The County of Fresno is seeking a security compliance software solution that adheres to HIPAA Security standards, NIST standards, and other regulations. The solution must be able to perform risk assessments, identify areas, and make specific recommendations to enhance HIPAA Security Rule compliance. The contract was awarded to Clearwater Compliance, but the document also mentions other vendors such as Cask, IBM, Sergeant Laboratories Inc, Singular Security, and Templar Shield. The contract has a total cost of $120,743.50 for 3 years, and includes implementation and subscription fees. The solution must be easy to use, customizable, and provide real-time documentation repository with versioning. It must also provide policy/standards expiration notification, reports in exact OCR format and vocabulary, and cover HIPAA Security & Privacy Rules, NIST standards, CFR, etc. The solution must also identify compliance gaps and compliance improvement, complete scenario-based risk analysis, and complete risk mediation with history.
• The solution must be able to assign tasks, set reminders, monitor statuses, etc.
• The solution must have an executive dashboard and an asset inventory feature to store the County’s assets.
• The solution must have import and export functionality in a non-proprietary format.
• The solution must provide controlled access based on user role level security, audit trail, and workflow guidance.
• The solution must allow single sign-on for domain users.
• The solution must be able to configure for various retention periods for reports.
• The solution must generate audit logs and identify when and who accesses the reports.
• The solution must have audit capabilities and error logs.