> For the complete documentation index, see [llms.txt](https://preapproval-guide.imda.gov.sg/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://preapproval-guide.imda.gov.sg/pre-approval-guide/stage-1-vendor-self-assessment/identify-suitable-solution-category/essential-business/applicant-tracking-and-sourcing-system.md). # Applicant Tracking & Sourcing System Help companies organise candidates for hiring and recruitment purposes, allowing businesses to collect information, organise prospects based on experience and skill set, and filter applicants. **Instructions** * This page helps you prepare "*Solution Requirements*" section in Vendor Management Portal and you will see the exact questions and flow. * 🔴 **Mandatory questions:** Must answer "Yes" to continue * 🟡 **Preferred questions:** Can answer either way and continue * Follow the question flow as indicated ### Q1 🔴 Mandatory - Cloud and Multi-Device Accessibility **Main Question:** Does your solution allow for cloud-based, mobile-based, and/or web-based usage? 🔴 Answer: ○ Yes \[Next: Q2] ○ No \[⚠️ Cannot Proceed] *** ### Q2 🔴 Mandatory - Recruitment Management **Main Question:** Does your solution come with a Recruitment Module which allows the company to perform the following functions? **Recruitment Module Requirements:** a. Create and edit new job hire positions with approval workflows b. Update and track candidate application status (e.g., New, Shortlisted, Scheduled, Interviewed, Offered, Rejected, etc) c. Send job offers to candidates via the system d. Publish job postings to multiple job boards (e.g., LinkedIn, Jobstreet, MyCareersFuture, IHLs, etc) e. Configure application form with custom questions, and accept document uploads from candidates f. Send customised emails with provided templates (e.g., for scheduling of interview, job offer, rejection, etc.) to multiple candidates at a time, with role-based privacy settings (i.e. HR can determine level of information visible to hiring managers and peer interviewers) g. Tag candidates and make recruitment notes on candidate in the system 🔴 Answer: ○ Yes \[Next: Q3] ○ No \[⚠️ Cannot Proceed] *** ### Q3 🟡 Preferred - API Extension to HRMS **Main Question:** Does your solution establish API connections with HRMS systems? 🟡 Answer: ○ Yes \[Next: Q4] ○ No \[Next: Q5] \-- ### Q4 🔴 Mandatory Follow-up - API Extension to HRMS - Elaboration *This question appears only if you answered "Yes" to Q3* **Main Question:** a. List the HRMS that the solution can integrate b. List the features/functions that are integrated Note: There will not be support to fund development of API extension to any HRMS Click "Yes" to confirm you have completed the instructions. 🔴 Answer: ○ Yes \[Next: Q5] ○ No \[⚠️ Cannot Proceed] **Text Elaboration Required:** \[Text Box for Description/Details] *** ### Q5 🔴 Mandatory - Dashboards and Reports (Applicant Tracking and Sourcing System) **Main Question:** Does your solution come with these dashboards and reports that are downloadable and exportable? **Dashboard and Reports Requirements:** a. Dashboard with an overview of all job posts and application status b. Analytics or reports for candidate application tracking and recruitment performance analysis (e.g., Application to Vacancies Ratio (AVR), Job Offer Rate, etc) Your digital solution should have one or more dashboards that provide an at-a-glance overview of key metrics/indicators with at least 4 charts/graphs to help users analyse data through data visualisation. The dashboard must include at least one of the following interactive features: Option 1: Interactive charts/graphs that allow users to interact with one chart and apply that interaction as a filter to other charts on the dashboard, and vice versa Option 2: At least three common filters/slicers applicable to ALL charts/graphs on the same dashboard 🔴 Answer: ○ Yes \[Next: Q6] ○ No \[⚠️ Cannot Proceed] *** ### Q6 🟡 Preferred - Skills Proficiency Levels Specification **Main Question:** Does your solution specify the Skills Proficiency levels in accordance with the SkillsFuture Framework? 🟡 Answer: ○ Yes \[Next: Q7] ○ No \[Next: Q7] *** ### Q7 🟡 Preferred - Integrated Interview Scheduling and Calendar View **Main Question:** Does your solution allow viewing of calendars of hiring managers and to generate meeting links on meeting platforms (e.g. Zoom, MS Teams, Google Meet) within the system, for seamless scheduling of interviews? 🟡 Answer: ○ Yes \[Next: Q8] ○ No \[Next: Q8] *** ### Q8 🟡 Preferred - AI Powered Recruitment and Talent Matching **Main Question:** Does your solution have AI Features related to Recruitment and Talent Matching? 🟡 Answer: ○ Yes \[Next: Q9] ○ No \[Next: Q10] \-- ### Q9 🔴 Mandatory Follow-up - AI Powered Recruitment and Talent Matching - Elaboration *This question appears only if you answered "Yes" to Q8* **Main Question:** Describe your Recruitment/Talent Matching AI features. Examples are: **AI Features Examples:** a. Smart recommendation of candidates based on set requirements b. Candidate CV summarisation c. Others, please specify Click "Yes" to confirm you have completed the instructions. 🔴 Answer: ○ Yes \[Next: Q10] ○ No \[⚠️ Cannot Proceed] **Text Elaboration Required:** \[Text Box for Description/Details] *** ### Q10 🔴 Mandatory - Business Data Extraction **Main Question:** Can your solution enable SMEs to efficiently extract business data in various discrete formats such as CSV, XLSX, XML, and TSV? 🔴 Answer: ○ Yes \[Next: Q11] ○ No \[⚠️ Cannot Proceed] *** ### Q11 🔴 Mandatory - Personal Data Protection **Main Question:** Can your solution demonstrate compliance with the following Personal Data Protection requirements? **Compliance Requirements:** Digital solutions that collect, use, disclose, process or dispose personal data should incorporate features that support the obligations under the Personal Data Protection Act (2020). To comply with this requirement, you MUST complete the Personal Data Protection Requirements form at . 