SOC Audit for One System

The Oregon Department of Human Services Office of Contracts & Procurement, on behalf of the Oregon Health Authority, is seeking a qualified consultant to perform an annual SOC 2 Type 2 Cyber Security Assessment for the ONE System, which provides financial eligibility determination for select OHA and ODHS programs. The procurement is a Work Order Contract issued to one of four pre-qualified consultants: CBIZ, CSG Government Solutions Inc., Deloitte Consulting, or The North Highland Company, LLC. Key deliverables include a Project Plan and SOC 2 Type 2 Report, with the examination required to comply with a Secretary of State audit finding recommendation. The RFQ evaluation process utilizes a best value analysis with weighted criteria: Approach and Methodology (30 points), Qualifications of Contracting Firm (25 points), Qualifications of Key Persons (35 points), and Price Proposal (10 points). Required key personnel include an Engagement Manager, Project Managers for readiness assessment and Type 2 examination, and a Lead Auditor. Critical dates include a question submission deadline of April 22, 2025, at 4:00 PM PT, with quotes due by May 3, 2025, at 4:00 PM PT.

The procurement is limited to the four pre-qualified consultants, with no specific set-aside designations mentioned. Submissions must include detailed resumes and three references for key personnel, along with descriptions of similar projects valued at $1 million or greater and completed reference check forms. All services must be performed within the United States or US territories, with travel expenses included in the not-to-exceed amounts. CBIZ Advisors, LLC was ultimately identified as the apparent successful awardee following the evaluation process, with a Notice of Award issued on May 13, 2025. While specific contract pricing is not disclosed, the Work Order Contract allows for potential amendments to adjust scope, add services, or extend time as needed. Procurement Specialist Rhonda M. Campbell can be contacted at (503) 983-0472 or Rhonda.M.Campbell@odhsoha.oregon.gov for additional information about the award determination.