Administrative Management and General Management Consulting Services

Id3176Posting TypeSources SoughtPosting Published02-Apr-2024Posting Close22-Apr-2024 15:07Current Time (Albuquerque NM)22-Apr-2024 13:22Estimated RFQ Open13-May-2024Estimated Award03-Jun-2024NAICS541611: Administrative Management and General Management Consulting ServicesBusiness Size Standard$24.5MEstimated Period of PerformanceJune 3, 2024 thru June 2, 2025Competition TypeCompetitiveTitleHealth Insurance Portability and Accountability Act (HIPPA) ServicesGeneral InformationThis section displays displays general information about this opportunity.# function _tableSortSubmit(formName,validate,sortEvent,table,val,stat,ptgt,parent) {if( ((typeof TUfromDragEvent != 'undefined') && TUfromDragEvent) || ((typeof TUhideEvt != 'undefined') && TUhideEvt) ) {TUfromDragEvent = false ; TUhideEvt = false;return;}if(parent!=null && parent.tagName =='TH' && parent.getAttribute('sortvalue') != null) { val = parent.getAttribute('sortvalue'); } var submitFunc = (ptgt == (void 0)) ? submitForm :

_submitPartialChange;submitFunc(formName,validate,{event:sortEvent,source:table,value:val,state:stat,partialTargets:ptgt });}TitleGeneral Information10Sources SoughtIf a Request for Quotation (RFQ) results from this posting and the supplier meets the specified requirements, the supplier may be provided an RFQ at a later date.20Statement of WorkNational Technology and Engineering Solutions of Sandia, LLC (NTESS) herein referred to as Sandia seeks a Subcontractor to review the Employee Health & Wellbeing (EH&W) Clinic's Health Insurance Portability and Privacy Act (HIPAA) privacy and security compliance and provide assessments and recommendations to ensure adherence with the HIPAA privacy and security laws for Sandia's New Mexico and California clinics.The Subcontractor shall perform the following services (high level, not complete statement of work): Analyze privacy and security risk and provide recommendations to meet compliance with HIPAA privacy and security laws. Conduct a review and recommend modifications to Employee Health's HIPAA operating procedure, notice of privacy practices, and business associate agreements. Review administrative processes within the clinics in New Mexico and California and provide recommendations to improve HIPAA compliance. Provide annual HIPAA training for NTESS staff.30Seeking Qualified Sources Seeking qualified sources with a successful history of providing Health Insurance Portability and Accountability Act & Health Information Technology for Economic and Health Act Consulting Services.Follow instructions carefully and provide a yes or no response to each question. If a question does not contain a response the Offeror may be eliminated from consideration.Note: The full statement of work will be provided at the RFQ Stage. 40Sources SoughtStage 1: Sources Sought - This is a sources sought opportunity. To indicate that your company meets the requirements for this opportunity, Offerors shall respond Yes or No to each mandatory requirement and provide a statement of confirmation to each question. If the question has multiple sections, then the Offeror must provide a response to each section (a, b, c, etc.). Example response: Yes, Starlight Health can and will provide the required service (further elaboration to state that the Offeror meets the requirement is encouraged). Subsections: a) Yes, Starlight currently has the ability to provide this service.... b) Yes, we currently utilize the following to perform this service. c) Yes, Starlight has experience staff with a minimum of 3 years of experience readily available to perform these services.Stage 2: Request for Quote (RFQ) Only Offerors that meet all mandatory requirements will be selected to participate in the competition and will receive an RFQ. The Offeror shall submit a proposal response that demonstrates that they meet all Minimum Mandatory Criteria with the proposal response. Additionally, the Offeror shall provide sufficient evidence that they meet all listed criteria where requested with the proposal response. Failure to provide sufficient evidence signifies that the Offeror does not (or cannot) meet the Minimum Mandatory Requirements and the Offeror will be considered nonresponsive and will not be further evaluated. Evidence shall be provided at the RFQ Stage with the Offerors proposal response.function _richTblRefresh(formName,validate,ptgt,table,event,val) { return _submitPartialChange(formName,validate,{event:event,source:table,partialTargets:ptgt,value:val}); }function _tableRefresh(formName, tablerefresh, src, vld, val, sze, partialTargets){var i = val.indexOf(',');if (i >= 0){sze = val.substring(i+1);val = val.substring(0, i);}var submitFunc = (partialTargets == (void 0)) ? submitForm : _submitPartialChange;return submitFunc(formName,vld,{event:tablerefresh,source:src,value:val,size:sze,partialTargets:partialTargets});}Mandatory RequirementsThis section displays mandatory requirements associated with this opportunity. If you create a response, you must address each.#TitleMandatory Requirement107 Years of HIPPA Experience: The Offeror shall have a minimum of 7 years' experience providing consultation services for HIPAA privacy and security laws. Answer: Yes, or No? Then provide a statement of confirmation.Evidence Required: To support the Offeror's claim, provide a list of companies that dates back at least 7 years the Offeror has provided HIPPA consulting services to (a minimum of 2 to 3 companies) which includes dates of service, addresses and contact information.207 Years of Healthcare Consulting Experience The Offeror shall have a minimum of 7 years' experience providing consultation services to healthcare organizations. Answer: Yes, or No? Then provide a statement of confirmation.Evidence Required: To support the Offeror's claim, provide a list of Health Care companies that dates back at least 7 years the Offeror has provided consulting services to (a minimum of 2 to 3 companies) which includes dates of service, addresses and contact information.30US Services Only The Offeror shall not provide any services to Sandia (either directly or through lower tier subcontractors) and shall not store or process any Sandia data (including storage and/or processing on back up sites, through data sub-processors, and/or on third-party systems) from any location outside of the United States. Answer: Yes, or No? Then provide a statement of confirmation. a. Evidence Required: To support the Offeror's claim, provide the physical and geographical locations where services will be provided and where customer (Sandia) data will be stored and processed, including information about any third-party.40Privacy Risk Audit Tool Can the Offeror provide a Privacy Risk Assessment Audit tool to evaluate compliance with privacy practices, processes, administrative and physical safeguards (computer screens, clinic check in areas, privacy for patient rooms, etc.)? Answer: Yes, or No? Then provide a statement of confirmation. Evidence Required: To support the Offeror's claim, provide a list company names in which the Offeror has provided Privacy Risk Audit Tools which includes dates of service, addresses and contact information.50Privacy Practices ReviewCan the Offeror conduct a review of Sandia's Notice of Privacy Practices, Internal HIPAA Operating Procedure, business associate agreements, and recommend enhancements in accordance with industry standards? Answer: Yes, or No? Then provide a statement of confirmation.60Security Risk Assessment Can the Offeror conduct a Security Risk Assessment which includes a review of technical safeguards to secure electronic health information in compliance with the HIPAA security rule then make recommendations to close risk gaps? Answer: Yes, or No? Then provide a statement of confirmation. Evidence Required: To support the Offeror's claim, provide a list company names in which the Offeror has provided Security Risk Assessments which includes dates of service, addresses and contact information.70HIPPA Training Can the Offeror conduct HIPAA training for NTESS employees? Answer: Yes, or No? Then provide a statement of confirmation.80Privacy and Security LawsCan the Offeror provide guidance related to HIPAA and privacy and security laws, then incorporate the guidance into all assessments, procedures and deliverables? Answer: Yes, or No? Then provide a statement of confirmation.