Optimization and Data Integrity Services

UConn Health is seeking a vendor to provide optimization and data integrity services for systems and applications that handle sensitive and critical data, including protected health information, personally identifiable information, payment card industry data, financial records, and regulatory information. The agency requires a solution that can be hosted on-premises, vendor-hosted, or through a hybrid model. If the solution is vendor-hosted, the provider must identify the hosting platform, such as AWS or Azure, and demonstrate that supporting systems have attained a third-party security assessment. The scope of work requires the vendor to conduct vulnerability scans and periodic penetration tests on applications and networks. The selected provider must deliver comprehensive security documentation, including cybersecurity whitepapers, architectural diagrams, and manufacturer disclosure statements for medical device security. Additionally, the system must support multi-factor authentication, generate ad hoc reports containing the specified data elements, and forward logs to a security information and event management system. Eligibility is strictly limited to onshore organizations based in the United States. The agency requires the performance of all work to take place offsite. Bidders must submit a pricing proposal as the agency is currently looking for budget proposals, and all questions regarding this opportunity must be submitted no later than June 29, 2026.