This webpage provides additional information for RFP MED-22-005 ELIAS Maintenance and Operations.
Additional Information:
- HHS HIPAA Information
- ASPE Health Insurance Portability and Accountability Act of 1996
- NIST Computer Security Resource Center
- FNS Handbook 901
- SNAP Review of Major Changes in Program Design and Management Evaluation Systems
- SNAP System Integrity Review Tool (SIRT) | USDA-FNS
- Standards | Office of the Chief Information Officer (iowa.gov)
- Title 7 CFR § 277.18 State Systems Advance Planning Document (APD) process
Plans Due to Agency:
Below are copies of the current plans the selected Contractor will be required to update within the timelines outlined in Table 2. Plans due to the Agency in the Request for Proposal ELIAS Maintenance and Operations MED 22-005.
- Operations Plan
- Systems Implementation Plan
- Technical Architecture Plan (Development and Integration Environment Plan)
- Transistion Plan (See Turnover Plan - Transition Information)
- Project Management Plan
- Corrective Action Plan
- Data Backup / Replication Plan (See Disaster Recovery Plan Appendix E)
- Disaster Recovery and Business Continuity Plan
- Help Desk Plan
- Interface Plan
- Job Rotation and Knowledge Transfer
- Quality Assurance Plan
- Reporting Plan
- Test Plan to include CMS expectations and guidance
- Training Plan (See Knowledge Transfer Plan)
- Turnover Plan
- Work Plans, Schedules, and WBS
- Vendor Name Organization Charts
- Security Plan including Independent Third-Party Security & Privacy Assessment on production, dev and test environments. The Security and Privacy Assessment Report (SAR) will be deliverable to CMS.