1
Annex 3
Requirements Specifications for:
The Integrated Health Information System for the Bank’s Medical Center
The bidder is requested to identify and describe the levels of support (Full Support, Partial Support and No Support) that it will provide for the
required functionalities listed in the table below.
The levels of support are as follows:
A. Fully Supported
Scores 100%
The function is supported as a standard/configurable feature within the package.
(2) Partially Supported
Scores 25%
The desired function is available in a separate optional package, or could be
made available through the development of a new component or application, or
only some of the features listed are fully supported. Please explain and specify if
there are associated costs for full support, where applicable.
(3) No Support
Scores 0%
The desired function is not within the scope of the package and there is no
practical way to provide it.
For each requirement, the Bidder should indicate which level of support pertains to the requirement by entering “1, 2, or 3” in the appropriate
box.
o If the requirement is not fully supported, do not enter “1” in the Support Level box.
o In the case of Partial Support, follow the “2” with an explanation associated with the work in the “Vendor Support Level Detail” cell.
Please note that the estimated cost for full support (additional cost for development and customization of the required function, if
applicable) shall appear in the financial proposal only.
o The Bidder may also provide details to other support levels if desired.
2
Seq.
No.
Requirement / Questions Max.
Mark
Vendor
Support
Level
(1,2,3)
Vendor Support Level Detail Score
A. PRODUCT REQUIREMENTS 272 Pts.
A.1 General Requirements 12 1 Number of Bank’s staff: around 2,000 4 2 Number of target clientele for the Medical
Center: 8,000 (about 2,000 staff and 6,000
dependents)
4
3 Number of users: 60 users (multi-user system) 4 A.2 Technical Requirements 48
1 Architecture: Client/Server 4 2 Server Operating System : Windows 2008
Server, IBM AIX, or Linux 4
3 Database Platform: Oracle or MS SQL Server
2008 4
4 Client technology: Web-based and tablet PC
enabled 4
5 API Interface: Does the system provide users an
API Interface for integrating SAP ERP and specific
system from Medical Insurance Services?
4
6 Customisation: Is the system customizable? 4 7 Hardware: shall support the Bank’s platform 4 8 User Interface: French and English 4 9 Flexibility: Flexibility to increase the number of
users 4
10 Ability to operate at various sites: ability to
operate at various sites (Tunis Medical center,
Abidjan and all the Field Offices) as a full-fledged
MC
4
11 Installation: shall be done onsite 4 12 Server(s): shall be hosted at the Bank’s premises 4
3
A.3 Functional requirements 132
Electronic Medical Records 56
1 Storage and access to key health information of
patients 4
2 Recording of symptoms, diagnosis (ICD-10),
prescribed tests and treatments/medications,
referral
4
3 Ability to capture information at point of care 4
4 Integration of data from multiple sources (internal
and external) 4
5 Charting of vital signs and historical medical data 4 6 Diagnosis based on ICD-10 4
7 Referral 4
8 Follow-up of observation room 4
9 Accessibility of health historical data by all
providers participating in the care of a patient
(access new and past test results)
4
10 Ability to capture and store orders for
prescriptions, further medical investigations and
tests
4
11 Decision support though reminders and prompts
and alerts 4
12 Electronic communication and connectivity
facilities 4
13 Portal access to patients and health care providers
on a need to know basis 4
14 Ability to remotely access the system through
mobile devices 4
Practice Management 16
15 Ability to capture/ recall patient demographics 4 16 Scheduling of appointments and visits 4 17 Patient workflow through various healthcare
providers 4
18 Scanning/management of prescribed test reports 4
4
Occupational Health & Safety 20
19 Case Management to handle work/industry
accidents, sick leave, disability and ergonomic
issues
4
20 Immunisation Management and Automatic Recall 4
21 Surveillance/ Annual Medical check-up recalls 4
22 Emergency Evacuation Management 4
23 Audiometry/ Ophthalmologic Test Management 4 Stock Control & Reordering 8
24 Stock Control of Medical equipment and
consumables 4
25 Reordering of items 4
Travel Medicine & Advisory 8
26 Consultation 4 27 Advisory Tracking 4
Reporting & Statistics 8
28 Comprehensive reports and statistics 4
29 Possibility for ad-hoc reporting 4
Interfacing 12
30 Interface with SAP HCM (Human Capital
Management) 4
31 Interface with SAP Travel Management 4
32 Interface with Health Insurance Provider system
(www.henner.com/afdb/mbp) 4
Interoperability 4
33 Comply with international health standards -
please specify
4
5
A.4 Security Requirements 80
A.4.
1
Technical Security Requirements (The text in
italics provides additional information in support of
the requirement)
48
1 Confidentiality protection - protecting sensitive information from unauthorized disclosure while the information is being generated, stored, manipulated or forwarded
4
2 Data Integrity - preventing and detecting unauthorized modification of data that is associated with a user, the system itself, or the communications path.
