CN-680000-ME205-A3.pdf

AHCA CONTRACT NO. MED205

AMENDMENT NO. 3

AHCA Contract No. MED205, Amendment No. 3, Page 1 of 3 April 2020

THIS CONTRACT, entered into between the STATE OF FLORIDA, AGENCY FOR HEALTH CARE ADMINISTRATION, hereinafter referred to as the "Agency" and ACCENTURE, LLP, hereinafter referred to as the "Vendor," is hereby amended as follows:

1. Attachment I, Scope of Services, Section B.4., Services Provided by the IS/IP Vendor, Subsection D., Integration Platform Solution, Item 5., Security, Table 5: Security Requirements, Req ID IP.5.22, is hereby amended to now read as follows:

IP.5.22 Security

The Vendor shall provide risk assessments and security audit reports which shall be completed on an annual basis and when additions or changes to functionality impact the security framework, architecture, or when a new vulnerability exists that cannot be mitigated within agreed upon timeframes.

The reports shall be delivered to the Agency by the 10th each month performed as part of PP-5: System Security Plan.

2. Attachment I, Scope of Services, Section B.4., Services Provided by the IS/IP Vendor, Requirements, Req ID IP.5.23, is hereby amended to now read as follows:

IP.5.23 Security

The Vendor shall perform penetration testing within two (2) months prior to implementation. Penetration testing shall also be performed on an annual basis and when a new vulnerability is identified which cannot be mitigated within agreed upon timeframes and when additions or changes to functionality impact the security framework. As part of PP-5:

System Security Plan, the annual Penetration Test Report results shall be provided to the Agency within forty (40) days following the end of each calendar year or by the 10th business day of the month after the need for each penetration test is identified, and any major or critical vulnerabilities mitigated.

3. Attachment I, Scope of Services, Section B.4., Services Provided by the IS/IP Vendor, Requirements, Req ID IP.5.30, is hereby amended to now read as follows:

REMAINDER OF PAGE INTENTIONALLY LEFT BLANK

DocuSign Envelope ID: CB3B805B-0119-4E43-8AD8-27E1FD455207

AHCA Contract No. MED205, Amendment No. 3, Page 2 of 3

IP.5.30 Security

The Vendor shall monitor system activity and detect and prevent intrusion, hacking, unusual activity, or system compromise. The Vendor shall immediately report any incidents of such, to the Agency. Only authorized Vendor personnel may override system security alerts and edits. The one (1) hour notification requirement is in addition to the twenty-four (24) hour notification requirement for security incident reporting found in Attachment II-A, Business Associate Agreement.

4. Attachment I, Scope of Services, Section B.4., Services Provided by the IS/IP Vendor, Subsection D., Integration Platform Solution, Item 11., Hosting and Environments, Table 11: Hosting and Environments Requirements, Req ID IP.11.18, is hereby amended to now read as follows:

IP.11.18 Hosting and Environments

The Vendor shall provide to the Agency a monthly written summary of the identification, investigation, and resolution of all privacy and security incidents, and email notification within one (1) hour of discovery of any security breach.

Identification, investigation, and resolution procedures shall be approved by the Agency as part of the Vendor's HIPAA compliance procedures. The one (1) hour notification requirement is in addition to the twenty-four (24) hour notification requirement for security incident reporting found in Attachment II-A, Business Associate Agreement.

5. Attachment I, Scope of Services, Section B.4., Services Provided by the IS/IP Vendor, Subsection E., Integration Services Solution, Item 9., Performance Standards, Table 22:

Integration Services Performance Standards Requirements, Req ID IS.8.9, is hereby amended to now read as follows:

IS.8.9 Performance

The Vendor shall notify the Agency within one hour of identifying any physical or system security breach and work to plan and implement corrective action to mitigate the security incident. The one (1) hour notification requirement is in addition to the twenty-four (24) hour notification requirement for security incident reporting found in Attachment II-A, Business Associate Agreement.

AHCA Contract No. MED205, Amendment No. 3, Page 3 of 3

6. Attachment I, Scope of Services, Exhibit 5-A, Detailed Budget, is hereby deleted in its entirety and replaced with Attachment I, Scope of Services, Exhibit 5-B, Revised Detailed Budget. All references to Exhibit 5-A, shall hereinafter refer to Exhibit 5-B.

All provisions not in conflict with this Amendment are still in effect and are to be performed at the level specified in this Contract.

This Amendment and all its attachments are hereby made a part of this Contract.

