ATTM 013.xlsx

XLSX spreadsheet 28 KB Posted

Attached to
MEDICAID CLINICAL DATA EXCHANGE
Solicitation number
5400030026
Issued by
Richland County, South Carolina

About this file

Summary of ATTM 013.xlsx - RFP Vendor Requirements

This file is a vendor requirements questionnaire for the South Carolina Department of Health and Human Services' Medicaid Clinical Data Exchange procurement. The RFP requests a comprehensive system solution to capture, track, and distribute admission, discharge, and transfer (ADT) events and bed capacity data from acute care facilities to five contracted Managed Care Organizations (MCOs) and SCDHHS. The system must support seamless integration with upstream acute care facility EHR systems and downstream third-party partner systems, with capabilities for member matching against the SCDHHS beneficiary list, near real-time notification delivery, and data routing that excludes non-matched and Fee for Service beneficiaries from MCO distribution. The implementation period is approximately one year, with the contract term commencing March 5, 2027 and extending through March 4, 2034, comprising a four-year base period plus three optional one-year renewals. The non-mandatory pre-proposal conference is scheduled for August 21, 2026, with questions due August 25, 2026 at 12:00 PM EST, proposals due October 15, 2026, and anticipated award on February 23, 2027.

The vendor requirements document contains 47 detailed specifications organized across functional, integration and interoperability, compliance and security, reporting and analytics, and technical requirements categories. Key requirements include support for HL7 FHIR standards and common API/REST protocols; HIPAA and Medicaid Safeguarding compliance; CMS regulatory adherence; comprehensive reporting and analytical capabilities including KPIs and audit trail functionality; real-time bed capacity tracking by facility type, status, and demographic attributes; multi-factor authentication and least privilege access controls; 24/7 technical support with defined Service Level Agreements; continuous security monitoring and annual penetration and disaster recovery testing; and data retention for a minimum of five years for audit purposes. The solution must incorporate data quality and timeliness analysis with the ability to identify patterns and source poor-quality submissions, interface with MES Core using approved protocols (REST API, SOAP, or SFTP), and maintain a dynamically scalable, resilient, geographically redundant cloud infrastructure with strong API capabilities and documented integration standards.

View the file

Other files

File Type Posted
Amendment 1.pdf PDF
Amendment 2.pdf PDF
PL 001.pdf PDF
ATTM 003.pdf PDF
ATTM 005.pdf PDF
PL 005.pdf PDF
ATTM 004.pdf PDF
ATTM 025.pdf PDF
ATTM 019.pdf PDF
ATTM 018.pdf PDF
ATTM 023.pdf PDF
PL 004.pdf PDF
ATTM 017.pdf PDF
ATTM 010.pdf PDF
PL 002.pdf PDF
ATTM 002.pdf PDF
ATTM 007.pdf PDF
ATTM 022(b).xlsx XLSX spreadsheet
ATTM 020.pdf PDF
ATTM 001.pdf PDF
ATTM 008.xlsx XLSX spreadsheet
ATTM 014.pdf PDF
ATTM 012.xlsx XLSX spreadsheet
ATTM 011.pdf PDF
ATTM 021.pdf PDF
ATTM 016.pdf PDF
ATTM 009.xlsx XLSX spreadsheet
ATTM 022(a).pdf PDF
_MCDE RFP.pdf PDF
ATTM 015.pdf PDF
ATTM 006.pdf PDF
ATTM 024.pdf PDF
PL 003.pdf PDF
Show all 33

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Sheet1

ATTM 013 RFP Vendor Requirements
INSTRUCTIONS: Cells in Columns A, B, C, D, E, F and G are locked. Vendors shall only edit cells in Columns H and I.

For each requirement, Vendor shall select in Column H whether the proposed solution meets the requirement out of the box, with configuration, with customization, or does not meet the requirement. Vendors shall provide further explanation to their response for each requirement in Column I. In the case the requirement response type is "Does Not Meet", provide potential work arounds or if this is included in a future software release as an enhancement. For all other response types, provide further explanation "How the requirement is supported using the system".

#IDTOPICTypeCATEGORYSUB-CATEGORYGoal TraceabilityREQUIREMENTRESPONSERESPONSE EXPLANATION
1Business RequirementVendor SystemFunctionalADT TrackingImprove medical outcomes for SC Medicaid PatientsSupport seamless integration, tracking, and audit of Medicaid Beneficiary admission, discharge, and transfer (ADT) event notification data from "upstream" acute care facility EHR systems and passing that data to "downstream" third party partner systems.

How does your solution identify, manage, distribute, and provide other system access to ADT events?

2 Business Requirement Vendor System Functional ADT Tracking Improve care coordination for a single patient episode Capture ADT events from acute care facilities (hospitals, inpatient/ED, urgent care, immediate care, psychiatric residential treatment facilities, etc.).

