HIPAA Managed Compliance Services

Siskiyou County Health and Human Services Agency is seeking ongoing HIPAA managed compliance advisory and support services for its Public Health Division, including risk analysis, policy support, training coordination, and incident preparedness.

Siskiyou County > Health and Human Services Agency > Public Health Division

General

Status:Open (accepting bids and proposals)

Solicitation Identifier:#27-02

Due Date:Nov 21, 2026 12:00 AM

Type:Request for Proposal (RFP)

Level:Local

Ask AI about this solicitation

ChatGPT Claude Perplexity Grok Gemini

Original Solicitation Links

[

#27-02

]

RFP #27-02 HIPPA Managed Compliance Services - Siskiyou County Public Health

Contact

Name:Shelly Davis

Email:phinfo@co.siskiyou.ca.us

Phone:+15308412134

Address:Yreka, CA, USA

Submission Instructions

Method:Mail

Mailing Address:Shelly Davis, Director, Siskiyou HHSA - Public Health Division, 810 S. Main St., Yreka, CA 96097

Method:Email

Email:rfp_rfb_submissions@co.siskiyou.ca.us

Method:Hand delivery to Shelly Davis, Director, Siskiyou HHSA - Public Health Division, 810 S. Main St., Yreka, CA 96097

Description

The County seeks a contractor to provide ongoing HIPAA compliance program management and advisory support for its Public Health Division. Work includes establishing and maintaining a compliance framework and task matrix; conducting and updating a HIPAA Security Risk Analysis; tracking risks and remediation; reviewing policies and documentation; advising on technical safeguards; supporting business associate and vendor oversight; coordinating workforce training; and assisting with incident response and breach preparedness. The contractor is not to make hands-on changes to County systems or production environments unless separately authorized. Deliverables include a risk analysis report, compliance task matrix or checklist, policy review and gap analysis, periodic executive status reports, training records, incident response support materials, meeting notes and action logs, and an ePHI asset inventory and data flow map when information is made available. Proposals must include a signed cover letter, qualifications and experience, evidence of insurance, company profile, approach, at least three references, and a price proposal. The County identifies November 20, 2026, at 4:00 p.m. as the proposal deadline; the mandatory pre-bid meeting is scheduled for November 10, 2026, via Zoom.

Classification Codes

NAICS541618Other Management Consulting Services

PSCDJ10Security and Compliance support delivered as a service, by subscription, or service contract. Includes support of security policies/controls, processes, measuring compliance of relevant legal/compliance requirements, and responding to security breaches. Also provides support for IT Security systems providing Continuous Diagnostics and Mitigation (CDM) for real-time Cyber Security and protection such as vulnerability scanning, managing firewalls, intrusion prevention systems, and security information and event management (SIEM). Includes Disaster Recovery (DR) services to support DR policy, process and means, dedicated failover facilities and perform DR testing.