HT0011-16-R-0040-Global_NAL-Attachment_8-Questions_For_Potential_Offerors-10-28-16.docx

HT0011-16-R-0040-Global NAL-Attachment 8-Questions for Potential Offerors-10-28-16

NAL IT system Questions:

1) What type of Cloud Service Offering (CSO), if any, is used by industry to electronically record, store, and access Nurse Advice Line (NAL) encounter data? If yes, go to question 3. If a CSO is not being used go to question 2.

2) If a NAL vendor does not use a CSP/CSO what IT solution is used to electronically record, store, and access NAL encounter data.

3) Does the vendor's Cloud Service Provider (CSP) have a FedRAMP JAB PA for the CSO? If so, at what level (IaaS, PaaS, SaaS)?

4) Does the vendor's CSP have a DoD PA for the CSO? If so, what level (IaaS, PaaS, SaaS)? If the answer is yes, go to 4.b. If, the answer is no, go to 4.a.

4.a. If a DoD PA hasn't been achieved at this time, has the vendor's CSP begun any assessment of the additional 35 controls and the privacy overlay that applies towards the data currently housed within the system?

4.b. If a DoD PA has been achieved, has an Risk Management Framework (RMF) Authority to Operate (ATO) effort begun to assess the availability controls and any other controls not included in the DoD PA assessment?

5) Is the CSO currently listed in the FedRAMP Cloud Service Catalog and DoD Cloud Service Catalog?

6) What data format is the vendor's NAL data currently being stored within their NAL system?

NAL Process Flow Questions:

1. Given the requirements to obtain a CAC card to access DOD systems, for example DEERS to verify eligibility, and the requirements for the telehealth registered nurse to be licensed in the state the caller is physically calling from, is it possible for an offeror to implement a process where a beneficiary only speaks to one person throughout the duration of the call?

2. If so, would this be cost effective or prohibitive?

3. Is it reasonable for this process to be established within a 6 month transition in period?