guides & ChecklistsA working method for estimating camera storage, bitrate, and network load before purchase, with a 200 camera worked example.https://hqt.org/articles/video-analytics-license-plate-readers-policy/https://hqt.org/articles/video-analytics-license-plate-readers-policy/AI & AutomationWhat camera analytics and license plate readers actually detect, how they fail, and the use, retention, and audit policy an agency should set first.https://hqt.org/articles/ndaa-section-889-banned-cameras-agency-purchases/https://hqt.org/articles/ndaa-section-889-banned-cameras-agency-purchases/Contracts & ProcurementHow Section 889 restrictions on covered camera and telecom brands reach state and local purchases made with federal funds.https://hqt.org/articles/energy-management-information-systems-bills-interval-data/https://hqt.org/articles/energy-management-information-systems-bills-interval-data/TechnologyHow an energy management information system combines utility bills, interval meter data, and weather to manage agency building energy costs.https://hqt.org/articles/replacing-access-control-system-credentials-readers-cutover/https://hqt.org/articles/replacing-access-control-system-credentials-readers-cutover/TechnologyHow to scope a building access control replacement: credentials, readers, panels, data migration, and a phased cutover.https://hqt.org/articles/space-lease-management-systems-gasb-87/https://hqt.org/articles/space-lease-management-systems-gasb-87/TechnologyWhat an IWMS or CAFM must hold to be trusted for floor plans, occupancy, and lease records, and what GASB 87 reporting demands.https://hqt.org/articles/capital-asset-register-thresholds-depreciation-reconciliation/https://hqt.org/articles/capital-asset-register-thresholds-depreciation-reconciliation/Government & ComplianceHow agencies decide what to capitalize, how to handle construction in progress and infrastructure, and how to reconcile the asset register.https://hqt.org/articles/energy-savings-performance-contracts-hvac-lighting-controls/https://hqt.org/articles/energy-savings-performance-contracts-hvac-lighting-controls/Contracts & ProcurementHow an energy savings performance contract works for HVAC, lighting, and controls, and the oversight terms an agency should not concede.https://hqt.org/articles/owner-side-capital-project-management-software/https://hqt.org/articles/owner-side-capital-project-management-software/SectorsHow owner-side capital project software should handle budgets, change orders, pay applications, and ERP integration.https://hqt.org/articles/construction-closeout-data-as-builts-om-asset-records/https://hqt.org/articles/construction-closeout-data-as-builts-om-asset-records/Guides & ChecklistsHow to specify construction closeout as a structured data handover so asset records, as-builts, and controls files reach your systems.https://hqt.org/articles/811-one-call-tickets-locate-requests-positive-response/https://hqt.org/articles/811-one-call-tickets-locate-requests-positive-response/SectorsHow agencies that own buried utilities handle 811 locate tickets, from map screening and positive response to field documentation.https://hqt.org/articles/street-light-inventory-before-led-retrofit/https://hqt.org/articles/street-light-inventory-before-led-retrofit/SectorsHow agencies confirm street light ownership, tariffs, and GIS inventory before buying LED fixtures and networked controls.https://hqt.org/articles/traffic-signal-systems-controllers-atms-communications/https://hqt.org/articles/traffic-signal-systems-controllers-atms-communications/SectorsHow a traffic signal system fits together: cabinets and controllers, detection, central ATMS software, communications, security, and records.https://hqt.org/articles/designing-a-311-service-request-catalog/https://hqt.org/articles/designing-a-311-service-request-catalog/TechnologyHow to build a 311 request type catalog: sizing the list, routing each type to an owner and queue, and setting response targets crews can meet.https://hqt.org/articles/right-of-way-management-encroachment-permits-shot-clocks/https://hqt.org/articles/right-of-way-management-encroachment-permits-shot-clocks/SectorsHow agencies run encroachment permitting, restoration and moratorium enforcement, dig once coordination, and wireless shot clocks as one system.https://hqt.org/articles/open311-standards-based-service-request-interfaces/https://hqt.org/articles/open311-standards-based-service-request-interfaces/TechnologyHow Open311 GeoReport v2 works, what its endpoints do, and how to require it in a service request system solicitation.https://hqt.org/articles/closing-the-loop-311-requests-public-works-work-orders/https://hqt.org/articles/closing-the-loop-311-requests-public-works-work-orders/TechnologyHow to connect a 311 request system to public works work orders: system of record, asset matching, status mapping, and closure notifications.https://hqt.org/articles/publishing-311-data-without-exposing-personal-information/https://hqt.org/articles/publishing-311-data-without-exposing-personal-information/Government & ComplianceHow to scrub names, free text, photos, and exact addresses from 311 service requests before publishing them as open data.https://hqt.org/articles/311-service-request-system-requirements/https://hqt.org/articles/311-service-request-system-requirements/Contracts & ProcurementRequirements, scenario demos, reference questions, and late-surfacing cost lines to use when buying a 311 or service request system.https://hqt.org/articles/constituent-relationship-management-beyond-311/https://hqt.org/articles/constituent-relationship-management-beyond-311/TechnologyHow a constituent relationship system differs from a 311 service request tool, and how to scope one without starting an enterprise data program.https://hqt.org/articles/casework-correspondence-tracking-elected-offices/https://hqt.org/articles/casework-correspondence-tracking-elected-offices/SectorsHow elected offices log constituent contacts, refer them to departments, track responses, and what the supporting system must handle.https://hqt.org/articles/ai-triage-resident-messages-classification-routing/https://hqt.org/articles/ai-triage-resident-messages-classification-routing/AI & AutomationHow agencies can classify and route inbound resident messages with AI while keeping staff in charge