CN-680000-ME205-A5.pdf

AHCA CONTRACT NO. MED205

AMENDMENT NO. 5

AHCA Contract No. MED205, Amendment No. 5, Page 1 of 5

THIS CONTRACT, entered into between the STATE OF FLORIDA, AGENCY FOR HEALTH CARE ADMINISTRATION, hereinafter referred to as the "Agency" and ACCENTURE LLP, hereinafter referred to as the "Vendor," is hereby amended as follows:

WHEREAS, in the State Fiscal Year 2024/25 General Appropriations Act, the Florida Legislature included language that directs the Agency to execute contract amendments that demonstrate detailed long-term planning through the use of fixed price deliverables with no provision for the use of task orders.

WHEREAS, the Agency contracted with an FX Enterprise Security & Privacy Assessment Vendor thereby requiring modifications to Security Requirements IP.5.22 and IP.5.23.

NOW, THEREFORE, this Contract is hereby amended as follows:

1. Attachment I, Scope of Services, Section B.4, Services Provided by the IS/IP Vendor, Sub-section D., Integration Platform Solution, Item 5. Security, the second paragraph is hereby deleted in its entirety and replaced with the following:

Then Vendor shall describe its solution to secure additional consideration shall be given to external systems, and FX modules which use custom access control strategies within each system or module. The Vendor shall include enabling an encrypted bi-directional interface between the authentication service and the authorization service so user information can flow between the two (2) components. The authorization product shall provide federated integration with organization specific Active Directories of authorization information and comply with Florida Administrative Code Section 74-5, Identity Management. Consent management is a possible future Integration Platform capability and may be authorized via a contract amendment at the Agency’s discretion.

2. Attachment I, Scope of Services, Section B.4, Services Provided by the IS/IP Vendor, Sub-section D., Integration Platform Solution, Item 5. Security, Table 5: Security Requirements, IP.5.22 and IP.5.23 are hereby amended as follows:

IP.5.22

Security

The Vendor shall coordinate with the Agency and the FX Enterprise Security & Privacy Assessment Vendor to provide risk assessments and security audit reports which shall be completed on an annual basis and when additions or changes to functionality impact the security framework, architecture, or when a new vulnerability exists that cannot be mitigated within agreed upon timeframes. The reports shall be delivered to the Agency by the 10th each month performed as part of PP-5: System Security Plan.

IP.5.23

Security

The Vendor shall perform penetration testing within two (2) months prior to implementation. Penetration testing shall also be performed on an annual basis and when a new vulnerability is identified which cannot be immediately mitigated and when additions or changes to functionality impact the security framework. These assessments will be conducted by the FX Enterprise Security & Privacy Assessment Vendor, in coordination with the IS/IP Vendor and the Agency. As part of PP- 5: System Security Plan, the annual Penetration Test Report

Docusign Envelope ID: 84ED81A3-658F-4ED5-AC67-994D30B1881E

AHCA Contract No. MED205, Amendment No. 5, Page 2 of 5

3. Attachment I, Scope of Services, Section B.4, Services Provided by the IS/IP Vendor, Sub-section E., Integration Services Solution, Item 3., Legacy System Transition Integration, is hereby deleted in its entirety and replaced with the following:

The Vendor shall provide integration planning and technical services to support the transition of legacy services and components to the new FX modules. The Vendor shall work with the Agency, the Module Vendor(s), and the FMMIS Fiscal Agent Contractor to develop a transition plan for the integration of new modules while retiring the corresponding FMMIS functionality. The Vendor shall be responsible for ensuring the FX modules which connect to the Integration Platform work together seamlessly and work securely with external systems. The Vendor shall participate in the module design sessions to substantiate appropriate interoperability standards are met for the modules. The sequence, components, and timeline of legacy transition integration are not known at this stage and will be authorized through a contract amendment.

4. Attachment I, Scope of Services, Section B.7, Staffing, Sub-section B., Key Staff, Item

2., the second paragraph is hereby deleted in its entirety and replaced with the following:

These resources shall provide prioritized Integration Services focused on meeting the Agency’s needs for interoperability, enterprise integration, and technical coordination of module component implementations for the FX. The Base Integration Services Team shall be responsible for planning, scheduling, testing, and validating connection to the Integration Platform for all module vendors. As additional specifications and requirements for module vendor integrations are identified, additional resources will be needed beyond the Base Integration Services Team and shall be authorized though a contract amendment.

5. Attachment I, Scope of Services, Section B.10, Deliverables, Sub-section A., Deliverable Management, Item 1., is hereby deleted in its entirety and replaced with the following:

In order to verify effective performance of IS/IP Project deliverables and to minimize Agency review and Vendor revision times, the Vendor shall perform deliverable management for each deliverable in accordance with Section B.10.B., for each Deliverable and Due Date per the Vendor’s proposed Accenture Delivery Method (ADM), or as otherwise agreed to by the Parties.

6. Attachment I, Scope of Services, Section B.10, Deliverables, Sub-section C., IS/IP

Project Specific Deliverable Descriptions, Item 1., PP-1: Project Management Plan (Includes MES Vendor Resource Management Plan), Sub-Item b., Part 8), is hereby deleted in its entirety and replaced with the following:

8) Description of the automated tool used by the Vendor for tracking and reporting staff allocation and hours;

results shall be provided to the Agency within 40 days following the end of each calendar year or by the 10th business day of the month after the need for each penetration test is identified, and any major or critical vulnerabilities mitigated.

AHCA Contract No. MED205, Amendment No. 5, Page 3 of 5

7. Attachment I, Scope of Services, Section B.11., Method of Payment, the first and second paragraphs (including Tables A and B) are hereby deleted in their entirety and replaced with the following:

This Contract is a fixed price contract at an amount not to exceed $111,339,490.87. Initial deliverables described in Section B.10.B, will be paid at a fixed price. Operations and Maintenance costs, to include ALM, will be paid on a fixed price monthly basis. Base Integration Services Team resources described in Attachment I, Scope of Services, Section B.7., Vendor Staffing, Sub-Section B., Key Staff, will be paid on a fixed price monthly basis.

The funding allowances per fiscal year are outlined in Table A, State Fiscal Year (SFY) Funding Allowance for Initial Contract and Table B, State Fiscal Year (SFY) Funding Allowance for Three (3) Year Renewal, below:

TABLE A

STATE FISCAL YEAR (SFY) FUNDING ALLOWANCE FOR INITIAL CONTRACT

SFY Maximum SFY

Amount SFY Funding Allocated to Deliverables

SFY Funding Allocated to Application Lifecycle Management

(ALM)

SFY Funding Allocated to Operations and Maintenance

19/20 $9,024,511.34 $8,744,964.37 $279,546.97 $0.00 20/21 $10,867,061.76 $6,083,019.03 $280,440.71 $4,503,602.02 21/22 $7,623,587.45 $2,841,815.00 $278,170.43 $4,503,602.02 Totals $27,515,160.55 $17,669,798.40 $838,158.11 $9,007,204.04

TABLE B

STATE FISCAL YEAR (SFY) FUNDING ALLOWANCE FOR THREE (3) YEAR RENEWAL

(November 18, 2022 – October 31, 2025)

SFY Maximum SFY Amount

SFY Funding Allocated to Application Lifecycle Management

(ALM)

SFY Funding Allocated to Operations and Maintenance

SFY

Funding Allocated to Base Integrated Services Team

SFY

Funding Allocated to Module Integration Services

22/23 $19,181,320.14 $286,515.54 $6,487,792.60 $5,223,480.00 $7,183,532.00 23/24 $31,769,343.14 $286,515.54 $6,615,723.60 $10,867,104.00 $14,000,000.00 24/25 $24,730,958.78 $286,515.54 $6,127,247.24 $11,423,496.00 $6,893,700.00 25/26 $8,142,708.26 $95,505.18 $2,318,722.02 $3,807,832.00 $1,920,649.06 Totals $83,824,330.32 $955,051.80 $21,549,485.46 $31,321,912.00 $29,997,881.06

8. Attachment I, Scope of Services, Section B.11, Method of Payment, Sub-section C., Task Orders, is hereby deleted in its entirety.

