When is the submission deadline?

Submissions are due November 23, 2026. Questions must be submitted by October 30, 2026.

What is the budget for this RFP?

Settle estimates the budget at $250,000 – $750,000. The issuer has not published an official figure.

It was issued by Oregon Health Authority. The work is located in Salem, Oregon, United States.

MMIS Controls Audit (Due November 23, 2026)

SUMMARY

The Oregon Health Authority is seeking an auditor to provide Medicaid Management Information System (MMIS) Controls Audit services, specifically SOC 2, Type 2 reports, for five fiscal years starting in 2026.

Settle Signals

RFP Hunter shows what’s open. Settle shows what’s forming.

Deals like this one start months before the RFP. Settle reads the signals first, so your team is talking to Oregon Health Authority while competitors are still waiting for the posting.

How an RFP like this forms

Budget approved
Settle flags it
Board minutes and budget documents
Scope and vendors researched
Settle flags it
Planning documents, meeting agendas, contract renewals
RFP posted
You are here
Every bidder can see it now

Learn more about Settle

DESCRIPTION

The Oregon Health Authority (OHA) is soliciting proposals for an auditor to perform annual SOC 2, Type 2 controls audits of the Medicaid Management Information System (MMIS) operated by Gainwell, LLC. The audit scope includes the MMIS user interface, input methods, batch applications, and the drug rebate subsystem. The initial contract term is five years, with an option to extend for an additional two years. The work must be performed in accordance with AICPA Auditing Standards Board (ASB) Statement on Standards for Attestation Engagements (SSAE) No. 18.

KEY REQUIREMENTS

Key Person(s) must include a Certified Public Accountant (CPA) currently licensed to work in Oregon
If a public accounting firm, the firm must be currently licensed to perform audits in Oregon
Must perform audits in accordance with AICPA Auditing Standards Board (ASB) Statement on Standards for Attestation Engagements (SSAE) No. 18
Must provide a SOC 2, Type 2 review and report on controls at a service organization relevant to user entities' internal control over financial reporting
Must submit proposal electronically through OregonBuys
Must submit a separate Adobe Acrobat (PDF) file for the Price Proposal
Must submit a signed Responsibility Inquiry form (Attachment G)

Do you qualify? Get a free fit score and answer these once for every RFP that asks.

TIMELINE

Questions/Requests for Clarification Due: October 30th, 2026

Answers to Questions/Requests for Clarification Issued: November 6th, 2026

Proposal Due Date: November 23rd, 2026

Opening of Proposal: November 24th, 2026

Issuance of Notice of Intent to Award: December 10th, 2026

Issuing Agency

Oregon Health Authority

Organization overview and procurement intelligence available on paid plans.

See Issuer Research

CONTACTS

Primary procurement contact — name, title, email, and phone

Additional decision-makers and their departments

See Decision-Maker Contacts

MMIS Controls Audit