Item No. RFP Page No. RFP Section No. Question Received

Date Answer

We would like to know if this is a brand new contract OR if there is (was) an incumbent performing these services. If not brand new, could you please provide the current/previous contract number?

12/12/2025 This is a new requirement based on restructuring and implementation of existing and new Program processes.

Will the Government consider making the Technical Guidance Documents (TGDs) available to all interested Offerors during the proposal phase? Access to the documents will help to ensure that the proposed technical approach and pricing assumptions are fully aligned with the Government’s expectations for executing the PWS.

12/19/2025

All Technical Guidance Documents (TGDs) that the Program is able to make available have been provided with the solicitation. There are no remaining TGDs referenced in the PWS that have not been provided. Offerors should use the PWS and QASP as the authoritative sources for developing their technical approach and pricing assumptions. Please note this clarification has been incorporated into the RFP, Solicitation Attachments Pages 52 and 53.

Will the Government consider an extension of 3 weeks to the current proposal due date of January 30, 2026 given the delay in receiving and being able to access the protected attachments?

12/19/2025 See response to Item No. 20.

Item No. 20 Response: New Submission date is February 9, 2026 at 10 AM.

4 148 H.8 PROPOSAL CONTENT, 1. PART I – Technical Proposal – Page limit: 135 pages

The solicitation does not include instructions on provision, location, and page count allotted to the technical approaches to the following critical and complex tasks: (4.4) Areas of Assistance, (4.4.1) General Member Services, (4.4.2) General Care Coordination, (4.4.3) Monitoring, Diagnostic, and Screening Services, (4.4.5) Treatment Services, (4.4.6) Managed Care Operations, and (4.4.7) Pharmacy Benefit Support.

Volume 2 instructions (page 149) state “This volume shall address the Offeror’s technical approach to accomplish tasks under Infrastructure, Resources, and Functionalities (Section 4.3).” However, there is no similar instructions or opportunity to address the technical approach to the scope described in Section 4.4 – Areas of Assistance (page 86-101), despite this section covering key areas essential to the program's and contractor's success. As a result, the current format of the solicitation does not seem to give offerors a clear chance to show their understanding of these requirements or to propose how they plan to fulfill them.

Please advise if it was the government's intent to exclude offerors providing their technical approach to the above key tasks. Is the government limiting the offerors’ ability to describe approaches and offer solutions to within the other volumes of the Technical or Business Proposal?

If the government expects offerors to provide technical approaches for evaluation and reconciliation within staffing approach, business volumes, etc., please advise volume, sub-volume, section, and page count instructions, along with any changes to total page counts.

12/23/2025

See Response to Item 47. Please note clarification language has been added to RFP, Technical Proposal, Pages 151 to 152.

Item 47 Response: Section 4.4 identifies all areas of assistance to be delivered by the NPA Contractor via the Member Service Center, Infrastructure, and Operations (described in Volume 2) and NPA Contractor staff (described in Volume 3). Pursuant to the RFP, in Volume 3, "Offerors shall describe their staffing approach specific to the Member Service Center staff tasked with delivering assistance to NPA members spanning all Areas of Assistance set forth in Section 4.4."

5 60 PWS, Section 1.3.2 – Future-State Contractors (Incoming)

Which nationwide provider network(s) will your incoming TPA be using to support the WTC Health Program? 12/29/2025 The TPA Contractor will develop a Nationwide Provider Network consistent with the requirements of the TPA Contract.

6 113

Section 4.6 – Regulatory Compliance and Security Requirements - Information Technology Application Design, Development, or Support - 9. The Contractor (and/or any subcontractor) shall ensure non-interactive applications and the associated accounts running on servers (e.g., server applications, application servers, system applications, middleware, databases, containers, etc.) do not run with or require full administrative or elevated privileges .

While our solution does not require full administrative rights, it does necessitate appropriate elevated privileges in line with the least privilege principle. Is this acceptable? 12/29/2025 This is acceptable as long as it is documented and noted in the Security Assessment and Authorization (SA&A) package.

7 119

Section 4.6 – Regulatory Compliance and Security Requirements - Security Requirements for GOCO and COCO Resources 3. Government Access for Security Assessment. Full cooperation also includes allowing the Government to make reproductions or copies of information and equipment, including, if necessary, collecting a machine or system image capture

We can provide the complete data pertaining to WTC Health Program as requested. Are there any scenarios where WTCHP would need to collect a machine or system image capture? 12/29/2025 No images of machines or systems would be needed in the normal course of WTCHP.

8 120

Section 4.6 – Regulatory Compliance and Security Requirements - Security Requirements for GOCO and COCO Resources 3. Government Access for Security Assessment. Segregate Government protected information and metadata on the handling of Government protected information from other information. Commingling of information is prohibited.

Could you please clarify the requirement that "commingling of info is prohibited"? We implement software-based access control and appropriate encryption protection both at rest and in motion to safeguard and segregate our client's confidential data. Are there any additional security controls needed to address this requirement beyond logical separation (e.g., physical separation)?

12/29/2025 Program information shall not be commingled with data from other clients. This segregation ensures that, when the Government conducts audits or requests access to its data, there is no risk of exposure to other clients’ data, and no access by Contractor staff who are not authorized or assigned to this Contract. Please note spelling has been corrected in RFP, Section 4.6.4, Page 121.

