1

Annex 3

Requirements Specifications for:

The Integrated Health Information System for the Bank’s Medical Center

The bidder is requested to identify and describe the levels of support (Full Support, Partial Support and No Support) that it will provide for the

required functionalities listed in the table below.

The levels of support are as follows:

A. Fully Supported

Scores 100%

The function is supported as a standard/configurable feature within the package.

(2) Partially Supported

Scores 25%

The desired function is available in a separate optional package, or could be

made available through the development of a new component or application, or

only some of the features listed are fully supported. Please explain and specify if

there are associated costs for full support, where applicable.

(3) No Support

Scores 0%

The desired function is not within the scope of the package and there is no

practical way to provide it.

For each requirement, the Bidder should indicate which level of support pertains to the requirement by entering “1, 2, or 3” in the appropriate

box.

o If the requirement is not fully supported, do not enter “1” in the Support Level box.

o In the case of Partial Support, follow the “2” with an explanation associated with the work in the “Vendor Support Level Detail” cell.

Please note that the estimated cost for full support (additional cost for development and customization of the required function, if

applicable) shall appear in the financial proposal only.

o The Bidder may also provide details to other support levels if desired.

2

Seq.

No.

Requirement / Questions Max.

Mark

Vendor

Support

Level

(1,2,3)

Vendor Support Level Detail Score

A. PRODUCT REQUIREMENTS 272 Pts.

A.1 General Requirements 12 1 Number of Bank’s staff: around 2,000 4 2 Number of target clientele for the Medical

Center: 8,000 (about 2,000 staff and 6,000

dependents)

4

3 Number of users: 60 users (multi-user system) 4 A.2 Technical Requirements 48

1 Architecture: Client/Server 4 2 Server Operating System : Windows 2008

Server, IBM AIX, or Linux 4

3 Database Platform: Oracle or MS SQL Server

2008 4

4 Client technology: Web-based and tablet PC

enabled 4

5 API Interface: Does the system provide users an

API Interface for integrating SAP ERP and specific

system from Medical Insurance Services?

4

6 Customisation: Is the system customizable? 4 7 Hardware: shall support the Bank’s platform 4 8 User Interface: French and English 4 9 Flexibility: Flexibility to increase the number of

users 4

10 Ability to operate at various sites: ability to

operate at various sites (Tunis Medical center,

Abidjan and all the Field Offices) as a full-fledged

MC

4

11 Installation: shall be done onsite 4 12 Server(s): shall be hosted at the Bank’s premises 4

3

A.3 Functional requirements 132

Electronic Medical Records 56

1 Storage and access to key health information of

patients 4

2 Recording of symptoms, diagnosis (ICD-10),

prescribed tests and treatments/medications,

referral

4

3 Ability to capture information at point of care 4

4 Integration of data from multiple sources (internal

and external) 4

5 Charting of vital signs and historical medical data 4 6 Diagnosis based on ICD-10 4

7 Referral 4

8 Follow-up of observation room 4

9 Accessibility of health historical data by all

providers participating in the care of a patient

(access new and past test results)

4

10 Ability to capture and store orders for

prescriptions, further medical investigations and

tests

4

11 Decision support though reminders and prompts

and alerts 4

12 Electronic communication and connectivity

facilities 4

13 Portal access to patients and health care providers

on a need to know basis 4

14 Ability to remotely access the system through

mobile devices 4

Practice Management 16

15 Ability to capture/ recall patient demographics 4 16 Scheduling of appointments and visits 4 17 Patient workflow through various healthcare

providers 4

18 Scanning/management of prescribed test reports 4

4

Occupational Health & Safety 20

19 Case Management to handle work/industry

accidents, sick leave, disability and ergonomic

issues

4

20 Immunisation Management and Automatic Recall 4

21 Surveillance/ Annual Medical check-up recalls 4

22 Emergency Evacuation Management 4

23 Audiometry/ Ophthalmologic Test Management 4 Stock Control & Reordering 8

24 Stock Control of Medical equipment and

consumables 4

25 Reordering of items 4

Travel Medicine & Advisory 8

26 Consultation 4 27 Advisory Tracking 4

Reporting & Statistics 8

28 Comprehensive reports and statistics 4

29 Possibility for ad-hoc reporting 4

Interfacing 12

30 Interface with SAP HCM (Human Capital

Management) 4

31 Interface with SAP Travel Management 4

32 Interface with Health Insurance Provider system

(www.henner.com/afdb/mbp) 4

Interoperability 4

33 Comply with international health standards -

please specify

4

5

A.4 Security Requirements 80

A.4.

1

Technical Security Requirements (The text in

italics provides additional information in support of

the requirement)

48

1 Confidentiality protection - protecting sensitive information from unauthorized disclosure while the information is being generated, stored, manipulated or forwarded

4

2 Data Integrity - preventing and detecting unauthorized modification of data that is associated with a user, the system itself, or the communications path.

