Security and Compliance Implementation

The contract requires the implementation and thorough documentation of compliance with Georgia’s IT security standards as outlined in Exhibit 2, focusing on critical areas including access controls, audit logging, encryption, and vulnerability management specifically for the MMIS claims system. The work demands a structured approach to ensure all security controls are not only deployed but also properly recorded and verifiable to meet state-mandated requirements, with an emphasis on maintaining the integrity and confidentiality of sensitive health data processed through the system. This is a subcontract under the Department of Community Health in Georgia, with a response deadline of August 17, 2026, and a NAICS code of 541618, indicating it falls under other management consulting services. The performance location and point of contact details are unspecified, but the work is tied directly to Georgia’s state systems and must align with its internal security framework. Bidders must be prepared to demonstrate technical capability in securing Medicaid management information systems and provide clear evidence of adherence to the referenced security standards throughout implementation and documentation phases.