What types of events, beyond ADT, can the system solution capture from acute facilities?

3 Business Requirement Vendor System Functional Encounter Tracking Improve care coordination for a single patient episode Capture encounter data from acute care facilities and ambulatory facilities.

What types of events, beyond encounter data, can the system solution capture in the interest of improving care-coordination for a single episode?

4 Business Requirement Vendor System Functional Member Mapping Improve medical outcomes for SC Medicaid Patients Match Beneficiaries once received from "upstream" systems against the SCDHHS list of Beneficiaries and route the ADT/Encounter event notification data to the corresponding managed care organizations (MCOs) while excluding non-matched and Fee for Service (FFS) Beneficiaries from being routed to any MCO.

Please explain how you map member data to existing MCOs? What data validations and data matching does your solution cover? How does your system handle proper routing of FFS related information?

5 Business Requirement Vendor System Functional Notifications Improve care coordination for a single patient episode Support the ability to send details such as events and/or notifications in near real-time to MCOs and/or SCDHHS.

How does your solution handle the ability to store and forward notifications?

6Business RequirementVendor SystemFunctionalReporting CapabilitiesImprove medical outcomes for SC Medicaid PatientsDescribe any analytical capabilities to assess patient risk, improve patient outcomes and overall healthcare efficiency that your solution provides.
7Business RequirementVendor SystemFunctionalAdministrationImprove medical outcomes for SC Medicaid PatientsSupport the ability to perform administrative functions such as adding users, system configuration, and patching capabilities.

What configurable attributes does your solution provide?

8 Business Requirement Vendor System Integration & Interoperability SOA Support Improve medical outcomes for SC Medicaid Patients The selected vendor system shall support common API/REST standards/protocols and have well documented APIs for third-party system integrations.

What data integration and API standards does the solution support and leverage?

9 Business Requirement Vendor System Integration & Interoperability Covered Entity Integrations Improve medical outcomes for SC Medicaid Patients Support integrations that are HIPAA and Medicaid Safeguarding compliant.

Provide a list of all MCOs and EMR/EHR system partners currently integrated for the State of South Carolina.

10 Business Requirement Vendor System Integration & Interoperability Third-Party Integration Improve medical outcomes for SC Medicaid Patients Interface with SCDHHS-MES Core platform providing ADT event data using HL7 FHIR standards (Da Vinci Notification Bundle) via approved interface protocols which include: Representational State Transfer (REST) API, Simple Object Access Protocol (SOAP) interface, or file-based interface using SFTP.

Does your system utilize HL7 FHIR standards? If not, what standards do you utilize?

11 Business Requirement Vendor System Integration & Interoperability Third-Party Integration Improve care coordination for a single patient episode Support interconnectivity between states Health Information Exchanges (HIE) and data aggregators to capture ADT event notifications when Beneficiaries visit facilities outside of South Carolina.

What States outside of South Carolina is your solution capable of integrating with?

12 Business Requirement Vendor System Compliance and Security Compliance Improve medical outcomes for SC Medicaid Patients Adhere to and remain in compliance with:

- The Centers for Medicare and Medicaid Services (CMS) regulations and prescribed architecture guidelines.

- The HL7 FHIR standards for ADT event notification messaging guidelines

What ADT Event Notification standards does the solution support and leverage? Is the solution certified by CMS leveraging architecture guidelines?

13 Business Requirement Vendor System Compliance and Security Security Improve medical outcomes for SC Medicaid Patients Develop, maintain, and provide SCDHHS a security and privacy program with effective security and privacy controls compliant with recognized security operating controls, including but not limited to:

- Health Insurance Portability and Accountability Act (HIPAA)

- CMS Acceptable Risk Controls for Affordable Care Act (ACA), Medicaid, and Partner Entities (ARC-AMPE)

- National Institute of Standards and Technology (NIST) Special Publication 800 series Recommended Security Controls for Federal Information Systems and Organizations

- South Carolina Division of Information Security (SCDIS) 201 Information Security and Privacy Incident Response Standards

- Federal Risk and Authorization Management Program (FedRAMP)

- System must be Section 508 compliant.