9. Attachment I, Scope of Services, Exhibit 5-B, Detailed Budget, is hereby deleted in its entirety and replaced with Exhibit 5-C, Detailed Budget. All references to Exhibit 5-B, Detailed Budget, shall hereinafter refer to as Exhibit 5-C, Detailed Budget. The removal

AHCA Contract No. MED205, Amendment No. 5, Page 4 of 5 and replacement of this Exhibit only removes the references to task orders and does not change the total cost of the contract.

10. Attachment V, Agency Approved Modifications and Additions to the Agency Standard

Contract, Standard Contract, Section I, The Vendor Hereby Agrees, Sub-section M., Indemnification & Liability, Item 2., Liability, Sub-Item b., Joint Responsibilities, the second paragraph is hereby deleted in its entirety and replaced with the following:

The Vendor shall maintain compliance with FX Project Management Standards and the accompanying FX Project Management Toolkit. The Agency and all vendors contracted in the FX shall adhere to the integrated processes described in the FX Project Management Standards to support effective performance management for the Agency and all Vendors contracted in the FX for all projects within the FX. Through the Project Management Standards, specific processes will be followed to determine the need for any amendments to the contract as a result of the change control process, as described in the FX Project Management Standards. This may include amendments to Accenture’s contract due to delay in schedule caused by the Agency or any vendor contracted in the

FX.

All provisions not in conflict with this Amendment are still in effect and are to be performed at the level specified in this Contract.

This Amendment and all its attachments are hereby made a part of this Contract.

This Amendment cannot be executed unless all previous Amendments to this Contract have been fully executed.

REMAINDER OF PAGE INTENTIONALLY LEFT BLANK

AHCA Contract No. MED205, Amendment No. 5, Page 5 of 5

IN WITNESS WHEREOF, the Parties hereto have caused this thirteen (13) page Amendment to be executed by their officials thereunto duly authorized. This Amendment is not valid until signed and dated by both Parties.

ACCENTURE LLP STATE OF FLORIDA, AGENCY FOR

HEALTH CARE ADMINISTRATION

SIGNED

BY:

SIGNED

BY:

NAME: NAME:

TITLE: TITLE:

DATE: DATE:

List of Attachments/Exhibits included as part of this Amendment:

Specify Letter/ Type Number Description Exhibit 5-C Detailed Budget (8 Pages)

Shireen Sackreiter

Managing Director

10/15/2024

Secretary

10/15/2024

Jason Weida

ATTACHMENT I

EXHIBIT 5-C

DETAILED BUDGET

AHCA Contract No. MED 205, Attachment I, Exhibit 5-C, Page 1 of 8

For costs related to Integrated Services and the development of the Integration Platform, the Vendor shall be paid based on the deliverables presented in Attachment I, Section B.10.B. Costs should be all inclusive, and the Vendor shall provide estimated hours and hourly costs for all resources supporting the deliverable(s). The Vendor shall provide costs associated with each One-Time Deliverable and Workstream (A, B, C) Deliverable in Exhibit A-5-a, Revised Detailed Budget.

For the deliverable titled WS-6: Bill of Materials, costs shall be presented for the effort to conduct the work at a fixed price and for the Bill of Materials. The Agency will determine whether the items on the Bill of Materials will be purchased and paid as a cost reimbursement to the Vendor, or whether the items will be purchased directly by the Agency. For those items purchased by the Vendor, these materials are to be purchased for and licensed to the Agency. Actual expenditures for specified items made on the Agency’s behalf will be reimbursed without profit or overhead for the term of the resulting Contract.

