Loading...
HomeMy WebLinkAboutBid ResponseMARS ClearSight City of Miami Request For Proposal Response #681390 June 26, 2017 Sherri Horowitz 777 S. Figueroa, Suite 2200 Los Angeles, CA 90017 213.346.5371 sherri.horowitz cz marshclearsight.com Sean Slutsky 5371166 Avenue of the Americas 39'h Floor New York, New York 10036 212-345-8263 sean.sfutsky(Wmarshclearsight.cam Federal Employer Identification 36-1436000 MARSH ClearSight CONTENTS 1. RFP Certification Statement 1 2. Submission Contents 5 • A. Executive Summary 5 • B. Proposer's Experience and Past Performance 7 • C. Key Personnel Performing Services 10 • D. Proposed Approach and Methodology to Providing the Services 19 3. Pricing Proposal 86 4. References 91 5. Preliminary Statement 92 Appendix A: End User Workstation Requirements 93 Appendix B: Hosting White Paper 94 Certification Statement Please quote on this form, if applicable, net prices for the item(s) listed. Return signed original and retain a copy for your files. Prices should include all costs, including transportation to destination. The City reserves the right to accept or reject all ar any part of this submission. Prices should be firm for a minimum of 180 days following the time set for closing of the submissions. In the event of errors in extension of totals, the unit prices shall govern in determining the quoted prices.. We (I) certify that we have road your solicitation, completed the necessary documents, and propose to furnish and deliver, F.O.B. DESTINATION, the items ar services specified herein. The undersigned hereby certifies that neither the contractual party nor any of its principal owners or personnel have been convicted of any of the violations, or debarred or suspended as set in section 18-107 or Ordinance No. 12271. All exceptions to this submission have been documented in the section below (refer to paragraph and section). EXCEPTIONS: We (I) certify that any and all information contained in this submission is true; and we (1) further certify that this submission is made without prior understanding, agreement, or connection with any corporation, firm, or person submitting a submission for the same materials, supplies, equipment, or service, and is in all respects fair and without collusion or fraud. We (1) agree to abide by all terms and conditions of this solicitation and certify that 1 am authorized to sign this submission for the submitter. Please print the following and sign your name: PROPOSER NAME- le7A\ C M Sieh ADDRESS• 540 ilri . i 1 1ccrh ebtCOGtO l U (00 U1U11 PHONE: 11 trvu-1' d FAX: 31 Z, (02-7' Cv P2_ EMAIL: te3c4Cielptta 1'n. 1C,(C0b L(Optional)• SIGNED BY: ---..nnacannnRoaanho CFO 5/23/2017 TITLE• DATE. FAILURE TO COMPLETE. SIGN. AND RETURN THIS FORM SHALL f1ISOUALIFY THIS RESPONSE, Page 2 of 42 Certifications Legal Name of Firm: Mny4) C rlrSinkl- uC Entity Type: Partnership, Sole Proprietorship, Corporation, etc. 1lmt U'Obi Id—t1 ciq'. Year Established: n (01 Office Location: City of Miami, Miami -Dade County, or Other Business Tax Receipt/Occupational License Number: KVA Business Tax Receipt/Occupational License Issuing Agency: Business Tax Rcccipt/Occupational License Expiration Date: toiA Will Subcontractor(s) be used? SA.vv i 5 Cyr Moicsi--1-to0S CoC.p. r No)_For d�otUrtl�r °1°fas ttitc . �t s� lrij fa'JQI 54n&XlrOnj [' L. , +rommt SC rt La5 re5ziura t 't� G.t Sit 33°1 Weal ICA- 100547 Please list and acknowledge all addendum iaddenda received. List the addendum/addenda number and date of receipt (i.c. Addendum No. 1, 7/1/07). If no addendum/addenda was/were issued, please insert NIA. Mdr us t O.1,151i ald AcBerdan O. 2.,t�- If Proposer has a Local Office, as defined under Chapter 181Articlle III, Section 18-73 of the City Code, has Proposer filled out, notarized, and included with its RFP response the "City of Miami Local Office Certification" form? YES OR NO? (The City of Miami Local Office Certification form is located in the Oracle Sourcing system ("iSupplier"), under the Header/Notes and Attachments Section of this solicitation) u3e., d may- t .v - e L teali 0- tcc Has Proposer reviewed the attached Sample Professional Services Agreement? 1� �0(,. Ni� �ia�jlel�Cr~1 `iiie. mpLp ?rOtf` Ir d 9,\NI'.z AT Does the Proposer acknowledge that the Attached Professional Services Agreement is an example of the standard Agreement used in conjunction with the Services related to this solicitation and shall not be amended? Page 3 of 42 u3r. ilk <<.p rocr,nJfcl ui-Eh o- .?rP,ltmunn5-tatltnertE Reference No. 1: Name of company/entity for which bidder is currently providing the services/good as described in this solicitation, or has provided such services/goods in the past. roua.r c1 Reference No, I : Address, City, State, and Zip for above reference company/agency listed. R tr.), s- A rrwS P e.n.,. k LauderrlkJ 10 I Reference No. 1: Name of Contact Person and Telephone Number for above reference no. 1. Aiag-a -si r Q�,� r �-r marry er (fist-f 3��• 1 z , Reference No. I: Date of Contract for above reference no. 1. r,`Icn+ sry,e ClalmS P,rlsnifl 5ftcttn 1Che. 30-1-1rcj OS HA Reference No. 2: Name of company/entity for which bidder is currently providing the services/good as described in this solicitation, or has provided such services/goods in the past. \as Ca nim T t CIC .. Reference No. 2: Address, City, State, and Zip for above reference company/agency listed. get S. Peoie n Pnv t? n I (' ,1-eae• 11c* y Reference No. 2: Name of Contact Person and Telephone Number for above reference no. 2. (Yr�. VI rg - i c E . leG ..r, r Peu; k- r jrYctuDre.Lc*jr , tt .,. 6irrY Reference No. 2: Date of Contract for above reference no. 2. IrdtriinD lOorLer(amp CJatms Cocirgh Reference No. 3: Name of company!entity for which bidder is currently providing the services/good as described in this solicitation, or has provided such services/goods in the past. cakl aro Cotx)-y Reference No. 3: Address, City, State, and Zip for above reference company/agency listed. 1 L13-1 -Cu-arLcA - ° 1 ver, Co R 1 ZoZ Reference No. 3: Name of Contact Person and Telephone Number for above reference no. 3. Q hh rG.l, minis-iteder , Vict toanocsMer (7 7 qi - 33 Reference No. 3: Date of Contract for above reference no. 3. • ZnCe ?fin , P-1) 91u-c0 Page 4 of 42 Line: 1 Description: Proposers are not required to enter a unit price an this line, Proposer shall submit their proposed prices on Attachment C, Price Schedule, located under the Header/Notes and Attachments Section of this solicitation in the Oracle/iSupplier System, Category: 92044-00 Unit of Measure: Each Unit Price; S Number of Units: 1 Total: S Page 5 of 42 MARSH ClearSight Submission Contents A. Executive Summary MARSH CLEARSIGHT, is pleased to provide our response to the City of Miami's Request for Proposal (RFP) 681390. The City of Miami has stated its desire to select a Risk Management Information System (RMIS) to utilize technology to simplify and in a cost efficient manner, manage the spectrum of risks confronted in daily operations. This complete vendor hosted solution system must be cloud based, robust, secure, and reliable. It must have the ability to integrate with existing processes and functions for business continuity, security and adherence to Federal and Florida State rules and statutes. Basic tools such as advanced dashboards, robust reporting and advanced analytic capabilities must work on laptops, desktops and mobile devices such as tablets and phones. Marsh ClearSight can meet the City of Miami's requirements across all functional areas including but not limited to: claims administration, loss prevention, recordings, and management of insurance policies and losses. The City will benefit from in-depth training options and unlimited access to technical support. Our cloud -based platform, predictive analytics and mobile technologies are enhancing the ways to address current risk and understand emerging risks. We do this by having the largest staff in the industry, and a research and development budget that exceeds $50,000,000 over a 3 year period. A third of this investment is more than the total value of many of our competitors. Marsh ClearSight continues to differentiate year after year by continually delivering support tools for our clients. We leverage the most advanced technologies and developing innovative solutions. In 2015, Marsh ClearSight launched the first intuitive risk management platform that brings together users, tools, and data for more efficient workflows and deeper insight into your what your data is telling you. Marsh ClearSight is built on three key pillars: 1) a single, unified platform to bring all parties together across the risk, safety, and claims management ecosystems; 2) built-in collaboration tools to make business processes more efficient (e.g., sharing documents, adding attachments within the system, everything existing in one place and be easily connected to Policies, Claims, etc.); and 3) advanced analytics to solve risk management's biggest problems. It is this experience, industry insight, and distinctive technology offering that makes Marsh ClearSight uniquely qualified to deliver the best solutions for the City of Miami's continuing success including the reduction in the total cost of risk. Marsh ClearSight is well positioned to partner with the City of Miami to provide the experience, support resources, product stability and organizational consistency to deliver a successful implementation. Converting, compiling and transferring all the data with integrity from the City's Third Party Claims Administrator's application is a routine exercise for Marsh ClearSight. Our experience is unmatched; demonstrated by the data processing services we provide to 7 out of the top 10 carriers worldwide and having built the claims administration platforms for numerous third -party administrators and self-administered organizations. MARSH ClearSight The City of Miami will benefit from our experience implementing projects across our client base of over 780 corporations and public entities. Our customers expect to leverage the knowledge we gained from thousands of successful system installations. Our market leadership and high client retention rate are a direct result of our commitment to our support and training of clients, product, and industry. We have the resources, insights and product functionality which far surpass the capabilities of others in the industry. We have a client base that exceeds 50% of the existing RMIS market. Marsh ClearSight has the financial and intellectual capital to lead, differentiate, and innovate the industry for years to come. We recognize that implementing a Risk Management software platform takes serious consideration and commitment. We want you to be confident that this RFP and the decision to partner with Marsh ClearSight will be the last RMIS system decision you will need to make, as our long term (10-20 year) customers have discovered. We will work very hard to develop the right best -in -class solution for City of Miami. We are committed to your success. With our extensive experience, differentiating platform capabilities and backed by Marsh, the world's leading insurance broker, we are uniquely qualified to be the Risk Management Information System vendor for the City of Miami. We look forward to meeting you, further discussing the right solution for the City and then demonstrating our software. Please let me know if you have any questions about the Marsh ClearSight response. My sincere regards, Sherri Horowitz VP Sales and Relationship Management MARSH ClearSight 777 South Figueroa, Suite 2200 Los Angeles, California 90017 mobile 949.661.7001 email sherri.horowitz@marshclearsight.com MARSH ClearSight B. Proposer's Experience and Past Performance 1. Describe the Proposer's past performance and experience within the past three (3) years, state the number of years that the Proposer has been in existence, the current number of employees, and what qualifies the Proposer to provide the City with a Risk Management Information System to manage the claims administration process of the City's self-insurance program. Marsh ClearSight has more than five decades of success and growth in the Risk Management and Insurance marketplace. We are stable and well -funded. Marsh ClearSight is the world leader in delivering technology solutions to risk, claims and safety management professionals for over the past 50 years. From its founding to the present day, Marsh ClearSight has grown significantly to better serve our clients with numerous new product offerings by leveraging the most advanced technologies available today. We serve the technology needs of risk safety & claims management professionals across the globe, as well as insurance carriers and third -party administrators. We deliver integrated software and services for risk, claims and compliance management. Our software platform supports comprehensive risk management, enterprise risk management (ERM) and compliance and safety management needs to Public Entities, Non Profits, Educational Institutions and a host of other lines of business. Marsh ClearSight clients are supported in vertical lines of coverage to receive dedicated support from subject matter experts and operational teams that specialize in your field. We have 500+ colleagues worldwide who serve our 780+ clients. Our web based software and award winning service and support, helps clients improve business processes, manage costs and reduce enterprise risk. Marsh ClearSight, LLC is a subsidiary of Marsh USA, Inc. and an indirect, wholly -owned subsidiary of Marsh & McLennan Companies ("MMC"). MMC is publicly traded on the NYSE under the ticker symbol "MMC." Our parent company was founded in 1905 with current revenues in excess of $13 billion. This year Marsh ClearSight is celebrating 50 years in the RIMIS space. Marsh ClearSight is headquartered in Chicago with support centers around the world, including Atlanta, Dallas, New York, Philadelphia, Los Angeles, London, Sydney, Johannesburg, Paris, and Munich. Our Chicago headquarters are located at: 540 West Madison St. Chicago, Illinois 60603 Claims management has been the hallmark and centerpiece of our offering since our inception. We offer a depth that has been the benchmark in the RMIS industry. Several well knownTPA's use our claims tools to manage their systems for clients. MARSH ClearSight 2. What is the Proposer's total number of installations of the proposed application/software product? What was the total number of installations in cities which are comparable to the City of Miami? Provide documentation that the Proposer has at least three (3) years' experience transitioning to or starting a new software. Marsh ClearSight currently has 780+ installed clients. Roughly 10% are comparable to the City of Miami. More than two dozen Public Entity clients are in the State of Florida and have been onboard with more than 15 years. 3. Provide a detailed description of three (3) comparable contracts (similar in scope of services to those requested herein) which the Proposer has either ongoing or completed within the last five (5) years from the date of this solicitation. The description should identify for each project: i. client ii. description of work iii. dates covering the term of the contract iv. client contract person and phone number, v. statement of whether Proposer was the prime or subcontractor, and vi. the results of the project. Where possible, list and describe projects performed for governmental clients on similar sized private entities. Below are three comparable entities with similar contracts. The description of their work and the result of the project are best discussed directly with the client, their name and number include. It is our company policy not to share specifics pertaining to our clients. Broward County Pinellas County, Florida City and County of Denver Andrews Avenue 400 S. Fort Harrison Avenue Fort Lauderdale, FL 33301 Clearwater, FL 33756-5165 1437 Bannock St. Denver, CO 80202 Karen Gaither, Risk IT Manager Ms. Virginia E. Holscher, CPCU; Bureau Director, Risk Management Ms. Robin Gray, Administrator 1, Risk Management (954) 357-7238 (727) 464-3559 (720) 913-3333 Client since 2002, Claims Client since 2005, Full solution Administration, Check Writing, including Worker Comp Claims OSHA Administration Since 2000, Full Solution MARSH ClearSight 4. Provide information concerning any prior or pending litigation, either civil or criminal, involving a governmental agency or which may affect the performance of the services to be rendered herein, or ongoing maintenance or support if its product and services, in which the proposer, any of its employees or subcontractors is or has been involved within the last three (3) years. Marsh ClearSight confirms that in the last three (3) years neither it nor any of its subcontractors has been involved in any civil or criminal litigation with any governmental agency. 5. Provide a conflict of interest statement indicating whether or not any principals in Proposer's company, their spouse or their child is employed by the City of Miami, and whether or not the company or any individuals that will be working on any contracts as a result of this RFP, has a possible conflict, and if so, the nature of that conflict. Marsh ClearSight employees and their spouses are not employees currently employed by the City of Miami. MARSH ClearSight C. Key Personnel Performing Services 6. Provide an organization chart showing all key personnel, including the lead individual (Proposer's Project Manager), with titles to be assigned to this project. This chart must clearly identify the Proposer's employees and include the roles and involvement levels and durations of the key personnel. All key personnel include partners, manager, seniors, and other professional staff that will perform work and/or services on this project. The following leadership team members will remain on the City of Miami account from the sales cycle through implementation and ongoing support. JASON WARD Senior Vice President and Practice Leader, Executive Sponsor for City of Miami CURRENT RESPONSIBILITIES Based in Atlanta, Jason leads the Client Management team for Marsh ClearSight's Financial Services, Professional Services, Public Entity, Education, and Real Estate customers. Jason has over 16 years of experience delivering client -focused solutions in the evolving RMIS marketplace. Jason's current responsibilities include understanding client's business goals and objectives and aligning those objectives with the appropriate Marsh ClearSight products and services. EXPERIENCE Prior to his current role, Jason worked in various roles for Marsh ClearSight including Account Management and Business Development. His responsibilities included working closely with clients to strengthen relationships, understand business processes among internal constituencies, and offer insight on how Marsh ClearSight solutions can be best implemented to reach client business goals. He has helped clients with strategic planning as it relates to their use of Marsh ClearSight products and total client satisfaction. Jason began his career with Albert Risk Management Consultants in Needham, MA. Albert Risk is an independent risk management consulting firm that provides a full range of management consulting services related to risk identification, risk assessment, risk financing, insurance program design & procurement, claims management, safety and loss control, and vendor evaluation. EDUCATION ▪ BBA from The University of Georgia with a major in Risk Management and Insurance • Associate in Risk Management (ARM) • Senior Vice President and Executive Sponsor of the City of Miami Implementation MARSH ClearSight ANDREW HOWER Director, Client Services CURRENT RESPONSIBILITIES Andrew performs a variety of account and project consultant work associated with supporting Marsh ClearSight software for complex clients. His responsibilities include consulting with clients on system design and data conversions, training Marsh ClearSight users, developing reporting solutions and supporting ongoing client RMIS needs. Andrew also manages a team of system consultants. In this leadership capacity, Andrew is responsible for assigning systems consultants to new client accounts, leading team meetings, and is a point person for any client or colleague escalations. EXPERIENCE Andrew has been a member of the Atlanta Marsh ClearSight team since January, 2006 and has experience working with ClearSight clients in the Food & Beverage, Public Services, Financial Services, Retail, Manufacturing, Commercial Services, Technology, Healthcare, Materials, and Transportation Industries. He is currently providing support for accounts in the stages of both Implementation and On -going service. Prior to his time at Marsh ClearSight, Andrew attended the University of Georgia and acquired the Bachelor of Business Administration degree, majoring in Risk Management and Insurance. EDUCATION BBA from The University of Georgia with a major in Risk Management and Insurance SHERRI HOROWITZ Sales Executive and Relationship Management CURRENT RESPONSIBILITIES Based in California, Sherri leads the new business and relationship management functions for Marsh ClearSight's Financial Services, Professional Services, Public Entity, Education and Real Estate customers on the West Coast. With over 19 years of experience in technology, risk management, and strategic consulting, Sherri delivers execution ready plans and solutions to enhance client productivity while reducing the cost of risk. EXPERIENCE Sherri joined Marsh ClearSight in 2015. In years past she enjoyed working in Silicon Valley startups and Fortune 100 companies in the capacity of new business development and product management. She is known for her "can -do;' attitude with the ability to find wining solutions for clients. Driven to inspire and engage others to achieve mutual success, she is passionate about creating solutions that foster customer loyalty, inspire trust, open communications, and build a long term sales relationships MARSH ClearSight 7. Describe the experience, qualifications and other vital information, including relevant experience on previous similar projects, of all key personnel (excluding key individual), including those of subcontractors, who will be assigned to this project, projects must have been completed within the past five (5) years. Marsh ClearSight will provide the City of Miami with a designated account team to be the primary point of contact for all service and support issues. This account team is dedicated to partnering with the City of Miami and is responsible and accountable for your success. The City of Miami dedicated account and delivery teams will be assigned upon selection and contract execution and will consist of the following roles: Executive Sponsor — Jason Ward Sales Executive — Sherri Horowitz Project Manager Account Executive System Consultant Delivery Lead Data Conversion Lead Solution Architects and Data Analysts are named once we have specifications and timing further defined. The Data Operations team is responsible for new projects and ongoing data services for all ClearSight clients. Because Marsh ClearSight has the largest support team in the industry, multiple resources are available when needed to address any/all requests. 8. Identify the lead individual, Project Manager, to be assigned to this project. Address relevant experience, and past performance, to this kind of work and to the specific work they will do for the City. Include the following: a. Specific examples of similar projects completed by the lead individual. b. Contact name, telephone number, and email address for each project cited. c. Provide documentation that the key individual has at least three (3) years experience and has served as Project Manager on similar projects on a minimum of three (3) occasions. Below are sample biographies of Project Manager Colleagues that could support the City of Miami. Each Project Manager had to work an a number of implementations to earn this title. After getting permission from their clients, Project Managers would share contact names, telephone numbers and email address for new clients as requested in item "b". MARSH ClearSight KARI M SIMMONS, MBA, MISM, PMP Lead Project Manager CURRENT RESPONSIBILITIES Kari is a Lead Project Manager for Marsh ClearSight reporting to the Project Management Office. She is responsible for the overall health, scope, progress, and timeliness of project and programs. She serves as leader to the project team to facilitate and support a successful implementation. In her current role, Kari is responsible for project planning, technical team oversight, Scope & Timeline management, and project level client communications. Kari is part of the PMO leadership team and provides mentoring and direct support for the most complex client implementations and expanded opportunities delivered through the Marsh ClearSight services division. EXPERIENCE Kari brings over 20 years of program/project management expertise with systems development, systems implementation, and infrastructure projects in Health Insurance Industry, Defense Industry, and Corporate Systems. Kari has worked some very complex projects with multiple delivery phases and evolving requirements. Her projects have included multi -element deliverables spanning from needs associated with RMIS, Claims Administration, historical data conversion, reporting, Regulatory requirements Kari excels at managing timelines and costs, and clearly conveys status and next steps to key project participants throughout the delivery cycle. EDUCATION AND PMP/TECHNICAL CERTIFICATIONS • Project Management Institute - Project Management Professional (PMP) ▪ America's Health Insurance Plans (AHIP) ▪ Health Insurance Associate (HIA) Masters Business Administration • Masters Information Systems Management • Bachelor's Degree with Major in Economics MARSH ClearSight LEONA SKERRETT, ARM Project Manager, Marsh ClearSight, LLc CURRENT RESPONSIBILITIES Based in Chicago, Leona is a Project Manager Marsh ClearSight's Financial Services, Professional Services, Public Entity, Education and Real Estate customers. She is responsible for the overall health, scope, progress, and timeliness of the project. She serves as leader to the project team to facilitate and support a successful implementation. In her current role, Leona is responsible for project planning, resource allocation, scope & timeline management, and project level client communications. EXPERIENCE Leona brings over 25 years of Insurance industry experience including 11 years in RMIS and 6 years of project management expertise with systems development, systems implementation, and infrastructure projects. Leona has completed over 40 RMIS implementations to customize proprietary software for data and business process management; designed user interfaces for data collection, query and analytics; automated workflow and report distribution capabilities to drive key initiatives throughout the organization. Prior to joining Marsh ClearSight, Leona has held a variety of roles at Zurich, Aon, JP Morgan Chase and Crawford & Company. EDUCATION Bachelor's Degree with Major in Business Administration/Computer Science ▪ Associate in Risk Management • Project Management Professional Certification Class 9. List how many employees are involved in providing direct technical support for the proposed application software product. Marsh ClearSight has 453 Development, Quality Assurance, Customer Support and Training personnel that support Marsh ClearSight. 10. List the names and addresses of all first tier subcontractors, if applicable, and describe the extent of work to be performed by each first tier subcontractor. Describe the experience, qualifications and other vital information, including relevant experience on previous similar projects, of the subcontractors who will be assigned to this project. Not applicable at this time. MARSH ClearSight 11. Provide resumes, if available with job descriptions and other detailed qualification information on all key personnel, including the Project Manager, who will be assigned to this project, including any key personnel of subcontractors. Note: After proposal submission, but prior to the award of any contract issued as a result of this Solicitation, the Proposer has a continuing obligation to advise the City of any changes, intended or otherwise, to the key personnel identified in its proposal. KARI M SIMMONS, MBA, MISM, PMP Lead Project Manager CURRENT RESPONSIBILITIES Kari is a Lead Project Manager for Marsh ClearSight reporting to the Project Management Office. She is responsible for the overall health, scope, progress, and timeliness of project and programs. She serves as leader to the project team to facilitate and support a successful implementation. In her current role, Kari is responsible for project planning, technical team oversight, Scope & Timeline management, and project level client communications. Kari is part of the PMO leadership team and provides mentoring and direct support for the most complex client implementations and expanded opportunities delivered through the Marsh ClearSight services division. EXPERIENCE Kari brings over 20 years of program/project management expertise with systems development, systems implementation, and infrastructure projects in Health Insurance Industry, Defense Industry, and Corporate Systems. Kari has worked some very complex projects with multiple delivery phases and evolving requirements. Her projects have included multi -element deliverables spanning from needs associated with RMIS, Claims Administration, historical data conversion, reporting, Regulatory requirements Kari excels at managing timelines and costs, and clearly conveys status and next steps to key project participants throughout the delivery cycle. EDUCATION AND PMP/TECHNICAL CERTIFICATIONS ▪ Project Management Institute - Project Management Professional (PMP) • America's Health Insurance Plans (AHIP) • Health Insurance Associate (HIA) ▪ Masters Business Administration • Masters Information Systems Management Bachelor's Degree with Major in Economics MARSH ClearSight LEONA SKERRETT, ARM Project Manager, Marsh ClearSight, LLc CURRENT RESPONSIBILITIES Based in Chicago, Leona is a Project Manager Marsh ClearSight's Financial Services, Professional Services, Public Entity, Education and Real Estate customers. She is responsible for the overall health, scope, progress, and timeliness of the project. She serves as leader to the project team to facilitate and support a successful implementation. In her current role, Leona is responsible for project planning, resource allocation, scope & timeline management, and project level client communications. EXPERIENCE Leona brings over 25 years of Insurance Industry experience including 11 years in RMIS and 6 years of project management expertise with systems development, systems implementation, and infrastructure projects. Leona has completed over 40 RMIS implementations to customize proprietary software for data and business process management; designed user interfaces for data collection, query and analytics; automated workflow and report distribution capabilities to drive key initiatives throughout the organization. Prior to joining Marsh ClearSight, Leona has held a variety of roles at Zurich, Aon, JP Morgan Chase and Crawford & Company. EDUCATION Bachelor's Degree with Major in Business Administration/Computer Science ▪ Associate in Risk Management ▪ Project Management Professional Certification Class MARSH ClearSight JEN GEHA Manager CURRENT RESPONSIBILITIES Jen Geha is a Manager in the Marsh ClearSight Professional Services group and manages a team of system consultants. System consultants are responsible for ongoing client support, including system configuration, consulting, and user training. EXPERIENCE Jen joined ClearSight in 2005 as an account manager for a large TPA client. She was primarily responsible for ongoing support and the design and testing of custom solutions. Since then she transitioned to the system consultant role focused on RMIS clients in various industries, including Food and Beverage, Transportation, Retail, and Public Entity. Prior to joining ClearSight, Jen spent over 5 years as a Quality Assurance Manager at Aon Hewitt, the world's leading Benefits Outsourcing and HR Technology firm. In this role, Jen specialized in Health and Welfare benefits eligibility and enrollment. EDUCATION Jen received her Bachelor of Business Administration from Ohio University. Her primary concentration was in Finance. PAUL RYAN DUNGO Solution Architect; Delivery Lead; Professional Services CURRENT RESPONSIBILITIES My current responsibilities include supporting a multi -year migration project for a health care industry client. I design, build and deliver customized solutions which works with Marsh ClearSight's Enterprise platform. This effort includes requirement gathering, analysis, project preparation, build work, testing and post migration training and issue troubleshooting, research and resolution. EXPERIENCE Spearhead project deliverables initiating with Statement of Work discussions with client to post -production troubleshooting & resolution Launch and execute client projects to ensure a successful migration of client's outdated software to the latest version • Manage multiple delivers per statement of work contract ▪ Assess statement of work (SOW) contract and true current system deliverable gaps o Engage client in requirements gathering sessions Facilitate brainstorming activities to understand client's current business workflow prior to project implementation with in-house and off -shore colleagues • Perform system gap analysis between dated risk management system and updated system version MARSH ClearSight • Design and deliver creative solutions to ensure client business workflow is retained and for with minimal changes to workflow as a result of product standardization and/or customized plug-in gaps, SOW gaps, etc. ▪ Document clients business workflow requirements specifications • Assist and advise clients on best approach based on system research, testing and solution prototyping o Act as mentor to off -shore colleagues resource to ensure knowledge transfer and efficiency throughout the entire project life cycle • Collaborate with Service Consultants with ongoing support to multi -clients with their daily issues • Perform testing of plug -ins prior to client user acceptance testing phase • Design, develop and deliver workaround to resolve product shortcomings, defects and ad - hoc issues • Train clients to operate software • Engage client contactls through the entirety of the project cycle ▪ Troubleshoot client issues resulting from product upgrades, third party vendor workflow changes • Develop and deliver end of project documentations to service consultant/s to ensure smooth transition for clients from project implementations to ongoing support EDUCATION • Depaul University —Master of Science (M.S.), Management Information System and Services (2008-2010) • UCLA — Certification of Computer Systems Analysis (2007-2008) University of Notre Dame — Bachelor of Business Administration, Management Information Systems (1999-2003) MARSH ClearSight D. Proposed Approach and Methodology to Providing the Services 12. Give a detailed description of the proposed System. Include software modules and hardware/infrastructure required to operate the System. For each product module included in the proposal, provide a detailed description of its purpose, benefits and key features. Illustrate the dependencies between modules. Additionally, please indicate wherever a module is required or optional. Explain why the proposed System best meets the needs of the City of Miami. Marsh ClearSight believes a risk management system must be flexible to meet the City of Miami needs. This mean you should not have to change your priorities to accommodate a software system. The software as a solution (SaaS) means the City of Miami does not purchase or maintain hardware. All maintenance and upgrades are provided so every user is on the most current version of the software. Marsh ClearSight offerings are ready to use software solutions that are configurable and customizable. The system is made up of individual modules that are standalone or operate as an integrated system. The various modules that we see as a fit for now and as the City of Miami grow include the following. Intake Management PURPOSE: An incident reporting tool records data about every notice at the source to quickly get accurate information to those who can investigate, evaluate, and take action. Consolidated data is accessible anytime, anywhere, by any user, on any device. After a notice has been reported, a root cause analysis tool takes it to the next level by helping to identify the underlying issues so safety measures can be implemented to prevent future risk. BENEFIT: Even one safety incident can be devastating to finances, reputation, and lives. Yet, incidents don't always get reported because of a cumbersome process. And making sense of the information you do get can be difficult if, for example, each division uses a separate incident reporting system that captures different data than what you need. VALUE: • Captures data quickly and consistently with simplified templates, intuitive forms, and auto -filled fields. • Attaches pictures, documents, and other information media directly to the file. • Sends alerts automatically to those who need to know what happened. • Helps identify early warning signs and trends to mitigate future claims. Claims Adjudication and Management PURPOSE: A claims management tool helps risk managers consolidate all claims into a single location in a timely fashion to more quickly resolve the claims, reduce costs and mitigate risks. Claims data can be consolidated across TPAs and Carriers, allowing one view into all of your claims data for clearer understanding of overall claim activity. You can measure TPA and Carrier performance to ensure your claims are being handled cost effectively and efficiently. You can also gain insights through analytics that includes viewing payment and reserving during MARSH ClearSight the lifetime of the claim, comparing like claims based on cause, nature of injury, coverage, loss date and start to understand the potential outcome of your claims. The claims adjudication tool provides one centralized source to manage and analyze claims from initial submission through final settlement. Claims data from all carriers, TPAs, and internal departments can be imported — and simultaneously validated — via an automatic data service or simple spreadsheet upload. You also can easily compare similar claims and outcomes, rank cause by coverage or location, and measure key performance indicators to ensure your claims are being handled efficiently BENEFIT: The longer a claim lingers, the more expensive it can get. A claims management tool can help the City of Miami reduce costs by resolving claims faster. You are also able to reduce claim leakage caused from inefficient and manual claim processes. And the unobstructed view you get by consolidating claims from all sources gives you the visibility necessary to effectively identify trends and mitigate the impact on the organization. VALUE: • Settles claims quickly, economically, and fairly. • Improves productivity and workflow. • Optimizes deductibles, limits, and reserves. • Avoids fines and increases efficiencies by automating regulatory reporting. • Manage claims across carriers faster and more simply. • Validate claims data to improve data integrity. • Measure performance of TPA and Carriers • Identify claims trends to reduce risk exposure. • Manage reserves and claim iifecycle to mitigate costs. Policy Management (optional) PURPOSE: A policy management tool provides a quick and easy way to manage your policies from all carriers and brokers. The City of Miami will have the ability to search policies according to coverage, broker, or carrier. Currency differences also can be converted to a common exchange for comparison. A program management tool consolidates all of your policies into coherent, aggregate programs by period or business line, which can be sorted by layers, limits, deductibles, carriers, and more. BENEFIT: Answering even simple questions about coverage can be difficult and time- consuming if the information is buried in paper files or stored with a broker. And the more brokers, carriers, claims, and incidents you have, the harder it is to keep track of insurance coverage on all exposures or verify coverage when an event happens. VALUE: • Provides a detailed view of all insurance policies. • Reveals duplications or gaps in coverage. • Shows visibility into policy erosion. MARSH ClearSight • Sorts coverage by different criteria to answer questions such as counterparty risk. • Runs advanced analytics on premiums and losses. • Converts complex information into easy -to -understand graphic form. • Offers the ability to search by loss date to find policies in effect at a given time. Certificate of Insurance (optional) PURPOSE: Certificates of Insurance tool helps streamline management and compliance tracking for incoming Certificates of Insurance. It helps you reduce exposures from contractors, tenants, suppliers, and other business partners by supporting the data management and workflow associated with incoming certificates of insurance. You can quickly enter Certificates of Insurance through a web portal and search for and view certificates stored in a single repository. Exception handling workflow and tools allow you to spot and act on out of compliance certificates. You can also auto -generate letters to your vendors regarding their certificate's status and notify them of changing requirements. BENEFIT: Manually managing incoming Certificates of Insurance can be a challenging, time consuming process. Keeping track of Certificates that are about to expire or Certificates that are out of compliance with your requirements can create many rounds of notifications to your business partners. The more contractors, tenants, suppliers and other business partners you have, the harder it is to keep track, store, and manage all of the certificates, and the more likely it is for something to fall through the cracks. Managing Certificates via a RMIS allows you to automate the process, reducing your risk, saving time and eliminating unnecessary costs. VALUE: • Request, validate, track, follow up and record certificates in a central repository. • Search and view certificates stored in a single location. • Continuously identify certificates that are about to expire or fall out of compliance. • Maintain up to date insurer financial strength and ratings from A.M. Best to ensure your suppliers and other business partners maintain compliance with your requirements. • Tailor exception messages to suppliers via correspondence templates to rectify missing, incomplete or incorrect certificates requiring action. Other features included in our proposal include (each are optional) OSHA services WHAT: OSHA 300 rules, which are in effect for all claims with a loss date on or after Jan. 1, 2002. Only Workers compensation incidents or claims will involve OSHA reporting and logs. BENEFIT: We provide the 3 types of reports that are created annually in January OSHA300, 300A, and 301 • Data can be populated manually or through a TPA or carrier data conversion. • Verification of OSHA data should be completed by December of the preceding year the report is due to ensure it is accurate for the actual completion of the logs. MARSH ClearSight • We calculate the DART rate ( "'days away, restricted or transferred.") which allows executives, supervisors and safety personnel to identify safety issues in the workplace. A custom report or BI report is created to calculate the DART rate. — DART rate should not be confused with recordable Incident rate, which is simply the total number of recordable illnesses and injuries per 100 full-time employees in a year. Calculating the recordable incident rate involves determining the number of nonfatal injuries and illnesses that occurred during a calendar year. Marsh ClearSight has a dedicated regulatory compliance team who monitors potential rule making, proactively analyzes state claims administration regulatory reporting requirements, electronic submission requirements, and other claims compliance activities. (Note: This is an important differentiator, as none of our competitors have an in-house regulatory compliance team). VALUE: • Single point of entry means that individual forms and form totals produced from the system will be consistent. • Screens to track lost time claims and definitions OSHA prescribes for person identification, case description, case classification, and injury/illness classification. • OSHA templates with pre -loaded protocols that automate transfers of OSHA data. • Configurable OSHA 300A of average number of employees and total numbers of hours worked and electronic signature. • Flexibility to modify/change the application based on unique facility requirements. • Efficiency to schedule OSHA reports to go to individual site locations via email. • Reduce fines due to erroneous or late reporting. • Centralized and integrated repository monitors potential OSHA reportable events with the ability to set up alerts and notifications for OSHA reportable events. Business Intelligence Manager PURPOSE: BI Reports Manager connects directly to the user interface of the SAP® BusinessObjectsTM platform, providing an easier, minimally intrusive, and secure method to access, configure, and receive report information. BENEFIT: Allows you to quickly customize report content utilizing drag and drop object selection in BI report creation, maintenance, review, organization, scheduling, and distribution. • Can combine the different data tables within the application into one single report. Unlike our standard crystal Reports Manager that pulls data from one table in the application. • The reporting tool has the flexibility to depict data in a graphical depiction and in an excel document side by side. • The reporting tool has the ability to upload data on a spreadsheet from another source without storing this data in the application i.e., upload annual payroll values into a report. • Reports can be designed for senior level meetings depicting the results of a company's risk. MARSH ClearSight VALUE: Data can be collected across different data tables into one report vs. having multiple spreadsheets with data that are combined outside of the application. • Other spreadsheets can be imported into a report without storing the information in the database. • This advanced reporting tool can show trends year over year, complete calculations on the data (for example calculate days between lost time date and date reported). • BI reports have the ability to have multiple tabs or reports within reports. • BI reports can be scheduled and burst so complex reports can be consumed by users and non -users. CMS — Section 111 PURPOSE: Medicare requires entities providing liability insurance, no-fault insurance, and workers' compensation known as Non Group Health Providers to report bodily injury claims filed by Medicare -eligible claimants. BENEFIT and VALUE: Marsh ClearSight offers two solutions for reporting: Option 1 allows clients to capture the CMS required data within the application and offers an iterative validation process so the City of Miami can focus on the quality of the data they are reporting. • The proper file formatting and timely quarterly submission to CMS is handled which helps protect the responsible reporting entity from missing their reporting window or needing to maintain the technical aspects of the CMS submission. • The solution provides tools to help clients keep ahead of their reporting responsibility by evaluating the status of the claims twice a week. This allows the clients to correct errors and ensure all required information is provided before the quarterly submission to CMS. • We ensure the client's claim file submissions are consistently sent to CMS during the assigned reporting window. Option 2 allows clients to capture the same information in the application and export the CMS required data elements for their own use, leaving the entire evaluation and submission process to you or a reporting agent of your choosing. MARSH ClearSight 13. Describe Proposer's approach and work plan to efficiently and effectively perform the services described herein. Describe how Proposer has applied the proposed project approach in comparable contracts. Define your criteria to determine when installation of System is complete. MARSH ClearSight is an organization that strives to offer the best in class of products and services in the industry. We continually have an eye on the future, while reviewing the past to ensure lessons learned are acknowledged and adjustments are made, if necessary, in order to achieve a higher level of success and satisfaction. Our Project Management Office (PMO) adheres to a five phase project methodology as outlined below. The methodology was built to fit the framework instituted by the Project Management Institute (PM]), the global leader in the development of standards for the practice of project management. The Enterprise implementation process is broken up into five phases. 1 j Assess The assessment phase begins our project. The goal of the assessment is to verify and validate what we will deliver during the implementation. This involves identifying the expectations that all of the involved parties have with regards to the results of the project. Note: Marsh Clear Sight will review, identify and document conditions that may impede Contractor's ability to successfully install the System. This includes work with third -party vendors. Marsh ClearSight has more than likely seen similar situations and will have suggestions or vendor letter formats to share with the City of Miami. Ultimately, a business requirements document is developed and presented for the approval of the project decision makers. This acceptance and signoff will serve as an indication that all parties approve of the project's scope. Note: This process addresses the specific request that the City of Miami stipulated. Marsh ClearSight requires an acceptance or "Order to Proceed" with the implementation process. 2 j Design The business requirements documents that are developed during the assessment will be used to make our choices in the design phase. In this phase, one or more design specifications are developed to address the needs of each deliverable. We will work with you to create the design specifications. During this time, we will coordinate with your team including Subject Matter Experts to ensure that we design to your specified workflow. 3 a Build The build phase is the "doing" phase, where we will see our project take shape. During this phase we develop and configure your application to the design specs that we have agreed. As we complete the build for each deliverable, we will complete unit testing of that deliverable to a successful result before moving forward. MARSH ClearSight Note: This testing includes all components of the deliverable system including the interfaces and any custom medications (which we do not anticipate at this time) 4 I Test There are two main tasks during this phase: System Integration Testing (SIT) and User Acceptance Testing (UAT). After each deliverable has been built and individually tested during the build phase, Marsh ClearSight will begin SIT or full system testing. SIT confirms that not only does each individual component work, but the system works together successfully as a whole. From there we will turn the application over to your team to complete UAT. To start UAT we will provide a web -based training to your test team so that they are familiar with the application and what is expected during testing. Concurrently, Marsh ClearSight will resolve any issues within scope that are identified. Once all issues are resolved, we will ask that you sign off on completion of UAT. This is our indication that you approve of the system, giving us permission to move your application from test to the production environment. Also note that built into the Marsh ClearSight system is a help function for each field. This is one of the most comprehensive tools in the Risk Management marketplace. 5 I Deploy During the prior phases of the project we will confirm and agree on a go live plan and timeline. This will ensure we properly communicate with you and your organization any downtime that you will experience during go live. During your downtime, we will complete the activities required to move from the test system to production. It is during this downtime that we recommend Enterprise end user training take place. Once your software and data are successfully in the production environment, we will provide notification to your team confirming that you are live with Enterprise. Weekly reporting As a standard offering, Marsh ClearSight Project Managers provide weekly writing status reporting throughout the implementation program. An issues log is kept from the time of user testing throughout the term of the partnership. Client Responsibilities One of the greatest opportunities your organization has in implementing Enterprise is the level of configuration available to you. For this reason, your input and feedback is extremely important. Based on your specific implementation, we may request data, documentation, and other information needed to configure the best system for your organization. Your commitment and partnership in providing these items as outlined in the project schedule is critical to our success. Launch Once design, configuration and testing are complete, it is time to launch your system into a live environment and experience the benefits of Enterprise. Go Live Go Live Activities involve moving your validated data and system configuration from the test environment into the production environment. The time needed for these tasks vary depending on the amount of data, type of configurations and size of your implementation and will determine the downtime needed. MARSH ClearSight After the go live activities are complete and your system has been validated, we will notify your team that the system is live. This is your indication to announce to your organization that the implementation is complete and to provide access to your new application for use. MARSH ClearSight Service & Support Once the project is complete, your Marsh ClearSight Project Team will transition your team to Service & Support to meet your ongoing needs. There are three continual layers of support that you will experience after launch. 14. Provide Proposer's projected time schedule, identifying specific key tasks, deliverables and duration that comply with the requirement outlined in the Scope of Services. One of the most important aspects of our project will be the input and feedback provided by your organization. While our expertise and knowledge around utilization of the Workers Comp and best practices of the industry will guide our project, the information we gain from discussions with your organization will tailor your implementation to meet your wants and needs. Your communication and partnership with us from kickoff to go live and each phase in between, will make the difference in the success of the project. Marsh ClearSight Software modules can be delivered in phases to meet tight timeframes without any additional cost to the City of Miami. Alternatively all modules can be delivered at one time. This is an unusual benefit in the RMIS industry and value we offer clients. The timeline for a project schedule may be as little as 4-6 months or as long as a year. Feedback from clients can be and many times is the determining factor for a slower implementation. A design decision that is logged for a one day turnaround may not be reviewed by the client for a few weeks due to other unforeseen or unanticipated City project priorities. 15. Describe Proposer's ability and readiness to begin providing services as requested herein, assuming a September 1, 2017 implementation date. Marsh ClearSight would be ready to begin the implementation kickoff within the week of an executed agreement. MARSH ClearSight 16. Describe in detail what approach you propose for planning and training for this System. Propose an implementation schedule which you think is reasonable to achieve, including the process of systems integration you propose. Specifically: a) Provide a proposal schedule for planning, training and implementation steps. b) Describe what type of training and the number of people to be trained that is included in the initial installation. c) Describe the training available in the delivery of end user training as well as the documentation resources that are available with your system. d) Describe how you will schedule and provide for training of end users, technical staff, and system administrators including initial training, consultation, and follow-up training. e) Describe what types of additional training may be available as it relates to the System. The first system training begins with the User Acceptance Testing (UAT) . We provide a web - based training to your test team so that they are familiar with the application and what is expected during testing. At the completion of implementation, an onsite person(s) conducts a two day training — or longer as needed depending on the various numbers of users, roles and interest. The goal is a successful launch of the system. Successful training is a joint effort. We provide and recommend plans- here is an excerpt: , 'The training plan is a strategy designed to provide users with clear direction on what to expect within your system. The plan is simple and straightforward as to not overwhelm users." All final training includes documentation delivery, as well as post -support introductions and implementation activities. • While Marsh ClearSight will bring training materials to the initial onsite training, the City of Miami may have training materials you want to provide to users. Guides and quick reference sheets are very useful to review to ensure the proper workflow is done • Additionally each application field is defined in the online help directory. The help directory not only defines the field it also includes an explanation of how the field is used for a particular situation. Webinar training content for users unable to attend the onsite locations mirrors the training offered at the main office. Training is based on appropriate roles and their requirements in the system as users from differing departments will have distinct goals and want to perform specific tasks in the system. Each contract year, one eight hour, onsite training may be conducted at the City of Miami's location. The City of Miami will be provided, when needed, one four hour webinar training (or two, two hour trainings) each contract year to use at their discretion. Note: Each user must be able to log onto their computer and access a URL. Mobile users must be able to log onto their tablet or phone and press the appropriate ICON MARSH ClearSight 17. Describe Proposer's assurance that the key personnel, including the lead individual, described in its proposal shall be available to perform the services described herein, and that the Proposer has sufficient reserve personnel to adequately perform the services in the event of illness, accident, or other unforeseeable events of a similar nature. Describe Proposer's approach to ensure the availability of personnel at all times, including Proposer's contingency plan, if any. Our employees enjoy tenured longevity, a strong supportive culture and comradery. In the event of attrition our strong bench strength becomes your asset. We are constantly cross training and growing our bench. 