download.pdf

ForHealth Consulting at UMass Chan Medical School

Disability Determination and Disability Appeal Services Due Diligence Search RFQ #3140004550 | June 1, 2026 2

Table of Contents Cover Letter

Required Declarations

Company Overview and Qualifications

How We Deliver Results

Relevant Experience Public Employee Retirement System Experience Value We Offer PERS

Our Understanding of PERS Mission and Disability Programs

PERS Mission and Fiduciary Responsibility

Disability Retirement Application and Review Process

Non-Duty-Related and Duty-Related (Line-of-Duty) Disability Determinations .. 12

Medical Board Decisions and Continuing Disability Oversight

Disability Appeals Process

Impact on Pension Plan Costs and System Integrity

Claim Volume and Medical Board Review

Scope of Services Proposed

Implementation Plan

RFQ #3140004550 | June 1, 2026 3

Staffing and Minimum Qualifications

Program Roles and Responsibilities Use of a Single Project Manager and Account Manager Team Scalability

Service Delivery Approach and Workflow

Case Development and Documentation Ongoing Case Monitoring

Phase 2 Clinical Triage (Days 2-21)

Phase 3 Assessment and Determination (Days 22 – 37) Independent Medical and Related Assessments (IME, Independent Professional Evaluation (IPE), Functional Capacity Evaluation(FCE)) Disability Determination Appeals

Phase 4 Disability Continuation and Periodic Review

Data Security, Confidentiality, and HIPAA Compliance

Technology Security

Data Redundancy and Disaster Recovery

Scope and Nature of PERS Data Access

Work Environment and Equipment Controls

Data Handling and Confidentiality

Device and Endpoint Security Practices

Access Control and Authentication

Privacy Awareness and Regulatory Understanding

Incident Awareness and Reporting

RFQ #3140004550 | June 1, 2026 4

Professional Responsibility

Information Security Governance

Reporting and Ongoing Program Management

Quarterly Reporting

Ongoing Communication and Collaboration

Program Oversight and Quality Management

Prospective Quality Review

Retrospective Quality Review

Pricing Proposal

Fee Schedule

Assumptions

Attachments

Attachment B – PERS Confidentiality Agreement

Attachment C – Independent Medical Reviewer Cybersecurity & Privacy Practices Questionnaire

Attachment D – Certifications & Assurances

Attachment E – Release of Bid as Public Record

RFQ #3140004550 | June 1, 2026 5

Cover Letter

ATTN: Lisa Green, Deputy Director, Benefit Services

Public Employees’ Retirement System of Mississippi

429 Mississippi Street

Jackson, MS 39201-1005

RE: RFQ #3140004550 – Disability Determination and Disability Appeal Services

Dear Ms. Green, ForHealth Consulting at UMass Chan Medical School (ForHealth Consulting) is pleased to submit our proposal in response to RFQ #3140004550 to provide disability determination and disability appeal services for the Public Employees’ Retirement System of Mississippi (PERS).

ForHealth Consulting proposes to provide both Disability Determination and Disability Appeal

Services, delivering an integrated, end-to-end solution that supports the full lifecycle of PERS disability claims—from initial review through appeal resolution.

ForHealth Consulting is the public service consulting division of UMass Chan Medical School, the Commonwealth of Massachusetts’s only public academic medical center. For more than 25 years, we have partnered with state agencies and public employee retirement systems to deliver clinically rigorous, compliant, and efficient disability determinations. Our team brings deep experience applying statutory definitions of disability, evaluating medical evidence, and producing well-supported recommendations that withstand Medical Board and appeals review.

Our approach aligns with Mississippi statutes and PERS program requirements and emphasizes complete case development, rigorous evaluation of objective medical evidence, and clear clinical rationale to support accurate and defensible determinations. We also provide comprehensive appeals support, including independent clinical review and expert testimony, ensuring appealed determinations are evaluated objectively and in accordance with established procedures.

Required Declarations

Exceptions and Contract Requests: ForHealth Consulting respectfully requests reconsideration of certain solicitation terms pursuant to Section II.K. We request that PERS review and consider reasonable contract modifications, many of which are attributable to our status as an entity of the Commonwealth of Massachusetts.

Proposal Validity Period: ForHealth Consulting agrees that this proposal shall remain valid for a period of six (6) months following the submission deadline of June 1, 2026, in accordance with

RFQ requirements.

Docusign Envelope ID: 339092EA-0777-86B0-809B-CE6A72FFE2CC

RFQ #3140004550 | June 1, 2026 6

Certification of Ability to Perform: ForHealth Consulting hereby certifies that our organization is willing and able to perform all services as required under RFQ #3140004550.

