Information Technology (IT) Systems and Data Security Review

The contract calls for a detailed assessment of information technology systems, data management practices, and cybersecurity protections within insurance organizations to ensure alignment with federal health information privacy standards, particularly HIPAA. Evaluations will focus on the effectiveness of system controls, data handling procedures, and the robustness of business continuity and disaster recovery plans to safeguard sensitive consumer health information. The work requires technical expertise in identifying vulnerabilities, validating compliance posture, and recommending enhancements to mitigate risks related to data breaches and operational disruptions. This subcontract is open for response until August 14, 2026, under the NAICS code 541512 for computer systems design services, and is managed by the Missouri Division of Purchasing Procurments. The evaluation will be performed across insurer operations without a specified geographic restriction, and the contractor must demonstrate proven experience in auditing regulatory compliance and securing health data environments. No set-aside provisions are indicated, and the work is expected to be delivered through a structured review process aligned with industry best practices and federal mandates governing healthcare data security.