9 62 Section 3 Can the Government please provide the applicable Technical Guidance Documents (TGDs) for the National Program Administrator? This will greatly increase industry understanding of how to address the needs of the members supported by the WTCHP.

1/5/2026

All Technical Guidance Documents (TGDs) that the Program is able to make available have been provided with the solicitation. There are no remaining TGDs referenced in the PWS that have not been provided. Offerors should use the PWS and QASP as the authoritative sources for developing their technical approach and pricing assumptions. Please note this clarification has been incorporated into the RFP, Solicitation Attachments Pages 52 and 53. (Same as response to Question 2)

10 9 B.1 Payment Schedule Payment Milestones for March 18,2030 - March 17, 2031 is marked as CLIN 4005. Should that be CLIN 4003 since there are only 3 CLINS in that performance period 1/5/2026 Yes. Please note this correction has been made into the RFP, B.1 Payment Schedule, Page 9.

11 65 Section 4.1.3

What are the current risks in these areas that would need to be considered for resolution? "The NPA Contractor shall minimize the quantity and severity of risks associated with services that have been identified but not fully resolved by the outgoing NPN Contractor, including member certification requests, clinic transfers, and open member issues."

1/5/2026

The intent of this requirement is to highlight that one of the key risks during transition is the successful handover of "open" or "in-flight" items. During Transition-In, the NPA Contractor shall be prepared to receive, manage, and resolve services that remain open or in progress at the time of contract handover from the outgoing NPN Contractor, including member certification requests, clinic transfers, and unresolved member issues. The NPA Contractor shall take reasonable actions to minimize associated risks and ensure continuity of care, without requiring members to restart previously initiated processes solely due to the transition. Please note PWS has been updated in the RFP, Section 4.1.3, Page 64

12 Data Management Attachment

The Data Management attachment defines Data Flow Diagrams, Entity Relationship Diagrams, Data Schema, and Data Dictionaries as being given to the program on an Annual, Bi-annual, and ad hoc basis. Can the Government confirm that this data would not include schemas and entity relationships unique to a offeror's proprietary system?

1/5/2026 This data would not include schemas and entity relationships unique to an Offeror's proprietary system. But the Offeror would need to be able to talk and show the correct relationships of the WTCHP data.

13 86 Section 4.3.3.2 What is the WTCHP criteria that needs to be upheld as mentioned in Section 4.3.3.2? "The NPA Contractor shall determine which Program providers meet Program criteria to prescribe medication and communicate such determinations to the TPA Contractor."

1/5/2026

The criteria is listed in the Provider Blocks and Provider Block Portal External Standard Operating Procedure (ATT019_XP007_PharmacyProviderBlock).

Specifically at the bottom of page 1 to top of page 2 it states: “Providers should only be enrolled as prescribers when:

a. The provider is going to be providing ongoing care to the member for their certified condition. In cases where a provider may be providing care for both certified conditions and conditions that are not WTC-related, it is recommended not to enroll the provider as a prescriber, since there is risk of prescriptions adjudicating that are not WTC-related.

b. The provider is not an emergency room or urgent care physician, surgeon, or other type of provider that won’t be involved with the members care long term.

c. The provider has been informed of the WTC Health Program requirements and rules and agrees to provide care under these provisions to the member.”

14 General What is the allowable level of AI utilization within this project, and what specific objectives are of greatest importance to you through AI capabilities? 1/5/2026 Allowable level of AI utilization within this project is at the discretion of the Offeror.

15 General Do members automatically opt in to automated communications under TCPA guidelines, or must explicit consent be obtained? 1/5/2026 Explicit Consent must be obtained.

16 91 Section 4.4.3.1

For the Initial Health Evaluation (IHE), Initial Monitoring Exam (IME) and the Annual Monitoring Exams (AME), does it matter what type of doctor the member sees for completion of these exams (primary care provider or specialist)? This is in reference to the portions of these exams (i.e., physical examination) that will not be completed by the National Program Administrator.

1/5/2026 No, monitoring providers may be primary care or specialist providers. The NPA is responsible only for ensuring that they are referring members to providers who the TPA has indicated are monitoring providers.

17 93 Section 4.4.4.1

Can the Government please provide The WTC Health Program Codebook, Volume A and Volume B that lists the medical procedure and diagnosis codes approved for use within the Program? While some of the attachments contain procedure and diagnosis codes, they are not all inclusive and do not provide the code descriptions. This information would help industry fully understand the WTCHP applicable payable services, guidelines and authorization requirements for the National Program Administrator.

1/5/2026 The Government does not perceive the WTC Health Program Codebook, Volume A or Volume B details are relevant to this solicitation and will not make these materials available as part of this solicitation. Offerors should base their proposals on the information provided in the solicitation, Performance Work Statement (PWS), and attachments.

18 General How does the government envision measuring member satisfaction (e.g., after-call surveys, Net Promoter Score), and at what interval or frequency? 1/5/2026

The Government generally conducts sample size member satisfaction surveys via mail on an annual basis and on an ad hoc basis when circumstances warrant. The NPA Contractor is not responsible for overall member satisfaction beyond the specific performance metrics identified in the QASP.