of every outcome.https://hqt.org/articles/10dlc-registration-consent-opt-out-rules-agency-texting/https://hqt.org/articles/10dlc-registration-consent-opt-out-rules-agency-texting/Government & ComplianceHow agencies set up resident text messaging: 10DLC brand and campaign registration, consent records, STOP handling, and vendor terms.https://hqt.org/articles/building-a-resident-notification-preference-center/https://hqt.org/articles/building-a-resident-notification-preference-center/TechnologyHow to design a resident notification preference center: topics, channels, consent records, quiet hours, and cross-system opt-out sync.https://hqt.org/articles/contact-center-technology-resident-services/https://hqt.org/articles/contact-center-technology-resident-services/TechnologyWhat an agency call center needs beyond a phone system: routing, callback, IVR design, language access, recording, and peak sizing.https://hqt.org/articles/appointment-scheduling-agency-counters-clinics/https://hqt.org/articles/appointment-scheduling-agency-counters-clinics/TechnologyHow to configure appointment scheduling for permit counters, clerk windows, clinics and inspections without simply hiding the wait.https://hqt.org/articles/outage-communication-maps-restoration-estimates-alerts/https://hqt.org/articles/outage-communication-maps-restoration-estimates-alerts/SectorsHow utilities should publish outage maps, restoration estimates, and proactive alerts that stay accurate and available under load.https://hqt.org/articles/agency-billing-payment-plans-hardship-arrangements/https://hqt.org/articles/agency-billing-payment-plans-hardship-arrangements/SectorsHow agencies set up installment plans, deferrals and hardship programs in utility, ambulance, court and tax billing systems.https://hqt.org/articles/convenience-fees-online-government-payments/https://hqt.org/articles/convenience-fees-online-government-payments/Government & ComplianceHow agencies decide who pays card processing costs online, and the brand rules, statutes, refund rules and accounting effects.https://hqt.org/articles/choosing-languages-for-government-language-access/https://hqt.org/articles/choosing-languages-for-government-language-access/Government & ComplianceHow agencies pick supported languages, rank vital documents for translation first, and keep translated content accurate over time.https://hqt.org/articles/agency-lobby-self-service-kiosk-checklist/https://hqt.org/articles/agency-lobby-self-service-kiosk-checklist/Guides & ChecklistsA specification and siting checklist for public self-service kiosks in agency lobbies, from ADA placement and PCI scope to staffing the helper role.https://hqt.org/articles/ccwis-federal-requirements-child-welfare-system/https://hqt.org/articles/ccwis-federal-requirements-child-welfare-system/Government & ComplianceWhat the federal CCWIS rule requires of a child welfare system replacement, and where agencies most often fall short.https://hqt.org/articles/device-and-hotspot-lending-program/https://hqt.org/articles/device-and-hotspot-lending-program/SectorsA practical guide to designing, staffing and funding a laptop, tablet and hotspot lending program at a public agency.https://hqt.org/articles/afcars-ncands-federal-child-welfare-data-reporting/https://hqt.org/articles/afcars-ncands-federal-child-welfare-data-reporting/Government & ComplianceHow title IV-E agencies meet AFCARS and NCANDS federal reporting, from element-to-screen mapping through error correction and resubmission.https://hqt.org/articles/apd-approval-cost-allocation-hhs-systems/https://hqt.org/articles/apd-approval-cost-allocation-hhs-systems/Contracts & ProcurementHow planning and implementation APDs, prior approval thresholds, match rates, and cost allocation plans shape HHS system procurement schedules.https://hqt.org/articles/42-cfr-part-2-consent-and-redisclosure/https://hqt.org/articles/42-cfr-part-2-consent-and-redisclosure/Government & ComplianceHow 42 CFR Part 2 differs from HIPAA on consent, redisclosure, and court orders for substance use disorder records.https://hqt.org/articles/business-associate-and-qualified-service-organization-agreements/https://hqt.org/articles/business-associate-and-qualified-service-organization-agreements/Contracts & ProcurementWhen a health and human services vendor needs a HIPAA business associate agreement, a Part 2 QSOA, or both, and what each must say.https://hqt.org/articles/hl7-fhir-and-health-information-exchange-for-agencies/https://hqt.org/articles/hl7-fhir-and-health-information-exchange-for-agencies/TechnologyHow HL7 v2, C-CDA, and FHIR fit together, and what to name in a solicitation so interface quotes are comparable.https://hqt.org/articles/benefit-eligibility-interfaces-verification-hubs-state-systems/https://hqt.org/articles/benefit-eligibility-interfaces-verification-hubs-state-systems/TechnologyHow local agencies connect case management tools to state eligibility systems: access agreements, matching rules, and audit limits.https://hqt.org/articles/behavioral-health-ehr-selection-county-ccbhc/https://hqt.org/articles/behavioral-health-ehr-selection-county-ccbhc/SectorsHow county and CCBHC behavioral health programs should evaluate an EHR, from golden thread documentation to billing rules and state reporting extracts.https://hqt.org/articles/wic-management-information-systems-and-ebt/https://hqt.org/articles/wic-management-information-systems-and-ebt/SectorsHow state WIC agencies think through MIS replacement, EBT issuance and settlement, approved product lists, and system transfers.https://hqt.org/articles/medical-examiner-coroner-case-management-systems/https://hqt.org/articles/medical-examiner-coroner-case-management-systems/SectorsWhat a medicolegal death investigation system must handle, from scene intake and chain of custody to NamUs, toxicology, and death registry reporting.https://hqt.org/articles/electronic-lab-reporting-ecr-syndromic-surveillance-feeds/https://hqt.org/articles/electronic-lab-reporting-ecr-syndromic-surveillance-feeds/SectorsHow ELR, eCR, and syndromic surveillance feeds reach a health department, and what breaks during onboarding and outbreaks.https://hqt.org/articles/988-and-mobile-crisis-technology-call-handling-dispatch-bed-data/https://hqt.org/articles/988-and-mobile-crisis-technology-call-handling-dispatch-bed-data/SectorsHow 