Acknowledgment of Amendments: No amendments to RFQ #3140004550 were released.

Authority to Conduct Business in Mississippi: ForHealth Consulting is authorized to conduct business in the State of Mississippi and will maintain such authorization for the duration of the contract in accordance with applicable state requirements.

Commitment to Compliance and Partnership: We affirm our commitment to transparency, compliance, and partnership and look forward to supporting PERS in delivering accurate, timely, and defensible disability determinations and appeals services.

Confidentiality and Proposal Redaction: ForHealth Consulting will submit both a complete unredacted proposal and a redacted version in accordance with RFQ requirements. The redacted version will exclude confidential and proprietary information and include a privilege log, consistent with PERS submission guidelines. Relative to Attachment B – Confidentiality

Agreement: As an entity of the Commonwealth of Massachusetts, the University is subject to the Massachusetts Public Records Law (Mass. Gen. Laws c.66 §10). As such, we formally requested confirmation that clause number three, second sentence, may be revised to include the following at the end: “unless required by law.”

Primary Proposal Contact: Jody Simpson, Executive Director, Disability Evaluation Services

Email: Jody.Simpson@umassmed.edu

Phone: (774) 455-8326

ForHealth Consulting appreciates the opportunity to submit this proposal and looks forward to partnering with PERS to deliver accurate, timely, and defensible disability determination and appeal services that support program integrity and effective service to members.

Sincerely, Jessica Carpenter, Interim Deputy Executive Vice Chancellor for Operations

Authorized Signatory

Email: Jessica.Carpenter@umassmed.edu

Phone: (508) 421-5861

Docusign Envelope ID: 339092EA-0777-86B0-809B-CE6A72FFE2CC

RFQ #3140004550 | June 1, 2026 7

Company Overview and Qualifications Since 1983, ForHealth Consulting has partnered with state and federal agencies and other purposeful organizations to improve the healthcare experience, making it more equitable, effective, and accessible. As part of Massachusetts’s only public medical school, UMass Chan, we are public employees with a shared commitment to delivering effective and accountable public-sector services.

Since 1998, our disability evaluation services team has performed hundreds of thousands of disability determinations for state Medicaid agencies and, for almost a decade, has performed disability recommendations for public employees' retirement systems.

How We Deliver Results ForHealth Consulting delivers disability determination services through a coordinated, end‑to‑end model that supports consistent and clinically rigorous decision-making in alignment with PERS requirements. This model is built on three core components:

Case Development and Management: We manage the full disability determination process—from administrative intake and medical evidence collection through clinical evaluation and recommendation development—ensuring complete, well-documented case files

Clinical Review: Our multidisciplinary team applies a structured, evidence-based approach to evaluating medical and vocational evidence, ensuring recommendations are grounded in objective clinical evidence and supported by defensible clinical rationale for Medical Board consideration

Operational Management and Quality Assurance: Our staff actively manages case development, communicates with members and providers, and keeps cases progressing to reduce delays and ensure complete documentation

We partner with public employee retirement systems like PERS to deliver timely, accurate, and cost-effective disability determinations that strengthen program integrity and decision quality.

Our Proven Results

Timely Decisions 45 days average processing time Reduces backlog and delivers timely, reliable determinations

Accurate Determination Recommendations Zero overturned appeals (2025) Delivers clear, well-supported recommendations aligned to statutory requirements—reducing risk, rework, and appeal-related costs

High Member Satisfaction 96% satisfaction rate Our survey results reflect a respectful, streamlined application experience that strengthens confidence in the program

RFQ #3140004550 | June 1, 2026 8

Relevant Experience ForHealth Consulting brings more than 25 years of experience supporting disability determination programs for public employee retirement systems and state Medicaid agencies.

With our deep clinical and operational expertise, ForHealth Consulting is a national leader in disability determinations. Currently, we support public employee retirement systems across ith

Public Employee Retirement System Experience ForHealth Consulting has direct experience supporting public employee retirement systems with disability determinations, including:

• Initial disability determinations for ordinary and duty-related (line-of-duty) claims

• Ongoing disability continuation and re-evaluations

• Medical Board review support and recommendation development

• Functional and vocational assessments to determine work capacity

We currently provide the following services to public employee retirement system experience:

This ongoing experience enables us to deliver accurate, consistent, and well‑documented disability recommendations to PERS that align with statutory requirements and Medical Board expectations.

Our experience spans multiple states and program structures, demonstrating our ability to align with varying statutory requirements and deliver consistent, defensible disability determinations across diverse populations and benefit programs.