19 97 Section 4.4.6.1 Are there any historical case-life data points the Government can provide? (i.e., the average number of days/weeks/years that case manager cases and intensive case management cases remain open)

1/5/2026

The Government does not currently have data on the average duration of case management (CM) or intensive case management (ICM) cases.

The Government does have data on the volume of members enrolled in intensive case management (ICM) for periods exceeding six months, tracked over time. Please note ATT022 NPA SummaryVolumeData has been updated.

20 General Will the Government give bidders an extension on the submission date based on the need to incorporate clarifying responses from the Q+A? 1/5/2026 New Submission date is February 9, 2026 at 10 AM.

21 97 Section 4.4.6.1 Are there Juris requirements that the case managers need to be based in the member's state? 1/5/2026 Please refer to ATT026 TGD033 Licensure Requirements.

22 30, 31, 65, 105, 127

HHSAR 352.239-71

HHSAR 352.239-76

Section 4.1.3.1

6.4 – Security Requirements Section 8.2 – Deliverables Summary Table

The RFP has conflicting timelines for SSP submission.

The RFP states that, “Within 60 days after contract award, the Contractor shall submit the Information System Security Plan to the Contracting Officer for review and approval.” Yet in Section HHSAR 352.239-76 states that, “A System Security Plan (SSP) is due with contractor proposal.”

Also, the Section 8.2 Deliverables Table Summary states that, “Authorization to Operate (ATO) Package Within 45 calendar days after the award effective date.” A System Security Plan (SSP) is an essential component of the Authorization to Operate (ATO) package and documents the security posture of the information system.

The ATO package is dependent on a number of activities to include the SSP, a third-party assessment (as applicable) as well as Plan of Action and Milestones (POA&Ms).

Can the government clarify timelines regarding the System Security Plan (SSP)? In addition, can the government reframe timelines around the Authority to Operate (ATO) Package Submission especially if a third-party assessment is required?

1/5/2026

Language has been updated in the RFP to clarify that the SSP is due within 60 days after contract award. Please see clarification in RFP Clause - HHSAR 352.239-76, Page 31.

Language has been updated in Section 8.2 Deliverables Table Summary (Page 129) to state that an initial Authorization Operate (ATO) Package is due within 45 calendar days after award as written in Section 4.1.3.1. The Government will not reframe the stated timelines.

The Contractor (and/or any subcontractor) shall provide an SA&A package to the C/I/O System Security Privacy Officer (SSPO) in accordance with the timeline, process and formats described for a Full system authorization in the CDC Security Assessment and Authorization Standard Operating Procedure (CDC SA&A SOP) which will be provided upon Award. This package will help build the SSP and ATO packages.

23 98 Section 4.4.6.1 Please clarify if the requesting provider must have the same specialty as the rendering provider and/or be required to be licensed in the same jurisdiction. 1/5/2026

The question as written is unclear. Assuming, this question is pertaining to Prior Authorization, the Program expects that Prior Authorization requests are requested by rendering provider or their designee. See ATT026_TGD033_Licensure Requirements for additional information on licensure. Please also note response to Item No. 26.

24 60 Section 1.3

How does the government envision handoffs and communications across the the contracts that are undergoing transformation (TPA, NPA, NPN, etc.) and how will it impact implementation of the new NPA contract? Can the government provide more detail of the implementation timelines for these contracts to better understand how it should inform the transition approach and actions/timelines for implementing the NPA?

1/5/2026 The Government will not revise the stated timelines.

25 62 Section 3

Will the Government consider making the Technical Guidance Documents (TGDs) available to all interested Offerors during the proposal phase? Access to the documents will help to ensure that the proposed technical approach and pricing assumptions are fully aligned with the Government’s expectations for executing the PWS.

1/5/2026

All Technical Guidance Documents (TGDs) that the Program is able to make available have been provided with the solicitation. There are no remaining TGDs referenced in the PWS that have not been provided. Offerors should use the PWS and QASP as the authoritative sources for developing their technical approach and pricing assumptions. Please note this clarification has been incorporated into the RFP, Solicitation Attachments Pages 52 and 53. (same as Question 2)

26 99 Section 4.4.6.2 When prior authorization (PA) is needed for testing or treatment, does the National Program Administrator also complete the same PA requirements as the primary insurance carrier? If so, who or where does the case manager team send the PA requests to?

1/5/2026 The NPA contractor is not responsible for submitting authorization requests to members primary insurance. Please note additional clarification in RFP, Section 4.4.6.2, Pages 99 to 100.

27 99 Section 4.4.6.2

What is the volume of cases where the National Program Administrator Contractor must submit prior authorizations to the member’s primary insurance?

"The NPA Contractor shall coordinate with the member’s primary insurance and submit authorization requests to the member’s primary insurance when necessary to obtain coverage and coordinate benefits."

1/5/2026 The Government does not currently have data on the volume of such cases. Please also note that the requirement has been updated.

See response to Item No. 26: The NPA contractor is not responsible for submitting authorization requests to members primary insurance. Please note additional clarification in RFP, Section 4.4.6.2, Pages 99 to 100.

28 62 Section 4

Can the government provide more detail on the anticipated "handover" of SHCD? Does handover in this section refer solely to handover between the NPA Contractor's Transition in Team to the NPA Operations Teams? Does this include any continued handover activities by the outgoing contractor? What will be provided by the incumbent contractor in this phase?