This Amendment cannot be executed unless all previous Amendments to this Contract have been fully executed.

IN WITNESS WHEREOF, the Parties hereto have caused this eleven (11) page Amendment to be executed by their officials thereunto duly authorized. This Amendment is not valid until signed and dated by both Parties.

ACCENTURE, LLP STATE OF FLORIDA, AGENCY FOR

HEALTH CARE ADMINISTRATION

SIGNED

BY:

SIGNED

BY:

NAME: NAME:

TITLE: TITLE:

DATE: DATE:

List of Attachments included as part of this Amendment:

Specify Type Number Description Attachment I Exhibit 5-B Revised Detailed Budget (8 Pages)

Shireen Sackreiter

6/30/2021

Managing Director

6/30/2021

Simone Marstiller

Secretary

ATTACHMENT I

EXHIBIT 5-B

REVISED DETAILED BUDGET

AHCA Contract No. MED 205, Attachment I, Exhibit 5-B, Page 1 of 8

For costs related to Integrated Services and the development of the Integration Platform, the Vendor shall be paid based on the deliverables presented in Attachment I, Section B.10.B. Costs should be all inclusive, and the Vendor shall provide estimated hours and hourly costs for all resources supporting the deliverable(s).

The Vendor shall provide costs associated with each One-Time Deliverable and Workstream (A, B, C) Deliverable in Exhibit 5-B, Revised Detailed Budget.

For the deliverable titled WS-6: Bill of Materials, costs shall be presented for the effort to conduct the work at a fixed price and for the Bill of Materials. The Agency will determine whether the items on the Bill of Materials will be purchased and paid as a cost reimbursement to the Vendor, or whether the items will be purchased directly by the Agency. For those items purchased by the Vendor, these materials are to be purchased for and licensed to the Agency. Actual expenditures for specified items made on the Agency’s behalf will be reimbursed without profit or overhead for the term of the resulting Contract.

The sum of the deliverables under the category of Project Planning Costs cannot exceed more than fifteen percent (15%) of the cost of the Total Fixed Price Deliverables as shown in Attachment I, Exhibit 5-B, Detailed Budget.

For all fixed price deliverables, except PC-20: MES Vendor Turnover Plan, the Agency will pay the Vendor upon the completion and acceptance of deliverables in accordance with the deliverable schedule specified in the resulting Contract. Upon receipt and Agency approval of each deliverable, the Vendor shall be paid ninety percent (90%) of the total amount due for the deliverable. The Agency will pay the Vendor the remaining ten percent (10%) for all satisfactorily completed deliverables upon completion of the warranty term.

1. Monthly Fixed Price Costs for Operations and Maintenance (O&M):

The IS/IP Vendor shall provide their monthly fixed price cost for ongoing Operations and Maintenance of the Integration Platform as outlined in the requirements in Attachment I, Section B.4.D.12, Operations and Maintenance.

2. Fixed Price Task Orders:

Excluding initial fixed price Deliverables and fixed price costs for ongoing Operations and Maintenance as described in Section B.10, the Vendor shall provide services as described within Attachment I, Scope of Services, which shall be authorized as task orders. The Vendor’s work will be managed by the Agency Contract Manager who shall issue written authorization to work in the form of individual task orders. Each task order shall include: project or service requirements (Scope of Services); activities; activities the Vendor expects the Agency to perform; timelines; staffing plan; specific fixed price deliverables, milestones and delivery dates; bill of materials which will be purchased as a cost reimbursement to the Agency and paid as a cost reimbursement to the Vendor.

The Vendor is not authorized to initiate work on any task order prior to approval by the Agency. The Vendor is also not authorized to perform work on any task

REVISED DETAILED BUDGET

AHCA Contract No. MED 205, Attachment I, Exhibit 5-B, Page 2 of 8 order beyond the services completion date as identified in the individual task order unless approved by the Agency and reduced to writing in the form of a change order to the task order. Task orders shall be paid on a fixed price deliverable basis. The format and processes associated with task orders shall be developed during contract initiation activities. Deliverables completed for a task order shall be submitted to the Agency for review and approval, in accordance with the timeframes established in the applicable task order. The task order shall be signed by the Agency and the Vendor.

