AHCA ITN 007-2425 Addendum3.pdf

RON DESANTIS

GOVERNOR

SHEVAUN HARRIS

SECRETARY

Facebook .com/AHCAFlor ida X .com/AHCA_FL

2727 Mahan Dr ive • Mai l Stop # Ta l lahassee , FL 32308 AHCA.MyFlor ida .com

May 1, 2025

Prospective Vendor(s):

Subject: Solicitation Number: AHCA ITN 007-24/25, Addendum No. 3

Title: Medicaid Population Data Review Solution

This addendum to the subject solicitation provides the Agency’s responses to written questions.

All other terms and conditions of the solicitation remain in effect.

Section 120.57(3)(b), Florida Statutes, and section 28-110.003, Florida Administrative Code, require that a Notice of Protest of the solicitation documents shall be made within seventy-two hours after the posting of the solicitation. Failure to file a protest within the time prescribed in section 120.57(3), Florida Statutes, or failure to post the bond or other security required by law within the time allowed for filing a bond shall constitute a waiver of proceedings under chapter 120, Florida Statutes.

Sincerely, Renee Gregory Procurement Officer Bureau of Purchasing and Contract Administration

Enclosure:

Questions and Answers

REMAINDER OF PAGE INTENTIONALLY LEFT BLANK

AHCA ITN 007-24/25

QUESTIONS AND ANSWERS

QUESTION

NUMBER VENDOR NAME ATTACHMENT

IDENTIFIER

SECTION

IDENTIFIER

SUB-SECTION

REFERENCE

ITEM

REFERENCE

ATTACHMENT

EXHIBIT

PAGE

NUMBER QUESTION ANSWER

1 Techyon LLC Attachment B I B N/A N/A 2 Regarding the Medicaid Population Data Review Solution described in Section I.B, what specific data sources will be made available for aggregation beyond the claims and eligibility data mentioned in Section II.A.3?

This item may be discussed as a part of the negotiation process.

2 Techyon LLC Attachment B II B.1 f N/A 4 In Section II.B.1.f, you mention integrating "social determinants of health and digital health program metrics." Could you provide more detail on what specific social determinant data sources will be available, and in what format?

The Vendor is expected to use external data sources, enriching Agency data as a part of the proposed solution.

3 Techyon LLC Attachment B II B.2 b N/A 4 Section II.B.2.b mentions a "secure cloud-based platform." Does the Agency have specific cloud service provider preferences or restrictions? Are there Agency-specific cloud security requirements beyond those mentioned in Section X?

There are no provider preferences. NIST controls can be referenced for cybersecurity expectations. Major cloud providers generally offer varying levels of security controls, depending on the project needs. Government and FedRAMP tenants may be considered depending on the proposed solution.

4 Techyon LLC Attachment B II B.3 c N/A 4 Section II.B.3.c refers to "recommendations for target interventions to improve outcomes."

What level of detail is expected in these recommendations, and are they expected to be automated suggestions or analyst-developed recommendations?

This item may be discussed as a part of the negotiation process.

5 Techyon LLC Attachment B II B.5 a N/A 5 For Section II.B.5.a regarding "predictive analytics to flag potential high-cost members," what specific methodologies or approaches would be preferred for this predictive modeling?

This item may be discussed as a part of the negotiation process.

6 Techyon LLC Attachment B II B.7 a N/A 5 In Section II.B.7.a, what types of "ad-hoc reporting capabilities" are envisioned? Could you provide examples of the most important ad-hoc reports the Agency anticipates needing?

As part of the proposed Solution, the Reporting and Insights Tool should allow for the production of ad hoc reports.

7 Techyon LLC Attachment B X D.16 e N/A 15 Regarding the "Data Dictionary" requirement in Section X.D.16.e, is there an existing data dictionary for Agency data that will be shared, or is the vendor expected to create this from scratch?

The Vendor will be expected to create data dictionaries for use with Vendor-developed applications.

8 Techyon LLC Attachment B II B.8 a N/A 5 Section II.B.8.a mentions "onboarding materials" and "virtual training modules." How many Agency users will need to be trained, and what are their technical proficiency levels? If a large number of trainees are required, would a tiered vendor> train the trainer> end user approach be preferred?

100+ users. Training can be discussed as a part of the negotiation process.

9 Techyon LLC Attachment B II D 1 N/A 6-7 Attachment B Section II.D.1 states that O&M services shall be provided for "a minimum of one (1) year from final acceptance." Attachment A, Section A.1.A.14 define the Term of Contract as one year (Jun 25- Jun 26). Is it therefore correct to assume the total contract budget of approximately $3.1M (ceiling - Attachment A, Section A.1.A.13) is to cover a 24 month Period of Performance ? If so, are there agency expectations on when key milestones will be completed within the first 12 months (i.e. Dashboard operational, analytics operational, final acceptance complete) ?

The amount identified in the ITN is the only amount appropriated to the Agency for this fiscal year. Completion dates for key milestones can be determined through negotiations.

10 Techyon LLC Attachment B II F N/A N/A 7 In Section II.F regarding Task Assignments, what is the anticipated frequency and scope of additional services that might be needed after implementation?

This item may be discussed as a part of the negotiation process.

11 Techyon LLC Attachment B II G.2 N/A N/A 8 Section II.G.2 mentions "ad hoc analyses." Is there an expected volume or frequency of these analyses, and would they typically require development of new data views or primarily use existing dashboard capabilities?

The Solution would need to provide the ability to respond to ad-hoc requests from the dashboard, as well as creating new views within the Solution.

12 Techyon LLC Attachment B X S N/A N/A 18 Section X.S mentions conducting "activities in compliance with 45 CFR 164 Subpart C" for data security. Are there any Agency-specific security requirements beyond HIPAA/HITECH compliance?

Contract requirements eclipse HIPAA alone. NIST SP 800-53 is also referenced.

Individual contract sections and requirements provide additional expectations.

13 Techyon LLC Attachment B XI A N/A N/A 18 In Section XI.A, a disaster recovery plan is required that limits "service interruption to a period of twenty-four (24) clock hours." What is the expected Recovery Point Objective (RPO) for data loss in addition to this Recovery Time Objective (RTO)?