18. Describe Proposer's maintenance procedures. Clearly outline how the software will be maintained, including bug fixes, feature and technology upgrades, and assimilation of state of the art technologies. What is included in the annual maintenance? There are quarterly Infrastructure maintenance updates which may or may not require downtime depending on infrastructure vendor update needs. Typical Quarterly Infrastructure maintenance starts after 8 PM CT on a Friday and runs up to 6 hours. Any downtime information is posted on the website login page at least 2 weeks before the maintenance. For major application releases, there will be notification sent out with information about what's new in the release and a stage environment will be available several weeks in advance for any customers that want to preview the new release. Because we provide a SaaS offering, our clients are always on the most current version of the application and also receive all updates from new major and minor releases. There are typically two major releases scheduled annually (spring and fall). Minor releases are scheduled based on product strategy but typically 2-3 annually. Hotfix releases are scheduled every 4-6 weeks. Releases, patches and upgrades do not require client upgrades and there are no additional charges. The next release is scheduled for October of 2017. Upgrades and maintenance are included in the annual software fee. 19. Describe the details and duration of any manufacturer's warranty on proposed hardware and software in this system including how often Proposer provides product updates. All software and hardware warranties should provide for the operability of the system, Marsh ClearSight offers a SaaS solution and we take responsibility to deploy the new release/updates following our structured process that is seamless the client. Updates to the SaaS version are released and all configuration, workflow, interfaces, reports data are not affected by the version upgrade. Typically, the application has at least 2 major releases during a calendar year, with additional minor releases and hot fixes as needed. For the calendar year 2015, the uptime not including Scheduled Maintenance, was 99.98%. In 2016 the uptime not including Scheduled Maintenance was 99.95% MARSH ClearSight 20. Describe how the implementation of the proposed System will impact the City and City's staff. Include in proposal items such as the impact on workloads, increases/decreases in staffing, and changes to job descriptions/responsibilities. It does not take a huge team to implement Marsh ClearSight, but it does take the right team. The size of your team should vary depending on the complexity of the project. We recommend a few key roles: • Executive Sponsor 0 Senior Manager(s) 00 Project Manager • Technical Contact Subject Matter Expert(s) While there may be other directors, managers or users that join subsequent meetings to give input and feedback, these are the key roles. The implementation is divided into three key areas: Define, Design, Deliver Define = +1- 10% of the project time. Our implementation team will sit with you onsite to review your process, workflow and expectations. This will take at least two days. Then we will write out our understanding of your system. The team will discuss on email or in person any corrections and updates. Design = +1-80%o Weekly reporting is a standard offering that Marsh ClearSight Project Managers provide. This weekly written status reporting is provided throughout the implementation program. An issues log is kept from the time of user testing throughout the term of the partnership. The City should plan for 60-90 minutes each week to meet and review the status with Marsh ClearSight. • Client Responsibilities One of the greatest opportunities your organization has in implementing a new system is the level of configuration available to you. For this reason, your input and feedback is extremely important. Based on your specific implementation, we may request data, documentation, and other information needed to configure the best system for your organization. Your commitment and partnership in providing these items as outlined in the project schedule is critical to our success. Deliver = +1- 10% After each deliverable has been built and individually tested during the build phase, Marsh ClearSight will begin or full system testing. This confirms that not only does each individual component work, but the system works together successfully as a whole. From here we ask your team to complete User Acceptance Testing. Estimate is part time over a period of a week. MARSH ClearSight 21. Describe the proposed software and ongoing support. Describe the extent and nature of software support services, including Web -based and telephone support and consulting support. a) How does Proposer handle product upgrades? b) How are customer requested enhancements handled? c) Does the Proposer have a telephone access number for technical phone support? d) What are the hours of support and location of support staff? e) What is the guaranteed response time for telephone support? f) Does Proposer have the ability to provide direct remote support (dial up or internet)? g) What is Proposer's policy for the provision of on -site support? Marsh ClearSight has been designed to be iterative and upgradeable without requiring any migrations replacements of software for the next 10 years. Marsh ClearSight has no defects to d isclose. Customer enhancements are the core of our upgrades and clients are encouraged to share their wishes and requirements. For long term new product development, Marsh ClearSight works with clients in several different co -development arrangements. This type of engagement varies in the time involved, at the client's direction, and may include: • Informal call or email, ad hoc feedback sessions on an ongoing basis with narrower topics for feedback • Structured user design sessions • Discovery business process exploration • Formal co -development agreement There are three continual layers of support for our clients. 1. Each client is appointed an Account Executive for day to day support which includes onsite and webinar discussions, demonstrations and training. They help you leverage the Marsh ClearSight tools for maximum use and overall product satisfaction. 2. System Consultant from the Service Team responsible for completing major changes to Enterprise and servicing your application. Your System Consultant will often assist during the implementation and provide user training. 3. Online or dial up support is offered on a 24-hour basis through the Marsh ClearSight Support Call Center at (855) 478-2771 or the Marsh ClearSight Online Support Portal at http://www.marshclearsight.comisupport If it is necessary to involve additional resources, they will do so to ensure that your questions or issues are handled in a timely manner. MARSH ClearSight 22. What is Proposer's service commitment to customers and measurements used? Describe internal performance metrics used to quantify key customer support responsiveness, such as issues resolved on first call or average time to reach issue resolution. Explain your procedure for resolving customer problems. In addition to your dedicated Account Executive, Solution Consultant described in answer #21, our online support team is available to help you resolve your issue as quickly as you contact them.. Using online support you will receive: Prompt responses to all your issues. Knowledgeable support. Personalized service. 24 hour access to enter a case. • 24 hour access to monitor a case to see the latest activity. • 24 hour access to solutions in our Knowledge Center. • Assurance your issue is receiving the appropriate attention. • Quick and easy "how to's". • Online training and videos. Immediately after entering a case you will receive an email notification confirming your entry and your unique case number. You will receive additional communication from the specialist to help resolve your issue, identify prioritization, and provide you either next steps or a solution to your problem. We will diligently work with you until we are able to resolve the issue. Your service team will be consulted if additional assistance is necessary. Internal metrics are reviewed with teams weekly. 23. How often does Proposer provide product updates? Include Proposer's willingness and plan for keeping its products current. Current is defined as continuously adding or replacing products to take advantage of new technology and complying with emerging industry standards. Describe the process by which user input is incorporated into new product releases. Marsh ClearSight has a $50 million R&. D budget to keep products at the forefront of the Risk Management industry. We have major product releases 2 and sometimes 3 times a year. Internally our Product team holds a 90 minutes show and tell meeting every other week to reviews what they are working on. Sales, sales support, customer support, development, marketing et al are solicited for feedback to ensure we are meeting the needs and demands we are hearing from our clients. User input is captured in ever so many ways: the user groups online, client conferences, emails, conversations with product owners or account executives, client conferences and client development teams to name a few. MARSH ClearSight 24. Describe Proposer's software licensing structure in detail. Do so for each product or module if they differ from one another. (Describe in details whether it will be an enterprise license, read/write licenses, full licenses, named or concurrent licenses, heavy/light user licenses, unlimited licenses, etc.) Marsh ClearSight offers a variety of licenses to fit the needs and pocket of each client. This is an example of the various license options that cut across all modules. General User Lite t Lite II EntryMew Safety Audit Number of Users 0 0 0 0 0 View Records V) tat tat _ Add Records ) ta 3 _ Edit and Delete Records ta Add Attachments to Records ra Add Notes and Tasks t Ability to see "Views" tat a tat Advanced "View" Capability (Create, Modify and Delete) tat Download data to Excel tat Upload Data into STARS ta Drill down functionality on reports Schedule, Batch or Burst Reports (Define email distribution) fa See Burstable reports t) V) Run standard templates ti Create Ad -hoc Reports V t View Dashboards 'ta t) V) Receive scheduled reports as emails ta ta Business Intelligence Shared User Sign -on ta Administer users IfAdmin Manage location hierachy IfAdmin Set-up and define events and notifications for workflow management IfAdman Perform Audit t) Action Plan Tracking t) 25. Describe in detail all hardware and infrastructure required for the City to implement the proposed software system and provide a diagram of the recommended hardware configuration and minimum requirements. The Marsh ClearSight recommendation is a Software as a Service and web hosted solution, thus it does not require the installation of any dedicated on site servers or hardware to run it. Below is the description of workstation requirements and recommendations. MARSH ClearSight End User Workstation Requirements for Marsh ClearSight & Marsh ClearSight apps, Enterprise, STARS Discovery, STARS Intake This document lists operating systems, browsers, and other components required for use of the version 16.1 release of the following Marsh ClearSight products: • Marsh ClearSight (Community, Insights, App Center) and Marsh ClearSight apps are developed for use with desktop, laptop, and mobile device Internet browsers. Register for an account and log in to Marsh ClearSight at htbas://mv.marshclearsipht.com. • Enterprise (includes the Marsh ClearSight Enterprise app) work best when accessed from desktop or laptop Internet browsers. • STARS Discovery is designed for use with the Apple iPad* and can be downloaded from the Apple App Store. • STARS intake can be used with iOS and Android -based mobile devices. It is available for download from the Apple App Store or the Google PIayTM store. Marsh ClearSight reserves the right to amend this document based on testing performed during development of this release and all future releases. Marsh ClearSight, Marsh ClearSight Apps & Enterprise Requirements (SaaS) Use of Marsh ClearSight, Marsh ClearSight Apps & Enterprise requires an active Internet connection. Any necessary browser configuration and settings changes are covered in "Appendix B: End User Workstation Browser Configuration Guide". Operating Systems and Browsers Required operating system and browser combinations for use of Marsh ClearSight, Marsh ClearSight apps, and Enterprise are listed in this section. For a full list of the operating systems and browser versions tested and certified for use with Marsh ClearSight r`'and Marsh ClearSight apps, refer to Appendix A Compatibility Matrix". Marsh ClearSight & Marsh ClearSight apps Enterprise & Marsh ClearSight Enterprise Windows 10 Windows 10 • Microsoft Edge® • Microsoft Internet Explorer 11 (64-bit) • Microsoft Internet Explorer 11 (64-bit) • Moziila® Firefox 51.x or higher • Google Chrome'"" 55.x or higher Windows 7, 8 (64-bit) Windows 7, 8 (64-bit) • Microsoft Internet Explorer 11 (64-bit) • Mozilla Firefox 51.x or higher • Google Chrome 55.x or higher • Microsoft Internet Explorer 11 (64-bit) Apple® Mac OS X® 10.x+ Apple Mac OS X 10.x+ • Apple Safari (Mac) 9.x or higher • Apple Safari (Mac) 9.x or higher app MARSH ClearSight 26. Describe Proposer's expectation for the level of participation of the City during the project. Describe the level of the City staff expertise required to support the suggested hardware, If Proposer is acting as a hardware reselier, describe the details and duration of any manufacturer's warranties on proposed hardware/device. Hardware: Users need access to the Internet via a mobile device such as phone or tablet or using a laptop or workstation. Otherwise there is no other hardware requirement for the implementation of the Marsh ClearSight solution. 27. ]dentify any potential performance impact to the existing LAN/WAN and provide recommendations to minimize any performance impact, identify any potential performance impact on bandwidth and provide recommendations to minimize any performance impact. Identify any other system issues. List minimum client workstation requirements, There is no reason to see any impact to the existing LAN/WAN. MARSH ClearSight End User Workstation Requirements for Marsh ClearSight & Marsh ClearSight apps, Enterprise, STARS Discovery, STARS Intake This document lists operating systems, browsers, and other components required for use of the version 16.1 release of the following Marsh ClearSight products: • Marsh ClearSight (Community, Insights, App Center) and Marsh ClearSight apps are developed for use with desktop, laptop, and mobile device internet browsers. Register for an account and log in to Marsh ClearSight at httos:/fmv.marshclearsiciht.com. • Enterprise (includes the Marsh ClearSight Enterprise app) work best when accessed from desktop or laptop internet browsers. • STARS Discovery is designed for use with the Apple' iPad° and can be downloaded from the Apple App Stare. ■ STARS Intake can be used with iOS and Android -based mobile devices. It is available for download from the Apple App Store or the Google Playrm store. Marsh ClearSight reserves the right to amend this document based on testing performed during development of this release and al! future releases. Marsh ClearSight, Marsh ClearSight Apps & Enterprise Requirements (SaaS) Use of Marsh ClearSight, Marsh ClearSight Apps & Enterprise requires an active internet connection. Any necessary browser configuration and settings changes are covered in "Appendix B; End User Workstation Browser Configuration Guide". Operating Systems and Browsers Required operating system and browser combinations for use of Marsh ClearSight, Marsh ClearSight apps, and Enterprise are listed in this section. For a full list of the operating systems and browser versions tested and certified fo and Marsh ClearSight apps, refer to Appendix A Compatibility Matrix'. Marsh ClearSight & Marsh ClearSight apps Enterprise & Marsh ClearSight Enterprise Windows 10 Windows 10 • Microsoft Edge° • Microsoft Internet Explorer 11 (64-bit) • Microsoft Internet Explorer 11 (64-bit) • Mczille Firefox 51.x or higher • Google Chrome''"" 55.x or higher Windows 7, 8 (64-bit) Windows 7, 8 (64-bit) • Microsoft Internet Explorer 11 (64-bit) • Mozilla Firefox 51.x or higher • Google Chrome 55.x or higher a Microsoft Internet Explorer 11 (64-bit) Apple`s Mac OS X° 10,x+ Apple Mac OS X 10.x+ • Apple Safari° (Mac) 9.x or higher ■ Apple Safari (Mac) 9.x or higher app MARSH ClearSight 28, Provide a narrative discussing the proposed system's capabilities, and include the following points: 1) What are the primary benefits of your solution? 2) How have Proposer made sure that their product is advancing? Describe improvements over time. 3) What are the primary restrictions of your technology? 4) Describe some of the user friendly features of the system that make it easy to learn and work with. 5) Describe how Proposer's solution meets the goals of transparency and citizen involvement. For documents that require exemption from public disclosure, describe how the solution meets this need. 6) Does the proposed solution provide standard Microsoft Windows functionality such as copy, cut and paste functionality, spell check, etc,? 7) Describe the techniques used for data entry in proposed solution. Are there any efficiencies built into the data entry system and if so what are they? 8) Describe how redaction of social security numbers, addresses, and other proprietary information can be achieved in proposed system. 10) Describe proposed system search functionality. 11) List all technologies/devices required for proposed application to run.j 12) Provide any other relevant technical information which Proposer sees a benefit to the City in implementing proposed system. This could include, systems performance standards, testing and acceptance, and differentiation from other systems available in the marketplace. 13) What kind of content storage is available in proposed system? 14) How will proposed system handle business continuity, disaster recovery, and data backup and restore, archive retention and disposal practices? 15) If proposing a SaaS system, please detail: • What is the uptime SLA (Service Level Agreement) provided? • Where the application is physically hosted? • Do you have a Disaster Recovery (DR) plan? • How often do you test that plan? • Where DR site is physically hosted? MARSH ClearSight Marsh ClearSight is a cloud -based, end -to -end platform for dynamic risk management. For clients and the industry, the innovations in Marsh ClearSight deliver a single, integrated, way to make more informed decisions around evaluating, mitigating and managing risk. The platform includes third -party tools and data, provides multi -party collaboration and features dynamic workflow applications, real-time data and analytics to help clients understand their total cost of risk from anywhere, on any device. Marsh ClearSight is a platform that integrates easy -to -use applications with expansive analytics in one information platform so the City of Miami will be able to handle their workflow more effectively and more efficiently. Tracking and trending will become standard. Managers will have the ability to identify emerging risks because the system will help them see a clearer picture. • Advanced analytics provide you the clearest line of sight into your data which allows you to address critical business issues and make better, more informed decisions to manage your total cost of risk, and achieve your organizational goals. • Workflow -Driven integrated Apps designed around your business processes bring a user friendly experience to the end user while streamlining your workflow and help make third -party handoff seamless. • Easy access to attach information to records with email, and easy access out of the system with the use of email . • Simple security configuration permit users to see the data and Apps they need in their business. • Mobile capabilities encourage users to experience the next generation of applications from any mobile device, without having to download and install any external Apps. • Multiple browsers available for users to utilize. We constantly innovate and most notably in October 2015, Marsh ClearSight introduced the Risk Management Industry to Embedded Analytics and Data Discovery, the next evolution of Business Intelligence and Dashboards. We combined a visually interactive interface for non- technical business users. We initially focused on Claims and now include Policy erosions and exposure data. Users view analysis in real time and make changes to views in a click with drill down capability to the supporting claims. A restriction of our tool is our quest to incorporate a 100% accurate OCR tool. Overall we provide features that make the system easy to learn and expedite workflow. Some example of that are: fully customizable data entry screens use automated field population, validation rules and escalation paths to expedite claims management, eliminate duplication, and ensure data integrity. Split screens enable adjusters to work multiple claims at the same time. Auto -generated notifications and alerts support communications and loss control efforts. Users can easily reassign tasks and claims to adjust for changes in staff levels or capacity. Throughout the years our enhancements and upgrades embody client requests we gather throughout meetings, emails and conversations. We have an active Client Advisor Council that we would be happy to invite the City of Miami to participate in. There are currently over 30 registered member companies of our Client Advisory Council representing a variety of industries and geographies. The Client Advisory Council is a customer -centric organization designed to encourage our customers to network and interact with other clients. A third party facilitates the MARSH ClearSight Client Advisory Council and Marsh ClearSight's involvement is limited to a short update on our solutions and corporate direction. Our Client Advisory Council meets once per quarter, via conference call, and live once a year in conjunction with our Client Conference. In addition to the above, for long term new product development, Marsh ClearSight works with clients in several different co -development arrangements. Keeping customer comfortable with advanced technology is accomplished with familiar tools such as the incorporation of Microsoft functionality — user can upload and/or drag and drop external files, including Microsoft® Word® documents, Adobe® PDF® files, and image files (i.e., .BMP, .JPG, .TIFF). Another benefit to keeping users engaged is speeding up the data entry process; we use dynamic fields. When an event is entered, if the answer to a witness question is there was not one, then the software moves forward, but if the answer is yes to say a witness then the next question asks about that witness. When an incident becomes a claim, a simple click transfers all the information into the right claim fields to eliminate redundancies. Simple security groupings that can be easily configured keep the redaction of data and PSI from inappropriate eyes. Perhaps some of the most powerful tools beside analytics and reports are the variety of build in search capabilities. The system offers drop downs that each user can configure for their view and sort preference. Landing pages offer current working files, in process files and completed file sorts/views. And perhaps the most powerful search of all is the global search where the user may enter a key word, date, number etc. that searches all fields. Because Marsh ClearSight is a SaaS offering the only hardware a user needs is a device that connects to the Internet. Any tablet, mobile phone, laptop or desktop can be a window into the system. Users expect a system that is always available and Marsh ClearSight has enjoyed up time performance of 99.5% and 99.8% (not including any scheduled maintenance) for the last two years. To maintain this constant availability and fluid access, our Infrastructure is built with redundancy and scalability in mind. Redundancy is built in at every layer of the infrastructure. Web/Application and database layers are scalable both horizontally and vertically to support the needed scale. Marsh ClearSight's private cloud environment and has controls and practices to protect the security of customer information. Applications run in a multi -tenant, distributed environment. Instead of segregating each customer's data onto a single machine or set of machines, Marsh ClearSight consumer and business customer data (as well as our own data) is distributed among a shared infrastructure composed of Marsh ClearSight's many homogeneous machines and located across our data centers. MARSH ClearSight lure 1. A mufti -tenant application environment / 1 CPiese.rwa Tenant Tenant 8 Tenant A bnant B We utilize a hot site for Disaster Recovery with near real time data synchronization. We have certain systems ready to run in case of a Disaster Recovery need and additional capacity can be made available as time progresses • As a matter of fact, Marsh ClearSight publishes a Service Organization Control 1 (SOC 1), Type II Report. The audit for this report is conducted in accordance with AICPA Statement on Standards for Attestation Engagements (SSAE) No. 16 audit and an International Standards for Assurance Engagements (ISAE) No. 3402 audit. The audit is performed by an independent third party vendor (Forsythe, Inc.). The audit is an annual audit which is performed in order to evaluate and test operational controls on an ongoing basis. • CenturyLink is our data center operator we use, and from time -to -time, L&T Infotech for development and Synechron for other backend and data services. 39 MARSH ClearSight 29. Complete Attachment B - Business and System Requirements Document, included in the Header Section of this solicitation, in its entirety. Attachment B — Risk Management Business and System Requirements General Business & Systems Functionality Req. ID Functionality Description Yes No Comments 1 Audit trail functionality -the system Yes shall be required to provide audit trail functionality that captures a user's log in credential, date, time, and actual data that is changed (from and to) to allow for version control The system's Audit Log feature tracks of all activities of every user in the system down to the detail level. The audit log can be search by dates, times, users and type of activity. 2 Configurability-the system should be Yes able to provide a system administrator with the capability to configure changes independent of submitting a change request to the vendor or a change to the source code. The system and fields are fully configurable. The Administrator Module provides the designated system administrator(s) full control over the configuration of the system. This is the same easy to use GUI that the Marsh ClearSight Implementation team uses to configure all aspects of the system. It is comprehensive in terms of managing, configuring and updating all aspect of the system. A short fist of features include ability to manage/change/add codes, labels, screen designs, new coverages, users security, workflow and notification rules, dashboards, password security, bank accounts escalations and virtually every other aspect of this flexible system. 3 Authentication -The system shall allow Yes internal City of Miami users to be authenticated via Active Directory. Additionally, the system shall provide the capability to authenticate the selected TPA claims service provider staff. We offer and support Single Sign -On. It takes full advantage of a client's existing directory services, whether they are LDAP- compliant or custom built, by utilizing the Security Assertion Markup Language (SAML), a consortium -backed industry standard in exchanging authentication and authorization data between security domains. ClearSight has a fully customizable security manager for each user including access by the selected TPA claims service provider staff. Marsh ClearSight users are assigned to specific security groups to define their permission levels within the system. MARSH ClearSight Req. ID Functionality Description Yes No Comments Security Permissions groups are setup to define the following access levels: • Company Access • Coverage Access • Entity Access • Field Access • Finance Access • Location Access • Note Access • Screen Access • Task Access • Template Access 4 User Account Maintenance- 1. Ability to lock out system users after a defined number of failed logon attempts. 2. Ability to log out users after inactivity for a defined period of time. 3. Ability to reset user passwords. 4. Ability to deactivate a user and reassigned their open tasks/diaries to another active user and reactivate system users. 5. For additional detailed information, refer to Chapter 8, Security. 1. Yes 2. Yes 3. Yes 4. Yes Two different levels of security (Default and Enhanced) can be applied to passwords depending on the level of security that is required. The City of Miami can specify: 1. the number of failed attempts. 2. the inactivity time period 3. the ability to reset user passwords 4. number of days before the password expiration 5. temporary password expires in (x) 6. warnings 7. lock outs 8. minimum lengths 9. strong passwords with #, symbols Deactivating a user and reassigning their open tasks/diaries to another active user and reactivate system users is a standard feature. Permissioned users may do this. 5 Data Elements- User defined specific Yes data elements (date, text, special analysis & numeric) and code sets by major coverage type. Ability to maintain data element code sets and automatically apply changes globally to all affected claims. The implementation of client -specific data elements is simple and this is one of the major advantages of our system. In the implementation phase, your implementation team will configure these desired data elements for you. The City of Miami may choose to either use standard screens or fields as a starting point or have Marsh ClearSight make adjustments to reflect your "branding" or request to design completely custom screens and fields. These options are easy with the Administrator tool. MARSH ClearSight Req. ID Functionality Description Yes No Comments On an ongoing basis, the City of Miami may make changes or add new data elements- we provide this training as a matter of routine. The Administrator tool is included with the system for your use. This tool enables the system administrator to easily define or add new fields, make changes to the screens, modify security, add new codes, change client specific preferences such as date, text, analysis and numeric. Changes may be made for global claims. If you choose not to make such administrative changes yourself, your dedicated account team will be happy to make them at your request. Since this process is supported through the Administrator Module all changes are safe for the upgrade path. 6 Claims -Ability to user defined special Yes analysis fields, date fields, long comment fields for property and claim locations, Yes, Marsh ClearSight is customizable and virtually every implementation of the system includes custom data elements. Marsh ClearSight screens are extremely flexible and have coded fields, descriptions, numbers, date fields, user fields, and multi -select fields. Marsh ClearSight has custom financial categories and formulas- there are for instance: - seven financial buckets with an unlimited number of payment/reserve types under each category. This gives clients current financial categories to be mapped and matched within the application. There is a built in field for unlimited text with a spell checker. 7 Data Element Customization- Ability to Yes assign custom data element display and report labels that can be different for each of the coverage types defined. For example the Date of Loss field could be displayed as Date of Loss on the display screens and then print as DOL on reports for liability claims and then for Workers' Comp claims the field label would display as Date of Accident and on reports print out as DOA. Yes, the implementation of client -specific data elements is an advantage of our system. The City of Miami may choose to completely custom screens and fields. Your implementation team will make these updates for you and then teach your Administrator how to configure fields in the future. A dedicated Account Manager and Solution Consultant are also available after implementation to help you make these changes. MARSH ClearSight Req. ID Functionality Description Yes No Comments 8 Data Entry- Ability to allow for data Yes entry screens based on major coverage type including the ability to define required fields, read only fields, use default values, etc. and the ability to assign the custom data entry screens to specific end users and/or groups of end users. Yes, fully configurable data entry screens use "dynamic workflows" to expedite and minimize the necessary questions for required fields, read only fields, user default values and more. Including such features as automated field population. Specific end users or group can be limited to only access a line of coverage such as GL, Property, Casualty, Auto, Environment and whatever lines you carry. The Marsh ClearSight system is configurable and offers unlimited coverages. Validation rules, severity scores and escalation paths expedite delivery of records and data integrity to specific end users and/or groups of end users. 9 Organizational Hierarchy -the ability to Yes separate organizational hierarchy structures and provide the ability to move claims and locations easily from one location to another, Recommendation: drag and drop. The City desires a solution that has the capability to enter an unlimited number of departments, locations, and funding structure levels. A graphical hierarchy of your organizational structure will allow reporting at any level within your organization. We do not have a limit to the structure. We currently have clients with up to 20 levels. As organization expand and restructure hierarchies change (i.e., movement of one location to another branch in the hierarchy) are expected and accommodated easily. Drag and drop is a standard feature within Marsh ClearSight. Marsh ClearSight also utilizes authorization controls. Access to information is granted on a least -privilege and need -to -know basis. Within applications, a hierarchy of controls limits access to data and system functionality according to user roles, levels of authority and/or job function. 10 Rules Based Automation -Automated Yes event type rules based on the City's business needs/rules that will prepopulate data elements based on either default values or values of other data elements based on coverage type and action type. (i.e. when a claim is first created, when claim is saved, when claim is opened, when claim is closed, etc.) In addition, the ability to apply these business rules to specific users and/or user groups. Rules based automation is inherent to our system. ClearSight software is designed to support efficient claims management and task completion. Fully customizable data entry screens use automated field population, validation rules and escalation paths to expedite claims management, eliminate duplication, and ensure data integrity. MARSH ClearSight Req. ID Functionality Description Yes No Comments 11 Automated Alerts -the ability to Yes automate alerts based on coverage and business rules. Yes, auto -generated notifications and alerts support communications and loss control efforts. 12 Validation- the ability to apply validation Yes checkpoints to ensure data integrity during data entry based on each coverage type and the ability to then apply these validations to specific users and/or user groups. Yes, ClearSight has several data validations built into the framework. Extensive standard data validation routines are performed during the initial load of data. Steps may include balancing to control totals, running data quality checks and trending reports, and resolving data to conform to Marsh ClearSight's and client - specific business logic requirements. Our proprietary data conversion program contains a number of data quality checks to ensure that your data is correctly converted into our database. Your implementation team will also work with you to define ongoing data checks required to maintain the integrity of your data. 13 Automated System Updates- the Yes system shall be required to capture auto diaries based on coverage type and user defined claim events. All entries in the system are captured by an audit function. 14 Forms for Letters & Templates -The Yes system shall provide the ability for users to create and edit standard forms, Word or PDF template letters and forms that will merge defined claim data for each coverage type and after the claim data merge allow the end user to add any additional text as may be needed. Note: All data elements should be available for "merging" in the templates. The forms and letters capability lets clients generate client -defined, pre -populated forms and letters directly from the system using "mail -merge" type features. • Form letters can be run from claims, incidents, and occurrences. The values are pulled from the fields within these modules. • They can be unique to your customer or client Marsh ClearSight supports letter templates created in Microsoft Word, making letter maintenance straightforward and familiar. Word opens with a specialized Marsh ClearSight toolbar to further simplify the process. These letters can be edited, printed and saved directly to the claim. MARSH ClearSight Req. ID Functionality Description Yes No Comments 15 Reporting- Custom reporting periods Yes (i,e. fiscal, calendar, excess policy period years & quarters, etc.) The City of Miami user will find generating reports easy. They can choose from over 100 standard reports, robust ad hoc reporting and data export capabilities to various file formats that encourage business decisions based on quality data and configured for any time period. As an example: the user simply selects a template from the library and determines what section or subsection of claims to include by pointing and clicking on data fields and entering dates and then selecting from a drop down menu of system data fields to define how the information should be sorted and displayed. The ad hoc report template builder gives users the ability to create basic report templates by clicking and dragging claim, location or transaction fields into the desired report format. All data stored in ClearSight is available for reporting. Reports can be filtered, sorted, or grouped by virtually any field to meet the client's business needs. 16 Customization- 1. Set up Custom Incurred Formulas; 2. Set up Custom values for property and exposure tracking and custom formulas. For example ability to define values for Office contents, EDP contents, Book contents and then create a custom formula that adds all three values together as "Total Contents" Yes Users may define the values and formulas they want to track and determine the intervals at which to track them. Any value type may be stored including but not limited to property values, payroll, sales, employees, vehicles, cases, miles, and hours. Values can be a currency field, text, yes/no or numeric value. The values can be entered annually, quarterly, monthly or weekly. The City of Miami will be able to track the values via the Web for streamlined data capture and management. The tool will warn the user when their value entered is a particular threshold (amount or percentage) above or below last years' value. This feature catches user error and requires that an explanation be entered for all values that go outside of that threshold. It is simple to assign and reassign values and locations to users through the Mass Assignment tool. MARSH ClearSight Req. ID Functionality Description Yes No Comments 17 Set -Up Requirements- 1. Set up Positive Pay File Setup/ACH, i.e. data format, encryption, bank and transmission settings; 2. Ability to set up laser check writing parameters for Broward's bank; 3. Set up financial transaction (payment & reserve) codes & descriptions; 4. Set up location codes & descriptions; 5. Set up diary/notes codes & descriptions; 6. Set up vendor type codes & descriptions, i.e. employee, claimant, doctor, hospital, pharmacy, attorney, etc.;; 7. Set up location recommendation codes & descriptions. 1. 2. 3. 4. 5. 6. 7. Yes Yes Yes Yes Yes Yes Yes ClearSight supports the full lifecycle of payment processing. We would work with Broward Bank and any other bank of the City of Miami's choice. There are several interrelated components that support the management of claim payables and the issuance of outgoing payments. The Payment Processing Module lets you create check batches in order to process checks and check requests. A user may view, delete, and update payment transactions from this screen. Only approved payment transactions will show in the Payment Processing Module. When payments are processed, checks are created and loaded into one or more check batches for processing. The check folder contains a page to display all associated payment transactions. A batch is created for each bank account and each payment type (Request or Process). Marsh ClearSight offers a secure payment processing module for users to issue checks through paper copy or ACH transaction. Our ACH files can be configured based upon the bank account associated with the payment and it can also be automated. 18 Ability to mass change the assigned Yes adjuster in all claims based on claim status, the currently assigned adjuster, first letter of claimant's last name, injury code, etc. and move all associated open diaries from the currently assigned adjuster to another adjuster per coverage. Yes, claims and the associated fields including diary, notes and attachments can be mass changed due to another adjuster who may be on temporary vacations or on a permanent basis. The ability to make this change is security controlled as defined by the City of Miami. 19 Ability to set up a separate business unit Yes for active participating agencies in the City's self-insurance program and a separate business unit for terminated agencies as all claims history must be retained for view only access and reporting purposes. Yes, this would be configurable MARSH ClearSight Req. ID Functionality Description Yes No Comments 20 Ability to set up parameters for duplicate Yes payment checking, i.e. warnings if exact amount to same payee within XX number of days, etc. Yes, ClearSight includes built in duplicate payment checking options which can be configured per line of business to check payments across multiple claims or on a single claim. These settings will warn the user and can be configured to validate based on payee (vendor), payment sum, identical sums or sums within a named % of each other, payment date, payments within a named number of days or overlapping service periods. The system does allow for an override of these warnings and the entry of the appropriate payments if the user has authority. 21 Diary & Notes Functionalities- 1. Ability to generate recurring Diaries and assign to a specific user or multiple users; 2. Ability for the supervisor to search & view past due dairies and/or all diaries for their assigned adjusters individually or by diary type, diary status, due date, etc.; 3. Ability to escalate past due diaries to the supervisor based on a user defined number of days past due; 4. Ability to prevent diary/note text from being deleted but do allow the ability to add additional text to the diarylnote; 5. Ability to email individual diary/notes on a claim; 6. Ability to date stamp each diary and note with the user name, date and time of each entry within the same diary/note; 7. Ability to view diary/note not only in the adjuster workspace area in date order, but also the ability to view the diary/note with a calendar view. 1. Yes 2. Yes 3. Yes 4. Yes 5. Yes 6. Yes 7. Yes Marsh ClearSight includes unlimited notes and diaries associated with each claim and incident. All entries are stored with a running log of the automatically date stamp and user ID. Notes and diaries may be made private or public. Both are searchable by keyword, dates, user, category etc. Attachments can be added to both. Claim notes may include post auxiliary textual information to any claim, thus creating a permanent record of pertinent events or claim status. When a user's access to the system must be deactivated, administrators can quickly and easily assign that user's open notes to another user. An integrated calendar view gives examiners a see at -a -glance for all entries for the desired day, month or other specified time period. Security defines who can read, enter, edit and delete note records. Notes, Diaries, and Documents can be manually input or can be imported into the application through an import process or data conversion for "historical notes and files" and stored on Claims or Occurrences. MARSH ClearSight Req. ID Functionality Description Yes No Comments 22 Imaging & Workflow Functionalities- 1. RMIS provides functionality for an electronic document imaging and workflow system (EOM) for claims administration and property management; 2. Ability to update the WC claim with the data on the medical bill, i.e. ICD- 9 Codes and CPT Codes, etc.; 3. Ability to scan and attached a wide variety of documents such as Word, PDF, JPEG, Excel, emails, voice messages, etc. to the individual claim; 4. Set up or create rules -based workflows. 1. 2. 3. 4. Yes Yes Yes Yes We have the ability to attach files to records and store them in our database or link to a document management system. We also have an MBRIP workflow and the ability to capture diagnosis codes, etc. With Marsh ClearSight, the user can attach via email, upload and/or drag and drop external files, including Microsoft® Word® documents, Adobe® PDF® files, and image files (Le., .BMP, .JPG, .TIFF). From the Files page of an entity (e.g., incident, claim, occurrence, location, policy, program, certificate, check, task), you can upload external files. File attachments are stored on secure servers managed by Marsh ClearSight. However it is also possible for you to use your organization's existing document management system(s) (DMS). We can support virtually any structured data format regardless of layout or format (delimited, fixed, multiple record types, ANSI, EDI, ASCII, UTF, Unicode, etc.). Unstructured data is generally not supported except as file attachments (e.g. Word, PDF, image files) Executable files (.exe) are excluded from the file attachment functionality. 23 Data Ownership- 1. The selected proposer shall be required provide data upon request in a readable format (Le. csv etc.) 2. The selected proposer shall hold the software source code in escrow and the vendor must provide the update of the source code when updates are performed and/or every 90/180 days. This includes all version updates. 3, The City of Miami at all times shall maintain ownership of the data generated and source code recorded in the procured solution. Yes 24 The procured system shall be required Yes to comply with the City of Miami IT implementation standards for SaaS solutions. Our Clients always own their data. Should you ever choose to terminate service; data can be provided in ASCII pipe -delimited files with supporting documentation in CSV format. The data would be provided after the termination of the services and an agreement has been signed by you, the client, for release of the data. We will carefully review your standards. We have not had an issue with other Public Entity IT implementation standards for SaaS solutions, MARSH ClearSight Req. ID Functionality Description Yes No Comments 25 Browser Compatibility -The system Yes shall be required to be compatible to internet explorer, Mozilla Firefox and Google Chrome and adjust to the application. The SaaS model is a web -based enterprise application accessed using a browser agnostic interface. Users can log on through their portal, app, or mobile device. The recommended architecture has no client -side installation. Marsh is responsible for the hosting and environment support. 26 HIPPA-The system to be procured shall Yes be required to adhere to HIPPA privacy laws and remain continually compliant. The system to be procured shall be required to adhere to privacy laws encryptions. Marsh ClearSight conforms to the provisions of HIPAA. When we deploy the application in our own ASP environment we use a modified ISO 17799 method which includes identifying ePHI as an asset class and surrounding it with special security procedures. 27 System Search Functionality -the Yes system shall provide the capability for users to perform inquiries via: 1. By Claimant First and Last Name 2. Reference Number (Claim Number, SSN#, Case Number etc.) 3. By Specified Dates 4. By Subjects 5. By Category 6. By Coverage Line 7. By Customized Field Heading Name Marsh ClearSight offers complete customization in defining search criteria at the user level. The Global Search tool gives the user the option to search in any module or note for a key word or phrase directly from the menu bar Users may define and store their specific search criteria and set defaults to accelerate the claim searching process. 28 Archive and Archive Retrieval -the City Yes desires a solution that has the capability to archive data based on rules defined by the City. The archived data should be flagged so that it will be excluded from reports unless a report specifically allows archived data to be included. A City user should be notified during a search or index function that a claim is archived and given the option to include or exclude. A City user should have the capability to transfer an archived to the live -production. Users can design the layout of the data to be exported /archived and select the fields to be included in the export, all from drop - down menus. We would work with the City during implementation to define this criteria. All data in ClearSight can be exported and imported via our data export interface. Within Marsh ClearSight users can export/import data directly to a variety of file formats. These include spreadsheets, word processing, ASCII and other standardized formats. 29 General Solution Requirements- 1. Yes 2. Yes This section refers to commonly used 3. Yes functions that should be accessible throughout the proposed RMIS. The City 4. Yes desires a RMIS that includes (and allows 5. Yes 1. ClearSight imports and exports data directly to a variety of file formats: including spreadsheets, word processing, ASCII and other standardized formats. Users can design the layout of the data to be MARSH ClearSight Req. ID Functionality Description Yes No Comments City staff to use/access) the following at a minimum: 1. The ability to export/import data in multiple formats, including comma delimited format and Microsoft Excel formats; 2. The ability to use Microsoft Outlook functionality in relation to a claim or incident; 3. The functionality to allow an administrator to create and maintain triggers that automate functions as initiated by system dates and claim management activities; 4. A worksheet specifically designed to provide the ability to calculate and populate Florida Workers' Compensation statutory forms; 5. A "Dash -Board" (view) feature that can be formatted for specific roles, containing pre -defined information related to the users individual tasks or management needs; 6. User -specific notes/comments not captured or attached to a claim file or accessible by any other user; this should operate as posting an electronic "sticky" note on your computer; 7. Payment screens; 8. Ability to view "Face -sheet" with pertinent information (AWW and Comp Rate). 6. 7. 8. Yes Yes Yes exported and select the fields to be included in the export, all from drop - down menus. We have completed thousands of interfaces with TPAs, HR systems, Financial systems and others. Marsh ClearSight reports are exported to Microsoft Word, Adobe PDF, Microsoft Excel, Microsoft Excel Data Only, or Comma Delimited formats. Reports can also be output to HTML format for viewing within the ClearSight application. View and Search result sets can be exported into MS Excel format. 2. Marsh ClearSight is tightly integrated with Microsoft Office applications. The Custom Letter Module includes a fully integrated interface to create or edit custom letters in Word. All of the search and view result screens within the system are exportable directly to Excel with a single click. The Reports Module includes the option to send report outputs to Word or Excel and to launch the resulting output files directly from within the application. Additionally, ClearSight supports file attachments for all Microsoft Office applications where file attaching is supported (e.g. Claim, Policy, Location, etc.) 3. Triggers for notifications and alerts are standard in the Marsh ClearSight system. We will set these up during the implementation and teach your Administrator how add in additional automated triggers for full control over the system 4. Yes 5. Individual personalized dashboards make it easy to find and digest important information by pulling each client's most critical data points to the surface. Our Dashboards combine the visualization (pie charts, linear gauge, bubble graphs, etc.) of Key Performance Indicators with the filtering capability of Views, granting users flexibility in reporting and understanding of data captured in MARSH ClearSight Req. ID Functionality Description Yes No Comments ClearSight. Drill -down capabilities enable users to quickly access detailed data or items requiring attention. ClearSight dashboards are easily configured to your organizational requirements, your metrics, and your environment. 6. Yes 7, Payment screens; In ClearSight, financial applications provide the flexibility to configure customized rules and maintain indemnity benefit calculations and unique screens for each jurisdiction. Schedules are integrated with full reserving functionality while capturing a complete audit trail of all record changes. Reserve worksheets allow clients to create worksheets for all lines of coverage enabling users to update and make notes on multiple financial buckets on one screen. Payment Processing is consolidated in one module to expedite payments. 8. Yes General Claims Administrations For All Lines of Insurance Coverages Business & Systems Requirements Req. ID Business Requirement Yes No Comments 1 The system shall be required to Set up Yes reserve/payment categories (Medical, Indemnity, Expense, Legal, Vocational Rehab, Recovery) with reserve & payment codes for each category for each coverage type. Marsh ClearSight includes the functionality to calculate indemnity benefits for multiple lost time periods within a claim. These indemnity benefit calculations can then generate the appropriate payments on the claim, and this also includes the generation of future payments. We can store any field and code on the record, including but not limited to fatality, medical only, indemnity, subrogation, litigation and denials. MARSHClearSight Req. ID Business Requirement Yes No Comments 2 Maintain individual reserve and payment Yes transactions thru out the life of a claim and provide the ability to view and sort on any data element contained within the record, i.e. transaction date, transaction type, payee, amount, service from & thru dates, etc. Marsh ClearSight includes a reserve worksheet functionality giving users quick access to create and manage reserves. The reserve worksheet provides an easy -to - use grid where adjusters can manage reserves by financial bucket or down to the detailed transaction type. The worksheet provides an adjuster place to track comments around their distribution of reserves and will save each version for future reference. Each reserve change is tracked within Marsh ClearSight and is included in our point in time reporting capabilities allowing a view of the claim across its life. 3 Ability to add adjuster comments to Yes individual reserve changes/additions and have all reserve changes date and time stamped with the user who made the change. Marsh ClearSight allows for the addition of unlimited notes and diaries associated with each claim. Notes and diaries are useful for tracking follow-up activities, litigation, and case management. Notes, Diaries, and Documents can be manually input or can be imported into the application through an import process or data conversion for "historical notes and files" and stored on Claims or Occurrences. 4 Scroll thru all reserve changes/additions Yes with the adjuster comments and view in chronological order. Yes 5 Provide a financial summary view screen Yes for each claim that displays the incurred, paid & outstanding total for each reserve/payment category and the ability to view totals with a valued as of date option Yes, ClearSight displays all financial information pertaining to each claim. 6 Auto -generate unique claim numbers Yes based on a user defined claim numbering methodology Yes MARSH ClearSight Req. ID Business Requirement Yes No Comments 7 Associate multiple claims arising from one yes "occurrence" (accident) across all coverages and provide the total amount of reserves and payments for the "occurrence" and for of each individual claims both on line and for reporting. Marsh ClearSight has an Occurrence Manager that offers multiple claims or incidents from the same or different coverages to be rolled up under a single event. ClearSight includes functionality to consolidate any number of payments to a single payee into one check, including payments across multiple claims. You can then choose to report on the event financial totals or on the individual claim financials. Every report allows you to report on the Event (Occurrence) or on the individual claim. This is important to ensure that your frequency is not overstated when renewal data are submitted to carriers or Toss triangles are generated for actuaries. 8 Track all system activity and provide audit Yes reports by user or for a claim or by activity type, i.e. new claim input, date modified, transactions added/deleted, modified data elements and reserves with before & after values , new and modified diary/notes, status (open, re -opened, closed) etc. Yes. Another option is the addition of our full featured integrated Audit Module. Audit is fully integrated into the ClearSight product and is available as an add -on to the claims management solution. Audit enables customers to create customized assessments using client - specific checklists, standards, workflows and scoring methodologies. Designed for maximum flexibility, audits can be tailored to an organization's regulatory requirements, internal best practices, or any other criteria. To increase efficiency, pre -audit questionnaires can be used to define the right set of questions for each audience. 9 Ability to capture and maintain the system Yes "created" date for each claim and ability to search and report on this date field. Yes, users have the ability to search and report by created date. 10 Ability to capture and display the Last Yes Financial Activity Date & User Name who performed the activity and the Last Non - Financial Activity Date & User Name for each claim Yes MARSH ClearSight Req. ID Business Requirement Yes No Comments 11 Ability to capture and maintain the first Yes (original) close date and then automatically update the reopen and re - closed date fields in a claim as claims typically can be closed and re -opened several times over the life a claim. Yes 12 Ability for the end user to change a claim Yes number after a claim is originally created and the system automatically updates all associated records, i.e. diaries, notes, EDI transactions, financial transactions, attachments, etc. with the new claim number The City of Miami may restrict which of your users have this ability. In the case of a Workers Comp claim generated by USIS, the City of Miami may not have this ability. 13 Ability to track unlimited multiple periods Yes of OSHA lost and/or restricted days per claim and to auto calculate the number of days for each period based on the from and thru dates of each period. Yes 14 Comply with all OSHA 300 Tracking & Yes Reporting requirements including the ability to track by category types and exclude "Privacy" claims from the report. Marsh ClearSight provides OSHA fields for data collection and reporting purposes, as well as the ability to generate OSHA 300, 300a and 301 standard reports using the report manager. Lost and restricted days are tracked in a table format. OSHA reports can be run at any level within your location hierarchy. In Marsh ClearSight, the OSHA calculator sits on the claim and allows clients to store periods of lost or restricted time (estimated or actual). It prevents periods from overlapping and the days are capped on the reports at 180 days (actual days are still reflected in the OSHA calculator). The data can easily be flagged to be a privacy case or removed from the report. You can also calculate the actual lost days (instead of calendar lost days) if the work week data is complete. OSHA 300 and 300a logs can be run by any authorized user. 15 Ability to create Word or PDF letters and Yes forms utilizing custom templates created by the client's system administrator with merged claim data and then be able to edit the merged letter/form with additional non claim data and then automatically attach to the claim when the document is saved and printed. Yes, we offer standard and customizable forms and letters MARSH ClearSight Req. ID Business Requirement Yes No Comments 16 Ability to copy and modify an existing Yes merged letter or form with updated data and save it as a new document without changing the date or content of the original merged letter or form. Yes, Claim Manager integrates with State forms and form letters so that they may be automatically created with data stored on the claim record. These letters can be edited, printed and saved directly to the claim record. 17 Ability for each end user to customize Yes their search views for claims, transactions, vendors, etc. utilizing all data elements for each record typ Yes 18 Ability to capture in-house attorney information and claimant attorney information, i.e. attorney name, firm name, address, city, state, zip, phone number, date assigned to the claim, matter number, trial dates, etc. Yes Yes, Marsh ClearSight includes various date, number, text, demographics and status fields for litigation management purposes. These fields, used in conjunction with the notes, diaries and rolodex modules, make for a comprehensive tracking and reporting of all information related to litigated claims. The fields that are established for litigation management purposes can be used in conjunction with the standard reporting tool or with the Business Intelligence reporting tool. 19 Provide a customizable work center for Yes each end user to consolidate adjusters activities, i.e. due diaries, tasks, alerts, frequently run reports, check approvals, low reserve notifications, etc. The adjuster Homepage is a customizable work center designed to consolidate claims and adjusters' activities into a single, easy- to- navigate location. In addition there are: • A Claims Task List: Filters views of claims and tasks allow users to complete tasks, close claims and add notes easily from their homepage. My Reports and Alerts displays saved report output and alerts on claims. Pending Approval Notifications: Adjusters are alerted to pending and outstanding transactions that require attention. • News and Announcements: Global communications can be transmitted directly from Marsh ClearSight. 