Opportunity
Oregon Buys #S-44300-00018176
Independent SOC 2 Type 2 audits of Oregon’s MMIS controls
Posted
October 23, 2026
Respond By
November 23, 2026
Identifier
S-44300-00018176
NAICS
541211
Oregon Health Authority seeks an independent auditor for annual SOC 2 Type 2 audits of controls in Oregon’s Medicaid Management Information System (MMIS). - Government buyer: Oregon Health Authority (OHA), Health Systems Division, MMIS Business Support Unit; procurement is supported by Oregon Department of Administrative Services (DAS), Procurement Services. - Service requested: MMIS controls audits, including the Drug Rebate subsystem and contractor-operated interfaces, inputs, batch applications, reports, and drug rebate functions. The system is operated by Gainwell, LLC. - Quantity and term: Five annual audit periods are specified, with the possibility of adding up to two more audit periods through contract amendment. The initial anticipated term is five years, with up to two extension years. - Standards and exclusions: Reports must meet AICPA SSAE No. 18 requirements. OHA and ODHS activities and Pharmacy Benefit Management Services are excluded from the audit scope. Draft and final reports are required for each audit period. - Pricing: Proposers are asked to price fixed-fee deliverables, contingency services, reimbursable expenses, and a maximum total contract amount; the provided materials do not state prices or a contract value. - Other named organizations: Oregon Health Authority, Oregon Department of Administrative Services, and Gainwell, LLC. No audit-service proposer or OEM is named. The documents differ on which fiscal years may be included in optional audit periods.
Description
The Oregon Health Authority is seeking proposals for an MMIS Controls Audit under RFP 6171. The procurement is for personal services and the listed line item is MMIS Control Audits. Proposals are to be submitted electronically through OregonBuys, with a proposal due date of November 23, 2026. The RFP includes a sample contract and attachments for proposer certification, references, pricing, and certified disadvantaged business outreach.