If not specifically outlined in the contract or attachments, this can be a discussion based on project-scoped recovery plans. Note that sometimes RPO and RTO are dictated by cloud provider when applicable.

14 Techyon LLC Attachment B II B.2 N/A N/A 4 Does the Agency have specific expectations for the visual design of the dashboard, such as adherence to state branding guidelines or specific visualization formats preferred?

The Agency has specific branding guidelines that will be provided.

15 Techyon LLC Attachment B II B.9 c.1 N/A 5-6 Section II.B.9.c.1 mentions "development of test cases based on business requirements."

Will the Agency provide detailed business requirements documentation, or is the vendor expected to develop these through discovery sessions?

The vendor is expected to develop this.

16 Techyon LLC Attachment B II C N/A N/A 6 In Section II.C, the Project Management Plan requires identification of "key staff." Beyond the Project Manager mentioned, what other specific roles does the Agency consider essential to this project?

The Agency prefers that respondents focus on the key staff identified in the ITN. The respondent may propose additional key staff during negotiations.

AHCA ITN 007-24/25, Addendum No. 3, Questions and Answers, Page 1 of 23

QUESTION

NUMBER VENDOR NAME ATTACHMENT

IDENTIFIER

SECTION

IDENTIFIER

SUB-SECTION

REFERENCE

ITEM

REFERENCE

ATTACHMENT

EXHIBIT

PAGE

NUMBER QUESTION ANSWER

17 Techyon LLC Attachment B II B.4 b N/A 4 For Section II.B.4.b regarding "insights into prescription drug utilization," are there specific pharmacy-related metrics or analyses that are priorities for the Agency beyond those mentioned?

No

18 Techyon LLC Attachment B II B N/A N/A 3-6 What is the expected frequency of data refreshes for the dashboard/solution (daily, weekly, monthly), and are there any requirements for real-time or near-real-time data processing?

This item may be discussed as a part of the negotiation process.

19 Techyon LLC Attachment B III A.5 N/A N/A 9 Section III.A.5 states invoices shall not be approved until "reports and deliverables from the Vendor are received." Is there an expected review and approval timeframe for these deliverables beyond the 10 business days mentioned in Section II.A.6.a?

This can be discussed during negotiations.

20 Techyon LLC Attachment B II B.7 c N/A 5 What existing Agency systems or data platforms will need to be integrated with the solution as referenced in Section II.B.7.c regarding "integration with existing systems and data sources for seamless workflows"?

The Enterprise Data Warehouse is hosted in AWS. Other potential sources can be discussed as a part of the negotiation process.

21 Techyon LLC Attachment B II A 3.a N/A 3 Given the 4M+ user base, what are the projected data volume growth rates over the contract term? How many years of historical data must the solution initially load and maintain?

The solution must hold 5 years of historical data.

22 Techyon LLC Attachment B XI A N/A N/A 18 What are the specific requirements for the Disaster Recovery environment (e.g., geographic separation distance, active/passive or active/active configuration)?

If not specifically outline in the contract or attachments, this can be a discussion based on project-scoped recovery plans. Some industry best practices include robust cloud-native active recovery with cold storage for extreme events or long-term retention as examples only.

23 Techyon LLC Attachment B General N/A N/A N/A General What are the Agency's expectations regarding data quality? Is the vendor expected to perform data quality assessment, cleansing, or standardization as part of the data aggregation process?

The Vendor will need to perform whatever standardization is required to aggregate the data.

24 Cosmic Data Solutions and VSKY Solutions

Attachment A B 1 f 8 of 22 Can AHCA confirm that joint ventures are eligible to apply and clarify if both partners must individually submit all required certifications (Exhibit A-3, A-3a, etc.)?

For joint ventures both parties must all required certifications.

25 Cosmic Data Solutions and VSKY Solutions

Attachment A SRC#2 4 Exhibit A-4 3 of 19 If a subcontractor will support technical development (e.g., data visualization, security), should their experience and certifications be submitted under SRC#2 and SRC#9?

As an extension of the respondent, subcontarctors must submit qualifications and certifications.

26 Cosmic Data Solutions and VSKY Solutions

Attachment A B 2 e 9 of 22 Will preference or special scoring considerations be given to small businesses or new vendors with limited experience in doing business with the state but strong technical qualifications?

No.

27 Cosmic Data Solutions and VSKY Solutions

Attachment A SRC#3 Exhibit A-4 5 of 19 Will the Agency provide access to existing Medicaid datasets via APIs or flat files? What is the expected data volume or file types?

This item may be discussed as a part of the negotiation process.

28 Cosmic Data Solutions and VSKY Solutions

Attachment A SRC#4 Exhibit A-4 7 of 19 Does AHCA intend to include social determinants of health (SDoH), housing, or community-based data sources in the review?

This item may be discussed as a part of the negotiation process.

29 Cosmic Data Solutions and VSKY Solutions

Attachment B X D 16 15 of 21 Is there a preference for specific cloud providers (e.g., AWS, Azure, Google) or any restrictions on federal/state cloud data hosting requirements?

See ITN Section XX. There are no provider preferences. NIST controls can be referenced for cybersecurity expectations. Major cloud providers generally offer varying levels of security controls, depending on the project needs. Government and FedRAMP tenants may be considered depending on the proposed solution.

30 Cosmic Data Solutions and VSKY Solutions

Attachment A I. F 8 Exhibit A-7 5 of 27 If the joint venture is not currently SOC 2 certified, will a plan to complete SOC 2 Type II within the first year be considered acceptable?

This final determination can be discussed, but that approach might be acceptable. It is worth noting that other certifications can be considered as mitigating factors as well, for example HITRUST if applicable.

31 Cosmic Data Solutions and VSKY Solutions

Attachment B VIII. X C 14 of 21 Will the Agency provide its own HIPAA/Security Awareness training, or are vendors expected to provide proof of internal training systems?

Agency training is provided for any vendor staff who join our workforce (obtain an AHCA email account). Otherwise, training is provided by the vendor.

32 Cosmic Data Solutions and VSKY Solutions

Attachment A B 2 e 9 of 22 Is the Agency requiring a line-item breakdown of costs for each deliverable, or will a total fixed-price proposal suffice initially, with detail provided during negotiations?

The Agency prefers that respondents provide as much detail as possible with their ITN response.

33 Cosmic Data Solutions and VSKY Solutions

Attachment A A.1. 14 c 7 of 22 Should renewal pricing be broken out by year or submitted as a bundled three-year projection?

Renewal pricing should be broken out by year, but additional pricing options may be discussed during negotiations.

34 Cosmic Data Solutions and VSKY Solutions

Attachment A SRC#1 3 Exhibit A-4 2 of 19 In regard to the required organizational chart under SRC#1, does the Agency expect this to reflect the vendor’s existing organizational structure, or should it represent a proposed structure specific to the MPDR solution project team?

By SRC #1, both are required.

35 Cosmic Data Solutions and VSKY Solutions

Attachment A SRC#3 Exhibit A-4 5 of 19 Is the agency seeking a specific platform (e.g., Power BI, Tableau)? Or are vendors free to propose the most effective solution within teh security guidelines?

There are no specific requirements regarding the platform and Vendors should propose the most effective Solution.

36 Cosmic Data Solutions and VSKY Solutions

Attachment A B 2 e 9 of 22 Who will bear the software licensing cost for any required data platforms, cloud services or tools?

The vendor will bear the costs for all licensing.

AHCA ITN 007-24/25, Addendum No. 3, Questions and Answers, Page 2 of 23

QUESTION

NUMBER VENDOR NAME ATTACHMENT

IDENTIFIER

SECTION

IDENTIFIER

SUB-SECTION

REFERENCE

ITEM

REFERENCE

ATTACHMENT

EXHIBIT

PAGE

NUMBER QUESTION ANSWER

37 Cosmic Data Solutions and VSKY Solutions

Attachment A SRC#1 3 e Exhibit A-4 2 of 19 Given the requirement for all services to be performed within the borders of the United States and its territories, would the use of remote U.S.-based staff (i.e., not onsite in Florida) be considered compliant? Or does the Agency require in-state or on-site presence?

Services must be performed within the borders of the United States and its territories.

38 Cosmic Data Solutions and VSKY Solutions

Attachment A I. B Exhibit A-7 3 of 27 Are both companies in the joint venture required to be individually registered as state vendors in order to be eligible for award?

The responding entity identified on Attachment A, Exhibit A-2, Transmittal Letter, of the response will be required to register prior to the effective date of the resulting contract.

39 Ensono B II B 1.f B-1 4 What is the number of data sources that will need to be integrated? This item may be discussed as a part of the negotiation process.

40 Ensono B II B 1.f B-1 4 Are the data sources available via API, data extract, batch file, etc? Yes.

41 Ensono B II B 1.f B-1 4 For each integration source (data or table), does the Agency know roughly how much data rows/volume the new platform/application will incur or would you expect that to be surfaced during discovery?

More than 250M rows per year.

42 Ensono B II D 1 B-1 6 Should the first year of O&M be included in the up front pricing provided or are vendors to provide their annual cost for O&M with the expectation that it will not be incurred for the first year?

The Agency prefers that respondents provide as much detail as possible with their ITN response.

43 Ensono B X E 4 B-1 16 Is the Agency looking for the vendor to utilize it's current technology stack (Azure, O365, SQL, SSRS, etc.) to build a custom application/platform or for an OTS (Off the Shelf) solution to be customized and implemented?

There are no specific requirements regarding the platform and vendors should propose the most effective solution.

44 Ensono B II B 8 B-1 5 What are the Agency's expectations for Training? Can we have examples of user groups that will need training? (Power users, end users, administrators, etc.)

Power Users and End Users

45 Ensono N/A N/A N/A N/A N/A N/A From the Agency's perspective, do you have resources aligned to the project and if so, which roles and how many i.e. do you have Product Owners aligned, SMEs for discovery or technical staff you would expect to participate?

The Agency will provide SMEs where necessary.

46 Ensono N/A N/A N/A N/A N/A N/A What environments would you envision targetting i.e. Dev/QA/UAT/Production? There are no specific requirements regarding the platform and vendors should propose the most effective solution.

47 Ensono N/A N/A N/A N/A N/A N/A Will the Agency require the Project Team to attend some meetings physically? Yes.

48 Ensono N/A N/A N/A N/A N/A N/A In the early part of the build, are there specific use cases/data sets/reports it would be preferential to prioritise, which will demonstrate the value of the platform and garner engagement and feedback?

This item may be discussed as a part of the negotiation process.

49 Ensono N/A N/A N/A N/A N/A N/A How many users would you expect to utilise the new platform? 100+ users.

50 Ensono B II B 1.f B-1 4 To the Agency's knowledge and just to confirm, is there any system that have limited integration capabilities?

This item may be discussed as a part of the negotiation process.

51 Ensono B II B 1.f B-1 4 Will the Project Team be able to access necessary documentation for all data source?

Should we expect any gaps?

The Agency will provide available documentation where necessary.

52 Ensono N/A N/A N/A N/A N/A N/A How much documentation does the Agency have for the measures/features/calculations and meaning behind outputs in reports or is that an output you'd expect the discovery period to surface

This is an output we would expect during discovery.

53 Ensono N/A N/A N/A N/A N/A N/A Ensono use Agile as a Delivery framework in projects, is the Agency comfortable with this way of working?

The agency expects the vendor to propose a solution and utilize whatever SDLC methodology to accomplish that proposal.

54 Ensono N/A N/A N/A N/A N/A N/A How much is data governance, data quality and data ownership a concern, would you expect an output of the project to set up tools and design policies to manage these concerns?

No

55 IBM AHCA ITN 007-

2425 - MPDR

Solution

A1.B.

Response Preparation and Content

e. Cost Proposal The respondent shall submit a Cost Proposal as part of its response.

Attachment A 11 of 128 Is there a Cost Proposal template that vendors should be using? There was no Cost Proposal template included in the ITN library. Please advise.

No.

56 IBM AHCA ITN 007-

2425 - MPDR

Solution

Attachment B Scope of Services

XI. Disaster Recovery

D. The disaster re Attachment B 121 of 128 This requirement is requesting the Disaster Recovery Plan to be submitted 30 days prior to Contract effective date. Should this be 30 days AFTER Contract effective date? It doesn't make sense to submit a plan prior the contract being executed.