4
3 Availability – Ensuring the service is available to users when required
4
4 Authentication - Authentication is the process of verifying the claimed identity of a user.
4
5 Audit - adequate capabilities to investigate unauthorized activities after an event, so that the proper remedial action can be taken. This implies the recording of security-relevant events into an audit log that can be analysed by the administrator.
4
6 Data Disposal - protecting sensitive information from unauthorized recovery and subsequent disclosure from internal system memory and storage after authorized use.
4
7 System Integrity - functional integrity of the system, including the controlled creation, installation and operation of the system software and data.
4
8 Security Administration - the required system capabilities and parameters that must be available to the administrator to operate and manage the system in a secure manner.
4
9 Guidance - the assurance aspect of system security by supplementing the technical security capabilities with appropriate direction on securely configuring, operating and managing the system.
4
10 Non-Repudiation - the system’s capabilities for preventing users from denying their actions in terms of receiving or sending data.
4
11 Functionality - ensure that the application is still useful after security requirements have been met
4
6
12 Scalability - This section helps ensure that the application can grow to meet operational needs(e.g. accommodate additional respondents)
4
A.4.
2
Vendors Security Requirements 32
13 Vendors are required to undergo an annual AfDB Information Security Audit
4
14 Access to AfDB’s data by non-African Development Bank staff must be restricted to authorized vendor employees
4
15 The service provided must be certified or accredited to one of the following SAS 70 (Type II), ISO/IEC 27001 or reputable independent third party.
4
16 Either escrow or license the on demand application code to AfDB
4
17 Keep data confidential and return all copies of data at the contract’s end
4
18 Host the service and store AfDB data only at locations disclosed to AfDB
4
19 Meet the agreed SLAs 4
20 Provide a timely response to a detailed third party security questionnaires
4
B. Documentation, Support and Training: 20
Requirements / Questions Max.
Mark
Included
Optional
Vendor Response
(Please answer as specifically
as possible)
Score
B.1. Support Availability 7
Is local support available? 1
Is EMEA (Europ,Middle East,Africa) support available? 1
Is global support available? 1
At what times is support available? 24/7 or 8/5? 1
Does a live person answer or message left? 1
Does your support include a tracking tool for issues
related to change to be operated during user
1
7
Requirements / Questions Max.
Mark
Included
Optional
Vendor Response
(Please answer as specifically
as possible)
Score
acceptance test phase or in maintenance phase
Describe your levels of support programs. Does your
company provide guarantees on software performance
or support Service Level Agreements (SLAs). Describe
those here.
1
B.2. User community 1
Does a user community (social network, user developer
blogs, forums, mailing list, webinars, etc.) exist for
your product?
1
B.3. Training 6
Describe your user training program(s), including a
synopsis of relevant courses offered, options for
delivery (web-based, Computer Based Training,
instructor-led, etc.) and the locations of your major
training centers. Provide a list of all appropriate courses
with prices and course schedules.
4
Who provides product training? 1
How is training designed to meet customer needs? 1
B.4. Documentation 6
What type of user and technical documentation
(installation, configuration, troubleshoot, user
manual, etc.) is provided?
3
What formats are the documentation delivered (paper,
electronic, on-line, etc.)?
2
Is there a cost associated with documentation?
1
C. Implementation: 45
Ref# Requirements / Questions Max.
Mark
Vendor Response
(Please answer as specifically as possible)
Score
Describe the standard methodology / lifecycle / activity
sequence for a typical implementation of the package
from project initiation through to warranty.
15
8
Show the resource requirements for the typical
implementation of the base package. Resources must
be identified by skill set & client versus vendor mix.
15
Describe the resources utilized in an implementation
process (vendor-based, third-party, domain knowledge,
certification, number of successful installs)
5
Is the base package fully tested, stable and
operational?
5
Does the package require mandatory customizations?
If so, please quantify in terms of work effort / duration
and costs. In addition please specify which of the
mandatory customization effort is fulfilled by the
vendor.
5
D. Technical Information: 66
D.1. High Level Architecture: 4 Max. Mark Score
Description: (include architecture;
2 or 3 tier client server, web, etc.,
specifications for client software
and communications between
different tiers)
3
What are the core products or
modules offered? What is current
version?
1
D.2. Product Dependencies and Integration Capabilities
List relevant product or technology standards support and bold the options proposed for use at the African Development
Bank (AfDB): 14
Max. Mark Score
Hardware Configuration
recommendation (processor,
minimum memory requirement,
disk space):
1
9
Operating System: 1
Database: 1
Electronic Mail: 1
Middleware: 1
Workflow: 1
Internet: 1
Network: 1
Security: 1
Directory: 1
Systems Management: 1
Scalability and Redundancy
(application cluster, strategy of
replication)
1
Administration Tools: 1
Other: 1
D.3. Security: 3
Max. Mark Score
Describe in detail the
authentication process, including
front-end and back-end
authentication
1
Describe your web based session
management (time out,
configuration, etc)
1
Describe in detail how users reset
their passwords and what
happens when the passwords
expire
1
10
D.4. System Requirements : Server: 5 Max. Mark score
Describe the servers hardware
specifications required for your
product (processor, minimum,
memory requirement, disk space,
etc..)