Our experience supporting disability determinations across comparable public employee retirement systems enables us to streamline case processing, improve decision consistency, and strengthen the defensibility of recommendations—supporting reliable Medical Board outcomes and reducing the risk of appeals and overturned decisions.

RFQ #3140004550 | June 1, 2026 9

Complex Case Review Experience ForHealth Consulting has experience supporting complex disability determinations requiring advanced clinical and vocational analysis. This experience includes:

This experience translates directly to our ability to support PERS’ most complex cases by ensuring accurate evaluation of medically complex claims and delivering clear, defensible recommendations that strengthen Medical Board decision‑making.

State Medicaid and Disability Program Experience ForHealth Consulting has experience supporting state agencies in disability determination programs, including case development, determinations aligned to federal and state requirements, and reconsideration and appeals support.

Our demonstrated experience includes:

By applying advanced clinical and vocational analysis in comparable programs, we resolve complex cases correctly the first time—preventing delays and supporting timely final determinations.

This experience strengthens our ability to manage high volumes of cases efficiently while maintaining consistent documentation and regulatory alignment.

RFQ #3140004550 | June 1, 2026 10

Value We Offer PERS Our approach is designed to support PERS’ goals of program integrity, cost control, and timely service delivery. We differentiate ourselves through:

These outcomes are achieved through the structured workflows and clinical review processes described in the Service Delivery Approach of our proposal.

Our Understanding of PERS Mission and Disability Programs ForHealth Consulting understands the PERS disability retirement application and review process, including non‑duty‑related and duty‑related (line‑of‑duty) disability determinations and appeals, as described in the RFP. Our disability evaluation model is designed to align with these requirements to support consistent, accurate, and compliant determinations.

RFQ #3140004550 | June 1, 2026 11

The definition of disability provided in the Mississippi state code §25-11-113 has two components.

1. The member must be unable to perform the usual duties of their own occupation or, at the discretion of the employer, modified duties without a material reduction in compensation; or

2. The member must be unable to perform any job covered by the PERS System that is located in the same general work area and does not involve a significant reduction in pay

Disability determinations must be supported by objective medical evidence and comply with Mississippi Code §25‑11‑113, §25‑11‑115, and PERS Regulations Chapter 42.

Our approach ensures all recommendations align with these statutory and regulatory requirements, recognizing that the PERS Board of Trustees retains final decision-making authority.

PERS Mission and Fiduciary Responsibility ForHealth Consulting understands that PERS administers disability retirement benefits within a fiduciary framework centered on statutory compliance, program integrity, and long-term pension sustainability. The PERS Executive Director and Board of Trustees are responsible for ensuring that disability benefits are awarded only when eligibility requirements are satisfied, recognizing that disability retirements represent a long-term financial obligation with direct impact on plan costs and the overall health of the pension trust.

We understand that PERS must ensure that all disability determinations are made in accordance with statutory requirements and supported by objective medical evidence to protect the long-term financial stability of the retirement system.

ForHealth Consulting’s model is designed to align with this fiduciary responsibility by ensuring that disability determinations are grounded in statutory requirements and supported by objective medical evidence.

Disability Retirement Application and Review Process The PERS disability retirement program follows a defined application and review process designed to support consistent, well-documented decision-making. Following submission of a disability application, PERS staff reviews the application for completeness, prepares benefit estimates, and gathers required medical and employment documentation for consideration by the PERS Medical Board.

All disability applications are reviewed by the Medical Board, which determines whether members meet the statutory definition of disability based on objective medical evidence. The

RFQ #3140004550 | June 1, 2026 12

Medical Board, in accordance with Mississippi Code §25-11-113(1)(f), may request additional medical evidence or request that an additional physician(s) evaluate the member’s condition.

ForHealth Consulting understands that the Medical Board’s review is based on the completeness and quality of the submitted objective medical evidence and employment documentation, and our approach is designed to align with this process by supporting the development of comprehensive, well-documented case files.

ForHealth Consulting’s service delivery model is designed to align with this process, supporting timely case development, sufficiency review, and defensible clinical recommendations for Medical Board consideration. Detailed workflow steps are described in the Service Delivery Approach and Workflow section below.

Non-Duty-Related and Duty-Related (Line-of-Duty) Disability Determinations Both non-duty-related and duty-related disability determinations require certification that a member is mentally or physically incapacitated for further performance of duty and that the condition is likely to be permanent. Duty-related (line-of-duty) claims require additional consideration of whether the disabling condition arose out of and in the course of employment, supported by employer certifications regarding job duties performed and accommodations considered.

ForHealth Consulting’s clinical and vocational evaluation approach is structured to align with these distinctions and to support accurate classification of duty-related and non-duty-related claims.