20 Ability to open and display multiple claims Yes simultaneously on one display screen. Indicate the maximum number of claims that can be displayed in the Comments section. Yes, split screens enable users to work multiple claims at the same time and view up to four claims at one time. MARSH ClearSight Req. ID Business Requirement Yes No Comments 21 Provide for duplicate claim checking and Yes issue a warning message that requires the end user to click on OK to Save in order for the suspected duplicate claim to be saved. Yes 22 Provide Liability claim decision support Yes tools, i.e. liability assessment, exposure assessment, medical cost evaluation, general damages assessment, etc. Yes, can be tailored to an organization's requirements. 23 Ability to create adjuster "activities" i.e. Yes make 3 point contact, obtain property damage appraisal, etc. and until all "activities" are checked off as completed by the adjuster prevent the system from generating any settlement payments. Yes, the adjuster Homepage is a customizable work center designed to consolidate claims adjusters' activities into a single, easy -to- navigate location. Claims Task List: Filtered views of claims and tasks allow users to complete tasks, close claims and add notes easily from their homepage. My Reports and Alerts displays saved report output and alerts on claims. Pending Approval Notifications: Adjusters are alerted to pending and outstanding transactions that require attention. News and Announcements: Global communications can be transmitted directly from Marsh ClearSight. 24 Ability to enter data once and have that Yes data flow into all areas of the RMIS including all types of FL WC Claims EDI and CMS EDI transactions. Yes 25 Ability for a claimant to report an incident Yes via the City's Website and when the incident is "submitted" automatically create a claim in the RMIS and automatically route the new claim to a designated end user to review and forward to the appropriate adjuster for handling. Yes, our intake system allows for claim/incident reporting 26 Ability to close claim and automatically Yes zero out outstanding reserves and to mark complete future diaries/notes/tasks on claim. Yes. In addition the adjuster is able to close a claim by marking the claim status closed and series of options will be presented to the user addressing how any outstanding reserves should be handled. A final balancing transaction will be created and bring reserves down to zero. This is tracked in the system with a date of closure. In the event the claim is re -opened by an authorized users the claim will receive a status of re -opened and will have the associated date. MARSH ClearSight Req. ID Business Requirement Yes No Comments 27 The City desires a solution that has the Yes capability to transfer claim information from one claim or adjuster to another. An audit trail for all of the following information transfer functions is needed: 1. Transfer a claim or group of claims to another user. 2, Transfer a payment from one claim to another. 3. Transfer adjuster diaries (all diaries) from one user to another. 4. Transfer specific all notes/comments specific to claim. Marsh ClearSight supports user hierarchy and claims administration features that allow for the temporary or permanent reassignment of individual or blocks of claims using a GUI search and reassign feature. The transfer may be for a short term disability and a quick search can pull back all assigned claims and the supervisor can temporally reassign all claims, tasks and pending activity to his team mates. When the adjuster returns to work a quick search can return a list of claims where he is the permanent adjuster and claims have been reassign to a temporary adjuster and all claims can be assigned back at that time. Yes, claims and all claims information can be transferred 28 The system shall be required to facilitate Yes claims adjustment activities that includes: to all 1. Adding New Claims: a. Edits on fields that have defined values. b. Drop -down valid values for each field that has defined value or flag a date on a pop-up calendar for date entries. c. Record claim add data for automated addition of affiliated claims with same data in many/most fields d. Automated new claim -adds from electronic claim add records submitted by third party claims administrators, on batch basis, and with specified default values that can be modified after initial claim add routine has completed and with valid data edits built into the automated claim add routine that will either reject the claim - add for that record or allow the claim -add but generate an exception report depicting those records that were added with non -validated data in certain fields. e. Claim -add screens customized for each coverage line, including accommodation of a variety of ClearSight offers powerful, flexible solutions for streamlining and automating claims administration for all lines of insurance. During implementation claim pages can be configured to capture different claim field data or pages can be hided or relabeled to fit the customer needs. Fully customizable data entry screens use automated field population, validation rules and escalation paths to expedite claims management, eliminate duplication, and ensure data integrity. Templates and workflow rules drive standard task management. Split screens enable adjusters to work multiple claims at the same time. Auto - generated notifications and alerts support communications and loss control efforts. Users can easily reassign tasks and claims to adjust for changes in staff levels or capacity. Marsh ClearSight offers powerful, flexible solutions for streamlining and automating claims administration for all lines of insurance. Our software is designed to support efficient claims management and task completion. Fully customizable data entry screens use automated field population, validation rules and escalation paths to expedite claims management, eliminate duplication, and ensure data MARSH ClearSight Req. ID Business Requirement Yes No Comments claim number formats f. Data elements stored in multiple files auto -populate in all such files when entered in any of the files. Data elements currently captured and entered during the claim -add processes are accommodated. 2, Modifying Claim Information: a. Edits when modifying any field with defined values. b. Drop -down list of valid field values and pop-up calendar for date entries. c. Data integrity maintenance, i.e., disallow changes contrary to established rules. d. Multiple claim modification on simultaneous basis such that the change is applied to all sub - claims or additional claimants, etc. e. Automated transmission of claim change transactions to affiliated/integrated applications that may be impacted by such change, such as the Electronic Document Management (hereafter, EDM) application. f. Security measures incorporated into system to restrict the type of claim modification allowed or limit the amount of a financial change on basis of criteria defined by Department. Data element stored in multiple files or tables can be modified in all files or tables when modified in any of these files or tables. h. Cut information from a variety of sources, such as faxes, electronic documents, images, or other claim records, and paste such information into a claim record. i. Import documents into the claim record. 3. Establishing Diary Information (Trigger Dates, Notes, Reminders, Etc.) a. Create generic diary entries that can be entered into claim diary 9• g. integrity. Templates and workflow rules drive standard task management. Split screens enable adjusters to work multiple claims at the same time. Auto -generated notifications and alerts support communications and Toss control efforts. Users can easily reassign tasks and claims to adjust for changes in staff levels or capacity. Customizable, web -based tools provide a secure, convenient way to report claims and incidents. Easy to- use tools enable incident entry from any computer with a connection to the Internet, removing much of the paperwork associated with this process. Data is captured locally, consolidated, and then analyzed centrally. When serious events occur or immediate action is needed, key stakeholders can be automatically and instantly alerted. Yes ClearSight can help organizations manage the benefits paid to injured workers either under a temporary or permanent scenario. This includes tracking information such as AWW, calculating the benefits based on jurisdiction and timing and integration with the issuance of payment. Under- or insufficient -reserve flags. Yes, customizable 4f. Automated notification of supervisory personnel when reserve status on claim reaches certain, pre -defined states. The Adjuster Homepage is a customizable work center designed to consolidate claims adjusters' activities into a single, easy -to - navigate location. ClearSight uses events, notifications, and validations for enhanced workflow management, The system administrator can define an event (e.g. claim reaches a status, new payment entered) and create corresponding notifications. For instance, an event can be added that flags each occurrence of a user changing a claim status. A notification can be linked to this event which will automatically assign a diary to that user's supervisor and attach the diary to the claim folder each time the event is triggered. The same event could also trigger an email notification to the facility manager. Note that non -system users can also MARSH ClearSight Req. ID Business Requirement Yes No Comments system from a narrative code or similar setup so that adjuster does not have to re -type these frequently used diary entries each time. b. Import diary entries into a claim's diary from external sources such as e-mail text, electronic documents, etc. c. Query on or otherwise report diary information. d. Automated notification of adjusters of required claim activity based on a trigger established in the diary system. e. Security measures built into system such that certain diary entries cannot be altered or deleted by unauthorized personnel. 4. Setting Reserve Amounts a. Inclusion of Auto -Reserve in the application that will generate a recommended reserve amount based on analysis of historical claims with similar attributes (as defined by Department). This feature shall be designed to produce such recommended reserve on a reserve category basis (Le., Medical/Bodily Injury vs. Indemnity/Property Damage vs. Expense vs. Legal etc.) b. Security measures to restrict or limit an individual's rights to establish reserve amounts base on criteria specified by Department. c. Under- or insufficient -reserve flags. d. Prohibition of certain application functions, as defined by Department, when the claim is under -reserved. e. Automated calculation of outstanding reserve values, maximum reserve values, minimum reserve values, and reserve value at closing. f. Automated notification of supervisory personnel when receive emailed notifications too. 5a. Search/look-up routines built into system to allow adjusters to research a payment request (invoice) to determine if it is a duplicate or not. ClearSight includes built in duplicate payment checking options which can be configured per line of business to check payments across multiple claims or on a single claim. These settings will warn the user and can be configured to validate based on payee (vendor), payment sum, identical sums or sums within a named % of each other, payment date, payments within a named number of days or overlapping service periods. The system does allow for an override of these warnings and the entry of the appropriate payments if they are valid. 6a. Yes, ClearSight provides the flexibility to configure customized rules and maintain indemnity benefit calculations and unique screens for each jurisdiction. 6b. Automatically calculate the benefit payment amount based on the indemnity benefit type selected; the date of accident; and the average weekly wage contained in the claim record. Yes, ClearSight provides the flexibility to configure customized rules and maintain indemnity benefit calculations and unique screens for each jurisdiction ClearSight also includes the functionality to calculate indemnity benefits for multiple lost time periods within a claim. These indemnity benefit calculations can then generate the appropriate payments on the claim, and this also includes the generation of future payments too. 6c. On the payment of permanent impairment benefits on claims with a date of accident on or after 10/1/2016, and the payment of permanent total supplemental benefits, allow the adjuster to determine if permanent total supplemental benefits are payable. If the adjuster elects payable, then calculate the correct benefit amount that when added to the compensation amount will not exceed the maximum compensation MARSH ClearSight Req. ID Business Requirement Yes No Comments reserve status on claim reaches certain, pre -defined states. 5. Recording & Managing Payment a. Search/look-up routines built into system to allow adjusters to research a payment request (invoice) to determine if it is a duplicate or not. b. Sub -routines in application to allow adjusters to determine status of a requested payment (i.e., still pending as payable, check cut but not sent out, payment completed and posted to claim). c. Sub -routine to allow adjusters to enter requested pay amount and receive return report of inadequate or low reserve amounts. d. Sub -routine to accommodate adjusters to notify the Financial Section of the need to generate automated compensation payments, 6. Requesting Worker's Compensation Indemnity Payments a. Provide the scheduling the initial indemnity payment for one -week and subsequent indemnity payments as bi-weekly in a single process. The initial payment process applies to temporary total and temporary partial indemnity payments. Provide the scheduling of the duration of indemnity payments. The duration process applies to all types of workers' compensation indemnity payments. (According to Florida rules, Death benefits, Perm Total benefits, Deductions such as child support, overpayment recoupments, SS Offsets) b. Automatically calculate the benefit payment amount based on the indemnity benefit type selected; the date of accident; and the average weekly wage contained in the claim record. c. On the oavment of permanent rate in the year of payment. ClearSight supports the full lifecycle of payment processing. There are several interrelated components that support the management of claim payables and the issuance of outgoing payments. The Payment Processing Module allows you to create check batches in order to process checks and check requests. A user may also view, delete, and update payment transactions from this screen. Only approved payment transactions will show in the Payment Processing Module. When payments are processed, checks are created and loaded into one or more check batches for processing. The check folder will contain a page to display all associated payment transactions. A batch is created for each bank account and each payment type (Request or Process). MARSH ClearSight Req. ID Business Requirement Yes No Comments impairment benefits on claims with a date of accident on or after 10/1/2016, and the payment of permanent total supplemental benefits, allow the adjuster to determine if permanent total supplemental benefits are payable. If the adjuster elects payable, then calculate the correct benefit amount that when added to the compensation amount will not exceed the maximum compensation rate in the year of payment. Import & Export Functionality Requirements Req. ID Business & System Requirement Yes No Comments 1 Ability to import an electronic First Report Yes of Injury data file from the City's 3rd party medical care management provider that contains numerous data elements and the auto generation of: (1) A new WC claim or "incident" (2) A new employee vendor record and (3) the payment transaction per each claim for the vendor's intake fee which is added to an accumulating monthly invoice for the vendor so that one check will be generated the lst of the following month for all of the previous month's intake fees. Each claim's intake fee must also be posted back to the claim when the check is generated and must also show as a "pending payable" prior to the check being generated. Yes, ClearSight uses both FROI and SROI EDI reporting for states using the IAIABC standards. We also have a tool to merge data onto other state forms in our library. 2 Ability to generate a new Claim export file Yes that contains the assigned claim number, assigned adjuster name and other data elements for each new claim just created to export back to the 3rd party medical care management vendor so that their system is updated and ready to begin the medical bill re -pricing process that will occur throughout the life of the WC claim. ClearSight allows for data to be exported in a mapping format that would be compatible with your requirements. The file format types that can be extracted are flexible and include but are not limited to fixed text, delimited text, xml, csv or Excel. These types of exports can either be scheduled or initiated by a user. 3 Ability to generate a daily check run export file for posting each check to the correct fund & expense object number in the City's financial system based upon user defined mapping of coverage type. Yes Yes MARSH ClearSight Req. ID Business & System Requirement Yes No Comments 4 Ability to import an electronic file of City Yes Attorney fees, Medical Case Management Fees, etc. and select the transaction type, from and thru service dates, transaction date and post to the individual claims as manual payments. Provide an exception report of any transaction rejected and not posted to a claim. Yes 5 Ability to import an electronic medical bill Yes data file from the City's 3rd party medical PPO/repricing vendor and auto generate the (invoice) pending payable to the correct medical provider on each claim including the amount of payment, transaction type, service from and thru dates, date check is to print, etc.; provides an exception manager that allows the rejected bills to be manually corrected & re -processed; and creates the payment transaction for the bill repricing fee which is added to an accumulating monthly invoice for the vendor so that one check will be generated the 1st of the following month for all of the previous month's bill processing fees. Each claim's bill repricing fee must also be posted back to the claim when the check is generated and must also show as a "pending payable" prior to the check being generated. Marsh ClearSight can store any field and code on the record, including but not limited to fatality, medical only, indemnity, subrogation, litigation and denials. We will map these fields during the data conversion process so that your carrier, vendor or TPA data is updated onto the claim and available in your reports. You can also choose to manually update these fields if you find that the data quality is not there from your carrier or TPA. 6 Ability to warn of possible duplicate Yes vendor payables when the medical bill import file is processed. Marsh ClearSight includes built in duplicate payment checking options which can be configured per line of business to check payments across multiple claims or on a single claim. These settings warn the user and can be configured to validate based on payee (vendor), payment sum, identical sums or sums within a named % of each other, payment date, payments within a named number of days or overlapping service periods. The system does allow for an override of the warnings and the entry of the appropriate payments if they are valid. MARSH ClearSight Req. ID Business & System Requirement Yes No Comments 7 Ability to generate a daily paid medical bill Yes payment export file for the City's 3rd party medical PPOIre-pricing vendor that contains the claim number, claimant name, check number, amount paid, date paid, Bill ID #, etc. as this vendor submits the State mandated medical bill EDI files to the State on behalf of the City. Yes, our experts work with you to integrate all data fields from and to outside systems, to report claims to other parties. Marsh ClearSight provides data translation and ongoing processing of data into any unbundled carriers' required format. We also support carriers' needs to consolidate incoming TPA data and provide tools for integrated reporting and administrator benchmarking. 8 Ability to auto generate a Low Reserve Yes Diary/Notification to the assigned adjuster when the electronic medical bill payables are generated and a low reserve condition results on a claim. For example claim has $500.00 in outstanding medical reserves and when the medical bill export is processed a medical payment for $525.00 is generated for this claim thus resulting in zero medical reserves on this claim, This is a trigger notification that can be set up during implementation or your Administrator will have the ability to generate this for you. 9 Ability to pull in various data elements for Yes the injured worker (i.e. WC Code, hourly rate of pay, union code, etc.) from the City's payroll/HR import files. Yes, these fields are fully customizable 10 Provide a two way interface with ISO for Yes all lines of coverage. Yes Configuration & Maintenance Functionalities A Ability to define, set up and maintain a First Report of Injury Data Import & New Claim Creation Process Configuration including, but not limited to, the following: (1) Map the various user defined data elements (i.e. default adjuster, Import Flag, Export Flag, etc.) required in the First Report of Injury new claim import & creation process (2) Map the vendor record for the City's current 3rd (Third Party Administrator) TPA vendor to be paid for the claim intake. (3) enter the 3rd (Third Party Administrator) TPA vendor's current claim intake fee schedule amount. Yes Yes, ClearSight integrates claim data with state reporting rules required for First Report and Subsequent Report of Injury compliance. Our FROI/SROI automation tools greatly reduce the amount of time adjusters spend preparing data for compliance reporting. MARSH ClearSight Req. ID Business & System Requirement Yes No Comments B Ability to define, set up and maintain a Yes Workers' Compensation Medical Bill Import & Claim Payable Process Configuration including, but not limited to, the following : (1) Map the various user defined data elements in the import file(i.e. Bill ID#, Payment Type, PPO Reduction Amount, Standard Reduction Amount, Bill Type, Payment Type, bill repricing fee, etc.) to the payable record that is created. (2) Map the vendor record for the current 3rd party medical bill re- pricing vendor to be paid for the bill repricing fee. (3) Map the transaction code to be used for the medical bill repricing fee transaction (payment). ClearSight claim financial totals are built utilizing customizable formulas. Multiple formulas can be created utilizing each of the seven buckets to determine an overall total incurred, paid, and outstanding for a claim. These formulas are available within reports as well as on -screen within the claim record. Any void, recovery, stop payment, etc. will be reflected accurately in the claim history. ClearSight includes point -in -time reporting which will also enable users to view incurred/paid amounts for any point in time for the claim. All credits that are entered would be viewable and would be included in calculation. Our out of the box functionality does not issue invoices, but the Report Module can be configured to create invoices. Payment/Reserve & Check Writing Functionality Requirements Req. ID Business Requirement Yes No Comments 1 Ability to post manual payments to a claim. Yes Yes 2 Ability to auto -generate recurring payments (non -Indemnity Benefits) on a claim to a vendor, i.e. pay attendant care to vendor XYZ in the amount of $XX0.00 every 2 weeks starting on X date and ending on XX date. Yes Yes 3 Ability to manually input invoices on a Yes claim and generate a pending payable. Yes 4 Ability to generate low reserves alerts and Yes place pending payables on "hold" until reserves are increased by the adjuster. Financial applications provide the flexibility to configure customized rules and maintain indemnity benefit calculations and unique screens for each jurisdiction. Schedules are integrated with full reserving functionality while capturing a complete audit trail of all record changes. Reserve worksheets allow clients to create worksheets for all lines of coverage enabling users to update and make notes on multiple financial buckets on one screen. Payment Processing is consolidated in one module to expedite payments. MARSH ClearSight Req. ID Business Requirement Yes No Comments 5 Ability to generate a "pending payable" Yes Yes report for auditing purposes prior to check generation, if needed. 6 Ability to export payables to a format Yes Yes required by the City's laser check writing system utilizing the RMIS generated check numbers and then update the payment data to the claim, i.e. date paid, check #, etc. if needed 7 Ability to void a previously issued check Yes Yes on a claim if needed. 8 Ability to generate a daily Positive Pay Yes Yes Export file for the City's bank that matches the daily check run if needed. 9 Ability to generate an ACH file for Yes Yes payments and post the payment to the claim, if needed. 10 Ability to input vendor invoices received Yes Yes on multiple claims from the same vendor on one invoice (payable) in order to issue one mass check and post the individual amounts back to each claim, if needed. 11 Ability to change a payment's transaction Yes Yes type and/or the service from and thru dates after a check is printed, if needed. 12 Ability to transfer a payment from one Yes Yes claim to another when a check is issued on the wrong claim, if needed. 13 Ability to generate check registers sorted Yes Yes by check number for a user defined check paid date range, if needed. 14 Ability to search unpaid invoices (pending Yes Yes payables) based on due date, payee, etc. and then select all in mass or individually select to print checks, if needed. 15 Ability to warn of possible duplicate Yes Yes invoices (payables) when a payable is being keyed into the system, if needed. MARSH ClearSight Req. ID Business Requirement Yes No Comments 16 Ability to process a check reconciliation Yes with the Cty's bank and update the payment's status from "outstanding" to "cleared", "stopped" or "voided" per the current monthly bank statement received and processed, if needed. ClearSight supports the full lifecycle of payment processing. There are several interrelated components that support the management of claim payables and the issuance of outgoing payments. The Payment Processing Module allows you to create check batches in order to process checks and check requests. A user may also view, delete, and update payment transactions from this screen. Only approved payment transactions will show in the Payment Processing Module. When payments are processed, checks are created and loaded into one or more check batches for processing. The check folder will contain a page to display all associated payment transactions. A batch is created for each bank account and each payment type (Request or Process). Worker's Compensation Indemnity Benefits (Florida) Functionality Requirements Req. ID Business Requirement Yes No Comments 1 Ability to auto calculate and generate all Yes types of Indemnity Benefit (i.e. TTD, TPD, IIB, PT, etc.) payments in accordance with FL Statue 440. We support the rules by state for benefits payments and for FROI submissions by state for all types of Indemnity Benefits. 2 Ability to add supplemental amounts Yes and/or deductions from the amount due on Indemnity Benefit payments. As an example the Lost Time Periods page tracks lost or restricted time from work caused by injury or illness. From the Lost Time Periods page you can create a new period to track Away From Work or At Work Restricted period types. When a lost or restricted time period is entered, the days are calculated for OSHA reporting and the Lost or Restricted totals. The lost or restricted time period is also used in the calculation of indemnity benefits (if configured). Data can be manually entered or it can be received from a carrier/TPA on a data conversion and populated into the fields. For OSHA reporting, we do cap the lost time days at 180. A user can create metrics once their data is captured to measure their days away from work or restricted duty by evaluating at a location level or higher with the organization. MARSH ClearSight Req. ID Business Requirement Yes No Comments 3 Ability to automatically calculate the New Yes Year's PT Supplemental Amount for Permanent Total Indemnity Benefits each January 1st. The New Year formula would have to be entered initially. 4 Ability to automatically adjust the PT paid Yes if the PT Supplemental Amount plus the PT exceeds the State's new yearly maximum. This would be a rule that triggers a correction or data can be manually entered or it can be received from a carrier/TPA on a data conversion and populated into the fields. 5 Ability to automatically terminate the PT Yes Supplemental Benefit when a claimant reaches their 62nd birthday or statutory retirement age. This is completed with a simple configuration 6 Ability to restart a benefit if previously terminated. Yes Yes 7 Ability to only have one open benefit at a Yes time. At this time the system requires a single open lost time on a claim at a time. No specific restriction to have only one open benefit at a time though. There is no concept of Open benefit in our system 8 Ability to track the weeks and days paid, Yes amount paid, from & thru dates, date paid, etc. for each benefit period by benefit type for each claim. Yes 9 Ability to add more than one payee for a Yes benefit, i.e. child support to the State. Yes 10 Ability to generate an Indemnity Benefits Forecast Report before generating the invoice (payables) for auditing purposes Yes We would require your specifications and to create a report. This is not standard template. 11 Ability to define Indemnity Benefit status Yes as either Active or In -Active. This is something that the system tracks at the Indemnity benefit schedule level. 12 Ability to search for Indemnity Benefits Yes based on status, claim #, name, type, etc. Yes (Indemnity Benefits record manager in the Claim Folder) 13 Ability to provide a summary Indemnity Yes Benefits screen for each claim that displays all Benefit Types & Periods paid with various data elements, i.e. Start & End Dates, Type of Benefit, Amount Paid to Date, Next Payment Due Date, Weeks & Days Paid, etc. and the ability to sort the list on any data element displayed. Yes MARSH ClearSight Req. ID Business Requirement Yes No Comments Configuration & Maintenance Indemnity Benefits (In Accordance with FL Statute 440) A Indemnity Payment Adjustment Types, i.e. Social Security Offset, transaction vs non -transactional adjustments, overpayments, etc. Yes Yes. Standard Indemnity Benefits functionality B Indemnity Payment Schedule Types (i.e. Yes weekly, bi-weekly, X # of days, etc.) Yes. Standard Indemnity Benefits functionality C How past due Indemnity payments or Yes lump sum benefits are to be handled, i.e., cut the check immediately or when due at the next scheduled due date. Yes. Standard Indemnity Benefits functionality D Payee Mapping to the vendor file. Yes Yes. Standard Indemnity Benefits functionality E Indemnity Benefit Types (i.e. Temporary Yes Total Disability, Temporary Partial Disability, Survivor Benefits, Permanent Total Disability, Income impairment Benefits, etc.) Yes. Standard Indemnity Benefits functionality F Benefit Parameters (Le. benefit percentage of average weekly wage, maximum & minimum rates for each benefit type for each calendar year) Yes Yes. Standard Indemnity Benefits functionality G Maximum Payment Duration or amount Yes by benefit type. Yes. Standard Indemnity Benefits functionality H Supplemental Adjustment Rate Percentage. Yes Yes, but may require some configuration during implementation Mandated State of Florida Worker's Compensation Claim "EDI" Functionalities Ability to meet all requirements of the State of Florida Workers' Compensation Claims EDI Mandate set forth by Rule 69L-56 and generate all required EDI transactions based on claim event (FROI and SROI transactions) for an injured worker becomes lost time (8th day of disability); generate the correct SROI transaction when the first check of indemnity is issued; generate the correct SROI transaction when the Sub Annual Reports are due; generate the correct SROI transaction when the Return to Work Date Yes Yes MARSH ClearSight Req. ID Business Requirement Yes No Comments is entered; generate a corrected FROI when the social security number is changed in the claim, etc. NOTE: There is a large number of claim events that trigger when an EDI transaction is required. J Provide for the daily transmission of the Yes Yes EDI transactions to the State of Florida, i.e. act as a Clearing House, K Provide for the receipt of the State's Yes Yes electronic acknowledgements and/or error messages daily and the ability to update the claim with this information, i.e. TA, TR, etc. L Ability to search all WC EDI transactions Yes Yes by status, type, state acknowledge codes, etc. M Ability to define, set up and maintain for Yes Yes the State of FL WC Claims EDl requirements configuration including, but not limited to, the following: Mapping for all of the various data elements (68+) and transaction codes to the State's data elements and codes. N Ability to have State of FL EDI fields Yes Yes automatically populate with data mapped from the claim. 0 Ability to have benefit amounts paid map Yes Yes from the claim to the corresponding SRO' transaction being completed. MARSH ClearSight Medicare (CMS) Center for Medicare/Medicaid Services "EDI" Functionality Requirements Req. ID Business Requirement Yes No Comments 1 Ability to meet all data capturing & EDI Yes requirements of Section 111 of the Medicare, Medicaid, and SCHIP Extension Act of 2007(MMSEA)(P.L.110-173) to include both the mandated quarterly claim input file and the non -mandated Monthly Query File to aid in determining Medicare Eligibility for claimants. Yes 2 Provide for the transmission of the EDI Yes transactions to CMS, i.e. act as a Clearing House. Yes 3 Provide for the receipt of the CMS's Yes electronic acknowledgements and/or error messages and the ability to update the claim with this information. Yes Configuration & Maintenance Functionalities A Ability to meet al! EDI requirements of Section 111 of the Medicare, Medicaid, and SCHIP Extension Act of 2007 (MMSEA) (P.L.110-173) and to provide complete automation of all required EDI transactions based on claim events, adding newly identified Medicare eligible claims to quarterly input file, settlements made on claims, updated ICD-9 (or ICD- 10) diagnostics codes contained in claim, ORM termination, etc. Yes Our Option 1 Solution, which utilizes ExamWorks Clinical Solutions as our reporting partner, does provide complete automation of the required transactions/reporting to CMS, provided that the client populates the appropriate information in the CMS module, reviews and corrects errors received in the response files. The Option 2 Solution allows the client to maintain claims data in our CMS solution and choose a reporting partner other than ExamWorks. While claims data can be set up and maintained within our system, files will be submitted to this reporting partner. The onus for compliance and proper reporting to CMS remains completely with the client and that reporting partner. B Ability to map information already contained in the claim to the appropriate CMS data fields per coverage type. Yes C Ability to "hard code" default settings per Yes coverage type such as plan company name, address, plan contact name, and plan insurance type, etc. Mapping of the client data per major coverage type to the appropriate CMS data fields is available. This mapping needs to be completed prior to reporting the information to CMS. Yes, through mapping that information as needed MARSH ClearSight Req. ID Business Requirement Yes No Comments Q Ability to create an alert that would notify Yes adjuster when a settlement has been paid on a Medicare eligible claim to populate the TPOC information for inclusion in the quarterly claim input file. The Event Table in the CMS User Guide drives when MIR Reportable claims will be reported in a quarterly submission. When an event listed in this table occurs, the claim will be included in the next quarterly submission for the RRE (provided all other CMS reporting requirements are also met.) E Ability to create an alert that would notify Yes adjuster when a closed claim has the statute toll for inclusion in the quarterly claim input file with ORM termination date. Same as D for an adjuster.. The Event Table in the CMS User Guide drives when MIR Reportable claims will be reported in a quarterly submission. When an event listed in this table occurs, the claim will be included in the next quarterly submission for the RRE (provided all other CMS reporting requirements are also met.) Property/Locations Management Functionality Requirements Functionality Requirements Req. ID Business Requirement Yes No Comments 1 Ability to track the various COPE data Yes elements (i.e. sq. footage, construction type, year built, year renovated, building height, roof type, # of stories, percentage sprinklers, alarms, occupancy type, Flood Zone, Wind Storm Zone, etc.) on City owned building locations The Location Manager is used to track location, COPE, values, and recommendation information. 2 Ability to capture and track recommendations on locations. Yes 3 Ability to capture and track loss expectancy on locations. 4 Ability to save attachments i.e. Word, Excel, PDFs, scanned images, etc. to locations. Yes Yes ClearSight includes several actuarial type reports, including loss triangulation reports for forecasting. These can be produced for any user -selected subset of data, including policy period, coverage, or organizational structure. Triangles are produced for Total Incurred Value (to facilitate analysis of total loss development), Paid Value (for payout patterns), and Frequency (for analysis of IBNR). The reports also display the development factors calculated from the triangulated data. Yes MARSH ClearSight Req. ID Business Requirement Yes No Comments 5 Ability to track values, i.e. building, contents, EDP, books, business interruption, etc. on all City locations on a quarterly basis and for at least 10 previous years also on a quarterly basis , if needed Yes Yes 6 Ability to generated location & values comparison reports, i.e. values as Yes Yes 7 Ability to generate change in values reports for locations. Yes Yes 8 Ability to generate location and values Yes reports based on previously values as of dates. Standard Reports may be run at a prior date, or "as of", to show previously recorded financial values and claims statuses. Marsh ClearSight has several multiple valuation reports for both claims and exposure values. Business Intelligence Ad Floc report writer provides the ability to incorporate prior valuations. The "as of" reporting option may be used in reports that are scheduled or run manually. You can choose a fixed as of date or use our "relative" dating feature. For example, a report can be scheduled to run monthly as of the last day of the month. 9 Ability to track all information regarding Yes Commercial Insurance Policies, i.e. carrier name, policy #, coverage, limits(per occurrence & aggregate), deductibles, co-insurance amounts, effective & expiration dates, policy type, i.e. occurrence versus claims made, broker, SIR amounts, perils, premiums budgeted & paid, exposure data, etc. and the ability to attached scanned documents, Word docs, PDF, etc. to each policy. ClearSight Policy Manager will store all pertinent information related to your current and historical insurance policies (e.g., limits, deductibles, policy terms, premium components, named insured's, etc.) for all primary and excess policies. Any new policy endorsements can be attached directly to the policy on the Attachments page to ensure the latest policy information is available at any time. MARSH ClearSight System Interface/Business Unit interactions The procured RMIS solution shall provide the capability to interface with existing City of Miami application (if needed) and the City's selected Third Party Administrator system(s). Security Requirements Req. ID Business Requirement Yes No Comments 1 Access Groups which limit users' access Yes to coverages, locations, notes/diaries categories, vendor, policies, (Le. each category can be set to ALL, Some or NONE and be able to define read only, read-write and delete access.) Since ClearSight utilizes security permission groups, the administrator can easily maintain and modify permissions across a number of users by updating the group permissions. The Administrator Module is provided to the designated system administrator (Business User and/or IT Staff) gives full control over the configuration of the system. This is the same GUI easy to use tool used by the MCS Implementation team to configure all aspects of the system . it is comprehensive in terms of managing, configuring and updating all aspect of the system. A short list of features include ability to access software modules and within them manage/change/add codes, labels, screen designs, new coverages, users security, workflow and notification rules, dashboards, password security, bank accounts escalations and virtually every other aspect of this flexible system 2 Access Groups which grant permissions, Yes i.e. view, add, edit, delete, etc. to various document types in the system based on coverage types Users are assigned to Security Groups to define their access levels and restrictions within the system. The Screen Access security permission controls the specific modules that can be accessed. The Entity Access security permission controls the specific actions and functions available to the user for each record type. Multiple Screen Layout Forms can be created for each record and can be further defined by record type. Each user will be assigned to the appropriate Screen Layout Form, which will specify what fields and layout they see within each record. Screen Layout Forms can also be used to indicate which data elements are viewable by users in the system. MARSH ClearSight Req. 19 Business Requirement Yes No Comments 3 Access Groups which define if a user can Yes add transactions, reserves, invoices, issue checks and establish maximum amounts for each type, if transaction(s) are allowed. Yes 4 Access Groups which limit users' access Yes to the standard delivered report templates, i.e. All, Some or None and defines users' ability to create, run, deleted or add ad hoc reports. Yes 5 Access Group which defines the types of Yes system administrator functions allowed for the client's System Administrators to set up and maintain security and all of the system configuration functions discussed throughout this document. Yes 6 Assign users to the various types of Yes access groups that reflect their job functions(s), i.e., Safety Group which could have read only access to WC claims info but no access to notes & diaries or WC Adjusting Group which would have full read-write access to all document types for WC claims and then read only access to all of document types for all of the Liability coverages, etc. Marsh ClearSight utilizes security permission groups, the administrator can easily maintain and modify permissions across a number of users by updating the group permissions. 7 Provide field level security for all data elements Yes Yes 8 Allow access to system functionalities Yes based on user groups and/or by individual user. Yes 9 Set up User Relationship Hierarchy that Yes defines users as supervisors or subordinates so that a supervisor can view all of their subordinates' tasks, diaries, claims, etc. and ability to escalate reserve increases, payment authorizations, etc. to the supervisor The Location Access permission defines the locations and departments that the user has access to within the system. Users are allowed access to all, none, or specified locations. Within each group, permissions may be defined as to what the user can do (open, view, edit, delete, add, print, etc.). All User IDs will be assigned to the appropriate permission sets to define the level of access from within the system. Modules, documents, and other data that users do not have access to are not visible in the GUI. MARSH ClearSight Req. ID Business Requirement Yes No Comments 10 Ability to copy an access group to a new Yes access group and modify as needed. Yes 11 Ability to copy an existing user's profile to Yes a new user and modify as needed. Yes 12 Password expiration options (i.e. all passwords expired every X days) and formats. Yes Yes 13 Ability to lock out system users after a Yes defined number of failed logon attempts The City of Miami may define the number of tries before lock out 14 Ability to log out users Yes Yes, standard offering 15 Ability to reset passwords Yes Yes, standard offering 16 Ability to deactivate a user and reassigned their open tasks/diaries to another active user and reactivate system users. Yes Yes, only takes minutes to complete. MCS supports user hierarchy and claims administration features that allow for the temporary or permanent reassignment of individual or blocks of claims using a GUI search and reassign feature. For example if George is out on short term disability a quick search can pull back all assigned claims and the supervisor can temporally reassign all claims, tasks and pending activity to his team mates. When George returns to work a quick search can return a list of claims where he is the permanent adjuster and claims have been reassign to a temporary adjuster and all claims can be assigned back at that time. 17 Ability to set up property user access Yes groups that will allow view access only to values but allow edit access to selected COPE data elements The Location Access permission defines the locations and departments that the user has access to within the system. Users can be restricted to access all, none, or specified locations and data elements. Within each group, permissions may be defined as to what the user can do (open, view, edit, delete, add, print, etc.). All User IDs will be assigned to the appropriate permission sets to define the level of access from within the system. Modules, documents, and other data that users do not have access to are not visible in the GUI. MARSH ClearSight Req. ID Business Requirement Yes No Comments 18 Provide access to the RMIS and ability to Yes run reports for users outside of the City's network, i.e. via the Internet. The City of Miami may give permission to access, the system to anyone they feel appropriate. As with regular users, restrictions for access down to an individual field can be applied. 19 Restrict users to a specific department(s) Yes or location(s) Yes, standard offering 20 Assign a department/location to a user Yes profile Yes, standard offering System Support & Maintenance Requirements Req. ID Business Requirement Yes No Comments 1 Long Term Support and Maintenance Yes Services: The Selected Proposer will provide long- term support and maintenance services. This includes warranties for 'glitches," functional deficiencies, performance issues, and user and technical support. The Selected Proposer will also provide to the City version upgrades as follows: 1. Release notes, updated documentation, updated online and live telephone help. 2. Information concerning legislative requirements. 3. Customer (User Groups) driven changes either reflecting functional deficiencies identified by customers or new business requirements, or reporting requirements identified by customers. Approximately 90% of our clients are on the latest SaaS version. The remaining clients are in the process of upgrading their systems. Marsh ClearSight follows an agile Software Development Life Cycle which is an iterative approach to software development. We have cross functional sprint teams that operate under a defined number of iterations for each release. Each release goes through from design to development, then manual and automated quality assurance testing in addition to user acceptance testing prior to being released and adopted by our client base. 2 Online Help and Support: The Selected Proposer will provide an Internet -based support system ("Support Help Desk") available seven (7) days a week, twenty-four (24) hours a day on the Service Provider's Website. The online help information must be updated as new functions are added or existing functions are remedied. All resolutions should allow system administrator the ability to edit Yes Our unlimited access help desk is available via phone, email, and self-service portal. Extended support coverage includes 24x7x365. All teams are trained on current features and functions, with back up subject matter experts for assistance. In addition to providing unlimited help desk support, the City of Miami will have a MARSH ClearSight Req. ID Business Requirement Yes No Comments and maintain program integrity. On -Line help module is not to take the place of Technical Systems Support as outlined in the section below. designated account team to handle your specific needs. The account team includes a System Consultant for day-to-day service needs and an Account Executive. The account team will be available by phone and email during normal business hours. Depending on your needs, other named resources may also be assigned. 3 Two (2) priority levels for City to categorize reported Software solution problems: • PRIORITY 1 - NORMAL REQUEST Selected Proposer will commence work on resolving the deficiency within twenty four (24) hours of notification and will keep City staff briefed until an acceptable resolution is achieved; PRIORITY 2 - PRIORITY REQUEST Selected Proposer will commence work on resolving the deficiency within twelve (12) hours (Monday - Friday) or within twenty four (24) hours (Saturday and Sunday) of notification and will keep City staff briefed until an acceptable resolution is achieved. Our SLA's are managed by severity and average time for resolution can depend on severity, priority and complexity of the issue. Average time can range from 1 hour to 8 hours. Reporting Requirements Req. ID Business Requirement Yes No Comments 1 Provide an extensive library of standard Yes claims & risk management template reports that are easy to generate for an end user and that provide report selection on all data elements, including user defined data elements and the ability to sort and totals. ClearSight has over 100 report templates available and includes a highly intuitive graphical point -and -click interface that allows even a novice user to set up reports that contain complex queries, sorts and graphs 2 Ability to provide claim file totals reports Yes that depict incurred, paid and outstanding values. Number of Closed Claims with payments; Number of Open Claims Incurred & Paid; Number of Reopened Claims and Grand Totals of all claims with Total Incurred, Paid & Outstanding Yes there are standard reports to complete this requirement. There is also a Claim Abstract report that shows all fields that can be manipulated to rearrange columns and fields. The Ad Hoc report is standard so City of Miami can create your own fields and to run reports in a variety of ways. MARSH ClearSight Req. ID Business Requirement Yes No Comments amounts. Must be able to run reports a variety of ways, i.e. by fiscal year, by excess policy year, for all locations, for selected locations, etc. 3 Ability to generate prior -valuation reports Yes Yes, reports allow for prior valuation where a report can be run at a certain point in time. For example a report can be run at prior fixed date. Also, it has the ability to run a report as a "relative date" such as "last day of previous quarter". The application system is smart enough to look at the current date and calculate the specified relative date accordingly 4 Ability to generate point in time Yes Standard Reports may be run at a prior comparison reports. date, or "as of, to show previously recorded financial values and claims statuses, ClearSight has several multiple valuation reports for both claims and exposure values. Business Intelligence Ad Hoc report writer will also allow you to incorporate prior valuations. The "as of" reporting option may be used in reports that are scheduled or run manually. You can choose a fixed as of date or use our "relative" dating feature. For example, a report can be scheduled to run monthly as of the last day of the month. Other examples are Some examples are 1) an on -demand peer comparison reports on purchasing patterns and pricing behavior for workers' compensation insurance. 2) an on - demand peer comparison reports on purchasing patterns and pricing behavior for directors' and officers' liability insurance, 3) on -demand peer comparison reports on purchasing patterns and pricing behavior for property "all-risk" and terrorism insurance. Peer groups can be selected based on a variety of criteria including total insured value (TIV) of property, industry (up to 20 major industry groups and 90-plus sub - industry groups), and location (region). 5 Ability to print reports across coverages to Yes include the ability to sort & total by coverage. MARSH ClearSight Req. ID Business Requirement Yes No Comments 6 Ability to generate claim abstract reports Yes with run time options to either include or exclude diary/notes and transactions. Clients may want to generate an invoice to the location of this premium charged. The invoice can be created with a Custom Abstract Report by pulling the fields from the Policy Manager Premium 7 Ability to generate the State SI-17 claims Yes report in both hard copy and in the State's required EDI format. 8 Ability to generate loss data extractions Yes and reports for the actuary by coverage and by fiscal year in summary format, 9 Ability to generate Loss Triangles by Yes coverage and by fiscal year. We have a standard template whereas our competitors do not have a standard. It is recommended that we review how you want your claims to be counted to determine if our standard triangle report will meet your needs. 10 Ability to save all output to display, to Yes printer or as file (i.e. PDF, Excel, Excel Data Only, Word, text, comma delimited, etc.) ClearSight reports can be exported to Microsoft Word, Adobe PDF, Microsoft Excel, Microsoft Excel Data Only, or Comma Delimited formats. Reports can also be output to HTML format for viewing within the ClearSight application. View and Search result sets can be exported into MS Excel format. 11 Ability to generate report output graphically. Yes ClearSight supports graphing and charting in both the standard and Business Intelligence report modules. Within the standard Reports Module there are four individual graph templates: Claim Graph, Transaction Graph, Policy Graph, and Location Graph. You can create pie charts or bar charts and view them in the HTML Graph Viewer and/or export the chart's data to MS Excel. These graph templates support user defined data selection and grouping of data and support drill -down capabilities. The Business Intelligence reporting module supports a comprehensive range of graphing capabilities and includes over 30 different 2D and 3D Bar, Line, Pie, Area and Radar Graph types. MARSH ClearSight Req. ID Business Requirement Yes No Comments 12 Ability to generate reports and distribute Yes via emails to users as defined in distribution lists. ClearSight Distributions allow users to generate reports on demand or schedule reports for automated generation. Users have the option to specify email recipients, 'burst" segments of the report to a specified distribution list and view completed reports in the distribution folder. Depending on the template, you may also be able to add alerts. 13 Ability to generate all loss runs and sort & Yes total based on the organizational structure. 14 Ability to generate security reports depicting each user and all of their assigned groups, rights, etc. Yes 15 Ability to generate audit reports by user Yes that depicts their system activity, date of activity, document actions, before and after values of data elements modified, etc. Ability to generate payment history reports for a vendor. 16 Ability to generate 1099 reporting. Yes 17 Provide an Ad Hoc Report Writer that is Yes easy for the casual end user to utilize, i.e. drop & drag data elements and to have these reports show details and/or summary data for claims, payments, vendors, etc. ClearSight standard ad -hoc report templates and the BusinessObjects Web Intelligence reporting tool let users format their output using click/drop/drag navigation. No special macro or formula building knowledge is required to build an ad -hoc report. 18 Ability to choose all system data elements Yes including client defined data elements in Ad Hoc reports. 19 Ability to provide summary totals on numeric data elements in the Ad Hoc reports. Yes 20 Ability to generate Occurrence reports. Yes 21 Ability to create and import custom reports with the report writer utilized by the RMIS. Yes These reports can include data elements from all Managers, including custom fields. Drill down functionality allows the user to drill into a summary report to find out what details are driving a trend. MARSH ClearSight Req. ID Business Requirement Yes No Comments 22 The ability to generate Policy/Coverage Yes specific reports (i.e. City of Aviation liability claim paid reports that are used to track the $50,000 self -insured retention and first layer of insurance with: (1) A monthly report for the property and casualty team and the brokers; (2) A weekly report for the liability adjusters who handle Aviation claims.) Our system includes a library of reports. We have a team of reporting consultants that can engage with you should you have any need that cannot be met with our standard reporting capabilities and share best practices they have seen utilized at other clients 23 Ability to create workers' compensation Yes and liability specific reports and loss claims reports. 24 The ability to generate fiscal reporting on Yes claims assessments. 25 The ability to generate fiscal year- end Yes data extract for actuarial financial reporting. 