Attachment F - DHHA IT Security Risk Stratification Questionnaire.xlsx

The document is an IT Security Risk Stratification Questionnaire from Denver Health, focused on evaluating vendor-hosted or cloud-based IT systems with varying record volumes. The questionnaire categorizes data repositories into four record count tiers: over 200,000 records, 50,001-200,000 records, and 500-50,000 records, suggesting a comprehensive risk assessment methodology for potential technology vendors and cloud service providers.

While the specific details of the Sleep Apnea Testing Solution are not fully elaborated in this attachment, the document appears to be a supplementary tool for Denver Health's vendor evaluation process, likely used to assess the security risks and compliance of potential IT solutions. The tiered approach indicates a nuanced method of stratifying vendor risk based on the volume of records managed, which could be critical in selecting a vendor for sensitive healthcare-related technology solutions in the Colorado state market.