Generally, we expect there to be a disaster recovery plan before systems are put into full production as disaster recovery capabilities must be in place for all production environments, including the first day in production. This would necessitate a secure environment prior to the effective date.

AHCA ITN 007-24/25, Addendum No. 3, Questions and Answers, Page 3 of 23

QUESTION

NUMBER VENDOR NAME ATTACHMENT

IDENTIFIER

SECTION

IDENTIFIER

SUB-SECTION

REFERENCE

ITEM

REFERENCE

ATTACHMENT

EXHIBIT

PAGE

NUMBER QUESTION ANSWER

57 IBM AHCA ITN 007-

2425 - MPDR

Solution

Attachment B Scope of Services

Exhibit B-1 Project Management Plan/Interactive Dashboard Deliverables

Attachment B 125 of 128 ITN reference:

Project Management Plan - Initial Project Management Plan shall be submitted no later than thirty (30) calendar days following contract execution. After the initial submission, updates shall be submitted monthly by the 15th of each month.

Interactive Dashboard - Within 90 days from contract execution.

Can AHCA confirm the solution must be implemented within 90 days of contract execution and will start development before the Project Management Plan is approved, since they run in parallel?

Yes.

58 IBM AHCA ITN 007-

2425 - MPDR

Solution

Attachment A INSTRUCTIONS

AND SPECIAL

CONDITIONS

Solicitation Timeline

Attachment A 6 of 128 Would AHCA consider a two week extension for the Deadline for Receipt of Responses? Please see Addendum No. 1 posted in VIP.

59 IBM AHCA ITN 007-

2425 - MPDR

Solution

Attachment B Scope of Services

II.A Services Provided by the Agency

Provide or arrange to provide Medicaid claims data, eligibility data, enrollee data, reference tables and other information and data to be used by the vendor.

Attachment B 106 of 128 Will this data be sourced from an existing EDW or existing data mart that has pre-processed raw data, or will it be sourced from raw claims, eligibility and enrollment data?

It will be sourced from the existing EDW.

60 IBM AHCA ITN 007-

2425 - MPDR

Solution

Attachment B Scope of Services

II.B Services Provided by the Vendor

E. Below is the Agency’s current environment:

Attachment B 119 of 128 Does AHCA prefer to use it's existing Tableau solution? There are no specific requirements regarding the platform and vendors should propose the most effective solution.

61 IBM AHCA ITN 007-

2425 - MPDR

Solution

Attachment B Scope of Services

II.B Services Provided by the Vendor

E. Below is the Agency’s current environment:

Attachment B 119 of 128 Will the State provide the vendor access to existing Tableau environments and associated licenses to provide the dashboards (or similar solutions)?

This is dependent upon the solution offered. If a portal solution independent of the Agency's IT environment is used, PowerBI or Tableau licenses from the Agency might not make sense. If something is built internal to the Agency's IT environment, that could potentially be discussed.

62 IBM AHCA ITN 007-

2425 - MPDR

Solution

Attachment B Scope of Services

II.B Services Provided by the Vendor

E. Below is the Agency’s current environment:

Attachment B 119 of 128 For the items listed in the Agency's current environment, will AHCA provide the licenses for the vendor to use?

This is dependent upon the solution offered. If a portal solution independent of the Agency's IT environment is used, licenses from the Agency might not make sense.

If something is built internal to the Agency's IT environment, that could potentially be discussed.

63 IBM AHCA ITN 007-

2425 - MPDR

Solution

Attachment B Scope of Services

II.B Services Provided by the Vendor

Emerging Risk Identification – Interactive Dashboard/Sol ution M

Attachment B 108 of 128 Does AHCA use an existing risk score methododology today that will be used in this solution or do you require the vendor to propose a risk score methodology for the risk related requirements?

This item may be discussed as a part of the negotiation process.

64 IBM AHCA ITN 007-

2425 - MPDR

Solution

Attachment B Scope of Services

II.B Services Provided by the Vendor

I. Service(s) to be Provided

Attachment B 105 of 128 "The Vendor… shall not be.. contracted with a managed care organization. “ Can the Agency confirm that the above-stated provision applies to organizations that are directly contracted with the Florida Managed Care Organizations only?

Managed care organizaion would be the same as defined as a 'managed care plan" in s. 409.901(13), Florida Statutes.

65 Optum Attachment A TABLE 1 Deadline for Receipt of Responses

Attachment A 4 of 22 To ensure the ITN reaches the widest pool of qualified vendors and allows them sufficient time to prepare a comprehensive response, would AHCA consider extending the deadline for receipt of responses by at least one month?

Please see Addendum No. 1 posted in VIP.

66 Optum Exhibit A-4 SRC#3 Item 2 Exhibit A-4 5 of 19 Could AHCA please clarify the definition of "real-time data visualizations"? Specifically, does this imply that AHCA is seeking an interactive reporting capability, or does it mean that the dashboards should receive real-time claims and encounter updates from the AHCA MMIS and encounter processing system?

Custom, ad hoc reporting capabilities are required as part of the Solution, data latency can be discussed as a part pf the negotiation process.

AHCA ITN 007-24/25, Addendum No. 3, Questions and Answers, Page 4 of 23

QUESTION

NUMBER VENDOR NAME ATTACHMENT

IDENTIFIER

SECTION

IDENTIFIER

SUB-SECTION

REFERENCE

ITEM

REFERENCE

ATTACHMENT

EXHIBIT

PAGE

NUMBER QUESTION ANSWER

67 Optum Attachment B 2 a Attachment B 4 of 21 Could AHCA please clarify the total number of users as well as the anticipated number of concurrent users?

100+ users.

68 Optum Attachment B II. Manner of Services Provision:

A. Services Provided by the Agency

Item 3 Attachment B 3 of 21 AHCA lists among its responsibilities the provision of "Medicaid claims data, eligibility data, enrollee data, reference tables, and other information and data to be used by the vendor."

Could AHCA please provide detailed information on the extracts to be provided, including the number of years of data, data size, layouts, and any other relevant details?

5 years of data, more than 250M rows per year.