1/5/2026

Handover requirements are specified in Section 4.1.5. SHCD shall occur at eight months after the Contract award effective date.

SHCD marks the end of active Transition In (4.1.1 through 4.1.4) and the concurrent start of Handover (4.1.5) and Sustainment (4.2 through 4.4 and 4.6). Handover represents the wrap-up of Transition In tasks and ensures Transition In staff remain available after SHCD and during the first four months of Sustainment to ensure seamless operation. Ongoing work with incumbent contractor(s) is not anticipated after SHCD.

29 103 Section 4.5

Can the Government please confirm that only non-proprietary information is not expected to be shared? "The NPA Contractor shall also work with the WTC Health Program Information Security Officer (ISO) and COR to transfer all Program records, data, and other information (including process and policy guidance materials) to the Program . . ."

1/5/2026 The Government confirms that it is not requesting the submission or sharing of proprietary information. Any information required to be shared under this solicitation is limited to non-proprietary information only. Offerors should clearly mark any proprietary information submitted in accordance with the solicitation instructions, and such information will be protected to the extent permitted by law.

30 64 Section 4.1.3 Will the outgoing NPN vendor be required to deliver a case status summary to outline in flight work or activities so the incoming vendor can appropriately surge staff to minimize gaps in care?

1/5/2026 Yes

31 64 Section 4.1.3

This requirement states "…The NPA Contractor shall minimize the quantity and severity of risks associated with services that have been identified but not fully resolved by the outgoing NPN Contractor, including member certification requests, clinic transfers, and open member issues." What information can the government provide to help submitters understand the quantity and severity of such risks that will have to be assumed by the NPA contractor in these categories? This information will be necessary to inform proposed transition in approach and staffing.

1/5/2026

See Response for Item No. 11: The intent of this requirement is to highlight that one of the key risks during transition is the successful handover of "open" or "in-flight" items. During Transition-In, the NPA Contractor shall be prepared to receive, manage, and resolve services that remain open or in progress at the time of contract handover from the outgoing NPN Contractor, including member certification requests, clinic transfers, and unresolved member issues. The NPA Contractor shall take reasonable actions to minimize associated risks and ensure continuity of care, without requiring members to restart previously initiated processes solely due to the transition. Please note PWS has been updated in the RFP, Section 4.1.3, Page 64

32 109 Section 4.6.4 Please further define 'significant security responsibilities' as mentioned in Section 4.6.4 Security Requirements, Role Based Training. Can the Government share the HHS Memorandum so industry can verify compliance?

1/5/2026

Cybersecurity and privacy risk inherently arises from the use of information and technology. CDC has determined that the following individuals have significant responsibilities for managing this risk and are therefore required by federal directives to take RBT:

• Senior Executives (SES)

• Commissioned Corp members at the rank of O6 and above

• Management Officials (MO)

• Information Systems Security Officers (ISSO), also known as System Security Officers and System Privacy Officers

• Those performing Information Technology Management work (e.g., federal employees in the 2210 job series, contractors performing similar work)

• Those performing other cybersecurity and privacy work (see "Cybersecurity and Privacy Work Roles" section below)

Cybersecurity and Privacy Work Roles The following work roles are currently defined in the NICE Workforce Framework for Cybersecurity (v2.0.0, August 2025) (link -https://niccs.cisa.gov/tools/nice-framework). This is a living framework with new or updated role definitions released periodically.

All Source–Collection Manager, All Source–Collection Requirements Manager, All-Source Analyst, Authorizing Official/Designating Representative, Communications Security (COMSEC) Manager, Cyber Crime Investigator, Cyber Defense Analyst, Cyber Defense Forensics Analyst, Cyber Defense Incident Responder, Cyber Defense Infrastructure Support Specialist, Cyber Instructional Curriculum Developer, Cyber Instructor, Cyber Intel Planner, Cyber Legal Advisor, Cyber Operator, Cyber Operations Planner, Cyber Policy and Strategy Planner, Cyber Workforce Developer and Manager, Data Analyst, Database Administrator, Enterprise Architect, Executive Cyber Leadership, Exploitation Analyst, Information Systems Security Manager, Insider Threat Analyst, IT Investment/Portfolio Manager, IT Program Auditor, IT Project Manager, Knowledge Manager, Law Enforcement/Counterintelligence Forensics Analyst, Mission Assessment Specialist, Multi-Disciplined Language Analyst, Network Operations Specialist, Partner Integration Planner, Privacy Officer/Privacy Compliance Manager, Product Support Manager, Program Manager, Research and Development Specialist, Secure Software Assessor, Security Architect, Security Control Assessor, Software Developer, System Administrator, System Testing and Evaluation Specialist, Secure Systems Development Specialist, Systems Requirements Planner, Systems Security Analyst, Target Developer, Target Network Analyst, Technical Support Specialist, Threat/Warning Analyst, and Vulnerability Assessment Analyst.

33 65 Section 4.1.3.4 What is the program's anticipated timeline for program review of transition in and sustainment communication plans? What is the process for submission and approval? 1/5/2026 The time required to review will depend on the quality and completeness of the NPA Contractor’s submission. Deliverable submission instructions are provided in Section 8.