26 Reporting Samples shall include: Financial/Actuarial Issues A. Produce reports on demand, in- house, and on a date range basis. B. Report generation criteria to accommodate most any type of study (i.e., multiple date range specifications, to generate Toss development quarterly, semi- annually, annually, monthly basis, managed care vs. fee for service, by batch number, check date, check number range, contractor, etc.). C. Download results of reports to an application such as MS Access or Excel. D. Output results of reports to database file captured and electronically transmitted to another system (SFTP, etc.) E. Built-in functions/features used to perform calculations within the generated financial report. F. Drill -down functionality for certain report generators (Example: Cost of Allocation report depicts projected premium amounts for entire City, then drill down capability to the Department level or Union level). Yes ClearSight has over 90 report templates available and includes a highly intuitive graphical point -and -click interface that allows even a novice user to set up reports that contain complex queries, sorts and graphs. The user interface is designed to provide the ultimate power in reporting to the even the most novice users. This is supported through a point and click interface and the use of a library of standard report templates. The user simply selects a template from the library and determines what section or subsection of claims to include by pointing and clicking on data fields and entering dates and then selecting from a drop down menu of system data fields to define how the information should be sorted and displayed. ClearSight also includes an ad hoc report template builder which allows users to create basic report templates by clicking and dragging claim, location or transaction fields into the desired report format. All data stored in ClearSight is available for reporting. Reports can be filtered, sorted, or grouped by virtually any field to meet the client's business needs. ClearSight has several different levels of ad hoc reporting capabilities. All of the standard report templates support ad hoc sort and selection criteria. MARSH ClearSight Req. ID Business Requirement Yes No Comments G. Generate casualty and property cost of risk allocation (CORA) reports, and invoices, on -site; and correlate the location codes within the account to their associated budget entities. The invoices generated shall be part of an accounts receivable system that will allow monitoring of cash collections and production of cash collection reports and accounts receivable reports. H. Transmit invoices to paying entities via electronic fax or e-mail. Production Reports A. Produce such system generated reports on a hierarchical basis; for example, a Chief Financial Officer and Directors get production reports on everyone in a department in their section, etc. B. Produce reports from criteria based on a claim condition or multiple claim conditions for all claim data elements. C. Produce reports on date basis. D. Produce reports on a value basis. E. Produce reports on multiple bases, such as number of claims assigned, number claims worked, number claims closed, and number claims in open status, etc. F. Produce reports from criteria based on a text string in a defined field. G. Produce reports for multiple years' activity. H. Generate claim abstract reports on the basis of a variety of selection criteria and report output criteria. I. Create ad hoc report templates. J. Produce reports on a claim summary or claim detail basis. Safety/loss prevention reports A. Produce reports on demand, including but not limited to safety recommendations submitted by department or location. B. Library of generic, commonly used reports, as defined by Departments that may be executed on a one -click or one -click and simple data entry Yes The lowest level of ad -hoc reporting capability begins with 'Dashboard Views". These are essentially advanced queries or saved searches that incorporate Boolean logic which can be defined by the user into their result set. Within each ClearSight module, the individual users have the ability to structure a savable ad -hoc view from any field within that module's data table. The user can also define the data elements that are displayed with the view. Once created, these views are dynamic and automatically updated. Views can be placed on the homepage or exported into MS Excel format. ClearSight also includes an ad hoc report template builder which allows users to create their own detail claim, transaction or location based report templates by clicking and dragging claim, location or transaction fields into the desired output layout. For clients that use Business Intelligence Reporting, BusinessObjects supports full ad hoc report development. The Business Intelligence toolset in ClearSight provides a complete suite of performance information management reporting, query and analysis tools. ClearSight Business Intelligence facilitates state of the art reporting and graphing and enables clients to create their own report templates on the fly that include summary or detailed information, charts, graphs, performance management indicators (KPI), alert icons, traffic lights, progress bars, and gauges. Drill down functionality allows the user to drill into a summary report to find out what details are driving a trend. Because the information is also often consolidated from multiple sources, it can provide an aggregate view of potentially disparate and highly distributed data. Defined reports built using any of the above methods may be grouped into user specific libraries. ClearSight claim based reporting templates and graphs allow for the grouping by any of the safety or loss control related data elements stored on a claim. Also, the Business Intelligence reporting tool allows MARSH ClearSight Req. ID Business Requirement Yes No Comments basis. C. Ad hoc query writing capacity/capability with to query on any/all data elements stored in system. D. Run reports on a specified point -in - time basis. E. History component in the database to allow as of queries and to combine history and current data files to obtain one consolidated report. F. Graphing & charting capabilities, with multiple types of graphs/charts to select from, with switch from one type of graph/chart to another so that user can choose the most favorable as a final selection. G. Download into Microsoft Office Products (Excel, Access, etc.) and/or other database applications. H. Produce reports on a summary or detail basis. I. Output results of report to electronic file suitable for downloading to other application, attaching to e-mail for transmission or electronic fax. J. Reports shall run against a live database — data updated on continual basis. K. Security measures incorporated such that developing, generating, or running certain reports can be restricted or limited to specific data or ranges of data for certain users in accordance with specifications prescribed by the Department. L. Produce reports on a hierarchical basis, such as on a budget entity level/sub-level basis, with the built-in to drill down or drill up through such hierarchy. M. Combine data files such that exposure data and claim data can be queried simultaneously for the purpose of calculating such things as rates (# WC claims/100 FTE or # AL claims/100 vehicle units, etc.) N. Develop and save certain report writers such that they can be run on a periodic basis with automatic updates you to assemble this data in your own specified formats. All of the reporting tools support point in time reporting or the comparison of multiple valuation points, allowing you to combine causal data trends with their financial development over time. Administrator module can be secured by user and provides tools for handling all system administration and setup related to security and data access. Since ClearSight utilizes security permission groups, the administrator can easily maintain and modify permissions across a number of users by updating the group permissions. Using our business intelligence reporting capabilities, reports, charts, and graphs can pull in and display exposure, claim, and location information in various ways. This reporting mechanism allows the end user to customize and configure reports as they need. Reports can be output to different formats and used for presenting all information in an organized way. Many clients use ClearSight to manage litigated claims or matters. Important dates and notes can be stored on these claims. We can set security permissions so that attorney notes can be hidden from view unless you have proper rights. Date, Coded, Financial and Description Fields may be stored on the claim record. Legal notes can be maintained within the Notes tab. Notes are well organized and can be sorted and filtered by when the note was entered, the user who entered the note or by note category. Notes can also be searched by keywords. Many paralegals find that the note search is helpful when trying to find a particular word or phrase contained within the note. Notes can also be viewed outside of ClearSight. Notes can be displayed with the claim abstract report or can be exported with a notes reports template. Attorney Contact Information is stored on the Claim. You can see all the other claims or records attached to that particular attorney record through the link on the MARSH ClearSight Req. ID Business Requirement Yes No Comments of the report results. O. Access to report generation routines provided to authorized insured entity personnel such that these personnel can execute certain safety/loss control reporting processes, both pre- defined and user defined, subject to restrictions defined by Department. Litigation and Legal Information Reports A. Identify/isolate litigated claims. B. Select on legal claims on basis of multiple selection criteria such as defense attorney, claimant attorney, court of jurisdiction, legal action status (pending, in trial, resolved, etc.), outcome of litigation (settled, plaintiff award, defense award, appealed, etc.) and/or on affiliated dates (date to legal, trial date, assignment to defense counsel date, legal advertisement date, settlement date, review/evaluation date, etc.). C. Execute reports of legal claim assignments to defense attorney firms for the purpose of determining the number of claims assigned to specified firm(s), amount paid to firm(s), number of active claims, and/or other information related to the assignment of a legal claim to an attorney firm. D. Automated production of reports to adjuster/supervisor personnel when claim reaches certain pre -defined legal status such as plaintiff/defense attorney payment exceeds defined limit, or other such status as defined by the Department E. Customized report production, based on standards prescribed by Department, to facilitate selection of defense attorney firm to which a newly litigated claim is to be assigned. F. Produce legal reports based on in- house assignment to State Attorney General's office vs. assignment to private firm. record. ClearSight includes various date, number, text and status fields for litigation management purposes. These fields, used in conjunction with the notes, diaries and rolodex modules, allow for comprehensive tracking and reporting of all information related to litigated claims. The fields that are established for litigation management purposes can be used in conjunction with the standard reporting tool or with the Business Intelligence reporting tool. The full power of the Marsh ClearSight system is realized through the reporting modules. Marsh ClearSight uses two modules for reporting — a comprehensive library of standard Crystal Reports (over 80) and integrated Business Objects for full featured, ad -hoc business intelligence reporting. Standard reports will provide the City of Miami with a standard set of templates for reporting. This information can be sorted, queried and filtered to quickly accommodate most reporting needs. The Business Objects module takes that capability to the next level. Integrated Business Objects provides users with an ad - hoc reporting tool to easily create and save reports on the fly. What historically required tens of hours of custom report development can now be accomplished by a trained end user in a fraction of the time. Ad -hoc reporting in Business Objects, coupled with the existing Marsh ClearSight standard report library, will provide the tools to effectively monitor information, identify trends and opportunities to improve and mitigate losses. The Business Intelligence tool provides your organization reporting beyond standard reports. It allows users comprehensive data access, ad -hoc intuitive report design tools and powerful analytic capabilities which can help organization make better decisions for directing their business. MARSH ClearSight Req. ID Business Requirement Yes No Comments Contractor Reports A. Produce reports based on selection of any data element(s) stored in Contractor file, including, but not limited to, Contractor number, federal tax identification number, type of Contractor, location of Contractor, lien status, Contractor status (active/inactive), etc. B. Correlate Contractor information with payment information to produce reports. C. Detect duplicate Contractors in Contractor file based on criteria specified by Department and merge duplicate Contractor records into one record where appropriate. D. Produce reports to facilitate review of information related to the generation of IRS1099 forms or other required/mandated reporting prior to the actual generation of such forms. F. Review Contractor usage rates F. Search the Contractor file on basis of any/all data elements stored in such file. Bulk Reports A. Provide for capability to produce large volume reports as the need presents itself. B. Output results of large volume reports to electronic file suitable for downloading to PC -based database application or similar. Yes Yes MARSH ClearSight Pricing Proposal Attachment C — Price Schedule Proposer shall provide a detailed list of all costs to provide all services as detailed in Section 3 Specifications/Scope of Services, as proposed by using Attachment C, Price Schedule, located in the Header section of this solicitation. Any costs not labeled on the Price Schedule shall be included via a supplement attachment provided by Proposer. Should the City determine the pricing unreasonable, the City reserves the right to negotiate cost(s) or seek another vendor for the provision of said service(s). Failure to submit compensation proposal as required shall disqualify Proposer from consideration, Risk Management information System RFP No. 681390 Attachment C Price Schedule Instructions: The Proposer's price shall be submitted on this form, "Price Schedule", and in the manner stated herein. Proposer is requested to fill in the applicable blanks on this form and to make no other marks. 1. Total One -Time Costs for Initial Term (Years 1 through 3) The Proposer shall state its price for providing the Risk Management Information System (System) as stated in Section 3, Scope of Work. The proposed price shall be a not to exceed flat rate and shall include all tasks deemed necessary to provide the System. The proposed price shall include all fees including one-time and recurring, and value added options. Description Proposed One -Time Cost Year 1 Year 2 Year 3 1 System Design $ $ $ 2 Software (Initial cost) $ 81,200 $ 81,200 $ 81,200 3 Hardware $ $ $ 4 Installation/Customization $ 45,363 $ 45,363 $ 45,363 5 Data Migration $ 10,150 $ 10,150 $ 10,150 6 Training (including training materials) $ 1,820 $ 1,820 $ 1,820 7 Maintenance (annual recurring) $ $ $ 8 Client Support $ 4,200 $ 4,200 $ 4,200 9 Data Hosting $ $ $ 10 Other One -Time Costs $ 2,800 $ 2,800 $ 2,800 Total Price For Each Year $ 145,533 $ 145,533 $ 145,533 Total One -Time Cost for Initial Term (Years 1-3) Total price should be the aggregate price for the three years listed above. $436,599 Note: The City of Miami may extend the initial three year pricingfor five years, and thus reduce the total cost per year to $87,319. Notes: 1. The City reserves the right to correct and recalculate any errors found in the Proposer's calculation. 2. Proposer should use a separate paper to itemize any recurring annual and monthly costs for maintenance and support. Include base and optional features, as well as other Risk Management Information System RFP No. 681390 issues that impact pricing. The total cost for the recurring maintenance cost should match row 7 above. 3. Proposer should use a separate paper to itemize all other one-time costs, including but not limited to enhancements, proposed modules, third party software, etc. The total cost for other one-time costs should match row 10 above. 2. Option to Renew Years (Three, One -Year Periods) Proposer shall state its price below for the cost of maintenance and technical support during the optional renewal years. Description Annual Fee Year 4 Maintenance and Technical Support $ 100,107 Year 5 Maintenance and Technical Support $ 100,107 Year 6 Maintenance aid Technical Support $ 100,107 3. Additional Services The Scope of Work outlined herein identifies that work that the Successful Proposer shall perform under the Agreement. To address future City requests for any additional work, modifications, or changes outside of the scope of work, please provide not -to -exceed hourly rates for personnel who will be assigned to this contract. Use additional paper if required. Personnel Not -To -Exceed Hourly Rates Project Manager/Lead Person $ Programmer $ Trainer $ $ $ $ Notes: 1. The rates above in Section 1 shall be fixed and firm for the initial contract term. The rates for the option -to -renew years shall be negotiated 90 days prior to the renewal of the contract for each option to renew period. Any extension to the Contract will be at the then current rates. 2. All out-of-pocket expenses, including employee travel, per diem and miscellaneous costs and fees, should be included in the Proposer's price, as they will not be reimbursed separately by the City. Refer to Florida Statute 112.061, regarding adherence to travel expenses. 3. Sections 1 through 3 will be used to determine the price points for the price criteria as indicated in Section 5.1, Evaluation Criteria of this Solicitation. 4. Notwithstanding the proposed hourly rates in Section 3 above, the City reserves the right to negotiate the not -to -exceed pricing on a project by project basis, at the City's sole discretion. Risk Management Information System RFP No. 681390 5. The positions identified in the table above shall be the same as the key positions identified in the Proposer's proposal. The City expects that the personnel in those positions will be performing the services. MARSH ClearSight 30. Provide Proposer's most recent certified business financial statements as of a date not earlier than the end of the Proposer's preceding official tax accounting period, together with a statement in writing, signed by a duly authorized representative, stating that the present financial condition is materially the same as that shown on the balance sheet and income statement submitted, or with an explanation for a material change in the financial condition. A copy of the most recent business income tax return will be accepted if certified financial statements are unavailable. Marsh & McLennan Companies is a global professional services firm with approximately 52,000 employees and annual revenues exceeding $13 Billion. Marsh & McLennan Companies is the parent company of 1) Marsh, the world's largest risk management consulting and insurance brokerage firm; 2) Guy Carpenter, the risk and reinsurance specialist; 3) Mercer, the provider of HR and related financial advice and services; and 4) Oliver Wyman, the management consultancy. Marsh & McLennan Companies is publicly traded and listed on the New York, Chicago, and London Stock Exchanges under the ticker symbol MMC. Marsh ClearSight financials are rolled into the Marsh and McLennan Companies, Inc. financials which are publically available on the Marsh & McLennan Companies, Inc. website: www.mmc.com MARSH ClearSight References Broward County Pinellas County, Florida City and County of Denver Andrews Avenue 400 S. Fort Harrison Avenue 1437 Bannock St. Fort Lauderdale, FL 33301 Clearwater, FL 33756-5165 Denver, CO 80202 Karen Gaither, Risk IT Manager Ms. Virginia E. Holscher, CPCU; Ms. Robin Gray, Administrator 1, Bureau Director, Risk Risk Management Management (954) 357-7238 (727) 464-3559 (720) 913-3333 Client since 2002, Claims Client since 2005, Full solution Administration, Check Writing, including Worker Comp Claims OSHA Administration Since 2000, Full Solution MARSH CLEARSIGHT Preliminary Statement Marsh ClearSight LLC ("Marsh ClearSight") hereby submits this Preliminary Statement as part of its response to The City of Miami, Florida (the "City") Request for Proposal No. 681390 for a Risk Management Information System (the "RFP"). Prior to the commencement of any work in connection with this RFP and notwithstanding any provision to the contrary in the RFP, Marsh ClearSight and the City must have executed a mutually acceptable agreement that incorporates preferably all or substantially all of the terms and conditions included in the form provided by Marsh ClearSight herewith and subject to negotiation and modification by the parties (the "Marsh ClearSight Form," attached hereto as "Exhibit A"). The City acknowledges and agrees that its acceptance of Marsh ClearSight's tendered submission in response to the RFP constitutes acceptance and agreement that Marsh ClearSight does not accept the terms in the RFP, and specifically Appendix B, the Professional Services Agreement, absent further discussion and negotiation with the City. Accordingly, rather than Appendix B, Marsh ClearSight proposes the use of the Marsh ClearSight Form as the starting form of the contract between Marsh ClearSight and the City due to the fact that the Marsh ClearSight Form specifically incorporates the standard software licensing contractual arrangements, license restrictions, payment terms, contract term, and termination for convenience provisions and indemnification obligations which reflect the existing Marsh ClearSight hosted SaaS subscription license model. Additionally, Marsh ClearSight prefers that any mutually -acceptable contract stand on its own rather than incorporate the RFP, its several exhibits and the Marsh ClearSight RFP response, The is because in Marsh ClearSight's experience post -award contract negotiations and discussions surrounding any new system implementation result in both scope creep and level of effort creep, thereby rendering statements in any RFP and it exhibits and vendor responses thereto either insufficient or partially or wholly incorrect. Additionally, Marsh ClearSight provides below certain examples of provisions within Appendix B that either require negotiation or with which Marsh ClearSight, due to its business and SaaS subscription license models, must provide alternate language. Appendix B modifications/adaptations Section Number Recitals Explanation of necessity for modification or adaptation/alternative language Marsh ClearSight software as a service applications are licensed, not sold; therefore perpetual licensing in not offered. Instead, Marsh ClearSight is licensed in a subscription term format, which can be offered on a recurring basis. On this basis, Marsh ClearSight requires that any contract between the parties omit references to a perpetual license. 3.B Marsh ClearSight notes that the original language in Appendix B, as Professional Services Agreement, relates more to various services that under Florida law may require occupational licenses or permits, typically the construction or fabrication industries. The software as a service solution offered by Marsh ClearSight requires no such licenses or permits and on that basis Marsh ClearSight respectfully 001 MARSH MARSH CLEARSIGHT w4 L. requests that any contract between the parties omit such references. 3.0 Marsh ClearSight has similar concerns regarding Section 3.0 in that licenses, permits and certifications are not required for the risk management information system software as a service solution offered by Marsh ClearSight. Similarly, references to "physically capable" employees are inapplicable. On these bases, Marsh ClearSight respectfully requests that any contract between the parties omit such references. 6.B Due to the risk of breaching its confidentiality and information security obligations to its other clients, Marsh ClearSight cannot agree to any form of comprehensive audit or site inspection rights, including of its technology controls; however, Marsh ClearSight can and will provide the City its most recent SSAE 16 SOC 1 Type II Report. On this basis, Marsh ClearSight requires this clause be stricken from any contract between the parties. 10 Marsh ClearSight requests the City provide a definition of the phrase "legally defective" as contained in this Section as on its own the phrase may have specific meaning that should be defined in any contract between the parties. Marsh ClearSight is willing and able to negotiate both mutually -acceptable indemnification and limitation of liability clauses, though our standard indemnification provision in any contract is limited to third party intellectual property infringement claims, is limited in scope and subject to exclusions. 11 Except for the inclusion of consequential and incidental damages, which Marsh ClearSight cannot agree to, the Default language in this section is largely acceptable; however, any default determination must be subject to a standard thirty (30) day cure period. 12 The langue in this section is problematic in that the City Manager, as arbiter of any dispute, poses an inherent conflict of interest in the subject matter of any dispute between the parties. Marsh ClearSight proposes the following as the first tier of any dispute resolution process: (A) Project Manager Review - the Licensor Project Manager and Client Project Manager shall meet in person or by telephone conference to review the issue that is the subject of the dispute; (B} Management Review - if the dispute is not able to be resolved by Project Manager Review as set forth in clause (A) above within ten (10) business days of the Project Manager Review meeting or telephone conference, a member of Licensor's senior management team shall meet in person or by telephone conference with a member of Client's senior management team to review and attempt to resolve the dispute. In the event that any good faith dispute relating to the payment of Fees due arises, (i) Client agrees to (1) pay any undisputed portions of any invoice(s) in accordance with the provisions of this Agreement and (2) provide Licensor with notice of any such dispute within fifteen (15) days of the invoice date; and (ii) either party may attempt to resolve the issue that is the subject of the dispute. The foregoing notwithstanding, nothing in the dispute escalation process outlined above shall at any time delay or prevent either party from exercising any or all remedy(ies) that may be available to such party at law or in equity. Marsh ClearSight suggests the following mediation clause be inserted as the next- I0 MARSH MARSH CLEARSIGHT 13.A 14 level tier of a dispute resolution process: If the designated representatives cannot resolve the dispute within 30 days of the initial request to negotiate, then the parties shall attempt to settle the dispute by submitting the dispute to JAMS for non -binding mediation. Either party may commence mediation by providing to JAMS and to the other party a written request for mediation, setting forth the substance of the dispute and the relief requested. The parties will cooperate with JAMS and with each other in selecting a mediator from the JAMS pane! of neutrals and in scheduling the mediation proceedings. All offers, promises, conduct and statements, whether oral or written, made in the course of the mediation by or on behalf of any of the parties and by the mediator and any JAMS personnel are confidential, privileged and inadmissible for any purpose in any litigation or other proceeding involving the parties, provided that evidence that is otherwise admissible or discoverable shall not be rendered inadmissible or non -discoverable as a result of its use in the mediation. Either party may seek equitable relief prior to the mediation to preserve the status quo pending completion of the process. Except for an action to obtain such equitable relief, neither party may commence a civil action with respect to the matters submitted to mediation until after the completion of the initial mediation session, or 45 days after the date of filing the written request for mediation, or 30 days before the statute of limitations governing any cause of action relating to such dispute would expire, whichever occurs first. On a case -by -case basis, Marsh ClearSight will agree to a termination for convenience right. That termination for convenience right may be negotiated but must be subject to a mutually -agreed prior notice period. Marsh suggests the following language be used in any contract between the parties but remains willing and able to negotiate aspects of this clause: This Agreement may be terminated by Client without cause during the second or third contract years, provided that Client supplies Licensor with written notice of its intention to terminate at least one hundred and twenty (120) days in advance and pays to Licensor, prior to the effective date of termination, (1) the full amount of any fees related to implementation or migration services performed by Licensor, regardless of any payment schedule set forth in the applicable Statement of Work, (2) a surcharge in the amount of ten percent (10%) of the Annual Fee set forth in the applicable Statement(s) of Work; and (3) all other amounts due and owing Licensor through the effective date of termination. As a wholly -owned subsidiary of Marsh & McLennan Companies, Inc. ("MMC"), and due to the fact that MMC obtains insurance coverage for its subsidiaries on an ongoing rather than a per -contract basis, Marsh ClearSight will engage MMC for review and potential modification of any insurance requirements included in the RFP. Marsh ClearSight must also point out that as a wholly -owned subsidiary of Marsh & McLennan Companies, Inc., it is subject to MMC policies and therefore cannot provide the City with "duplicate copies of the policies of such insurance" and on that basis, Marsh ClearSight respectfully requests that any contract between the parties omit this requirement. Furthermore, due to the fact that MMC obtains insurance for its subsidiaries on an ongoing and annual basis, Marsh ClearSight cannot agree to have its coverages be subject to the approval of the City's Risk Management Administrator and 000 MARSH MARSH CLEARSIGHT respectfully requests this requirement also be omitted from any contract between the parties. Lastly, in regards Section 14.C(ii) Marsh ClearSight cannot agree to a termination right as recited in this subsection or to pay "re -procurement damages." 16 As a subsidiary of a global corporation, MMC, which may be subject to transactional activity, Marsh ClearSight requires the ability to be able to assign the Contract in its entirety to a successor to all or substantially all of its business or assets. On this basis Marsh ClearSight respectfully requests that any contract between the parties include the ability to assign the contract to such a successor. 18.A The various clauses in this section are largely acceptable; however, in Section 18.A, the inclusion of waiver language regarding venue or jurisdiction is unnecessary given that the first sentence of the section states the parties' agreement on governing law and venue. 30 Marsh ClearSight offers a Limited Warranty to its Clients that is subject to a Disclaimer. This warranty, provided to all Marsh ClearSight Clients, cannot be altered and on that basis Marsh ClearSight respectfully requests that the alternative wording found in Section 7 of the Marsh ClearSight Form be used in any contract between the parties. 31.0 All applicable documentation is available online through the Marsh ClearSight solution. On that basis, Marsh ClearSight respectfully requests Section 31.0 be omitted from any contract between the parties. 000 MARSH MARSH CLEARSIGHT EXHIBIT a Software as a Service Agreement for Click here to enter text. CLICK HERE TO ENTER A DATE. This document and any recommendations, analysis, or advice provided by Marsh ClearSight herein (collectively, the "Information") are intended solely for the entity identified as the recipient herein ("you"). This document contains proprietary, confidential information of Marsh ClearSight and may not be shared with any third party, including any insurance producer, without Marsh ClearSight's prior written consent or as otherwise authorized by Marsh ClearSight. Any statements concerning legal matters are not to be relied upon as legal advice, for which you should consult your own professional advisors. Any modeling, analytics or projections are subject to inherent uncertainty, and the information could be materially affected if any underlying assumptions, conditions, information, or factors are inaccurate or incomplete or should change. Except as may be expressly set forth in the Agreement, Marsh ClearSight makes no representation or warranty in or with respect to this document, shall have no obligation to update the Information and shall have no liability to you or any other party with regard to the Information. 04 MARSH MARSH CLEARSIGHT CONFIDENTIAL INFORMATION SOFTWARE AS A SERVICE AGREEMENT This SOFTWARE AS A SERVICE AGREEMENT (this "Agreement") is entered into as of Click here to enter a date, (the "Effective Date") by and between Marsh ClearSight LLC, a Delaware limited liability company with offices at 540 West Madison Street, Chicago, Illinois 60661 ("Marsh ClearSight"), and Click here to enter text., a Click here to enter text. with offices at Click here to enter text. ("Client"). In consideration of the mutual agreements contained herein and intending to be legally bound hereby, Marsh ClearSight and Client hereby agree to all of the following terms and conditions. 1. Definitions. (a) "Affiliate" shall mean, with respect to a party, its ultimate parent company and all or entities under common control of such parent company (through direct or indirect ownership of more than fifty percent (50%) of the voting stock or rights, by control of a majority of the directors of the corporation, by contract or arrangement, or otherwise). (b) "Application Documentation" shall mean, in Web -based form, each of the manuals, user guides, technical specification documents and other instructional and reference materials generally distributed by Marsh ClearSight regarding the SaaS Application, all as updated and redistributed by Marsh ClearSight from time to time. (c) "Client Data" shall mean the data provided or inputted by or on behalf of Client, including personally identifiable information, for use with the SaaS Application, excluding any Confidential information of Marsh ClearSight. (d) "Confidential Information" shall mean, collectively, this Agreement, as well as all confidential and proprietary information of a party, including, without limitation, regarding a party's business plans and strategies; products and technology; software, source code and object code; clients or prospective clients; data models; inventions, developments, formulae and processes; know-how, show -how, discoveries, improvements, works of authorship, concepts, mask works, and ideas, or expressions thereof, whether or not subject to patents, copyright, trademark, trade secret protection or other intellectual property right protection (in the United States or elsewhere); and whether or not stored, compiled or memorialized physically, electronically, graphically, photographically or in writing. Client Data shall be considered Confidential Information of Client. (e) "Fees" shall mean the applicable access, usage, implementation, conversion, customization, consulting, maintenance, support and services fees payable pursuant to this Agreement, including as set forth in the Products and Services Schedule. (f) "Marsh ClearSight Technology" shall mean the SaaS Application and Application Documentation. (g) "Products and Services Schedule" shall mean the terms pursuant to which Marsh ClearSight shall provide and Client shall purchase the Services, which is attached hereto as Exhibit A. (h) "Proprietary Rights" shall mean all copyright, patent, trademark, trade secret and other intellectual property and proprietary rights. (1) "Restricted Entity" shall mean any individual, partnership, limited liability company, corporation, joint venture, trust, association or other entity owned or controlled by, or acting as an agent for, any individual or entity with whom a U.S, citizen, national, or company organized under the laws of or operating in any state or territory of the U,S, is prohibited from engaging in any transactions by U.S. laws, including without limitation, an individual on the Specially Designated Nationals List published by the United States Department of the Treasury's Office of Foreign Assets Control ("OFAC"), or any other individual or entity with whom or which transactions are prohibited by OFAC regulations. (j) "SaaS Application" shall mean the online Web -based application described in the Products and Services Schedule and provided by Marsh ClearSight to Client under this Agreement via http://www.marshclearsight.com and/or other Web sites FORM Marsh ClearSight SOFTWARE AS A SERVICE AGREEMENT SAAS TEMPLATE Version: July 15, 2016 Oil MARSH CONFIOENTML INFORMATION designated by Marsh ClearSight including, without limitation, access to associated offline application components as well as all updates, upgrades, new versions, modifications, subsequent releases of such Web -based application or different Web -based applications, platforms or editions. (k) "Service Provider" shall mean a third -party service provider of Client's or of its Affiliate(s) that provides services on behalf of and for Client or its Affiliate(s) (and not as a service bureau). (I) "Services" shall mean the implementation, support, maintenance, programming and other services specified in the Statement(s) of Work, work orders or services addenda, or otherwise provided by Marsh ClearSight pursuant to this Agreement, including the Products and Services Schedule. (m) "Statement of Work" shall mean a Statement of Work entered into by the parties submitted on a form issued by Marsh ClearSight and signed by Client that includes the type and details of the specific Services ordered by Client; such Statement(s) of work shall be acknowledged to be incorporated by reference into this Agreement. (n) "User" shall mean an individual (including an employee or agent of a Service Provider) using or accessing the SaaS Application. 2. SaaS Application Usage Guidelines and Restrictions. (a) Usage Guidelines. Subject to all the terms and conditions of this Agreement, Marsh ClearSight hereby grants to Client, for the term set forth in the applicable Statement(s) of Work, a non-exclusive, non -transferable, non -assignable, non- sublicensable, limited right for Client and its Affiliates (subject to Sections 2(d) and (e)} to access, display and use the Marsh ClearSight Technology solely for the internal business purposes of Client and its Affiliates and to manage information relating only to Client and its Affiliates, but not any third parties, and not for any other purpose or in any other manner. (b) Usage Restrictions. Nothing in this Agreement shall be construed as a grant to Client of any right to, and Client shall not, and shall not permit any third party to: (i) reproduce any of the Marsh ClearSight Technology or any portion thereof except as authorized by Marsh ClearSight; (ii) distribute, disclose or allow use of any of the Marsh ClearSight Technology, or any portion thereof, in any format, through any timesharing service, service bureau, network or by any other means, to or by any third party; (iii) decompile, disassemble, or otherwise reverse engineer or attempt to reconstruct or discover any source code or underlying ideas or algorithms of the Marsh ClearSight Technology in any manner; (iv) create derivative works from, modify or alter any of the Marsh ClearSight Technology in any manner whatsoever; (v) use the SaaS Application or any component thereof (excluding Client Data) to construct a database of any kind or to improve the quality of any data sold or contributed by Client to any third party; (vi) store the SaaS Application (excluding Client Data), in its entirety or in any part in databases for access by Client or any third party; (vii) distribute any database systems containing data (excluding Client Data) obtained from the SaaS Application; (viii) create Internet "links" to or from the SaaS Application or "frame" or "mirror" any of Marsh ClearSight's content which forms part of the SaaS Application (for the avoidance of doubt, creation of corporate Intranet "links" to the SaaS Application is not a violation of this Section 2(b)(viii)); (ix) use or access the Marsh ClearSight Technology in a manner, or act otherwise in any manner, that could damage, disable, overburden, or impair any Marsh ClearSight servers or the networks connected to any Marsh ClearSight server; (x) interfere with any third party's use and enjoyment of the Marsh ClearSight Technology; or (xi) attempt to gain unauthorized access to the Marsh ClearSight Technology, accounts, computer systems, or networks connected to any Marsh ClearSight server through hacking, password mining, or any other means. (c) Users. The number of permitted Users shall be as set forth in the Products and Services Schedule. Client acknowledges and agrees that each User shall access and use the Marsh ClearSight Technology through a unique and reasonably secure username/user identification and password. Except for Client's and its Affiliates' system administrators where reasonably necessary for administrative or security purposes, no User may use the username/user identification or password of any other User. 2 CONFIDENTIAL INFORMATION (d) Third Party Access. Subject to Section 2(e), Client shall also have the right for Client and Affiliates to permit its Service Providers to access, display and use the Marsh ClearSight Technology solely for the benefit of Client and its Affiliates, and in accordance with the terms and conditions of this Agreement, provided that: (i) except as otherwise expressly agreed by Marsh ClearSight in writing, no such Service Provider is engaged in, or is an affiliate or subsidiary of any individual or entity engaged in, the business of providing software or software -as -a - service for the management of risk, claims or compliance matters; (ii) Client shall provide thirty (30) days' advance written notice of such Service Provider to Marsh ClearSight and Marsh ClearSight does not object to such Service Provider within fifteen (15) days of Marsh ClearSight's receipt of such notice from Client; and (iii) no Service Provider shall have any right to access, display or use the Marsh ClearSight Technology unless the Service Provider has agreed in writing in advance: {1) to be bound by at least the same restrictions with respect to the Marsh ClearSight Technology as Client, and (2) to use, access and display the Marsh ClearSight Technology solely for the benefit of Client or Client's Affiliates and as necessary to perform the Service Provider's authorized duties for or on behalf of Client or its Affiliates. (e) Affiliates, Service Providers; Generally. Client acknowledges and agrees that: (i) those of Client's Affiliates who will be using, accessing or displaying the Marsh ClearSight Technology shall be set forth on Schedule 2(e)(i), as amended from time to time, of this Agreement. Client shall provide an updated list of such Affiliates to Marsh ClearSight semi-annually if there are any changes or additions to such list of Client's Affiliates; (ii) any rights granted hereunder with respect to the Marsh ClearSight Technology to any of Client's Affiliates and Service Providers shall expire or terminate immediately upon the expiration or termination of the Agreement in accordance with its terms; (iii) all access and use of the Marsh ClearSight Technology by Client's Affiliates and Service Providers shall be subject to all of the terms and conditions of this Agreement; (iv) Client shall be fully responsible for (1) ensuring the compliance of all such Client's Affiliates and Service Providers with the terms and conditions of this Agreement; and (2) all violations of the terms or conditions of this Agreement by Client's Affiliates and Service Providers; and (v) Each of Client's Affiliates shall have the right to enter into separate Statements of Work for such Affiliate's access and use of the SaaS Application and the Services to be performed by Marsh ClearSight for the benefit of such Affiliate. Any such Statement of Work shall be acknowledged to be incorporated by reference into this Agreement and shall be subject to the terms and conditions of this Agreement. (f) Proprietary Rights. As between Client and Marsh ClearSight, Client acknowledges that Marsh ClearSight is the exclusive owner of all right, title and interest in and to all Marsh ClearSight Technology and all Proprietary Rights related thereto, regardless of any participation or collaboration by Client in the design, development or implementation of any such Marsh ClearSight Technology. No title or ownership of Proprietary Rights in and to the Marsh ClearSight Technology, or any component thereof, is transferred to Client, its Affiliates or any third parties hereunder. To the extent that any such Proprietary Rights do not otherwise vest in Marsh ClearSight or its licensors, Client hereby agrees to promptly assign such Proprietary Rights to Marsh ClearSight or its licensors, and to do all other acts reasonably necessary to perfect Marsh ClearSight's or its licensors' ownership thereof, without additional consideration of any kind. (g) Notices of Infringement; Assistance. In the event Client discovers or is notified of an actual or suspected infringement or misappropriation of the rights of Marsh ClearSight or its licensors in or to the Marsh ClearSight Technology, or any component thereof, or any unauthorized disclosure of, access to, or use of the Marsh ClearSight Technology (each, an 3 CONFIDENTIAL INFORMATION "Infringement"), Client shall: (i) immediately notify Marsh ClearSight of such known or suspected Infringement; and {ii} terminate such Infringement if and to the extent within Client's or its Affiliates' control. (h) Proprietary Notices. Client shall not remove any copyright, patent, trademark or other proprietary or restrictive notice or legend contained in any of the Marsh ClearSight Technology, and Client shall reproduce all such notices and legends on all copies of the Marsh ClearSight Technology that are permitted to be made hereunder. Client further agrees to reasonably cooperate with and assist Marsh ClearSight (at Marsh ClearSight's sole expense) in protecting, enforcing and defending Marsh ClearSight's rights in and to the Marsh ClearSight Technology. (i) Client Obligations. In furtherance of the foregoing, Client shall: (i) provide Marsh ClearSight with reasonable access to Client's premises as appropriate to enable Marsh ClearSight to perform its obligations hereunder; (ii) provide adequate resources to participate in or facilitate the performance of the Services; (iii) timely participate in meetings relating to the Services; (iv) assign personnel with relevant training and experience to work in consultation with Marsh ClearSight, if applicable; (v) provide the equipment and software (including obtaining any third party software licenses) required to operate the SaaS Application in accordance with, and to otherwise comply with, the hardware/software specifications for the SaaS Application; (vi) safeguard the user ID's, passwords and other security data and methods furnished to Client in connection with the SaaS Application and prevent unauthorized access to or use of the Marsh ClearSight Technology; (vii) be responsible for all maintenance and compliance with laws, if applicable, of Client networks, equipment and system security required or appropriate in connection with the SaaS Application; (viii) have sole responsibility for the accuracy, quality, integrity, legality, reliability and appropriateness of all Client Data; (ix) transmit, and cause its Affiliates and Service providers to transmit, Client Data in an encrypted format, to be mutually agreed by the parties, if Client Data is transmitted by electronic transfer or sent in physical media by or on behalf of Client; and (x) take such other actions as are required of Client pursuant to this Agreement, including without limitation, the Products and Services Schedule. (j) Client Warranty; Client Data. The parties acknowledge and agree that during the term of this Agreement Client, its Affiliates, the Service Providers or other third parties may disclose certain Client Data, including personally identifiable data regarding employees or other individuals, to Marsh ClearSight for the benefit of Client or its Affiliates. Client represents and warrants to Marsh ClearSight that: (i) Client, its Affiliates, the Service Providers and such other third parties are authorized to disclose the Client Data to Marsh ClearSight for use pursuant to this Agreement; (ii) such disclosure does not and shall not violate applicable law or, if applicable, Client's or its Affiliates' agreements with or privacy notices to individuals with respect to whom the Client Data relates; and (iii) Client shall not request Marsh ClearSight to use, disclose or otherwise process Client Data in any manner that would not be permissible under applicable law or, if applicable, Client's or its Affiliates' agreements with or privacy notices to individuals with respect to whom the Client Data relates, if done by Client. (k) Non -Marsh ClearSight Events. Client acknowledges and agrees that Marsh ClearSight shall not be responsible or liable for any delay or failure in its performance of any duties or obligations pursuant to this Agreement, including, without limitation, under the Products and Services Schedule or schedule hereunder, if such delays or failures result or arise from any Non -Marsh ClearSight Events. "Non -Marsh ClearSight Events" shall mean, collectively: any (i) act or omission of Client, its Affiliates or the Service Providers, including without limitation, any delays by Client in its performance or cooperation with respect to the obligations set forth in Section 2(i) or the Products and Services Schedule; (ii) failures of Client's or third party equipment or software (other than the SaaS Application); or (iii) Force Majeure Event (as defined below). 3. Services. During the term of this Agreement, Marsh ClearSight or its Affiliates shall perform the Services set forth in the applicable Statement(s) of Work incorporated by reference into this Agreement in accordance with the terms of this Agreement, including the Products and Services Schedule. 4 CONFIDENTIAL INFORMATION 4. Fees and Payments. (a) Fees. Client shall pay to Marsh ClearSight the fees set forth in the applicable Statement(s) of Work incorporated by reference into this Agreement or as otherwise agreed in writing by the parties. Fees for additional services or expenses, if any, will be invoiced monthly as incurred. (b) Expenses. Client shall reimburse Marsh ClearSight for all reasonable, documented out of pocket travel, lodging, mead and other expenses reasonably incurred by Marsh ClearSight in the course of performing the Services. (c) Taxes. Client shall be liable for any taxes (including but not limited to federal manufacturers' and retailers' excise, state and local sales and use taxes, and personal property taxes), public charges, tariffs, and export and import duties, however designated, and any interest and penalties thereon, arising under this Agreement, other than taxes based on Marsh ClearSight's income. Any taxes assessable on Client's use of the SaaS Application shall also be borne by Client. All such taxes shall be included in amounts invoiced to Client. (d) Payments. All Fees under this Agreement shall be payable by Client pursuant to and in accordance with the Payment Schedule set forth in the Statement of Work or as otherwise agreed by the parties, and shall be due within thirty (30) days of invoice date. Invoices shall be issues by Marsh ClearSight or its Affiliates, as appropriate. Payments remitted after forty-five (45) days shall bear interest at one percent (1%) per month or, if less, the maximum rate allowed by law. Except as provided in Sections 6(b) and 8(a), all Fees paid hereunder are non-refundable. If Client does not pay an invoice by the later of seventy-five (75) days after its due date or fifteen (15) days after notice that Marsh ClearSight intends to terminate this Agreement for nonpayment, then this Agreement and all of Client's rights hereunder will terminate without further notice. 5. Confidentiality. (a) Confidential Information. Each party acknowledges and agrees that during the term of this Agreement it may be furnished with or otherwise have access to Confidential Information of the other party. The party that has received Confidential Information (the "Receiving Party"), in fulfilling its obligations under this Section 5, shall exercise the same degree of care and protection with respect to the Confidential Information of the party that has disclosed Confidential Information to the Receiving Party (the "Disclosing Party") that it exercises with respect to its own Confidential Information, but in no event shall the Receiving Party exercise less than a reasonable standard of care. The Receiving Party shall only use, access and disclose Confidential Information as necessary to fulfill its obligations under this Agreement, including the Products and Services Schedule, or in exercise of its rights expressly granted hereunder. Receiving Party shall not directly or indirectly disclose, sell, copy, distribute, republish, create derivative works from, demonstrate or allow any third party to have access to any of Disclosing Party's Confidential Information; provided, however, that: (i)(1) Receiving Party may disclose the Disclosing Party's Confidential Information to its Affiliates who have a need to know, and (2) Marsh ClearSight shall have a right to disclose Client's Confidential Information to Client's Affiliates and Service Providers, and Marsh ClearSight's employees and other agents; and (ii) all use of the Disclosing Party's Confidential Information shall be subject to all the restrictions set forth in this Agreement. (b) Exclusions. The following information shall not be considered Confidential Information subject to this Section 5: (i) information that is publicly available or later becomes available other than through a breach of this Agreement; (ii) information that is known to the Receiving Party or its employees, agents or representatives prior to such disclosure or is independently developed by the Receiving Party or its employees, agents or representatives subsequent to such disclosure; or (iii) information that is subsequently lawfully obtained by the Receiving Party or its employees, agents or representatives from a third party without obligations of confidentiality. If the Receiving Party is required by law to disclose any portion of the Disclosing Party's Confidential Information, including, without limitation, pursuant to the terms of a subpoena, court order or otherwise by applicable law, Receiving Party shall give prior timely notice of such disclosure to Disclosing Party to permit Disclosing Party to seek a protective or similar order, and, absent the entry of such an order, Receiving Party shall disclose only 5 CONFIDENTIAL INFORMATION such Confidential Information as is necessary be disclosed in response to such subpoena, court order or other similar document. (c) Survival. The obligations set forth in this Section 5 shall expire two (2) years after termination or expiration of this Agreement; provided, however, that the confidentiality obligations for Confidential Information constituting trade secrets (as determined under applicable law) shall survive the termination or expiration of this Agreement for as long as such Confidential Information remains a trade secret. 6. Term and Termination. (a) Term. This Agreement shall commence upon the Effective Date and remain in effect for three (3) years, unless terminated sooner in accordance with this Section 6 (the "Initial Term"). Thereafter, this Agreement shall automatically renew for additional three (3}-year periods (each, a "Renewal Term") unless either party gives the other party notice of its election to non -renew at least one hundred twenty (120) days prior to the end of the then -current Term provided that: (i) Client is not in breach of this Agreement and is current on all amounts due Marsh ClearSight under this Agreement; (ii) Client acknowledges and agrees that: (1) each such Renewal Term will be at Marsh ClearSight's then -current rates (subject to subpart (iii) below); (2) the SaaS Application available to Client and supported by Marsh ClearSight during any Renewal Term may be a different version or release than as available and supported during the prior term; and (3) Client will also be responsible for all Fees and expenses associated with any additional Services agreed upon between the parties at Marsh ClearSight's then -current rates; and (iii) Client acknowledges and agrees that Marsh ClearSight shall be entitled to increase the Fees in each year of the Renewal Term by an amount equal to five percent (5%) of the Fees in the prior year. Notwithstanding the foregoing, Client will also be responsible for all other applicable Fees and expenses associated with any additional access to the SaaS Application and Services agreed upon between the parties at Marsh ClearSight's then -current rates. The Initial Term and each Renewal Term shall collectively be referred to as the "Term." Each Statement of Work shall be in effect for the term set forth within that Statement of Work. (b) Termination. This Agreement may be terminated by: (i) Marsh ClearSight pursuant to Section 4(d) or Section 8(a); or (ii) either party if the other party breaches any material term and fails to cure such breach within thirty (30) days after receipt of written notice thereof. If Client terminates the Agreement for Marsh ClearSight's breach in accordance with this Section 6(b), Marsh ClearSight shall refund to Client, within forty-five (45) days of the effective date of such termination, any prepaid but unearned Fees paid to Marsh ClearSight in advance by Client. (c) Events Upon Expiration, Termination. Upon the expiration or termination of this Agreement for any reason, Client shall: (i) promptly cease all use of the Marsh ClearSight Technology; (ii) promptly discontinue providing access to and remove all links to the Marsh ClearSight Technology; (iii) within ten (10) business days after expiration or earlier termination of this Agreement, return to Marsh ClearSight, or upon Marsh ClearSight's request, destroy, all copies of the Marsh ClearSight Technology in Client's, its Affiliates and the Service Providers' possession or control; and (iv) within fifteen (15) business days after expiration or earlier termination of this Agreement, certify in writing to Marsh ClearSight that it has done all of the foregoing, Upon any expiration or termination of this Agreement, Marsh ClearSight shall invoice Client for all accrued Fees, including, without limitation, the full amount of any implementation fees specified in the applicable Statement of Work, and all reimbursable expenses, and Client shall pay the invoiced amounts, including from previously issued invoices, within ten (10) business days of Client's receipt of such invoice or, if applicable, of the expiration or earlier termination of this Agreement. (d) Survival. Except as otherwise set forth herein, in the event of termination of this Agreement for any reason, the provisions of Sections 2(f) and (j), 5, 6(c), 7(e) and (f), 8, 9, 10, 11, 13 and 14, as well as all payment obligations, shall survive. 6 CONFIDENTIAL INFORMATION 7. Limited Warranties and Disclaimer. (a) SaaS Application Warranty. Marsh ClearSight warrants that the SaaS Application will perform in all material respects in accordance with the Application Documentation when used in accordance with the terms of this Agreement on the hardware and with the third -party software specified by Marsh ClearSight from time to time. Client's sole remedy for any breach by Marsh ClearSight of the warranty provided in this Section 7(a) shall be replacement of the nonconforming functionality in the SaaS Application, at Marsh ClearSight's sole expense, as described herein. If Client discovers that any functionality in the SaaS Application fails to conform to the warranty provided in this Section 7(a), Client shall give Marsh ClearSight written notice of such nonconformity within thirty (30) days after delivery of the SaaS Application or component thereof to Client and promptly after such discovery (and, in no event later than five (5) business days after expiration of the Warranty Period (as defined below)). Marsh ClearSight shall deliver to Client replacement the SaaS Application, a work -around and/or an error/bug fix as may be necessary to correct the nonconformity. In the event that Client gives Marsh ClearSight notice of an apparent nonconformity that Marsh ClearSight reasonably determines is not due to any fault or failure of the SaaS Application to conform to the warranty provided herein, all time spent by Marsh ClearSight resulting in such determination, including time spent attempting to correct the problem, shall be charged against Client's client service hours, or, if client service hours have been exhausted, charged to Client at Marsh ClearSight's then current hourly rate for such services. (b) Services. Marsh ClearSight represents and warrants that the Services shall be performed in a professional and commercially reasonable manner consistent with the standard of care exercised by Marsh ClearSight in performing similar services for other clients. Client's sole remedy for breach of this warranty shall be re -performance of the nonconforming Services, provided that Marsh ClearSight must have received written notice of the nonconformity from Client no later than thirty (30) days after the original performance of the Services by Marsh ClearSight. (c) Virus. Marsh ClearSight warrants that, to the best of Marsh ClearSight's knowledge, prior to its access by Client, the SaaS Application does not contain any programming devices (e.g., viruses, key locks, back doors, trap doors, etc,) which would: (i) disrupt the use of the SaaS Application or any system, equipment or software to which Client's networks are interfaced or connected; or (ii) destroy or damage data or make data inaccessible or delayed, except for file and purge routines necessary to the routine maintenance of the SaaS Application (collectively, "Disabling Code"). Marsh ClearSight will use reasonable practices and security procedures necessary to avoid insertion of Disabling Code prior to the delivery of the SaaS Application to Client and, as Client's sole remedy, shall remove any such Disabling Code so inserted, at Marsh ClearSight's cost and expense. (d) Authority. Each party represents and warrants that it has full power and authority to enter into this Agreement and grant the rights granted herein. (e) Disclaimer. EXCEPT AS OTHERWISE EXPRESSLY STATED IN THIS AGREEMENT, MARSH CLEARSIGHT MAKES NO WARRANTY OR REPRESENTATION WHATSOEVER, EITHER EXPRESS OR IMPLIED, WITH RESPECT TO THE MARSH CLEARSIGHT TECHNOLOGY OR SERVICES, INCLUDING QUALITY, PERFORMANCE, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON -INFRINGEMENT. NO MARSH CLEARSIGHT AGENT OR EMPLOYEE IS AUTHORIZED TO MAKE ANY EXPANSION, MODIFICATION OR ADDITION TO THIS LIMITATION AND EXCLUSION OF WARRANTIES IN THIS AGREEMENT. Marsh ClearSight or its Affiliates may provide the Client with modeling and/or business analytics services, including hazard loss and catastrophe modeling, loss forecasting and triangles, adverse event simulation, scenario and portfolio risk analysis, decision mapping, risk bearing and risk retention tolerance analysis and insurance program evaluation analysis ("Modeling and Analytics"). Modeling and Analytics services will be based upon a number of assumptions, conditions and factors. If any of them or any information provided to Marsh ClearSight or its Affiliates are inaccurate or incomplete or should change, the Modeling and Analytics provided by Marsh ClearSight or its Affiliates could be materially affected. These services are subject to inherent uncertainty, and actual results may differ materially from that projected by Marsh ClearSight or its Affiliates. They are provided solely for the Client's benefit, and do not constitute, and are not intended to be a substitute for, actuarial, accounting or legal advice. Neither Marsh ClearSight nor its Affiliates shall have liability to any third party in connection with these services or to the Client 7 CONFIDENTIAL INFORMATION with regard to any services performed or provided by a third party. Except as permitted under this Agreement, the Client shall not share any of the Modeling and Analytics work product with a third party without Marsh ClearSight's prior written consent. Client agrees and acknowledges that Marsh ClearSight or its Affiliates shall not be responsible for: (i) any acts, omissions, delays, inaccuracies, errors or any other failure caused by Client's, its Affiliates' or any Service Providers' computer systems, hardware or software (other than the SaaS Application), including by interfaces with such third party software, or any inaccuracies that such systems may cause within the SaaS Application; (ii) any inaccuracies in or failures of the SaaS Application to conform to the Application Documentation arising out of the use of a version or release of the SaaS Application other than the most recent version or release provided to Client by Marsh ClearSight; (iii) any data that Marsh ClearSight receives from Client or third party sources and including the data's accuracy or completeness, or Client's claim handling decisions; (iv) Client's failure to encrypt Client Data; (v) Client's failure to use available security features within the SaaS Application; or (vi) the SaaS Application to the extent it is modified by anyone other than Marsh ClearSight. To the extent the SaaS Application utilizes Internet systems to transmit data or communications, Marsh ClearSight disclaims any liability for interception of any such data or communications, including of encrypted data not solely due to Marsh ClearSight's breach of its obligations hereunder. Client agrees that Marsh ClearSight shall have no responsibility or liability for any damages arising in connection with access to or use of the Marsh ClearSight Technology by Client, its Affiliates, or Service Providers other than as authorized by this Agreement. Marsh ClearSight is also not responsible for the security, reliability or continued availability of the telephone lines and equipment outside of Marsh ClearSight's direct control used to access the SaaS Application. (f) Third -Party Websites. The content of third party Websites, systems, products or advertisements that may be linked to the SaaS Application are not maintained or controlled by Marsh ClearSight. Marsh ClearSight is not responsible for the availability, content or accuracy of third party Websites, systems or goods that may be linked to, or advertised on, the SaaS Application. Marsh ClearSight does not have any responsibility for, nor: (i} make any warranty, express or implied, with respect to the use of the links provided on, or to, the SaaS Application; (ii) guarantee the accuracy, completeness, usefulness or adequacy of any other Websites, systems, products or advertisements that may be linked to or referenced in the SaaS Application; or (iii) make any endorsement, express or implied, of any other Web sites, systems, products or advertisements that may be linked to or referenced in the SaaS Application. (g) Warranty Period. The representations and warranties contained in this Section 7 regarding the SaaS Application shall be in force during the Term (the "Warranty Period"). 