County of Siskiyou - HIPAA Managed Compliance Services - RFP # 27-02 (2026)
Siskiyou CountyCounty · Siskiyou County, CA- Due
- Nov 20, 2026
- 9 days left
- Posted
- Nov 6, 2026
- Primary contact
- Shelly Davis
The 30-second brief
The County of Siskiyou Public Health Division is seeking proposals for HIPAA Managed Compliance Services under RFP # 27-02. The selected contractor will provide advisory, governance, documentation, reporting, and coordination services to support ongoing compliance with HIPAA, including Privacy, Security, and Breach Notification Rules. Scope includes HIPAA risk analysis, compliance task matrices, policy review, technical safeguards advisory, third-party vendor management support, workforce training, and breach response support. Proposals are due by November 20, 2026, at 4:00 PM. A mandatory pre-bid Zoom meeting is scheduled for November 10, 2026.
HIPAA Risk Analysis Report, Compliance task matrix or checklist with defined review cadence, Policy review summary and gap analysis, Monthly or periodic executive compliance status reports, Training coordination records, Incident response documentation support materials, Meeting notes and compliance action tracking logs, EPHI asset inventory and data flow map
Qualifications, Approach, Experience and references, Proposed costs
Bids like this start as pre-RFPs. Get the next ones early.
Get matched pre-RFPs freeFree account · 30-second setup · No credit card
Summary
The County of Siskiyou Public Health Division is seeking proposals for HIPAA Managed Compliance Services under RFP # 27-02.
The selected contractor will provide advisory, governance, documentation, reporting, and coordination services to support ongoing compliance with HIPAA, including Privacy, Security, and Breach Notification Rules. Scope includes HIPAA risk analysis, compliance task matrices, policy review, technical safeguards advisory, third-party vendor management support, workforce training, and breach response support. Proposals are due by November 20, 2026, at 4:00 PM. A mandatory pre-bid Zoom meeting is scheduled for November 10, 2026.
EVALUATION CRITERIA
4- Qualifications
- Approach
- Experience and references
- Proposed costs
REQUIRED DELIVERABLES
8- HIPAA Risk Analysis Report
- Compliance task matrix or checklist with defined review cadence
- Policy review summary and gap analysis
- Monthly or periodic executive compliance status reports
- Training coordination records
- Incident response documentation support materials
- Meeting notes and compliance action tracking logs
- EPHI asset inventory and data flow map
REQUIRED ATTACHMENTS
6- Cover Letter
- Qualifications
- Company Profile
- Approach
- References
- Price Proposal
- Submit to
- [email protected]
- Scope location
- Yreka, CA
- Reported agency
- County of Siskiyou
Questions about this RFP
How do I respond to this RFP from Siskiyou County?
Review the full solicitation document for submission requirements, evaluation criteria, and deadlines. The submission deadline is November 20, 2026. The solicitation specifies required deliverables that must be addressed in your response. Be sure to include all required attachments as outlined in the solicitation. Submissions should be delivered to: [email protected]. For questions, contact Shelly Davis.
Can small businesses or minority-owned firms bid on this RFP?
Most government agencies, including Siskiyou County in CA, encourage participation from small businesses, minority-owned, women-owned, and disadvantaged business enterprises (MBE/WBE/DBE). Check the full solicitation for any small business participation goals.
What happens after the RFP submission deadline?
After the deadline, the issuing agency reviews all submissions against the stated evaluation criteria. This typically includes a compliance check, technical evaluation, cost analysis, and may involve oral presentations with shortlisted vendors.
Can I ask questions about this solicitation before submitting?
Yes, most solicitations allow vendors to submit questions during a designated period. The primary contact is Shelly Davis. Questions and answers are typically shared with all prospective bidders.
What are the key deliverables?
The solicitation specifies the following deliverables: HIPAA Risk Analysis Report, Compliance task matrix or checklist with defined review cadence, Policy review summary and gap analysis, Monthly or periodic executive compliance status reports, Training coordination records, Incident response documentation support materials, Meeting notes and compliance. Proposals should clearly address how each deliverable will be met.
Show 5 more questions
What are the evaluation criteria for this solicitation?
This solicitation includes specific evaluation criteria that will be used to score proposals. The criteria include: "Qualifications, Approach, Experience and references, Proposed costs" Vendors should carefully align their proposals with each criterion to maximize their score.
Where can I find more RFPs from Siskiyou County?
All active and historical solicitations from Siskiyou County are tracked and searchable. As a county agency, Siskiyou County regularly publishes solicitations. Visit the agency profile to see current open bids, past contracts, vendor relationships, and decision-maker contacts.
Is this solicitation still open for submissions?
Based on the posted deadline of November 20, 2026, this solicitation appears to still be accepting submissions. Deadlines may change through amendments or addenda, so always verify the current status directly with the issuing agency before preparing your response.
What documents are required to bid on this RFP?
Requirements vary by solicitation, but common documents include a technical proposal, cost/price proposal, proof of insurance, relevant certifications, past performance references, and any forms specified in the solicitation. This solicitation specifically requires the following attachments: Cover Letter, Qualifications, Company Profile, Approach, References, Price Proposal. Review the full document from Siskiyou County for the complete list.
What is the scope of this project?
This solicitation defines a specific project scope. The scope covers the following locations: Yreka, CA. Review the full solicitation for detailed scope requirements.