34 151 Volume 3: Staffing Approach

Volume 3: Staffing Approach refers to a “Volume 2, Section A” in “Offeror shall clearly describe its Member Service Center staffing architecture, with particular detail toward offeror’s tiered inquiry response structure (PWS Section 4.3.1.5 and Volume 2, Section A)” (pg. 151).

However, there is no Section A found in Volume 2. Please clarify where this information can be found.

1/5/2026 Yes. The reference to “Section A” in Volume 3 is incorrect and has been removed. Offerors shall include Key Personnel Resumes and any required Letters of Commitment at the end of Volume 3, Staffing Approach. Please note this correction has been made into the RFP, Volume 3: Staffing Approach, Page 151.

35 67 Section 4.1.4.3

This section states "The Communications Plan has been approved, and all Communications Products to be implemented within the first four months of SHCD (Handover phase) are approved by the Program and ready for timely and accurate distribution immediately upon SHCD" What does the program consider as timely for this requirement?

1/5/2026 The Communication Plan will outline the distribution timing. The distribution will be considered timely if the distribution follows the timeframe outlined in the Communications Plan.

36 153 H.9 How will the subcontracting plan be evaluated? 1/5/2026 The Contracting Office will confirm receipt of the Subcontracting Plan which will be evaluated by the Small Business Administration.

37 71 Section 4.2.2.6 To ensure a consistent basis of assumptions across submitters, can the government provide an assumption or maximum for complexity and frequency of adhoc report requests? 1/5/2026

For purposes of the solicitation, Offerors should assume approximately 8 ad hoc reports annually of moderate-to-high complexity, meaning they require analysis (as opposed to just a simple data pull). Please note language has been updated in RFP, Section Technical Proposal, Page 151.

38 154 Section B

Section B has Transition-In/Out, Sustainment and Travel; however, Volume 2 of the Business Proposal (page 154) shows ODC's listing of:

- Materials and Services

- Subcontractor Items

- Travel

Is the expectation to separately propose Subcontractor Items and Materials and Services similar to Travel in Section B or do we add to the Sustainment line and bill those costs by the hour?

1/5/2026

Contractor should propose Subcontractor Items, Materials, and Services separately from Labor Hours but within the same CLIN.

Invoices will separate ODCs from Labor Hours.

Only Travel is separated into its own CLIN.

39 73 Section 4.2.3.4 This section references TGD 035 which outlines staffing requirements for roles requiring licensure. Can the government provide this resource for guidance in creating viable staffing plans?

1/5/2026 Roles requiring licensure are those listed in Section 4.2.3.4. TGD 033 does not outline staffing requirements but rather licensure requirements. TGD 033 has been provided as an attachment with the Amendment. Please note that error in TGD numbering has been corrected in the RFP, Section 4.2.3.4, Page 74.

40 2 Block 8 - Offeror Due Date/Local Time

Given the National Program Administrator is a new contract supporting the WTCHP and a Draft RFP was not previously released, would the Government consider an extension of the RFP? Doing so would allow industry more time to prepare and greatly increase the Government's receipt of compelling and competitive bids.

1/5/2026 See Response to Item No. 20.

Response to Item No. 20: New Submission date is February 9, 2026 at 10 AM.

41 74 Section 4.2.3.5

Will the Government clarify if offerors will receive a routine data exchange of available providers from the TPA contractor to support scheduling of appointments, or if the NPA contractor will be required to exclusively use the TPA contractor portal for this information which will require manual intervention?

1/5/2026 For the purposes of this proposal Offerors should assume exclusive use of the TPA Contractor Portal for this information. There is potential for API data exchanges which if made available prior to SHCD may be incorporated via a modification

42 74 Section 4.2.3.5

Is it the governments intention that the NPA contractor staff appropriate resources to manually access and execute the actions outlined (ex. provider directory information in support of member interactions) in this section or does the program anticipate the vendor systems will communicate via bi-directional data exchanges with the WTC Health Program CARE, TPA and PBM portals?

1/5/2026 For the purposes of this proposal Offerors should assume use of other Program contractor portals for the activities outlined in 4.2.3.5.

There is potential for data exchanges or API which if made available prior to SHCD may be incorporated via a modification.

43 76 Section 4.2.4.2

Item (b) indicates pre-appointment communications that should be distributed to members. Are there any communications that are sent to providers to confirm appointments? If so, how will the NPA contractor receive the necessary information to generate these communications and deliver to the appropriate NPN provider contacts.

1/5/2026

Pursuant to 4.4.2.1, "The NPA Contractor shall schedule appointments with NPN providers and ensure NPN providers with whom the NPA Contractor has scheduled appointments are sent the necessary pre-appointment information and are willing and capable of performing the requested services to facilitate a smooth appointment experience for members, as described in Section 4.2.4.2." This would presumably require pre-appointment communication by the NPA Contractor with the NPN provider and shall be conducted at the Offerors discretion. Please note language was clarified in RFP, Section 4.4.2.1, Page 90

44 81 Section 4.3.1.5 Inquiry Response Structure When provider contact information changes, how should updates be communicated to the TPA contractor (e.g., real-time calls, emails, portal updates)? 1/5/2026

For clarity, the PWS states: "The Care Coordination Team(s) shall work directly with the Program or other Program contractors to address inquiries, when necessary. For example, if an NPN provider notifies an NPA member or the NPA Contractor that they are unwilling/unable to provide services to new and/or current members, the NPA Contractor shall notify the TPA Contractor and work with the TPA Contractor to identify an alternative provider."