8. Indemnification by Marsh ClearSight. (a) Indemnification; Infringement. Marsh ClearSight agrees to indemnify, defend, settle, or pay any claim or action against Client, its Affiliates, and their officers, directors, members, managers, shareholders, and employees for infringement of any U.S, patent or copyright arising from Client's use in accordance with this Agreement of the SaaS Application. If the SaaS Application or any part of the SaaS Application is held to infringe and the use thereof is enjoined or restrained or, if as a result of a settlement or compromise, such use is materially adversely restricted, Marsh ClearSight shall, at its own expense and as Client's sole remedy therefor, either: (i) procure for Client the right to continue to use the SaaS Application; or (ii) modify the SaaS Application to make it non -infringing, provided that such modification does not materially adversely affect Client's authorized use of the SaaS Application; or (iii) replace the SaaS Application with a functionally equivalent non -infringing program at no additional charge to Client; or (iv) if none of the foregoing alternatives is reasonably available to Marsh ClearSight, terminate this Agreement and refund to Client any prepaid but unearned Fees paid to Marsh ClearSight in advance by Client prior to the effective date of the termination. (b) Exclusions. Marsh ClearSight's indemnification obligations under Section 8(a) shall not apply where the claim is based in whole or in part on: (i) modifications to the SaaS Application or any component thereof made by anyone other than Marsh ClearSight; (ii) use of the SaaS Application in combination with a product not supplied by Marsh ClearSight; (iii) use of the SaaS Application other than in accordance with this Agreement or the Application Documentation; or (iv) use of a version of the SaaS Application other than the most recent version or release provided to Client by Marsh ClearSight. 8 CONFIDENTIAL INFORMATION (c) Conduct. Marsh ClearSight shall have the sole right to conduct the defense of any such infringement claim or action and all negotiations for its settlement or compromise, and to settle or compromise any such claim. Client agrees to cooperate and ensure that its Affiliates cooperate with Marsh ClearSight in doing so. Client agrees to give Marsh ClearSight prompt written notice, in no case longer than within seven (7) days of receipt or discovery, of any threat, warning, or notice of any such claim or action, with copies of any and all documents Client, its Affiliates or Service Providers may receive relating thereto. 9. Indemnification by Client. Client agrees to indemnify, defend and hold harmless Marsh ClearSight, its Affiliates, and all their officers, directors, members, managers, shareholders, employees and other agents for and against any damage, cost, liability, expense, claim, suit, action or other proceeding, to the extent based on or arising in connection with any breach of this Agreement by Client, its Affiliates or the Service Providers. 10. Limitations of Liability. (a) Disclaimer. IN NO EVENT WILL MARSH CLEARSIGHT BE LIABLE UNDER OR IN CONNECTION WITH THIS AGREEMENT FOR INDIRECT, SPECIAL, PUNITIVE, INCIDENTAL OR CONSEQUENTIAL DAMAGES IN ANY ACTION ARISING FROM OR RELATED TO THIS AGREEMENT, WHETHER BASED IN CONTRACT, TORT, INTENDED CONDUCT OR OTHERWISE, INCLUDING WITHOUT LIMITATION, DAMAGES RELATING TO THE LOSS OF PROFITS, INCOME, GOODWILL OR REVENUE, COSTS INCURRED AS A RESULT OF DECISIONS MADE IN RELIANCE ON THE MARSH CLEARSIGHTTECHNOLOGY, LOSS OF USE OF THE MARSH CLEARSIGHT TECHNOLOGY OR ANY OTHER SOFTWARE OR OTHER PROPERTY, LOSS OF DATA, THE COSTS OF RECOVERING OR RECONSTRUCTING SUCH DATA OR THE COST OF SUBSTITUTE SOFTWARE, SERVICES OR DATA, OR FOR CLAIMS BY THIRD PARTIES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. (b) Limitation of Liability. UNDER NO CIRCUMSTANCES SHALL MARSH CLEARSIGHT'S AGGREGATE MAXIMUM LIABILITY UNDER OR IN CONNECTION WITH THIS AGREEMENT EXCEED THE PAYMENTS ACTUALLY MADE TO MARSH CLEARSIGHT HEREUNDER DURING THE TWELVE (12) MONTHS PRECEDING THE DATE ON WHICH ANY CLAIM IS MADE AGAINST MARSH CLEARSIGHT. 11. Publicity. (a) Promotional Use. Marsh ClearSight may publicize the fact that Client has engaged in the authorized use of the Marsh ClearSight Technology. Marsh ClearSight may so use Client's name and brand image or trademark according to Client's published guidelines for such use and will not state or imply that Client endorses or recommends the Marsh ClearSight Technology. Marsh ClearSight may interview, videotape or otherwise record Company's employees and, if applicable, contractors to gather information for creating any documentation describing Company's use of the SaaS Application. Company will obtain any necessary permissions or releases from its employees or contractors participating on Company's behalf regarding such interviews, whose names, pictures, likenesses, videotaped appearances, or quotes appear in promotional materials generated by Marsh ClearSight. (b) Database Information. From time to time Marsh ClearSight or its Affiliates may compile and sell databases of risk management information. Subject to Marsh ClearSight's confidentiality obligations set forth in Section 5 herein, Client agrees that Marsh ClearSight or its Affiliates may use de -identified and/or aggregated Client Data for these purposes. (c) Press Releases. Except as otherwise expressly provided in Section 11(a), neither party shall issue a general press release naming the other party regarding the existence of this Agreement without the prior written consent of the other party. 12. Foreign Use. If Client chooses to access the SaaS Application from outside the United States, it is responsible for compliance with foreign and local laws. The Marsh ClearSight Technology is not available through Marsh ClearSight or its Affiliates to any Restricted 9 CONFIDENTIAL INFORMATION Entity. Client represents and warrants that it is not a Restricted Entity and is not using the Marsh ClearSight Technology on behalf of or for the benefit of a Restricted Entity. 13. General. (a) Client shall not have the right to assign, transfer, or sublicense any obligations or benefit under this Agreement without the prior written consent of Marsh ClearSight. Except as otherwise provided herein, this Agreement shall be binding on and inure to the benefit of the respective successors and permitted assigns of the parties. (b) Any notice required or permitted to be delivered pursuant to this Agreement shall be in writing and shall be deemed delivered: (i) upon delivery if delivered in person; (ii) three (3) business days after deposit in the United States mail, registered or certified mail, return receipt requested, postage prepaid; (iil) upon transmission if sent via facsimile, with a confirmation copy sent via overnight mail; or (iv) one (1) business day after deposit with a national overnight courier, in each case addressed to the following addresses: If to Marsh ClearSight: Marsh ClearSight LLC Attn: Chief Executive Officer 540 West Madison Street Chicago, IL 60661 Facsimile: (312) 627-6172 With a copy to: If to Client: Click here to enter text. Marsh ClearSight LLC Attn: Senior Counsel 540 West Madison Street Chicago, IL 60661 Facsimile: (312) 627-6172 or to such other address as may be specified by either party hereto upon notice given to the other. (c) The failure of either party to enforce any of its respective rights under this Agreement at any time for any period shall not be deemed or construed a waiver by such party of such rights. (d) Notwithstanding any provision hereof, for all purposes of this Agreement each party shall be and act as an independent contractor and not as partner, joint venturer or agent of the other party and shall not bind nor attempt to bind the other party to any contract or other undertaking. (e) No changes or modifications to or waivers of any provision of this Agreement shall be effective unless evidenced in a written amendment that is signed by authorized representatives of both parties. (f) In the event that any provision of this Agreement shall be determined to be iliegai or unenforceable, such provision shall be limited or eliminated to the minimum extent necessary so that this Agreement shall otherwise remain in full force and effect and enforceable. (g) This Agreement shall be governed by and construed in accordance with the laws of the State and County of New York without regard to the conflicts of laws provisions thereof. The sole jurisdiction and venue for actions related to the subject matter of this Agreement shall be the state and federal courts located in New York, New York. (h) Headings herein are for convenience of reference only and shall in no way affect interpretation of the Agreement. (i) Marsh ClearSight shall have no liability for any failure or delay in performance of its obligations under this Agreement because of circumstances beyond its reasonable control, including without limitation, acts of God, fires, floods, earthquakes, wars, civil disturbances, terrorism, sabotage, accidents, unusually severe weather, labor disputes, governmental 10 CONFIDENTIAL INFORMATION actions, power failures, viruses that are not preventable through generally available retail products, inability to obtain labor, material or equipment, catastrophic hardware failures, usage spikes, attacks on Marsh ClearSight's server, or any inability to transmit or receive information over the Internet, (each, a "Force Majeure Event") nor shall any such failure or delay give Client the right to terminate this Agreement. (j) Client acknowledges that its breach of this Agreement may cause irreparable injury to Marsh ClearSight that may not be adequately compensable in money damages, and for which Marsh ClearSight shall have no adequate remedy at law. In the event of breach of Sections 2 or 5 of this Agreement, Marsh ClearSight shall be entitled to seek equitable relief to protect its interests, including but not limited to preliminary and permanent injunctive relief. Client hereby waives any requirement of the posting of a bond that may apply for issuance of any injunctions, orders or decrees. (k) This Agreement takes precedence over any conflicting statement or provision in the Products and Services Schedule and any other document furnished by Marsh ClearSight with respect to the usage of Marsh ClearSight Technology. This Agreement, including all Exhibits hereto, is the complete statement of the agreement of the parties with respect to the subject matter of this Agreement and supersedes all prior oral and written agreements with respect to the subject matter hereof, including but not limited to any prior confidentiality or nondisclosure agreements entered into by Marsh ClearSight and Client. (I) This Agreement may be executed in counterparts, each of which will be deemed an original but all of which together shall constitute one and the same Agreement. IN WITNESS WHEREOF, the parties hereto have executed this Agreement as of the Effective Date. Marsh ClearSight LLC Click here to enter text. By: By: Name: Name: Title: Title: 11 EXHIBIT A Marsh ClearSight SAAS Products and Services Schedule This Marsh ClearSight SAAS Products and Services Schedule and its appendices, if any (the "Schedule"), sets forth the terms generally applicable to the one or more products or services (the "Services") to be provided by Marsh ClearSight LLC ("Marsh ClearSight") to Client as set forth in the Statement(s) of Work incorporated by reference into this Schedule (the "Statement(s) of Work") under the Software as a Service Agreement entered into by Marsh ClearSight and Client as of the Effective Date (the "Agreement"). Client will pay all applicable rates and fees for the Services as set forth in the Statement of Work applicable to this Schedule and the Agreement. This Schedule and the Services set forth herein shall be effective during the term of the Statement(s) of Work. SAAS Application Solutions SaaS Application solutions will be provided as set forth in the Statement(s) of Work. Any product(s) licensed by Client from Marsh ClearSight and set forth in executed Statement(s) of Work between Marsh ClearSight and Client shall remain licensed to Client until the expiration, termination or other applicable modification of such Statement(s) of Work. Hosting Client Data will be hosted in an information technology infrastructure environment provided by Marsh ClearSight during the Service Term. Regular maintenance is essential to the running of an efficient and secure system infrastructure, While most infrastructure maintenance may be performed while the Marsh ClearSight cloud production environment is fully operational, Marsh ClearSight and Client acknowledge that certain infrastructure maintenance tasks may require the Marsh ClearSight cloud production environment to be taken off-line in order for those tasks to be performed. Marsh ClearSight will provide Client a minimum of ten (10) days' notice prior to any scheduled downtime for infrastructure maintenance of the Marsh ClearSight cloud production environment. Whenever reasonably practical, scheduled downtime for Marsh Clearsight cloud production environment infrastructure maintenance will occur during non -peak hours. Non -peak hours are Friday at 8:00 pm (2000 hours) through Sunday at 3:00 pm (1500 hours) in the following applicable time zones: Client Hosting Location Time Zone for Non -Peak Hours North and South America U.S. Central Standard or Daylight Savings Time Europe, Middle East and Africa Greenwich Mean Time or British Summer Time Asia Pacific Australian Eastern Standard or Daylight Savings Time Products and Services Schedule; Page 1 of 21 The parties recognize, however, that emergency infrastructure maintenance may be required for the Marsh ClearSight cloud production environment. Marsh ClearSight will notify the Client of such emergency infrastructure maintenance as soon as reasonably practical. Services, Support and Service Hours Support and Service Hours are described in the Statement of Work. During implementation of the SaaS Application, Marsh ClearSight will provide Client with project deliverables for User Acceptance Testing ("UAT") and will provide Client guidance on the UAT process. Governing Assumptions The following are key assumptions in the provision of implementation and other services under the Agreement: • Client will actively participate and ensure key personnel are available to address any Client -owned deliverables, actions, or dependencies required for work to proceed per agreed schedule, and each will be made available by Client or their identified agents in a timely manner • Marsh ClearSight assumes a continuous engagement scenario and as such, Client will provide required resources to facilitate execution, review, testing, or acceptance of all agreed deliverables by the Marsh ClearSight team within the timeframes of the project schedule mutually agreed before the commencement of the project; this will include time from business users and source system owners for meetings, data requests, gathering of data required and most importantly help obtaining timely decisions from relevant parties. • During the term of this SOW, If delays or other unanticipated problems occur which are beyond Marsh ClearSight's control, or significant delays or work holds caused or requested by Client or one of Client's agents occur, this may result in release of assigned resources, a delayed completion of the project, and additional fees, which Marsh ClearSight will discuss with Client as soon as identified • Client will perform all deliverables review and testing activities as requested within the agreed upon activity windows using the agreed upon test formats and procedures. • Specific deliverables submitted for Client acceptance must be reviewed and formally accepted, or rejected in writing with explanations, within five (5) business days from date of submission from Marsh ClearSight. Deliverables not disposed within the 5 day review and acceptance window will be considered complete and accepted upon the sixth (6) day. • Marsh ClearSight assumes User Acceptance Testing (UAT) of the final end to end solution will be managed by the client and performed within the timeframes specified within the agreed project plan. Should client fail to perform UAT testing within the agreed testing window, upon expiration of the agreed timeframe, client will be notified of a 30 day extension to the testing window, and upon expiration of the 30 day extension window, if the client has not completed testing or received mutual agreement to extend further, all deliverables will be considered complete and fully accepted on the 312t day and the solution will be promoted to a Production status and the contract considered complete. Should Client chose to augment or expand the UAT testing process with additional activities not contained in the agreed testing approach and scope, these additional activities will be considered outside of the scope of work defined and will not affect signoff and promotion of the solution once it has completed the approved testing scenario as defined in the project. Products and Services Schedule; Page 2 of 21 Client Role Review The Customer Role Review is designed to help Marsh ClearSight's clients understand their part in the major activities of a SaaS Application implementation project. It outlines major milestones, highlights decisions needed from the Client and points out implications of changes to the project scope. The following Client roles are recommended for a successful project (an individual may be responsible for more than one role if applicable): Client Business Sponsor —This person will be responsible for final approval and signoff on all deliverables. They will also serve as a point of escalation for any project related risks or issues. Client Project Manager — This person will work directly with the Marsh ClearSight project manager to manage project timelines, risks and align Client resources to complete tasks within the timelines outlined in the project schedule. Client System Administrator — This person will be the ongoing resource assigned to maintain the SaaS Application. They will work directly with the project team to define specifications and understand configuration options selected during implementation. Milestones Project milestones act as thresholds and help to indicate whether a project is on track to finish as expected. Specific milestones vary by project, but in general, they are defined as the group of accomplishments, results, deliverables and events that measure project progress. The following outlines typical project milestones in a SaaS Application project and provides a high level overview of what the Marsh ClearSight team will need from Client in order to perform its obligations: Major Milestone Client Contributions Kickoff meeting or conference call A successful kickoff meeting or conference call requires attendance by project sponsor, project managers and end users. Identification of decision maker or point -person during this meeting is essential. Client and Marsh ClearSight will review the Agreement during this meeting to confirm accuracy and completeness of project deliverables Completion of specifications Engagement during specification process; Client may need to produce samples of output files, reports or other data from legacy system(s) to be uploaded into the SaaS Application Test environment established Cloud implementations will include a test environment provided by Marsh ClearSight Products and Services Schedule; Page 3 of 21 Transfer of In User Acceptance Testing ("UAT"), specific deliverables submitted for Client review and deliverables from acceptance must be reviewed and formally accepted or rejected in writing (with explanation test to production for such rejection), within five (5) business days from date of submission from Marsh environment ClearSight. Deliverables not rejected in writing (with explanation for such rejection) within the 5-day review and acceptance window will be considered complete and accepted upon the sixth (6th) business day. Marsh ClearSight assumes UAT will be managed by the client and performed within the timeframes specified within the agreed project plan. Should client fail to perform UAT testing within the agreed testing window, upon expiration of the agreed timeframe, client will be notified of a thirty (30) day extension to the testing window, and upon expiration of the 30- day extension window, if the client has not completed testing or received mutual agreement to extend further, all deliverables will be considered complete and fully accepted on the first day after such extension window and the solution will be promoted to production status. Training Successful training requires a complete audience of stakeholders and end users. If training is to be held at Client's facility, Client will be responsible for securing a training location/room, requesting staff participation, scheduling, etc. Decisions Throughout the project, the Marsh ClearSight team will need Client to make choices about the implementation of the SaaS Application. Decisions vary by project, but in general, they follow the nature of the decisions outlined in the table below. Also included in this table is the nature of the information to be provided by Client and a rough estimate of the timeframe. Decisions and Actions Needed Information Needed Timeframe System specifications Decisions regarding screen designs, security setup and other Beginning of project system specifications such as custom reports Validation of data conversion deliverables Approval and signoff is needed on data mappings and prior to Middle of project final load of conversion into the system Decisions regarding third -party deliverables Decisions or actions may be required if third -party Middle of project data/information is late, incomplete or missing Signoff on Project sponsor is required to sign off on all deliverables deliverables within five (5) business days of Client's receipt of any deliverable Middle of project and end of project Mutually acceptable changes to the Statement(s) of Work and/or project schedule will be outlined in a Deliverables Change Request and may result in additional cost to Client. Products and Services Schedule; Page 4 of 21 The Marsh ClearSight project delivery team works with Client to define what constitutes a minor change, a change to existing scope or a change outside scope. Changes allowed will be based on the agreed upon project schedule timeline and will adhere to the below basic guidelines for all Marsh ClearSight projects. Any and all changes must be scoped and agreed to by both the Marsh ClearSight project team and the Client. The categories above are meant for use as general guidelines only and each project is subject to its own assumptions. Each project and the change requests therein will be handled on a case -by -case basis. Change Type Description and Recommended Deadline Minor changes Minor changes are those that do not affect the critical path and timing of the project, do not require changes to finalized specifications and do not require additional Marsh ClearSight resources to be assigned to the project. Though each project is subject to its own unique set of assumptions and constraints, these changes generally may be made throughout the life of the project up until the final UAT period begins. intermediate changes Advanced changes Intermediate changes are those that may have an effect on individual deliverable timeframes within the project, but do not affect the critical path and overall project schedule. Intermediate changes may require small adjustments to existing specifications and additional testing. No additional Marsh ClearSight resources are required for intermediate changes. Generally, these changes may be made throughout the life of the project. Advanced changes are those that may have an effect on both individual deliverable timeframes and the overall project schedule. Advanced changes may affect the critical path and require adjustments to existing specifications and/or the creation of new specifications. Additional Marsh ClearSight resources may be required to complete advanced changes. Generally, these changes take a medium to a high level of effort to complete. There is no timeline for this type of change as they must be scoped and evaluated on a case by case basis. Attachment -submission e-mails sent to Marsh ClearSight that are encrypted by methods other than Transport Layer Security encryption ("TLS") will not be uploaded. Client shall notify Marsh ClearSight in the event that Client does not use TLS for attachment -submission e-mails sent to Marsh ClearSight. Marsh ClearSight is not responsible for: (1) the content of any attachment -submission emails sent to Marsh ClearSight by Client; and (2) any content originally provided by Client in an attachment -submission email also contained within an error or response email sent by Marsh ClearSight to Client. Data Services In the event data conversion or data processing is performed by Marsh ClearSight for Client, Client is responsible for ensuring that all data providers, including without limitation, TPAs, carriers, and brokers, provide Client Data to Marsh ClearSight in a timely manner. Delays in receipt of Client Data will result in delays of the Services to be provided by Marsh ClearSight under this Schedule and could result in additional fees. Products and Services Schedule; Page 5 of 21 • As between Marsh ClearSight and Client, Client is responsible for the quality, accuracy and reliability of all Client Data provided by its data providers. • Time used resolving issues with the quality of the source data will erode service hours. • Please note that fees charged by data providers for the transmittal of Client Data to Marsh ClearSight are not included and that not all data providers are able to provide all data components for data conversions. • Client shall notify Marsh ClearSight regarding any "as of" reporting functionality related to each of its data conversions as some data types will not include a record of historical changes. • Up to three (3) data loads are included as a part of data conversion services for each data source. The data conversion services apply only to loading data into the SaaS Application, but not any extracts of such data. • Client is responsible for facilitating delivery of Client Data to Marsh ClearSight from all data providers, including a layout definition or data dictionary. • All Client Data provided to Marsh ClearSight must be encrypted using the NIST/AES or DES standards. Marsh ClearSight will provide the public keys and the methods used for encryption. This policy pertains to all Client Data sent electronically or physically to Marsh ClearSight, • Not all data providers are able to provide all data components for data conversions. Prior to execution of this Schedule, Client is responsible for verifying that all of Client's data providers are able to provide such data components. • Fees charged by data providers are not included in this Schedule and shall be payable by Client directly to the data providers. • Client is responsible for facilitating delivery of control total reports to Marsh ClearSight for each data provider. • In the event that control total reports are not available for a data provider, Client must provide written approval of agreement with Marsh ClearSight on a method of reconciliation. • A cumulative claims data conversion consists of claim indicative data (name, address, loss date, etc.) and summary financials only and does not include other data elements (adjuster notes, OSHA records, contacts, and/or historical detailed payments / reserve transactions). Claim -only data updates do not include detailed payment and reserve transactions. Marsh ClearSight builds a single cumulative transaction per financial category (i.e. Medical, Expense, and Indemnity) for each claim to allow for prior valuation or loss development reporting. • Historical detailed transactions are only included if the component entitled "Historical transaction data conversion" is selected in the Schedule. • Historical transaction data conversion includes detailed historical payment, recovery and/or reserve transactions only. Some data providers do not provide historical reserves in their transaction files. • In the event of an imbalance between claim summary financials and detailed transactions, the claims may be balanced to the transactions or vice versa, dependent on feedback from the data provider and Client. • Data associated with history of check processing and printing is not included in an historical transaction conversion. • Data associated with historical medical bill invoice/line item conversion is not included in an historical transaction conversion. • Client will work with Marsh ClearSight to develop data mapping and transformation rules. Marsh ClearSight will develop a conversion mapping document for Client to review and approve in writing. • Marsh ClearSight will not modify or update source data without written approval from Client. • Marsh ClearSight will only develop data conversion program(s) and processes for data conversion components explicitly listed in the Schedule. Additional data conversion components may be added to project scope, but an additional fee will apply and the tirneframe of the project may change accordingly. Products and Services Schedule; Page 6 of 21 • The Marsh ClearSight standard turnaround time for non -daily and non -weekly scheduled claim and transaction data processing is three (3) business days from the time that Marsh ClearSight Data Operations Center confirms that incoming data is in the expected data layout, balances to control totals, and passes basic quality checks performed by Marsh ClearSight. • Data processing will take place during Marsh ClearSight's normal business hours. Unless specifically stated otherwise, data processing services performed by Marsh ClearSight include only loading data into the SaaS Application, but not any extracts of such data. • Ongoing data processing includes the following activities, which are all based on control total reports and Client Data provided by Client and/or its data providers: • Ongoing data conversion processing, validation of source data, and update of data into the SaaS Application. • Financial reconciliation with control total reports. • Minor code changes in conversion routines to address new business needs for Client, i.e., new location is added to structure • Resolution of claims that are missing or have been dropped from the Carrier / TPA feed • When historical claims are transferred to a new data source or the data provider changes the format of the file, a new Statement of Work will be required and will either require an additional fee or erode Client Support Hours. In the event that a takeover or format change is not communicated to the Data Operations Center prior to the receipt of the data, time spent to correct data integrity issues will be billed at the rate set forth in the applicable Statement(s) of Work. • Except for minor code -mapping changes, Client -requested changes to a data conversion after the data conversion has moved into production are not included in ongoing data processing activities and will be billed at the rate set forth in the applicable Statement(s) of Work. • Daily loads are performed once daily during an agreed upon nightly window. • Marsh ClearSight will perform scheduled loads into the SaaS Application database during an agreed upon time frame. • Marsh ClearSight's standard data processing schedule is to perform scheduled non -daily or non -weekly data updates into the SaaS Application database during Marsh ClearSight's normal business hours (Monday - Friday 8:00 a.m. to 5:00 p.m. CST, except Marsh ClearSight holidays) with minimal disruptions. Client is responsible for identifying and communicating an acceptable scheduled update time period. Marsh ClearSight is responsible for notifying Client in advance of scheduled updates being performed. • Processing outside Marsh ClearSight's normal business hours, including weekends and holidays, is available for an additional fee. [REMAINDER OF PAGE INTENTIONALLY LEFT BLANK] Products and Services Schedule; Page 7 of 21 Marsh ClearSight SAAS Products and Services Schedule Appendices EDI Appendix Marsh ClearSight Enterprise Edition supports IAIABC standards EDI releases 1, 2 and 3, as required by the applicable state. EDI States included for Client are set forth in the applicable Statement(s) of Work. Configuration of additional states may require additional fees and/or erode the Support Service Hours. Marsh ClearSight is not responsible for maintaining claim and payment data in compliance with State requirements. SaaS Application will provide basic functionality that will allow Client to transmit EDI data to jurisdictions via the Marsh ClearSight Data Router or a third party clearinghouse/data router. Marsh ClearSight is not responsible for accuracy of Client Data contained in submissions or for the initiation of the transmission processes. Marsh ClearSight will not provide services/EDI transmission related to Proof of Coverage. States limit acceptance of EDI transmissions through particular vendors or through particular mechanisms. If Client will be using the SaaS Application EDI functionality for States that accept EDI transmissions only from particular vendors other than Marsh ClearSight or through mechanisms other than others offered by Marsh ClearSight, Client will be responsible for establishing and maintaining a relationship with such vendors or otherwise arranging for transmission from the SaaS Application through such mechanisms. In these cases, Marsh ClearSight shall not have responsibility for transmissions to or from the State. SaaS Application functionality will then be configured to permit transmission to and from such vendors or through such mechanism. Marsh ClearSight shall have no responsibility for the services or products, or transmission provided by such vendors. If EDI transmissions are made through a third party vendor, Client is responsible for providing Marsh ClearSight with necessary third -party authorizations and the user ID and password to access the Client's account to permit for delivery and receipt of files to that vendor from the SaaS Application. As part of the initial setup, Marsh ClearSight will deploy and configure the standard EDI (FROI/SR01) module, set up the transmission method (according to state requirements) and set up the transmission schedule. Marsh ClearSight will provide assistance to Client during State acceptance testing period, but is not responsible for training client on State requirements or for creating test plans based on State requirements. Client will be required to establish Trading Partner agreements with all jurisdictions prior to State testing. The data elements of the FROI/SROI EDI transmission will reside in a holding table in the SaaS Application database until the data is sent (as set forth below) to the State's EDI data warehouse. Products and Services Schedule; Page 8 of 21 Client is responsible for: • entry and accuracy of all EDI data entered in the system and for meeting State requirements; and • marking EDI transmissions in the SaaS Application with a status of "Mark to Send" when transmissions are ready to be submitted to the State; and • understanding the timing originally set up at the time of implementation related to when EDI transmissions will be processed and sent to the State(s). Marsh ClearSight requires Client to maintain remote access to streamline the testing process and for Marsh ClearSight to perform services related to EDI under this Schedule. If Client disables remote assess Client will incur additional remote and/to telephonic assistance hours and will be responsible for additional fees incurred as a result of such additional assistance hours. Marsh ClearSight recommends that Client transmits claims daily. Marsh ClearSight shall not be responsible for any State, Client or third party system failures or connectivity issues which may result in failures to transmit Client's transactions within the State's required time frames. Client is responsible for: • claims administration, claims decisions and business decisions related to data that is tracked in the SaaS Application and transmitted to the State; and ensuring that data is populated in the SaaS Application in accordance to State rules, including ensuring that data is available for all data elements/fields required by the State. All changes to setup of this feature after completion of State acceptance testing will be applied against ongoing service hours. Marsh ClearSight is not responsible for any third party fees or state penalties related to State EDI requirements. Products and Services Schedule; Page 9 of 21 Marsh ClearSight SAGS Products and Services Schedule Appendices Medicare Section 111 Solution (CMS Solution) Appendix A. Medicare Section 111 Solution Elements 1) Solution Options The Medicare Section 111 Solution (the "Solution") provided by Marsh ClearSight includes several options to aid Client in compliance with The Medicare, Medicaid, and SCHIP Extension Act of 2007 ("SCHIP"): • Option 1 (Comprehensive Solution): A comprehensive solution wherein Marsh ClearSight and a Strategic Service Provider (SSP) will facilitate the full cycle of reporting Medicare beneficiary data to Centers for Medicare and Medicaid Services (CMS). • Option 2 (Claims/Eligibility Data Export): A solution for clients who prefer to work with their own Reporting Agent (RA) or method for reporting Medicare beneficiary data to CMS and can choose to receive a standard data export from Marsh ClearSight applications. • Alternate Reporting Agent Option: A solution wherein Marsh ClearSight and a Strategic Service Provider (SSP) will facilitate exporting CMS data and receiving responses from an Alternate Reporting Agent who will serve as the Reporting Agent (RA) for the client. The Alternate Reporting Agent (not Marsh ClearSight or the SSP) will facilitate reporting Medicare beneficiary data to Centers for Medicare and Medicaid Services (CMS). Neither Marsh ClearSight nor SSP shall be responsible for any actions or omissions of the Alternate Reporting Agent. Unless specified otherwise, the Medicare Section 111 Solution Elements as defined in Section I of this Appendix apply to all options. 2) Supported Marsh ClearSight Software and Upgrade Requirements The Solution is only supported by the following Marsh ClearSight proprietary software packages and versions (the "Supported Software"): • Professional Edition versions 8.10, 9.3, and 10 • Marsh ClearSight Enterprise In the event that Client is not currently licensing the Supported Software, Client will not be able to use the Solution without upgrading or migrating to the Supported Software. Any such upgrade or migration is not included in the scope of the Solution. 3) CMS Data Elements Products and Services Schedule; Page 11 of 21 CMS has identified data element requirements for the purpose of standardizing the process of mandatory reporting under Section 111 of SCHIP (the "CMS Data Elements"). This includes standardized data fields, history and response elements as outlined in the MMSEA Section 111 Medicare Secondary Payer Mandatory Reporting Liability Insurance (Including Self Insurance), No -Fault Insurance, and Workers' Compensation USER GUIDE (the "CMS User Manual"), as supplemented and amended by CMS. The CMS User Manual is available at the following link: http://www.cros.gov/Medicare/Coordination-of-Benefits-and-Recovery/Mandatory-Insurer-Reporting-For-Nan-Group-Health- Plans/NGHP-User-Guide/NGHP-User-Guide.html Marsh ClearSight shall provide a repository within the Supported Software to store the CMS Data Elements. This repository shall house CMS Data Elements that Client cannot accommodate within core tables in the Supported Software. In order to capture this data in the CMS Data Elements repository, workflow changes may be required by Client. Capabilities to assign default data element values and handle data element modifications such as parsing Claimant Name into first name / last name and eliminating dashes in Social Security Numbers will be available within the Section 111 Data Mapping Tool (described below). Client may wish to define multiple Responsible Reporting Entity (RRE) IDs within the Solution. Clients may define RRE IDs at the following levels only: Client, Coverage, Location, Policy • The following combinations only are supported for RRE ID definition: • Client • Client, Coverage • Client, Coverage, Policy • Client, Coverage, Location • Claim Level Assumptions: • RRE ID definition at levels other than those identified above will require customization at an additional fee 4) Section 111 Data Mapping Tool Marsh ClearSight shall provide a data mapping tool to map both data elements and codes to the CMS Data Elements. Assumptions: Products and Services Schedule; Page 12 of 21 • Mapping for clients who use Professional Edition and Marsh ClearSight Enterprise — Mapping will be limited to data elements that reside in the following core tables: Claim (including extended tables), Location, Rolodex / Contact, and Policy for each RRE identified by Client 5) Marsh ClearSight Medicare Section 111 Solution Module The Marsh ClearSight Medicare Section 111 Solution Module includes a claim user interface ("Standard Section 111 Tab"), data structure, and logic processes required to capture and manage mapped CMS Data Elements for export to CMS. The Marsh ClearSight Section 111 Solution Module includes all CMS Data Elements as defined by CMS. B. Implementation During implementation, Marsh ClearSight and/or Client will deploy and configure the Solution as described in the corresponding Statement of Work. Duration and effort for implementation will vary depending on the specific implementation requirements of Client, as reflected in specifications mutually agreed to by the parties. Marsh ClearSight will work with Client to deploy the Standard Section 111 Tab to Client's licensed version of the Supported Software and will provide a process to map any existing fields and codes in Client's licensed version of the Supported Software to the CMS Data Elements as provided for in the corresponding Statement of Work. Marsh ClearSight is not responsible for any of Client's obligations to CMS under the requirements of SCHIP or for any failure of the Client to provide the data elements required by CMS. Any system configuration services or changes required to comply with any CMS guidance issued under SCHIP ("CMS Section 111 requirements") will be billed as incurred at Marsh ClearSight's then current rates or erode existing Client Support Hours. Examples of system configuration services or changes that are not included in the scope of the Solution include, but are riot limited to, the following: • Modifications to existing system configuration, codes, and screen design • Creation of or modification to event notifications or validations for workflow purposes • Changes to system security as a result of CMS Section 111 requirements • Future configuration changes resulting from modifications to the existing CMS Section 111 requirements • Modifications to data conversions occurring as a result of CMS Section 111 requirements • Working meetings or project management efforts by Marsh ClearSight staff to coordinate modification to existing configuration • Changes required to transfer data to or from third -party sources • Custom Programming work or changes to existing Custom Programming or Reports • Assistance from Marsh ClearSight with any Client testing required by CMS under SCHIP Implementation will be considered complete once the Solution has been deployed, configured, tested and moved into production with SSP. Products and Services Schedule; Page 13 of 21 C. Option 1 (Comprehensive Solution) Specific Information 1)Strategic Service Provider ExamWorks Clinical Solutions, LLC, as successor in interest to Gould & Lamb, LLC ("ExamWorks") is Marsh ClearSight's designated Strategic Service Provider (SSP) for the Solution. More information about the SSP may be found at www.examworks-cs.com. Client acknowledges and agrees that Client shall designate ExamWorks as its Reporting Agent at the time of RRE Registration with CMS as required by SCRIP. In the event that Client is not an RRE, Client shall ensure that its customers that are RREs (the "Client's RREs") are registered as such on the CMS Coordination of Benefits Secure Website (COBSW) and designate ExamWorks as RA at RRE Registration with CMS as required by SCRIP. Client acknowledges and agrees that Client shall deliver to SSP the required reporting information and CMS -defined reporting date as provided by CMS during the registration process. In the event Client enters into this SOW after RRE registration, Client will take all necessary steps required or provided by CMS, such as ExamWorks is designated as the client's RA with CMS as required by SCRIP. SSP shall assign Client a Single Point of Contact (SPOC) as well as an Account Manager to facilitate the reporting process to CMS. Responsibilities include, but are not limited to, issue resolution and training. Client acknowledges and agrees that ExamWorks shall be solely responsible for submitting any required information to CMS received from Client or Client's RRE. As the SSP will submit to CMS all data provided by or on behalf of the Client to Marsh ClearSight via the Solution, Client acknowledges and agrees that the SSP will require access to Client Data made available to Marsh ClearSight by, or on behalf of, Client and consents to the disclosure of such Client Data to SSP by Marsh ClearSight. The SSP may, upon Client's consent, offer additional services that are potentially important to Client. Client shall enter into a separate agreement with the SSP for any such additional services. Marsh ClearSight shall not be responsible for any obligations in connection with such separate agreement between Client and the SSP. In the event that the SSP services provided under the applicable Statement of Work are terminated either because the SSP designated in this Appendix has ceased supporting CMS reporting or for other reasons, Marsh ClearSight shall provide to Client the option of entering into a new or amended Statement of Work for the performance of Claims/Eligibility Data Export Services (Option 2) and shall use commercially reasonable best efforts to find an alternative SSP. Unless Client elects to enter into a new or amended Statement of Work for Claims/Eligibility Data Export Services, Client acknowledges and agrees that it shall designate an alternative SSP provided by Marsh ClearSight as its RA and that such alternative SSP shall be solely responsible for submitting any required information to CMS received from Client or Client's RREs. In the event Client enters into a new or amended Statement of Work for Claims/Eligibility Data Export Services, Marsh ClearSight shall have the right to terminate the services for the Option 1(Comprehensive Solution). Client may elect to utilize a Client Data Provider as its data provider for CMS Data Elements, and may also elect to utilize the Solution to submit data to CMS on behalf of its Client Data Provider. Client shall be responsible for all CMS data element data quality and exchange of information with Client Data Provider related to CMS data elements; Marsh ClearSight bears no responsibility for data transfer to Client Data Provider or quality of data received from Client Data Provider. Marsh ClearSight recommends that Client increase frequency of data updates from Client Data Provider to a minimum of weekly to best Products and Services Schedule; Page 14 of 21 facilitate data transfer to the SSP where Client will utilize Marsh ClearSight's Comprehensive Solution (Option 1) to submit data to CMS on behalf of their Client Data Provider. 2) Marsh ClearSight Medicare Section 111 Solution Module for Option 1 In addition to the elements defined above, the Section 111 Module for Option 1 includes the following: • Response codes from the SSP processing / result files • All data required to facilitate exports to and imports from SSP 3) Post -Implementation Functionality / Workflow Marsh ClearSight shall submit CMS Data Elements provided by Client or Client's Data Provider to the SSP on a scheduled weekly basis. Marsh ClearSight is not responsible for the accuracy of any CMS Data Elements or for ensuring that such CMS Data Elements comply with CMS Section 111 requirements. SSP shall submit the Claim Input file transmissions provided by Client (consisting of all CMS Data Elements provided by Client or Client Data Provider to Marsh ClearSight) to CMS on a quarterly basis within Client's CMS -assigned quarterly submission. CMS shall submit a response regarding the quarterly Claim Input file transmission to SSP. The response from CMS shall be processed by the SSP and submitted to Marsh ClearSight. SSP shall also notify Client by e-mail that a response has been submitted to Marsh ClearSight. Such results shall be available for Client's review within the Supported Software, and Client is responsible for review of and required action on all such results within five (5) business days of receipt of the e-mail notification from SSP. SSP shall submit Medicare Eligibility queries to CMS on a monthly basis in order to verify whether injured parties reported in the CMS Data Elements are eligible for Medicare coverage. CMS shall submit a response regarding the monthly Medicare eligibility check to SSP. Response shall be processed by the SSP and supplied back to Marsh ClearSight via the weekly transmission process between Marsh ClearSight and SSP. Client must respond to and correct all errors received in response files from the SSP within five (5) business days of receipt of the e-mail notification from SSP. 4) Data Transmissions from Marsh ClearSight to SSP for ASP Clients Data transmissions to SSP for ASP clients include weekly Claim Input file transmission and weekly Medicare Eligibility file transmission for each RRE for which Client sets up mapping in the Marsh ClearSight Medicare Section 111 Solution Module of Supported Software as described in this Appendix. The Claim Input file is based on Section 111 specifications. The claim detail, auxiliary, and TIN reference records are denormalized into a single claim record with additional fields required by SSP to manage system administration and compliance. The Medicare Eligibility file is used for submitting claims to test for Medicare eligibility. It includes injured party information required to check Medicare eligibility with CMS. Products and Services Schedule; Page 15 of 21 5) Receipt of Data Imports by Marsh ClearSight from SSP for ASP Clients Data imports from SSP include a Claim Result file, a Claim Status file, and a Section 111 Response file for each RRE as identified in the RRE Appendix. Relevant results are imported into the Supported Software and available for Client's review within the Marsh ClearSight Medicare Section 111 Solution Module. This deliverable includes weekly transmission from SSP to Marsh ClearSight of the Claim Result file and Claim Status file, as well as quarterly transmission from SSP to Marsh ClearSight of the Section 111 Response file. A Claim Result file is created automatically for each weekly submission to SSP. This file contains records that were not processed by the SSP due to errors. A Claim Status file is provided weekly by SSP for each RRE and contains claim validation, eligibility, and compliance updates for all claims currently in the SSP's application for the Client. The Section 111 Response file is provided by CMS for each RRE within forty-five (45) days of receipt of a Section 111 required submission and TIN Reference file. CMS Claim Response data are provided to Client in the Section 111 Response File received from SSP. D. Option 2 (Claims/Eligibility Data Export) Specific Information 1) Post -Implementation Functionality / Workflow Marsh ClearSight shall submit CMS Data Elements provided by Client or Client Data Provider to the Client or to Reporting Agent designated by Client on a scheduled weekly basis. Marsh ClearSight is not responsible for the accuracy of any CMS Data Elements or for ensuring that such CMS Data Elements comply with the Section 111 requirements issued by CMS. Client may elect to utilize a Client Data Provider as their data provider for CMS Data Elements, and may also elect to utilize the Solution to submit data to CMS on behalf of their Client Data Provider. Client must maintain all responsibility of CMS data element data quality and exchange of information with Client Data Provider related to CMS data elements; Marsh ClearSight bears no responsibility for data transfer to Client Data Provider or quality of data received from Client Data Provider. Marsh ClearSight recommends that Client increase frequency of data updates from Client Data Provider to a minimum of weekly to best facilitate data transfer to CMS on behalf of their Client Data Provider. Assumptions: • Marsh ClearSight will not make changes to the standard export file layouts. Changes to the layout that are not initiated by Marsh ClearSight will require an additional fee. • Option 2 is export only, and does not include an import of Section 111 Response file or Medicare Eligibility Response file. • Client is responsible for data in the Supported Software, including identification and resolution of all claim data errors. related to the Section 111 reporting process. • Client is responsible for any fees levied by CMS due to data errors in the Supported Software. • Where Marsh ClearSight needs to participate in error resolution, time spent on those activities will be billed as incurred at Marsh ClearSight's then current rates or erode existing Client Support Hours. Products and Services Schedule; Page 16 of 21 • Marsh ClearSight will make changes to the file layout as needed to support changes to the CMS reporting requirements. Marsh ClearSight will provide advance warning of those changes to Client. Client is responsible for coordinating change management with Client's Solution or Client's Reporting Agent. 