14Business RequirementVendor SystemCompliance and SecuritySecurityImprove medical outcomes for SC Medicaid PatientsMaintain a secure system through continuous security monitoring, patching, and alignment to industry best practices with regards to security and privacy, as well as document and provide to SCDHHS the methodology used to defend against, identify and respond to and mitigate risk of any breach, loss, or unauthorized/improper access/use/disclosure of government data or information systems that support government data, to include notification of such to SCDHHS.
15Business RequirementVendor SystemReporting & AnalyticsReporting CapabilitiesImprove medical outcomes for SC Medicaid PatientsProvide a list of standard reports requiring little to no customizations; provide reporting tool allowing for generation of custom reports; provide the ability to view analytic metrics and Key Performance Indicators (KPIs); provide the ability to sort, filter, schedule, subscribe, and deliver reports, as well as the ability to export report data.
16Business RequirementVendor SystemReporting & AnalyticsAudit Trails & LoggingImprove medical outcomes for SC Medicaid PatientsProvide detailed audit trails for all actions within the system and provide the ability to review and export audit logs for compliance purposes.
17Technical RequirementsVendor SystemSystem ArchitectureTechnologyImprove medical outcomes for SC Medicaid PatientsProvide a solution with a dynamically scalable, resilient, geographically redundant, high availability cloud infrastructure, with strong API interface capabilities.
18Technical RequirementsVendor SystemData ManagementData StorageImprove preparedness in case of a disasterSupport data retention policies compliant with regulatory requirements; support weekly automated backups of application and business data domains; provide the ability to classify data domains and attributes by sensitivity and importance; and provide SCDHHS with Standard Operating Procedures (SOPs) in case of system failures and data loss.
19Technical RequirementsVendor SystemPerformance & ReliabilitySystem PerformancePrevent excessive delays to receiving careEnsure responsive user interfaces and data interfaces with exceptional response times.
20Technical RequirementsVendor SystemPerformance & ReliabilitySystem PerformanceImprove medical outcomes for SC Medicaid PatientsCapture and monitor performance telemetry (i.e., CPU, memory, storage, bandwidth) continuously optimizing performance and proactively alert system admins of any unexpected service outage or performance degradation.
21Technical RequirementsVendor SystemSupport & MaintenanceTechnical SupportImprove medical outcomes for SC Medicaid PatientsDefine and provide Service Level Agreements (SLA) policy and response times for different levels of support requests; provide 24/7 technical support.
22Technical RequirementsVendor SystemSupport & MaintenanceSoftware UpdatesImprove medical outcomes for SC Medicaid PatientsProvide clearly defined processes for standard software releases, release cycles, and release notes; as well as processes for emergency software updates.
23Technical RequirementsVendor SystemSecurity & PrivacySecurity MeasuresImprove medical outcomes for SC Medicaid PatientsRequire Multi-Factor Authentication for system access.

If applicable, please describe your access control measures.

24Technical RequirementsVendor SystemSecurity & PrivacySecurity MeasuresImprove medical outcomes for SC Medicaid PatientsSupport implementation of access control based upon least privileged principal.
25Technical RequirementsVendor SystemTraining & DocumentationTrainingImprove medical outcomes for SC Medicaid PatientsProvide frequent accessible training programs and materials, webinars, and eLearning courses; FAQs and troubleshooting guides for common issues; as well as both user and administrative documentation
26Business RequirementVendor SystemData ManagementThird-Party IntegrationImprove care coordination for a single patient episodeSupport the ability to verify admission, discharge, and transfer (ADT) information by running data quality checks against historical records.

Can you describe how your system would handle situations where member details contained within an ADT notification do not match historical records?

Does your system have any data quality checks or matching responsibility? If so, are you using national standard quality metrics? Which ones?

27 Business Requirement Vendor System Data Management Bed Capacity Tracking Improve preparedness in case of a disaster Record details related to acute care facility Beds in real time, including but not limited to:

- Total number of available Beds by acute care facility (e.g., hospital inpatient/ED, psychiatric residential treatment facilities, etc.)

- Total number of available Beds by type (e.g., in-state, out-of-state, Medicaid, Medicare, emergency, maternity, inpatient, rehabilitation, and psychiatric)

- Bed Status (e.g., closed, occupied, isolated, etc.)

Are there any other details surrounding Bed capacity tracking that the solution can capture such as gender assignments for psychiatric residential treatment facilities (PRTFs)?

28Business RequirementVendor SystemIntegration & InteroperabilityDental EncountersPrevent excessive delays to receiving careProvide the ability to notify a Medicaid Member's MCO in real time when a patient presents at a acute care facility or doctor's office with a non-trauma, dental related primary diagnosis.
29Business RequirementVendor SystemFunctionalDental EncountersPrevent excessive delays to receiving careProvide the ability to send notifications in real-time to dental plans and/or SCDHHS when a patient presents at an acute care facility with a non-trauma related primary diagnosis pertaining to dental conditions.

How does your solution handle the ability to store and route appropriate notifications to dental plan providers based on diagnosis?

30 Business Requirement Vendor System Functional Bed Capacity Tracking Improve preparedness in case of a disaster Provide the ability to send Bed Capacity Tracking data in real-time to third party integrators such as Department of Public Health (DPH).

How does your solution handle the ability to store and send Bed Capacity Tracking information to SCDHHS and DPH?