In the provided example, or in other instances of NPA communication with Program or Program contractors, the NPA Contractor is expected to put forth a good faith effort using industry-standard, reasonable means to communicate with the appropriate party or parties (e.g., email, phone call, Portal use).

45 84 Section 4.3.3 Will the NPA receive transactional claims and pharmacy information to inform gaps in care assessments and identify members who may benefit from case management or care coordination? If so, how will that information be provided?

1/5/2026 Yes. This information will be provided via the TPA Portal

46 86 - 99 Section 4.4 Will the Government allow the use of a member portal that is operated by the NPA contractor to support member interactions? 1/5/2026

As noted in Section 4.3.2.1, Table 2, the NPA is responsible for having a system that allows for secure communication (including document submission) with NPA members, which would require some level of role-based access. Offerors may propose additional functionalities to their system and portal than are required in Section 4.3.2.; however, as members will have a portal through the TPA, in order for the proposed NPA member portal to be perceived as a net value to the Government, Offerors must avoid or sufficiently justify any duplication or mitigate any confusion that may arise from the implementation of an NPA member portal.

47 86 Section 4.4 Areas of Assistance Please clarify in which proposal Volume should Section 4.4 Areas of Assistance, be responded

to. We do not specifically see this section called out to be responded to in Section H Instructions to Offerors.

1/5/2026

Section 4.4 identifies all areas of assistance to be delivered by the NPA Contractor via the Member Service Center, Infrastructure, and Operations (described in Volume 2) and NPA Contractor staff (described in Volume 3). Pursuant to the RFP, in Volume 3, "Offerors shall describe their staffing approach specific to the Member Service Center staff tasked with delivering assistance to NPA members spanning all Areas of Assistance set forth in Section 4.4." Please note clarification language has been added to RFP, Technical Proposal, Pages 151 to 152.

48 87 Section 4.4.1.1

The requirement offers that town hall events can be supported in person or virtually. How does the government anticipate evaluating submissions and their associated price for vendors who elect to offer these events in person with consideration that the associated pricing may be higher to support in person events versus submission that are poposing a virtual model?

1/5/2026 Proposals should reflect contractor's chosen strategy and each offeror's business decisions.

49 89 Section 4.4.2.1 Could the government provide the expected success rate for scheduling appointments on the initial attempt and describe how this metric is measured? 1/5/2026

It is not clear what this question is asking; the Program recognizes that successful appointment scheduling requires availability of the member, the provider, and the NPA representative and that failure to schedule could be due to multiple factors. The Program does not have a specific metric for success on the initial attempt.

50 89 Section 4.4.2.1 Will internal staff be required to schedule appointments directly through the TPA portal, or can the portal be fully integrated within the NPA's internal system? 1/5/2026 Appointment scheduling does not occur in the TPA Portal. The TPA Portal provides a Provider Directory for the NPA Contractor to identify in-network providers. However, scheduling must be done directly with the provider.

51 89 Section 4.4.2.1 This requirement indicates that the NPN directory information should be accessed via the TPA portal. Is it the government's intent that the NPA contractor manually access this information for each appointment encounter needed?

1/5/2026 The TPA Provider Directory serves as the source of truth for NPN provider enrollment and participation. The NPA Contractor shall employ whatever process(es) necessary to ensure accurate identification of active NPN providers for fulfillment of NPA-coordinated treatment. Please see response to Item No. 41.

52 89 Section 4.4.2.1 How is an exception to utilize the NYMA EPN requested, approved, tracked? Is it only approved for an individual member to use and what are the appropriate "limited cases"? How will the TPA contractor systems be modified to mitigate potential claims issues as a result?

1/5/2026

The Program will provide guidance on how to request an exception to utilize the NYMA EPN and the criteria for requesting an exception after award. All approvals will be made by the Program, with approval decisions communicated to both the TPA and the NPA. Exceptions will generally be on an individual member-provider relationship, though the Program may establish "blanket exceptions" as well.

TPA contractor system modifications will be handled outside of this contract.

53 89 Section 4.4.2.1

What contractual obligations does the TPA contractor have for closing network gaps and contracting new providers? What is the anticipated timeline for doing so? The NPA contractor will be dependent on the TPA network and these assumptions will impact staffing considerations (number of attempts between members, providers and TPA contractors to secure appointments with a qualified monitoring or treatment provider). Are there assumptions that should be applied? Does the government have information that they can supply to assess network adequacy of the NPN against the NPA member population?

1/5/2026

The TPA contract solicitation requires the TPA Contractor to maintain EPN and NPN network adequacy defined as follows: The specific distance a member must travel to a provider location does not exceed 30 miles in urban areas and 75 miles in rural areas unless exception is granted by the Program. 99% of CCE members can access a provider within the radius, and 90% of NPA members can access a provider within the radius. The TPA Contractor shall mitigate or close network gaps as follows: 75% of provider gaps are mitigated or closed within 60 calendar days, and 99.8% of provider gaps are mitigated or closed within 120 calendar days.

