ATTM 013.xlsx
XLSX spreadsheet 28 KB Posted
- Attached to
- MEDICAID CLINICAL DATA EXCHANGE
- Solicitation number
- 5400030026
- Issued by
- Richland County, South Carolina
About this file
Summary of ATTM 013.xlsx - RFP Vendor Requirements
This file is a vendor requirements questionnaire for the South Carolina Department of Health and Human Services' Medicaid Clinical Data Exchange procurement. The RFP requests a comprehensive system solution to capture, track, and distribute admission, discharge, and transfer (ADT) events and bed capacity data from acute care facilities to five contracted Managed Care Organizations (MCOs) and SCDHHS. The system must support seamless integration with upstream acute care facility EHR systems and downstream third-party partner systems, with capabilities for member matching against the SCDHHS beneficiary list, near real-time notification delivery, and data routing that excludes non-matched and Fee for Service beneficiaries from MCO distribution. The implementation period is approximately one year, with the contract term commencing March 5, 2027 and extending through March 4, 2034, comprising a four-year base period plus three optional one-year renewals. The non-mandatory pre-proposal conference is scheduled for August 21, 2026, with questions due August 25, 2026 at 12:00 PM EST, proposals due October 15, 2026, and anticipated award on February 23, 2027.
The vendor requirements document contains 47 detailed specifications organized across functional, integration and interoperability, compliance and security, reporting and analytics, and technical requirements categories. Key requirements include support for HL7 FHIR standards and common API/REST protocols; HIPAA and Medicaid Safeguarding compliance; CMS regulatory adherence; comprehensive reporting and analytical capabilities including KPIs and audit trail functionality; real-time bed capacity tracking by facility type, status, and demographic attributes; multi-factor authentication and least privilege access controls; 24/7 technical support with defined Service Level Agreements; continuous security monitoring and annual penetration and disaster recovery testing; and data retention for a minimum of five years for audit purposes. The solution must incorporate data quality and timeliness analysis with the ability to identify patterns and source poor-quality submissions, interface with MES Core using approved protocols (REST API, SOAP, or SFTP), and maintain a dynamically scalable, resilient, geographically redundant cloud infrastructure with strong API capabilities and documented integration standards.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| Amendment 1.pdf | ||
| Amendment 2.pdf | ||
| PL 001.pdf | ||
| ATTM 003.pdf | ||
| ATTM 005.pdf | ||
| PL 005.pdf | ||
| ATTM 004.pdf | ||
| ATTM 025.pdf | ||
| ATTM 019.pdf | ||
| ATTM 018.pdf | ||
| ATTM 023.pdf | ||
| PL 004.pdf | ||
| ATTM 017.pdf | ||
| ATTM 010.pdf | ||
| PL 002.pdf | ||
| ATTM 002.pdf | ||
| ATTM 007.pdf | ||
| ATTM 022(b).xlsx | XLSX spreadsheet | |
| ATTM 020.pdf | ||
| ATTM 001.pdf | ||
| ATTM 008.xlsx | XLSX spreadsheet | |
| ATTM 014.pdf | ||
| ATTM 012.xlsx | XLSX spreadsheet | |
| ATTM 011.pdf | ||
| ATTM 021.pdf | ||
| ATTM 016.pdf | ||
| ATTM 009.xlsx | XLSX spreadsheet | |
| ATTM 022(a).pdf | ||
| _MCDE RFP.pdf | ||
| ATTM 015.pdf | ||
| ATTM 006.pdf | ||
| ATTM 024.pdf | ||
| PL 003.pdf |
Show all 33
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Sheet1
| ATTM 013 RFP Vendor Requirements |
| INSTRUCTIONS: Cells in Columns A, B, C, D, E, F and G are locked. Vendors shall only edit cells in Columns H and I. |
For each requirement, Vendor shall select in Column H whether the proposed solution meets the requirement out of the box, with configuration, with customization, or does not meet the requirement. Vendors shall provide further explanation to their response for each requirement in Column I. In the case the requirement response type is "Does Not Meet", provide potential work arounds or if this is included in a future software release as an enhancement. For all other response types, provide further explanation "How the requirement is supported using the system".
