Item Description:
title
Neg Agmt PR00006305 with Securance LLC to provide a HIPAA risk assessment, NTE $185,000
end
Resolution:
body
BE IT RESOLVED, that the Hennepin County Board of Commissioners delegates authority to the County Administrator to negotiate and finalize agreement PR00006305 with Securance LLC to provide a HIPAA risk assessment in an amount not to exceed $185,000; that following review by the County Attorney’s Office, the Chair of the Board be authorized to sign the agreement on behalf of the county; and that the Controller be authorized to disburse funds as directed.
end
Background:
Hennepin County solicited proposals from qualified vendors to perform an assessment of current operations within the HIPAA covered areas on the HIPAA Security and Privacy standards required by 45 CFR Part 164.306.
Pursuant to 45 CFR section 164.105, Hennepin County has established itself as a hybrid entity.
Securance Consulting will perform an assessment of current operations for the county’s HIPAA covered entities, including a health plan, health care providers, and business associate-type areas as required by 45 CFR Part 164.308(A)(1)(II)(A).
Compliance status will be determined through testing and other assessments. Securance Consulting will conduct a comprehensive HIPAA security risk assessment, to include a HIPAA compliance risk analysis, external and internal network vulnerability assessments and penetration tests, physical security assessment, and reviews of county’s firewalls, wireless networks, mobile devices, workstations, and servers. Securance will also provide actionable HIPAA compliance and network security remediation recommendations.
Current Request: Delegation of authority to the County Administrator to negotiate and finalize agreement PR00006305 with Securance LLC to provide a HIPAA risk assessment.
recommendation
Recommendation from County Administrator: Recommend Approval