2) Data Transmissions from Marsh ClearSight to Client's Solution or Client's Reporting Agent for ASP Clients Marsh ClearSight will transmit export file(s) in the Marsh ClearSight standard export layout to Client's Solution or Client Agent's FTP site via Secure FTP, Export files include: • Weekly claim detail, including TIN reference data file which includes claims with (a) non -closed status, (b) financial activity within the last quarter, or (c) are Medicare eligible will be included in this file export. • (OPTIONAL) Weekly Medicare Eligibility Query data file. Eligibility determination must be manually entered into the claims database. Standard layout definition will be made available to clients selecting this option. E. Alternate Reporting Agent Delivery Option - Specific information 1) Strategic Service Provider ExamWorks Clinical Solutions, LLC, as successor in interest to Gould & Lamb, LLC ("ExamWorks") is Marsh ClearSight's designated Strategic Service Provider (SSP) for the Solution. More information about the SSP may be found at www.examworks-cs.com. Client acknowledges and agrees that Client shall notify Marsh Clearsight and the SSP with the identity of its Alternate Reporting Agent or the Alternate Reporting Agent for its customers that are RREs (the "Client's RREs"). SSP shall assign Client a Single Point of Contact (SPOC) as well as an Account Manager to facilitate the reporting process to the Alternate Reporting Agent. Responsibilities include, but are not limited to, issue resolution and training. Client acknowledges and agrees that ExamWorks shall be solely responsible for submitting any required information to Alternate Reporting Agent received from Client or Client's RRE and that Alternate Reporting Agent shall be solely responsible for submitting any required information to CMS. As the SSP will submit to Alternate Reporting Agent all data provided by or on behalf of the Client to Marsh ClearSight via the Solution, Client acknowledges and agrees that the SSP will require access to Client Data made available to Marsh ClearSight by, or on behalf of, Client and consents to the disclosure of such Client Data to SSP by Marsh ClearSight. The SSP may, upon Client's consent, offer additional services that are potentially important to Client. Client shall enter into a separate agreement with the SSP for any such additional services. Marsh ClearSight shall not be responsible for any obligations in connection with such separate agreement between Client and the SSP. In the event that the SSP services provided under the applicable Statement of Work are terminated either because the SSP designated in this Appendix has ceased supporting CMS reporting or for other reasons, Marsh ClearSight shall provide to Products and Services Schedule; Page 17 of 21 Client the option of entering into a new or amended Statement of Work for the performance of Claims/Eligibility Data Export Services (Option 2) and shall use commercially reasonable best efforts to find an alternative SSP. In the event Client enters into a new or amended Statement of Work for Claims/Eligibility Data Export Services, Marsh ClearSight shall have the right to terminate the services for the Alternate Reporting Agent Solution. Client may elect to utilize a Client Data Provider as its data provider for CMS Data Elements, and may also elect to utilize the Solution to submit data to CMS on behalf of its Client Data Provider. Client shall be responsible for all CMS data element data quality and exchange of information with Client Data Provider related to CMS data elements; Marsh ClearSight bears no responsibility for data transfer to Client Data Provider or quality of data received from Client Data Provider. Marsh ClearSight recommends that Client increase frequency of data updates from Client Data Provider to a minimum of weekly to best facilitate data transfer to the SSP where Client will utilize Marsh ClearSight's Alternate Reporting Agent Solution to submit data to Alternate Reporting Agent on behalf of their Client Data Provider, 2) Marsh ClearSight Medicare Section 111 Solution Module for Alternate Reporting Agent In addition to the elements defined above, the Section 111 Module for Alternate Reporting Agent includes the following: • Response codes from the SSP processing / result files • All data required to facilitate exports to and imports from SSP 3) Post -Implementation Functionality / Workflow Marsh ClearSight shall submit CMS Data Elements provided by Client or Client's Data Provider to the SSP on a scheduled weekly basis. Marsh ClearSight is not responsible for the accuracy of any CMS Data Elements or for ensuring that such CMS Data Elements comply with CMS Section 111 requirements. SSP shall submit the Claim Input file transmissions provided by Client (consisting of all CMS Data Elements provided by Client or Client Data Provider to Marsh ClearSight) to Alternate Reporting Agent upon receipt from Marsh ClearSight. Neither Marsh ClearSight nor SSP are responsible for submitting Claim Input file transmissions to CMS within Client's CMS - assigned quarterly submission or receiving and processing CMS response files. The response received by SSP from Alternate Reporting Agent shall be processed by the SSP and submitted to Marsh ClearSight. Such results shall be available for Client's review within the Supported Software. Client acknowledges and agrees that it is solely responsible for ensuring that: (1) Alternate Reporting Agent submits Medicare Eligibility queries to CMS in order to verify whether injured parties reported in the CMS Data Elements are eligible for Medicare coverage; and (2) Alternate Reporting Agent acknowledges receipt of and processes responses from CMS regarding the Medicare eligibility check. Responses received by SSP from Alternate Reporting Agent shall be processed by the SSP and supplied back to Marsh ClearSight via the weekly transmission process between Marsh ClearSight and SSP. Products and Services Schedule; Page 18 of 21 4) Data Transmissions from Marsh ClearSight to SSP for ASP Clients Data transmissions to SSP for ASP clients include weekly Claim Input file transmission and weekly Medicare Eligibility file transmission for each RRE for which Client sets up mapping in the Marsh ClearSight Medicare Section 111 Solution Module of Supported Software as described in this Appendix. The Claim Input file is based on Section 111 specifications. The claim detail, auxiliary, and TIN reference records are denormalized into a single claim record with additional fields required by SSP to manage system administration and compliance. The Medicare Eligibility file is used for submitting claims to test for Medicare eligibility. It includes injured party information required to check Medicare eligibility with CMS. 5) Receipt of Data Imports by Marsh ClearSight from SSP for ASP Clients Data imports from SSP include data provided to SSP by the Alternative Reporting Agent (which may include a Claim Result file, a Claim Status file, and a Section 111 Response file for each identified RRE). The Alternative Reporting Agent may provide additional details regarding the data it shall provide to SSP. Relevant results are imported into the Supported Software and available for Client's review within the Marsh ClearSight Medicare Section 111 Solution Module. This deliverable includes weekly transmission from SSP to Marsh ClearSight of the Claim Result file and Claim Status file, as well as quarterly transmission from SSP to Marsh ClearSight of the Section 111 Response file returned by Alternate Reporting Agent. A Claim Result file is created automatically for each weekly submission to SSP. This file contains records that were not processed by the SSP due to errors. A Claim Status file is provided weekly by SSP for each RRE and contains claim validation, eligibility information received from Alternate Reporting Agent, and compliance updates for all claims currently in the SSP's application for the Client. Marsh ClearSight and SSP are not responsible for the Section 111 Response file provided by CMS to Alternative Reporting Agent for each RRE within forty-five (45) days of receipt of a Section 111 required submission and TIN Reference file. CMS Claim Response data are provided to Client in the Section 111 Response File returned to SSP by Alternate Reporting Agent. F. Client Responsibilities 1) CMS Requirements If Client is a RRE under CMS guidelines, Client shall register as such on the COBSW as required by SCHIP and/or coordinate registration of their customers which may be RREs as required by SCHIP (the "RRE Registration"). Compliance with the requirements of the COBSW (and all CMS Mandatory Insurer Reporting, or Section 111, obligations generally) is solely Client's responsibility. To ascertain its Section 111 obligations and determine whether it is an RRE, Client should consult the CMS Section 111 website atwww,cros.hhs.gov/MandatorylnsRep or such other website as CMS might provide. In the event Client enters into a Statement of Work for the CMS Solution after RRE Registration, Client shall provide proof of its registration as a RRE on the COBSW to Marsh ClearSight upon the effective date of such Statement of Work and shall take all necessary steps required or provided by CMS. Products and Services Schedule; Page 19 of 21 Client is responsible for registration with the COBSW and designation of the applicable organization as Reporting Agent (RA) or making any changes to the designated RA as may be required by Marsh ClearSight. Client is responsible for providing RRE ID information to Marsh ClearSight. 2) Data Elements Client must ensure that injured party data elements and the Medicare eligibility flag contained within the CMS Data are properly captured on the base claim table for Professional Edition ("PE") and Marsh ClearSight Enterprise (on El records for Workers Comp claims and CI records for non -WC claims). The Solution will NOT automate the management of RRE ID assignments based on claim takeovers, deductible limits, re- insurance, stop loss insurance, excess insurance, umbrella insurance, guaranty funds, patient compensation funds, etc. Modification of data within Supported Software will be the sole responsibility of Client to accommodate these types of business decisions. Client will be responsible for manual entry and management of RRE assignments/changes, TPOC (Total Payment Obligation of Claimant) data, and ORM (On -going Responsibility for Medicals) data. Client will also be responsible for correcting any data entry errors pertaining to this data entry. Client may elect to utilize a Client Data Provider as their data provider for CMS Data Elements, and may also elect to utilize a Marsh ClearSight Medicare Section 111 Solution to submit data to CMS on behalf of their Client Data Provider. Client must maintain all responsibility of CMS data element data quality and exchange of information with Client Data Provider related to CMS data elements; Marsh ClearSight bears no responsibility for data transfer to Client Data Provider. Marsh ClearSight recommends that Client increase frequency of data updates from Client Data Provider to a minimum of weekly to best facilitate data transfer CMS on behalf of their Client Data Provider. 3) User Acceptance Testing Client User Acceptance Testing is required for approval of all deliverables outlined in the Products and Services Schedule. If Client does not provide Marsh ClearSight with feedback, the deliverable will be deemed accepted thirty (30) days after delivery. 4) Post Implementation Upon implementation of the Solution, Client shall be solely responsible for: Accuracy of data required by and submitted to CMS and responsibility for any damages of any nature resulting from the transmission of incorrect information • Timely entry and update of data required by CMS in the appropriate fields within the Medicare Section 111 Module • Identification and resolution of all errors in the CMS Data Elements and ensuring that the CMS Data Elements comply with the Section 111 requirements issued by CMS • Ensuring that the CMS Data Elements have been provided by Client or Client Data Provider for all data elements/fields required by the CMS Section 111 guidelines in a timely manner for accurate reporting to CMS • Claims administration, claims decisions and business decisions related to CMS Data Elements Products and Services Schedule; Page 20 of 21 G. Additional Terms and Conditions Marsh ClearSight shall not be responsible for any CMS, Client, Client Data Provider, SSP, Alternate Reporting Agent or other third party system failures or connectivity issues which may result in failures to transmit Client's transactions within the CMS required time frames. Marsh ClearSight shall not be responsible for errors or omissions, negligence of, or connectivity issues or delays by SSP or the Alternate Reporting Agent. Notwithstanding anything to the contrary in the Agreement, Marsh ClearSight shall in no event be liable for any indirect, special, punitive, incidental or consequential damages in any action arising from or related to any software provided or services performed in connection with the Solution, whether based in contract, tort, intended conduct or otherwise. The maximum aggregate liability of Marsh ClearSight in connection with the Solution shall in no event exceed the fees actually paid by Client to Marsh ClearSight solely for Medicare Section 111 Solution services during the Initial Term or any Renewal Term. In the event that the SSP changes its fees to Marsh ClearSight, Marsh ClearSight shall notify Client in writing within thirty (30) days of Marsh ClearSight's receipt of notice regarding SSP's fee increase. Client agrees that Marsh ClearSight shall have the right to adjust the annual fee by the amount set forth in such notice to Client, provided that the annual fee shall not be subject to change until at least one (1) year from the time that Marsh ClearSight notifies the Client of such fee change. RRE Appendix The following is a list of Responsible Reporting Entities (RREs) as defined by Client as of the applicable Statement of Work Effective Date: 1. RRE 1 2. RRE 2 3. RRE 3 Products and Services Schedule; Page 21 of 21 SCHEDULE 2(e)(i) CLIENT'S AFFILIATES Name State or Country of Incorporation/ Principal Address Organization 1. [TO BE COMPLETED BY CLIENT] 2. 3. 4. 5. Objections/Proposed Amendments to Attachment 3 Marsh ClearSight proposes that the Business Associate Agreement ("BAA") be incorporated into and made a part of the SaaS Agreement, and that the indemnification, assistance with litigation, and governing law provisions in the SaaS Agreement apply in lieu of the provisions in the BAA. Section/Clause Number Explanation of Objection / Proposed Amendments Section II.b With respect to disclosures of PHI to third parties, Marsh ClearSight proposes that the obligations be clarified to remove any obligations of Marsh ClearSight relating to disclosures of PHI to the County's other service providers in connection with the services. Marsh ClearSight enters into BAAs with its subcontractors, but assumes that the County has entered into BAA's with its other business associates, and that PHI may be disclosed between the County's business associates pursuant to our separate BAAs. Section II.e With respect to any breach notification obligations applicable to Marsh ClearSight or its subcontractors, Marsh ClearSight requests that the notice timeframe to restated to be five (5) business days or a period of time required by law, whichever is shorter. Section II.e In light of the broad definition of Security Incident under HIPAA, Marsh ClearSight requests that the definition of Security Incident in the BAA be further limited to apply solely to Security Incidents that result in the unauthorized use or disclosure of PHI. Section 11.f Marsh ClearSight requests this be revised to clarify that its subcontractors are bound by substantially similar, but no less restrictive, terms and conditions that apply to Marsh ClearSight. Also, because any subcontractor engaged by Marsh ClearSight would be on a company -wide basis rather than specifically for any contract awarded by County as a result of the RFP, Marsh ClearSight proposes that the last sentence in the first paragraph of this section be revised to apply solely in the event that the subcontractor breached its obligations in a manner that resulted in the unauthorized use or disclosure of the County's PHI. Section Il.j With respect to any provisions that require the disclosure of Marsh ClearSight's procedures and other records, Marsh ClearSight requests that such obligations be revised to clarify that summaries of such documentation may be provided in lieu of the full document, which may contain proprietary information of Marsh ClearSight. Marsh ClearSight also requests that, because its systems contain the confidential information of all of its SaaS clients, any audits rights be replaced by an obligation to provide the County with a copy of its most current SOC1 Type II report upon request. Section II.p Because the disclosure of PHI is entirely within our clients' control, and because Marsh ClearSight does not request or create any PHI on its clients' behalf, Marsh ClearSight requests this section be replaced with a provision that confirms the County's compliance with its obligations under HIPAA. Section III Marsh ClearSight requests that the termination rights and data destruction obligations in this section be revised to be consistent with the termination rights in the SaaS Agreement. MARSH ClearSight Appendix A. End User Workstation Requirements 0010 MARSH MARSH ClearSight End User Workstation Requirements Marsh ClearSight, Marsh ClearSight Apps, Enterprise, STARS Discovery, STARS Intake Release Version: 16.1 Last Update: 4/4/2017 marshclearsighf.com MARSH ClearSight Table Of Contents End User Workstation Requirements 1 Marsh ClearSight, Marsh ClearSight Apps & Enterprise Requirements (SaaS) 1 Operating Systems and Browsers 1 Recommended Internet Connectivity Speeds 2 STARS Discovery & STARS Intake Mobile Device Requirements (Native) 2 STARS Discovery Mobile Device Operating System 2 STARS Intake Mobile Device Operating Systems 2 Appendix A: Compatibility Matrix 1 Enterprise & Marsh ClearSight Workstation Requirements (SaaS) 2 Operating Systems 2 Browsers 3 Other Components 4 STARS Discovery & STARS Intake Mobile Device Requirements (Native) 4 # STARS Discovery is available for use only with the Apple iPad. 4 Appendix B: End User Workstation Configuration Guide 1 Browser Settings — Internet Explorer 1 Internet Options . . 1 Security Tab Settings 2 Additional Internet Explorer Settings 5 Enterprise — Browser Requirement to Display Enterprise System Configuration Page 9 Transport Layer Security (TLS) — TLS 1.2 Settings 10 Desktop Browser Settings — Safari 11 Allow Cookies and Website Data 11 Enable Scroll Bar 11 Open Child Screen in a Separate Window 11 Run Silverlight for Enterprise & Open Pop -ups in .Net Manager 11 Transport Layer Security (TLS) — TLS 1.2 Settings 12 Mobile Device Browser Settings — Safari 13 Allow Pop -ups and Enable Cookies 13 Allow JavaScript to Run 13 Browser Settings — Firefox 15 Disable 'Use hardware acceleration when available" Setting 15 Transport Layer Security (TLS) — TLS 1.2 Settings 15 Browser Settings — Google Chrome 17 Transport Layer Security (TLS) — TLS 1.2 Settings 17 Business Intelligence (BI) - Java Upgrades and Memory Parameter Settings 18 Upgrade Java Version 18 Set Java Memory Parameters 18 Marsh ClearSight is one of the Marsh & McLennan Companies, together with Marsh. Guy Carpenter. Mercer. and Oliver Wyman. This document and any recommendations. analysis. or advice provided by Marsh ClearSight (collectively. the 'Marsh ClearSight Analysis') are intended solely for the entity identified as the recipient herein ("you'). This document contains proprietary. confidential information of Marsh ClearSight and may not be shared with any third party, including other insurance producers, without Marsh ClearSighfs prior written consent. Any statements concerning actuarial, tax, accounting. or legal matters are based solely an our experience as insurance brokers and risk consultants and are not to be relied upon as actuarial. accounting. tax, or legal advice, for which you should consult your own professional advisors. Any modeling, analyfics, or projections are subject to inherent uncertainly, and the Marsh ClearSight Analysis could be materially affected if any underlying assumptions. conditions. information. or factors are inaccurate or incomplete or should change. The information contained herein is based on sources we believe reliable. but we make no representation or warranty as to its accuracy. Except as may he set forth in an agreement between you and Marsh ClearSight. Marsh ClearSight shall have no obligation to update the Marsh ClearSighl Analysis and shall have no liability to you or any other party with regard to the Marsh ClearSight Analysis or to any services provided by a third party to you or Marsh ClearSight. Marsh ClearSight makes no representation or warranty concerning the application of policy wordings or the financial condition or solvency of insurers or reinsurers. Marsh ClearSight makes no assurances regarding the availability,cost, or terms of insurance coverage. ® 2016 Marsh ClearSight LLC. All rights reserved. Visit us at www.marshclearsight.com. Adobe® Reader® is a registered trademark of Adobe Systems Incorporated in the United States and/or other countries. Internet Explorer®. Microsoft® Office, Siiverfight®, Windows® 7, Windows© 8. Windows® 10, Windows® Vista0, Windows® XP, are either registered trademarks or trademarks of Microsoft Corporation in the United Stales and/or ether countries. Firefox is a registered trademark or trademark of the Mozilla Foundation. Java' is registered trademarks of Oracle Carburation and/or its affiliates. Other names may be trademarks of their respective owners. Safari®, iPad®, OS® and Apple iOS® are trademarks or registered trademarks of Apple Inc., in the U-S- and other countries_ Android'"" and Chrome® are Trademarks or registered trademarks of Google Inc., in the U.S. and other countries. Galaxy Tahitt is a trademark of Samsung Electronics Co.. Ltd. Rather than list the names and entities that own the trademarks at every instance: the publisher stales that it is using the names only for editorial purposes. and to the benefit of the Trademark owner, with no intention of infringing upon that trademark. MARSH ClearSight End User Workstation Requirements for Marsh ClearSight & Marsh ClearSight apps, Enterprise, STARS Discovery, STARS Intake This document lists operating systems, browsers, and other components required for use of the version 16.1 release of the following Marsh ClearSight products: • Marsh ClearSight (Community, Insights, App Center) and Marsh ClearSight apps are developed for use with desktop, laptop, and mobile device Internet browsers. Register for an account and log in to Marsh ClearSight at https://my.marshclearsight.com. • Enterprise (includes the Marsh ClearSight Enterprise app) work best when accessed from desktop or laptop internet browsers. • STARS Discovery is designed for use with the Apple iPacP and can be downloaded from the Apple App Store'. • STARS Intake can be used with iOS and Android -based mobile devices. It is available for download from the Apple App Store or the Google P€ayTM store. Marsh ClearSight reserves the right to amend this document based on testing performed during development of this release and all future releases. Marsh ClearSight, Marsh ClearSight Apps & Enterprise Requirements (SaaS) Use of Marsh ClearSight, Marsh ClearSight Apps & Enterprise requires an active internet connection. Any necessary browser configuration and settings changes are covered in "Appendix B: End User Workstation Browser Configuration Guide". Operating Systems and Browsers Required operating system and browser combinations for use of Marsh ClearSight, Marsh ClearSight apps, and Enterprise are listed in this section. For a full list of the operating systems and browser versions tested and certified for use with Marsh ClearSight and Marsh ClearSight apps, refer to "Appendix A: Compatibility Matrix". Marsh ClearSight & Marsh ClearSight apps Enterprise & Marsh ClearSight Enterprise app Windows 10 Windows 10 ■ Microsoft Edge • Microsoft Internet Explorer 11 (64-bit) • Microsoft Internet Explorer 11 (64-bit) • Mozilla® Firefox° 51.x or higher • Google ChromeTM 55.x or higher Windows 7, 8 (64-bit) Windows 7, 8 (64-bit) ■ Microsoft Internet Explorer 11 (64-bit) ■ Mozilla Firefox 51.x or higher • Google Chrome 55.x or higher • Microsoft Internet Explorer 11 (64-bit) Apple® Mac OS X® 10.x+ Apple Mac OS X 10.x+ • Apple Safari''' (Mac) 9.x or higher • Apple Safari (Mac) 9.x or higher 16.1 End User Workstation Requirements & Configuration MARSH ClearSight End User Workstation Requirements 12 Recommended Internet Connectivity Speeds To handle video or multimedia, Marsh ClearSight suggests a minimum Internet connection speed of 4Mbps down and 2Mbps up* from the end -user's workstation (cable internet-class speeds or better). For most images, .pdf, and other document files, Marsh ClearSight suggests a minimum Internet connection speed of 1.5Mbps down and .75Mbps (or 750kbps) up* (good DSL-class speeds or better). Internet Connectivity Speeds may be tested using various publicly -available Internet speed -testing websites such as speedtest.net to either Chicago, USA or to London, UK depending on the client's hosted geography. "Connectivity speeds are historically measured in bps or bits per second. Mobile Device Operating Systems • iOS 10 or higher (Apple iPad®? ■ iOS 9 or higher (Apple iPhone ) • AndroidTM 6 (Marshmallow) or higher (AndroidTM phone) • Android 5 (Lollipop) or higher (Android tablet) STARS Discovery & STARS Intake Mobile Device Requirements (Native) STARS Discovery was developed for use with the Apple iPa& and is available from the Apple App Store. The application is compatible with Enterprise 16.1 using the software listed below. Other versions of Enterprise, Professional Edition (PE), and Audit are not compatible with STARS Discovery. STARS Intake is available from the Apple App Store or the Google PlayTM store. It is compatible with Marsh ClearSight 16.1 & Enterprise 16.1 using the software listed below. Other versions of Enterprise, Professional Edition (PE), and Audit are not compatible with STARS Intake. For a full list of the operating systems and browser versions tested and certified for use with STARS Discovery and STARS Intake, refer to "Appendix A: Compatibility Matrix". STARS Discovery Mobile Device Operating System • iOS 10 or higher (Apple iPad®) STARS Intake Mobile Device Operating Systems • iOS 10 or higher (Apple iPacl% • iOS 9 or higher (Apple iPhone ) • AndroidTM 6 (Marshmallow) or higher (Android phone) • Android 5 (Lollipop) or higher (Android tablet) 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix A: Compatibility Matrix for Marsh ClearSight & Marsh ClearSight apps, Enterprise, STARS Discovery, STARS Intake This document lists third -party software components tested and certified for use with the version 16.1 release of the following Marsh ClearSight products: • Marsh ClearSight (Community, Insights, App Center) and Marsh ClearSight apps are developed for use with desktop, laptop, and mobile device Internet browsers. Register for an account and log in to Marsh ClearSight at https:l/my.marshclearsight.com, • Enterprise (includes the Marsh ClearSight Enterprise app) work best when accessed from desktop or laptop internet browsers. • STARS Discovery is designed for use with the Apple iPad''' and can be downloaded from the Apple App Store. • STARS Intake can be used with iOS and Android -based mobile devices. It is available for download from the Apple App Store or the Googie PlayTM store. Marsh ClearSight reserves the right to amend the list of third -party software components tested and certified for compatibility with the Marsh ClearSight products based on testing performed during development of this release and all future releases. KEY: Tested and certified with the Marsh ClearSight product listed. Marsh ClearSight or third -party software is not certified by Marsh ClearSight. Issues or conflicts are not anticipated if using this softwaretversion; however, compatibility cannot be guaranteed. Third -party software not tested and certified for use with the Marsh ClearSight product listed. 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix A: Compatibility Matrix 12 Enterprise & Marsh ClearSight Workstation Requirements (SaaS) Enterprise, Marsh ClearSight, and Marsh ClearSight apps are tested and certified for compatibility with third -party software components as indicated below. Operating Systems Blue shading indicates a change from the previous version. Click here to view the 16.0 guide. Desktop Operating Systems Enterprise' Marsh ClearSight2 Windows 10 a 0 Windows 7 & 8 (64-bit) is Windows 7 & 8 (32-bit) Windows XP Windows Vista X X Apple Mac OS X° 10.x+ IS % Mobile Device Operating Systems iOS 10 or higher (Apple iPad®) X iOS 9 or higher (Apple 'Phone°) X AndroidTM 6 (Marshmallow) or higher (AndroidT"^ phone) X Android 5 (Lollipop) or higher (Android tablet) X 1 Includes Enterprise accessed via https:llwww.csstars.comienterprisefLogin.cmdx and the Enterprise app launched from My Apps in Marsh ClearSight. 2 Includes all Marsh ClearSight apps (with the exception of the Marsh ClearSight Enterprise app). Marsh Clearsight apps are opened within Marsh ClearSight and do not require installation on your computer or mobile device. 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix A: Compatibility Matrix 3 Browsers Blue shading indicates a change from the previous version. Click here to view the 16.0 guide. NOTE: State forms will not be supported in the Chrome and Edge browsers. Software/VersionEnterprise' Marsh ClearSight2 Google Chrome TM 55.x + X 0 Microsoft Edge° X 02 Microsoft Internet Explorer® 11 (64-bit) 0 0 Microsoft Internet Explorer° 10 Microsoft Internet Explorer ®9 X Microsoft Internet Explorer® 8 XX Mozilla® Firefox®51 ist Q Apple Safari® (Mac) 9.x a j Mobile Device Browser/Version(s) Apple Safari (i0S device) X Google Chrome (AndroidTM & iOS devices) X Mozilla Firefox (AndroidTM & iOS devices) X 1 Includes Enterprise accessed via https/Jwww.csstars.comlenterprise/Login.cmdx and the Enterprise app launched from My Apps in Marsh ClearSight. System administrators accessing Enterprise Admin should use IE 9, IE 10, or IE 11. Prior to accessing Enterprise, or the Enterprise app via My Apps in Marsh ClearSight, workstation browser settings must be verified/configured. Refer to "Appendix B: End User Workstation Configuration Guide" for details. 2 Includes all Marsh ClearSight apps (with the exception of the Enterprise app). 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix A: Compatibility Matrix 14 Other Components Enterprise & Marsh ClearSight Workstation Requirements (SaaS) cant. SaftwareNersion Enterprise' Marsh ClearSight Adobe Reader 11.0 Adobe Reader 15.0 0 0 Microsoft Office 2015 Microsoft Office 2013 JavaTM Client (JVM) 1.7, 1.8 0 N/A Silverlight° 5.1.x3 0 N/A 1 Includes Enterprise app launched from the Marsh ClearSight App Center. 2 Includes all Marsh ClearSight apps (with the exception of the Enterprise app). 3 Client IT/network teams may have to put in a rule to allow download of (Enterprise/Client8in/Orion.Silverlight.BootStrapper.xap. By default, download of the file may be blocked by default proxy settings intended to block scripts/executables that could potentially contain malicious code. STARS Discovery & STARS Intake Mobile Device Requirements (Native) STARS Discovery is available from the Apple App Store and is compatible with Enterprise 16.1 using the software listed below. Other versions of Enterprise, Professional Edition (PE), and Audit are not compatible with STARS Discovery. STARS Intake is available from the Apple App Store or the Google Play MI store. It is compatible with Marsh ClearSight 16.1 & Enterprise 16.1 using the software listed below. Other versions of Enterprise, Professional Edition (PE), and Audit are not compatible with STARS Intake. Blue shading indicates a change from the previous version. Click here to view the 16.0 guide. soffwereNersion(s) STARS Discovery STARS Intake Apple iPad®(iOS 10 or higher) eit'isi Apple Phone® (iOS 9 or higher) Xt AndroidTM phone (AndroidTM 6 [Marshmallow] or higher) Xt I Android tablet (Android 5 [Lollipop] or higher) $ *STARS Discovery is available for use only with the Apple (Pad. 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix B: End User Workstation Configuration Guide Prior to accessing Marsh ClearSight 16.1, Marsh ClearSight 16.1 aPps, and/or Enterprise 16.1 (including Enterprise app from My Apps in Marsh ClearSight 16.1), user workstation browser settings must be verified and configured. Enterprise Business Objects users will also need to upgrade the Java version installed on their workstation, then set memory parameters. Marsh ClearSight is one of the Marsh 8 McLennan Companies. together with Marsh, Guy Carpenter. Mercer. and Oliver Wyman. This document and any recommendations, analysis. or advice provided by Marsh ClearSight (collectively, the 'Marsh ClearSight Analysis) are intended solely for the entity identified as the recipient herein ('you"). This document contains proprietary. confidential information of Marsh ClearSight and may not be shared with any third party. including other insurance producers, without Marsh ClearSight's prior written consent. Any statements concerning actuarial, lax, accounting, or legal matters are based solely on our experience as insurance brokers and risk consultants and are not to be relied upon as actuarial, accounting. tax, or legal advice, for which you should consult your awn professional advisors. Any modeling, anaiytics. or projections are subject to inherent uncertainty. and the Marsh ClearSight Analysis could be materially affected if any underlying assumptions. conditions, information, or factors are inaccurate or incomplete ar should change. The information contained herein regarding anticipated or expected functionality is based on sources we believe reliable. but we make no representation or warranty as to its accuracy. Neither Marsh nor Marsh ClearSight makes any assurances regarding the availability or price of any unreleased products. services or features referenced herein or in other documents. Although Marsh or Marsh ClearSight may provide descriptions, advice and recommendations. all decisions regarding the purchase of any services or the licensing of any software are the ultimate responsibility of the purchaser. who must decide on the specific products, services or features that are appropriate to its particular circumstances. ® 2016 Marsh ClearSight LLC. Wl rights reserved. Visit us al www.marshclearsighl.com. Internet Explorer® is either a registered trademark or trademark of Microsoft Corporation in the United States and/or other countries. Firefox0 is a registered trademark or trademark of the Mazilla Foundation, Java' " is registered trademarks of Oracle Corporation and;or its affiliates. Other names may be trademarks of their respective owners. Safari® is a trademark or registered trademark of Apple Enc., in the U.S. and other countries. Chrome'"' is a registered trademark or trademark of Gaogle, Inc. Rather than list the names and entities that own the trademarks at every instance. the publisher states that it is using the names only for editorial purposes. and to the benefit of the trademark owner_ with no intention of infringing upon that Trademark. 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Browser Settings - Internet Explorer Refer to "Browsers" on Appendix A page 3 for a list of the Internet Explorers versions compatible with Marsh ClearSight 16.1, Marsh ClearSight apps 16.1, and Enterprise 16.1. Internet Options General Tab Settings Follow these steps to ensure Internet Explorer opens pop -ups in a new window. 1. From the Tools menu of Internet Explorer, select Internet Options. 2. In the Internet Options window, click the General tab. 3. In the Tabs section, click Settings. (Figure 1) Internet Options General Security I Content Connections I Programs I Advanced Homepage........._....-......_.._............._......._----------.._......_...__.....----...._... F To create home page tabs, type each address on its own line. https://rnycsitarsportaLcom/ Browsing history Use current _ uae default blank Delete temporary files, history, cookies, saved passwords, and i#eb tarn information, ._... iidote hroAe rg history on exit Settings . J Search --- Change search defaults. Settngs Tabs Change hew wehpages are displayed in tabs. Colors Languages Fonts Cancel Figure 1 4. Check to see that the Always open pop -ups in a new window radio button is selected. (Figure 2) 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix C: Changes in End User Workstation Requirements' 2 r Tabbed Browsing Settings •, V Enable Tabbed Browsing (regtxes restarting Internet Explorer) Q Wam me when dosing multiple tabs 7 Always switch to new tabs when they are created E Show previews for iidnndual tabs n the taskbar' (J Enable QtackTabs (Ctrl+Q)' J' Enable Tab Groups' , Open each new tab next to the current tab 7 Open only the fast home page when Internet Explorer starts When a new tab is opened, open: The new tab page .. ,, . • When a pop-up is encountered: _. €ecinsemet rxprorer oucaae how pop -ups shook! open ;A. Always open pop -ups in a new window ,„ Alweyb open µ - s NL o heir tail Open Irks from other programs irt: ? A new window ( A new tab in the arrent window ) The current tabor window "Takes effect after you restart Internet Explorer Restore defaults ] OK Cancel Figure 2 5. Click OK to return to Internet Options. Security Tab Settings Security - Trusted Sites Follow these steps to add URLs as trusted sites. 1. From the Tools menu of Internet Explorer, select Internet Options. 2. From the Security tab, select Trusted Sites and click Sites. (Figure 3) !tT A 1Ya'K.r6 ,law 6r. Inaenet Local *Urine Truittefinet Rese+ete l Tntsted sites TPy #He moues wetr/tes tat y tn* not W daingic your °Dop leer ar your tks, You have webstes er the mne, Figure 3 3. Add the name of the Enterprise Server as a Trusted Site (see examples that follow) ensuring that the Require Server Verification (https) for all sites in this zone option is not selected. (Figure 4) 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix C: Changes in End User Workstation Requirements] 3 rrysrsd sees f ear cx. am te4mew* **Met $ .art. At =owl, el ass tow 4r c,.e see 1* 1 a:curnr *Or o. Add 9es wettaile to theme; e; d tt> s„'t 4,16 d .21 Webs teat t eleir10.39. 130. 175 trtles/5`rcww.starsaatarpan cam rkegNe Weer velfei (t1D :) far et otes r1 Olt :cog 1 Figure 4 4. When complete, click Close. IP address format: http:/199.99.0.999 (example: 10.15.2.47) Note: if the address is http, clear the check -box labeled Require server verification (https:) for all sites in this zone; otherwise, leave it checked. US ASP hosted clients: UK ASP hosted clients: Locally -hosted clients: https://www.csstars.com/Enterprise/ https:l/www.csstars.eu/Enterprise/ http://yourinternalsitename/stars https://reporting.csstars.com https://reporting.csstars.eu https:lluat.csstars.com/Enterprise/ https://uat.csstars.eu/ https:l/test-reporting.csstars.com https:fluatreporting.csstars.eu Security - Trusted Sites (Marsh ClearSight Data Discovery) The following URL should be added to the list of trusted sites for accessing Data Discovery in Marsh ClearSight apps using Internet Explorer. Refer to "Browsers" on Appendix A page 3 for a list of compatible Internet Explorer versions. Data Discovery (in Marsh ClearSight apps): https:/lprod-datadiscovery.csstars.coml Security - Custom Level Setting for Internet and Trusted Sites Note: You must apply the Custom Level setting changes to BOTH the Internet zone and Trusted Sites zone, regardless of Internet Explorer version. Settings are required for both zones across all Internet Explorer versions. 1. From the Tools menu of Internet Explorer, select Internet Options. 2. On the Security tab, click the Trusted sites icon. 3. On the Security tab, select Custom Level... 4. Ensure that the custom setting is set to Medium (default), as shown below. If not, then select Medium (default). 5. Click Reset... 6. Scroll to the Downloads section. 7. Click Enable beneath Automatic prompting for file downloads (Figure 5). 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix C: Changes in End User Workstation Requirements' 4 dektraebt wan) tot PIN 0 Nude 0 Water 6 Id Font **Abed O essd(a 0 hcfrat MO* 1'ICT erstrewurksetW 'takes sited char ser.1 restart Ware* Figure 5 8. Scroll to the Miscellaneous section. 9. Click Enable beneath Allow websites to open windows without address or status bars (Figure 6). Secutly Seth iqs Tni t d Sett sp *• Dila* Enatie to use rest protocols for aerie conbeet I Via* I if Privr„r urw...rebates ta ton mNane p..thaut afters or gem has ti Oksapie Li Era* `si*ar mole) t9nu�=t c!nat .... rjon'i oronvt Far dent er alte wiestgn sew cdr one a & 41, : n! -`--.. ' ...... _.... r 'Tara Wmhet tioureit&tits/ =Weer ... Row amcant *Ono aetett to, Lteestt .:._ Figure 6 10. Click OK. 11. Click Yes when prompted with the following alert: "Warning! Are you sure you want to change the settings for this zone?" 12. On the Security tab, click Internet (zone) icon (Figure 7). 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix C: Changes in End User Workstation Requirements' 5 Security Privacy Content Cis Pcograrns Advanced Select a zone to view or change security seitin Internet Local intranet Trusted sites Restricted sites Internet This zone is for Internet websites, except those listed in trusted and restricted zones. Sites Figure 7 13. Repeat steps 3-13 of this section to change settings for the Internet zone. 14. Click OK to close the Security Settings - Internet Zone dialog. 15. Click OK to close the Internet Options window. Note: Security level for this zone for Trusted sites and Internet is now set to Custom. 16. Close the browser and restart Internet Explorer. Additional Internet Explorer Settings In addition to the settings outlined in the Internet Options section above, the following settings should be configured for workstations with Internet Explorer. General Tab Settings 1. From the Tools menu of Internet Explorer, select Internet Options. 2. In the Internet Options window, click the General tab. 3. Remove check from the box labeled Delete browsing history on exit under the Browsing history section (Figure 8). 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix C: Changes in End User Workstation Requirements' 6 seat) i i---.. To emete Inane ptpe Labe, type ea :fillets On its own fnr, Delete tervorary flci, Nstary. Cooioes, 3tivtd pE 'dti$r Ofld Orb Oder broveI Q titttOry Off Clot Figure 8 4. Click Apply, Security Tab Settings 1. In the Internet Options window, click the Security tab. 2. Click the Trusted Sites (zone) icon and then click the Custom Level button (Figure 9). Intent options Gcnigt Senortty L Seed to zene tb view or sechrity sattrio. Warne fatal mere Trotted attet Rntnttod Tts teed tos Tha moo Wotan: +alei that VW hitt SOS Met &ton roar *- &Kum, *AI Mt Ens aria Awed for the __: Ai Low - 6t,t hti tafe garde a+d ,oral, prows are ao+ndtd Mott motto%•d OOfAt4tean tM'UspNtPrWg4 - ail adm awmert ton nth l • k roR'le6e for ate* ha Lou abxritety het 6,abat Pfotetofd piooe o-tgarea mowing 5,temot Clews') It�Y�nll, sl-.mV�Rl�wda..v„J OM* Figure 9 3. Scroll to the Miscellaneous section. 4. Click the Enable radio button beneath the Display mixed content setting (Figure 10). 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix C: Changes in End User Workstation Requirementsi 7 LEr'1V p..pt ha dent taveam ,-K b. Woo ero ow or .CWitie t ee.rr. ' C.* end eneo er roe ertl row les bode • Emile 0 Nona Rent molar Mans rnnlaa Urfa* - w Figure 10 5. Click OK. 6. When prompted with the Warning! Are you sure you want to change the settings for this zone? alert, click Yes. 7. Click OK to close the Internet Options dialog. 8. Close the window and restart Internet Explorer. Advanced Tab Settings 1. From the Tools menu of Internet Explorer, select Internet Options. 2. In the Internet Options window, click the Advanced tab. 3. Scroll to the HTTP 1.1 settings section. 4. Ensure that the Use HTTP 1.1 box is checked (Figure 11). (Click the check box if it is not already checked, and then click the Apply button). •t efe erI,Seatat r err- e« eex caexse .ir alrsi ki mod sellsvg j Ike..kre domes,CleteVt Fie E,rproree and Rut Moo . tl i user** Avteranilete n the totem 601010 add•e.e Use (host recent alto veem @NtON'q taby Yoth CO $, ,,rr the Padova F1P (for firerraf and CraL=darn m atbity r the twoalle xreli Ki i L MP sett* s Litaa tt1YP j.1 '�' '.. i the NRP L 19rouc h Proxy _ix tntennaeonai• r Always shoe encoded add, elate f Serd tt 4 saver names hr fntranetMs Send ON serve` moo s tar nun-Gmenet 1%lI gi. Send SAL path al ttrF. Sere Vml amen, Wrap fur Monte MU 3 1 "rakes effect after Kr., festal Avo cm Wes `lieldsvnoed„!a fta.' Reset SrCmet Explorer settaxgs .--- . szerru gnat Endotees setanys to Ow *Oat (.. wit... You fferrfd oriy foe Ira if Nall brarrlee on an u'hgetile flea. Figure 11 5. Click OK. 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix C: Changes in End User Workstation Requirements' 8 6. Scroll to the Security section. 7. Ensure that Empty Temporary Internet Files folder when browser is closed box is not checked (Figure 12). (Click the check box if it is already checked, and then click the Apply button). i i r G�nr_r<i %i4i!Y.l. s. !u°ni 1.‘ii,N44ra.. W lldat unmated nw.Ym yl erir M.1,9 (town( il*.k Dr pii 1.4are age ns,rt..to @wk for gNraa on depori,maa gawasw -rrr .Y:siH':wr+ sa `." PFei. T.PC rr Warr ,wr'w. *no, yew, 4a.t a deed • ,r.w.aur.E win r &WA Emeyrio NMA•e4+hsSaw` ▪ rrn[ r ww,.. Cr' . sa r�o apywe a�+v Maia` EV * Ssr.6trmen Air ur SA id ur UT. 10 •!Ma OW'rhr ,au,nsui hxensi Darr aowo timerrsrrbpeoers dedoltlrl- tPs INFAA Orr Ie ilati laV' VOMer 4P w.r..404 Pt* 0 by Mtn tvsio..lfrw'ad... Figure 12 Note: If you are unable to change this option due to an IT restriction and the box remains checked, the initial load time of Enterprise for that session will be noticeably, but not significantly, affected. (Login time will take slightly longer as the xap files will have to be downloaded at the beginning of a new session.) 8. Click OK. Setting Internet Explorer 11 as the Default Browser To make 1E11 your default browser: 1. Open Internet Explorer, select the Tools button';,, and then choose Internet options. 2. Select the Programs tab, and then choose Make default. 3. Click OK, and then close Internet Explorer. 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix C: Changes in End User Workstation Requirements] 9 Enterprise - Browser Requirement to Display Enterprise System Configuration Page Upon initial access of the Enterprise display system configuration page, Internet Explorer will display a pop up message that it requires "Microsoft Script Runtimes' to display the page. Click the Allow button to enable Microsoft Script Runtime plugin. Required Settings tenang Current Value Required Value SrHedlghl Version Internet Explorer Stars Amin Java Emoted Java Runtime Engine Version Cookies Enabled POW, Blocked Operating System version .Net Franeewg 5 V100104 t5) Mobs Amadei Reader version 5.1.50901.0. 11.0.9600.18537 Inferrer Explorer 11 hue unable :odelell:nne bud lake Modes. 2,0.50727, 3.5.39729. 3.0.30729,4.0C.4.0E,. 19 5.1.40416.0 9.10,11 !almost Explorer 9,10,11 We 1.8 1me false Wmtlows 7'3/Indes s 0 Windows XP Mac OS M 10_10_4 3540,452 11.15 Other Settings Setting Cumen Value Screen Size Flash f'ayef v IE Oocumenr Made 163os 1050 240 0.194 IE 10 Standards Mode Language en -US Opelallmg System Type 64 Br5 Connection Protocol Type Mips. Mobile false Local Tnne Zone Offset OTC -5 Local T!me Zone Name Central Standard lane Local Time Tub Mar 281657..16 CDT 2017 Trusted 54e true Secured Port 443 Access's* false Browser User agent 510::112050 lchmpalhle 5151E f00: "randows NT 6.1 NO54'64. Tlidenff7 0: SLCC2, .NET 118 3.a50727. NET CLR 3.5 30729; .NET CLR 3.0.30729, Media Center PC e B 6604,5c_ NE740E. Zoom 16 Pidgins 5005 Figure 13 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix C: Changes in End User Workstation Requirements' 10 Transport Layer Security (TLS) - TLS 1.2 Settings 1. From the Internet Explorer Tools menu (click i'3, on the toolbar), select Internet Options. 2. On the Internet Options window, click the Advanced tab. 3. Scroll to the Security section. 4. Click the Use TLS 1.2 check box, as shown in the following figure. 5. Click OK. General Security Content Connections Frogran s Advanced t Settings Empty Temporary Internet Fks folder when browser is do Enable DOM Storage fri Enable Enhanced Protected Mode" f Enable Integrated Windows Authentication" L. Enable native XMLHTTP support Enable SmartSereen Fiter 71 Enable Strict P3P Validation* 77 Send Do Not Track requests to sites you visit in Internet E n Use SSL 2.0 use SSL. 3.0 yi Use 'I1 S 1.0 L'?; Use TLS 1.1 J`, Use TLS 1.2 Warn about certificate address mismatch" 4 I xt� *Takes effect after yo.i restart your computer f Res e advanced settings Reset Internet Wirer settings n� Resets Internet Explorer's settings to their default condition. You should only use this if your browser is in an unusable state. IReset... 5 settings are managed by your system administrator. Figure 14 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix C: Changes in End User Workstation Requirements' 11 Desktop Browser Settings - Safari Refer to "Browsers" on Appendix A page 3 for a list of the Safari" versions that are compatible with Marsh ClearSight 16.1 and Enterprise 16.1. Allow Cookies and Website Data Safari Tab Settings 1. From the menu bar, click Safari then click Preferences... 2. Click on the Privacy tab at the top of the dialog. 3. Under Cookies and website data click Always allow. 4. Restart browser for changes to take effect. Enable Scroll Bar Finder Tab Settings 1. From the menu, click System Preferences, and then click General. 2. Under Show scroll bars, select Always, as shown in the following figure. hr•••M•V MIYIIN!nM14M• ,_— wu Ye nonwami +Yf kVF.. w+IMN MM S.w 4-..M..kMIN 1-!ui.. . --.4--v amt.. •?H fd 4•11.1*k4s M4.1x • SVYf Figure 15 3. Refresh the webpage with the Tableau view. Open Child Screen in a Separate Window Preference Tab Settings 1. From the menu bar, click Safari then click Preferences... 2. Click on the Privacy tab at the top of the dialog. 3. Choose Automatically for Open pages in tabs instead of windows. 4. Uncheck the options displayed in the following screen shot: Figure 16 Run Silverlight for Enterprise & Open Pop -ups in .Net Manager Preference Tab Settings 1. Access website that needs Silverlight Plug-in to be configured. 2. From the menu bar, click Safari then click Preferences... 3. Click on the Security tab at the top of the dialog. 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix C: Changes in End User Workstation Requirements' 12 4. In Internet Plug -ins, ensure the Allow Plug -ins is checked. 5. Next to Allow Plug -ins, click Website Settings. 6. On the dialog that displays, select Silverlight from the list of plug -ins. 7. Locate domainlurl in list of Currently Open Websites. 8. Click drop -down next to domainlurl and choose Run in Unsafe Mode. 9. In the pop-up dialog that opens, click Trust. 10. Click Done to close the dialog. 11. Quit Safari (to apply the setting). 12. Re -open Safari and access the website. Transport Layer Security (TLS) - TLS 1.2 Settings There are no options for enabling SSL protocols. If you are using Safari 9.x or greater, TLS 1.1 and TLS 1.2 are automatically enabled. 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix C: Changes in End User Workstation Requirements' 13 Mobile Device Browser Settings - Safari Refer to "Browsers" on Appendix A page 3 for a list of the Safari@ versions that are compatible with Marsh ClearSight 16.1 and Enterprise 16.1. Allow Pop -ups and Enable Cookies 1. Tap Settings then tap Safari. 2. In the General section, turn off Block Pop -ups, as in the following figure. +wax u.-n .44 �w..w i•ne Raman An • n 111 Figure 17 3. In the Privacy & Security section, tap Block Cookies >. 4. Under Cookies and Website Data, tap Always Allow, as shown in the following figure. ▪ rrw+. �. n,naaw • r mow 0 tjra Figure 18 Allow JavaScript to Run 1. Tap Settings, then tap Safari. 2. Scroll to the bottom of the screen, and tap Advanced >, as shown in the following figure. 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix C: Changes in End User Workstation Requirements] 14 < $M1r-qv Sean UM, MOO 5PrvIn Clear I1 *ary Clear 'wines and L ata FEADP4,.] UST CMG C41!tlar data IPan x*4w=eedmtei. -d :a.a F{xxdxtu Lit Dem. Mxq! 0041 br M ,.:wading Figure 19 3. Tap JavaScript, as shown in the following figure. < Sahr Pdvalrcwr NE& Le € ata .Lavaacrpt f r. Wets Inspector wix Ity Teti, lit woo', rek'lv013 t Sdrif tt.-l:I%fl LotI' WEV, .:.4E4:Oa Au.+acw car mub-o'L {. x,.,p,it ir, nr'W4 i"o Atrrs14.0 AifFoifxY bl •rswe cmrmtaE. Figure 20 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix C: Changes in End User Workstation Requirements' 15 Browser Settings - Firefox To improve Enterprise performance when accessing via Firefox®, users should disable the "Use hardware acceleration when available" browser setting. Refer to "Browsers" on Appendix A page 3 for a list of the Firefox versions that are compatible with Marsh ClearSight 16.1 and Enterprise 16.1. Disable "Use hardware acceleration when available" Setting 1. From the Firefox menu, click Options. 2. Click Advanced in list of options. 3. De -select (uncheck) Use hardware acceleration when available check -box, as shown in the following figure. � S Advanced General Cats Che ss Network Upda[e Ce tAcsies AmAyt. ;ne[agarA s`o rawgzite •hilfxrt des 501140 'C4. kfit when i Aat! tymn9 fNe<nr m ..w.121A0.5.;y °cz e,clarecs eg 04,7E Browsing ne Use dulczcraitmg d Usc-. ;fhw:a;im LAI tup.thwire.k..oerat1rr+ wilco a004SC4 Figure 21 4. Restart browser. Iransport Layer Security (TLS) - TLS 1.2 Settings By default, Firefox 43.x supports TLS 1.0, TLS 1.1, and TLS 1.2. As a result, you should not have to make any changes, though you can double-check TLS settings using the steps listed below. When viewing TLS settings in Firefox, the following values are used: • 1—TLS 1.0 • 2—TLS 1.1 • 3—TLS 1.2 1. In a new tab, type or paste the following into the address bar: about:config. 2. Press Enter/ Return, then click the 1'11 be careful, I promise! button. 3. In the search box above the list that displays, type or paste TLS then wait for the list to refresh. 4. Do one of the following, if necessary: 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix C: Changes in End User Workstation Requirements' 16 • If the security.tls.version.max preference is bolded and "user set" to a value other than 3, right -click and reset the preference to restore the default value of 3. • If the security.tls.version.min preference is bolded and "user set" to a value other than 1, right -click and reset the preference to restore the default value of 1. 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix C: Changes in End User Workstation Requirements' 17 Browser Settings - Google Chrome Refer to "Browsers" on Appendix A page 3 for a list of the Chrome versions that are compatible with Marsh ClearSight 16.1. Transport Layer Security (TLS) - TLS 1.2 Settings Google Chrome uses proxy settings of Internet Explorer. 1. With Google Chrome open, click Alt Fand select Settings. 2. Scroll down and select Show advanced settings... 3. Scroll down to the Network section and click Change proxy settings... 4. Select the Advanced tab, then scroll down to the Security section. 5. Find and check Use TLS 1.2. 6. Press OK. 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix C: Changes in End User Workstation Requirements] 18 Business Intelligence (BI) - Java Upgrades and Memory Parameter Settings Prior to use of Business Objects in Enterprise, the Enterprise app via My Apps in Marsh ClearSight, or the BI Reports Management app (accessible via My Apps in Marsh ClearSight), the version of JavaTM installed on client workstations should be verified and upgraded, if necessary. Following upgrade, Java memory parameters should also be set. Refer to this document for assistance. Upgrade Java Version Upgrade Java versions earlier than 1.7 by installing Java Runtime Environment (JRE) 7 (32-Bit Setup). As of the publication of this document (01/25/2017), the new version can be accessed using the following URL: http://does.oracle.comliavasei7/does/webnoteslinstall/index.html. Set Java Memory Parameters Once the installation of Java is complete or if Java version is already version 1.7, you will need to set memory parameters and enable protections. 1. From the Start button on the taskbar, click Control Panel and open Java. 2. From the Java tab of the Java Control Panel, click View... 3. Enter the following into the Java Runtime Parameters field:-Xms1024m Xmx1024m (see the following figure). 4. Click OK. L4 lava RA nti me Environment Settings.,;. Java Rename Yeraians Leer' ' Sysiern 1 PlatForm Product Location Path Runtime Parameters Enabtect 1 F, '.1 A 11 I 1F41-p• PKavA c •' rmram Fit.*, e\r-R -Ymc 1f174m-'Ymv1f1:24 1 '- 1.7 1.7.0.26 5. i" .Fi -. me1024m41mx1024m IlEil Fnd Add l Remove +cx c ` Figure 22 5. To clear the Java cache, from the General tab, click Settings... under Temporary Internet Files, as shown in the following figure. 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix C: Changes in End User Workstation Requirements' 19 Java Control Panel 0 General Java About Security Advanced View version information about Java Control Panel. About.. - Network Settings - _.. Network settings are used when making Internet connections. By default, lava will use the network settings n your web browser. Only advanced users should modify these settings. Network Settings... -- Temporary Internet Files Wes you use in Java applications are stored in a special folder for guide execution rater. Only advanced users should delete ties or modify these settings. Settings... OK Cancel Figure 23 6. Click the Delete Files button, as shown in the following figure. Temporary Files Settings Keep temporary files on my computer. Locates Select the location where temporary lies are kept: ;erslpahaaroniNAppDatalkocalt.ow4Sc n ava1Peploymentkache Disic Space Select the compression level for JAR Nes: 'None Set the amount of disk space for storing temporary files: Figure 24 7. Click OK to confirm deletion of temporary files. V 32768 1 NE Restate Defatits 16.1 End User Workstation Requirements & Configuration MARSH ClearSight Appendix C: Changes in End User Workstation Requirements' 20 8. Click OK to close the Temporary File Settings window. 9. In the Java Control Panel window, click the Advanced tab. 10. Under Mixed code, confirm that Enable - hide warning and run with protections is selected, as in the following figure, then click OK. 5fra.ts giger sixth. me -el -wee Mien Litt Se-ciMP WWrr,riS :a?brr wring nr icing .enne%. renege ce.yero rcr91..7aa-] 1r1ir 5,0' :ilv. .wrfi:rIr 4nr. wve ere- la.vF} Karl Ludt 18r313.11 1. I.l1r4.tL t .tr"feik,t, eo4 iau farm% trier6zei • Eno ear . a n aec rm w.• pxa: tv-r • ',At. .<*474, Pp4.mn0sam7k areabmrutmdrsm • s .v.wm.,nr-r«.-an 23. .� of (Ma itt 4144 Olt x7kaut+4nCtMlri+nep Orlft r ne ron euirs ILRta) lWetOn- e5eat hw eirni i=S) ▪ kid;Co.s WOGS. WV, TLC cer*a a itirrarain 1ee:,e ▪ M rrrrkniet es ya,re Ne,n --�: ax e3r1-t ytier�rm,wrra} desk rp AS.wef=at rr+.riso=ft tte+gaRw;J#f rr tS'i • 9tr«<1•ea ra OC`.k *alrif WIN; Ei -Mixed code (sandboxed vs, trusted) security verification Enable - show warming If needed Enable - hide warning and rur7 with pr ot&tion Enable -hie warning and don't rerun urtnAted code Disabt verification (not recommended') Figure 25 16.1 End User Workstation Requirements & Configuration S ClearSight MARSH MARSH ClearSight HOSTING OVERVIEW May 2016 01 MARSH Table of Contents CONNECTING TO MARSH CLEARSIGHT APPLICATIONS 4 MARSH CLEARSIGHT SECURITY ELEMENTS 7 DATA CENTER SECURITY ELEMENTS 12 MARSH CLEARSIGHT INTERNAL PROCESSES 14 VENDOR SUPPORT 18 DISASTER RECOVERY 18 DR TESTING METHODOLOGY 20 ACCEPTABLE USE POLICY 20 MARSH CfearSight Marsh ClearSight HOSTING At Marsh ClearSight, our top priority is to ensure high system availability, performance and security for our clients. In this regard, Marsh ClearSight employs industry leading experts and works with world class partners to ensure the highest level of security. Our experience has enabled us to develop industry leading best practices, privacy policies, compliance programs, and security measures to meet the growing demands and challenges in today's complex security environment. In this paper, we will discuss the infrastructure on which the Marsh ClearSight Cloud Service, the underlying Software -as -a -Service ("SaaS") platform for Marsh ClearSight solutions, is built on as well as the mechanisms that secure client data at rest and in motion. This includes looking at the CenturyLink® Data Center that the Marsh ClearSight Cloud Service utilizes, the design of the Marsh ClearSight Cloud Service infrastructure, how data is secured on the end -user devices and the certifications Marsh ClearSight has passed. MARSH ClearSight CONNECTING TO MARSH CLEARSIGHT APPLICATIONS OVERVIEW Clients will need to ensure that ports 80 (HTTP) and 443 (HTTPS) are available outbound from local user machines. All traffic for Marsh ClearSight is transmitted over port 443(HTTPS) via an internet connection. Users will need to ensure that they have the Microsoft Internet Explorer web browser installed, and that the web browser supports a minimum of 128 bit encryption. AUTHENICATION & AUTHORIZATION Centralized systems make our network infrastructure easier to secure. A single point of access connected to your centralized permissions ensures that all users are properly authenticated and only have access to applications and data specific to their permissions. Built-in password management strengthens security and facilities compliance with government regulations. Single sign -on capabilities streamline the user experience by logging users on to all of their systems with a single password. We also incorporate expiring passwords and a password tracking system. Authentication and Authorization Services are used to enable access to Marsh ClearSight solutions based on: ■ Two -Factor Authentication (2FA) PLUS • A User ID & password FOLLOWED BY • Authorizations controls The unified authentication process deters malicious users from accessing Marsh ClearSight services. Marsh ClearSight makes widespread use of two -factor (2-step) authentication mechanisms, such as certificates and one-time password generators. o Two -factor authentication is required for all access to production environments and resources through Marsh ClearSight. Marsh ClearSight requires the use of a unique User JD to access our solutions. o This User ID/Account is used to identify each person's activity on the Marsh ClearSight network. This includes any access to employee or client data where passwords or passphrases are required for authentication. ■ When signing into Marsh ClearSight Solutions, the password policies are enforced. This includes password expiration, restrictions on password reuse and sufficient password strength. o Passwords are stored using a salted hash with the SHA-256 algorithm • Marsh ClearSight utilizes authorization controls. o Access to information is granted on a least -privilege and need -to -know basis. Within applications, a hierarchy of controls limits access to data and system functionality according to user roles, levels of authority and/or job function. 4 MARSH ClearSight SINGLE SIGN ON (SSO) Marsh ClearSight can also support secure authentication controls. Marsh ClearSight Solutions supports SAML2.0 (Security Assertion Markup Language) and provides Single Sign -On functionality. SAML (Security Assertion Markup Language) is a XML and HTTP industry standard based way to perform Single -Sign On (SSO) between online applications. Marsh ClearSight supports SAML out of the box, and it is the preferred way to integrate SSO for your users. User Service Provider {SP) 1. User is redirected to fDP with SAIL auth reques' , 2. IDP parses SAML auth request 3. 111P responds with login form 4. User enters credentiais and submits login form Identity Provider {IDP) • 6. 