RFI questions_WebBased Respirator Medical Questionnaire Evaluation Tool.xlsx
XLSX spreadsheet 27 KB Posted
- Attached to
- Request For Information (RFI) Web Based Respirator Medical Questionnaire & Evaluation Tool
- Solicitation number
- 7571MN26RFI00089
- Issued by
- Not on record
About this file
This is a Request for Information (RFI) questionnaire designed to gather vendor capabilities and market research data for a web-based Respirator Medical Questionnaire and Evaluation Tool. Federal Occupational Health (FOH), a component of the U.S. Department of Health and Human Services, is seeking to identify vendors capable of providing, configuring, or developing a solution that meets evolving cybersecurity, identity management, and operational requirements. The RFI addresses a critical need to support respirator medical evaluation and clearance services for more than 360 federal agencies and approximately 1.8 million federal employees throughout the United States, U.S. Territories, and internationally, in compliance with the Occupational Safety and Health Administration (OSHA) Respiratory Protection Standard (29 CFR 1910.134).
The questionnaire contains 50 yes/no technical questions and 35 text entry questions spanning functional, clinical, operational, cybersecurity, privacy, and accessibility requirements. Key technical areas assessed include OSHA-compliant questionnaire processes, support for SAML 2.0 and OpenID authentication, phishing-resistant multi-factor authentication (MFA), Section 508 accessibility compliance, production and disaster recovery capabilities, and secure data handling. Vendors are also queried on experience deploying solutions within Department of Defense and federal civilian agency environments, personnel qualifications and security clearances, support for configuration and custom development, GSA Multiple Award Schedule availability, pricing models, and implementation risks. Additional inquiries address PII handling and masking protocols, cybersecurity vulnerability management practices, supply chain risk management, and vendor experience with clinical workflow systems and respirator medical evaluation solutions for federal, state, or commercial customers.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| Section C_Web Based Resp Tool DRAFT.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Instructions and Questions Please do not provide general capabilities statements. Only provide relevant information related to this requirement. This is optional
| Technical Questions "Yes/No" | Response | |
| 1 | Does your company have the capability to perform all required services? | |
| 2 | Will your company sub-contract out a portion of the requirement? | |
| 3 | Do you have the capability to meet the period of performance requested? | |
| 4 | Does your company have the ability to service the United States, U.S. Territories and internationally? | |
| 5 | Does your company have a current or expired Authority to Operate (ATO) from a federal agency? If yes, please provide the approved ATO memorandum supporting this claim. | |
| 6 | Does your system currently incorporate both a production and disaster recovery server? | |
| 7 | Does your solution support SAML 2.0? | |
| 8 | Does your solution support OpenID? | |
| 9 | Does your solution implement phishing-resistant MFA? | |
| 10 | Does your solution support OSHA-compliant respirator medical questionnaire and evaluation clearance processes in accordance with 29 CFR 1910.134? | |
| 11 | Does your system use the OSHA Respirator Medical Evaluation Questionnaire (29 CFR 1910.134, Appendix C) as a base? | |
| 12 | Does your system gather and include/consider work conditions under which the respirator will be worn as part of the evaluation? | |
| 13 | Does your system test for multiple respirators of any brand/make, including negative and positive pressure respirators? | |
| 14 | Do all 'Yes' medical responses require appropriate follow-up questions built into the questionnaire? | |
| 15 | Are all questionnaires evaluated utilizing the same objective criteria? | |
| 16 | Is a federal employee able to be cleared for multiple respirators and sets of work conditions as part of one evaluation without additional charge to the government? | |
| 17 | Will each federal agency be able to set their specific recertification times based on the American National Standards Institute (ANSI) age recommendations (ANSI/AIHA Z88.6-2006) or on a fixed interval (e.g., annually, every two, three or five years)? | |
| 18 | On average, can the questionnaire be completed in less than 20 minutes? | |
| 20 | Does the web-based tool allow the federal employee to enter their information into the questionnaire? | |
| 21 | Does the web-based tool apply algorithmic logic to identify survey questionnaire responses that are cleared or referred for further evaluation, based on a formulaic review of the survey responses? | |