| #ID | TOPIC | Type | CATEGORY | SUB-CATEGORY | Goal Traceability | REQUIREMENT | RESPONSE | RESPONSE EXPLANATION |
| 1 | Business Requirement | Vendor System | Functional | ADT Tracking | Improve medical outcomes for SC Medicaid Patients | Support seamless integration, tracking, and audit of Medicaid Beneficiary admission, discharge, and transfer (ADT) event notification data from "upstream" acute care facility EHR systems and passing that data to "downstream" third party partner systems. |
How does your solution identify, manage, distribute, and provide other system access to ADT events?
2 Business Requirement Vendor System Functional ADT Tracking Improve care coordination for a single patient episode Capture ADT events from acute care facilities (hospitals, inpatient/ED, urgent care, immediate care, psychiatric residential treatment facilities, etc.).
What types of events, beyond ADT, can the system solution capture from acute facilities?
3 Business Requirement Vendor System Functional Encounter Tracking Improve care coordination for a single patient episode Capture encounter data from acute care facilities and ambulatory facilities.
What types of events, beyond encounter data, can the system solution capture in the interest of improving care-coordination for a single episode?
4 Business Requirement Vendor System Functional Member Mapping Improve medical outcomes for SC Medicaid Patients Match Beneficiaries once received from "upstream" systems against the SCDHHS list of Beneficiaries and route the ADT/Encounter event notification data to the corresponding managed care organizations (MCOs) while excluding non-matched and Fee for Service (FFS) Beneficiaries from being routed to any MCO.
Please explain how you map member data to existing MCOs? What data validations and data matching does your solution cover? How does your system handle proper routing of FFS related information?
5 Business Requirement Vendor System Functional Notifications Improve care coordination for a single patient episode Support the ability to send details such as events and/or notifications in near real-time to MCOs and/or SCDHHS.
How does your solution handle the ability to store and forward notifications?
| 6 | Business Requirement | Vendor System | Functional | Reporting Capabilities | Improve medical outcomes for SC Medicaid Patients | Describe any analytical capabilities to assess patient risk, improve patient outcomes and overall healthcare efficiency that your solution provides. |
| 7 | Business Requirement | Vendor System | Functional | Administration | Improve medical outcomes for SC Medicaid Patients | Support the ability to perform administrative functions such as adding users, system configuration, and patching capabilities. |
What configurable attributes does your solution provide?
8 Business Requirement Vendor System Integration & Interoperability SOA Support Improve medical outcomes for SC Medicaid Patients The selected vendor system shall support common API/REST standards/protocols and have well documented APIs for third-party system integrations.
What data integration and API standards does the solution support and leverage?
9 Business Requirement Vendor System Integration & Interoperability Covered Entity Integrations Improve medical outcomes for SC Medicaid Patients Support integrations that are HIPAA and Medicaid Safeguarding compliant.
Provide a list of all MCOs and EMR/EHR system partners currently integrated for the State of South Carolina.
10 Business Requirement Vendor System Integration & Interoperability Third-Party Integration Improve medical outcomes for SC Medicaid Patients Interface with SCDHHS-MES Core platform providing ADT event data using HL7 FHIR standards (Da Vinci Notification Bundle) via approved interface protocols which include: Representational State Transfer (REST) API, Simple Object Access Protocol (SOAP) interface, or file-based interface using SFTP.
Does your system utilize HL7 FHIR standards? If not, what standards do you utilize?
11 Business Requirement Vendor System Integration & Interoperability Third-Party Integration Improve care coordination for a single patient episode Support interconnectivity between states Health Information Exchanges (HIE) and data aggregators to capture ADT event notifications when Beneficiaries visit facilities outside of South Carolina.