31Technical RequirementsVendor SystemNon-FunctionalInterfacesImprove medical outcomes for SC Medicaid PatientsThe Contractor's system shall interface with MES Core to exchange SCDHHS-specific data via approved interface protocols which include: Representational State Transfer (REST) API, Simple Object Access Protocol (SOAP) interface, or file-based interface using SFTP.
32Technical RequirementsVendor SystemNon-FunctionalInterfacesImprove medical outcomes for SC Medicaid PatientsThe Contractor shall incorporate additional data elements needed for required data feeds by appending SCDHHS-approved elements to the approved standards and interface protocols for each feed.
33Technical RequirementsVendor SystemNon-FunctionalInterfacesImprove medical outcomes for SC Medicaid PatientsThe Contractor shall work with MES Core to obtain Medicaid Member enrollment and MCO assignment data from MMIS related to Beneficiaries.
34Technical RequirementsVendor SystemNon-FunctionalInterfacesImprove medical outcomes for SC Medicaid PatientsThe Contractor shall interface with MES Core to exchange data using FHIR standards, as applicable.
35Technical RequirementsVendor SystemNon-FunctionalData QualityImprove medical outcomes for SC Medicaid PatientsContractor shall have the capability to analyze the quality of data submitted by providers. In cases where a quality issue exists, the contractor shall have the ability to track patterns of poor quality and identify the source.
36Technical RequirementsVendor SystemNon-FunctionalSecurityImprove medical outcomes for SC Medicaid PatientsThe system shall maintain compliance with state and federal data security requirements as outlined in the approved System Security Plan (Deliverable D-032).
37Technical RequirementsVendor SystemNon-FunctionalSecurityImprove medical outcomes for SC Medicaid PatientsThe Contractor shall develop and provide an SCDHHS currently adopted version of ARC-AMPE and HIPAA-compliant System Security Plan (SSP) which outlines the safeguards implemented to support the protection of government data.
38Technical RequirementsVendor SystemNon-FunctionalSecurityImprove preparedness in case of a disasterThe system shall undergo security and penetration testing at least annually following an approved plan.
39Technical RequirementsVendor SystemNon-FunctionalSecurityImprove medical outcomes for SC Medicaid PatientsThe Contractor shall maintain a secure system through continuous security monitoring, patching, and alignment to industry best practices with regard to security and privacy.
40Technical RequirementsVendor SystemNon-FunctionalSecurityImprove preparedness in case of a disasterThe system shall undergo disaster recovery and business continuity testing at least annually following an approved plan.
41Technical RequirementsVendor SystemNon-FunctionalSecurityImprove preparedness in case of a disasterThe Contractor shall provide SCDHHS Office of Cybersecurity (OCS) all environments vulnerability scans per ARC-AMPE requirements. This requirement includes third-party programs connected to the SCDHHS enterprise.
42Technical RequirementsVendor SystemNon-FunctionalSecurityImprove preparedness in case of a disasterThe Contractor shall document the methodology used to defend against, identify and respond to, and mitigate the risk of any breach, loss, or unauthorized/improper access/use/disclosure of government data or information systems that support government data, to include notification of such to SCDHHS.
43Technical RequirementsVendor SystemNon-FunctionalSecurityImprove medical outcomes for SC Medicaid PatientsThe Contractor shall work with SCDHHS to execute any Plans of Actions & Milestones (POA&Ms) identified in the Independent Assessment of Security and Privacy Approach section.
44Technical RequirementsVendor SystemNon-FunctionalRegulatoryImprove medical outcomes for SC Medicaid PatientsThe Contractor shall, through both system and business operations, support the State in achieving the MITA 7 Standards and Conditions:

-Modularity Standard -MITA Condition -Industry Standards Condition -Leverage Condition -Business Results Condition -Reporting Condition -Interoperability Condition

45Technical RequirementsVendor SystemNon-FunctionalData QualityImprove medical outcomes for SC Medicaid PatientsContractor shall have the ability to analyze the timeliness of the data submitted by the providers. In cases where a timeliness issue exists, the contractor shall have the ability to track patterns of delayed input and identify the source.
46Business RequirementVendor SystemFunctionalBed Capacity TrackingImprove care coordination for a single patient episodeRecord details related to Psychiatric Residential Treatment Facility (PRTF) beds in near real-time, including but not limited to:

- Total number of available beds

- Total number of available beds by floor

- Total number of available beds by gender

- Total number of avaialable beds by age

Are there any other details surrounding PRTF beds that the solution can capture?

47 Business Requirement Vendor System Data Management Data Storage Data retention to meet audit requirements. The Contractor shall retain Event data acquired from Providers' systems for at least five (5) years for audit purposes.

File details come from the government source that posted it. Updated .