Exhibit A-4-V2.docx

EXHIBIT E-6

Technical Proposal Attestation

EXHIBIT A-4-V2

SUBMISSION REQUIREMENTS AND EVALUATION CRITERIA COMPONENTS (TECHNICAL RESPONSE)

Table of Contents

REMAINDER OF PAGE INTENTIONALLY LEFT BLANK

INSTRUCTIONS TO RESPONDENTS FOR COMPLETING EXHIBIT A-4-V2

All Respondents to this solicitation shall utilize Exhibit A-4-V2, Submission Requirements and Evaluation Criteria Components (Technical Response), for submission of its response and shall adhere to the instructions below for each Submission Requirement Component (SRC).

Respondents shall not include website links, embedded links and/or cross references between SRCs.

Each SRC contains form fields. Population of the form fields with text will allow the form field to expand and cross pages. There is no character limit.

Attachments are acceptable for any SRC but must be referenced in the form field for the respective SRC and located behind each respective SRC response. Respondents shall name and label attachments to refer to respective SRCs by SRC identifier number.

Note: In addition to the complete, electronic PDF copy of this Exhibit, the Respondent should submit its response to each SRC in a separate electronic folder that is labeled with the SRC number. The electronic folder for each SRC response should contain the response to the SRC along with all attachments applicable to the SRC.

Agency evaluators will be instructed to evaluate the responses based on the narrative contained in the SRC form fields and the associated attachment(s), if applicable.

Each response will be independently evaluated and awarded points based on the criteria and points scale using the Standard Evaluation Criteria Scale below unless otherwise identified in each SRC contained within Exhibit A-4-V2.

STANDARD EVALUATION CRITERIA SCALE

The SRCs in Exhibit A-4-V2 may not be retyped and/or modified and must be submitted in the original format.

Failure to submit, Exhibit A-4-V2, may result in the rejection of response.

Respondent Name:

CATEGORY 1: GENERAL DOCUMENTATION

SRC# 1 – EXECUTIVE SUMMARY

The Respondent shall include an Executive Summary, which demonstrates its overall understanding of the services described in this ITN and describes the prominent features of its Technical Response.

Response:

Score: No points will be awarded for the Executive Summary.

CATEGORY 2: ORGANIZATIONAL STRUCTURE AND INFORMATION TECHNOLOGY REQUIREMENTS

SRC# 2: ORGANIZATIONAL STRUCTURE AND HISTORY

The Respondent shall demonstrate its capability to provide the services specified in this ITN by describing its organizational structure, history, and what uniquely qualifies the Respondent for this project. For responses including the use of proposed subcontractors, provide a complete list of all proposed subcontractors with the same descriptions of organizational structure and history. At a minimum the description shall include:

1. The Respondent’s, and its proposed subcontractor’s, organizational structure, ownership, affiliations, and location(s).

2. The Respondent’s, and its proposed subcontractor’s, organizational chart and a depiction of where the services specified in this ITN fall within the organizational structure.

3. Background information on the Respondent’s organization, and on its proposed subcontractor’s organization(s), the size, and resources to include:

Name of Respondent and any subcontractor(s)

Date established

Ownership (public company, partnership, subsidiary, etc.)

Note: If the organization is owned or controlled by a parent company, the name, main office address, and parent company’s tax identification number should be provided in the response.

Organization’s Federal Employer's Identification Number (FEIN) and Florida Corporate Charter Number

Organization’s primary line of business

Total number of employees

Number of personnel engaged in the services specified in this ITN, including the names and brief biography of senior managers and partners assigned to the project, including certifications/accreditations

Attachments are limited to the following:

· Organizational chart of the Respondent and its subcontractor(s)

· List of the Respondent’s, and its proposed subcontractor’s, physical location(s)

Evaluation Criteria:

1. The adequacy of the Respondent’s description of its organizational structure, ownership, affiliations, and location(s), as well as the organizational structure, ownership, affiliations, and location(s) of any proposed subcontractors.

2. The adequacy of the Respondent’s organizational chart, including where the services described in this ITN fall within the organizational structure, as well as the organizational chart of any proposed subcontractor(s), including where the services described in this ITN fall within the organizational structure.