What States outside of South Carolina is your solution capable of integrating with?
12 Business Requirement Vendor System Compliance and Security Compliance Improve medical outcomes for SC Medicaid Patients Adhere to and remain in compliance with:
- The Centers for Medicare and Medicaid Services (CMS) regulations and prescribed architecture guidelines.
- The HL7 FHIR standards for ADT event notification messaging guidelines
What ADT Event Notification standards does the solution support and leverage? Is the solution certified by CMS leveraging architecture guidelines?
13 Business Requirement Vendor System Compliance and Security Security Improve medical outcomes for SC Medicaid Patients Develop, maintain, and provide SCDHHS a security and privacy program with effective security and privacy controls compliant with recognized security operating controls, including but not limited to:
- Health Insurance Portability and Accountability Act (HIPAA)
- CMS Acceptable Risk Controls for Affordable Care Act (ACA), Medicaid, and Partner Entities (ARC-AMPE)
- National Institute of Standards and Technology (NIST) Special Publication 800 series Recommended Security Controls for Federal Information Systems and Organizations
- South Carolina Division of Information Security (SCDIS) 201 Information Security and Privacy Incident Response Standards
- Federal Risk and Authorization Management Program (FedRAMP)
- System must be Section 508 compliant.
| 14 | Business Requirement | Vendor System | Compliance and Security | Security | Improve medical outcomes for SC Medicaid Patients | Maintain a secure system through continuous security monitoring, patching, and alignment to industry best practices with regards to security and privacy, as well as document and provide to SCDHHS the methodology used to defend against, identify and respond to and mitigate risk of any breach, loss, or unauthorized/improper access/use/disclosure of government data or information systems that support government data, to include notification of such to SCDHHS. |
| 15 | Business Requirement | Vendor System | Reporting & Analytics | Reporting Capabilities | Improve medical outcomes for SC Medicaid Patients | Provide a list of standard reports requiring little to no customizations; provide reporting tool allowing for generation of custom reports; provide the ability to view analytic metrics and Key Performance Indicators (KPIs); provide the ability to sort, filter, schedule, subscribe, and deliver reports, as well as the ability to export report data. |
| 16 | Business Requirement | Vendor System | Reporting & Analytics | Audit Trails & Logging | Improve medical outcomes for SC Medicaid Patients | Provide detailed audit trails for all actions within the system and provide the ability to review and export audit logs for compliance purposes. |
| 17 | Technical Requirements | Vendor System | System Architecture | Technology | Improve medical outcomes for SC Medicaid Patients | Provide a solution with a dynamically scalable, resilient, geographically redundant, high availability cloud infrastructure, with strong API interface capabilities. |
| 18 | Technical Requirements | Vendor System | Data Management | Data Storage | Improve preparedness in case of a disaster | Support data retention policies compliant with regulatory requirements; support weekly automated backups of application and business data domains; provide the ability to classify data domains and attributes by sensitivity and importance; and provide SCDHHS with Standard Operating Procedures (SOPs) in case of system failures and data loss. |
| 19 | Technical Requirements | Vendor System | Performance & Reliability | System Performance | Prevent excessive delays to receiving care | Ensure responsive user interfaces and data interfaces with exceptional response times. |
| 20 | Technical Requirements | Vendor System | Performance & Reliability | System Performance | Improve medical outcomes for SC Medicaid Patients | Capture and monitor performance telemetry (i.e., CPU, memory, storage, bandwidth) continuously optimizing performance and proactively alert system admins of any unexpected service outage or performance degradation. |
| 21 | Technical Requirements | Vendor System | Support & Maintenance | Technical Support | Improve medical outcomes for SC Medicaid Patients | Define and provide Service Level Agreements (SLA) policy and response times for different levels of support requests; provide 24/7 technical support. |
| 22 | Technical Requirements | Vendor System | Support & Maintenance | Software Updates | Improve medical outcomes for SC Medicaid Patients | Provide clearly defined processes for standard software releases, release cycles, and release notes; as well as processes for emergency software updates. |
| 23 | Technical Requirements | Vendor System | Security & Privacy | Security Measures | Improve medical outcomes for SC Medicaid Patients | Require Multi-Factor Authentication for system access. |
If applicable, please describe your access control measures.
