Item:
Title
Approval to Enter into a Contract with Chirpy Bird, Inc. in the amount not to exceed $74,5000 to Provide a HIPAA Privacy & Security Risk Assessment & GAP Analysis
Body
Date of BOCC Meeting: October 14, 2024
Request for Board Action:
Agenda Text
The Board is requested to authorize the County Manager to approve a new contract with Chirpy Bird, Inc. in the amount not to exceed $74,500.00 for the biennial HIPAA Privacy & Security Risk Assessment & GAP Analysis, using FY 2024-25 operating funding. The Health Insurance Portability and Accountability Act of 1996 (HIPAA), and the regulations promulgated thereunder by the United States Health and Human Services, establishes standards to protect the privacy and security of individually identifiable health information. The HIPAA Security Regulations require all covered entities to conduct an accurate and thorough assessment of potential risks and vulnerabilities to the confidentiality, integrity, and availability of the electronic protected health information it holds (45 C.F.R. 164.308(a)(1)(ii)(A)).
The County Attorney's Office has prepared a Request for Proposal (RFP #24-051) and Chirpy Bird, Inc presented a proposal that was deemed best suited to carry out the requested services. Chirpy Bird, Inc. was deemed the most qualified firm for the project based on the company having significant experience in conducting HIPAA privacy and security assessments as well as working with governmental entities. In addition, the corporation offers follow up assistance as well as assistance with Office of Civil Rights audits.
Alignment with Strategic Plan: This item aligns with Durham County Strategic Goal: High Performing Organization.
Resource Persons: Curtis Massey, Interim County Attorney; Larissa Williamson, Deputy County Attorney; Kierra Simmons, Compliance and Privacy Officer; and Lyvon Garth, Chief Information Security Officer.
County Manager's Recommendation: The County Manager recommends that the...
Click here for full text