What the buyer needs
AI summaryThe Siskiyou County Health and Human Services Agency, Public Health Division seeks qualified contractors to provide HIPAA managed compliance services. The selected contractor will deliver advisory, governance, documentation, reporting, and coordination services to support continuous compliance with HIPAA Privacy, Security, and Breach Notification Rules. The scope encompasses program governance, security risk analysis, policy support, technical safeguards advisory, vendor management, workforce training, and breach response preparedness. Eligibility is limited to onshore United States organizations. Applicants must attend a mandatory pre-bid meeting via Zoom on November 10, 2026, and submit questions by November 13, 2026. Proposals must be submitted by mail, delivery, or email by 4:00 PM on November 20, 2026, and must include a fee schedule outlining all associated costs.
Scope of work
- Program governance and compliance framework maintenance
- Structured HIPAA Security Risk Analysis and ongoing risk management
- HIPAA policy and documentation lifecycle support and review
- Advisory guidance regarding required and addressable technical safeguards
- Business Associate and third-party vendor management support
- Workforce HIPAA training coordination and awareness support
- Incident preparedness and breach response support including a tabletop exercise
- Provision of reports, compliance task matrices, and ePHI asset inventory maps
How proposals are evaluated
| Criterion | Weight / scoring |
|---|---|
| Qualifications | Not specified |
| Approach | Not specified |
| Experience and references | Not specified |
| Proposed costs | Not specified |
Minimum qualifications
- Demonstrated experience supporting public agencies, healthcare entities, or other covered entities and business associates in HIPAA compliance program management
- Procure and maintain valid licenses, certificates, or permits required by federal, state, county, or municipal governments
Documents to include with your response
- Cover Letter signed by an authorized representative
- Qualifications including examples of completed projects
- Evidence of Insurance
- Company Profile
- Approach and methodology analysis
- At least three (3) references
- Price Proposal fee schedule
- Conflict of interest disclosure
How to submit
- Method
- Mail, hand delivery, and/or email
- Instructions
- Mail or deliver to Shelly Davis, Director, Siskiyou HHSA-Public Health Division, 810 S. Main St. Yreka, CA 96097, or email to [email protected] with RFP # 27-02 in subject line. Electronic submittals require one signed copy.