| 22 | Is each federal employee notified of their clearance status (cleared, not cleared or further information needed) to wear a respirator at the end of the questionnaire? | |
| 23 | Do cleared users have the ability either to print their clearance letter or have it sent to their e-mail address? | |
| 24 | If a user is cleared, does the system have a mechanism to classify the federal employee as “complete/compliant”? | |
| 25 | Are users able to log back into the website and reprint their clearance letter for up to 90 days after completing and submitting the questionnaire? | |
| 26 | Do Contractor-employed board-certified physicians perform initial reviews of questionnaires that are not immediately cleared? Do users receive notice via email within one (1) business day indicating whether review of their questionnaire and additional information has resulted in them being cleared or being referred for further evaluation? | |
| 27 | Do users referred for additional information receive email notification to log-in and print a packet of information they are to take to the doctor/clinic where their follow-up evaluation is to be performed? | |
| 28 | Does the web-based tool allow users referred for further evaluation to submit any additional follow-up documentation via the Web-based tool? Based on the additional follow-up documentation submitted, do contractor physicians perform secondary reviews of the questionnaire and documentation? Are users notified via email of their clearance status (cleared, cleared with restrictions, or not cleared) within one (1) business day? If cleared, does the web-based tool update the user’s status and classify the user as 'complete’? | |
| 29 | Does the web-based tool interface permit the designation of a FOH point-of-contact to query, run reports and view cases requiring follow-up with FOH? | |
| 30 | Does the web-based tool allow the FOH point-of-contact to enter additional follow-up information/documentation, and allow FOH to send the follow-up information/documentation to FOH physicians for secondary review? Does the web-based tool allow the FOH physician access to the federal employee’s questionnaire, review the follow-up information/documentation, and enter a clearance status (cleared, cleared with restrictions, or not cleared)? Do users receive notice via email within one (1) business day indicating whether review of their questionnaire and additional information has resulted in them being cleared or being referred for further evaluation? | |
| 31 | Federal employees that follow-up at an FOH clinic are provided with copies of their follow-up assessment. Does the web-based tool allow users to submit the FOH follow-up documentation? Based on the additional follow-up documentation submitted, will board certified contractor physicians perform secondary reviews of the questionnaire and documentation? Do users receive notice via email within one (1) business day indicating whether review of their questionnaire and additional information has resulted in them being cleared, cleared with restricitons or not cleared? | |
| 33 | Are the service administrative interfaces 508 compliant (https://www.section508.gov)? | |
| 34 | Are the service user interfaces 508 compliant (https://www.section508.gov)? | |
| 35 | Are you able to satisfy the functional, clinical, operational, cybersecurity, privacy, and security requirements identified in the Government's requirements documentation? | |
| 36 | Are the service currently available on your GSA Multiple Award Schedule (MAS) (i.e., catalogue)? | |
| 37 | Does your company have experience with recruiting, hiring, and retaining the required personnel resources for the service? | |
| 38 | Does your company have the required certifications, skillsets, and talent for the service? | |
| 39 | Does your company have the required cleared (i.e., security clearance) personnel? | |
| 40 | Are the service communications encrypted? | |
| 41 | Has the service been deployed within a Department of Defense (DoD) Organization (.mil domain)? | |
| 42 | Has the service been deployed within a Federal Civilian Agency (.gov domain)? | |
| 44 | Is any information from the service transmitted, routed, or stored outside the sovereign borders of the United States of America (i.e., DFARS 239.7602-2 Required storage of data within the United States or outlying areas)? | |
| 45 | Do you provide configuration, customization, enhancement, or custom software development services to satisfy customer-specific requirements? | |
| 46 | Do you provide installation & deployment services through authorized 3rd parties for the service? | |
| 47 | Do you provide maintenance services (e.g., technical support, updates, patching) for the service? | |
| 48 | Do you provide maintenance services (e.g., technical support, updates, patching) through authorized 3rd parties for the service? | |
| 49 | Does the software collect data and perform analysis? | |
| 50 | Do you provide modeling or simulation service? |
| Text Entry Questions | Response | |