Medical Board Decisions and Continuing Disability Oversight Following Medical Board review, disability applications may be approved, denied, or deferred pending additional evaluation, including independent medical examinations when appropriate.

Approval of disability retirement does not eliminate oversight; PERS conducts continuing disability reviews on a defined schedule to confirm continued eligibility. These reviews are a key safeguard supporting program integrity and cost control.

We understand that periodic reexaminations are required to ensure that members who receive disability benefits continue to meet statutory eligibility requirements over time. Our clinicians are experienced in establishing reexamination dates based on the medical improvement trajectory for the disability retiree’s condition.

In accordance with Mississippi Code §25-11-113(3), reexaminations are conducted once each year during the first five (5) years following retirement of a member on a disability allowance and once in every period of three (3) years thereafter. The Board, however, may, in its discretion, RFQ #3140004550 | June 1, 2026 13 authorize the Medical Board to establish reexamination schedules appropriate to the member’s medical condition.

Our model is designed to align with these requirements by supporting clinically appropriate reexamination scheduling and ensuring accurate and timely reassessment of disability status.

Disability Appeals Process PERS maintains a structured appeals process to ensure due process and separation of duties.

Members whose disability claims are denied may appeal within established timeframes.

Appeals are reviewed by the Disability Appeals Committee, which operates independently of the Medical Board and submits a recommendation to the PERS Board of Trustees. The Board of Trustees issues the final administrative decision, with judicial review available only after administrative remedies are exhausted.

ForHealth Consulting understands that members may appeal denied claims within established timeframes and that appeals are reviewed independently of the initial determination. Appeals are conducted in accordance with PERS Regulation Chapter 42, which governs hearing procedures and administrative review processes. The Disability Appeals Committee evaluates appeals and submits recommendations to the Board of Trustees, which issues the final administrative decision.

ForHealth Consulting’s approach is designed to align with these requirements by supporting independent review, adherence to applicable timelines, and compliance with established appeal procedures. Our extensive panel of employed physicians provides the depth and consistency required to support independent appeal reviews, including evaluation of complex cases and development of well-supported medical opinions.

Impact on Pension Plan Costs and System Integrity We understand that PERS’ disability determination and appeals framework reflects a deliberate balance between member protection and stewardship of public funds. This structure ensures that disability retirement benefits are granted only when supported by objective medical evidence and statutory criteria, thereby avoiding inappropriate long-term liabilities and protecting the pension trust for current and future members.

ForHealth Consulting’s approach is designed to align with this framework by supporting determinations that are timely, accurate, well-documented, and consistent with statutory requirements.

Claim Volume and Medical Board Review ForHealth Consulting demonstrates awareness that disability programs serving statewide public retirement systems operate at sustained and variable claim volumes.

RFQ #3140004550 | June 1, 2026 14

We understand that the Medical Board plays a central and recurring role in the disability determination process. Disability applications are supported by credentialed Disability Reviewers and physician assessments, which culminate in recommendations presented to the Medical Board for consideration.

Following the development of a complete case file, ForHealth Consulting produces a well‑reasoned, credible narrative analysis supporting the recommendation to approve, deny, or defer disability retirement benefits for Medical Board review.

Importantly, our experience demonstrates that Medical Board reviews may exceed the number of initial disability applications submitted. A single claim may require multiple Medical Board interactions due to deferred decisions, requests for additional medical evidence, or the need to schedule an independent medical examination when medical information remains insufficient to make a decision. In addition, reconsiderations and appeals involving new medical evidence require de novo review of the record, further increasing the Medical Board's workload beyond initial intake volume.

We also understand that Medical Board activity continues beyond initial determinations. When an application is approved, physicians provide projections of the duration of disability and assignment of disability review dates to support periodic reexamination of disability. These periodic disability reexamination reviews require additional Medical Board involvement to evaluate whether impairments remain ongoing and disabling, further contributing to review volume over time.

Our experience reflects an understanding that Medical Board workload is cumulative and lifecycle‑driven. Initial claim submissions, deferred determinations, independent examinations, reconsiderations, appeals, and reexamination disability reviews all contribute to Medical Board review counts that may reasonably exceed the number of original disability applications received.

ForHealth Consulting’s operational model is designed to align with these workload dynamics and to support consistent performance despite variations in claim volume and repeated Medical Board review activity.

Scope of Services Proposed ForHealth Consulting proposes to provide both Disability Determination and Disability Appeal Services, delivering an integrated, end-to-end solution that supports the full lifecycle of PERS disability claims—from initial review through appeal resolution.