| 24 | Technical Requirements | Vendor System | Security & Privacy | Security Measures | Improve medical outcomes for SC Medicaid Patients | Support implementation of access control based upon least privileged principal. |
| 25 | Technical Requirements | Vendor System | Training & Documentation | Training | Improve medical outcomes for SC Medicaid Patients | Provide frequent accessible training programs and materials, webinars, and eLearning courses; FAQs and troubleshooting guides for common issues; as well as both user and administrative documentation |
| 26 | Business Requirement | Vendor System | Data Management | Third-Party Integration | Improve care coordination for a single patient episode | Support the ability to verify admission, discharge, and transfer (ADT) information by running data quality checks against historical records. |
Can you describe how your system would handle situations where member details contained within an ADT notification do not match historical records?
Does your system have any data quality checks or matching responsibility? If so, are you using national standard quality metrics? Which ones?
27 Business Requirement Vendor System Data Management Bed Capacity Tracking Improve preparedness in case of a disaster Record details related to acute care facility Beds in real time, including but not limited to:
- Total number of available Beds by acute care facility (e.g., hospital inpatient/ED, psychiatric residential treatment facilities, etc.)
- Total number of available Beds by type (e.g., in-state, out-of-state, Medicaid, Medicare, emergency, maternity, inpatient, rehabilitation, and psychiatric)
- Bed Status (e.g., closed, occupied, isolated, etc.)
Are there any other details surrounding Bed capacity tracking that the solution can capture such as gender assignments for psychiatric residential treatment facilities (PRTFs)?
| 28 | Business Requirement | Vendor System | Integration & Interoperability | Dental Encounters | Prevent excessive delays to receiving care | Provide the ability to notify a Medicaid Member's MCO in real time when a patient presents at a acute care facility or doctor's office with a non-trauma, dental related primary diagnosis. |
| 29 | Business Requirement | Vendor System | Functional | Dental Encounters | Prevent excessive delays to receiving care | Provide the ability to send notifications in real-time to dental plans and/or SCDHHS when a patient presents at an acute care facility with a non-trauma related primary diagnosis pertaining to dental conditions. |
How does your solution handle the ability to store and route appropriate notifications to dental plan providers based on diagnosis?
30 Business Requirement Vendor System Functional Bed Capacity Tracking Improve preparedness in case of a disaster Provide the ability to send Bed Capacity Tracking data in real-time to third party integrators such as Department of Public Health (DPH).
How does your solution handle the ability to store and send Bed Capacity Tracking information to SCDHHS and DPH?