988 call handling, mobile crisis dispatch, bed registries, and follow-up records fit together for counties.https://hqt.org/articles/electronic-death-registration-and-vital-records-systems/https://hqt.org/articles/electronic-death-registration-and-vital-records-systems/SectorsHow electronic death and birth registration systems work, from certification and coding to issuance, interstate exchange, and surge planning.https://hqt.org/articles/jail-medical-records-integration-with-jail-systems/https://hqt.org/articles/jail-medical-records-integration-with-jail-systems/SectorsHow jail health records work, from intake screening through release planning, and how they connect to the jail management system.https://hqt.org/articles/veterans-services-office-case-management/https://hqt.org/articles/veterans-services-office-case-management/SectorsWhat a county or state veterans services office needs from case management software: VA deadlines, accreditation, confidentiality, and funding reports.https://hqt.org/articles/ai-scribes-ambient-documentation-agency-clinics/https://hqt.org/articles/ai-scribes-ambient-documentation-agency-clinics/AI & AutomationHow public health, behavioral health and correctional clinics should evaluate AI scribes: review, consent, recordings, and contract terms.https://hqt.org/articles/confidentiality-checklist-health-human-services-systems/https://hqt.org/articles/confidentiality-checklist-health-human-services-systems/Guides & ChecklistsA checklist for configuring, monitoring, and proving access controls in health and human services case systems.https://hqt.org/articles/adult-protective-services-aging-case-management-namrs/https://hqt.org/articles/adult-protective-services-aging-case-management-namrs/SectorsHow adult protective services and Older Americans Act programs run case management, NAMRS reporting, and record confidentiality.https://hqt.org/articles/keeping-zoning-general-plan-and-permits-in-sync/https://hqt.org/articles/keeping-zoning-general-plan-and-permits-in-sync/SectorsHow zoning text, the mapped zoning and general plan layers, and permit system checks drift apart after each adoption, and how to realign them.https://hqt.org/articles/ceqa-administrative-record-document-management/https://hqt.org/articles/ceqa-administrative-record-document-management/Government & ComplianceHow to organize CEQA studies, notices, appendices, and comment responses so the administrative record can be certified without a scramble.https://hqt.org/articles/tracking-mitigation-measures-conditions-of-approval/https://hqt.org/articles/tracking-mitigation-measures-conditions-of-approval/Government & ComplianceHow agencies turn adopted mitigation measures and conditions of approval into tracked records with owners, triggers, and evidence.https://hqt.org/articles/public-zoning-lookup-map-residents-can-use/https://hqt.org/articles/public-zoning-lookup-map-residents-can-use/TechnologyHow to build a public zoning lookup map that gives residents a clear, trustworthy answer about what they can build on a parcel.https://hqt.org/articles/housing-element-annual-progress-report-permit-data/https://hqt.org/articles/housing-element-annual-progress-report-permit-data/Government & ComplianceWhere annual progress report numbers come from in permit and entitlement records, and how to instrument systems so the report is a query.https://hqt.org/articles/ms4-stormwater-compliance-tracking/https://hqt.org/articles/ms4-stormwater-compliance-tracking/SectorsHow to structure MS4 stormwater records so inspections, BMP maintenance, and illicit discharge cases feed the annual report directly.https://hqt.org/articles/buying-aerial-imagery-lidar-change-detection/https://hqt.org/articles/buying-aerial-imagery-lidar-change-detection/Contracts & ProcurementHow agencies scope aerial imagery and lidar buys: accuracy specs, flight timing, licensing, hosting, and acceptance testing.https://hqt.org/articles/air-quality-monitoring-data-low-cost-sensors/https://hqt.org/articles/air-quality-monitoring-data-low-cost-sensors/TechnologyHow agencies run low-cost air sensor networks: siting, calibration and drift, data gaps, and publishing readings residents can act on.https://hqt.org/articles/cupa-hazardous-materials-business-plan-cers-reporting/https://hqt.org/articles/cupa-hazardous-materials-business-plan-cers-reporting/Government & ComplianceHow CUPA systems handle facility records, chemical inventories, tanks, inspections, violations, fees, and state portal reporting.https://hqt.org/articles/water-quality-sampling-data-and-lab-electronic-deliverables/https://hqt.org/articles/water-quality-sampling-data-and-lab-electronic-deliverables/TechnologyMoving water quality results from field sampling and contract lab EDDs into a validated database, dashboard, and state report.https://hqt.org/articles/tree-inventory-urban-forestry-system-requirements/https://hqt.org/articles/tree-inventory-urban-forestry-system-requirements/Guides & ChecklistsA requirements checklist for tree inventory and urban forestry software: data fields, work order links, refresh cycles, and RFP terms.https://hqt.org/articles/park-asset-inventories-playground-inspection-records/https://hqt.org/articles/park-asset-inventories-playground-inspection-records/SectorsHow to inventory park amenities, keep certified playground inspection records that hold up in a claim, and score condition for budget requests.https://hqt.org/articles/stream-rain-gauge-telemetry-flood-warning/https://hqt.org/articles/stream-rain-gauge-telemetry-flood-warning/TechnologyHow agencies specify stream and rain gauge telemetry that survives the storm: sensors, backhaul, power, alarms, and upkeep.https://hqt.org/articles/floodplain-records-elevation-certificates-lomas-crs-credit/https://hqt.org/articles/floodplain-records-elevation-certificates-lomas-crs-credit/Government & ComplianceHow local floodplain administrators organize elevation certificates, map changes, and damage determinations for CRS credit.https://hqt.org/articles/wildfire-risk-data-defensible-space-inspections/https://hqt.org/articles/wildfire-risk-data-defensible-space-inspections/SectorsHow agencies assemble wildfire risk data layers and run defensible space inspections, notices, reinspection, and abatement cost recovery at