A Report for Oregon OSCIO, DHS & OHA ONE IE&ME Project Schedule and Budget Estimation Review, Assessment and Validation 7 February 2018 Engagement: 330045871 This Report, including any supporting materials, is owned by Gartner, Inc. and/or its affiliates and is for the sole use of the intended Gartner audience or other authorized recipients. This Report may contain information that is confidential, proprietary or otherwise legally protected, and it may not be further copied, distributed or publicly displayed without the express written permission of Gartner, Inc. or its affiliates. © 2018 Gartner, Inc. and/or its affiliates. All rights reserved. Engagement: 330045871 ONE IE&ME Project Schedule and Budget Estimation Review, Report for Oregon OSCIO, DHS & OHA Assessment and Validation – Final Report 30 January 2018 — Page i Table of Contents 1.0 Executive Summary .............................................................................................. 1 1.1 Background and Lessons Learned ............................................................................ 1 1.2 Schedule and Budget Estimates Assessment Conclusions ....................................... 3 1.3 Strengths and Success Factors ................................................................................. 4 1.4 Pillars of Success and Summary of Key Recommendations ..................................... 5 1.5 Recommendations ..................................................................................................... 6 1.6 Summary of Findings ................................................................................................. 7 1.7 Risk Analysis Approach ........................................................................................... 11 2.0 Approach and Methodology ............................................................................... 18 2.1 Background .............................................................................................................. 18 2.2 Assessment Goals ................................................................................................... 18 2.3 Assessment Objectives............................................................................................ 18 3.0 Analysis and Findings ........................................................................................ 20 3.1 ONE IE&ME Project Scope...................................................................................... 20 3.1.1 Description .................................................................................................. 20 3.1.2 Project Scope Strengths ............................................................................. 25 3.1.3 Project Scope Challenges and Potential Risks ........................................... 25 3.2 Reasonableness of Estimation Methodology ........................................................... 28 3.2.1 Estimation for Deloitte DDI ......................................................................... 28 3.2.2 Deloitte DDI Estimation Strengths .............................................................. 28 3.2.3 Deloitte DDI Estimation Challenges and Potential Risks ............................ 29 3.2.4 Estimation for State’s ONE IE&ME Legacy Readiness Activities ............... 29 3.2.5 Legacy Readiness Estimation Strengths .................................................... 32 3.2.6 Legacy Readiness Estimation Challenges and Potential Risks .................. 33 3.3 Reasonableness of Deloitte ONE IE&ME DDI Schedule ......................................... 34 3.3.1 ONE IE&ME Integrated Project Schedule .................................................. 34 3.3.2 Integrated Schedule Strengths ................................................................... 35 3.3.3 Integrated Schedule Challenges and Potential Risks ................................. 35 3.4 Reasonableness of State’s ONE IE&ME Project Support and Legacy Readiness Projects Schedule .................................................................................. 36 3.4.1 Four Phase Legacy Readiness Schedule .................................................. 36 3.4.2 Legacy Readiness Schedule Strengths ...................................................... 37 3.4.3 Legacy Readiness Schedule Challenges and Potential Risks ................... 37 3.4.4 Eligibility Transformation Schedule ............................................................ 38 3.4.5 Eligibility Transformation Schedule Strengths ............................................ 39 3.4.6 Eligibility Transformation Schedule Challenges and Potential Risks .......... 40 © 2018 Gartner, Inc. and/or its affiliates. All rights reserved. Gartner is a trademark of Gartner, Inc. or its affiliates. For internal use of Oregon OSCIO, DHS & OHA only. Engagement: 330045871 ONE IE&ME Project Schedule and Budget Estimation Review, Report for Oregon OSCIO, DHS & OHA Assessment and Validation – Final Report 30 January 2018 — Page ii 3.5 Reasonableness of Deloitte DDI Costs .................................................................... 40 3.5.1 Deloitte DDI Costs Strengths ...................................................................... 41 3.5.2 Deloitte DDI Costs Challenges and Potential Risks ................................... 41 3.6 Reasonableness of State Costs............................................................................... 42 3.6.1 State Costs Strengths ................................................................................. 45 3.6.2 State Costs Challenges and Potential Risks .............................................. 45 3.7 Comparisons with Other States’ Similar Efforts for Consideration ........................... 45 4.0 Prioritized Risks and Mitigation Strategies ....................................................... 47 4.1 Risk Prioritization Approach ..................................................................................... 47 4.2 Process-Related Risks............................................................................................. 48 4.3 People-Related Risks .............................................................................................. 55 4.4 Product-Related Risks ............................................................................................. 59 5.0 Conclusions and Recommendations ................................................................ 63 5.1 Schedule and Budget Estimates Assessment Conclusions ..................................... 63 5.2 Schedule and Budget Estimates Assessment Recommendations .......................... 64 Appendices .................................................................................................................. 66 Appendix A — Listing of Prioritized Risks .......................................................................... 67 Appendix B — Legacy Readiness Scope and Effort .......................................................... 77 Appendix C — Gartner’s Project Approach and Data Discovery ....................................... 91 © 2018 Gartner, Inc. and/or its affiliates. All rights reserved. Gartner is a trademark of Gartner, Inc. or its affiliates. For internal use of Oregon OSCIO, DHS & OHA only. Engagement: 330045871 ONE IE&ME Project Schedule and Budget Estimation Review, Report for Oregon OSCIO, DHS & OHA Assessment and Validation – Final Report 30 January 2018 — Page 1 1.0 Executive Summary 1.1 Background and Lessons Learned The State of Oregon was one of the early states to start planning for provisions of Affordable Care Act passed in 2010, as summarized below: With the announcement of CMS rules for enhanced funding (90% instead of the usual 50%) for Medicaid related systems and 100% for state-based Health Insurance Exchange (HIX) systems in 2011, the State decided to invest in a state of art solution to initially deploy a Health Insurance Exchange (HIX) with Medicaid MAGI eligibility and enrollment capabilities, and eventually a fully Integrated Eligibility and Enrollment solution for all health and human services benefits for the State In 2012, using the CMS approved Implementation Advanced Planning Document (IAPD) and through a competitive procurement process, Oregon chose to partner with Oracle Professional Services (OPS) to design, configure and deploy a state-based HIX and MAGI solution on top of the Oracle Siebel CRM Public Sector platform Oregon encountered numerous challenges with OPS in successfully configuring, testing and deploying an effective solution by the targeted January 2014 deadline, leading Oregon to eventually terminate its relationship with OPS for further efforts to provide the envisioned new eligibility and enrollment solution for the full continuum of the State’s health and human services programs ONE Integrated Eligibility & Medicaid Eligibility (ONE IE&ME) Project History In 2014, Oregon selected Deloitte to help in conducting a feasibility study for alternative solutions in the market to address the best path forward for eligibility and enrollment beginning with MAGI capabilities. Through market research and site visits, the State chose to leverage the solution built by Deloitte for the Commonwealth of Kentucky for MAGI Medicaid (Kynect) which had already been successfully developed and deployed into production. This was evaluated as the best value way forward for Oregon. Oregon embarked upon a disciplined process for the successful deployment of Kynect for MAGI Eligibility and Enrollment, including the following: Deloitte