4

3 Availability – Ensuring the service is available to users when required

4

4 Authentication - Authentication is the process of verifying the claimed identity of a user.

4

5 Audit - adequate capabilities to investigate unauthorized activities after an event, so that the proper remedial action can be taken. This implies the recording of security-relevant events into an audit log that can be analysed by the administrator.

4

6 Data Disposal - protecting sensitive information from unauthorized recovery and subsequent disclosure from internal system memory and storage after authorized use.

4

7 System Integrity - functional integrity of the system, including the controlled creation, installation and operation of the system software and data.

4

8 Security Administration - the required system capabilities and parameters that must be available to the administrator to operate and manage the system in a secure manner.

4

9 Guidance - the assurance aspect of system security by supplementing the technical security capabilities with appropriate direction on securely configuring, operating and managing the system.

4

10 Non-Repudiation - the system’s capabilities for preventing users from denying their actions in terms of receiving or sending data.

4

11 Functionality - ensure that the application is still useful after security requirements have been met

4

6

12 Scalability - This section helps ensure that the application can grow to meet operational needs(e.g. accommodate additional respondents)

4

A.4.

2

Vendors Security Requirements 32

13 Vendors are required to undergo an annual AfDB Information Security Audit

4

14 Access to AfDB’s data by non-African Development Bank staff must be restricted to authorized vendor employees

4

15 The service provided must be certified or accredited to one of the following SAS 70 (Type II), ISO/IEC 27001 or reputable independent third party.

4

16 Either escrow or license the on demand application code to AfDB

4

17 Keep data confidential and return all copies of data at the contract’s end

4

18 Host the service and store AfDB data only at locations disclosed to AfDB

4

19 Meet the agreed SLAs 4

20 Provide a timely response to a detailed third party security questionnaires

4

B. Documentation, Support and Training: 20

Requirements / Questions Max.

Mark

Included

Optional

Vendor Response

(Please answer as specifically

as possible)

Score

B.1. Support Availability 7

Is local support available? 1

Is EMEA (Europ,Middle East,Africa) support available? 1

Is global support available? 1

At what times is support available? 24/7 or 8/5? 1

Does a live person answer or message left? 1

Does your support include a tracking tool for issues

related to change to be operated during user

1

7

Requirements / Questions Max.

Mark

Included

Optional

Vendor Response

(Please answer as specifically

as possible)

Score

acceptance test phase or in maintenance phase

Describe your levels of support programs. Does your

company provide guarantees on software performance

or support Service Level Agreements (SLAs). Describe

those here.

1

B.2. User community 1

Does a user community (social network, user developer

blogs, forums, mailing list, webinars, etc.) exist for

your product?

1

B.3. Training 6

Describe your user training program(s), including a

synopsis of relevant courses offered, options for

delivery (web-based, Computer Based Training,

instructor-led, etc.) and the locations of your major

training centers. Provide a list of all appropriate courses

with prices and course schedules.

4

Who provides product training? 1

How is training designed to meet customer needs? 1

B.4. Documentation 6

What type of user and technical documentation

(installation, configuration, troubleshoot, user

manual, etc.) is provided?

3

What formats are the documentation delivered (paper,

electronic, on-line, etc.)?

2

Is there a cost associated with documentation?

1

C. Implementation: 45

Ref# Requirements / Questions Max.

Mark

Vendor Response

(Please answer as specifically as possible)

Score

Describe the standard methodology / lifecycle / activity

sequence for a typical implementation of the package

from project initiation through to warranty.

15

8

Show the resource requirements for the typical

implementation of the base package. Resources must

be identified by skill set & client versus vendor mix.

15

Describe the resources utilized in an implementation

process (vendor-based, third-party, domain knowledge,

certification, number of successful installs)

5

Is the base package fully tested, stable and

operational?

5

Does the package require mandatory customizations?

If so, please quantify in terms of work effort / duration

and costs. In addition please specify which of the

mandatory customization effort is fulfilled by the

vendor.

5

D. Technical Information: 66

D.1. High Level Architecture: 4 Max. Mark Score

Description: (include architecture;

2 or 3 tier client server, web, etc.,

specifications for client software

and communications between

different tiers)

3

What are the core products or

modules offered? What is current

version?

1

D.2. Product Dependencies and Integration Capabilities

List relevant product or technology standards support and bold the options proposed for use at the African Development

Bank (AfDB): 14

Max. Mark Score

Hardware Configuration

recommendation (processor,

minimum memory requirement,

disk space):

1

9

Operating System: 1

Database: 1

Electronic Mail: 1

Middleware: 1

Workflow: 1

Internet: 1

Network: 1

Security: 1

Directory: 1

Systems Management: 1

Scalability and Redundancy

(application cluster, strategy of

replication)

1

Administration Tools: 1

Other: 1

D.3. Security: 3

Max. Mark Score

Describe in detail the

authentication process, including

front-end and back-end

authentication

1

Describe your web based session

management (time out,

configuration, etc)

1

Describe in detail how users reset

their passwords and what

happens when the passwords

expire

1

10

D.4. System Requirements : Server: 5 Max. Mark score

Describe the servers hardware

specifications required for your

product (processor, minimum,

memory requirement, disk space,

etc..)