scale.https://hqt.org/articles/groundwater-monitoring-data-and-sgma-annual-reporting/https://hqt.org/articles/groundwater-monitoring-data-and-sgma-annual-reporting/SectorsWhat data a groundwater sustainability agency must maintain, from well records to extraction, and how the annual state report is built from it.https://hqt.org/articles/agricultural-commissioner-permit-and-pesticide-use-report-systems/https://hqt.org/articles/agricultural-commissioner-permit-and-pesticide-use-report-systems/SectorsHow county agricultural commissioner offices run permits, pesticide use reporting, field inspections, devices, and enforcement.https://hqt.org/articles/ai-sort-summarize-public-comments-environmental-documents/https://hqt.org/articles/ai-sort-summarize-public-comments-environmental-documents/AI & AutomationHow planning staff can use language models to cluster, deduplicate, and route comments on an EIR or general plan update without losing the record.https://hqt.org/articles/capacity-planning-agency-systems-storage-compute-peaks/https://hqt.org/articles/capacity-planning-agency-systems-storage-compute-peaks/TechnologyHow agencies can forecast storage, compute, and license growth on a budget cycle and size systems for predictable seasonal peaks.https://hqt.org/articles/setting-rto-and-rpo-targets-for-agency-systems/https://hqt.org/articles/setting-rto-and-rpo-targets-for-agency-systems/TechnologyA practical guide to assigning recovery time and recovery point objectives to agency systems and using them to drive backup, replication, and contract terms.https://hqt.org/articles/restore-drills-proving-backups-come-back/https://hqt.org/articles/restore-drills-proving-backups-come-back/Guides & ChecklistsA practical quarterly restore drill programme for agency IT: what to sample, how to time it against RTO, and what evidence to keep.https://hqt.org/articles/choosing-a-disaster-recovery-site/https://hqt.org/articles/choosing-a-disaster-recovery-site/TechnologyHow agencies weigh separation distance, hosting options, and network paths when choosing a disaster recovery site.https://hqt.org/articles/database-administration-small-agency-it-team/https://hqt.org/articles/database-administration-small-agency-it-team/TechnologyThe routine database maintenance a two-person agency IT shop still owes a vendor system, and how to staff it.https://hqt.org/articles/patching-systems-you-cannot-reboot-rings-windows-exceptions/https://hqt.org/articles/patching-systems-you-cannot-reboot-rings-windows-exceptions/TechnologyHow agencies can use deployment rings, realistic maintenance windows, and documented exceptions to patch 24/7 systems.https://hqt.org/articles/disaster-recovery-failover-test-without-breaking-production/https://hqt.org/articles/disaster-recovery-failover-test-without-breaking-production/Guides & ChecklistsHow to escalate from tabletop to live failover, scope a test to one maintenance window, and close the findings.https://hqt.org/articles/maintainable-cmdb-small-agency-it-teams/https://hqt.org/articles/maintainable-cmdb-small-agency-it-teams/TechnologyHow to scope, populate, and maintain a configuration management database that a small government IT team can keep accurate.https://hqt.org/articles/mapping-application-dependencies-before-migration/https://hqt.org/articles/mapping-application-dependencies-before-migration/TechnologyHow agencies build and maintain an application dependency map to speed outage triage and avoid cutover surprises.https://hqt.org/articles/vulnerability-remediation-scan-report-to-closed-ticket/https://hqt.org/articles/vulnerability-remediation-scan-report-to-closed-ticket/Guides & ChecklistsHow to turn a long scanner export into a tracked remediation queue with owners, deadlines, and signed risk acceptances.https://hqt.org/articles/alert-fatigue-monitoring-tuning/https://hqt.org/articles/alert-fatigue-monitoring-tuning/TechnologyHow agency IT teams can cut monitoring noise, tune alert rules, and make sure real outages still get noticed.https://hqt.org/articles/network-monitoring-small-agency-baseline/https://hqt.org/articles/network-monitoring-small-agency-baseline/TechnologyA practical monitoring baseline for small government networks: which signals to watch, what each one tells you, and how to size a tool.https://hqt.org/articles/it-on-call-rotations-small-agency-teams/https://hqt.org/articles/it-on-call-rotations-small-agency-teams/TechnologyHow small government IT teams can build an on-call rotation that works: schedules, escalation tiers, hand-off notes, standby pay, and budget.https://hqt.org/articles/incident-postmortems-blameless-review-follow-through/https://hqt.org/articles/incident-postmortems-blameless-review-follow-through/Guides & ChecklistsHow public agencies run a blameless outage postmortem, brief officials and the press, and hold hosted vendors to their own review.https://hqt.org/articles/writing-runbooks-your-staff-will-use-at-2-am/https://hqt.org/articles/writing-runbooks-your-staff-will-use-at-2-am/Guides & ChecklistsHow to write operational runbooks agency staff can follow during a late-night outage, and how to keep them current.https://hqt.org/articles/keeping-system-documentation-and-network-diagrams-current/https://hqt.org/articles/keeping-system-documentation-and-network-diagrams-current/Guides & ChecklistsHow agencies keep network diagrams, system profiles, and as-built records current, and who owns each update.https://hqt.org/articles/tls-certificate-and-domain-renewal-tracking/https://hqt.org/articles/tls-certificate-and-domain-renewal-tracking/TechnologyHow agencies can inventory every TLS certificate and domain they depend on, with owners, expiry dates, funding, and automation.https://hqt.org/articles/endpoint-imaging-zero-touch-provisioning-agency-devices/https://hqt.org/articles/endpoint-imaging-zero-touch-provisioning-agency-devices/TechnologyHow agencies move from bench imaging to zero-touch enrollment for laptops, patrol tablets, and rugged field devices.https://hqt.org/articles/service-account-hygiene-inventory-ownership-rotation/https://hqt.org/articles/service-account-hygiene-inventory-ownership-rotation/TechnologyHow agency IT teams can inventory service accounts, assign named owners, and rotate credentials without breaking scheduled jobs.https://hqt.org/articles/privileged-access-management-for-agencies/https://hqt.org/articles/privileged-access-management-for-agencies/TechnologyWhat