26-MedSelect License & Software Support SP w SS

The State of Illinois is seeking a sole source procurement for MedSelect License & Software Support through a small purchase method. The contract opportunity, designated as 26-MedSelect License & Software Support SP w SS, was posted on October 13, 2025, with proposals due by October 16, 2025. While specific technical details about the MedSelect software are not explicitly outlined, the procurement is accompanied by critical documentation including cloud hosting terms and conditions, IT standard terms, and vendor certification requirements. Potential vendors must demonstrate comprehensive compliance with extensive security protocols, including adherence to NIST 800-53, HIPAA, and FISMA regulations, and provide detailed security documentation such as a System Security Plan. Vendors will be required to undergo security risk assessments, implement robust data encryption, ensure information integrity, maintain comprehensive backup systems, and store data within the contiguous United States. The procurement process demands rigorous technical and security capabilities, with vendors expected to provide independent third-party audits like SSAE-18 certifications and SOC 1/SOC 2 reports.

The contract opportunity appears to have no specific set-aside designations for disadvantaged enterprises, though the standard Illinois certifications form suggests a commitment to diverse and ethical business practices. Vendors must complete 34 mandatory certifications covering areas such as business ethics, employment conduct, tax compliance, and corporate integrity. While no incumbent vendors are mentioned, potential contractors must be prepared to integrate with existing state technology infrastructure and comply with the Department of Innovation and Technology's security standards. The documentation indicates that cloud solutions must meet Cloud Security Alliance recommendations, and vendors may be subject to performance reviews that could impact future contract opportunities. Although a specific award value is not provided, vendors should anticipate comprehensive compliance requirements that may involve significant technical and administrative resources to meet the state's stringent security and operational standards.