CRFP-0506-MIS2600000002-2 | Immunization Information System

The West Virginia Department of Health and Human Resources, through its Bureau for Public Health, Office of Epidemiology and Prevention Services, is soliciting proposals for an Immunization Information System under solicitation number CRFP-0506-MIS2600000002-2, with proposals due by June 4, 2026. The contract, classified as an Open-End arrangement, aims to establish, maintain, and support a statewide immunization tracking system that complies with state and federal health data standards. The system must achieve 99.9% uptime, securely exchange data with authorized agency systems, and fully implement all functional, interface, and security requirements as defined in the solicitation, including compliance with NIST, FedRAMP, FIPS, and OMIS policies. Technical proposals must meet mandatory requirements to pass a binary Pass/Fail evaluation before cost is considered, with price accounting for 30 points under a best-value trade-off approach. The vendor must submit a separate, sealed cost proposal via the wvOASIS portal or in physical form, and all submissions must adhere to strict formatting guidelines, with technical and cost components separated. Critical compliance obligations include adherence to HIPAA and HITECH Act requirements via a binding Business Associate Addendum, implementation of a comprehensive Data Protection Addendum, and maintenance of cyber liability and commercial general liability insurance with coverage levels to be specified. The contract requires the vendor to designate a primary security contact, ensure permanent retention of health records per state policy, and comply with West Virginia’s domestic preference statutes and socioeconomic reporting obligations for small, women-owned, and minority-owned businesses. No contract value is specified, and while no formal FAR clauses apply, state-standard clauses govern arbitration, modifications, warranties, assignment prohibitions, and liquidated damages—which are expressly excluded. Performance occurs within West Virginia’s operational environment, with final acceptance determined by the state after UAT and a stabilization period. No physical packaging, marking, or MIL-STD requirements are included, as the system is digital; however, all data handling, access controls, audit logging, and non-repudiation features must meet rigorous federal cybersecurity benchmarks. The solicitation does not specify a contract term, leaving start and end dates as placeholders, with renewal terms customizable. Payment, invoicing, and accounting identifiers are not detailed, and while a procurement address is provided, no designated COR, COTR, or PCO is named, with Crystal G. Hustead serving as the primary point of