| 31 | Technical Requirements | Vendor System | Non-Functional | Interfaces | Improve medical outcomes for SC Medicaid Patients | The Contractor's system shall interface with MES Core to exchange SCDHHS-specific data via approved interface protocols which include: Representational State Transfer (REST) API, Simple Object Access Protocol (SOAP) interface, or file-based interface using SFTP. |
| 32 | Technical Requirements | Vendor System | Non-Functional | Interfaces | Improve medical outcomes for SC Medicaid Patients | The Contractor shall incorporate additional data elements needed for required data feeds by appending SCDHHS-approved elements to the approved standards and interface protocols for each feed. |
| 33 | Technical Requirements | Vendor System | Non-Functional | Interfaces | Improve medical outcomes for SC Medicaid Patients | The Contractor shall work with MES Core to obtain Medicaid Member enrollment and MCO assignment data from MMIS related to Beneficiaries. |
| 34 | Technical Requirements | Vendor System | Non-Functional | Interfaces | Improve medical outcomes for SC Medicaid Patients | The Contractor shall interface with MES Core to exchange data using FHIR standards, as applicable. |
| 35 | Technical Requirements | Vendor System | Non-Functional | Data Quality | Improve medical outcomes for SC Medicaid Patients | Contractor shall have the capability to analyze the quality of data submitted by providers. In cases where a quality issue exists, the contractor shall have the ability to track patterns of poor quality and identify the source. |
| 36 | Technical Requirements | Vendor System | Non-Functional | Security | Improve medical outcomes for SC Medicaid Patients | The system shall maintain compliance with state and federal data security requirements as outlined in the approved System Security Plan (Deliverable D-032). |
| 37 | Technical Requirements | Vendor System | Non-Functional | Security | Improve medical outcomes for SC Medicaid Patients | The Contractor shall develop and provide an SCDHHS currently adopted version of ARC-AMPE and HIPAA-compliant System Security Plan (SSP) which outlines the safeguards implemented to support the protection of government data. |
| 38 | Technical Requirements | Vendor System | Non-Functional | Security | Improve preparedness in case of a disaster | The system shall undergo security and penetration testing at least annually following an approved plan. |
| 39 | Technical Requirements | Vendor System | Non-Functional | Security | Improve medical outcomes for SC Medicaid Patients | The Contractor shall maintain a secure system through continuous security monitoring, patching, and alignment to industry best practices with regard to security and privacy. |
| 40 | Technical Requirements | Vendor System | Non-Functional | Security | Improve preparedness in case of a disaster | The system shall undergo disaster recovery and business continuity testing at least annually following an approved plan. |
| 41 | Technical Requirements | Vendor System | Non-Functional | Security | Improve preparedness in case of a disaster | The Contractor shall provide SCDHHS Office of Cybersecurity (OCS) all environments vulnerability scans per ARC-AMPE requirements. This requirement includes third-party programs connected to the SCDHHS enterprise. |
| 42 | Technical Requirements | Vendor System | Non-Functional | Security | Improve preparedness in case of a disaster | The Contractor shall document the methodology used to defend against, identify and respond to, and mitigate the risk of any breach, loss, or unauthorized/improper access/use/disclosure of government data or information systems that support government data, to include notification of such to SCDHHS. |
| 43 | Technical Requirements | Vendor System | Non-Functional | Security | Improve medical outcomes for SC Medicaid Patients | The Contractor shall work with SCDHHS to execute any Plans of Actions & Milestones (POA&Ms) identified in the Independent Assessment of Security and Privacy Approach section. |
| 44 | Technical Requirements | Vendor System | Non-Functional | Regulatory | Improve medical outcomes for SC Medicaid Patients | The Contractor shall, through both system and business operations, support the State in achieving the MITA 7 Standards and Conditions: |
-Modularity Standard -MITA Condition -Industry Standards Condition -Leverage Condition -Business Results Condition -Reporting Condition -Interoperability Condition
| 45 | Technical Requirements | Vendor System | Non-Functional | Data Quality | Improve medical outcomes for SC Medicaid Patients | Contractor shall have the ability to analyze the timeliness of the data submitted by the providers. In cases where a timeliness issue exists, the contractor shall have the ability to track patterns of delayed input and identify the source. |
| 46 | Business Requirement | Vendor System | Functional | Bed Capacity Tracking | Improve care coordination for a single patient episode | Record details related to Psychiatric Residential Treatment Facility (PRTF) beds in near real-time, including but not limited to: |
- Total number of available beds
- Total number of available beds by floor
- Total number of available beds by gender
- Total number of avaialable beds by age
Are there any other details surrounding PRTF beds that the solution can capture?
47 Business Requirement Vendor System Data Management Data Storage Data retention to meet audit requirements. The Contractor shall retain Event data acquired from Providers' systems for at least five (5) years for audit purposes.
File details come from the government source that posted it. Updated .