3. The adequacy of the Respondent’s description of the organization’s background, size, and resources, as well as the description of the background, size, and resources of any proposed subcontractors.

Score: This Section is worth a maximum of 15 raw points with each of the above components being worth a maximum of 5 points each.

CATEGORY 3: RESPONDENT QUALIFICATIONS

SRC# 3: VENDOR STAFFING

The Respondent shall identify its proposed team, including key staff members, and describe how its team will implement and support the services specified in Attachment B, Scope of Services.

Key staff, at a minimum, shall include the positions described in Attachment B, Scope of Services, Section II., Manner of Service(s) Provisions, Sub-section B, Services Provided by the Vendor, Item 12:

Project Director – Responsible for coordinating all activities between the Agency and the Vendor, managing the Florida HIE project at the strategic level, managing resources, and overseeing finances to ensure that the project progresses on time and cost effectively.

Technical and Operations Director – Responsible for the technical operations of the services of the Florida HIE.

Marketing and Outreach Manager – Responsible for deployment of the Marketing and Outreach Strategy outlined in the Project Management Plan, Florida HIE business development activities, research and development of marketing opportunities and plans, and implementation of those plans.

The Respondent shall describe the qualifications of key staff members and include their resumes, demonstrating applicable education and experience to provide the services specified in this ITN.

The Respondent shall provide a detailed description of proposed staff, including proposed subcontractor’s staff, by type/credentials, including the number (total and full-time equivalent), qualifications, locations, and project functions of staff.

1. The adequacy of the qualifications of the proposed team, key staff, and subcontractor(s).

Score: This Section is worth a maximum of 5 raw points.

SRC# 4: PAST AND CURRENT HEALTH INFORMATION EXCHANGE ACTIVITY EXPERIENCE

The Respondent shall demonstrate its capability to provide the services in Attachment B, Scope of Services, by describing its relevant experience with health information exchange activities. For responses that include a subcontractor(s), the same description of experience shall be provided.

1. The Respondent shall submit a list of current and previous contracts for which it is/was the lead Vendor on any projects that are similar in size, scope, and complexity as the services specified in this ITN.

For each identified contract, the following information shall be provided:

· The name and address of the client

· The name of the Project

· The time period of the Project

· A brief narrative describing the role of the Respondent and scope of the work performed, including services provided

· The scheduled and actual completion dates for development and implementation. The description shall include any barriers encountered that hindered implementation, as applicable and the Respondent’s resolution for overcoming them

· Significant accomplishments and achievements

· The use of any subcontractor(s), their scope of work, and the percentage of the work completed by subcontractors

2. A detailed description of the Respondent’s experience working with creating and maintaining health information exchange technologies.

3. A detailed description of the Respondent’s experience handling health care data and following the Health Information Portability and Accountability Act (HIPAA).

4. A detailed description of the Respondent’s experience working with Government entities related to health information exchange activities.

Response:

Evaluation Criteria:

1. The adequacy of the Respondent’s capability to provide services based on evidenced experience.

SRC# 5: SANCTIONS

The Respondent shall list and describe any sanctions levied against the Respondent, its affiliates, its subsidiaries, its parent company, the affiliates and subsidiaries of its parent company, its affiliate’s subsidiaries, and subcontractors (handling subcontracts related to consultant services when the subcontracts are for $250,000.00 or more annually), within the five (5) years preceding the date of its response to this ITN. Sanctions shall include those imposed by a state or federal entity in relation to a contract under which the Respondent provided health care system implementation and operations services or government services contracts in excess of one million dollars ($1,000,000.00). Sanctions shall include financial consequences, damages, liquidated damages, or other amounts paid by the Respondent in a settlement of a contract dispute.

Information requested for each sanction shall be provided by the Respondent for administrative and non-administrative sanctions. An administrative sanction means the issue pertains to timeliness or the use of an incorrect format (i.e., report, deliverable, or another required item submitted late or submitted in the wrong format). A non-administrative sanction means the issue pertains to performance in accordance with the contract scope of services (i.e., incomplete, or inaccurate deliverable or services).

Response:

Evaluation Criteria:

The extent to which sanctions were due to issues with performance (non-administrative) in accordance with the contract scope of services, versus administrative issues.