3. Summary Costs:

The Agency is constrained to a fiscal year budget (July 1 - June 30). On the SFY Summary tab, the Vendor shall enter total costs for each fixed deliverable by Workstream in the appropriate Fiscal Year column with the following constraints:

a. One-time deliverables are limited to FY 19-20.

b. Workstream Deliverable costs should not be represented in multiple

Fiscal Years regardless of the warranty term withhold. Any costs for updating and maintenance should be considered in the O&M costs or task orders.

c. Workstream Deliverable costs are limited to the first three state fiscal years (19-20, 20-21 and 21-22).

d. O&M Costs should not start before July 1 in State Fiscal Year 20-21.

DETAILED BUDGET

AHCA Contract No. MED 205, Attachment I, Exhibit 5-B, Page 3 of 8

State Fiscal Year Cost Summary ‐ Please list each Fixed Price Deliverable in the appropriate State Fiscal Year (July 1 ‐ June 30)

Project Planning FY 19‐20 FY 20‐21 FY 21‐22

PP-1: Project Management Plan (Includes MES Vendor Resource Management Plan)

$77,968 $0.00 $0.00

$0.00 $0.00

$0.00 $0.00

$0.00 $0.00

$0.00 $0.00 $0.00 $0.00

$0.00

$0.00 $0.00

$0.00

$0.00 $0.00

$0.00

$0.00 $0.00

$0.00

$0.00 $0.00

$0.00

$0.00 $0.00

$0.00

$0.00 $0.00

PP-2: Project Schedule $77,968 PP-3: High-Level Technical Design (Includes Technical Integration Plan) $114,013

PP-4: System Design Document (Includes Integration Architecture Specifications)

$114,013

PP-5: System Security Plan $207,289 PC-20: MES Vendor Turnover Plan $0.00

FOR ALL WS DELIVERABLES - ONLY CHOOSE ONE SFY PER DELIVERABLE. UPDATE COSTS SH

ORDERS

OULD BE CONSIDERED IN O&M AND/OR T ASK

Hardware & Software FY 19‐20 FY 20‐21 FY 21‐22

WS-6: Bill of Materials $1,363,791.79 $325,898.00 $337,628.00 $0.00 $0.00 $0.00

Requirements

WS-7: Requirements Document $420,858.69 $0.00 $0.00 $0.00 $0.00 $0.00

Design

WS-8: System Design Specification Document $283,162.32 $0.00 $0.00

$0.00

$0.00 $0.00 WS-9: Configuration Management and

Release Management Plan $114,013.45 $0.00 $0.00

AHCA Contract No. MED 205, Attachment I, Exhibit 5-B, Page 4 of 8

WS-10: Contingency Plan (for Disaster Recovery and Business Continuity) $204,558.49 $0.00 $0.00

$0.00 $0.00

$0.00

$0.00

$0.00 $0.00

$0.00

$0.00

$0.00 $0.00

WS-11: Interface Control Document $283,162.32 $0.00 $0.00 WS-12: Test Plan $555,676.13 $0.00 0.0..

Configure/Build

WS-13: Environmental Readiness Review (Includes Construction Completion Approval and Report)

$305,608.46 $0.00 $0.00 $0.00 $0.00 $0.00

Testing

WS-14: Implementation Readiness Review (Includes System, Security, and Performance Test Completion and Report)

$0.00 $390,256.63 $0.00 $0.00 $0.00 $0.00

Training

WS-15: Training Plan $305,608.46 $0.00 $0.00 $0.00 $0.00

$0.00 $0.00

$0.00 $0.00 WS-16: Operations and Maintenance

Manual $306,837.73 $0.00 $0.00

Implementation

WS-17: Production Readiness Review and Stage Gate Review $0.00 $354,327.47 $0.00 $0.00

$0.00 $0.00

$0.00 $0.00 $0.00

$0.00 $0.00 $0.00

WS-18: Post Implementation Report $0.00 $354,327.47 $0.00 WS-19: Warranty Completion Report $0.00 $0.00 $0.00

Hardware & Software

FY 19‐20 FY 20‐21 FY 21‐22

AHCA Contract No. MED 205, Attachment I, Exhibit 5-B, Page 5 of 8

WS-6: Bill of Materials $2,546,294.97 $593,452.00 $1,726,018.00 $0.00 $0.00 $0.00

Requirements

WS-7: Requirements Document $181,254.53 $0.00 $0.00 $0.00 $0.00 $0.00

Design

WS-8: System Design Specification Document $189,811.79 $0.00 $0.00

$0.00

$0.00

$0.00

$0.00 $0.00

$0.00

$0.00

$0.00

$0.00 $0.00

$0.00

$0.00

$0.00

$0.00 $0.00

WS-9: Configuration Management and Release Management Plan $201,574.31 $0.00 $0.00