The sum of the deliverables under the category of Project Planning Costs cannot exceed more than fifteen percent (15%) of the cost of the Total Fixed Price Deliverables as shown in Attachment I, Exhibit 5-C, Detailed Budget.

For all fixed price deliverables, except PC-20: MES Vendor Turnover Plan, the Agency will pay the Vendor upon the completion and acceptance of deliverables in accordance with the deliverable schedule specified in the resulting Contract. Upon receipt and Agency approval of each deliverable, the Vendor shall be paid ninety percent (90%) of the total amount due for the deliverable. The Agency will pay the Vendor the remaining ten percent (10%) for all satisfactorily completed deliverables upon completion of the warranty term.

1. Monthly Fixed Price Costs for Operations and Maintenance (O&M):

The IS/IP Vendor shall provide their monthly fixed price cost for ongoing Operations and Maintenance of the Integration Platform as outlined in the requirements in Attachment I, Section B.4.D.12, Operations and Maintenance.

2. Additional Module Integration Deliverables and O&M Major System Enhancements:

Excluding initial fixed price Deliverables as described in Section B.10. and fixed price costs for ongoing Operations and Maintenance, Application Lifecycle Management (ALM) and Base Integration Services Team resources, the Vendor shall provide services as described within Attachment I, Scope of Services, which shall be authorized as Contract Amendments.

AHCA Contract No. MED 205, Attachment I, Exhibit 5-C, Page 2 of 8

3. Summary Costs:

The Agency is constrained to a fiscal year budget (July 1 - June 30). On the SFY Summary tab, the Vendor shall enter total costs for each fixed deliverable by Workstream in the appropriate Fiscal Year column with the following constraints:

a. One-time deliverables are limited to FY 19-20.

b. Workstream Deliverable costs should not be represented in multiple Fiscal Years regardless of the warranty term withhold. Any costs for updating and maintenance should be considered in the O&M costs or authorized in a Contract Amendment.

c. Workstream Deliverable costs are limited to the first three state fiscal years (19-20, 20-21 and 21-22).

d. O&M Costs should not start before July 1 in State Fiscal Year 20-21.

AHCA Contract No. MED 205, Attachment I, Exhibit 5-C, Page 3 of 8

State Fiscal Year Cost Summary ‐ Please list each Fixed Price Deliverable in the appropriate State Fiscal Year (July 1 ‐ June 30)

Project Planning FY 19‐20 FY 20‐21 FY 21‐22

PP-1: Project Management Plan (Includes MES Vendor Resource Management Plan)

$77,968 $0.00 $0.00

$0.00 $0.00

$0.00 $0.00

$0.00 $0.00

$0.00 $0.00 $0.00 $0.00

PP-2: Project Schedule $77,968 PP-3: High-Level Technical Design (Includes Technical Integration Plan) $114,013

PP-4: System Design Document (Includes Integration Architecture Specifications)

$114,013

PP-5: System Security Plan $207,289 PC-20: MES Vendor Turnover Plan $0.00

Hardware & Software FY 19‐20 FY 20‐21 FY 21‐22 WS-6: Bill of Materials $1,363,791.79 $325,898.00 $337,628.00

Requirements

WS-7: Requirements Document $420,858.69 $0.00 $0.00

Design

WS-8: System Design Specification Document $283,162.32 $0.00 $0.00

WS-9: Configuration Management and Release Management Plan $114,013.45 $0.00 $0.00

WS-10: Contingency Plan (for Disaster Recovery and Business Continuity) $204,558.49 $0.00 $0.00