🔴 Answer: ○ Yes \[Next: Q12] ○ No \[⚠️ Cannot Proceed] *** ### Q12 🔴 Mandatory - Vulnerability Assessment/Penetration Testing (VA/PT) **Main Question:** Has your solution undergone a comprehensive security vulnerability assessment/penetration testing (VA/PT) conducted by a qualified third-party within the last 12 months? The scope of the VA/PT must cover network security; application security; data protection measures and access control (if applicable); API security testing (if applicable); Cloud security configuration review (if applicable). Specifically, for web application security, the scope must cover minimally all OWASP Top 10 vulnerabilities. **Submission Requirements:** Please submit the VA/PT report (dated maximum 1 year from the checklist submission date). The VA/PT Report must include Executive summary; Detailed findings and risk ratings; Remediation recommendations; Evidence of vulnerability fixes or mitigation plans; Testing methodology used; Scope of assessment; Assessor's qualifications and certifications. If you are the reseller of the solution, please obtain the VA/PT report from your product principal. SOC 2 Type II report can be accepted if the detailed technical vulnerability assessment results are part of the SOC2 Type II scope. **Note:** \[1] Qualified third-party refers to: CREST-certified companies \[ ] or companies with security professional with relevant CREST certifications; Security professionals with recognised certifications such as: Offensive Security Certified Professional (OSCP); EC-Council Certified Penetration Testing Professional (CPENT); GIAC Penetration Tester (GPEN); or other equivalent industry-recognised certifications. Click "Yes" to confirm you have completed the instructions. 🔴 Answer: ○ Yes \[Next: Q13] ○ No \[⚠️ Cannot Proceed] **Date of Issue Required:** \[Date Field] **Upload Supporting Document Required:** \[File Upload] **Text Elaboration Required:** \[Text Box for Description/Details] *** ### Q13 🟡 Preferred - Cybersecurity Compliance - Cyber Essentials Mark (CEM) **Main Question:** Are you the Product Principal of the solution that you are submitting for pre-approval? 🟡 Answer: ○ Yes \[Next: Q14] ○ No \[Next: Q16] *** ### Q14 🟡 Preferred - CEM for Product Principal **Main Question:** Has your organisation achieved CSA Cyber Essentials for ICT Vendor Mark certification or equivalent recognised cybersecurity certifications (including but not limited to Cyber Trust Mark or ISO27001) that validate the implementation of appropriate security controls against common cyber threats in your organisation and the solution you are submitting for pre-approval? **Additional Information:** Vendors are encouraged to comply at application and are required to meet this requirement by the Annual Review, where it will be assessed as mandatory. Note: For more information on Cyber Essentials mark, please refer to 🟡 Answer: ○ Yes \[Next: Q15] ○ No \[Assessment Finished] \-- ### Q15 🔴 Mandatory Follow-up - CEM for Product Principal - Elaboration *This question appears only if you answered "Yes" to Q14* **Main Question:** Please specify the following information: **Certification Requirements:** i. The certificate demonstrating your organisation has attained Cyber Essentials for ICT Vendors i. The cybersecurity certification the organisation has met ii. The scope of the certification Please also upload a copy of the Certification and indicate the Certification Issuance Date in the date field. Click "Yes" to confirm you have completed the instructions. 🔴 Answer: ○ Yes \[Assessment Finished] ○ No \[⚠️ Cannot Proceed] **Date of Issue Required:** \[Date Field] **Upload Supporting Document Required:** \[File Upload] **Text Elaboration Required:** \[Text Box for Description/Details] *** ### Q16 🟡 Preferred - CEM for Resellers **Main Question:** Has your organisation achieved CSA Cyber Essentials Mark certification or equivalent recognised cybersecurity certifications (including but not limited to Cyber Trust Mark or ISO27001) that validate the implementation of appropriate security controls against common cyber threats in your organisation and the solution you are submitting for pre-approval? **Additional Information:** Vendors are encouraged to comply at application and are required to meet this requirement by the Annual Review, where it will be assessed as mandatory. Note: For more information on Cyber Essentials mark, please refer to 🟡 Answer: ○ Yes \[Next: Q17] ○ No \[Assessment Finished] \-- ### Q17 🔴 Mandatory Follow-up - CEM for Resellers - Elaboration *This question appears only if you answered "Yes" to Q16* **Main Question:** Please specify the following information: **Certification Requirements:** i. The cybersecurity certification the organisation has met ii. The scope of the certification Please also upload a copy of the Certification and indicate the Certification Issuance Date in the date field. Click "Yes" to confirm you have completed the instructions. 🔴 Answer: ○ Yes \[Assessment Finished] ○ No \[⚠️ Cannot Proceed] **Date of Issue Required:** \[Date Field] **Upload Supporting Document Required:** \[File Upload] **Text Elaboration Required:** \[Text Box for Description/Details] {% hint style="info" %} **Preparing for submission?** Your submission should contain screenshots and write-ups that clearly demonstrate compliance with each mandatory requirement sub-point. [Contact us](https://form.gov.sg/68117f6fa667a54847523fd2) if you need help. {% endhint %} --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://preapproval-guide.imda.gov.sg/pre-approval-guide/stage-1-vendor-self-assessment/identify-suitable-solution-category/essential-business/applicant-tracking-and-sourcing-system.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.