Siskiyou County Municode #27-01

Siskiyou County seeks ongoing HIPAA managed compliance services for Public Health

Siskiyou County’s Public Health Division is seeking ongoing HIPAA compliance advisory and support services. - Government buyer: County of Siskiyou, Health & Human Services Agency (HHSA), Public Health Division; County Counsel is identified in a draft agreement attachment. Shelly Davis is named in the solicitation materials. - OEMs and vendors: No product manufacturers, service vendors, or proposed contractors are named. The draft agreement does not identify the attorney. - Requested services: HIPAA compliance governance and tracking; security risk analysis and risk management; policy and documentation review; technical safeguards advisory; business associate and vendor oversight; workforce training coordination; and incident and breach-response preparation. - Key deliverables: HIPAA Risk Analysis Report, compliance task matrix or checklist, policy review and gap analysis, periodic executive reports, training records, incident-response materials, meeting notes and action logs, and—where County information is available—an ePHI asset inventory and data-flow map. - Notable requirements: The contractor provides advisory support; County retains policy ownership and operational, enforcement, and remediation decisions. No hands-on changes to County systems or production environments are permitted unless separately authorized. The solicitation calls for relevant experience, at least three references, a transparent fee schedule, and required licensing and professional liability insurance. A pre-proposal meeting is mandatory. - Additional attachment scope: A draft County Counsel agreement provides for specialized legal consulting upon County request, but leaves the attorney, legal matter, rates, compensation cap, and term unspecified. Attorney travel time is capped at 50% of the hourly rate. - Timing and value: Services are expected to begin after contract award, but the term and end date are unspecified. No option years, subscription term, quantities, or contract value are provided.

Description

Siskiyou County Health & Human Services Agency, Public Health Division, is seeking proposals from qualified firms to provide ongoing HIPAA managed compliance services. The scope includes compliance governance and oversight, security risk analysis, policy and documentation support, technical safeguards advisory, vendor and business associate oversight, workforce training, and incident preparedness and breach response support. Deliverables include a HIPAA Risk Analysis Report, compliance task matrix, policy review and gap analysis, periodic executive status reports, training records, incident response materials, meeting notes, and—where information is available—an ePHI asset inventory and data flow map. Proposals are due October 30, 2026, at 4:00 p.m. Pacific Time; a mandatory pre-bid meeting is scheduled for October 22, 2026, via Zoom.

View original listing