ATT 8_IT and Security Affirmation.docx

RFP 24361820R0002

ATTACHMENT 8

IT AND SECURITY

COMPLIANCE AFFIRMATION

Company Name:

DUNS #:

In submitting our proposal package for evaluation, I certify on behalf of my company, that we have a clear and complete understanding of the requirements for IT and Security Compliance.

We (my company and I) understand that:

· The awarded contractor will have access to private and personal information of thousands of federal employees and their families, and must protect it as required by all applicable laws, rules, and regulations.

· The awarded contractor will have access to medical records and claims information of thousands of federal employees and their families, and must protect it as required by all applicable laws and regulations

· Additional requirements for protecting information may apply to employee participants from intelligence agencies beyond those stated explicitly in the solicitation, and those additional requirements must be complied with by the awarded contractor.

· The Government is responsible for issuance of the ATO as defined in the PWS, and the awarded contractor must complete all reviews and approvals necessary to achieve ATO within the Start-Up Period.

· The awarded contractor will be responsible for building and maintaining HIPAA-compliant interfaces with a number of Federal benefit portals (to include but not be limited to Employee Express, the OPM Macon data hub, and the National Finance Center); developing appropriate interfaces with BENEFEDS and/or multiple different Federal payroll systems; testing all interfaces; and certifying those transactions that must be HIPAA compliant before the end of the Start-Up Period (in order to achieve ATO).

· The awarded contractor must build and maintain HIPAA compliant interfaces with a number of OPM sponsored FEHB health plans and FEDVIP dental and vision plans to facilitate the transmission of eligible health care expenses from the carrier to the Contractor.

· There will be limited assistance from the Government in developing the required interfaces other than the provision of record layouts.

· The awarded contractor must also transfer information from BENEFEDS and/or various payroll systems on the same basis as the payrolls process paychecks.

· The awarded contractor will be responsible for certifying that web-based material provided to OPM that relates to the Federal Flexible Spending Account Program (FSAFEDS) is compliant with section 508 of the Rehabilitation Act of 1973 (as amended by the Workforce Investment Act of 1998).

We have addressed all of the above in detail in our submitted proposal, and intend to perform and comply if selected for award.

Signature:

Date:

Name:

Title:

Phone: