Summary of Specifications:
The Department of Information Technology of Douglas County Government, hereinafter referred to as the County, respectfully requests proposals from responsible and qualified firms for a technical security assessment of IT systems for HIPAA compliance. The assessment will: a) Identify and allow the County to better understand potential internal and external threats and vulnerabilities to electronic data; b) Compare the County’s existing security measures both technical and IT policy/procedure-oriented) against the requirements in HIPAA’s security regulations; c) Identify the County departments and their related data which are subject to HIPAA regulations; and d) Recommend feasible security measures that will allow the County to address policy issues, eliminate or mitigate harm resulting from each identified potential threat. All proposed fees for the assessment and deliverables shall be Fixed or Not to Exceed estimates. These estimates will be used as a basis for the contracts controlling licensing, implementation, documentation, presentation, and training.