privileged access management tools do, which pieces a small agency needs first, and how to write PAM requirements.https://hqt.org/articles/remove-local-admin-rights-agency-workstations/https://hqt.org/articles/remove-local-admin-rights-agency-workstations/TechnologyA practical plan for taking local administrator rights off agency workstations without stranding staff who legitimately need to install things.https://hqt.org/articles/active-directory-tiering-protecting-domain-admin/https://hqt.org/articles/active-directory-tiering-protecting-domain-admin/TechnologyHow the Active Directory tier model works, and a practical sequence a small agency can follow to protect domain admin credentials.https://hqt.org/articles/certificate-lifecycle-management-agencies/https://hqt.org/articles/certificate-lifecycle-management-agencies/TechnologyHow agencies can inventory certificates, assign owners, and automate renewal so expirations stop taking public systems offline.https://hqt.org/articles/waf-ddos-protection-agency-websites/https://hqt.org/articles/waf-ddos-protection-agency-websites/TechnologyHow state and local agencies evaluate WAF and DDoS protection for public websites, from monitor mode to contract terms.https://hqt.org/articles/protective-dns-local-government-networks/https://hqt.org/articles/protective-dns-local-government-networks/TechnologyHow protective DNS blocks malicious domain lookups, where enforcement gaps appear, and what to ask before an agency buys it.https://hqt.org/articles/external-attack-surface-review-agency-systems/https://hqt.org/articles/external-attack-surface-review-agency-systems/TechnologyHow state and local agencies can find internet-facing systems nobody remembers owning, and keep that inventory current each quarter.https://hqt.org/articles/api-security-testing-before-agency-endpoint-goes-public/https://hqt.org/articles/api-security-testing-before-agency-endpoint-goes-public/TechnologyHow to security test an agency API before it goes public, from authorization flaws to contract terms and go-live evidence.https://hqt.org/articles/asking-vendors-for-an-sbom-and-using-it/https://hqt.org/articles/asking-vendors-for-an-sbom-and-using-it/Contracts & ProcurementHow to write SBOM requirements into a software contract, check what the vendor delivers, and search it when a vulnerability lands.https://hqt.org/articles/coordinated-vulnerability-disclosure-policy-public-agency/https://hqt.org/articles/coordinated-vulnerability-disclosure-policy-public-agency/Government & ComplianceWhat a public agency's coordinated vulnerability disclosure policy should contain, who approves it, and how reports get routed and released.https://hqt.org/articles/ransomware-negotiation-and-payment-policy/https://hqt.org/articles/ransomware-negotiation-and-payment-policy/Government & ComplianceHow state and local agencies should set ransom payment decision rights, sanctions screening, insurance, and disclosure in advance.https://hqt.org/articles/vendor-remote-access-scada-ot-systems/https://hqt.org/articles/vendor-remote-access-scada-ot-systems/SectorsHow agencies can replace always-on integrator VPNs into SCADA with brokered, operator-approved, time-boxed, recorded sessions.https://hqt.org/articles/insider-risk-public-agency-separation-of-duties-monitoring/https://hqt.org/articles/insider-risk-public-agency-separation-of-duties-monitoring/Government & ComplianceWhere separation of duties belongs in a small agency, what monitoring is lawful and proportionate, and how offboarding closes the risk.https://hqt.org/articles/water-utility-scada-tabletop-exercise/https://hqt.org/articles/water-utility-scada-tabletop-exercise/Guides & ChecklistsA ready-to-run two-hour tabletop exercise for a SCADA compromise at a water utility, with injects, roles, and decision points.https://hqt.org/articles/school-district-data-breach-tabletop-exercise/https://hqt.org/articles/school-district-data-breach-tabletop-exercise/Guides & ChecklistsA runnable ninety-minute tabletop exercise for districts facing a vendor-disclosed breach of student records.https://hqt.org/articles/security-metrics-city-council-board/https://hqt.org/articles/security-metrics-city-council-board/Guides & ChecklistsA one-page set of cybersecurity measures a city council or board can act on, with cadence, open-meeting, and definition guidance.https://hqt.org/articles/data-lineage-tracing-a-number-to-its-source/https://hqt.org/articles/data-lineage-tracing-a-number-to-its-source/TechnologyHow to document the path from a source system field to a published figure, and what lineage details to record by hand.https://hqt.org/articles/impact-analysis-before-you-change-a-field-or-report/https://hqt.org/articles/impact-analysis-before-you-change-a-field-or-report/TechnologyHow agencies can find every report, extract, dashboard, and submission that depends on a field before changing it.https://hqt.org/articles/reference-data-and-code-lists-across-agency-systems/https://hqt.org/articles/reference-data-and-code-lists-across-agency-systems/TechnologyHow agencies define, own, version, and distribute code lists so department, fund, case, and status values stay consistent across systems.https://hqt.org/articles/cad-outage-tabletop-exercise-911-center/https://hqt.org/articles/cad-outage-tabletop-exercise-911-center/Guides & ChecklistsHow to run a tabletop exercise for a 911 center CAD outage, from declaring continuity to rebuilding the call record.https://hqt.org/articles/resident-survey-sampling-weighting-margin-of-error/https://hqt.org/articles/resident-survey-sampling-weighting-margin-of-error/Guides & ChecklistsHow sample frame, mode, response rate, weighting, and margin of error determine whether a resident survey's numbers hold up.https://hqt.org/articles/form-design-clean-data-pick-lists-validation/https://hqt.org/articles/form-design-clean-data-pick-lists-validation/Guides & ChecklistsA field-by-field guide to designing intake, permit, and inspection forms so the submissions can actually be counted and reported.https://hqt.org/articles/geocoding-accuracy-match-rates-match-types/https://hqt.org/articles/geocoding-accuracy-match-rates-match-types/TechnologyHow to measure geocoding quality using match rates, match types, and tie handling, and what to do with records that fail to