RFQ #3140004550 | June 1, 2026 15

Implementation Plan ForHealth Consulting is committed to providing a successful and efficient implementation process. Our proven approach ensures a thorough understanding of PERS operations and allows us to tailor our methods to meet program requirements.

We use a phased implementation approach that aligns with PERS’s objectives and supports readiness for full operations, while maintaining adherence to required timelines and service expectations. This phased implementation approach also ensures a structured transition to full operations while maintaining continuity of services.

RFQ #3140004550 | June 1, 2026 16

RFQ #3140004550 | June 1, 2026 17

Status data is made available to PERS through the portal and includes visibility into pending, approved, denied, and closed disability claims.

PERS will remain the system of record for all disability applications and determinations.

RFQ #3140004550 | June 1, 2026 18

RFQ #3140004550 | June 1, 2026 19

RFQ #3140004550 | June 1, 2026 23

Program Roles and Responsibilities The roles described below reflect the leadership, clinical, and operational functions illustrated in Figure 2 and demonstrate how these roles work together to support disability determination services.

All staff assigned to the PERS contract will meet or exceed the minimum qualifications specified in the RFQ, including required licensure, certification, education, and experience.

RFQ #3140004550 | June 1, 2026 24

Role responsibilities may be adjusted as needed to align with program workflow and operational requirements, consistent with RFQ expectations.

Use of a Single Project Manager and Account Manager ForHealth Consulting will designate a single Project Manager to lead implementation and serve as PERS’ primary point of coordination throughout the first six (6) months of the engagement.

The Project Manager will work collaboratively with PERS to review program requirements, coordinate implementation activities, and oversee configuration of ForHealth Consulting’s web-based portal, including functionality that allows PERS to view real-time claim status (e.g., pending, approved, denied, closed).

The Project Manager will also ensure that implementation activities comply with applicable technology, security, and HIPAA requirements, and support the coordination of required forms and documentation developed jointly with PERS. The Project Manager is accountable for implementation timelines, issue resolution, and readiness for go-live.

Consistent with RFQ requirements, ForHealth Consulting will notify PERS within the required timeframe of any reassignment, extended absence, termination, or replacement of the Project Manager to ensure continuity of oversight and communication. This approach ensures minimal disruption to ongoing operations while establishing the processes, systems, and communication structures required to support long-term program success.

Team Scalability ForHealth Consulting applies a disciplined and flexible staffing approach to support disability determination and appeals services, aligning resources to program demand while maintaining consistency, quality, and timeliness of determinations.

RFQ #3140004550 | June 1, 2026 26

This approach supports a staffing model that is responsive to program needs while maintaining structured oversight and accountability throughout all phases of the disability determination process.

Documentation of licensure, credentials, and qualifications is maintained for all staff and will be provided to PERS upon request. ForHealth Consulting will notify PERS within five

(5) business days of any reassignment, extended absence, or termination of key personnel, along with proposed replacement staff, in accordance with RFQ requirements.

Service Delivery Approach and Workflow ForHealth Consulting’s disability determination model translates PERS statutory requirements into a structured, four-phase workflow that supports consistent, timely, and defensible decision-making. Each phase is designed to ensure that medical evidence is fully developed, appropriately evaluated, and applied to the PERS definition of disability, supporting accurate recommendations and efficient case progression.

Our service delivery model is fully aligned with PERS program requirements and timelines:

C

This structured workflow ensures consistent timelines, clear accountability, and full transparency across all cases, enabling PERS to manage caseloads efficiently and maintain program integrity.

RFQ #3140004550 | June 1, 2026 27

Cases involving non-compliant members will be escalated to PERS within one (1) business day. A case is considered non-compliant if an applicant:

• Does not comply with the information request within 90 calendar days of the request date

• Has returned to work

• Is withdrawing their claim

• If the applicant’s death is reported

All notifications to PERS regarding applicant non-compliance, return to work, withdrawal, or death will be issued within one (1) business day in accordance with RFQ requirements.

Our proactive outreach and structured intake process ensure complete and accurate case files early, reducing delays in downstream clinical review and supporting timely determinations.

Case Development and Documentation A complete case file is critical to making accurate and supportable disability determinations.

During case development, RFQ #3140004550 | June 1, 2026 28

This approach ensures that cases are fully developed before clinical review begins.

Ongoing Case Monitoring

Phase 2 Clinical Triage (Days 2-21) Clinical triage establishes the review plan, case categorization, and path to determination within required timelines. This phase ensures that each case contains sufficient medical and vocational information to support a timely and accurate determination. Case development activities during this phase are conducted to ensure that a complete case file is established within the required 21-calendar-day timeline.

PERS will be contacted if the required information, such as the applicant’s employment information or a completed HIPAA-compliant medical release form, is missing from the case file.