69 Optum Attachment B X. Information Technology

D. Development Requirements

All Items Attachment B 14-15 of 21 The bold-face text under sub-part D states, "This Sub-Section is applicable if the Vendor solution or service includes interoperability with the Agency’s information technology enterprise." Please provide examples of what may be considered "interoperability." For example, would SFTP data submissions from AHCA source systems to the vendor's Solution be considered interoperable?

Data exchanges are a good example of interoperability, which can be via automated export and extraction SFTP processes or APIs are examples, but anything allowing systems or software to exchange data could be applicable. Other examples include software required to be loaded into the Agency's environment. These examples are by no means inclusive. This could also include a web portal Agency staff would be required to access. Reviewing items 1-16 of this subpart should provide additional guidance.

70 Optum Attachment B X. Information Technology

E. Agency's Current Environment

All Items Attachment B 16 of 21 In listing the current tools and technologies here, does AHCA have an expectation that vendor solutions will leverage or integrate with any of these tools?

That is primarily informational but can be critical if a solution might need to integrate.

It is not a deliverable expectation by itself. If, for example, a web portal were created the Agency would expect it to meet these standards or higher.

71 Optum Attachment B X. Information Technology

E. Agency's Current Environment

Item 1 - HIPAA and CJIS Compliance

Attachment B 16 of 21 It is called out that the current environment includes CJIS compliance. Is the Medicaid Population Data Review Solution expected to create any reports based on data sourced from CJIS compliant systems? CJIS compliance will require all vendors to provide solutions in government cloud environments or FIPS-199 high data centers and will increase AHCA costs.

This is dependent upon project specifics. Current guess from IT: No, we do not anticipate any CJIS in this solution.

72 Optum Attachment B XI. Disaster Recovery

D. DR plan approval timing

Attachment B 18 of 21 The ITN states, "The disaster recovery plan shall be finalized no later than thirty (30) calendar days prior to this Contract effective date." Did AHCA intend this to be the go-live date of the solution?

This is dependent on the business unit requirements. Current guess from IT: No, the Agency anticipates a testing and build time after the contract effective date before the tool is released to the public.

73 Optum Attachment B X. Information Technology

D. Development Requirements

3 Attachment B 14 of 21 Development requirement #3 requires the vendor to develop a system that allows access from mobile devices however, Section XII requires written approval from the Agency for any smart phone application. Does the Agency consider using a SaaS service via an app on a mobile device the same as a custom developed smart phone application? These two sections appear to provide conflicting requirements.

A SaaS tool and a custom-developed tool can be the same or different. If a requirement exists to allow mobile access, there is an expectation that the Agency would approve that process as well as any applications leveraged to provide that access.

74 Optum Attachment B X. Information Technology

D. Development Requirements

3 Attachment B 14 of 21 Could AHCA elaborate on the access requested on a mobile device given Section XII prohibits PHI and PII on mobile. Should the vendor plan that any reports for mobile devices include aggregate data only and no drill down?

XIII only prohibits this if an application would "allow providers direct access to Agency-approved documents and/or content". If mobile device access is part of the proposed solution, the Agency would need to review the specific, proposed solution.

75 Optum Exhibit A-7 F.

Audits/Monitorin g

8 Exhibit A-7 5 of 27 Could AHCA provide a list of the expected information security documentation for the project?

Question for Will; Is this covered by the examples in Sub-section F Audits/Monitoring item 8? This is covered in audits/monitoring as well as specific deliverable requirements. Another example is the disaster recovery plan. This is a very broad ask as multiple requirements exist. Especially as the solution might require documents from different variations of cloud, SaaS, and custom solutions, a single answer is not readily available.

76 Optum Attachment B XI. Disaster Recovery

Attachment B 18 of 21 What is the preferred RPO? If not specifically outlined in the contract or attachments, this can be a discussion based on project-scoped recovery plans. Note that sometimes RPO and RTO are dictated by cloud provider when applicable.

77 Optum Attachment A A. Overview 14 Term of Contract

Attachment A 6 of 22 In accordance with Section 287.057(13), F.S., the Contract resulting from this solicitation may be renewed for a period that may not exceed three (3) years or the term of the resulting original Contract period whichever is longer. Can the state confirm the full length of contract and renewals as up to 4 years (12 month contract + up to 3 years of renewals)?

Confirmed.

78 Optum Attachment B X. Information Technology

T. Attachment B 18 of 21 With a liquidated damage associated with IT security rating score scan, could ACHA provide further detail about the scope of such an IT security rating score scan?

The Agency leverages Risk Recon by MasterCard for this solution. This solution does not leverage internal credentials and is not a penetration test. The Agency requires a "B" or higher, with the scale utilizing the "A through F" grading scale.

79 CCS Global Tech inquiries N/A N/A N/A N/A N/A 2 Could AHCA please clarify if there is a required bond for this solicitation? No bond is required.

AHCA ITN 007-24/25, Addendum No. 3, Questions and Answers, Page 5 of 23

QUESTION

NUMBER VENDOR NAME ATTACHMENT

IDENTIFIER

SECTION

IDENTIFIER

SUB-SECTION

REFERENCE

ITEM

REFERENCE

ATTACHMENT

EXHIBIT

PAGE

NUMBER QUESTION ANSWER

80 CCS Global Tech inquiries N/A N/A N/A N/A N/A 2 In page 2 is stated "Failure to file a protest within the time prescribed in section 120.57(3), Florida Statutes, or failure to post the bond or other security required by law within the time allowed for filing a bond shall constitute a waiver of proceedings under chapter 120, Florida Statutes." Could AHCA please specify the type of bond required for this solicitation and if it is required at the time of award?

No bond is required for award. A bond is only required if the vendor files a protest in accordance with Chapter 120 Florida Statutes.

81 CCS Global Tech inquiries ATTACHMENT A

A.1.

Instructions

A. Overview 3. Solicitation Title and Description

ATTACHMENT

A

5 Is it mandatory for vendors to have experience reviewing enrollee data? Yes.

82 CCS Global Tech inquiries ATTACHMENT A

B. Response Preparation and Content

1. General Instructions

f. ATTACHMENT A

10 Under section 1. General Instructions is stated "f. Joint ventures and legal partnerships shall be viewed as one (1) respondent. However, all parties to the joint venture/legal partnership shall submit all mandatory attachments and documentation required by this solicitation from respondents, unless otherwise stated."Could AHCA please confirm if, in case vendors use a subcontractors for this solicitation, should the subcontractor fill all the forms as well, and include them in the proposal response?