54 91 Section 4.4.3.1 Does the program anticipate the NPA will deliver an exam portal for NPN providers to complete and document their services? 1/5/2026

See answer to Item No. 56:

4.2.4.2 states "Though general provider education will be performed by the TPA Contractor, the NPA Contractor is responsible for communicating NPA-specific processes to providers. For example, all monitoring providers will be educated by the TPA Contractor of the requirement to send medical records received or generated during the monitoring visit to the Program; however, the NPA Contractor shall provide instruction to providers on how to submit those records directly to the NPA." Medical records will be managed by the NPA Contractor within the NPA Contractor System as described under 4.3.2.

55 92 Section 4.4.3.1.4 What contractual obligations do NPN providers have to submit documentation to the NPA? Will this require a release of information form authorizing the NPA to collect the medical records? 1/5/2026 See ATT027_WTCHP_Provider_Terms&Conditions. No release of information is needed as this falls under Treatment, Payment, Healthcare Operations (TPO).

56 94 Section 4.4.4.2.2 This requirements indicates that NPN providers are responsible for sending the NPA contractor the exam results. How can the NPA contractor expect to receive these results? Are NPN providers expected to submit them electronically? If so, how?

1/5/2026

4.2.4.2 states "Though general provider education will be performed by the TPA Contractor, the NPA Contractor is responsible for communicating NPA-specific processes to providers. For example, all monitoring providers will be educated by the TPA Contractor of the requirement to send medical records received or generated during the monitoring visit to the Program; however, the NPA Contractor shall provide instruction to providers on how to submit those records directly to the NPA." Medical records will be managed by the NPA Contractor within the NPA Contractor System as described under 4.3.2.

57 94 Section 4.4.4.2.2

What mechanisms and contractual obligations will be put into place to guarantee that providers will submit records and exam results securely and efficiently? What actions should the NPA take if the provider does not return documentation? How will this be coordinated with the TPA? Will the NPA contractor be expected to rework and re-schedule another monitoring exam at a different location?

1/5/2026

See ATT027_WTCHP_Provider_Terms&Conditions.

Per Section 4.4.3.1.4 - "The NPA Contractor shall also notify the Program and the TPA Contractor when an NPN provider repeatedly fails to follow the established record submission process and timelines to allow for targeted provider re-education by the TPA Contractor."

The Program does not anticipate monitoring exams to be re-done.

58 94 Section 4.4.4.2.2 Is there any anticipated retrieval of medical records by the NPA or will that be fully managed by the TPA? If so, can the government provide relevant assumptions for volume and frequency? 1/5/2026 Pursuant to 4.4.1.4, the NPA Contractor shall provide member education regarding record retrieval, but "The NPA Contractor is not responsible for facilitating the solicitation of medical records from the member’s healthcare providers."

59 96 Section 4.4.5.1 What volume estimates can the government provide to determine how frequently the NPA will not be able to locate a provider that is in both the OHI network and the NPN network, thus requiring further collaboration with the Program and TPA contractor?

1/5/2026 The Government does not have volume estimates available for this scenario as the NPN is still being built.

60 98 Section 4.4.6.1 How does the program intend to facilitate notifications of inpatient care between the TPA and NPA contractors? Will this be a phone call, secure email (Care Portal?), data exchange? 1/5/2026 The NPA Contractor shall notify the TPA Contractor as soon as possible, via industry-standard, good faith measures (e.g., phone call, CARE, or other means made available to the NPA Contractor by the TPA Contractor).

61 98 Section 4.4.6.2

How are NPN providers trained in the program requirements, delivery of exam results (released to the NPA contractor), form completion, claims submission requirements, authorization requirements, etc. by the TPA contractor? Are there any training expectations of the NPA for providers?

1/5/2026 See TPA PWS, attached for TPA NPN provider education requirements. See ATT028_TPA_PWS

62 98 Section 4.4.6.2

If the NPA contractor is not responsible for for training of NPN providers, will the NPA contractor be provided the TPA NPN provider training to ensure alignment in the approach, deliverables, timelines and actions expected from the NPN provider to deliver to NPA members? This will inform the NPA approach to collecting and retrieving exam documentation and getting results delivered to NPA members.

1/5/2026

NPN providers are required submit all medical records, consult reports, progress notes, test results, and other documents needed to the CCE/NPA, WTC Health Program TPA, and/or the Program within 30 calendar days of request. Pursuant to 4.2.4.2 "the NPA Contractor is responsible for communicating NPA-specific processes to providers. For example, all monitoring providers will be educated by the TPA Contractor of the requirement to send medical records received or generated during the monitoring visit to the Program; however, the NPA Contractor shall provide instruction to providers on how to submit those records directly to the NPA."

63 105 Section 4.6.4

Section 4.6.4 states that Computer Software, including the source code and other source code will be delivered to the Government prior to performing work on behalf of HHS. Can the Government confirm this would not include source code belonging to proprietary offeror systems, developed at private expense, that may be supporting the program?

1/5/2026 Any Computer Software, including the source code and other source code that is developed and will be used specifically for this contract needs to be delivered. Pre-existing code bases and systems used across the Offeror’s systems would not be included.