1
What type of Operating System ? [ ] Windows
2003
[ ] Other:
[ ] Win2008 [ ] UNIX
1
What type of Databases [ ] Oracle
[ ] SQL Server [ ] Other: 1
Server Application / Web [ ] Tomcat
[ ] JBOSS
[ ] WebLogic [IIS]
[ ] Other
1
Are optional software required for
full access to the wide range of
features offered by your product
[ ] Yes [ ] No 1
- List these optional software
D.5. System Requirements : Client: 4 Max. Mark score
Describe the client hardware
specifications required for your product
(processor, minimum, memory
requirement, disk space, etc..)
1
What type of Operating System? [ ] Windows
XP / 7)
[ ] MAC [ ] Other:
1
What type of Web Browser [ ] Internet
Explorer 7+
[ ]
Firefox
3+
[ ] Other: 1
Are optional components required to
install on the client (e.g : plugin for
FireFox and Internet Explorer)
[ ] Yes [ ] No 1
- List these components
11
D.6. APIs and Integration : 9 Max. Mark score
Does this product integrate with other
products?
[ ] Yes [ ] No 1
Describe how product integration is
accomplished with your platform and
what makes it advanced as a modular
platform
1
Describe your APIs (how your source
code repository is open and component
service easy for customization)
1
What major Enterprise Content
Management your platform integrates
with?
1
Does your product integrate with
Microsoft Office (Word, Excel, Outlook)?
1
Does your product integrate with ERP
SAP? How?
1
Describe which type of data format can
be imported
1
Describe in which type of format data
can be exported
1
Integration Technologies used: 1
- XML
- Web Services
- Batch import/export
- Other
D.7. Collaboration compatibilities: 1 Max. Mark score
Describe the collaboration capabilities of the product » (comments on document, revision, ) 1
D.8. Workflow: 5 Max. Mark score
Describe your solution’s workflow 1
Describe how content is processed / routed 1
12
Describe the review and approval capabilities 1
Describe how workflows are managed and administered 1
Is there a visual workflow configuration tool? 1
D.9. Archive : 1 Max. Mark score
Describe the archiving functionality 1
D.10. Application Customization and Development: 7 Max. Mark score
Can the product be customized for
a given installation?
[ ] Yes [ ] No 1
Describe the flexibility of the
application configuration and
customization tools?
1
Is customization done by Vendor
or by Client?
1
If “Client”, describe the tools and
training required to do the
customization
1
If “Client”, describe your
recommendation on how source
version and releases could be
managed, compiled, integrated,
testing and deployed with your
platform
1
If “Client”, list the development
language which can be used
1
Does the product include a
repository and data model?
1
D.11. Administration: 3 Max. Mark score
Describe amount of staff and skill
set required to provide ongoing
operational and administrative
support after installation
1
Does the platform allow
centralized administration
1
13
How does the product handle
reporting and the ability to
introduce customized reports in
back office?
1
D.12. Performance / Scalability: 3 Max. Mark score
What is the recommended and maximum number of users that can be supported?
1
Describe any limitations to scalability that exist
1
Describe the recommended method to monitor performance of the product
1
D.13. E-Mail: 3 Max. Mark score
Does this product integrate with Electronic Mail (Microsoft Exchange/Outlook )
[ ] Yes [ ] No 1
E-Mail usage: [ ] Application generated mail
[ ] Directory integration
[ ] Other: Interface that will generate e-mail notifications
1
Which systems are involved: [ ] Internal [ ] Internet
[ ] SMTP 1
D.14. Extension Points: 4 Max. Mark score
Does this product can be extended by adding new feature ? [ ]
Yes
[ ]
No
1
If “Yes”, describe how service can be easily configured and
extended
1
User Interface : 1
Describe how new device such as mobile phone (Iphone,
BlackBerry), tablet computer (IPad, BlackBerry PlayBack) can be used to interoperate with your platform (security, data management)
1
14
E. Support: 6
Ref# Requirement / Questions Included Optional N/A
The following questions may be answered with Included (inherent in License fee), Optional (available at
additional cost – Specify $’s) or N/A (Not Available)
Customer Support Included Optional N/A Max. Mark score
Provide phone support 1
Provide on-line support, via client web for bug,
via e-mail, FAQ’s, downloadable hot fixes/patches
1
Offer on-line user community through established
Regional & International user groups
(Additional Comment Space)
1
Provide no cost on-line or web based training 1
Provide On/off-site Training classes 1
Provide release notes when upgrades and/or
patches are released, far prior to the upgrade or
patch date (to allow for decision and test design)
1
F. SUPPLIER
The bidder of the complete package is an established vendor with relevant experience in the design and implementation of
INTEGRATED HEALTH INFORMATION SYSTEMS in organizations of similar size. The bidder’s local partner shall also have the manufacturer’s authorization (if applicable).
Total points in this area are 409 which will account for 50% of the technical evaluation criteria indicated in Annex 5
.