P02 - RFI Questions - CRM.docx
DOCX document 26 KB Posted
- Attached to
- DF01--RFI Loopback - Cancer Registry Modernization (CRM) New Task Order (VA-24-00020603) |
- Solicitation number
- 36C10A24Q0050
About this file
This document contains questions from the Department of Veterans Affairs regarding requirements for a cloud-based cancer registry modernization software solution. The VA is seeking a FedRAMP compliant product that can provide two-factor authentication and has received an Authority to Operate from a federal agency. The software must be Section 508 compliant and certified by a third party. The solution will be hosted in the VA-EC cloud, and the vendor should provide requirements for AWS or Azure instance sizing and the anticipated number of government laptops needed. The vendor is also asked to provide a level of effort for cost purposes including descriptions, funding lines, quantities, months, and necessary funding.
The related federal contract opportunity is a pre-solicitation for cancer registry modernization software with the solicitation number 36C10A24Q0050. The NAICS code, business size, and UEI number are requested from vendors, along with confirmation of whether the company is a cloud-based software provider and original manufacturer or authorized reseller.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| 36C10A24Q0050 0003.docx | DOCX document | |
| 36C10A24Q0050 0002.docx | DOCX document | |
| 36C10A24Q0050 0001.docx | DOCX document | |
| 36C10A24Q0050.docx | DOCX document | |
| P09 - Draft PWS at RFI - CRM.docx | DOCX document |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Cancer Registry Modernization
Cloud Questions:
1. Is your product FedRamp (https://www.fedramp.gov/) compliant or are you in the process of becoming FedRamp compliant? If not, would you be interested with VA sponsorship?
2. Do you have experience with deploying your product inside a private cloud?
3. Do you have experience with any other federal government cloud platforms?
Security Questions:
1. Does your product have the ability to provide access and authentication in accordance with the federal government’s 2-Factor Authentication and PIV card requirements? (Details below)
· NIST SP 800-116 Rev 1, “Guidelines for the Use of Personal Identity Verification (PIV) Credentials in Facility Access,“ June 2018
· NIST SP 800-63-3, 800-63A, 800-63B, 800-63C, “Digital Identity Guidelines,” updated March 02, 2020
· NIST SP 800-157, “Guidelines for Derived PIV Credentials,” December 2014
· NIST SP 800-164, “Guidelines on Hardware-Rooted Security in Mobile Devices (Draft),” October 2012
· Draft National Institute of Standards and Technology Interagency Report (NISTIR) 7981, “Mobile, PIV, and Authentication,” March 2014
· VA Memorandum, VAIQ #7100147, “Continued Implementation of Homeland Security Presidential Directive 12 (HSPD-12),” April 29, 2011 (reference https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514)
· IAM Identity Management Business Requirements Guidance document, May 2013, (reference Enterprise Architecture Section, PIV/IAM (reference https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514)
· VA Memorandum “Personal Identity Verification (PIV) Logical Access Policy Clarification,” July 17, 2019, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4896
2. Has your product have received an Authority To Operate (ATO) from a federal agency?
User Interface Questions:
1. Is your product 508 (https://www.section508.gov/) compliant AND has been certified as such by a third party or another federal agency?
PWS Requirement Questions:
1. Are there any requirements the government should add, remove or modify to get the best value solution?
2. If this opportunity was awarded what is a reasonable schedule? (Tasks, task durations and major milestones)
3. We anticipate this solution to be hosted in the VA-EC cloud. What are your requirements for sizing an AWS or Azure instance to run your software?
4. How many government laptops do you anticipate needing?
5. Can you provide a Level of Effort for cost purposes that includes Description, CLIN, Quantity, Months and funding needed?
image1.emf
File details come from the government source that posted it. Updated .