3rd Party Vendor Risk Management Tool

Stony Brook University Hospital is seeking a vendor to provide a 3rd Party Risk Management Tool. The tool should focus on identifying and reducing risks relating to the use of third parties, including assessment, analysis, and management of risk in conjunction with HIPAA Security Rule compliance efforts. The contract term is 1 year, and the due date for submission is 11/10/2025 1:00 PM. Key aspects of the job include: * Providing a 3rd Party Risk Management Tool * Identifying and reducing risks relating to the use of third parties * Assessing, analyzing, and managing risk in conjunction with HIPAA Security Rule compliance efforts * Protecting patient ePHI * Ensuring vendor contracts include privacy and security assurances