Could AHCA please confirm if, in case vendors use a subcontractors for this solicitation, should the subcontractor fill all the forms as well, and include them in the proposal response?

No.

83 CCS Global Tech inquiries ATTACHMENT A

C. Response Submission Requirements

1. Hardcopy and Electronic Submission Requirements

b. Hardcopies of the Response

ATTACHMENT

A

12 Under this section is stated "The Original Response shall be marked as the “Original” and contain the Transmittal Letter (Exhibit A-2) that bears the original signature of the binding authority" could AHCA please clarify if vendors can use electronic signatures for both the original response and its copies?

Yes. Electronic signatures are acceptable.

84 CCS Global Tech inquiries ATTACHMENT A

C. Response Submission Requirements

1. Hardcopy and Electronic Submission Requirements

b. Hardcopies of the Response

ATTACHMENT

A

12 Could the AHCA please confirm that vendors can fill out proposal forms electronically? Yes. Hard copy and electronic copies are required for submission.

85 CCS Global Tech inquiries ATTACHMENT A

C. Response Submission Requirements

1. Hardcopy and Electronic Submission Requirements

b. Hardcopies of the Response

ATTACHMENT

A

12 Are there any specific requirements for sealing and labelling the submission package (e.g., company name, RFP number, etc.)?

Please refer to the the ITN cover letter, dated March 27, 2025.

86 CCS Global Tech inquiries ATTACHMENT A

C. Response Submission Requirements

1. Hardcopy and Electronic Submission Requirements

b. Hardcopies of the Response

ATTACHMENT

A

12 Is an electronic copy of the submission required along with the physical copies? Yes.

87 CCS Global Tech inquiries ATTACHMENT A

C. Response Submission Requirements

1. Hardcopy and Electronic Submission Requirements

b. Hardcopies of the Response

ATTACHMENT

A

12 Are there any specific packaging instructions, such as separate envelopes for different sections of the proposal?

Refer to Attachment A, Section A.1., Sub-section C., Response Submission Requirements.

88 CCS Global Tech inquiries ATTACHMENT A

C. Response Submission Requirements

1. Hardcopy and Electronic Submission Requirements

b. Hardcopies of the Response

ATTACHMENT

A

12 Should all forms and documents be signed in wet ink, or are electronic signatures acceptable?

Yes. Electronic signatures are acceptable.

89 CCS Global Tech inquiries ATTACHMENT A

A.1.

Instructions

D. Response Evaluation, Negotiations and Contract Award

10. Contract Execution

ATTACHMENT

A

22 Could AHCA please clarify if vendors should provide the License to do Businness in the State of Florida within the proposal response? If yes, in what section should it be included?

No.

90 CCS Global Tech inquiries ATTACHMENT A

A.2 Special Terms and Conditions

B. General Definitions

HIPAA (THE

HEALTH

INSURANCE

PORTABILITY

AND

ACCOUNTABIL

ITY ACT OF

1996)

ATTACHMENT

A

24 Are firms required to hold a HIPAA certification to be able to bid on this solicitation? No.

AHCA ITN 007-24/25, Addendum No. 3, Questions and Answers, Page 6 of 23

QUESTION

NUMBER VENDOR NAME ATTACHMENT

IDENTIFIER

SECTION

IDENTIFIER

SUB-SECTION

REFERENCE

ITEM

REFERENCE

ATTACHMENT

EXHIBIT

PAGE

NUMBER QUESTION ANSWER

91 CCS Global Tech inquiries EXHIBIT A-3 N/A N/A 7.

PERFORMANC

E OF

SERVICES

WITHIN THE

STATE OF

FLORIDA

EXHIBIT A-3 37 Could AHCA please confirm if it's mandatory for vendors to be based in the State of Florida to participate in this solicitation?

Services must be performed within the borders of the United States and its territories.

92 CCS Global Tech inquiries EXHIBIT A-3 N/A N/A 7.

PERFORMANC

E OF

SERVICES

WITHIN THE

STATE OF

FLORIDA

EXHIBIT A-3 37 Could AHCA please clarify if vendors outside of the State of Florida can participate? Services must be performed within the borders of the United States and its territories.

93 CCS Global Tech inquiries EXHIBIT A-3 N/A N/A 8.

PERFORMANC

E OF

SERVICES

WITHIN THE

UNITED

STATES

EXHIBIT A-3 37 Does AHCA accept remote resources to work on this engagement? Services must be performed within the borders of the United States and its territories.

94 CCS Global Tech inquiries EXHIBIT A-3 N/A N/A 8.

PERFORMANC

E OF

SERVICES

WITHIN THE

UNITED

STATES

EXHIBIT A-3 37 Does AHCA accept offshore resources to work on this engagement? Services must be performed within the borders of the United States and its territories.

95 CCS Global Tech inquiries EXHIBIT A-3 N/A N/A 8.

PERFORMANC

E OF

SERVICES

WITHIN THE

UNITED

STATES

EXHIBIT A-3 37 Does AHCA prefer on-site resources to execute this engagement? Services must be performed within the borders of the United States and its territories.

96 CCS Global Tech inquiries EXHIBIT A-3 N/A N/A 13. JOINT

VENTURE OR

PARTNERSHIP

S

EXHIBIT A-3 39 In case vendors are not using subcontractors can they add N/A in section 13. JOINT

VENTURE OR PARTNERSHIPS?

Yes.

97 CCS Global Tech inquiries Exhibit A-3-a N/A N/A N/A Exhibit A-3-a 43 Under Exhibit A-3-a is stated "...and has completed the Form PUR 1355, “Foreign Country of Concern Attestation Form,” available at http://www.flrules.org/Gateway/reference.asp?No=Ref-15843, and submitted it to the Agency." Could AHCA please clarify if vendors should complete the Foreign Country of Concern Attestation Form prior submission or post-award?

This form is required with your response.

98 CCS Global Tech inquiries Exhibit A-3-a N/A N/A N/A Exhibit A-3-a 43 Under Exhibit A-3-a is stated "...and has completed the Form PUR 1355, “Foreign Country of Concern Attestation Form,” available at http://www.flrules.org/Gateway/reference.asp?No=Ref-15843, and submitted it to the Agency." Could AHCA please clarify if vendors should attach the Foreign Country of Concern Attestation Form in the proposal response? If yes, in what section should vendors include it?

