How to run a technology RFP, from planning to award
A sequence for agency staff running a competitive solicitation for software or technology services, from market research through award.
Resources
Guides
Step-by-step guides for the projects agencies run most often, written so that a small team can follow them start to finish.
How to prepare for a CJIS audit
Preparation steps for agencies and their IT departments ahead of a CJIS Security Policy audit, covering scope, evidence, and common findings.
How to plan a cloud migration for an agency
A practical sequence for moving agency workloads to cloud services, from inventory and disposition through cutover and cost control.
How to test an agency website for accessibility
A testing sequence combining automated scanning, keyboard testing, and screen reader review against WCAG 2.1 Level AA.
How to run a ransomware tabletop exercise
A two-hour exercise format that tests an agency's decision-making, communications, and recovery assumptions with the people who would actually respond.
How to roll out multi-factor authentication across an agency
A rollout sequence for agency-wide multi-factor authentication, including recovery, shared devices, and legacy applications.
How to plan a data migration you can defend
Sequencing, validating, and documenting a data conversion so that the result can be reconciled and explained after go-live.
How to evaluate an AI feature before you enable it
A review process for the artificial intelligence features vendors are adding to software agencies already license.