RFQ #3140004550 | June 1, 2026 29

Phase 3 Assessment and Determination (Days 22 – 37) Phase 3 is the core of the disability determination model, where clinical evidence is evaluated and translated into a recommendation aligned with PERS statutory requirements.

Independent Medical and Related Assessments (IME, Independent Professional Evaluation (IPE), Functional Capacity Evaluation(FCE))

Assessment and determination translate clinical evidence into a compliant disability recommendation aligned with PERS statutory requirements.

RFQ #3140004550 | June 1, 2026 30

When sufficient medical information cannot be obtained from the applicant’s treating physician(s) and other clinicians, ForHealth Consulting will request authorization from PERS to schedule an IME, IPE, or FCE. All in-person examinations will be conducted only with prior approval from PERS, in accordance with RFQ requirements, and no in-person exam will be scheduled without explicit authorization from PERS.

ForHealth Consulting will contact the applicant within one (1) business day of the decision to pursue an IME, IPE, or FCE to explain the process, outline expectations, and coordinate scheduling.

ForHealth Consulting will notify PERS within one (1) business day if the member undergoing medical review is non-compliant with a scheduled assessment.

IME Provider Network Coordination and Oversight

RFQ #3140004550 | June 1, 2026 31

ForHealth Consulting will match members with qualified providers located within a 50-mile radius of the applicant’s residence, whenever possible.

ForHealth Consulting will coordinate scheduling of IME/IPE services and manage all communication with members and providers to ensure timely completion of assessments.

Disability Determination

RFQ #3140004550 | June 1, 2026 32

Review and Submission to PERS A full review of the disability determination report package is completed prior to submission to PERS. During the review, all determination forms and the disability determination rationale are examined to ensure that all required aspects are adequately addressed.

Appeals

Appeals Hearings and Support ForHealth Consulting supports our public retirement system clients by providing expert clinical and vocational testimony for all disability-related program appeals.

In 2025, fewer than one percent of our determinations were appealed, and of the cases that went to appeal, 100% of our decisions were upheld.

RFQ #3140004550 | June 1, 2026 33

Appeal Intake and Review ForHealth Consulting initiates appeal reviews within one (1) business day of notification and evaluates all prior records and newly submitted medical and vocational evidence to support a complete and independent review.

Appeal Determination and Documentation The results of the appeal review are documented in an appeal review form approved by Mississippi PERS that explains the clinical and vocational basis for the recommendation. The completed appeal review is transmitted to PERS for consideration. ForHealth Consulting will ensure that all documentation associated with the appeal, including the appeal review form and supporting materials, is maintained and made available to PERS as required.

Appeal Preparation and Testimony ForHealth Consulting provides clinical and vocational support for appeals hearings as requested by PERS.

Appeal Reviewers prepare for hearings by reviewing the complete case file and developing materials to support testimony, including clinical findings, functional limitations, and vocational considerations.

At the administrative hearing, the Appeal Reviewer and, when required, the supporting physician, nurse practitioner, psychologist, or vocational expert will provide competent testimony regarding both the clinical and vocational aspects of the determination.

RFQ #3140004550 | June 1, 2026 34

Testimony is based on objective medical evidence and aligned with PERS requirements.

ForHealth Consulting staff are available to provide pre-hearing preparation and consultation to PERS as needed.

Compliance with PERS Statutes and Appeal Requirements All appeals activities are conducted in accordance with Mississippi Code §25‑11‑113, §25‑11‑115, and PERS Regulations Chapter 42, including adherence to established timelines and recognition that final administrative authority resides with the PERS Board of Trustees.

Appeal reviews are initiated within one (1) business day and incorporate all prior and newly submitted medical and vocational evidence.

Phase 4 Disability Continuation and Periodic Review

RFQ #3140004550 | June 1, 2026 35

RFQ #3140004550 | June 1, 2026 36

Data Security, Confidentiality, and HIPAA Compliance Technology Security ForHealth Consulting’s information security approach aligns with the requirements outlined in Attachment C and supports the confidentiality, integrity, and availability of PERS data. The UMass Chan security program is standards-based and draws from measurements and guidelines set by the HIPAA and NIST security standards for the storage and management of Protected Health Information (PHI). Our controls are designed to meet applicable federal and state requirements, including HIPAA, and are implemented without exceeding or conflicting with the commitments defined in our Attachment C responses.

Data Redundancy and Disaster Recovery The case management system is supported by established backup processes for core transactional system components. Case management data is transferred to the reporting and analytical database, which provides a second level of backup for key data. Backup processes are aligned to system architecture and managed in accordance with UMass Chan Information Technology (IT) protocols.

