Video Surveillance System (VSS) in Defense Health Agency (DHA) Facilities

Summary (Newest Update)

Background The Defense Health Agency (DHA) manages Facility-Related Control Systems (FRCS) that support safe, secure, and resilient operations in healthcare environments. One category of these systems is the Video Surveillance System (VSS). VSS deployed in Medical Treatment Facilities (MTFs) must align with Department of Defense (DoD) Information Technology (IT) cybersecurity, interoperability, and sustainment requirements. The DHA seeks to develop an enterprise standard for evaluating and integrating these systems. Work Details The DHA Facilities Enterprise Program Management Office is soliciting vendor input on the design, capabilities, security posture, and lifecycle support of FRCS used in DHA facilities. The objective is to develop a standard VSS profile that supports consistent, secure, and sustainable deployment across the enterprise. Vendors are requested to provide information on various aspects including: - Standards guiding VSS design and security approach; - System architecture; - Integration with Enterprise Security Systems; - RMF authorization support; - Authentication and authorization capabilities; - Data processing and security measures; - Patching and vulnerability management; - Remote access capabilities; - Operational Technology security requirements; - Supply chain risk management and traceability. Specific questions include details about communication interfaces, user authentication methods, data types processed by the VSS, encryption standards used, patch management processes, OT network segmentation strategies, compliance with DFARS clauses, and third-party components. Place of Performance The contract will be performed at Defense Health Agency facilities.