match.https://hqt.org/articles/storing-sensor-time-series-retention-downsampling-rollups/https://hqt.org/articles/storing-sensor-time-series-retention-downsampling-rollups/TechnologyHow agencies set retention windows, downsample sensor and meter readings into rollups, and choose a time series store.https://hqt.org/articles/analytics-data-retention-vs-records-schedule/https://hqt.org/articles/analytics-data-retention-vs-records-schedule/Government & ComplianceHow to set retention for warehouse tables, BI caches, extracts, and logs without confusing them with your legal records schedule.https://hqt.org/articles/rates-and-denominators-per-capita/https://hqt.org/articles/rates-and-denominators-per-capita/Guides & ChecklistsHow to choose the right denominator for agency per-capita rates, which population estimates to cite, and how to handle small jurisdictions.https://hqt.org/articles/averages-hide-response-times-medians-percentiles/https://hqt.org/articles/averages-hide-response-times-medians-percentiles/Guides & ChecklistsWhy average response times mislead on skewed data, how to compute percentiles consistently, and what to publish.https://hqt.org/articles/small-counts-noise-year-over-year-change/https://hqt.org/articles/small-counts-noise-year-over-year-change/Guides & ChecklistsHow to tell whether a month-over-month or year-over-year move in a low-count agency measure is real signal or ordinary variation.https://hqt.org/articles/before-and-after-comparisons-what-pre-post-cannot-tell-you/https://hqt.org/articles/before-and-after-comparisons-what-pre-post-cannot-tell-you/Guides & ChecklistsWhy a before-and-after chart rarely proves a program worked, and the low-cost comparison designs agencies can use instead.https://hqt.org/articles/dashboard-governance-owners-certification-retirement/https://hqt.org/articles/dashboard-governance-owners-certification-retirement/TechnologyHow agencies separate certified dashboards staff may cite from exploratory ones using owners, definitions, reviews, and retirement.https://hqt.org/articles/automated-data-tests-before-dashboard-refresh/https://hqt.org/articles/automated-data-tests-before-dashboard-refresh/TechnologyHow agencies can automate row count, null, duplicate, referential, range, and freshness checks before a dashboard refresh publishes.https://hqt.org/articles/two-systems-different-counts-reconciliation-method/https://hqt.org/articles/two-systems-different-counts-reconciliation-method/TechnologyA repeatable method for reconciling counts that disagree between a source system, a data warehouse, and a published report.https://hqt.org/articles/data-literacy-program-agency-staff-curriculum/https://hqt.org/articles/data-literacy-program-agency-staff-curriculum/Guides & ChecklistsHow to scope, teach, tier, and evaluate an internal data literacy program so agency staff can interpret the reports they already receive.https://hqt.org/articles/small-number-suppression-recurring-public-reports/https://hqt.org/articles/small-number-suppression-recurring-public-reports/Government & ComplianceHow to set a minimum cell size, apply complementary suppression, and keep the rule consistent across recurring public dashboards.https://hqt.org/articles/analytics-staffing-central-embedded-or-contracted/https://hqt.org/articles/analytics-staffing-central-embedded-or-contracted/Guides & ChecklistsCompares central, embedded, and contracted analytics staffing on responsiveness, definitions, retention, and cost for public agencies.https://hqt.org/articles/rpa-bots-vs-real-integration-cost-and-fit/https://hqt.org/articles/rpa-bots-vs-real-integration-cost-and-fit/AI & AutomationA practical comparison of screen-level RPA against API, file, and middleware integration, with the conditions that favor each.https://hqt.org/articles/automating-document-intake-classification-routing/https://hqt.org/articles/automating-document-intake-classification-routing/AI & AutomationHow agencies classify incoming documents, route them to the right queue, set confidence thresholds, and keep exceptions worked.https://hqt.org/articles/entity-resolution-matching-records-across-agency-systems/https://hqt.org/articles/entity-resolution-matching-records-across-agency-systems/AI & AutomationHow agencies match resident, business, parcel, and vehicle records across systems with no shared identifier, and what to log.https://hqt.org/articles/forecasting-demand-and-staffing-with-agency-data/https://hqt.org/articles/forecasting-demand-and-staffing-with-agency-data/AI & AutomationHow to turn a few years of your own permit, call, dispatch, and counter history into staffing forecasts you can defend.https://hqt.org/articles/anomaly-detection-agency-financial-transactions/https://hqt.org/articles/anomaly-detection-agency-financial-transactions/AI & AutomationHow agencies can use rules and models to flag duplicate payments, split purchases, and card misuse without creating an unworkable alert queue.https://hqt.org/articles/ai-assisted-plan-review-what-it-can-check/https://hqt.org/articles/ai-assisted-plan-review-what-it-can-check/AI & AutomationA guide to which parts of building and zoning plan review can be automated today, and which decisions must stay with a human reviewer.https://hqt.org/articles/computer-vision-code-enforcement-imagery-privacy-due-process/https://hqt.org/articles/computer-vision-code-enforcement-imagery-privacy-due-process/AI & AutomationHow agencies use vehicle, drone, and aerial imagery to detect code violations, and the privacy, retention, and due process rules that govern it.https://hqt.org/articles/synthetic-test-data-for-agency-systems/https://hqt.org/articles/synthetic-test-data-for-agency-systems/TechnologyWhy copying production records into test environments creates risk, and how to build synthetic and masked datasets that still catch real defects.https://hqt.org/articles/vendor-ai-disclosure-existing-software/https://hqt.org/articles/vendor-ai-disclosure-existing-software/Government & ComplianceHow agencies can require vendors to disclose AI features added to software they already own, and act on the answers.https://hqt.org/articles/model-drift-monitoring-after-go-live/https://hqt.org/articles/model-drift-monitoring-after-go-live/AI & AutomationWhat to watch after an AI system goes live: weekly and quarterly measures, and the triggers that should force retraining or a