1

What type of Operating System ? [ ] Windows

2003

[ ] Other:

[ ] Win2008 [ ] UNIX

1

What type of Databases [ ] Oracle

[ ] SQL Server [ ] Other: 1

Server Application / Web [ ] Tomcat

[ ] JBOSS

[ ] WebLogic [IIS]

[ ] Other

1

Are optional software required for

full access to the wide range of

features offered by your product

[ ] Yes [ ] No 1

- List these optional software

D.5. System Requirements : Client: 4 Max. Mark score

Describe the client hardware

specifications required for your product

(processor, minimum, memory

requirement, disk space, etc..)

1

What type of Operating System? [ ] Windows

XP / 7)

[ ] MAC [ ] Other:

1

What type of Web Browser [ ] Internet

Explorer 7+

[ ]

Firefox

3+

[ ] Other: 1

Are optional components required to

install on the client (e.g : plugin for

FireFox and Internet Explorer)

[ ] Yes [ ] No 1

- List these components

11

D.6. APIs and Integration : 9 Max. Mark score

Does this product integrate with other

products?

[ ] Yes [ ] No 1

Describe how product integration is

accomplished with your platform and

what makes it advanced as a modular

platform

1

Describe your APIs (how your source

code repository is open and component

service easy for customization)

1

What major Enterprise Content

Management your platform integrates

with?

1

Does your product integrate with

Microsoft Office (Word, Excel, Outlook)?

1

Does your product integrate with ERP

SAP? How?

1

Describe which type of data format can

be imported

1

Describe in which type of format data

can be exported

1

Integration Technologies used: 1

- XML

- Web Services

- Batch import/export

- Other

D.7. Collaboration compatibilities: 1 Max. Mark score

Describe the collaboration capabilities of the product » (comments on document, revision, ) 1

D.8. Workflow: 5 Max. Mark score

Describe your solution’s workflow 1

Describe how content is processed / routed 1

12

Describe the review and approval capabilities 1

Describe how workflows are managed and administered 1

Is there a visual workflow configuration tool? 1

D.9. Archive : 1 Max. Mark score

Describe the archiving functionality 1

D.10. Application Customization and Development: 7 Max. Mark score

Can the product be customized for

a given installation?

[ ] Yes [ ] No 1

Describe the flexibility of the

application configuration and

customization tools?

1

Is customization done by Vendor

or by Client?

1

If “Client”, describe the tools and

training required to do the

customization

1

If “Client”, describe your

recommendation on how source

version and releases could be

managed, compiled, integrated,

testing and deployed with your

platform

1

If “Client”, list the development

language which can be used

1

Does the product include a

repository and data model?

1

D.11. Administration: 3 Max. Mark score

Describe amount of staff and skill

set required to provide ongoing

operational and administrative

support after installation

1

Does the platform allow

centralized administration

1

13

How does the product handle

reporting and the ability to

introduce customized reports in

back office?

1

D.12. Performance / Scalability: 3 Max. Mark score

What is the recommended and maximum number of users that can be supported?

1

Describe any limitations to scalability that exist

1

Describe the recommended method to monitor performance of the product

1

D.13. E-Mail: 3 Max. Mark score

Does this product integrate with Electronic Mail (Microsoft Exchange/Outlook )

[ ] Yes [ ] No 1

E-Mail usage: [ ] Application generated mail

[ ] Directory integration

[ ] Other: Interface that will generate e-mail notifications

1

Which systems are involved: [ ] Internal [ ] Internet

[ ] SMTP 1

D.14. Extension Points: 4 Max. Mark score

Does this product can be extended by adding new feature ? [ ]

Yes

[ ]

No

1

If “Yes”, describe how service can be easily configured and

extended

1

User Interface : 1

Describe how new device such as mobile phone (Iphone,

BlackBerry), tablet computer (IPad, BlackBerry PlayBack) can be used to interoperate with your platform (security, data management)

1

14

E. Support: 6

Ref# Requirement / Questions Included Optional N/A

The following questions may be answered with Included (inherent in License fee), Optional (available at

additional cost – Specify $’s) or N/A (Not Available)

Customer Support Included Optional N/A Max. Mark score

Provide phone support 1

Provide on-line support, via client web for bug,

via e-mail, FAQ’s, downloadable hot fixes/patches

1

Offer on-line user community through established

Regional & International user groups

(Additional Comment Space)

1

Provide no cost on-line or web based training 1

Provide On/off-site Training classes 1

Provide release notes when upgrades and/or

patches are released, far prior to the upgrade or

patch date (to allow for decision and test design)

1

F. SUPPLIER

The bidder of the complete package is an established vendor with relevant experience in the design and implementation of

INTEGRATED HEALTH INFORMATION SYSTEMS in organizations of similar size. The bidder’s local partner shall also have the manufacturer’s authorization (if applicable).

Total points in this area are 409 which will account for 50% of the technical evaluation criteria indicated in Annex 5

.