WS-11: Interface Control Document $283,162.32 $0.00 $0.00

AHCA Contract No. MED 205, Attachment I, Exhibit 5-C, Page 4 of 8

WS-12: Test Plan $555,676.13 $0.00 $0.00 Configure/Build

WS-13: Environmental Readiness Review (Includes Construction Completion Approval and Report)

$305,608.46 $0.00 $0.00

Testing

WS-14: Implementation Readiness Review (Includes System, Security, and Performance Test Completion and Report)

$0.00 $390,256.63 $0.00

Training

WS-15: Training Plan $305,608.46 $0.00 $0.00 WS-16: Operations and Maintenance Manual $306,837.73 $0.00 $0.00

Implementation

WS-17: Production Readiness Review and Stage Gate Review $0.00 $354,327.47 $0.00

WS-18: Post Implementation Report $0.00 $354,327.47 $0.00 WS-19: Warranty Completion Report $0.00 $0.00 $0.00

Hardware & Software

FY 19‐20 FY 20‐21 FY 21‐22

WS-6: Bill of Materials $2,546,294.97 $593,452.00 $1,726,018.00

Requirements

WS-7: Requirements Document $181,254.53 $0.00 $0.00

Design

AHCA Contract No. MED 205, Attachment I, Exhibit 5-C, Page 5 of 8

WS-8: System Design Specification Document $189,811.79 $0.00 $0.00

WS-9: Configuration Management and Release Management Plan $201,574.31 $0.00 $0.00

WS-10: Contingency Plan (for Disaster Recovery and Business Continuity) $0.00 $166,024.86 $0.00

WS-11: Interface Control Document $79,788.04 $0.00 $0.00 WS-12: Test Plan $186,172.10 $0.00 $0.00

Completion Approval and Report)

$0.00 $157,767.55 $0.00

Testing

WS-14: Implementation Readiness Review (Includes System, Security, and Performance Test Completion and Report)

$0.00 $207,531.07 $0.00

Training

WS-15: Training Plan $157,767.55 $0.00 $0.00 WS-16: Operations and Maintenance Manual $0.00 $249,037.29 $0.00

Implementation

WS-17: Production Readiness Review and Stage Gate Review $0.00 $207,531.07 $0.00

WS-18: Post Implementation Report $0.00 $439,299.00 $0.00 WS-19: Warranty Completion Report $0.00 $0.00 $0.00

AHCA Contract No. MED 205, Attachment I, Exhibit 5-C, Page 6 of 8

Hardware & Software

WS-6: Bill of Materials $219,622.17 $422,626.32 $811,031.00

Requirements

WS-7: Requirements Document $0.00 $0.00 $0.00

Design

WS-8: System Design Specification Document $0.00 $0.00 $0.00

WS-9: Configuration Management and Release Management Plan $0.00 $0.00 $0.00

WS-10: Contingency Plan (for Disaster Recovery and Business Continuity) $0.00 $0.00 $0.00

WS-11: Interface Control Document $0.00 $0.00 $0.00 WS-12: Test Plan $0.00 $0.00 $0.00

Completion Approval and Report)

$0.00 $0.00 $0.00

Testing

WS-14: Implementation Readiness Review (Includes System, Security, and Performance Test Completion and Report)

$0.00 $404,569.72 $0.00

AHCA Contract No. MED 205, Attachment I, Exhibit 5-C, Page 7 of 8

Training

WS-15: Training Plan $0.00 $201,316.25 $0.00 WS-16: Operations and Maintenance Manual $0.00 $354,854.00 $0.00

Implementation

WS-17: Production Readiness Review and Stage Gate Review $0.00 $404,569.72 $0.00

WS-18: Post Implementation Report $0.00 $849,630.60 $0.00

WS-19: Warranty Completion Report $0.00 $0.00 $0.00

TOTAL FIXED PRICE DELIVERABLES $8,496,814.41 $6,083,019.03 $2,874,677.00

AHCA Contract No. MED 205, Attachment I, Exhibit 5-C, Page 8 of 8