The severity of the sanction(s) from minor (dollar amounts less than $10,000.00 or resolution time less than 90 calendar days) to significant ((dollar amounts above $10,000.00 or resolution time longer than 90 calendar days or numerous sanctions (more than one sanction among two or more contracts)).

Score: This Section is worth a maximum of 10 raw points with each the above component being worth a maximum of 5 points.

For Item 1:

5 points if no sanctions.

4 points if sanction(s) were related only to administrative issues.

3 points if non-administrative sanction(s) were all minor and there were fewer than four (4) incidents.

2 points if non-administrative sanctions were all minor but four (4) or more incidents.

1 point if any significant administrative sanction.

0 points if any significant non-administrative sanction.

For Item 2:

a. 5 points if no sanctions.

b. 4 points if sanction(s) were minor and there were fewer than four (4) incidents.

c. 3 points if sanctions were all minor but four (4) or more incidents.

d. 2 points if up to two (2) significant sanction(s); or more than two (2) contracts with multiple sanctions.

e. 1 point if more than two (2) significant sanctions but fewer than five (5); or more than two (2) but fewer than five (5) contracts with multiple sanctions.

f. 0 points if performance falls below the above limits.

CATEGORY 4: IMPLEMENTATION PLAN AND ACTIVITIES

SRC# 6: PROJECT MANAGEMENT AND SERVICE DELIVERY APPROACH

The Respondent shall provide its project management and service delivery approach and explain how it reflects industry best practices. The Respondent shall demonstrate its capabilities in working with a variety of stakeholders described in Attachment B, Scope of Services.

The Respondent shall describe its proposed approach to PD-1: Project Management Plan for the services described in Attachment B, Scope of Services, Section II., Manner of Service(s) Provision, Sub-section B, Services Provided by the Vendor. As part of the proposed approach, the Respondent must include a draft implementation plan inclusive of the following:

1. Necessary steps to achieve activities.

2. Timeline for completing services and requirements.

3. Milestones for exchange activities to be completed.

The proposed project approach and implementation plan must demonstrate a thorough understanding of the scope of work and the capability to successfully deliver the services in this ITN.

The Respondent shall demonstrate the following:

1. Approach to following project management best practices, including but not limited to:

· Scope Management

· Requirements Management

· Schedule Management

· Resource Management

· Stakeholder Management

· Communications Management

· Cost Management

· Quality Management

· Risk and Issue Management

· Change Management

2. Knowledge The Office of the National Coordinator for Health Information Technology (ONC) standards (such as the Trusted Exchange Framework and Common Agreement [TEFCA]).

3. Experience implementing the Project Management Life Cycle for health information exchange solutions.

4. Experience with, and approach to, successful delivery of services and solutions involving multiple vendors, government agencies, and health care entities.

5. Ability to implement and provide services and solutions to support the Agency’s health information exchange initiatives outlined in Attachment B, Scope of Services, Section I., Service(s) to be Provided, Sub-section B., Overview/Purpose.

1. The adequacy of the Respondent’s proposed approach to project management and service delivery, and its alignment with ONC standards, including demonstrated understanding and approach to the Project Management Life Cycle for health information exchange solutions.

2. The adequacy of the Respondent’s draft implementation plan to demonstrate successful management and capability to deliver the services.

3. The adequacy of the Respondent’s experience and demonstrated ability to successfully deliver services and solutions involving multiple vendors, government agencies, and health care entities.

Score: This Section is worth a maximum of 15 raw points with each of the above components being worth a maximum of 5 points.

SRC# 7: RELATED SERVICES AND ENHANCEMENTS

The Respondent shall provide a description of how its proposed implementation plan (from SRC# 6 - Project Management and Service Delivery Approach) is adaptable to rapidly changing health information technology, technical standards, and market conditions at the state and national levels.

The Respondent shall describe its process for recommending future innovations and enhancements. The proposed process shall detail how it plans to handle need identification, stakeholder input, governance, and implementation of potential innovations and/or enhancements.

1. The adequacy of the Respondent’s capability to provide adaptability and innovative solutions to a changing HIE landscape and market conditions.

CATEGORY 5: SYSTEMS SECURITY AND DISASTER RECOVERY

SRC# 8: HEALTH INFORMATION EXCHANGE (HIE) SYSTEMS SECURITY

The Respondent shall describe its protocols for ensuring system security and confidentiality of patient identifiable data as noted in Attachment B, Scope of Services Section VIII., System Functionality.