pause.https://hqt.org/articles/ai-procurement-contract-clauses/https://hqt.org/articles/ai-procurement-contract-clauses/Contracts & ProcurementThe contract clauses that matter when software includes AI: data rights, no-training terms, model change notice, and exit rights.https://hqt.org/articles/automate-or-staff-when-a-workflow-is-worth-automating/https://hqt.org/articles/automate-or-staff-when-a-workflow-is-worth-automating/AI & AutomationHow agencies can weigh staff hours saved against build, license, exception, and upkeep costs before automating a workflow.https://hqt.org/articles/process-mining-time-studies-choosing-what-to-automate-first/https://hqt.org/articles/process-mining-time-studies-choosing-what-to-automate-first/Guides & ChecklistsA practical method for choosing your first automation target using system event data, queue and rework measures, and short staff time studies.https://hqt.org/articles/ai-pilot-to-production-ownership-runbooks-funding/https://hqt.org/articles/ai-pilot-to-production-ownership-runbooks-funding/AI & AutomationWhat an agency needs before an AI pilot becomes a production system: ownership, runbooks, monitoring, and recurring funding.https://hqt.org/articles/predictive-maintenance-agency-fleets-facilities-equipment/https://hqt.org/articles/predictive-maintenance-agency-fleets-facilities-equipment/SectorsWhat data predictive maintenance really requires, how to test it against a tightened PM schedule, and how to turn predictions into work orders.https://hqt.org/articles/budgeting-and-capping-ai-usage-costs/https://hqt.org/articles/budgeting-and-capping-ai-usage-costs/Contracts & ProcurementHow agencies estimate, cap, and charge back AI software costs across seat, token, and overage pricing models.https://hqt.org/articles/text-analytics-311-comments-complaints-surveys/https://hqt.org/articles/text-analytics-311-comments-complaints-surveys/AI & AutomationHow agencies turn 311 text, survey open ends, and public comment into themes they can track, map, and defend.https://hqt.org/articles/two-step-procurement-qualify-vendors-then-open-prices/https://hqt.org/articles/two-step-procurement-qualify-vendors-then-open-prices/Contracts & ProcurementHow two-step technology solicitations work: screening qualifications first, then opening sealed prices only for firms that advance.https://hqt.org/articles/competitive-negotiation-discussions-revisions-final-offers/https://hqt.org/articles/competitive-negotiation-discussions-revisions-final-offers/Contracts & ProcurementHow agencies run discussions, request proposal revisions, and hold a final offer round without restarting the procurement.https://hqt.org/articles/comparing-proposals-priced-differently-cost-worksheet/https://hqt.org/articles/comparing-proposals-priced-differently-cost-worksheet/Contracts & ProcurementA method for putting subscription, fixed-price plus hourly, and transaction-fee proposals onto one comparable multi-year cost number.https://hqt.org/articles/best-value-award-methods-and-justification/https://hqt.org/articles/best-value-award-methods-and-justification/Contracts & ProcurementHow agencies choose an award method beyond low bid, state the basis of award, and document why a higher-priced proposal won.https://hqt.org/articles/pilot-proof-of-concept-agreements-scope-cost-exit/https://hqt.org/articles/pilot-proof-of-concept-agreements-scope-cost-exit/Contracts & ProcurementHow to structure a government software pilot so it answers one question, protects agency data, and ends on a fixed date.https://hqt.org/articles/vendor-reference-checks-that-produce-real-information/https://hqt.org/articles/vendor-reference-checks-that-produce-real-information/Guides & ChecklistsHow agency teams find, question, and document software vendor references so the answers are useful and the award file holds up.https://hqt.org/articles/vendor-acquired-product-sunset-continuity-clauses/https://hqt.org/articles/vendor-acquired-product-sunset-continuity-clauses/Contracts & ProcurementHow to write and use contract clauses that keep a government system running when the vendor is acquired or retires the product.https://hqt.org/articles/data-portability-and-exit-terms-before-you-sign/https://hqt.org/articles/data-portability-and-exit-terms-before-you-sign/Contracts & ProcurementHow to negotiate export formats, schema delivery, API access, and post-termination data rights before signing a SaaS contract.https://hqt.org/articles/contract-administration-after-award/https://hqt.org/articles/contract-administration-after-award/Contracts & ProcurementHow agencies hand a signed contract from procurement to the program, and the artifacts and approval roles that keep it running.https://hqt.org/articles/vendor-performance-management-scorecards-reviews-records/https://hqt.org/articles/vendor-performance-management-scorecards-reviews-records/Contracts & ProcurementHow to score a technology vendor during the contract term, run reviews that leave a record, and document performance for the next procurement.https://hqt.org/articles/terminating-a-technology-contract-cause-convenience-wind-down/https://hqt.org/articles/terminating-a-technology-contract-cause-convenience-wind-down/Contracts & ProcurementHow agencies end a software contract early: cause versus convenience, the cure notice and record behind it, and a wind-down that protects data and service.https://hqt.org/articles/disputes-and-remedies-cure-notices-escalation-claims/https://hqt.org/articles/disputes-and-remedies-cure-notices-escalation-claims/Contracts & ProcurementA practical guide to the remedy ladder in a government technology contract, from withheld payment and cure notices through escalation and formal claims.https://hqt.org/articles/participating-addenda-cooperative-contracts/https://hqt.org/articles/participating-addenda-cooperative-contracts/Contracts & ProcurementHow to use a participating addendum to attach your agency's own terms to a cooperative master agreement without exceeding its scope.https://hqt.org/articles/acceptance-criteria-milestone-payments-holdbacks/https://hqt.org/articles/acceptance-criteria-milestone-payments-holdbacks/Contracts & ProcurementHow agencies can tie implementation payments to tested, accepted functionality using milestones, acceptance criteria, and