This form should be submitted with Exhibit A-3-a.

99 CCS Global Tech inquiries Exhibit A-3-a N/A N/A N/A Exhibit A-3-a 43 Under Exhibit A-3-a is stated "If the vendor is a common carrier, as defined in section 908.111, F.S., or a contracted carrier, it is not prohibited from entering into the contract pursuant to section 908.111, F.S., and has completed the Form PUR 1808, “Common Carrier or Contracted Carrier Attestation Form" Could AHCA please clarify if vendors should complete the Common Carrier or Contracted Carrier Attestation Form prior submission or post-award?

PUR 1808 is not required.

AHCA ITN 007-24/25, Addendum No. 3, Questions and Answers, Page 7 of 23

QUESTION

NUMBER VENDOR NAME ATTACHMENT

IDENTIFIER

SECTION

IDENTIFIER

SUB-SECTION

REFERENCE

ITEM

REFERENCE

ATTACHMENT

EXHIBIT

PAGE

NUMBER QUESTION ANSWER

100 CCS Global Tech inquiries Exhibit A-3-a N/A N/A N/A Exhibit A-3-a 43 Under Exhibit A-3-a is stated "If the vendor is a common carrier, as defined in section 908.111, F.S., or a contracted carrier, it is not prohibited from entering into the contract pursuant to section 908.111, F.S., and has completed the Form PUR 1808, “Common Carrier or Contracted Carrier Attestation Form." Could AHCA please clarify if vendors should attach the Common Carrier or Contracted Carrier Attestation Form in the proposal response? If yes, in what section should vendors include it?

PUR 1808 is not required.

101 CCS Global Tech inquiries Exhibit A-3-a N/A N/A N/A Exhibit A-3-a 43 Under Exhibit A-3-a is stated "To fulfill this requirement, the vendor has completed Form PUR 2024, “Part A: Use of Coercion for Labor and Services,” and submitted it to the Agency." Could AHCA please clarify if vendors should complete the Form PUR 2024, “Part A: Use of Coercion for Labor and Services,” prior submission or post-award?

PUR 2024 is required with your response.

102 CCS Global Tech inquiries Exhibit A-3-a N/A N/A N/A Exhibit A-3-a 43 Under Exhibit A-3-a is stated "To fulfill this requirement, the vendor has completed Form PUR 2024, “Part A: Use of Coercion for Labor and Services,” and submitted it to the Agency." Could AHCA please clarify if vendors should attach the Form PUR 2024, “Part A:

Use of Coercion for Labor and Services,” in the proposal response? If yes, in what section should vendors include it?

This form should be submitted with Exhibit A-3-a.

103 CCS Global Tech inquiries Exhibit A-3-a N/A N/A N/A Exhibit A-3-a 43 Under Exhibit A-3-a is stated "To fulfill this requirement, the vendor has completed Form PUR 2024, “Part B: Provision of Commodities Produced by Forced Labor,” and submitted it to the Agency. Could AHCA please clarify if vendors should complete the Form PUR 2024, “Part B: Provision of Commodities Produced by Forced Labor,” prior submission or post-award?

PUR 2024 is required with your response.

104 CCS Global Tech inquiries Exhibit A-3-a N/A N/A N/A Exhibit A-3-a 43 Under Exhibit A-3-a is stated "To fulfill this requirement, the vendor has completed Form PUR 2024, “Part B: Provision of Commodities Produced by Forced Labor,” and submitted it to the Agency." Could AHCA please clarify if vendors should attach the Form PUR 2024, “Part B: Provision of Commodities Produced by Forced Labor,” in the proposal response?

If yes, in what section should vendors include it?

This form should be submitted with Exhibit A-3-a.

105 CCS Global Tech inquiries EXHIBIT A-4 N/A N/A Instructions to Respondents for the completion of Exhibit A-4:

EXHIBIT A-4 45 Could AHCA please confirm if vendors should submit separate physical copies for each SRC or should they only be separate in the electronic copy?

The agency prefers that SRCs be tabbed separately in your hardcopy response.

106 CCS Global Tech inquiries EXHIBIT A-4 SRC# 1 N/A 3. Background information on the Respondent’s corporation, the size, and resources, to include:

EXHIBIT A-4 46 Under thi section is stated "Total number of employees, including the number of employees located in Florida" Could AHCA please clarify if, in case vendors have no employees located in Florida, could they just add only the Total number of employees?

The total number of employees should be reported, and indicate there are zero available in the state of Florida.

107 CCS Global Tech inquiries EXHIBIT A-4 N/A N/A N/A EXHIBIT A-4 45 Could the AHCA kindly clarify the exact number of electronic and hardcopy documents needed for the response?

Refer to Attachment A, Section A.1., Sub-section C., Response Submission Requirements.

108 CCS Global Tech inquiries EXHIBIT A-4 SRC# 2 – Respondent Qualifications -

SCORED

N/A N/A EXHIBIT A-4 47 Under this section is mentioned "Staff resources, position titles, qualifications, number of Respondent staff, and utilization of

There is no mandatory subcontracting goal.

109 CCS Global Tech inquiries subcontractors used to complete the project" Is there a mandatory subcontracting goal for this solicitation? If yes, could AHCA please provide the pertinent details?

There is no mandatory subcontracting goal.

110 CCS Global Tech inquiries EXHIBIT A-4 SRC# 2 – Respondent Qualifications -

SCORED

N/A N/A EXHIBIT A-4 47 Can a firm subcontract with various primes? Yes.

AHCA ITN 007-24/25, Addendum No. 3, Questions and Answers, Page 8 of 23

QUESTION

NUMBER VENDOR NAME ATTACHMENT

IDENTIFIER

SECTION

IDENTIFIER

SUB-SECTION

REFERENCE

ITEM

REFERENCE

ATTACHMENT

EXHIBIT

PAGE

NUMBER QUESTION ANSWER

111 CCS Global Tech inquiries EXHIBIT A-4 SRC# 2 – Respondent Qualifications -

SCORED

N/A N/A EXHIBIT A-4 47 Can a firm bid both as a prime contractor and as a subcontractor? No

112 CCS Global Tech inquiries EXHIBIT A-4 SRC# 2 – Respondent Qualifications -

SCORED

N/A N/A EXHIBIT A-4 47 Could AHCA please clarify if firms can utilize subcontractors to meet the requirements of this opportunity?