| 1 | Please select the NAICS code you believe is most appropriate for this requirement. | |
| 2 | Please indicate the size of your business. | |
| 3 | Please select all socio-economic categories that apply to your business. | |
| 4 | In your estimation, how much of this potential requirement would your firm need to subcontract to other firms? | |
| 5 | Estimated Total Contract Value? | |
| 6 | Please state the Personally Identifiable Information (PII) (i.e., name, SSN, DOB, etc.) your company requires for a customer employee to use this service. Please explain how PII is masked to minimize the transmission of such information. | |
| 7 | What is the average cost per unit? | |
| 8 | Are there any additional costs? | |
| 9 | Are there other considerations for the service that have not been covered that the Government should be aware of when evaluating, selecting, deploying, and operating the service? | |
| 10 | What are the common risks and issues encountered when implementing the service? | |
| 11 | What technical information does the Government need to provide to support accurate proposals (e.g., cost, performance, schedule) for any future solicitations? | |
| 12 | Does the service provide any native or special mechanisms or tools to support individuals with disabilities (i.e., Americans with Disability Act (ADA))? | |
| 13 | Describe how users authenticate to the service, including support for SAML 2.0 or OpenID, multi-factor authentication (MFA), and phishing-resistant MFA, as applicable. | |
| 14 | Is any information from the service sent or received to / from outside sources (e.g., OEM servers, Maintenance Providers)? | |
| 15 | What cybersecurity practices were implemented and used in the development of the service? | |
| 16 | What cybersecurity tools are used to monitor the service offered for cybersecurity vulnerabilities or issues? | |
| 17 | What cybersecurity tools were used during service development to identify cybersecurity vulnerabilities or issues? | |
| 18 | What Supply Chain Risk Management (SCRM) practices were implemented and used in the development of the service? | |
| 19 | How do users access the software service? | |
| 20 | How long does the software service archive Business Intelligence (BI) data? | |
| 21 | If the software service uses a mobile device, what mobile devices are supported? | |
| 22 | If the software service uses a web browser, what web browsers are supported? | |
| 23 | Describe your company's experience providing, configuring, or developing web-based respirator medical questionnaire and evaluation solutions or similar clinical workflow systems for federal, state, or commercial customers. | |
| 24 | Would your firm submit an offer if this requirement is issued under your GSA Contract? | |
| 25 | Please identify all GSA Contracts your company holds and are relevant to this requirement. | |
| 26 | How is phishing-resistant MFA implemented for: |
internal government users?
external customers?
| 27 | Can your proposed solution satisfy the Government's identity management requirements through existing functionality, configuration, or custom development? Please describe. |
| 28 | Does your solution support secure user authentication using SAML 2.0 or OpenID? Please describe how users authenticate to access only their authorized questionnaire(s). Does your solution support multi-factor authentication (MFA), including phishing-resistant MFA, in accordance with the Government's requirements? |
| 29 | Does the web-based tool provide FOH physicians and nurses with secure, unique user accounts that support SAML 2.0 or OpenID integration and multi-factor authentication? Does the solution provide role-based access restricted to assigned agencies? |
| 30 | Describe how users authenticate to the service. Include your solution's support for SAML 2.0 or OpenID, multi-factor authentication (MFA), and phishing-resistant MFA for internal government users and external customers, as applicable. |
| 31 | Describe your organization's process for identifying, managing, and remediating cybersecurity vulnerabilities affecting the proposed solution. |
| 32 | Does your proposed solution support SAML 2.0 or OpenID integration as required by the Government? If yes, please describe. |
| 33 | If your proposed solution does not currently support one or more of the Government's identity management requirements (including SAML 2.0 or OpenID and phishing-resistant MFA), please identify the requirement(s), describe the proposed approach to satisfy them, and indicate whether implementation would require configuration or custom development. |
| 34 | Can your proposed solution satisfy all Government requirements through existing functionality? If No, please explain. |
| 35 | If your proposed solution requires configuration or custom software development to satisfy one or more Government requirements, please identify those requirements and describe your proposed approach. |
File details come from the government source that posted it. Updated .