The Respondent’s response for this SRC may include attachments, as prescribed herein. Attachments may include, but are not limited to, protocol, security certifications, and a copy of the most recent security audit report.

The Respondent shall describe its knowledge and experience related to current national standards and certifications for health information exchange, including but not limited to HITRUST certification, as described in Attachment B, Scope of Services, Section II, Manner of Service(s) Provision, Sub-section B, Services Provided by the Vendor, Item 20.

1. The adequacy of the Respondent’s security protocols based on documentation.

2. The adequacy of the Respondent’s knowledge and experience related to current national standards and certifications for health information exchange.

Score: This Section is worth a maximum of 10 raw points with each of the above components being worth a maximum of 5 points.

SRC# 9: SECURITY RATING SCORE REQUIREMENTS

In accordance with Attachment B, Scope or Services, Section IX., Information Technology, Sub-section T., the Agency shall conduct an initial IT security risk score scan on the Respondent, as well as periodic or continuous security monitoring through an information security rating service, at the Agency's expense, to enable the Agency to effectively measure and mitigate the successful respondent’s security risks. The Respondent will work with the Agency’s Security Rating Score Provider to define the relevant Respondent assets providing Agency services.

1. The adequacy of the Respondent’s security rating score by determining whether the Respondent has received:

a. A score in the top 90-100% of submitters;

b. A score in the top 80-89% of submitters;

c. A score in the top 70-79% of submitters;

d. A score in the top 60-69% of submitters;

e. A score in the top 50-59% of submitters; or

f. A score in the lower 0-49% of submitters.

Score: This Section is worth a maximum of 5 raw points as outlined below:

a. 5 points for a score in the top 90-100% of submitters;

b. 4 points for a score in the top 80-89% of submitters;

c. 3 points for a score in the top 70-79% of submitters;

d. 2 points for a score in the top 60-69% of submitters;

e. 1 point for a score in the top 50-59% of submitters; or

f. 0 points for a score in the lower 0-49% of submitters.

SRC# 10: DISASTER RECOVERY REQUIREMENTS

The Respondent shall demonstrate its capability and approach to meet the requirements described in Attachment B, Scope of Services, Section X., Disaster Recovery.

Response:

Evaluation Criteria:

1. The adequacy of the Respondent’s proposed approach and capability to develop and maintain a disaster recovery plan for restoring the application of software and current master files and for hardware backup in the event the production systems are disabled or destroyed.

2. The adequacy of the Respondent’s proposed approach and capability to ensure the disaster recovery plan limits service interruption to a period of twenty-four (24) clock hours and ensures compliance with all requirements under the resulting Contract.

3. The adequacy of the Respondent’s proposed approach and capability to ensure the records backup standards and a comprehensive disaster recovery plan shall be developed and maintained by the Vendor for the entire period of the resulting Contract and submitted for review annually by the anniversary date of the resulting Contract.

4. The adequacy of the Respondent’s proposed approach and capability to ensure it maintains a disaster recovery plan for restoring day-to-day operations including alternative locations for the Vendor to conduct the requirements of the resulting Contract.

5. The adequacy of the Respondent’s proposed approach and capability to ensure it maintains database backups in a manner that shall eliminate disruption of service or loss of data due to system or program failures or destruction.

6. The adequacy of the Respondent’s proposed approach and capability to ensure the disaster recovery plan is finalized no later than thirty (30) calendar days prior to the resulting Contract effective date.

7. The adequacy of the Respondent’s proposed approach and capability to ensure it amends or updates its disaster recovery plan in accordance with the best interests of the Agency and at no additional cost to the Agency.

8. The adequacy of the Respondent’s proposed approach and capability to ensure it makes all aspects of the disaster recovery plan available to the Agency at all times.

9. The adequacy of the Respondent’s proposed approach and capability to ensure it conducts an annual Disaster Recovery Plan test and submits the results for review to the Agency.

Score: This Section is worth a maximum of 45 raw points with each of the above components being worth a maximum of 5 points each.

AHCA ITN 012-23/24, Attachment A, Exhibit A-4-V2, Page 7 of 7