64 105 - 125 Section 4.6.4

Industry and federal guidance often define GOCO as government-owned facilities operated by contractors, and COCO as contractor-owned and operated environments. Could you clarify whether these traditional definitions are being considered by HHS, and if not, confirm how HHS defines GOCO and COCO environments in the context of system ownership and operational responsibility and what factors lead to a different interpretation? Based on these definitions, how does HHS classify systems where the contractor provides hosting and operational services without direct government infrastructure involvement?

1/5/2026 GOCO is more than a government-owned facilities operated by contractors. The offeror will also need to provide a Security Assessment and Authorization (SA&A) package that will include a diagram of the system. That system is owned by the Government since it is WTCHP Data that is being used and stored by the system. The Government has full access if needed to the system.

65 105 - 125 Section 4.6.4 Do these classifications influence the security control implementation expectations or ATO documentation requirements for service provider environments? 1/5/2026 The Government is unclear which classifications in Section 4.6.4 are being referenced and is unable to answer the question.

66 105 - 125 Section 4.6.4 Could the government share examples or guidance documents that illustrate how HHS applies these definitions in similar scenarios? 1/5/2026 The Government is unclear on what is being asked and is unable to answer the question.

67 150 Section H: Instructions of Offerors

The RFP states, "Offerors shall attach to Volume 3, Section A, Key Personnel Resumes for staff proposed to fill Key Personnel roles identified in Section 4.2.3.1." There is no "Section A" in Volume 3. Please clarify specifically what the correct reference should be to "Volume 3, Section A". Please confirm if the Key Personnel Resumes and Letter of Commitments (if any) should be included at the end of Volume 3, Staffing Approach.

1/5/2026 Yes. The reference to “Section A” in Volume 3 is incorrect and has been removed. Offerors shall include Key Personnel Resumes and any required Letters of Commitment at the end of Volume 3, Staffing Approach. Please note this correction has been made into the RFP, Volume 3: Staffing Approach, Page 151.

68 150 Section H: Instructions of Offerors

The RFP states, "Offeror shall clearly describe its Member Service Center staffing architecture, with particular detail toward offeror’s tiered inquiry response structure (PWS Section 4.3.1.5 and Volume 2, Section A)." There is no "Section A" in Volume 2. Please clarify specifically what the correct reference should be to "Volume 2, Section A".

1/5/2026 Yes. The reference to “Section A” in Volume 2 is incorrect and has been removed. Please note this correction has been made into the RFP, Volume 3: Staffing Approach, Page 151.

69 150 Section H: Instructions of Offerors

The RFP states, "Offerors shall provide Attachment ATT023_OAS_LaborCategories_Vol1 in Section D to Volume 3, Staffing Approach, a table of their proposed labor categories and estimated labor hours to perform each task area under the contract." There is no "Section D" in Volume 3. Please clarify specifically what the correct reference should be to "Section D to Volume 3, Staffing Approach". Please confirm if Attachment ATT023 should be inserted/attached to the end of Volume 3, Staffing Approach.

1/5/2026 Yes. The reference to “Section D” in Volume 3 is incorrect and has been removed. Offerors shall include Attachment ATT023_OAS_LaborCategories_Vol1 at the end of Volume 3, Staffing Approach. Please note this correction has been made into the RFP, Volume 3: Staffing Approach, Page 151.

70 90 4.4.2.2 – Benefits Counseling The RFP states, "The NPA Contractor shall ensure benefits counseling services are provided by individuals who are trained and qualified to perform benefits counseling." What are the qualifications for an individual to be able to provide benefits counseling services?

1/5/2026 A person providing benefits counseling services should have experience in human services and hold a social work license in good standing (e.g., LBSW, LMSW). Benefits counselors should be skilled in resource navigation and interpersonal communication.

71 126-127 Section 8.1 – Deliverable Review and Acceptance Please confirm the level of Section 508 testing and documentation required for deliverables, including whether formal test reports are required. 1/5/2026

PDF documents must pass a 508-compliance test in Adobe and CommonLook. Formal test reports are not required unless the Program finds that 508-compliance is not being applied appropriately. We will work with the Contractor to ensure they understand the 508-compliance requirements.

72 UM Tab ATT022_NPA_SummaryVolumeData UM Tab/Item # 2-CDC-Heading says PA2 requests, but Colum I-4 says PA2. Will CDC confirm that the data for Item 2 is for PA3 requests? 1/5/2026 The Government confirms this is a typographical error. Table 2 on the UM tab is focused on PA3 requests, not PA2 requests. Please note error has been fixed in ATT022 NPA SummaryVolumeData.

73 Pharmacy Tab ATT022_NPA_SummaryVolumeData Pharmacy Tab/Item #3-CDC-There is no data provided for 2025. Will CDC provide this data? 1/5/2026 2025 Data has been added. Please note ATT022_NPA_SummaryVolumeData has been updated.

74 N/A ATT002-NPA QASP Item 4.1 under General Member Services and Care Coordination-Will member inquiries identified by the Program be worked in the CARE Portal? 1/5/2026 Yes, the CARE Portal Message Center is the primary pathway that member-related inquiries and issues are identified by the Program and are communicated to Program contractors.

75 N/A ATT002-NPA QASP

Item 4.3 under General Member Services and Care Coordination states “80% of members assigned to the CCE have contact information verified within the last 12 months.” Shouldn’t it state NPA instead?

1/5/2026 Yes. ATT002_NPA_QASP has been updated.

76 7 ATT002 4. General Member…