WS-10: Contingency Plan (for Disaster Recovery and Business Continuity) $0.00 $166,024.86 $0.00

WS-11: Interface Control Document $79,788.04 $0.00 $0.00 WS-12: Test Plan $186,172.10 $0.00 $0.00

Completion Approval and Report)

$0.00 $157,767.55 $0.00 $0.00 $0.00 $0.00

Testing

WS-14: Implementation Readiness Review (Includes System, Security, and Performance Test Completion and Report)

$0.00 $207,531.07 $0.00 $0.00 $0.00 $0.00

Training

WS-15: Training Plan $157,767.55 $0.00 $0.00

AHCA Contract No. MED 205, Attachment I, Exhibit 5-B, Page 6 of 8

WS-16: Operations and Maintenance Manual $0.00 $249,037.29 $0.00

$0.00 $0.00

$0.00 $0.00

$0.00

Implementation

WS-17: Production Readiness Review and Stage Gate Review $0.00 $207,531.07 $0.00 $0.00

$0.00 $0.00

$0.00 $0.00 $0.00

$0.00 $0.00 $0.00

WS-18: Post Implementation Report $0.00 $439,299.00 $0.00 WS-19: Warranty Completion Report $0.00 $0.00 $0.00

Hardware & Software

FY 19‐20 FY 20‐21 FY 21‐22

WS-6: Bill of Materials $219,622.17 $422,626.32 $811,031.00 $0.00 $0.00 $0.00

Requirements

WS-7: Requirements Document $0.00 $0.00 $0.00 $0.00 $0.00 $0.00

Design

WS-8: System Design Specification Document $0.00 $0.00 $0.00

$0.00

$0.00

$0.00

$0.00 $0.00

$0.00

$0.00

$0.00

$0.00 $0.00

$0.00

$0.00

$0.00

$0.00 $0.00

WS-9: Configuration Management and Release Management Plan $0.00 $0.00 $0.00

WS-10: Contingency Plan (for Disaster Recovery and Business Continuity) $0.00 $0.00 $0.00

WS-11: Interface Control Document $0.00 $0.00 $0.00 WS-12: Test Plan $0.00 $0.00 $0.00

AHCA Contract No. MED 205, Attachment I, Exhibit 5-B, Page 7 of 8

Completion Approval and Report)

$0.00 $0.00 $0.00 $0.00 $0.00 $0.00

Testing

WS-14: Implementation Readiness Review (Includes System, Security, and Performance Test Completion and Report)

$0.00 $404,569.72 $0.00 $0.00 $0.00 $0.00

Training

WS-15: Training Plan $0.00 $201,316.25 $0.00 $0.00 $0.00

$0.00 $0.00

$0.00 $0.00 WS-16: Operations and Maintenance

Manual $0.00 $354,854.00 $0.00

Implementation

WS-17: Production Readiness Review and Stage Gate Review $0.00 $404,569.72 $0.00

$0.00 $0.00 $0.00

$0.00 $0.00 $0.00

$0.00 $0.00 $0.00

WS-18: Post Implementation Report $0.00 $849,630.60 $0.00

WS-19: Warranty Completion Report $0.00 $0.00 $0.00

TOTAL FIXED PRICE DELIVERABLES $8,496,814.41 $6,083,019.03 $2,874,677.00

FY 19‐20 FY 20‐21 FY 21‐22 FY 22‐23 FY 23‐24 FY 24‐25

FIXED PRICE O&M

Annual Fixed Price $0.00 $3,753,001.70 $4,503,602.02 $4,192,577.30 $4,166,850.71 $4,141,521.07

AHCA Contract No. MED 205, Attachment I, Exhibit 5-B, Page 8 of 8

License and Hosting Costs $0.00 $0.00 $0.00 $2,243,378.73 $2,444,585.12 $1,981,504.56

TOTAL O&M FIXED PRICE $0.00 $3,753,001.40 $4,503,602.02 $6,435,956.03 $6,611,435.83 $6,123,025.64

FY 19‐20 FY 20‐21 FY 21‐22 FY 22‐23 FY 23‐24 FY 24‐25

Task Order Costs $0.00 $750,600.34 $0.00 $0.00 $0.00 $0.00

GRAND TOTAL $8,496,814.41 $10,586,621.05 $7,378,279.02 $6,435,956.03 $6,611,435.83 $6,123,025.64