holdbacks.https://hqt.org/articles/order-of-precedence-vendor-terms-conflict/https://hqt.org/articles/order-of-precedence-vendor-terms-conflict/Contracts & ProcurementHow to rank the contract, solicitation, statement of work, order form, and online vendor terms so an agency knows which document wins.https://hqt.org/articles/evaluation-committee-conflicts-confidentiality-records/https://hqt.org/articles/evaluation-committee-conflicts-confidentiality-records/Guides & ChecklistsHow to seat, brief, and run a proposal evaluation panel: conflict disclosures, confidentiality, independent scoring, and the written record.https://hqt.org/articles/who-owns-the-code-ip-license-rights-custom-development/https://hqt.org/articles/who-owns-the-code-ip-license-rights-custom-development/Contracts & ProcurementHow agencies secure usable rights to custom software through assignment, license-back, deliverable definitions, and indemnity.https://hqt.org/articles/debriefing-unsuccessful-proposers-technology-award/https://hqt.org/articles/debriefing-unsuccessful-proposers-technology-award/Contracts & ProcurementHow state and local agencies can run a post-award debrief that is useful to the losing firm without disclosing competitors' confidential information.https://hqt.org/articles/how-a-technology-policy-gets-adopted/https://hqt.org/articles/how-a-technology-policy-gets-adopted/Government & ComplianceHow an IT policy moves from draft to adopted instrument: review chain, staff report, delegation language, and review cadence.https://hqt.org/articles/surveillance-technology-use-policy-and-impact-report/https://hqt.org/articles/surveillance-technology-use-policy-and-impact-report/Guides & ChecklistsA section-by-section guide to drafting the surveillance impact report and use policy your governing body will review.https://hqt.org/articles/surveillance-technology-ordinances-what-they-require/https://hqt.org/articles/surveillance-technology-ordinances-what-they-require/Government & ComplianceHow CCOPS-style surveillance technology ordinances define covered systems, and what staff must do before and after a purchase.https://hqt.org/articles/body-worn-camera-retention-release-and-storage-costs/https://hqt.org/articles/body-worn-camera-retention-release-and-storage-costs/SectorsHow to set body-worn camera retention by category, manage holds and redaction, and forecast what those choices cost.https://hqt.org/articles/drone-program-policy-flight-logs-imagery-retention/https://hqt.org/articles/drone-program-policy-flight-logs-imagery-retention/SectorsWhat a local government drone policy should contain: authorized missions, pilot duties, flight log records, and imagery retention.https://hqt.org/articles/alpr-data-retention-sharing-and-audits/https://hqt.org/articles/alpr-data-retention-sharing-and-audits/SectorsHow agencies set ALPR retention limits, control who may query reads, govern sharing networks, and audit the program.https://hqt.org/articles/acceptable-use-policy-agency-devices-networks/https://hqt.org/articles/acceptable-use-policy-agency-devices-networks/Guides & ChecklistsWhat an acceptable use policy needs to cover, from personal use and monitoring notice to remote wipe, plus who must review it.https://hqt.org/articles/byod-stipends-enrollment-records-risk/https://hqt.org/articles/byod-stipends-enrollment-records-risk/Government & ComplianceHow agencies should weigh issued phones, stipends with enrollment, and unmanaged personal devices against labor and records duties.https://hqt.org/articles/text-messages-and-chat-apps-as-agency-records/https://hqt.org/articles/text-messages-and-chat-apps-as-agency-records/Government & ComplianceWhy Teams chats, Slack messages, and staff texts are agency records, and what capture, retention, and holds actually take.https://hqt.org/articles/comment-moderation-agency-social-media-law/https://hqt.org/articles/comment-moderation-agency-social-media-law/Government & ComplianceHow agency comment sections work as limited public forums, and what deleting, filtering, blocking, and logging the law allows.https://hqt.org/articles/social-media-governance-account-ownership-archiving/https://hqt.org/articles/social-media-governance-account-ownership-archiving/Government & ComplianceHow agencies decide who may open social media accounts, archive posts and comments, and hand accounts off cleanly.https://hqt.org/articles/website-governance-page-ownership-content-standards-review/https://hqt.org/articles/website-governance-page-ownership-content-standards-review/TechnologyHow agencies assign page ownership, set content and accessibility standards, and run recurring reviews that retire stale pages.https://hqt.org/articles/information-security-policy-suite-small-agency/https://hqt.org/articles/information-security-policy-suite-small-agency/Guides & ChecklistsHow a small public agency can layer its security policies, adopt them in a sensible order, and keep the suite current.https://hqt.org/articles/government-website-privacy-notices-analytics-trackers/https://hqt.org/articles/government-website-privacy-notices-analytics-trackers/Government & ComplianceHow agencies audit analytics tags, embeds, chatbots, and pixels, then write a privacy notice and contract terms that match.https://hqt.org/articles/records-management-program-roles-policy-training/https://hqt.org/articles/records-management-program-roles-policy-training/Guides & ChecklistsHow a local government builds the program around its retention schedule: roles, written policy, training, destruction approvals, and audits.https://hqt.org/articles/legal-holds-in-agency-systems/https://hqt.org/articles/legal-holds-in-agency-systems/Guides & ChecklistsA practical guide to issuing, scoping, applying, tracking, and releasing legal holds across agency email, chat, file shares, and vendor systems.https://hqt.org/articles/technology-under-a-declared-emergency/https://hqt.org/articles/technology-under-a-declared-emergency/Contracts & ProcurementWhat an emergency declaration unlocks for technology buying, access, and meetings, and the records that protect reimbursement later.https://hqt.org/articles/interlocal-agreements-shared-systems-governance-exit/https://hqt.org/articles/interlocal-agreements-shared-systems-governance-exit/Contracts & ProcurementHow to structure governance, cost allocation, data rights, and exit terms in an interlocal agreement for a shared government system.