Exhibit_3_-_Confidential_Section_(1).docx

Exhibit 3 - Confidential Information Bid Event #EVT0010856 Audit Services RFP Plan Years 2027, 2028, 2029

Exhibit 3 - Confidential Information Bid Event # EVT0010856 Audit Services RFP Plan Years 2027, 2028, 2029

Exhibit 3 Confidential Information

The Kansas Open Records Act (K.S.A. 45-215 et seq.) requires RFP responses to be open to the public. However, the Kansas Open Records Act does permit limited materials to be protected from disclosure. Generally, those materials are financial information submitted as qualification statements and materials that are privileged under the rules of evidence. The materials meeting these exceptions and submitted in this section will be held as confidential. Please be advised that nondisclosure agreements will not be considered when reviewing these materials. Bids submitted without the requested confidential information will be considered non-compliant.

Vendors may not place information requested in other sections of this RFP into the Confidential Information section unless directed to do so by the RFP instructions.

3.01 Provide a copy of the most recent Type II SSAE18 (full report) or Type II SSAE16 for your company, whichever is newer. (If not available, explain why.) If there are any issues, provide written details on how the issues are being resolved.

3.02 Provide the most recent two years of your firm’s audited financial statements, including the balance sheet, income statement, and cash flow statement, plus notes. Provide the requested financial statements as an attachment to this section of the RFP. Disclose any current or emerging financial issues that might impact your ability to do business.

3.03 Provide a copy of the declaration page for the professional liability and errors and omissions coverage your organization carries. Is the coverage on a per-occurrence or aggregate basis? Describe what types of incidents are covered by the errors and omissions coverage.

3.04 Provide a copy of the declaration page for the cyber insurance coverage in force. Describe what types of cybersecurity breaches are covered under the policy?

3.05 Describe any changes in ownership, business operations, technologies, partnerships, or staffing anticipated within the next 24 months that would impact the services requested in this RFP or the level of service provided to the SEHP?

3.06 Please describe the company policy for securing data, including State of Kansas PHI data, on flash drives, laptops, and other portable media or information maintained on a cloud, for example, Amazon Web Services (AWS S3).

3.07 Disclose any current or emerging legal issues that could affect your company’s operation. List any pending litigation against your company. Describe any litigation against your company in the past five years, including any settled or dismissed matters that have or could influence your ability to continue your operation.

3.10 Are there any proposed changes to your organizational structure, operations, or mergers planned or anticipated? Do you anticipate any large acquisitions in the next year? What impact might these changes have on the SEHP plan operation? Detail any mergers and/or acquisitions that have occurred within the last 24 months.

ACKNOWLEDGE AND ACCEPT

I have reviewed the Confidential Information section of the Request for Proposal, and the information provided is thorough and accurate to the best of my knowledge.

Authorized Signature of Vendor

Printed Name of Signatory

Title

Date