Yes.

113 CCS Global Tech inquiries EXHIBIT A-4 SRC# 4 – Interactive Dashboard/Sol ution Module Features and

N/A Evaluation Criteria

EXHIBIT A-4 52 Is it mandatory for vendors to have experience in population health, medical and pharmacy expenses, non-clinical determinates of health, digital health programs, emerging risks, provider value and holistic benefit impact?

Yes.

114 CCS Global Tech inquiries ATTACHMENT A

C. Response Submission Requirements

1. Hardcopy and Electronic Submission Requirements

b. Hardcopies of the Response

ATTACHMENT

A

12 Are there any specific requirements for sealing and labelling the submission package (e.g., company name, RFP number, etc.)?

Refer to Attachment A, Section A.1., Sub-section C., Response Submission Requirements. Also, please refer to the the ITN cover letter, dated March 27, 2025.

115 CCS Global Tech inquiries EXHIBIT A-4 SRC# 7 – Project Management Plan –

SCORED

1. The Respondent should describe its ability to provide a Project Management Plan that a EXHIBIT A-4 58 Could AHCA please clarify if is it required to provide resumes of the Key personnel? If yes, is there a page limit for the resumes?

This item may be discussed as a part of the negotiation process.

116 CCS Global Tech inquiries ATTACHMENT A

C. Response Submission Requirements

1. Hardcopy and Electronic Submission Requirements

b. Hardcopies of the Response

ATTACHMENT

A

12 Is an electronic copy of the submission required along with the physical copies? Refer to Attachment A, Section A.1., Sub-section C., Response Submission Requirements.

117 CCS Global Tech inquiries EXHIBIT A-4 SRC# 9 – Proposed Subcontractors -

UNSCORED

N/A N/A EXHIBIT A-4 62 In case vendors are not using subcontractors what should they add in SRC# 9 – Proposed Subcontractors - UNSCORED?

The vendor should respond at its discretion.

118 CCS Global Tech inquiries EXHIBIT A-4 SRC# 10:

Security Rating Score Requirements –

SCORED

N/A N/A EXHIBIT A-4 63 Could AHCA please clarify what should vendors add in section SRC# 10: Security Rating Score Requirements – SCORED?

The vendor is not required to provide a response for this SRC in their submission.

119 CCS Global Tech inquiries EXHIBIT A-5 N/A N/A N/A EXHIBIT A-5 64 In case vendors do not have any Innovation to add to EXHIBIT A-5 should vendors ommit this form or add N/A?

The vendor may add N/A.

120 CCS Global Tech inquiries EXHIBIT A-2 OFFICIAL

CONTACT

PERSON

ALTERNATE

CONTACT

PERSON

N/A EXHIBIT A-2 35 In case a vendor does not have an alternate contact that could bound the firm with SRC, can they provide just one point of contact?

No, the alternate contact must be able to bind the Vendor

121 CCS Global Tech inquiries Exhibit A-7 I. THE

VENDOR

HEREBY

AGREES:

N. Insurance 4 Exhibit A-7 78 Under this section is stated "4. The Vendor shall submit insurance certificates evidencing such insurance coverage prior to execution of this Contract." Could AHCA please clarify if vendors should attach a COI to the proposal response? I f yes, in what section of the response should it be added?

Insurance certificates are not required with the vendor's response.

122 CCS Global Tech inquiries Exhibit A-7 I. THE

VENDOR

HEREBY

AGREES:

P.

Subcontracting

N/A Exhibit A-7 79 If vendors are unable to meet the established goal, can they present a Good Faith Effort? If so, how should vendors present it?

No. Please see Attachment A, Exhibit A-3, Required Certifications and Statements, Item 1.

123 CCS Global Tech inquiries Exhibit A-7 I. THE

VENDOR

HEREBY

AGREES:

P.

Subcontracting

N/A Exhibit A-7 79 Could AHCA please clarify the certification that subcontractors need to have in order to comply with the goal for this solicitation?

The Agency does not understand the question.

AHCA ITN 007-24/25, Addendum No. 3, Questions and Answers, Page 9 of 23

QUESTION

NUMBER VENDOR NAME ATTACHMENT

IDENTIFIER

SECTION

IDENTIFIER

SUB-SECTION

REFERENCE

ITEM

REFERENCE

ATTACHMENT

EXHIBIT

PAGE

NUMBER QUESTION ANSWER

124 CCS Global Tech inquiries Exhibit A-7 I. THE

VENDOR

HEREBY

AGREES:

P.

Subcontracting

N/A Exhibit A-7 79 We are a California MBE firm certified by NMSDC. Do we qualify to meet the MBE goal? The Agency does not understand the question.

125 CCS Global Tech inquiries Exhibit A-7 N/A N/A N/A Exhibit A-7 N/A Could AHCA please confirm if vendors should attach Exhibit A-7 STANDARD CONTRACT to the proposal response? If yes, in what section sould it be added?

No.

126 CCS Global Tech inquiries Exhibit A-7 N/A N/A N/A Exhibit A-7 N/A Could AHCA please confirm if vendors should attach Exhibit A-7 ATTACHMENT II to the proposal response? If yes, in what section sould it be added?

No.

127 CCS Global Tech inquiries Exhibit A-7 N/A N/A N/A Exhibit A-7 N/A Could AHCA please confirm if vendors should attach Exhibit A-7 ATTACHMENT III CERTIFICATION REGARDING LOBBYING to the proposal response? If yes, in what section sould it be added?

No.

128 CCS Global Tech inquiries Exhibit A-7 N/A N/A N/A Exhibit A-7 N/A Could AHCA please confirm if vendors should attach Exhibit A-7 ATTACHMENT IV to the proposal response? If yes, in what section sould it be added?

No.

129 CCS Global Tech inquiries Exhibit A-7 N/A N/A N/A Exhibit A-7 N/A Could AHCA please confirm if vendors should attach Exhibit A-7 Attachment V Vendor…