Jessica.davis4@umassmed.edu Highlight

Jessica.davis4@umassmed.edu Highlight

RFQ #3140004550 | June 1, 2026 37

Scope and Nature of PERS Data Access

Work Environment and Equipment Controls The ForHealth Consulting disability determination workforce is primarily remote. All employees are required to work from a dedicated workspace that adheres to UMass Chan cybersecurity protocols. Equipment used to perform job duties is issued by UMass Chan, and security updates are pushed to the equipment on a regular basis by the UMass Chan IT and Security Compliance Teams.

A limited number of ForHealth Consulting employees work onsite at our Westborough facility to process incoming and outgoing mail.

ForHealth Consulting disability review team members are issued UMass Chan devices, including Lenovo ThinkPad T14 Gen 5 and Lenovo ThinkPad P16 G2, each running the latest

RFQ #3140004550 | June 1, 2026 38 version of Microsoft Windows 11 and Microsoft Defender antivirus operating systems. Devices are issued this way to ensure enterprise security standards, access controls, patching, and company administrative operating procedures are maintained.

Data Handling and Confidentiality PERS data is confined to ForHealth Consulting’s client portal and case management system during the initial and periodic reexamination process. The disability determination team utilizes a paperless workflow. For inbound digital faxes, ForHealth Consulting leverages MoveIT secure file transfer protocol (SFTP) to transfer documents to secure folders within our share drive. To ensure industry-standard security, ForHealth Consulting leverages Markley Solutions to host and secure enterprise applications in both on-prem and Infrastructure-as-a-Service (IaaS) environments. The annual Markley SOC 2 Type II report is available upon client request via a fully executed NDA between the client and Markley Solutions.

All case information is handled electronically. Cases will be received from PERS through a client portal. A Program Coordinator will review incoming case information received through the portal and transfer it electronically into ForHealth Consulting’s case management system. All required case processing steps, with the exception of IME/IPE processing, occur within ForHealth Consulting’s case management system. IME/IPE referral, provider assignment, and report production are completed within the UberDoc platform. Data transfer between ForHealth Consulting and UberDoc is handled electronically.

ForHealth Consulting accesses PERS data exclusively through authorized systems and do not download, store, or retain PERS information outside the secure portal or case management environment. ForHealth Consulting is prohibited from creating screenshots, photographs, or unauthorized copies of PERS data and must adhere to established confidentiality and acceptable use policies at all times.

Device and Endpoint Security Practices The UMass Chan Information Security Program defines controls for managing the confidentiality, integrity, and availability of UMass Chan information assets as defined by NIST SP 800-53. The UMass Chan Information Security Program is aligned with federal and state contracts and relevant regulations, including HIPAA.

UMass Chan and ForHealth Consulting have established operational requirements that support the achievement of security commitments, relevant laws and regulations, and other system requirements.

Use of encryption technologies to protect PHI is implemented in alignment with NIST 800-53 requirements. Data is encrypted at rest at AES 256 levels and in transit using Transport Layer Security (TLS) 1.2 or greater.

Jessica.davis4@umassmed.edu Highlight

Jessica.davis4@umassmed.edu Highlight

Jessica.davis4@umassmed.edu Highlight

Jessica.davis4@umassmed.edu Highlight

Jessica.davis4@umassmed.edu Highlight

RFQ #3140004550 | June 1, 2026 39

UMass Chan Intrusion Detection and Intrusion Protection Systems (IDS/IPS) identify anomalous events and send them to the Security Information and Event Management (SIEM) system for correlation and analysis. Both internal and external vulnerability scans are conducted regularly, and vulnerabilities are remediated based on their level of criticality.

A layered defense-in-depth firewall architecture protects systems and data at the network, application, and identity levels. Firewalls are governed by the Information Security team and require approval prior to implementation. Patches are applied monthly or more frequently based on criticality. Antivirus software is installed on all systems, updated daily, and centrally managed.

SFTP between UMass Chan’s primary data center and AWS VPC environment leverages an on-premises MoveIT SFTP solution. Only approved UMass Chan users authenticated through Microsoft Azure Identity Management with multi-factor authentication may access systems. Files are encrypted at rest and during transmission, and files remaining on the MoveIT servers are deleted automatically after 10 days.

Access Control and Authentication Access to systems and data is controlled through individual user accounts and associated security roles. Accounts are requested by program management and provisioned through system administrators. A data access and security coordinator manages role-based access for the disability determination team. Neither workstations nor accounts are shared.

Privacy Awareness and Regulatory Understanding ForHealth Consulting is required to follow HIPAA, PII protections defined in the Privacy Act of 1974, and Mississippi laws related to privacy and security of personal data, including health information.

