Enterprise Dose Monitoring

The Defense Health Agency seeks an enterprise dose monitoring software solution with installation, training, and a five-year maintenance agreement, with proposals due August 24, 2026. The procurement is a 100% small business set-aside under NAICS 513210, Software Publishers, with a $47 million size standard.

Place of performance is Frederick, Maryland. The contractor must consolidate site-local dose monitoring systems across the DHA enterprise and deploy the solution across 12 PACS Hubs at Army, Navy, and international military medical facilities, achieving clinical go-live at all sites within 12 months of award.

The contractor must meet 40 Minimum Essential Characteristics including support for all ionizing radiation modalities, validation for volumes exceeding 10 million exams annually, IHE compliance, DICOM bi-directional integration with DHA Radiology PACS, analytics and reporting across 26 specified data fields, PowerScribe 360 and PowerScribe 1 integration, Common Access Card authentication, and organ dose calculation per AAPM TG204 standards with Global Dose Registry export capability.

All contractor personnel and subcontractors must execute DHA Form 49 Non-Disclosure Agreement protecting sensitive and proprietary information indefinitely. The contractor must obtain and maintain RMF Authority to Operate throughout the contract period. Cybersecurity requirements include Hardware and Software Bills of Materials, secure development practices per NIST SP 800-218, prohibition on foreign adversary component sourcing, FIPS 140-2 encryption for protected health information, critical security patches deployed within 15 calendar days, monthly Nessus vulnerability scans, and notification of high or critical severity vulnerabilities to DHA's Cyber Operations Center within 72 hours. The contractor must complete the Medical Device and Equipment Risk Assessment questionnaire and provide comprehensive RMF artifacts prior to first unit delivery.

Contract term is five years including maintenance support and software updates. The solicitation uses Lowest Price Technically Acceptable evaluation based on technical capability, past performance, and price. Organizational Conflict of Interest certification is required with the proposal.