832674717_VSS_DHA_Questions_Answers.docx

Video Surveillance System (VSS) in Defense Health Agency (DHA) Facilities Questions and Answers

1.) Can the Government clarify whether the intended end state for the DHA VSS capability is a centrally managed, enterprise-wide system spanning all CONUS FRCS locations under a unified architecture, or a federated approach where VSS solutions are standardized but deployed and integrated at the individual MTF/campus level with localized management?”

If a federated model is preferred, should vendors assume requirements for cross-site interoperability, centralized monitoring, or enterprise-level data aggregation?”

A. A more federated model is planned at this time.

2.) Should vendors assume on-premises deployments within each MTF, or is DHA considering hybrid or centralized hosting models (e.g., regional data centers or cloud-adjacent architectures) aligned with DoD policy?

A. At this time on-premise deployments, however this may change in the future.

3.) To what extent is VSS expected to integrate into a broader Enterprise Security System (ESS), and are there defined integration expectations for access control, intrusion detection, or other FRCS components?

A. Some sites are integrated, however some are separate. Expect integration with ACS, VSS, Infant Protection and elevator controls in in-patient facilities.

4.) How should vendors account for existing or legacy VSS/FRCS systems across DHA facilities—should solutions support coexistence, phased migration, or full system replacement?

A. Legacy systems will need to be identified and evaluated. System replacements are subject to availability of funds.

5.) Will the VSS be authorized as a standalone RMF system or as part of a broader FRCS/ESS boundary, and how should vendors align system architecture and accreditation strategies accordingly?

A. This depends on if it is stand alone or part of a larger system as described in the answer to question 3.

6.) What architectural constraints or prerequisites exist for operating VSS solutions within the DHA Medical Community of Interest (Med-COI) network?

A. Primarily Athority to operate.

7.) Where does DHA expect VSS to reside architecturally (IT network vs OT enclave), and what segmentation or cross-domain design considerations should vendors plan for?

A. The DHA has an architecture to accommodate any system.

8.) Is DHA planning for centralized or regional monitoring (e.g., enterprise SOC), or will VSS operations and incident response remain locally managed at each MTF?

A. Not at this time

9.) What are DHA’s expectations for data retention, ownership, and potential enterprise-level analytics (e.g., centralized video analytics or AI/ML capabilities across multiple sites)?”

A. This has not been solidified yet.

10.) Is the Government’s intent to standardize a single VSS platform across DHA, or to establish a compliance framework allowing multiple vendors that meet interoperability and cybersecurity requirements?

A. The process and procedure for installation and security posture maintenance will be standardized. We welcome competition from multiple vendors.