J.4_ISG_Questionnaire.docx

Attachment J.4: Information Systems Group (ISG) Questionnaire

RFP-CMS-2015-8A-0101

Information Systems Group (ISG) Questionnaire

All questions must be answered either “yes” or “no”. All affirmative (“yes”) responses require statement or description of the anticipated need. There is no specific length limit, but answers should be concise: the purpose of this portion of the proposal is to identify/describe, not to justify, the needs.

1. Will access to CMS data be required in order to complete the SOW?

____ NO, if no, please skip to question 7.

____ YES

If access to more than one database is needed, please provide separate answers for each database referenced in questions 2-6:

2. Provide a description of the data being requested.

a. Include a summary explanation of the goals of the SOW as it relates to the specific data being requested. Please specify the specific databases requested and their source (e.g. chronic condition warehouse, MedPAR, etc.). The explanation should demonstrate a clear link between the outcomes/deliverables of the SOW and the specific data necessary. [NOTE: While some of this information may be contained in the SOW, the SOW should not be copied and pasted here. The SOW should be summarized with particular emphasis placed on the data needed by the contractor and how it will facilitate completion of the deliverables.]

b. Does the data needed include patient level, individually identifiable data? If yes, please describe the precise aspects of the SOW necessitating access to this data. [NOTE that while this type of information is highly protected by the QIO confidentiality regs, different requirements may exist for CMS data, and the COR and/or GTL should discuss this with the CMS business owner of the data.]

c. Does the data needed include names of specific physicians and/or providers? If yes, please describe the precise aspects of the SOW necessitating access to this data. [NOTE that while this type of information is highly protected by the QIO confidentiality regs, different requirements exist for CMS data, and the COR and/or GTL should discuss this with the CMS business owner of the data.]

d. Does the data needed include financial information or could it be used to determine financial information associated with specific providers and/or practitioners? If yes, please describe the precise aspects of the SOW necessitating access to this data. [NOTE that certain restrictions exist for financial data deemed proprietary, and the COR and/or GTL should discuss this with the CMS business owner of the data.]

e. Include an explanation regarding whether the access necessary is a one-time only conveyance of data to the contractor or will require on-going access to a specific database.

f. How is the data request limited to the minimum data necessary for this project? [The data requested must be limited to the scope of the SOW. For example, the data requested must consider whether the data can be limited by: the state, e.g., Maryland; time periods, procedure codes etc.]

g. Please provide an explanation regarding the sensitivity of the data, as well as any potential ramifications should unauthorized and/or inappropriate disclosures occur.

3. For each database requested, please specify the earliest possible date on which the data or access to the database will be needed.

4. Please provide information regarding your organizations ability to comply with the Health Insurance Portability and Accountability Act, as well as, the Federal Information Security Management Act.

5. Please describe any special considerations regarding mechanisms and/or requirements necessary to deliver the data to you or to allow you access to the database.

Are there any other potential concerns or needs that could arise later based on the unique aspects of the initiative?

6. Will this requirement necessitate, in addition to data already provided/available to the Offeror/Contractor as a result of its current contract (including base and any special-project or NCC modifications), data that would be provided via ISG or its contractors?

7. Will the project require the hosting of website or application on the HCQIS infrastructure?

8. Will there be any IT tool development required? If so, please note that it will have to be evaluated by ISG to determine if it meets CMS requirements. (Note: Any associated costs will be covered by the Offerer/Contractor which should include any out year renewal costs.)

9. Will there be any access to data or databases needed (differs from provision of data or datasets under question 1, above, in ability to view a database rather than receiving a copy of a data set written off the data)?

10. Will a request be coming in to use Data Exchange Services (i.e., QualityNet File Exchange, including creation of Custom Exchange Groups) specific to the project and in ways not already available to the offeror?

11. Will there be a request for “workbench time” (i.e., use of HCQIS workbench to analyze large data sets)? If so, please specify the tool/environment (i.e., SAS), as well as size and time period required.

12. Are there any data sets required that would not be obtained via CCSQ/ISG? (If “yes”, specify data and source and process/mechanism by which offeror anticipates obtaining the data.)

13. Will there be a requirement for Storage Area Network (SAN) space? If “yes”, funds must be set aside to cover the necessary procurement of the SAN space if required. See “procurement of hardware and software task” sheet to understand relevant pricing.) If so, what size will it potentially fall in:

h. 0 TO 500 GB

i. 500GB TO 1TB

j. 1TB TO 3TB

k. 3TB

Are there any additional IT or data needs or implications of your proposed approach to this project such as workstations/laptops etc… to access the HCQIS environment? (Note: Any associated costs will be covered by the Offerer/Contractor which should include any out year renewal costs.)