10P respond 3 with IDP cookie and SAML auth response form 5.. IDP verifies user credentials —7. SAM L data is sent to SP with POST from user's browser 8. SP parses SAUL response data and creates new SP user ar authenticates existing SP user 4. SP respond; with SP cookie and target resource redirect --10. Authenticored user follows redirect to target resource—v. BROWSER CACHING ■ Browser caching of authentication information or user specific information is not enabled by Marsh ClearSight Solutions. TRUST RELATIONSHIPS • The only trust relationships in Marsh ClearSight solutions are those with SAML identity providers. These identity providers are validated using digital certificates. Identity Providers (IdP) Marsh ClearSight coverage of SAML SSO features allow integration with any authentication provider that supports SAML 2.0. MARSH ClearSight 1 SAML SSO Terminology SAML SSO has two high-level concepts used to identify the systems in a SAML SSO scenario: ■ Service Provider (SP): The application the user needs to access, in this case the Marsh ClearSight Solutions. ■ Identity Provider (IdP): The sign on system that will authenticate the user via username and password, or another verification method. All SAML SSO scenarios share common terminology to describe requests and responses between the SP and IdP: ■ Authentication Request (AuthnRequest): A request from the SP to the IdP, made on behalf of the user after they initiate sign on. Marsh ClearSight initiates sign on when a user clicks the sign on link, or attempts to visit a protected resource such as a page or file attachment. ■ Assertion: An XML document, either part of an ldP's response to an authentication request or an IdP's unsolicited request to sign a user into a SP, that contains the metadata required to sign on or create a user on the SP DATABASE ACCESS CONTROL Marsh ClearSight has controls and practices to protect the security of client information. Marsh ClearSight Solutions run in a multi -tenant, distributed environment. Instead of segregating each client's data onto a single machine or set of machines, Marsh ClearSight client data (as well as Marsh ClearSight's own data) is distributed among a shared infrastructure composed of Marsh ClearSight many homogeneous machines and located across Marsh ClearSight's data centers. Figure 1. A multi -tenant application environment Tenant ? s user • a -enant 1'a users • _y Tenant Tenant B Tenant A enant B 6 MARSH ClearSight • DATA AT REST ENCRYPTION Marsh ClearSight utilizes EMC® Symmetrix Data at Rest (DAR) encryption (AES-256). By securing data on an enterprise storage, DAR encryption ensures that the potential exposure of sensitive data on discarded, misplaced, or stolen media is reduced or eliminated. This process protects your information from unauthorized access when drives are removed from the system. DAR provides encryption using the Fibre Channel I/O modules that incorporate XTS-AES 256 bit Data At Rest encryption. These modules encrypt and decrypt data as it is being written to or read from a drive. All drives are encrypted, including data drives, spares, and drives with no provisioned volumes. With DAR encryption, keys are self -managed with no need to replicate keys across volume snapshots or remote sites. MARSH CLEARSIGHT SECURITY ELEMENTS OVERVIEW In today's environment, we recognize the ever changing nature of information/data security. In this regard, Marsh ClearSight invests in efficient and effective ways to protect your most critical data assets. We believe that our time tested policies and practices provide a solid foundation for addressing client concerns and enabling greater trust in Marsh ClearSight. MARSH CLEARSIGHT SECURITY MEASURES A vulnerability management program is in place that includes server hardening, scanning, alerting, and security and operating system patch management. Security vulnerabilities and emerging threats are tracked by information security personnel, assessed by technical experts and handled according to risk priority. • N+1 facility, infrastructure and network technology designs (99.995% availability) • Multifactor biometric access • Physical Security Management and Controls (CCTV, intrusion/motion detection and 24x7 monitoring • Segregated cages (locked cages) • Dedicated drops • Change and Configuration Management • Business Continuity & Crisis Management • 24x7x365 Network Operations Monitoring & Technical Operations Centre • Operations Event and Incident Management • Service Level Availability Commitments • Employee security roles, responsibilities and security awareness training • DataCenter certifications:IS09001/15014001/15020000/IS027001/SSAE 16 J Included J Included J Included d Included 4 Included 4 Included Included 1 Included 4 Included Included J Included J Included 7 MARSH ClearSight Perimeter Security • IP reputation filtering • DoS/DDoS mitigation • Use of host -based firewalls • SIEM Log management • Independent security assessments • Identity Access Management System (IAMS) tracking d Included J Included Ai Included 1 Included d Included J Included Network Security • Intrusion detection/prevention • Unlimited isolated security zones • Private network segmentation • Vulnerability monitoring • Vulnerability audits • Patch management for security updates • Use of antivirus software for malware detection • Identity Access Management System (TAMS) tracking J Included J Included J Included 4 Included J Included d Included J Included 1 Included Server Security • Hardened operating systems • Managed OS patches and updates • Hardened VMware hypervisor • Unnecessary services disabled • Enhanced malware protection • Resource availability monitoring • Network event logging 4 Included 4 Included Ni Included Included J Included 4 Included 41 Included Application Security • Web application firewalls for port 80 (HTTP) and 443 (SSL) • Intelligent WAF policies for common attacks • Application specific and custom port WAF policies • HTTP DoS and low-level application attack mitigation • Application performance monitoring • SSL certificates • Software Development Life Cycle (SDLC) • SAST ( Static Application Security Testing) • DAST (Dynamic Application Security Testing) 4 Included 4 included 11 Included 4 Included d Included 4 Included 1 Included J Included 4 Included DataBase Security • Data Separation • Access Control • Identity Access Management System (IAMS) tracking • DATA At REST w/AES 256 Encryption Included 4 Included d Included d Included MARSH ClearSight Authentication Security • Two -factor authentication PLUS ID /password required to log in • Managed User roles • Identity Access Management System (IAMS) tracking • https (Ciphers Supported: TLS 12) ▪ Single -Sign Protocol (SAML 2.0) d Included d Included Included d Included d Included Administrative Security • Secure remote access (SSLVPN) • Secure portal for user management • Site -to -Site L2LVPN • MPLS termination • SIEM Log management • Two -factor authentication • Identity Access Management System (IAMS) tracking • Marsh ClearSight certifications : SSAE 16 ( SOC I Type II) - available upon request d Included d Included d included d Included d Included d Included d Included d Included MARSH CLEARSIGHT SECURE DEVELOPMENT LJFECYCLE (SDLC) Marsh ClearSight follows the Secure Development Lifecycle (SDLC) process. This process is a rigorous and comprehensive set of security activities that span software development practices, processes and tools. The Marsh ClearSight SDLC is integrated in the product development lifecycle from design and development to quality assurance, testing, and deployment. The Marsh ClearSight SDLC is continuously evolving based on changes in technology, security best practices, and the current threat landscape. Marsh ClearSight SDLC activities include, some or all of the following recommended practices, processes, and tools: • Secure coding guidelines, rules, and analysis • Product health, risk, and threat landscape analysis. • Secure coding guidelines, rules, and analysis • Service roadmaps, security tools, and testing methods that guide the Marsh ClearSight security team to help address the Open Web Application Security Project (OWASP) Top 10 most critical web application security & CWE/SANS Top 25 most dangerous software errors • Security architecture review and penetration testing • Source code reviews to help eliminate known bugs that could lead to vulnerabilities • User -generated content validation • Static and dynamic code analysis • Application and network scanning • Full readiness review, response plans, and release of developer education materials • Security training and certification for product teams 9 MARSH ClearSight OWASP Marsh ClearSight utilizes the OWASP Top Ten Security guidelines. OWASP Top Ten is a powerful awareness document for web application security. The OWASP Top Ten is a broad consensus about the most critical web application security flaws developed by security experts from around the world. Al Injection This issue can happen for either XML or SQL, but Marsh ClearSight Solutions are limited in its vulnerability to SQL injection attacks since we don't accept XML instructions in our code yet. The risk of SQL injections are mitigated in Marsh ClearSight Solutions by requiring the developers to use parameterized SQL statements instead of concatenating strings in the code for SQL statements. A2 Cross -Site Scripting (XSS) In addition to establishing an SDLC lifecycre, Marsh ClearSight utilizes established security libraries for encoding and escaping. The application signature detection engine includes various XSS signatures. The request validation process ensures only relevant characters can be submitted. In all, Marsh ClearSight • Does not include user supplied input in the output page • Encodes all user supplied input on the output page o HTML Encoding o URL Encoding o JavaScript Encoding o CSS Encoding o User Input should not be allowed anywhere else ■ Sanitizes user input A3 Insecure Direct Object References Marsh ClearSight Solutions have entity access checks which include instance level data access security tools before we allow an entity instance to be browsed or updated. A4 Broken Authentication and Session Marsh ClearSight's Solutions utilize strict security password guidelines. Strong passwords must contain at least three of the four: lower, upper, numeric, and punctuation. Strong passwords are optional for locally hosted installations, but required for Hosted clients. Minimum length is configurable, from 8 to 20 characters. A history of previously used passwords is maintained. Users are not permitted to reuse their previous passwords up to a configurable number. The minimum is the last 8 passwords for Hosted clients. Passwords expire after a configurable period of time. The maximum period of time is 90 days before the password expires. 10 MARSH ClearSight Password Use The number of failed login attempts allowed before lockout is configurable. The Valid range is 1 to 5 with a default of 5 attempts. Failed passwords are not logged. Users are told that their failed login attempts are either due to a system error or invalid credentials but which part of the credentials is not communicated to avoid validating the user id to a potential hacker. When the user logs in, they are informed how many failed attempts were made on their account since their last login and the date and time of the last successful login. Password Storage Passwords are stored as a salted hash implemented with the SHA-256 algorithm. The Marsh ClearSight application is only supported in installations using SSL, protecting credentials in transit. Account Lists Only security administrators have access to a list of the users in the system. User IDs are not displayed outside of the security administration pages. A5 Broken Authentication and Session Marsh ClearSight's Solutions utilize 2 form factor authentication for access control. This is a preventive measure used in an user's session. Tokens are long cryptographic values that are difficult to guess. These will be generated when a users' session begins and will be associated with this particular user's session. In order for an attacker to forge an HTTP request, they would have to know the particular challenge value (token) of the victim's session. The disclosure of the challenge token in the URL (GET requests) should be done wisely and with awareness to CSRF attacks. A6 Security Misconfiguration When servers or network configurations are added/changed on the Marsh ClearSight Cloud Service, a checklist is used to ensure that the changes are performed correctly, This checklist is reviewed by the team leader prior to the system being added to the production environment. A7 Broken Authentication and Session Marsh ClearSight meets all the authentication and session management requirements defined in OWASP's Application Security Verification Standard (ASVS) areas V2 (Authentication) and V3 (Session Management). Marsh ClearSight's Solutions will only use the inbuilt session management mechanism. In all, Marsh ClearSight • Determines the best method of protection, often file, database, or data element encryption • Uses strong encryption algorithms A8 Failure to Restrict URL Access The routing mechanism of URLs takes into account the package access privileges for a given user. If a user lacks those privileges, the URL does not complete the regular execution path. A9 Insufficient Transport Layer Protection Marsh ClearSight requires SSL for all sensitive pages. Non-SSL requests to Marsh ClearSight are redirected to the SSL page. In addition, we set the `secure' flag on all sensitive cookies. 11 MARSH ClearSight Al 0 Invalidated Redirects and Forwards Redirects are to our own website. When a feature requires the display of an external website link, it's provided as an href. Validation enforcement makes sure characters that are usually associated with redirects and forwards are not allowed as part application usage. DATA CENTER SECURITY ELEMENTS OVERVIEW Marsh ClearSight production data center facility is located in Elk Grove Village, Illinois. The Chicago data centers offer more than 347,000 sq/ft of combined Tier III Certified space with fully redundant utility feeds and network diverse infrastructure, The data center facility serves as the hosting platform for all Marsh ClearSight Solutions and supporting services, The Marsh ClearSight disaster recovery site is located in Dallas, Texas, Tier III Certified, The data center facilities are owned and managed by CenturyLink® A CenturyLink Company. PHYSICAL SECURITY The security and integrity of each CenturyLink® data center is achieved and maintained by robust facility construction, access controls, video surveillance monitoring, 24/7 staffing, and comprehensive policies and procedures. Data Center Security personnel receive security training and certification prior to their full-time assignment within a data center and continuously thereafter. Data Center Security personnel also maintain First Aid, CPR and AED training certifications. DATA CENTER CONSTRUCTION Critical exterior perimeter walls, doors, and windows are constructed of materials that afford UL Standard #752, Level HI Ballistic Protection. CenturyLink® uses a hot aisle/cold aisle configuration in its data centers. Cabinets/racks are arranged front -to - front (cold aisle) and back-to-back (hot aisle). Cold aisle has perforated floor tiles that enable cool air to come up from the raised floor - hot aisle does not have perforated tiles. Cool air from the cold aisle circulates through each cabinet/rack and goes out the back into the hot aisle. Eliminates the direct transfer of hot exhaust air from one system into the intake air of another system. PRODUCTION DATA CENTER FACILITY The production data center was designed for resiliency. The data center is hosted by CenturyLink® and features n +1 redundant Uninterruptible Power Systems (UPS) and diesel generators, advanced fire protection and suppression systems (inert gas and dry -pipe sprinklers inspected semi-annually), and redundant HVAC, The fire alarms alert the local fire department directly. The data center infrastructure is based on the n+1 engineering model, The capacity requirement is spread across "n+1" (or "n+multiple") infrastructure components (UPS systems, air handlers, etc.), with "n" being the 12 MARSH ClearSight total load required and' 1" being the additional component that will carry the full capacity requirement, should "n"fail. If one of the data center components should fail, the remaining "n" components will take up the load, with no reduction in the level of data center performance or security. The data center is fed power from the utility power grid and UPS battery backups, as well as diesel generators. Auto -transfer switches (ATS) go between power feeds, to seamlessly failover, in case of power surges, spikes, or drops. The data center cooling relies on multiple AC units, which provide for AC unit maintenance or outages to occur without compromising cooling capacity. The data centers (both primary and backup) are designed and built to meet or exceed accepted industry building standards and local building codes. ACCESS CONTROL CenturyLink® uses an automated Access Control System (ACS), which supports a networked card reader and alarm system. The ACS uses proximity card readers to control access into perimeter doors, shipping/receiving areas, storerooms, and other critical areas. Biometric hand scanners are installed to control access into the most critical areas (Network Control Center, telecommunications node room, and client vaults). Additional access control measures include: ■ CenturyLink® data centers are designated with signage as Controlled Access Areas. ■ Mission -critical areas within each data center are designated as Restricted. ■ Access into data center and Restricted Areas is controlled by biometric hand scanners and is limited to Authorized Personnel. • Pre -approved CenturyLink® card access badges or contractor/visitor badges are required to gain entry. • Access into the data center is only available to one person at a time. No tailgating is possible via the use of a mantrap controlled by the security office and with automated sensors. In this configuration, the inner door will not open when more than one person is in the control area (i.e. between exterior and interior data center doors). POWER DISTRIBUTION ARCHITECTURE Each dual -fed power management module is fed by two independent building power sources. Modules utilize a static transfer switch for unattended failover to a secondary power source. Modules are monitored by building's automation system. Power is fully conditioned to eliminate fluctuations. Surge suppression, voltage regulation and redundancy enable clean, continuous client power. DATA CENTER SECURITY ELEMENTS Employees, clients, vendors, contractors, and visitors must be sponsored by a CenturyLink® pre -approved sponsor in order to gain access. Marsh ClearSight servers are stored in a secured cage within the data center. ACCESS LOGGING CenturyLink® data centers have a computer -based, enterprise -wide access control system, used to track visitors who have a data center badge. This system logs the identity of the individual and his/her time of entry; it does not log egress, as current fire code prohibits "locking" individuals in data centers. 13 MARSH ClearSight CLOSED CIRCUIT TELEVISION CenturyLink® Security employs an extensive closed circuit television system to monitor the exterior and interior of each data center. Exterior cameras provide views of critical support equipment and perimeter doors. Interior cameras are positioned to monitor data center aisles, requests for entry (and actual entry) into the data center, shipping / receiving areas, and the data center lobby. Cameras are recorded on digital video recorders, 24/7. All CenturyLink CCTV systems are designed to provide ninety (90) days of video retention. INTERNET CONNECTIVITY The Marsh ClearSight data center utilizes 50Mbps committed bandwidth to the internet with burstable rates up to 1 Gbps.The connectivity is redundant to prevent a single point of failure from interrupting connectivity. MARSH CLEARSIGHT INTERNAL PROCESSES AUTHORIZATION & ACCESS CONTROLS Access rights and levels are based on an employee's job function and role using the concepts of least -privilege and need -to -know to match access privileges to defined responsibilities. Approvals are managed by workflow tools that maintain audit records of all changes e.g. Identity Access Management System (TAMS). These tools control both the modification of authorization settings and the approval process to ensure consistent application of the approval policies. 14 MARSH ClearSight PATCH MANAGEMENT Operating systems and applications are configured in accordance with Marsh ClearSight standards and industry standard practices. They are hardened in a variety of ways including but not limited to routine security patching, protection against malware and access controls. Marsh ClearSight operational and Compliance processes include steps to proactively and automatically determine patch level status, anti -virus product suite version, and scan engine and definition file status. The following flow describes the high level patch management process for the environment. COMPLIANCE The Marsh ClearSight Compliance Program enables clients to understand the robust security in place and then helps them streamline their compliance with industry and government requirements for security and data protection. Marsh ClearSight publishes a Service Organization Control 1 (SOC 1), Type 11 Report. The audit for this report is conducted in accordance with AICPA Statement on Standards for Attestation Engagements (SSAE) No. 16 audit and an International Standards for Assurance Engagements (ISAE) No. 3402 audit. The audit is performed by an independent third party vendor (McGladrey LLP). The audit is an annual audit which is performed in order to evaluate and test Marsh ClearSight operational controls on an ongoing basis. The Information Security Policy, applicable to Marsh ClearSight, also aligns with ISO 27002, augmented with requirements specific to Marsh ClearSight. ISO 27002 is not a certification but provides a suggested set of suitable controls for the Information Security Management System MONITORING & SIEM LOG MANAGEMENT Marsh ClearSight systems are configured to store event logs locally, as well as forward events to centralized SIEM (Security Information & Event Management) log management servers. Security is monitored with the aid of the SIEM product to centralize, correlate, and analysis system devices within the environment and provide timely proactive alerting. All systems synchronize time via NTP to ensure accurate time stamps of events, and enable event correlation between various security systems. 15 1111 I 1lLim. MARSH ClearSight CHANGE MANAGEMENT Marsh ClearSight maintains a formal documented change management process using a commercially recognized and globally supported software tool. The process is based around Information Technology infrastructure Library (ITIL) standards. Changes must be logged, reviewed, approved, and monitored according to Marsh ClearSight change management process and system. Testing is conducted on development systems, and changes cannot be approved for production installation without proper documentation and test results. Changes such as updates, hotfixes, and patches made to the production environment follow the same standard change management process. Changes are both reviewed and evaluated by our experts for applicability, risk, and resource assignment prior to being implemented. Our standard baseline configuration requirements for servers, network devices, operating systems, and other applications are documented where the standards outline the use of a standard package. These packages are pretested and configured with security controls. INCIDENT RESPONSE & RISK MANAGEMENT Marsh ClearSight Incident Management team employs industry -standard diagnostic procedures to drive resolution during business -impacting events. Staff operators provide 24x7x365 coverage to detect incidents and manage the resolution. Dedicated teams coordinate Marsh ClearSight risk management, compliance and information security programs. These teams are responsible for the following: ■ Develop, implement and maintain Marsh ClearSight compliance policy programs, and training; business resiliency/continuity and disaster recovery; and information security programs. • Advise on and enforce the implementation of risk assessment and management activities as well as information security frameworks, solutions and procedures. ■ Liaise with business, internal audit, and IT staff to assess and mitigate risks including third -party providers. • Monitor and prevent security incidents in the Company's technology environment. ASSUME BREACH Specialized teams of security engineers use pioneering security practices and operate with an "assume breach" mindset to identify potential vulnerabilities and proactively eliminate threats before they become risks to our clients. If a breach should arise, clients are notified of incidents involving their data in accordance with applicable laws and the terms and conditions included in client contracts. CONFIDENTALITY Marsh ClearSight employees are required to maintain the confidentiality of Marsh ClearSight and client data. Employees are required to sign a confidentiality agreement and to comply with Company policies including but 16 MARSH ClearSight not limited to; The Greater Good, (our Code of Conduct), Personal Information Policy, and Acceptable Use of Information Assets Policy. Contractors with vendors, subcontractors or other service providers are reviewed by the Marsh ClearSight legal departments and include confidentiality security and privacy terms and conditions commensurate with the types of services provided by the third party AWARENESS AND TRAINING Awareness of Information Security and Confidentiality is provided during Marsh ClearSight employment on boarding processes, which includes a review of Marsh ClearSight Global Compliance policies such as the Personal Information Policy and Acceptable Use of the Information Asserts Policy and annual training on the Greater Good, the Company's Code of Conduct. Using the risk based assessment or where required by the legal regulatory schemes, further training and awareness programs are offered that may include annual empire review. Training records are maintained within Marsh ClearSight Career Development learning module or other tracking mechanisms. Additionally, awareness of Marsh ClearSight policies and information security is provided through multiple communication channels such as Marsh ClearSight employee handbook, email and intranets. This also includes periodic information security and compliance newsletters and notifications which are available to all employees. Training and awareness programs are reviewed and updated and new programs are developed as needed, TRANSFERS & TERMINATION Transfers and terminations are communicated though the Marsh ClearSight HR onboarding and termination processes. Steps include prompt modifications or removal of system and facility access, typically within 48-72 hours of receipt of request, including the ability for emergency revocation when needed, such as in the case of involuntary terminations or for roles with escalated privileges. Employment onboarding and termination procedures include steps for the return of all Marsh ClearSight owned assets and equipment. INVENTORY MANAGEMENT All technology assets are inventoried to facilitate asset tracking, configuration management, business resiliency and other programs. ASSET MANAGEMENT Assets are assigned owners who are responsible for maintaining the assets which may include but not limited to maintenance of operations guides or other documents describing the application or system environment, Marsh ClearSight as a whole does not have a formal policy to label information. However, all client information is considered "CONFIDENTIAL°" and must be handled in accordance with the confidentiality provisions set forth in The Greater Good (the Company's Code of Conduct), Personal Information Policy, and other compliance policies and procedures, which may also include guidance for labeling of confidential information. 17 MARSH ClearSight EMPLOYEE SCREENING Background checks are conducted on all new hires, intern, and contingent employees, as allowed under applicable law. For example, depending on the location and the role, screening may include, but not limited to, verifying prior employment, checking references, confirming stated qualifications, reviewing criminal histories, and checking other civil records. All individuals and/or entities with access to Marsh ClearSight or client information are required to sign Confidentiality and/or Non -Disclosure Agreements. VENDOR SUPPORT The following are the support levels and agreements for each Marsh ClearSight Cloud Service component vendor. Vendor VENDOR SUPPORT Oracle Database EMC Data Domain Hewlett- Packard Cisco CheckPoint/Nokia All Oracle® software is fully supported by Oracle Corporation with 24x7 support resources. Included in this support contract are all software upgrades, software patches, and off -site technical support. **Oracle Databases utilize Real Application Clusters (RAC) to provide business continuity, high availability, scalability, flexibility & agility.** All EMC) hardware and software is under mission critical (24x7) EMC® support with 4-hour response time. Included in this support contract are all software upgrades, software patches, device drivers, hardware replacement, and on -site or off -site technical support. Direct contact to a dedicated technical support team is included in this agreement. The Marsh ClearSight ASP Storage System utilizes EMC's "phone home" capabilities to allow itself to notify EMC's system response centers in the event of potential problems. All Hewlett-Packard Intel -based hardware is supported by Hewlett-Packard and/or CenturyLink®. This includes hardware replacement and on -site or off -site technical support as needed. All Cisco® equipment is under 24x7 vendor support with 4-hour response time. Included in this support contract are all software upgrades, software patches, device drivers, hardware replacement, and on -site or off -site technical support. Redundant and failover equipment is on -site All CheckPoint® software and Nokia firewall hardware and software are under 24x7 vendor support with 4-hour response time. Included in this support contract are all software upgrades, software patches, device drivers, hardware replacement, and on -site or off -site technical support. Redundant and failover equipment is on -site. DISASTER RECOVERY Marsh ClearSight Business Continuity and Disaster Recovery Plans provide an effective framework to limit the impact, risk and/or ultimate recoverability to Marsh ClearSight from any major, unplanned incident. The Business Continuity Plan (BCP) focuses on overall business recovery while the Disaster Recovery Plan (DRP) focuses on the recovery of Data Center operations. The use of either of these documents should be taken into context with its counterpart. By activating the DRP, data center personnel can restore Marsh ClearSight critical applications in a timely and organized manner consistent with the resources approved by executive management. The DRP has been developed to accomplish the DRP following objectives: 18 MARSH ClearSight • Limit the magnitude of any loss by minimizing the duration of the interruption to critical application services. ■ Assess damage to the data center facilities and equipment, repair the damage, relocate data and systems if necessary and reactivate the repaired computer center. ■ Recover data and information critical to the operation of the company. • Manage the recovery operation in an organized and effective manner. • Prepare data center personnel to respond effectively in a recovery situation. ■ Prepare staff departments that will provide support during a data center recovery operation. In the event of a disaster, the Marsh ClearSight ASP Operations Team, vendor representatives, and MARSH ClearSight management will complete a disaster classification. This disaster classification will be completed and published before any procedures are implemented. Disasters will be classified within four (4) hours of the occurrence. The classification will be reviewed every 12 hours and re-classification of the disaster will be made on an as needed basis. Client Service will be notified of the completion of the data recovery. Marsh ClearSight Client Service will validate the status of the data load and inform the MARSH ClearSight ASP clients of the proposed startup time of the disaster recovery site. This information will also be posted on the www.marshclearsight.com website. DetaBase Servers TERMINAL SERVERS/WEB SERVERS The databases are replicated to the Marsh ClearSight Disaster Recovery facility in Dallas, TX, utilizing EMCO Symmetrix Remote Data Facility (SRDF) software. This allows for a near real time recovery of data at the disaster recovery site. Tested once a year. The operating system is backed up to the Data Domain backup appliance using a single, full backup per week with incremental backups every day. These backups are stored on -site and replicated to the disaster recovery site. The backup data is encrypted at rest in both locations, while being replicated using AES-256 bit encryption. The databases are protected via the use of Oracle® RMAN utility. This allows for a point -in -time recovery of the database to any point in time during that period. We perform full backups once per week and perform archive backups on a daily basis. The weekly backup set is kept only for that week, then cycles over again. Individual client database schema backups are exported to disk based on client service requested intervals i.e. daily, every 3 days, weekly, monthly. The backup data is encrypted at rest in both locations, while being replicated using AES-256 bit encryption. The operating system is backed up to the Data Domain backup appliance Using a single, full backup per week with incremental backups every day. These backups are stored on -site and replicated to the disaster recovery site. The backup data is encrypted at rest in both locations, while being replicated using AES-256 bit encryption. 19 MARSH ClearSight DR TESTING Methodology A disaster in the Production facility is simulated by severing the data replication link between production and DR facilities. During this test, the Production systems will continue to operate normally, while the disaster recovery process can be performed within the DR environment. The replicated data in the DR facility serves as the new production data set for this test. The required servers to support the Marsh ClearSight platform (Windows, UNIX, etc) are brought online and configured to allow connections to the DR databases. Once the database, web, and application servers have been enabled, tested, and validated the client network is then brought online to allow access to end users via a separate URL or IP address which directs traffic to the DR systems and data. External user access is then simulated to validate systems are operational from the end - user perspective. An additional layer of testing related to database record level changes is performed. Prior to the disaster simulation, sample production data is altered while the production systems are still replicating to the DR systems. Once the DR systems are brought online, the database is queried to ensure this simulated changed data is successfully replicated and applied to the DR databases. This validates the replication process normally and within expected time frames. ACCEPTABLE USE POLICY PRIVACY POLICY: ■ Users can expect any data entered into Marsh ClearSight on the Marsh ClearSight Hosted system to be proprietary to the client. ■ Users can expect any files attached into Marsh ClearSight on the Marsh ClearSight Hosted system to be proprietary to the client. Users can expect any email sent through Marsh ClearSight to be proprietary to the client. Clients will expect to have any and all files stored on the Marsh ClearSight Hosted system subject to examination by system administrators, as needed, for problem resolution. GENERAL RULES: • Individual users are responsible for their own actions. ■ The users' responsibility exists regardless of the security mechanisms that are in place. • Breaking into accounts will not be permitted. ■ Cracking passwords is not permitted. • Disrupting service is not permitted. • Bypassing security is not permitted. • The system administrator will make it so users will not be permitted to read files that are not their own. ■ Users will not be permitted/have access to alter a file that is not their own. ■ Users will not be permitted to share accounts. 20 MARSH ClearSlght • Logging on to another user's account without their permission will not be permitted. • Copying of copyrighted software may be a violation of the copyright laws and is not permitted. • Copyrighted and licensed software may not be duplicated unless it is explicitly stated that you may do so. WHO IS AUTHORIZED TO USE Marsh ClearSight HOSTED & ITS RESOURCES? Sales and Prospects • A Marsh ClearSight Sales Representative must be present and conducting the presentation if a live demonstration of Marsh ClearSight Solutions is to be given. • The Sales Representative must provide the Marsh ClearSight Cloud Service team with prior notification of a Marsh ClearSight Solution demo. • The Sales Representatives will have individual Marsh ClearSight Solution accounts. • The Sales Representatives will not have access to the desktop on the demo server during a demo. • The Sales Representatives are expected to follow all rules set aside for appropriate use of the Marsh ClearSight Solution. • No Sales Representative will have administrative privileges to Marsh ClearSight Solutions. Clients • Clients are not allowed to use Marsh ClearSight Solutions and all its features without a signed contract. • Clients will only have access to the Marsh ClearSight and Marsh ClearSight Web applications. • Clients will not have access to the server desktop. Any client trying to access another client's data will be terminated. • Viewing data through any other tool other than Marsh ClearSight without the express written consent of Marsh ClearSight will result in access termination. PRIVACY BY DESIGN When you entrust Marsh ClearSight with your data, you remain the sole owner: you retain the rights, title, and interest in the data you store with us. It is with this clarity of principle that we ensure your privacy and operate our online services with certain key principles: ■ If you ever choose to leave the service, your data will be securely removed from Marsh ClearSight's systems. Data extract services are also available at any time during your relationship with Marsh ClearSight. • We tell you where your data resides, who has access, and under what circumstances, • Access to your data is strictly limited, non-destructive, logged and audited. Beyond this, we have privacy controls that allow you to set up access within your organization. Strict controls and design elements prevent exposure of your data to other data center staff. 21 113 t MARSH Clearsight Our approach to privacy and data protection in our cloud services is built on the commitment to empower organizations to control, use, and distribution of their information. By providing this functionality and implementing strong operational protection practices, Marsh ClearSight can make compliance commitments to our clients in the form of certification, attestations, and contractual agreements. For further information, please contact your local Marsh ClearSight office or visit our web site at: www.marshclearsight.com. Yamini Vellore Director of IT +1 404 995 2892 ORACLE SUNV IS EITHER A REGISTERED TRADEMARK OR TRADEMARK OF ORACLE CORPORATION EN THE UNTIED STATES AND OTHER COUNTRIES_ EMCaA IS EITHER A REGISTERED TRADEMARK OR TRADEMARK OF EkTC CORPORATION IN THE UNTIED STATES OR OTHER COUNTRIES CISCO) IS EITHER A REGISTERED TRADEMARK OR TRADEMARK OF CISCO SYSTEMS. INC. IN THE UNTIED STATES AND OTHER COUNTRIES. Marsh ClearSight is one of the Marsh a McLennan Companies. together with Marsh, Guy Carpenter, Mercer_ and Oliver SVyman. This document is not intended la be taken as advice regarding any indwrluat situation and should not be retied upon as Stich The information contained herein Is based an sources we believe reliable. foul we make no representation or warranly as to its accuracy. Marsh shall nave iw obligation ro update this publication and shall have no Lability to yelp or any other parry arising out of this publication or any mailer contained herein. Any statements concerning actuarial. tax accounting_ or legal matters are based solely an our experience as insurance brokers and risk oansullanls and are mat to Ilo rdial upon as acmanal, accounting, lax. or legal advice. for .which you should consult your own professional advisors. Any modeling. analytic-, or projections are sidled to inherent uncertainty, and the Marsh Analysis could be materially affected it any under -hang assumptions. oondrorls. inlomm lion- or tailors are inaccurate or incomplete or should change. Copyright '9 2010 Marsh U.C. All dghls reserved. 22 MARSH ClearSight 1'' MARSH MARSH CLEARSIGHT Marsh ClearSight Platform Statement of Work No. 1 1 Z018 CLIENT NAME City of Miami CLIENT BILLING ADDRESS AND CONTACT INFORMATION Ann -Marie Sharpe Department of Risk Management, Director 444 SW 2nd Avenue, 9h Floor Miami, FL 33130-1381 Copies to : Payables Annie Perez, CPPO Finance Department Procurement Director 444 SW 2nd Avenue, 6th Floor 444 SW 2nd Avenue, 6th Floor Miami, FL 33130-1910 Miami, FL 33130-1922 CLIENT PURCHASE ORDER NUMBER OR OTHER REFERENCE: STATEMENT OF WORK EFFECTIVE DATE STATEMENT OF WORK TERM 30 March 2018 36 months APPLICABLE MARSH CLEARSIGHT SAAS AGREEMENT EFFECTIVE DATE APPLICABLE MARSH CLEARSIGHT SAAS AGREEMENT EXPIRATION DATE 30 March 2018 29 March 2021 • DOES THIS STATEMENT ❑ YES CLIENT STATEMENT City of Miami OF ® NO CIF WORfC WORK SUPPLEMENT A PRIOR STATEMENT OF WORK? IF YES, THIS STATEMENT OF WORK SUPPLEMENTS THE STATEMENT OF WORK BETWEEN THE PARTIES WITH THE FOLLOWING NUMBER AND DATE: PRIOR STATEMENT OF WORK NUMBER PRIOR STATEMENT OF WORK DATE Click here to enter a date. ACKNOWLEDGMENT AND AGREEMENT 4.:,� h2.F MARSH CLEARSIGHT STATEMENT OF WORK ACKNOWLEDGMENT AND AGREEMENT Marsh ClearSight LLC '. Signature: DRAFT ONLY — NOT FOR SIGNATURE, A Signature: DRAFT ONLY — NOT FOR SIGNATURE Printed Name: Daniel Alfonzo?" Printed Name: Chris Oddy Title: City Manager ' ' " Title: CFO Signature Date: Signature Date: Unless executed, this Offer FEES Annual Subscription Fee - will expire as of 30 March 2018 CLIENT TOTAL PAYMENT SCHEDULE ADDITIONAL DETAILS $133,500 Annually Invoiced as of the Effective Date and on the anniversary thereof User License(s): General User 4 User License(s): Lite I 16 Storage: SUPPORT — Support offerings Z Standard 10 GB descriptions appear at www.marshclearsiaht.com SERVICE HOURS —Service Hours usage explained at www.marshclearsieht.com ❑ Premier ❑ Global Quantity 50 Hours Page 1 of 5 04 MARSH MARSH CLEARSIGHT LICEFISED MARSH CLEARSIGHT PRODUCT EDITIONS Edition 4 ❑ Standard 0 Pro ❑ Ultimate 4. Product To Be Implemented To Be Implemented To Be Implemented ❑ Risk Identification ❑ Values Collection Administration ❑ Values Entry ❑ Values Collection Admin ❑ Values Entry ❑ Risk Register 0 Values Collection Admin 0 Values Entry 0 Risk Register 0 Dynamic Risk Maps Insurance Management ® Policy Management ❑ Policy Management 0 Premium Benchmarking 0 Program Management ❑ Certificates of Insurance 0 Policy Management ❑ Premium Benchmarking 0 Program Management 0 Certificates of Insurance ❑ Risk Mitigation ❑ Recommendations / Action Plans 0 Recommendations/Action Plans ❑ Audits Manager ❑ Discovery —Audit iPad App ❑ Recommendations/Action Plans ❑ Audits Manager ❑ Discovery — Audit iPad App ❑ Audit Designer Z Incident Management ® Intake ® Incident Management ❑ Intake ❑ Incident Management —Similar Incidents ❑ Root Cause Analysis Q OSHA Reporting N/A Claims Management 0 Claims Management •:• ,5 ❑ Claims Management ❑ Claims Management Analytics (Overview, Rankings, Similar Claims) ` ❑ Claims Management ❑ Claims Management Analytics (Overview, Rankings, Similar Claims) ❑ Root Cause Analysis 0 Claims Management Severity Model 0 Root Cause Analysis ® Claims Administration E Claims Management ISI Claims Management Analytics (overview, % Rankings, Similar Claims) l Claims Administration ^ N Return to Work fix% N/A �`P N/A °� 4 ❑ Physician Administration ❑ Physician Administration: /hus Pt/ #of expe,gtd N/A N/A doctors i j- �}rt 0 Contacts Appiication `° ASSUMPTIONS NECESSARY FOR THE IMPLEMENTATION OF ANY OF THE ABOVE -IDENTIFIED PRODUCT EDITIONS OR THEIR INDIVIDUAL COMPONENTS: Page2of5 00 MARSH MARSH CLEARSIGHT STANDARD FUNCTIONALITY INCLUDED FUNCTIONS WHAT'S INCLUDED IN THIS DELIVERABLE Calendars Standard configuration and deployment Codes and Fields Coverages Used by Client: (standard-- Workers Compensation, GL, Auto Liability Property) NOTE: Changes/configuration in screen fields labels and codes beyond (35) changes/configuration across all coverage lines will be calculated in implementation Language Dictionary Marsh ClearSight will configure following language across all capabilities. Languages: [English] Screen Design Claim/incident Screens — [One] standard screen design per major coverage Occurrence Screens — [One] occurrence screen design per major coverage Parent Occurrence Screens — One parent occurrence screen designed Location — [One] standard location screen Transaction — [One] standard transaction screen Policy — [One] standard policy screen Policy Program — [One] program screen NOTE" Nonstandard screen design will be included in implementation. " = �• Contacts Manager & Contact Management Application [One ] standard contacts screen with up to ten (10) changes "'° NOTE: Nonstandard contact screen will be included in Implementation Dashboards & Dashboard Application Configuration of up to twelve (12) dashboard components, [NOTE: Nonstandard Dashboards will be included in implementation Events / Validations Up to thirty (30) Events or Validations are included Location Hierarchy Initial load of hierarchy from data provided in Microsoft° Excel® or other agreed upon forrnat Data must contain unique location Identifier for each location, and methodology to determine a single hierarchical relationship for each location. If OSHA reporting is included, Marsh ClearSight recommends that Client include SIC or NAICS codes in this data. Notes/ Tasks Configuration of up to three (3) tasks templates, Security Configuration Configuration of up to nine (9) security groups. Standard Reports INDIVIDUAL APPLICATIONS Available as Single or Multiple Standard Reports that MARSH CLEARSIGHT will set up after consultation with Client Set up of up to el;ht (8) standard re.orts . additions to Marsh ClearSight Editions IMPLEMENTATION OF ANY OF THE INDICATED PROCESSES OR FUNCTIONALITY LICENSED UNDER THIS SOW WILL BE PERFORMED USING THE FOLLOWING METHODOLOGY INCLUDED TO BE IMPLEMENTED FUNCTIONS ASSUMPTIONS ® 0 incident Management/Intake Coverages: Workers Comp - G/L - Property - APD - A/L. Up to thirty-five (35) changes to standards across lines. El ® Policy Manager Up to ten (10) changes to standards across lines ADD -ON FUNCTIONS IMPLEMENTATION OF ANY OF THE INDICATED PROCESSES OR FUNCTIONALITY LICENSED UNDER THIS SOW WILL BE PERFORMED USING THE FOLLOWING METHODOLOGY — INCLUDED TO BE IMPLEMENTED FUNCTIONS ASSUMPTIONS Z El Custom Letters Includes up to ten (10) custom letters. Page 3 of 5 M MARSH MARSH CLEARSIGHT ® ® Electronic First and Subsequent Reports of Injury (FROI and SR01) Marsh ClearSight will configure the standard Electronic Data Interface (EDI) reporting tool based on specifications provided by Client within standard functionality parameters offered in the SaaS Application. The feature will allow Client to submit FROI and SROI records to State jurisdictions that comply with IAIABC standard. El Indemnity Benefits Manager Includes up to one (1) state(s) with standard state rules. Client is responsible for state parameters configuration. Marsh ClearSight will configure the standard Indemnity Benefits tool based on data rules provided by Client. Client is responsible for state parameters configuration. 0 ® Reserve worksheet Standard deployment E ® State Forms Includes ClearSight's standard mapping of forms. ® NI Payment Processing Includes security, approval, and check/voucher template configuration for up to 1 banks and up to 1 bank accounts. ® 0 ISO Setup/Indexing Marsh ClearSight will configure standard tool to transmit data to the Insurance Services Office ("ISO") based on specifications provided by Client within the standard functionality parameters of the SaaS Application. Requires Client subscription with ISO. Some codes that are specific to ISO (ISO policy type, coverage and loss types) may require additional system events to automate population (unless Client plans to manually input this data on each claim). These events are not included in this deliverable and will be included in the Events and Validations deliverable in the Advanced System Setup section if such services are included in this Statement of Work. Includes standard export layout with standard export mappings. Z ElAnonymous ~ Login used with Incident Intake tr '� . 1�4 3 .. & 4,- . x. . ' Setup of one enterprise -wide anonymous login is included. Anonymous entry does not permit identification of individual users, including their IP addresses. Client shall be solely responsible for its decision to permit access without requirement for individual usernames and passwords and acknowledges and agrees that foregoing individual unique usernames and passwords for each user will eliminate the security features inherent in the use of such unique usernames and passwords. Client shall be solely responsible for ensuring that the appropriate access restrictions in the SaaS Application are established for the users of Incident Intake feature, including by setting access controls that limit the Client Data accessible and viewable by such users. El EI Single Sign SO) i 1? :;.. Single Sign On (SSO) utilizes SAML web authentication technology to allow Client to authenticate employees allowed to access the SaaS application. 5S0 will require the Client to have a web application (Identity Provider) capable of authenticating users and providing user credentials via a SAML message to the SaaS application. The user can then launch the SaaS application through an internal web portal link distributed by Client. Users authenticated bySSO will bypass the to in screen. yP g Client is responsible for maintaining user ID correlation table if required and for passing required authentication information to Marsh ClearSight. Client is responsible for creating and sending SAML message ►I N OSHA Set Up and Report Configuration of OSHA 300 and 300A templates after consultation with Client and based on specifications mutually agreed to by the parties. Electronic Reporting Yes Page 4 of 5 001 MARSH MARSH CLEARSIGHT Z ® Business Intelligence Reporting Design and/or creation of Business Intelligence reports are not included in this Statement of Work. Marsh ClearSight will set up a Business Intelligence environment for Client's use. Imports/Exports/Integrations ® ® Ad Hoc Incident Export Includes Marsh ClearSight standard layout ® ® AP Export Includes Marsh ClearSight standard layout ; AP import Includes Marsh ClearSight standard layout NI ® Claim import Includes Marsh ClearSight standard layout ® ® CMS ® Option 1 (Examworks Integration - Recommended) Z ® Contact Import [Scheduling: Y/N; Standard Layout: Y/N] Z ® HR Import Includes Marsh ClearSight standard layout El ® Location Import Includes Marsh ClearSight standard layout li DATA SERVICES E. DATA CONVERSION Medical Bill Review Import/Export (Claim Export, Contact Export, Bill Import, Paid File Export) includes Marsh ClearSight standard layout Source Components Frequency Assumptions [USIS] Cumulative Claims One time One—time historical upload of claims Transactions: One-time One-time historical upload of financial transactions (claims) Notes One-time One-time historical notes upload Cumulative Claims Daily Ongoing daily update of claims and summary financials (No Notes) This Statement of Work (the "SOW) sets forth the terms generally applicable to, the services provided by Marsh ClearSight LLC ("Marsh ClearSight") to the client named in this SOW (the "Client') under the Product and Services Schedules (the "Schedules") and Software as a Service Agreement entered into by Marsh ClearSight and Client and described in this SOW (the "Agreement"). Client agrees that any deliverables described herein will be delivered in accordance to the specifications contained within the Agreement and will represent the entire scope of deliverables to be provided under this SOW. For any deliverable contained in this SOW that requires configuration ar qv to achieve the stated deliverable, configurations will be completed in accordance with the specifications described and agreed upon in a jointly developed Business Requirements Document (,"ow) which will represent the entire scope of configuration work to be provided for such deliverables under this SOW, Fees stated in this Statement of Work have been provided to Client based on the .assumptions that Information provided by the Client used to create this SOW is accurate and complete. should these or other assumptions Marsh ClearSight has deems critical to the process which are set forth in the Agreement, Products and Services Schedule and this Statement of Work, prove to be inaccurate, Marsh ClearSight reserves the right to jointly review dnd revise this SOW with Client, or terminate without penalties. Client will pay all applicable rates and fees for the Services set forth in the Schedules and the Agreement as set forth in this SOW, which isincorporatedby reference therein. Applicable taxes are not included in amounts set forth in this Statement of Work. Travel and other expenses not set forth in this Statement of Work shall be billed as incurred. During the terra of the Agreement, this SOW shall automatically renew for successive periods equal to the term set forth in the Agreement. All subscription and annual services fees are billed on the Statement of Work Effective Date and on its subsequent anniversaries. The terms of the Agreement shall supersede any terms provided by Client unless mutually agreed in writing by both parties. Unless expressly indicated to supplement a prior Statement of Work or otherwise agreed in writing by the parties, this SOW shall supersede prior Statements of Work for the same Services. Fees stated in this Statement of Work have been agreed with Client based on the assumption that the information required for work to be performed is made available by Client and Client key personnel during the course of work. If delays,or: other unanticipated problems which are beyond Marsh ClearSight's control occur this may result in additional fees, which Marsh ClearSight will discuss with Client as soon as identified. Assumptions Marsh ClearSight has made that Marsh ClearSight deems critical to the process are set forth in the Agreement, Products and Services Schedule and this Statement of Work. Client will provide,requlred resources to facilitate execution of all deliverables by the Marsh ClearSight team within the project schedule mutually agreed before the commencement of the project; this will include time from business users and source system owners for meetings, data requests, gathering of data required and most importantly help obtaining timely decisions from relevant parties. Page 5 of 5 M MARSH ATTACHMENT A RISK MANAGEMENT INFORMATION SYSTEM SCOPE OF WORK The City of Miami's (City) Department of Risk Management (Risk) is in need of a highly functional Risk Management Information System (RMIS) to enable it to fully manage the risks being confronted by the City in an effective and cost efficient manner. The Successful Proposer shall provide the necessary RMIS software application/solution, and the supporting training and technical support services that will enhance Risk's ability to reduce the City's total cost of risk. Specifically, the Successful Proposer shall: 1. Provide or develop and license to the City, a comprehensive RMIS software application (System) that includes at a minimum, claims management, loss prevention, recording and management of insurance policies, and losses. 2. Provide technical support services to implement the System and maintain the System such that: a. At all times during this Contract, ensure the application complies with all applicable Federal and State of Florida rules, statutes, standards or provisions; and b. Risk timely receives deliverables in compliance with the Contract's requirements. 3. Convert, compile, and transfer all data from the City's current Third Party Claims Administrator's application to the newly provided System, to maintain data continuity and integrity, and to retain current information without data loss. 4. Provide a complete contractor -hosted solution that accounts for the services required by the City, and includes business continuity and industry -standard security. 5. Provide emergency backup of the System and support in the event of a disaster, natural or otherwise. 6. Provide a System that tracks and maintains insurance policies and associated binders, underwriting data and other key information elements. 7. Provide an effective means of capturing, recording and adjusting claims. System shall have the capabilities to complete the following activities: 1. Provide claims administration of Workers' Compensation and various lines of Liability claims. 2. Enable capabilities for making payments on claims, to transmit mandate data via Electronic Data Interchange (EDI) to the State for Workers' Compensation records. 3. Provide capability to transmit most current industry standard mandated Medicare Section EDI. 4. Allow for property tracking to include values, Construction, Occupancy, Protection, and Exposure (COPE) data. 5. Business Intelligent reporting and claims administration; check writing/printing; Diary/Notes. 6. Positive Pay, ACH/Direct Deposit, First Report of Injury and Subsequent Report of Injury (FROI/SRO!) module and EDI transmission to the State. 7. Allow and provide custom letters and State forms. 8. Perform events and validations, Medical Bill Review Integration, Indemnity Benefits, Exposure, COPE data tracking, Attachments, Attachment extraction tool, FIR import tool, values import tool, reserve worksheet, Medicare Section Module and EDI transmission to CMS, backup and recovery of databases and system maintenance support. Listed below is an outline of the minimum capabilities of the System desired. Proposer shall also include in the proposal the completed Department of Risk Management's Business and System Requirement Document which is located in the Header Section of this solicitation, as Attachment B. General RMIS Functionality a. General Solution Requirements i. The ability to export/import data in multiple formats, including comma delimited format and Microsoft Excel formats. ii. The ability to use Microsoft Outlook functions in relation to a claim or incident. iii. Allows an administrator to create and maintain triggers that automate functions as initiated by system dates and claim management activities. iv. Dashboard view features that can be formatted for specific roles, containing pre -defined information related the users' individual tasks or management needs. v. Ability to create notes/comments that are accessible by any other user; i.e. sticky notes. vi. Payment capabilities. EDI, Diary, etc. vii. "Face Sheet" function with pertinent information at a glance. viii. Creation and edit of standards forms and letter templates ix. Broadcast alerts and automated emails when forms are used x. Capabilities to archive data; flag archived data; options to include or exclude archived data from reporting b. Multi -Line Management Operations i. Comprehensive general liability ii. Property iii. Transportation II. Claims Management Functionality a. Claim Management i. Liability Management ii. Worker's Compensation (WC} Management iii. WC Medical Bill Review and Fee Schedule iv. Check Writing v. Rules based security and functionality vi. Tickler system vii. Subrogation Management viii. File Management Claim Documenting ix. Multiple claim search criteria x. Vehicle appraising program xi. Property schedule management xii. Automobile schedule management xiii. Certificate of insurance tracking and management 1. Comprehensive general liability 2. Property 3. Transportation xiv. Form letters production b. Claims Adjustment Activities i. Addition of new claims 1, Edit defined value fields 2. Drop down feature defined value fields 3. Flag dates and feature a pop up calendar option for date input 4. Ability to record claim add data for automated addition of affiliated claims with same data in most fields 5. Automated new claim adds from electronic claims that are submitted by third party claim administrators, by batch, which can be modified if necessary. a. Batch claim will either reject or allow the claim add, yet still generate an exception report depicting any records added without validated data in certain fields. 6. Customized claim add screens for each type of coverage line 7. Auto population of some data elements 8. Allow for attachments into claim record. ii. Modifying Claims 1. Disallows changes contrary to established rules 2. Allows multiple claim modifications at once (sub -claims and affiliated claims) 3. Automated transmission of claim change to affiliated/integrated applications as necessary 4. Security measures to limit type of modification or number of modifications 5. Ability to cut information from a variety of sources, such as electronic documents, faxes, images, etc. and place into a claim record. 6. Ability to change attached items in the claim record. 7. Ability to transfer a claim or group of claims to another user for processing. 8. Transfer of all notes/comments between claims. iii. Diary Information 1. Ability to create generic diary entries that can be entered into claim diary system from a narrative code or similar setup to allow adjuster to quickly input narrative for claims. 2. Import diary entries from external sources such as email text and electronic documents. 3. Ability to query on diary information 4. Notification of changes on a claim to adjuster. 5. Security limiting the ability to change diary information by unauthorized personnel. 