Privacy and Security Risk Assessment

The Oklahoma A&M System's OSU Center for Health Sciences (CHS) is seeking a qualified vendor to conduct a comprehensive Privacy and Security Risk Assessment through Request for Proposal (RFP) number OSUTUL-RFP-000124-2017. The procurement targets a detailed risk assessment focused on compliance with HIPAA and HITECH regulations across multiple CHS departments. Key deliverables include identifying areas of noncompliance, performing an exhaustive evaluation of privacy and security protocols, and providing specific recommendations to enhance Privacy and Security Rule compliance. The solicitation was opened on August 8, 2016, at 12:00 AM CST and closed on August 23, 2016, at 3:00 PM CST, with the primary contact being Michelle Boyd, reachable at mjboyd@okstate.edu or +1 (918) 594-8204. The procurement is categorized under commodity code 85000000 for Healthcare Services, with payment terms of 0% 30, Net 30, indicating a standard net 30-day payment structure for the selected vendor.

The RFP does not explicitly outline specific set-aside designations or restrictions on responding organizations. The document is situated within Harmon County and Welty CDP jurisdictions in Oklahoma, suggesting a localized procurement context. While no incumbent vendors are directly mentioned, the RFP implies a need for a vendor with specialized expertise in healthcare privacy and security risk assessments. The procurement appears to be seeking a vendor capable of providing comprehensive compliance evaluation services for the OSU Center for Health Sciences. Though a specific award value is not disclosed in the provided documentation, the complexity of the required risk assessment suggests a potentially significant contract value commensurate with the depth of work required to thoroughly assess privacy and security protocols across multiple departments.