IFB 17401: HIPAA Risk Assessment

The District is seeking a qualified vendor to perform a comprehensive HIPAA Security Risk Assessment and a suite of penetration‑testing services for Parkland Hospital and the Parkland Cancer Center, Inc. (PCCI). The effort includes a full HIPAA risk assessment covering administrative, physical, and technical safeguards, an ePHI applications assessment for up to seven applications, and multiple penetration‑testing engagements (external web, internal network, Wi‑Fi, physical security, and phone‑based social engineering). Deliverables consist of detailed risk‑assessment reports with remediation recommendations, separate penetration‑test reports, and any required documentation (e.g., Business Associate Agreement). The contract is a fixed‑price, three‑year award with a $100 minimum purchase clause (effectively non‑binding) and requires vendor registration on Parkland’s supplier portal and Symplr credentialing.