6. Transfer diaries from one user to another. c. Payments 1. Ability to generate a recommended reserve amount based on historical claims of similar attributes. Should be able to be modified to correct amount. ii. Restriction of editing the reserve amount by users not authorized. iii. Under or insufficient reserve error flags. iv. Restriction of moving forward in claim processing if reserve amount is inadequate or missing. v. Automated calculation of outstanding reserve values, min/max reserve values and reserve values at closing. vi. Notification of supervisory staff when reserve status reaches pre -defined status. vii. Invoice and payment search capabilities. viii. Ability to allow adjusters to set status of payments (pending, paid, complete, etc.). ix. Ability to run payment reports (missing, inadequate, overage, etc.). x. Ability to create automated compensation payments. xi. Transfer payment from one user to another. d. III. Reporting Functionality a. Searches/Lookups i. By: Claimant; reference number; specified dates; subject; category; coverage line; customized field heading name; other user defined criteria; etc. b. Financial/Actuarial Reporting 5ucce sf„I Pr. shzilI her ribIc for bmittol of all financial accounting reports to the Internal Revenue Service (IRS). c. Production Reporting i. Multi -year activity. ii. Ad hoc templates. d. Safety/Loss Prevention Reporting e. Litigation and Legal Information Reporting i. Medicare reporting interface. f. Contractor Reporting g. Other Reporting Functionalities i. Drill down functionality for reports generated. ii. Posting of results on a secure site for authorized entities to access. iii. Run against live a live database with data updating on a continual basis. iv. Maintained by the Successful Proposer with City Administrative rights to add, edit, and inactivate data that is maintained by Successful Proposer. IV. System Functionality a. Functions i. Access procedures. ii. Customization. iii. Testing. iv. Data cleansing, migration, and validation. v. Turnover. b. System Requirements i. Compatible to Internet Explorer, Mozilla Firefox, Google Chrome. ii. Written notification of all system upgrades prior to execution. c. System Administration i. City defined administrators to customize functions, code tables, and end user access. ii. Ability to add, edit and delete data from code tables. d. Security i. Record user's profile. ii. Assigning of groups or roles to the user. iii. Restrict entire groups and users from identified sections or attributes of the system. iv. Unique usernames/passwords with lock out access after specified number of attempts (and rest capabilities for the system administrator). v. https/128 bit encryption. e. Interface i. Banking system: to transmit data files related to pay system; to receive clear check files and apply transaction to the payment history of the claim. ii. Oracle. iii. IRS/State and Federal for reporting/mandatory form submissions. V. Maintenance and Support a. Training i. Online and hardcopy user manuals. ii. Online assistance. 1. Internet based support system/help desk available 24 hours/7 days via the Proposers website. iii. Automated training for system/application upgrades/changes. b. Long term support i. Project manager to be assigned to the City to facilitate: 1. Software configuration. 2. Application customization. 3. Testing and data validation. 4. Training. 5. Change management. 6. Data conversion and security. 7. Status reporting. 8. Stakeholder meetings. 9. Other technical support services. 10. 24 hour/7 days support for all level users. a. Two level Priority Rating for support issues. i. Priority 1: resolving issue within 24 hours of reporting. ii. Priority 2: resolving within 12 hours during weekdays and 24 hours during weekends. City of Miami, Business Requirements Document Attachment B DEPARTMENT OF RISK MANAGEMENT BUSINESS & SYSTEM REQUIREMENTS DOCUMENT Executive Summary It is the intent of the City of Miami (City) Department of Risk Management (Risk) to obtain a Risk Management Information System (RMIS) SaaS solution web base/cloud base software application (System) to cost effectively and efficiently support and improve the claims administration process of the City's Self Insurance program. Below details the business requirements/functionalities needed by the Successful Proposer. It is the City's goal to procure a solution that will require minimal customization. Proposer shall provide a response of "Yes" or "No" to each listed requirement throughout this document. If a Proposer provides a response of "No," additional comments explaining how the System can meet the requirement is needed. This document will provide the specific and critical business and system requirements that should be included as deliverables in the procured solution. Page 1 of 43 City of Miami, Business Requirements Document General Business & Systems Functionality I Req. ID Functionality Description Yes No Comments 1 Audit trail functionality -the system shall be required to provide audit trail functionality that captures a user's log in credential, date, time, and actual data that is changed (from and to) to allow for version control 2 Configurability-the system should be able to provide a system administrator with the capability to configure changes independent of submitting a change request to the vendor or a change to the source code. 3 Authentication -The system shall allow internal City of Miami users to be authenticated via Active Directory. Additionally, the system shall provide the capability to authenticate the selected TPA claims service provider staff. 4 User Account Maintenance- 1.Ability to lock out system users after a defined number of failed logon attempts. 2. Ability to log out users after inactivity for a defined period of time. 3. Ability to reset user passwords. 4. Ability to deactivate a user and reassigned their open tasks/diaries to another active user and reactivate system users. 5. For additional detailed information, refer to Chapter 8, Security. Page 2 of 43 City of Miami, Business Requirements Document Req. ID Functionality Description Yes No Comments 5 Data Elements- User defined specific data elements (date, text, special analysis & numeric) and code sets by major coverage type. Ability to maintain data element code sets and automatically apply changes globally to all affected claims. 6 Claims -Ability to user defined special analysis fields, date fields, long comment fields for property and claim locations. 7 Data Element Customization- Ability to assign custom data element display and report labels that can be different for each of the coverage types defined. For example the Date of Loss field could be displayed as Date of Loss on the display screens and then print as DOL on reports for liability claims and then for Workers' Comp claims the field label would display as Date of Accident and on reports print out as DOA. 8 Data Entry- Ability to allow for data entry screens based on major coverage type including the ability to define required fields, read only fields, use default values, etc. and the ability to assign the custom data entry screens to specific end users and/or groups of end users. 9 Organizational Hierarchy the to ability separate organizational hierarchy structures and the ability to provide move claims and locations cosily from one location to another, Recommendation: drag drop. and The City desires that has the a solution capability to departments, locations, t and unding eture levels. Page 3 of 43 City of Miami, Business Requirements Document 1Req. ID Functionality Description Yes No Comments 10 Rules Based Automation -Automated event type rules based on the City's business needs/rules that will prepopulate data elements based on either default values or values of other data elements based on coverage type and action type. (i.e. when a claim is first created, when claim is saved, when claim is opened, when claim is closed, etc.) In addition, the ability to apply these business rules to specific users and/or user groups. 11 Automated Alerts -the ability to automate alerts based on coverage and business rules. 12 Validation- the ability to apply validation checkpoints to ensure data integrity during data entry based on each coverage type and the ability to then apply these validations to specific users and/or user groups. 13 Automated System Updates- the system shall be required to capture auto diaries based on coverage type and user defined claim events. 14 Forms for Letters & Templates -The system shall provide the ability for users to create and edit standard forms, Word or PDF template letters and forms that will merge defined claim data for each coverage type and after the claim data merge allow the end user to add any additional text as may be needed. Note: All data elements should be available for "merging" in the templates. 15 Reporting- Custom reporting periods (i.e. fiscal, calendar, excess policy period years & quarters, etc.). Page 4 of 43 City of Miami, Business Requirements Document 4Req. ID Functionality Description Yes No [Comments 16 Customization- 1. Set up Custom Incurred Formulas; 2. Set up Custom values for property and exposure tracking and custom formulas. For example ability to define values for Office contents, EDP contents, Book contents and then create a custom formula that adds all three values together as "Total Contents". 17 Set -Up Requirements- 1. Set up Positive Pay File Setup/ACH, i.e. data format, encryption, bank and transmission settings; 2, Ability to set up laser check writing parameters for Broward's bank; 3. Set up financial transaction (payment & reserve) codes & descriptions; 4. Set up location codes & descriptions; S. Set up diary/notes codes & descriptions; 6. Set up vendor type codes & descriptions, i.e. employee, claimant, doctor, hospital, pharmacy, attorney, etc.; and 7. Set up location recommendation codes & descriptions. 18 Ability to mass change the assigned adjuster in all claims based on claim status, the currently assigned adjuster, first letter of claimant's last name, injury code, etc. and move all associated open diaries from the currently assigned adjuster to another adjuster per coverage. Page 5 of43 City of Miami, Business Requirements Document Req. ID Functionality Description Yes No Comments 19 Ability to set up a separate business unit for active participating agencies in the City's self- insurance program and a separate business unit for terminated agencies as all claims history must be retained for view only access and reporting purposes. 20 Ability to set up parameters for duplicate payment checking, i.e. warnings if exact amount to same payee within XX number of days, etc. 21 Diary & Notes Functionalities- 1. Ability to generate recurring Diaries and assign to a specific user or multiple users; 2. Ability for the supervisor to search & view past due dairies and/or all diaries for their assigned adjusters individually or by diary type, diary status, due date, etc.; 3. Ability to escalate past due diaries to the supervisor based on a user defined number of days past due; 4. Ability to prevent diary/note text from being deleted but do allow the ability to add additional text to the diary/note; 5. Ability to email individual diary/notes on a claim; 6. Ability to date stamp each diary and note with the user name, date and time of each entry within the same diary/note; and 7. Ability to view diary/note not only in the adjuster workspace area in date order, but also the ability to view the diary/note with a calendar view. Page 6 of 43 City of Miami, Business Requirements Document e 1Req. ID Functionality Description Yes No Comments 22 Imaging & Workflow Functionalities- 1. RMIS provides functionality for an electronic document imaging and workflow system (EDM) for claims administration and property management; 2. Ability to update the WC claim with the data on the medical bill, i.e. ICD-9 Codes and CPT Codes, etc.; 3. Ability to scan and attached a wide variety of documents such as Word, PDF, JPEG, Excel, emails, voice messages, etc. to the individual claim; 4. Set up or create rules -based workflows. 23 Data Ownership- 1. The selected proposer shall be required provide data upon request in a readable format (i.e. csv etc.). 2. The selected proposer shall hold the software source code in escrow and the vendor must provide the update of the source code when updates are performed and/or every 90/180 days. This includes all version updates. 3. The City of Miami at all times shall maintain ownership of the data generated and source code recorded in the procured solution. 24 The procured system shall be required to comply with the City of Miami IT implementation standards for SaaS solutions. 25 Browser Compatibility -The system shall be required to be compatible to Internet explorer, Mozilla Firefox and Google Chrome and adjust to the application. Page 7of43 City of Miami, Business Requirements Document Req. ID Functionality Description Yes No Comments 26 HIPPA-The system to be procured shall be required to adhere to HIPPA privacy laws and remain continually compliant. The system to be procured shall be required to adhere to privacy laws encryptions. 27 System Search Functionality -the system shall provide the capability for users to perform inquiries via: 1. By Claimant First and Last Name. 2. Reference Number (Claim Number, SSN#, Case Number etc.). 3. By Specified Dates. 4. By Subjects. 5. By Category. 6. By Coverage Line. 7. By Customized Field Heading Name. 28 Archive and Archive Retrieval -the City desires a solution that has the capability to archive data based on rules defined by the City. The archived data should be flagged so that it will be excluded from reports unless a report specifically allows archived data to be included. A City user should be notified during a search or index function that a claim is archived and given the option to include or exclude. A City user should have the capability to transfer an archived to the live -production. Page 8 of 43 City of Miami, Business Requirements Document Req. ID Functionality Description Yes No Comments 29 General Solution Requirements- This section refers to commonly used functions that should be accessible throughout the proposed RMS. The City desires a RMIS that includes (and allows City staff to use/access) the following at a minimum: 1. The ability to export/import data in multiple formats, including comma delimited format and Microsoft Excel formats; 2. The ability to use Microsoft Outlook functionality in relation to a claim or incident; 3. The functionality to allow an administrator to create and maintain triggers that automate functions as initiated by system dates and claim management activities; 4. A worksheet specifically designed to provide the ability to calculate and populate Florida Workers' Compensation statutory forms; 5. A "Dash -Board" (view) feature that can be formatted for specific roles, containing pre -defined information related to the users individual tasks or management needs; 6. User -specific notes/comments not captured or attached to a claim file or accessible by any other user; this should operate as posting an electronic "sticky" note on your computer; Page 9 of 43 City of Miami, Business Requirements Document 7. Payment screens; and 8. Ability to view "Face -sheet" with pertinent information (AWW and Comp Rate). General Claims Administrations For All Lines of Insurance Coverages Business & Systems Requirements BR# Business Requirement Yes No Comments 1 The system shall be required to Set up reserve/payment categories (Medical, Indemnity, Expense, Legal, Vocational Rehab, Recovery) with reserve & payment codes for each category for each coverage type. 2 Maintain individual reserve and payment transactions thru out the life of a claim and provide the ability to view and sort on any data element contained within the record, i.e. transaction date, transaction type, payee, amount, service from & thru dates, etc. 3 Ability to add adjuster comments to individual reserve changes/additions and have all reserve changes date and time stamped with the user who made the change. 4 Scroll thru all reserve changes/additions with the adjuster comments and view in chronological order. 5 Provide a financial summary view screen for each claim that displays the incurred, paid & outstanding total for each reserve/payment category and the ability to view totals with a valued as of date option. 6 Auto -generate unique claim numbers based on a user defined claim numbering methodology. 7 Associate multiple claims arising from one "occurrence" (accident) across all coverages and provide the total amount of reserves and payments for the "occurrence" and for of each individual claims both on line and for reporting. Page 10 of 43 City of Miami, Business Requirements Document BR# Business Requirement Yes No Comments 8 Track all system activity and provide audit reports by user or for a claim or by activity type, i.e. new claim input, date modified, transactions added/deleted, modified data elements and reserves with before & after values, new and modified diary/notes, status (open, re -opened, closed) etc. 9 Ability to capture and maintain the system "created" date for each claim and ability to search and report on this date field. 10 Ability to capture and display the Last Financial Activity Date & User Name who performed the activity and the Last Non - Financial Activity Date & User Name for each claim. 11 Ability to capture and maintain the first (original) close date and then automatically update the reopen and re -closed date fields in a claim as claims typically can be closed and re -opened several times over the life a claim. 12 Ability for the end user to change a claim number after a claim is originally created and the system automatically updates all associated records, i.e. diaries, notes, EDI transactions, financial transactions, attachments, etc. with the new claim number. 13 Ability to track unlimited multiple periods of OSHA lost and/or restricted days per claim and to auto calculate the number of days for each period based on the from and thru dates of each period. 14 Comply with all OSHA 300 Tracking & Reporting requirements including the ability to track by category types and exclude "Privacy" claims from the report. Page 11 of 43 City of Miami, Business Requirements Document BR# Business Requirement Yes No Comments 15 Ability to create Word or PDF letters and forms utilizing custom templates created by the client's system administrator with merged claim data and then be able to edit the merged letter/form with additional non claim data and then automatically attach to the claim when the document is saved and printed. 16 Ability to copy and modify an existing merged letter or form with updated data and save it as a new document without changing the date or content of the original merged letter or form. 17 Ability for each end user to customize their search views for claims, transactions, vendors, etc. utilizing all data elements for each record type. 18 Ability to capture in-house attorney information and claimant attorney information, i.e. attorney name, firm name, address, city, state, zip, phone number, date assigned to the claim, matter number, trial dates, etc. 19 Provide a customizable work center for each end user to consolidate adjusters activities, i.e. due diaries, tasks, alerts, frequently run reports, check approvals, low reserve notifications, etc. 20 Ability to open and display multiple claims simultaneously on one display screen. Indicate the maximum number of claims that can be displayed in the Comments section. 21 Provide for duplicate claim checking and issue a warning message that requires the end user to click on OK to Save in order for the suspected duplicate claim to be saved. 22 Provide Liability claim decision support tools, i.e. liability assessment, exposure assessment, medical cost evaluation, general damages assessment, etc. Page 12 of 43 City of Miami, BusineSs Requirements Document r BR# Business Requirement Yes No Comments 23 Ability to create adjuster "activities" i.e. make 3 point contact, obtain property damage appraisal, etc. and until all "activities" are checked off as completed by the adjuster prevent the system from generating any settlement payments. 24 Ability to enter data once and have that data flow into all areas of the RMIS including all types of FL WC Claims EDI and CMS EDI transactions. 25 Ability for a claimant to report an incident via the City's Website and when the incident is "submitted" automatically create a claim in the RM1S and automatically route the new claim to a designated end user to review and forward to the appropriate adjuster for handling. 26 Ability to close claim and automatically zero out outstanding reserves and to mark complete future diaries/notes/tasks on claim. 27 The City desires a solution that has the capability to transfer claim information from one claim or adjuster to another. An audit trail for all of the following information transfer functions is needed: 1. Transfer a claim or group of claims to another user. 2. Transfer a payment from one claim to another. 3. Transfer adjuster diaries (all diaries) from one user to another. 4. Transfer specific all notes/comments specific to claim. 28 The system shall be required to facilitate claims adjustment activities that includes: 1. Adding New Claims: a. Edits on fields that have defined values. b. Drop -down valid values for each field that has defined value or flag a date on a pop- up calendar for date entries. Page 13 of 43 City of Miami, Business Requirements Document c. Record claim add data for automated addition of affiliated claims with same data in many/most fields. d. Automated new claim -adds from electronic claim add records submitted by third party claims administrators, on batch basis, and with specified default values that can be modified after initial claim add routine has completed and with valid data edits built into the automated claim add routine that will either reject the claim -add for that record or allow the claim -add but generate an exception report depicting those records that were added with non - validated data in certain fields. e. Claim -add screens customized for each coverage line, including accommodation of a variety of claim number formats. f. Data elements stored in multiple files auto -populate in all such files when entered in any of the files. g. Data elements currently captured and entered during the claim -add processes are accommodated. 2. Modifying Claim Information: a. Edits when modifying any field with defined values. b. Drop -down list of valid field values and pop-up calendar for date entries. c. Data integrity maintenance, i.e., disallow changes contrary to established rules. Page 14 of 43 City of Miami, Business Requirements Document d. Multiple claim modification on simultaneous basis such that the change is applied to all sub -claims or additional claimants, etc. e. Automated transmission of claim change transactions to affiliated/integrated applications that may be impacted by such change, such as the Electronic Document Management (hereafter, EDM) application. f. Security measures incorporated into system to restrict the type of claim modification allowed or limit the amount of a financial change on basis of criteria defined by Department. g. Data element stored in multiple files or tables can be modified in all files or tables when modified in any of these files or tables. h. Cut information from a variety of sources, such as faxes, electronic documents, images, or other claim records, and paste such information into a claim record. i. Import documents into the claim record. 3. Establishing Diary Information (Trigger Dates, Notes, Reminders, Etc.) a. Create generic diary entries that can be entered into claim diary system from a narrative code or similar setup so that adjuster does not have to re- type these frequently used diary entries each time. b. Import diary entries into a claim's diary from external Page i 5 of 43 City of Miami, Business Requirements Document sources such as e-mail text, electronic documents, etc. c. Query on or otherwise report diary information. d. Automated notification of adjusters of required claim activity based on a trigger established in the diary system. e. Security measures built into system such that certain diary entries cannot be altered or deleted by unauthorized personnel. 4. Setting Reserve Amounts a. Inclusion of Auto -Reserve in the application that will generate a recommended reserve amount based on analysis of historical claims with similar attributes (as defined by Department). This feature shall be designed to produce such recommended reserve on a reserve category basis (i.e., Medical/Bodily Injury vs. Indemnity/Property Damage vs. Expense vs. Legal etc.). b. Security measures to restrict or limit an individual's rights to establish reserve amounts base on criteria specified by Department. c. Under- or insufficient -reserve flags. d. Prohibition of certain application functions, as defined by Department, when the claim is under -reserved. e. Automated calculation of outstanding reserve values, maximum reserve values, Page 16 of 43 City of Miami, Business Requirements Document minimum reserve values, and reserve value at closing. f. Automated notification of supervisory personnel when reserve status on claim reaches certain, pre -defined states. 5. Recording & Managing Payment a. Search/look-up routines built into system to allow adjusters to research a payment request (invoice) to determine if it is a duplicate or not. b. Sub -routines in application to allow adjusters to determine status of a requested payment (i.e., still pending as payable, check cut but not sent out, payment completed and posted to claim). c. Sub -routine to allow adjusters to enter requested pay amount and receive return report of inadequate or low reserve amounts. d. Sub -routine to accommodate adjusters to notify the Financial Section of the need to generate automated compensation payments. 6. Requesting Worker's Compensation indemnity Payments a. Provide the scheduling the initial indemnity payment for one -week and subsequent indemnity payments as bi- weekly in a single process. The initial payment process applies to temporary total and temporary partial indemnity payments. Provide the scheduling of the duration of Page 17af43 City of Miami, Business Requirements Document indemnity payments. The duration process applies to all types of workers' compensation indemnity payments. (According to Florida rules, Death benefits, Perm Total benefits, Deductions such as child support, overpayment recoupments, SS Offsets). b. Automatically calculate the benefit payment amount based on the indemnity benefit type selected; the date of accident; and the average weekly wage contained in the claim record. c. On the payment of permanent impairment benefits on claims with a date of accident on or after 10/1/2016, and the payment of permanent total supplemental benefits, allow the adjuster to determine if permanent total supplemental benefits are payable. If the adjuster elects payable, then calculate the correct benefit amount that when added to the compensation amount will not exceed the maximum compensation rate in the year of payment. Page 18 of 43 City of Miami, Business Requirements Document Import & Export Functionality Requirements BR# Business & System Requirement f Yes No Comments 1 Ability to import an electronic First Report of Injury data file from the City's 3rd party medical care management provider that contains numerous data elements and the auto generation of: (1) A new WC claim or "incident" (2) A new employee vendor record and (3) the payment transaction per each claim for the vendor's intake fee which is added to an accumulating monthly invoice for the vendor so that one check will be generated the 1st of the following month for all of the previous month's intake fees. Each claim's intake fee must also be posted back to the claim when the check is generated and must also show as a "pending payable" prior to the check being generated. 2 Ability to generate a new Claim export file that contains the assigned claim number, assigned adjuster name and other data elements for each new claim just created to export back to the 3rd party medical care management vendor so that their system is updated and ready to begin the medical bill re -pricing process that will occur throughout the life of the WC claim. 3 Ability to generate a daily check run export file for posting each check to the correct fund & expense object number in the City's financial system based upon user defined mapping of coverage type. Page 19 of 43 City of Miami, Business Requirements Document BR# Business & System Requirement Yes No Comments 4 Ability to import an electronic file of City Attorney fees, Medical Case Management Fees, etc. and select the transaction type, from and thru service dates, transaction date and post to the individual claims as manual payments. Provide an exception report of any transaction rejected and not posted to a claim. 5 Ability to import an electronic medical bill data file from the City's 3rd party medical PPO/repricing vendor and auto generate the (invoice) pending payable to the correct medical provider on each claim including the amount of payment, transaction type, service from and thru dates, date check is to print, etc.; provides an exception manager that allows the rejected bills to be manually corrected & re- processed; and creates the payment transaction for the bill repricing fee which is added to an accumulating monthly invoice for the vendor so that one check will be generated the 1st of the following month for all of the previous month's bill processing fees. Each claim's bill repricing fee must also be posted back to the claim when the check is generated and must also show as a "pending payable" prior to the check being generated. 6 Ability to warn of possible duplicate vendor payables when the medical bill import file is processed. Page 20 of 43 City of Miami, Business Requirements Document BR# Business & System Requirement Yes No Comments 7 Ability to generate a daily paid medical bill payment export file for the City's 3rd party medical PPO/re- pricing vendor that contains the claim number, claimant name, check number, amount paid, date paid, Bill ID #, etc. as this vendor submits the State mandated medical bill EDI files to the State on behalf of the City. 8 Ability to auto generate a Low Reserve Diary/Notification to the assigned adjuster when the electronic medical bill payables are generated and a low reserve condition results on a claim. For example claim has $500.00 in outstanding medical reserves and when the medical bill export is processed a medical payment for $525.00 is generated for this claim thus resulting in zero medical reserves on this claim. 9 Ability to pull in various data elements for the injured worker (i.e. WC Code, hourly rate of pay, union code, etc.) from the City's payroll/HR import files. 10 Provide a two way interface with ISO for all lines of coverage. Configuration & Maintenance Functionalities A Ability to define, set up and maintain a First Report of Injury Data Import & New Claim Creation Process Configuration including, but not limited to, the following: (1) Map the various user defined data elements (Le. default adjuster, Import Flag, Export Flag, etc.) required in the First Report of Injury new claim import & creation process (2) Map the vendor Page 21 of 43 City of Miami, Business Requirements Document record for the City's current 3rd (Third Party Administrator) TPA vendor to be paid for the claim intake. (3) enter the 3rd (Third Party Administrator) TPA vendor's current claim intake fee schedule amount. 8 Ability to define, set up and maintain a Workers' Compensation Medical Bill Import & Claim Payable Process Configuration including, but not limited to, the following : (1) Map the various user defined data elements in the import file(i.e. Bill ID#, Payment Type, PPO Reduction Amount, Standard Reduction Amount, Bill Type, Payment Type, bill repricing fee, etc.) to the payable record that is created. (2) Map the vendor record for the current 3rd party medical bill re -pricing vendor to be paid for the bill repricing fee. (3) Map the transaction code to be used for the medical bill repricing fee transaction (payment). Payment/Reserve & Check Writing Functionality Requirements BR# Business Requirement Yes No Comments 1 Ability to post manual payments to a claim. 2 Ability to auto -generate recurring payments (non -Indemnity Benefits) on a claim to a vendor, i.e. pay attendant care to vendor XYZ in the amount of $XXO.oa every 2 weeks starting on X date and ending on XX date. 3 Ability to manually input invoices on a claim and generate a pending payable. Page 22 of 43 City of Miami, Business Requirements Document BR# Business Requirement Yes No Comments 4 Ability to generate low reserves alerts and place pending payables on "hold" until reserves are increased by the adjuster. 5 Ability to generate a "pending payable" report for auditing purposes prior to check generation, if needed. 6 Ability to export payables to a format required by the City's laser check writing system utilizing the RM15 generated check numbers and then update the payment data to the claim, i.e. date paid, check #, etc. if needed. 7 Ability to void a previously issued check on a claim if needed. 8 Ability to generate a daily Positive Pay Export file for the City's bank that matches the daily check run if needed. 9 Ability to generate an ACH file for payments and post the payment to the claim, if needed. 10 Ability to input vendor invoices received on multiple claims from the same vendor on one invoice (payable) in order to issue one mass check and post the individual amounts back to each claim, if needed. 11 Ability to change a payment's transaction type and/or the service from and thru dates after a check is printed, if needed. 12 Ability to transfer a payment from one claim to another when a check is issued on the wrong claim, if needed. Page 23 of 43 City of Miami, Business Requirements Document BR# Business Requirement Yes No Comments 13 Ability to generate check registers sorted by check number for a user defined check paid date range, if needed. 14 Ability to search unpaid invoices (pending payables) based on due date, payee, etc. and then select all in mass or individually select to print checks, if needed. 15 Ability to warn of possible duplicate invoices (payables) when a payable is being keyed into the system, if needed. 15 Ability to process a check reconciliation with the City's bank and update the payment's status from "outstanding" to "cleared", "stopped" or "voided" per the current monthly bank statement received and processed, if needed. Worker's Compensation Indemnity Benefits (Florida) Functionality Requirements BR# _ Business Requirement Yes No Comments 1 Ability to auto calculate and generate all types of Indemnity Benefit (i.e. TTD, TPD, IIB, PT, etc.) payments in accordance with FL Statue 440. 2 Ability to add supplemental amounts and/or deductions from the amount due on Indemnity Benefit payments. 3 Ability to automatically calculate the New Year's PT Supplemental Amount for Permanent Total Indemnity Benefits each January lst. Page 24 of 43 City of Miami, Business Requirements Document BR# Business Requirement Yes No Comments 4 Ability to automatically adjust the PT paid if the PT Supplemental Amount plus the PT exceeds the State's new yearly maximum. 5 Ability to automatically terminate the PT Supplemental Benefit when a claimant reaches their 62nd birthday or statutory retirement age. 6 Ability to restart a benefit if previously terminated, 7 Ability to only have one open benefit at a time. 8 Ability to track the weeks and days paid, amount paid, from & thru dates, date paid, etc. for each benefit period by benefit type for each claim. 9 Ability to add more than one payee for a benefit, i.e, child support to the State. 10 Ability to generate an Indemnity Benefits Forecast Report before generating the invoice (payables) for auditing purposes. 11 Ability to define Indemnity Benefit status as either Active or In -Active. 12 Ability to search for Indemnity Benefits based on status, claim #, name, type, etc. 13 Ability to provide a summary Indemnity Benefits screen for each claim that displays all Benefit Types & Periods paid with various data elements, i.e. Start & End Dates, Type of Benefit, Amount Paid to Date, Next Payment Due Date, Weeks & Days Paid, etc. and the ability to sort the list on any data element displayed. Page 25 of 43 City of Miami, Business Requirements Document Configuration & Maintenance Indemnity Benefits (In Accordance with FL Statute 440) Business Requirement Yes No Comments A Indemnity Payment Adjustment Types, i.e. Social Security Offset, transaction vs non -transactional adjustments, overpayments, etc. B Indemnity Payment Schedule Types (i.e. weekly, bi-weekly, X # of days, etc.). C How past due Indemnity payments or lump sum benefits are to be handled, i.e., cut the check immediately or when due at the next scheduled due date. D Payee Mapping to the vendor file. E Indemnity Benefit Types (i.e. Temporary Total Disability, Temporary Partial Disability, Survivor Benefits, Permanent Total Disability, Income Impairment Benefits, etc.). F Benefit Parameters (i.e. benefit percentage of average weekly wage, maximum & minimum rates for each benefit type for each calendar year). G Maximum Payment Duration or amount by benefit type. H Supplemental Adjustment Rate Percentage. Page 26 of 43 City of Miami, Business Requirements Document Mandated State of Florida Worker's Compensation Claim "EDI" Functionalities Business Requirement Yes No Comments Ability to meet all requirements of the State of Florida Workers' Compensation Claims EDI Mandate set forth by Rule 69L-56 and generate all required EDI transactions based on claim event (FROI and SRO] transactions) for an injured worker becomes lost time (8th day of disability); generate the correct SROI transaction when the first check of indemnity is issued; generate the correct SROI transaction when the Sub Annual Reports are due; generate the correct SROI transaction when the Return to Work Date is entered; generate a corrected FROI when the social security number is changed in the claim, etc. NOTE: There is a large number of claim events that trigger when an EDI transaction is required. J Provide for the daily transmission of the EDI transactions to the State of Florida, i.e. act as a Clearing House. K Provide for the receipt of the State's electronic acknowledgements and/or error messages daily and the ability to update the claim with this information, i.e. TA, TR, etc. L Ability to search all WC EDI transactions by status, type, state acknowledge codes, etc. Page 27 of 43 City of Miami, Business Requirements Document Business Requirement Yes No Comments M Ability to define, set up and maintain for the State of FL WC Claims EDI requirements configuration including, but not limited to, the following: Mapping for all of the various data elements (68+) and transaction codes to the State's data elements and codes. N Ability to have State of FL EDI fields automatically populate with data mapped from the claim. 0 Ability to have benefit amounts paid map from the claim to the corresponding SROI transaction being completed. Medicare (CMS) Center for Medicare/Medicaid Services "EDI" Functionality Requirements BR# Business Requirement Yes No Comments 1 Ability to meet all data capturing & EDI requirements of Section 111 of the Medicare, Medicaid, and SCHIP Extension Act of 2007(MMSEA)(P.L.110-173) to include both the mandated quarterly claim input file and the non -mandated Monthly Query File to aid in determining Medicare Eligibility for claimants. 2 Provide for the transmission of the EDI transactions to CMS, i.e. act as a Dearing House. 3 Provide for the receipt of the CMS's electronic acknowledgements and/or error messages and the ability to update the claim with this information. Page 28 of 43 City of Miami, Business Requirements Document Configuration & Maintenance Functionalities Business Requirement Yes No Comments A Ability to meet all EDI requirements of Section 111 of the Medicare, Medicaid, and SCHIP Extension Act of 2007 (MMSEA) (P.L.110-173) and to provide complete automation of all required EDI transactions based on claim events, adding newly identified Medicare eligible claims to quarterly input file, settlements made on claims, updated ICD-9 (or ICD-10) diagnostics codes contained in claim, ORM termination, etc. B Ability to map information already contained in the claim to the appropriate CMS data fields per coverage type. C Ability to "hard code" default settings per coverage type such as plan company name, address, plan contact name, and plan insurance type, etc. D Ability to create an alert that would notify adjuster when a settlement has been paid on a Medicare eligible claim to populate the TPOC information for inclusion in the quarterly claim input file. E Ability to create an alert that would notify adjuster when a closed claim has the statute toll for inclusion in the quarterly claim input file with ORM termination date. Page 29 of 43 City of Miami, Business Requirements Document Property/Locations Management Functionality Requirements Functionality Requirements BR# Business Requirement Yes No Comments 1 Ability to track the various COPE data elements (i.e. sq. footage, construction type, year built, year renovated, building height, roof type, # of stories, percentage sprinklers, alarms, occupancy type, Flood Zone, Wind Storm Zone, etc.) on City owned building locations. 2 Ability to capture and track recommendations on locations. 3 Ability to capture and track loss expectancy on locations. 4 Ability to save attachments i.e. Word, Excel, PDFs, scanned images, etc. to locations. 5 Ability to track values, i.e. building, contents, EDP, books, business interruption, etc. on all City locations on a quarterly basis and for at least 10 previous years also on a quarterly basis, if needed 6 Ability to generated location & values comparison reports, i.e. values as of 10/1/16 vs as of 10/ 1/ 17. 7 Ability to generate change in values reports for locations. 8 Ability to generate location and values reports based on previously values as of dates. Page 30 of 43 City of Miami, Business Requirements Document BR# Business Requirement Yes No Comments 9 Ability to track all information regarding Commercial Insurance Policies, i.e. carrier name, policy #, coverage, Iimits(per occurrence & aggregate), deductibles, co- insurance amounts, effective & expiration dates, policy type, i.e. occurrence versus claims made, broker, SIR amounts, perils, premiums budgeted & paid, exposure data, etc. and the ability to attached scanned documents, Word docs, PDF, etc. to each policy. System Interface/Business Unit Interactions The procured RMIS solution shall provide the capability to interface with existing City of Miami application (if needed) and the City's selected Third Party Administrator system(s). Security Requirements BR# Business Requirement Yes No Comments 1 Access Groups which limit users' access to coverages, locations, notes/diaries categories, vendor, policies, (i.e. each category can be set to ALL, Some or NONE and be able to define read only, read-write and delete access.) 2 Access Groups which grant permissions, i.e. view, add, edit, delete, etc. to various document types in the system based on coverage types. 3 Access Groups which define if a user can add transactions, reserves, invoices, issue checks and establish maximum amounts for each type, if transaction(s) are allowed. Page 31 of 43 City of Miami, Business Requirements Document BR# Business Requirement Yes No Comments 4 Access Groups which limit users' access to the standard delivered report templates, i.e. All, Some or None and defines users' ability to create, run, deleted or add ad hoc reports. 5 Access Group which defines the types of system administrator functions allowed for the client's System Administrators to set up and maintain security and all of the system configuration functions discussed throughout this document. 6 Assign users to the various types of access groups that reflect their job functions(s), i.e., Safety Group which could have read only access to WC claims info but no access to notes & diaries or WC Adjusting Group which would have full read-write access to all document types for WC claims and then read only access to all of document types for all of the Liability coverages, etc. 7 Provide field level security for all data elements. 8 Allow access to system functionalities based on user groups and/or by individual user. 9 Set up User Relationship Hierarchy that defines users as supervisors or subordinates so that a supervisor can view all of their subordinates' tasks, diaries, claims, etc. and ability to escalate reserve increases, payment authorizations, etc. to the supervisor. 10 Ability to copy an access group to a new access group and modify as needed. 11 Ability to copy an existing user's profile to a new user and modify as needed. 12 Password expiration options (i.e. all passwords expired every X days) and formats. Page 32 of 43 City of Miami, Business Requirements Document BR# Business Requirement Yes No Comments 13 Ability to lock out system users after a defined number of failed logon attempts. 14 Ability to log out users. 15 Ability to reset passwords. 16 Ability to deactivate a user and reassigned their open tasks/diaries to another active user and reactivate system users. 17 Ability to set up property user access groups that will allow view access only to values but allow edit access to selected COPE data elements. 18 Provide access to the RMIS and ability to run reports for users outside of the City's network, i.e. via the Internet. 19 Restrict users to a specific department(s) or Iocation(s). 20 Assign a department/location to a user profile. System Support & Maintenance Requirements BR# Business Requirements Yes No Comments 1 Long Term Support and Maintenance Services: The Selected Proposer will provide long- term support and maintenance services. This includes warranties for "glitches," functional deficiencies, performance issues, and user and technical support. The Selected Proposer will also provide to the City version upgrades as follows: 1. Release notes, updated documentation, updated online and live telephone help. 2. Information concerning legislative requirements. 3. Customer (User Groups) driven changes either reflecting functional deficiencies identified Page 33 of 43 City of Miami, Business Requirements Document by customers or new business requirements, or reporting requirements identified by customers. 2 Online Help and Support: The Selected Proposer will provide an Internet -based support system ("Support Help Desk") available seven (7) days a week, twenty-four (24) hours a day on the Service Provider's Website. The online help information must be updated as new functions are added or existing functions are remedied. All resolutions should allow system administrator the ability to edit and maintain program integrity. On -Line help module is not to take the place of Technical Systems Support as outlined in the section below. 3 Two (2) priority levels for City to categorize reported Software solution problems: PRIORITY 1 - NORMAL REQUEST Selected Proposer will commence work on resolving the deficiency within twenty four (24) hours of notification and will keep City staff briefed until an acceptable resolution is achieved; and PRIORITY 2 - PRIORITY REQUEST Selected Proposer will commence work on resolving the deficiency within twelve (12) hours (Monday - Friday) or within twenty four (24) hours (Saturday and Sunday) of notification and will keep City staff briefed until an acceptable resolution is achieved. Page 34 of 43 City of Miami, Business Requirements Document Reporting Requirements BR# Business Requirements Yes No Comments 1 Provide an extensive library of standard claims & risk management template reports that are easy to generate for an end user and that provide report selection on all data elements, including user defined data elements and the ability to sort and totals. 2 Ability to provide claim file totals reports that depict incurred, paid and outstanding values. Number of Closed Claims with payments; Number of Open Claims Incurred & Paid; Number of Reopened Claims and Grand Totals of all claims with Total Incurred, Paid & Outstanding amounts. Must be able to run reports a variety of ways, i.e. by fiscal year, by excess policy year, for all locations, for selected locations, etc. 3 Ability to generate prior -valuation reports. 4 Ability to generate point in time comparison reports. 5 Ability to print reports across coverages to include the ability to sort & total by coverage. 6 Ability to generate claim abstract reports with run time options to either include or exclude diary/notes and transactions. 7 Ability to generate the State SI-17 claims report in both hard copy and in the State's required EDI format. 8 Ability to generate loss data extractions and reports for the actuary by coverage and by fiscal year in summary format. 9 Ability to generate Loss Triangles by coverage and by fiscal year. 10 Ability to save all output to display, to printer or as file (i.e. PDF, Excel, Excel Data Only, Word, text, comma delimited, etc.). Page 35 of 43 City of Miami, Business Requirements Document BR# Business Requirements Yes No Comments 11 Ability to generate report output graphically. 12 Ability to generate reports and distribute via emails to users as defined in distribution lists. 13 Ability to generate all loss runs and sort & total based on the organizational structure. 14 Ability to generate security reports depicting each user and all of their assigned groups, rights, etc. 15 Ability to generate audit reports by user that depicts their system activity, date of activity, document actions, before and after values of data elements modified, etc. Ability to generate payment history reports for a vendor. 16 Ability to generate 1099 reporting. 17 Provide an Ad Hoc Report Writer that is easy for the casual end user to utilize, i.e. drop & drag data elements and to have these reports show details and/or summary data for claims, payments, vendors, etc. 18 Ability to choose all system data elements including client defined data elements in Ad Hoc reports. 19 Ability to provide summary totals on numeric data elements in the Ad Hoc reports. 20 Ability to generate Occurrence reports. 21 Ability to create and import custom reports with the report writer utilized by the RMIS. Page 36 of 43 City of Miami, Business Requirements Document BR# Business Requirements Yes No Comments 22 The ability to generate Policy/Coverage specific reports (Le. City of Aviation liability claim paid reports that are used to track the $50,000 self -insured retention and first layer of insurance with: (1) A monthly report for the property and casualty team and the brokers; (2) A weekly report for the liability adjusters who handle Aviation claims.) 23 Ability to create workers' compensation and liability specific reports and loss claims reports. 24 The ability to generate fiscal reporting on claims assessments. 25 The ability to generate fiscal year- end data extract for actuarial financial reporting. 26 Reporting Samples shall include: Financial/Actuarial Issues A. Produce reports on demand, in-house, and on a date range basis. B. Report generation criteria to accommodate most any type of study (i.e., multiple date range specifications, to generate Toss development quarterly, semi-annually, annually, monthly basis, managed care vs. fee for service, by batch number, check date, check number range, contractor, etc.). C. Download results of reports to an application such as MS Access or Excel. D. Output results of reports to database file captured and electronically transmitted to another system (SFTP, etc.) Page 37 of 43 City of Miami, Business Requirements Document E. Built-in functions/features used to perform calculations within the generated financial report. F. Drill -down functionality for certain report generators (Example: Cost of Allocation report depicts projected premium amounts for entire City, then drill down capability to the Department level or Union level). G. Generate casualty and property cost of risk allocation (CORA) reports, and invoices, on -site; and correlate the location codes within the account to their associated budget entities. The invoices generated shall be part of an accounts receivable system that will allow monitoring of cash collections and production of cash collection reports and accounts receivable reports. H. Transmit invoices to paying entities via electronic fax or e- mail. Production Reports A. Produce such system generated reports on a hierarchical basis; for example, a Chief Financial Officer and Directors get production reports on everyone in a department in their section, etc. B. Produce reports from criteria based on a claim condition or multiple claim conditions for all claim data elements. Page 38 of43 City of Miami, Business Requirements Document C. Produce reports on date basis. D. Produce reports on a value basis. E. Produce reports on multiple bases, such as number of claims assigned, number claims worked, number claims dosed, and number claims in open status, etc. F. Produce reports from criteria based on a text string in a defined field. G. Produce reports for multiple years' activity. H. Generate claim abstract reports on the basis of a variety of selection criteria and report output criteria. I. Create ad hoc report templates. J.Produce reports on a claim summary or claim detail basis. Safety/loss prevention reports A. Produce reports on demand, including but not limited to safety recommendations submitted by department or location. B. Library of generic, commonly used reports, as defined by Departments that may be executed on a one -click or one -click and simple data entry basis. C. Ad hoc query writing capacity/capability with to query on any/all data elements stored in system. D. Run reports on a specified point -in -time basis. E. History component in the database to allow as of queries and to combine history and current data files to obtain one Page 39 of 43 City of Miami, Business Requirements Document consolidated report. F. Graphing & charting capabilities, with multiple types of graphs/charts to select from, with switch from one type of graph/chart to another so that user can choose the most favorable as a final selection. G. Download into Microsoft Office Products (Excel, Access, etc.) and/or other database applications. H. Produce reports on a summary or detail basis. I. Output results of report to electronic file suitable for downloading to other application, attaching to e-mail for transmission or electronic fax. J.Reports shall run against a live database — data updated on continual basis. K. Security measures incorporated such that developing, generating, or running certain reports can be restricted or limited to specific data or ranges of data for certain users in accordance with specifications prescribed by the Department. L. Produce reports on a hierarchical basis, such as on a budget entity level/sub-level basis, with the built-in to drill down or drill up through such hierarchy. M. Combine data files such that exposure data and claim data can be queried simultaneously for the purpose of calculating such things as rates (# WC Page 40 of 43 City of Miami, Business Requirements Document claims/100 FTE or It AL claims/100 vehicle units, etc.) N. Develop and save certain report writers such that they can be run on a periodic basis with automatic updates of the report results. 0. Access to report generation routines , provided to authorized insured entity personnel such that these personnel can execute certain safety/loss control reporting processes, both pre -defined and user defined, subject to restrictions defined by Department. Litigation and Legal Information Reports A. Identify/isolate litigated claims. B. Select on legal claims on basis of multiple selection criteria such as defense attorney, claimant attorney, court of jurisdiction, legal action status (pending, in trial, resolved, etc.), outcome of litigation (settled, plaintiff award, defense award, appealed, etc.) and/or on affiliated dates (date to legal, trial date, assignment to defense counsel date, legal advertisement date, settlement date, review/evaluation date, etc.). C. Execute reports of legal claim assignments to defense attorney firms for the purpose of determining the number of claims assigned to specified firm(s), amount paid to firm(s), number of active claims, and/or other information Page 41 of 43 City of Miami, Business Requirements Document related to the assignment of a legal claim to an attorney firm. D. Automated production of reports to adjuster/supervisor personnel when claim reaches certain pre -defined legal status such as plaintiff/defense attorney payment exceeds defined limit, or other such status as defined by the Department E. Customized report production, based on standards prescribed by Department, to facilitate selection of defense attorney firm to which a newly litigated claim is to be assigned. F. Produce legal reports based on in-house assignment to State Attorney General's office vs. assignment to private firm. Contractor Reports A. Produce reports based on selection of any data element(s) stored in Contractor file, including, but not limited to, Contractor number, federal tax identification number, type of Contractor, location of Contractor, lien status, Contractor status (active/inactive), etc. B. Correlate Contractor information with payment information to produce reports. C. Detect duplicate Contractors in Contractor file based on criteria specified by Department and merge duplicate Contractor records into one record where Page 42 of 43 City of Miami, Business Requirements Document appropriate. D. Produce reports to facilitate review of information related to the generation of IRS1099 forms or other required/mandated reporting prior to the actual generation of such forms. F. Review Contractor usage rates F. Search the Contractor file on basis of any/all data elements stored in such file. Bulk Reports A, Provide for capability to produce large volume reports as the need presents itself. B. Output results of large volume reports to electronic file suitable for downloading to PC -based database application or similar. Page 43 of 43 Risk Management Information System RFP No. 681390 Attachment C Price Schedule Instructions: The Proposer's price shall be submitted on this form, "Price Schedule", and in the manner stated herein. Proposer is requested to fill in the applicable blanks on this form and to make no other marks. 1. Total One -Time Costs for Initial Term (Years 1 through 3) The Proposer shall state its price for providing the Risk Management Information System (System) as stated in Section 3, Scope of Work. The proposed price shall be a not to exceed flat rate and shall include all tasks deemed necessary to provide the System. The proposed price shall include all fees including one-time and recurring, and value added options. Description Proposed One -Time Cost Year 1 Year 2 Year 3 1 System Design $ $ $ 2 Software (Initial cost) $ $ $ 3 Hardware $ $ $ 4 Installation/Customization $ $ $ 5 Data Migration $ $ $ 6 Training (including training materials) $ $ $ 7 Maintenance (annual recurring) $ $ $ 8 Client Support $ $ $ 9 Data Hosting $ $ $ 10 Other One -Time Costs $ $ $ Total Price For Each Year $ $ $ Total One -Time Cost for Initial Term (Years 1-3) Total price should be the aggregate price for the three years listed above. Notes: 1. The City reserves the right to correct and recalculate any errors found in the Proposer's calculation. 2. Proposer should use a separate paper to itemize any recurring annual and monthly costs for maintenance and support. Include base and optional features, as well as other Risk Management lnfonnation System RFP No. 681390 issues that impact pricing. The total cost for the recurring maintenance cost should match row 7 above. 3. Proposer should use a separate paper to itemize all other one-time costs, including but not limited to enhancements, proposed modules, third party software, etc. The total cost for other one-time costs should match row 10 above. 2. Option to Renew Years (Three, One -Year Periods) Proposer shall state its price below for the cost of maintenance and technical support during the optional renewal years. Description Annual Fee Year 4 Maintenance and Technical Support $ Year 5 Maintenance and Technical Support $ Year 6 Maintenance and Technical Support $ 3. Additional Services The Scope of Work outlined herein identifies that work that the Successful Proposer shall perform under the Agreement. To address future City requests for any additional work, modifications, or changes outside of the scope of work, please provide not -to -exceed hourly rates for personnel who will be assigned to this contract. Use additional paper if required. Personnel Not -To -Exceed Hourly Rates Project Manager/Lead Person $ Programmer $ Trainer $ $ $ $ Notes: 1. The rates above in Section 1 shall be fixed and firm for the initial contract term. The rates for the option -to -renew years shall be negotiated 90 days prior to the renewal of the contract for each option to renew period. Any extension to the Contract will be at the then current rates. 2. All out-of-pocket expenses, including employee travel, per diem and miscellaneous costs and fees, should be included in the Proposer's price, as they will not be reimbursed separately by the City. Refer to Florida Statute 112.061, regarding adherence to travel expenses. 3. Sections 1 through 3 will be used to determine the price points for the price criteria as indicated in Section 5.1, Evaluation Criteria of this Solicitation. 4. Notwithstanding the proposed hourly rates in Section 3 above, the City reserves the right to negotiate the not -to -exceed pricing on a project by project basis, at the City's sole discretion. Risk Management [nlonnation System RFP No. 681390 5. The positions identified in the table above shall be the same as the key positions identified in the Proposer's proposal. The City expects that the personnel in those positions will be performing the services.