All UMass Chan employees are required to complete information security and privacy training based on HIPAA Privacy and Security Rule, NIST 800-53, and the Center for Internet Security.

Standard training is assigned to all new employees and completed annually.

The privacy and security of applicant data are embedded in the ForHealth Consulting culture.

Standard practices used to ensure that data is secure include telephonic outreach requirements for verifying caller identity, voicemail scripts based on minimal necessary standards, and verifying the source fax and mailing addresses prior to sending correspondence.

Incident Awareness and Reporting Users are trained to immediately report any notifications of disclosure to their manager. At an enterprise level, UMass Chan IT and Security Compliance utilizes security tools that provide

Jessica.davis4@umassmed.edu Highlight

Jessica.davis4@umassmed.edu Highlight

Jessica.davis4@umassmed.edu Highlight

RFQ #3140004550 | June 1, 2026 40 automated intrusion detection and situational awareness based on pre-defined indications of compromise.

Upon receiving notification of a suspected disclosure incident, the Account Manager notifies the UMass Chan Privacy and Compliance department and submits a Disclosure Report. A Privacy and Compliance department representative will determine the next steps. For misdirected documents, the Account Manager will request a certificate of destruction. PERS will be notified within contractual reporting timeframes.

Professional Responsibility Completion of case reviews within a limited-access, role-based case management system minimizes inadvertent disclosures. The only data that is not contained in the case management system includes medical information mailed to ForHealth Consulting and faxed information.

ForHealth Consulting destroys paper documents and temporary electronic documents once they are successfully uploaded into the case management system.

All ForHealth Consulting staff are able to encrypt email messages by entering “SECURE” in the subject line. If the "SECURE" keyword is used in the subject line, the email is securely transmitted using Microsoft Purview / Azure Information Protection / Office Message Encryption.

Emails sent to domains within the TLS list are also transmitted securely using enforced TLS routing.

Information Security Governance Under the direction of the UMass Chan Information Security Officer (ISO), the UMass Chan Information Security Program manages risks to the confidentiality, integrity, and availability of IT assets and data. The ISO reports to the UMass Chan Chief Information Officer and manages a team of nine (9) full-time information security professionals in both a wide range of technical roles (a four-person Threat Analysis and Response team) and a three-person Information Security Compliance team supervised by a Manager of Compliance specializing in areas such as information security compliance, training, education, vendor risk management, and contract review. One position on the ISO’s team is a Sr. Information Security Analyst dedicated to working exclusively with the ForHealth Consulting division on all aspects of information security.

The program has a high degree of maturity and aligns with the NIST Cybersecurity Framework and SOC 2 Type II audited controls. A complete information security policy framework is rigorously maintained and reviewed annually and supported by documented information security standards and procedures. Access to confidential information is limited to workforce members whose roles require access, applying the principle of least privilege.

Jessica.davis4@umassmed.edu Highlight

Jessica.davis4@umassmed.edu Highlight

Jessica.davis4@umassmed.edu Highlight

RFQ #3140004550 | June 1, 2026 41

Reporting and Ongoing Program Management Quarterly Reporting ForHealth Consulting will provide quarterly reports on claim activity in accordance with RFQ requirements, including pending, approved, denied, and closed disability claims, as well as program performance metrics.

Ongoing Communication and Collaboration ForHealth Consulting values communication and regular touchpoints with our clients. We recommend holding frequently scheduled meetings during the implementation phase and throughout the first year of the engagement. Thereafter, meetings will be scheduled to coincide

RFQ #3140004550 | June 1, 2026 42 with quarterly reporting and will focus on vendor performance and opportunities for enhancement.

Program Oversight and Quality Management

Prospective Quality Review

Retrospective Quality Review

RFQ #3140004550 | June 1, 2026 44

Attachments Attachment B – PERS Confidentiality Agreement

RFQ #3140004550 | June 1, 2026 45

RFQ #3140004550 | June 1, 2026 46

Attachment C – Independent Medical Reviewer Cybersecurity & Privacy Practices Questionnaire

RFQ #3140004550 | June 1, 2026 47

RFQ #3140004550 | June 1, 2026 49

RFQ #3140004550 | June 1, 2026 50

RFQ #3140004550 | June 1, 2026 51

RFQ #3140004550 | June 1, 2026 52

RFQ #3140004550 | June 1, 2026 53

Attachment D – Certifications & Assurances

RFQ #3140004550 | June 1, 2026 54

RFQ #3140004550 | June 1, 2026 55

Attachment E – Release of Bid as Public Record

RFQ #3140004550 | June 1, 2026 56