Securing Medical Devices and the Internet of Things MedFusion Pilot Demonstration

The purpose of this amendment is to provide Questions and Answers (see attached document), and provide Request for Proposal (RFP) Amendment A00001 (see attached document, VA118-17-R-2155 A00001.



This is a combined Synopsis/Solicitation for Commercial services in accordance with Federal Acquisition Regulations (FAR) subpart 12.6, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; proposals are being requested. This solicitation is issued as a Request for Proposal (RFP); the solicitation number is VA118-17-R-2155 (see attached document: Synopsis_Solicitation_VA118-17-R-2155).



Type of Contract: Time and Materials, Firm Fixed Price hybrid-type contract.



The Department of Veterans Affairs (VA) Office of Acquisition Operations, Technology Acquisition Center, located at 23 Christopher Way, Eatontown, NJ, intends to issue a full and open solicitation to procure and implement a comprehensive, scalable MedFusion pilot solution for securing, monitoring and isolation of medical devices and special purpose systems.



As Healthcare providers automate medical records, clinical systems, and medical imaging, protecting the privacy of patient information and securing IT infrastructures is becoming increasingly challenging. VA, as well as, other Healthcare organizations worldwide, is facing more security threats that increase the risks of inappropriate access to patient information, inability to access the information, and impaired integrity of the information. Medical devices and Special Purpose Systems (SPS), like other computer systems, can be vulnerable to security breaches, potentially impacting the safety and effectiveness of the device.



Based on the VA Office of Inspector General (OIG) findings regarding the VA Medical Device Protection Program (MDPP), an MDPP Working Group, in collaboration with representatives of the VA National Security Operations Center (NSOC) and Office of Information and Technology (OI&T) Service and Delivery and Engineering (SDE), outlined and analyzed the deficiencies of the current Access Control List (ACL)-based implementation of Medical Device Isolation Architecture (MDIA). As a result, the MedFusion project was established to investigate alternative approaches to device isolation (for both medical and non-medical devices) that would utilize network security management appliances and existing network isolation technologies in order to determine current availability and suitability for the task of medical device and special purpose system network isolation.



The North American Industrial Classification (NAICS) for this effort is 541512.

This solicitation shall close on July 24, 2017 at 10:00am EST. The Points of Contact (POCs) for this action are Joanne DeFazio, Contract Specialist, 732-440-9679 or Juan Quinones, Contracting Officer, 732-440-9714.

The purpose of this amendment is to extend the response date to July 24, 2017 at 10:00 AM EST. Responses to vendor questions are forthcoming. This is a combined Synopsis/Solicitation for Commercial services in accordance with Federal Acquisition Regulations (FAR) subpart 12.6, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; proposals are being requested. This solicitation is issued as a Request for Proposal (RFP); the solicitation number is VA118-17-R-2155 (see attached document: Synopsis_Solicitation_VA118-17-R-2155).



Type of Contract: Time and Materials, Firm Fixed Price hybrid-type contract.



The Department of Veterans Affairs (VA) Office of Acquisition Operations, Technology Acquisition Center, located at 23 Christopher Way, Eatontown, NJ, intends to issue a full and open solicitation to procure and implement a comprehensive, scalable MedFusion pilot solution for securing, monitoring and isolation of medical devices and special purpose systems.



As Healthcare providers automate medical records, clinical systems, and medical imaging, protecting the privacy of patient information and securing IT infrastructures is becoming increasingly challenging. VA, as well as, other Healthcare organizations worldwide, is facing more security threats that increase the risks of inappropriate access to patient information, inability to access the information, and impaired integrity of the information. Medical devices and Special Purpose Systems (SPS), like other computer systems, can be vulnerable to security breaches, potentially impacting the safety and effectiveness of the device.



Based on the VA Office of Inspector General (OIG) findings regarding the VA Medical Device Protection Program (MDPP), an MDPP Working Group, in collaboration with representatives of the VA National Security Operations Center (NSOC) and Office of Information and Technology (OI&T) Service and Delivery and Engineering (SDE), outlined and analyzed the deficiencies of the current Access Control List (ACL)-based implementation of Medical Device Isolation Architecture (MDIA). As a result, the MedFusion project was established to investigate alternative approaches to device isolation (for both medical and non-medical devices) that would utilize network security management appliances and existing network isolation technologies in order to determine current availability and suitability for the task of medical device and special purpose system network isolation.



The North American Industrial Classification (NAICS) for this effort is 541512.

This solicitation shall close on July 24, 2017 at 10:00am EST. The Points of Contact (POCs) for this action are Joanne DeFazio, Contract Specialist, 732-440-9679 or Juan Quinones, Contracting Officer, 732-440-9714.

This is a combined Synopsis/Solicitation for Commercial services in accordance with Federal Acquisition Regulations (FAR) subpart 12.6, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; proposals are being requested. This solicitation is issued as a Request for Proposal (RFP); the solicitation number is VA118-17-R-2155 (see attached document: Synopsis_Solicitation_VA118-17-R-2155).



Type of Contract: Time and Materials, Firm Fixed Price hybrid-type contract.



The Department of Veterans Affairs (VA) Office of Acquisition Operations, Technology Acquisition Center, located at 23 Christopher Way, Eatontown, NJ, intends to issue a full and open solicitation to procure and implement a comprehensive, scalable MedFusion pilot solution for securing, monitoring and isolation of medical devices and special purpose systems.



As Healthcare providers automate medical records, clinical systems, and medical imaging, protecting the privacy of patient information and securing IT infrastructures is becoming increasingly challenging. VA, as well as, other Healthcare organizations worldwide, is facing more security threats that increase the risks of inappropriate access to patient information, inability to access the information, and impaired integrity of the information. Medical devices and Special Purpose Systems (SPS), like other computer systems, can be vulnerable to security breaches, potentially impacting the safety and effectiveness of the device.



Based on the VA Office of Inspector General (OIG) findings regarding the VA Medical Device Protection Program (MDPP), an MDPP Working Group, in collaboration with representatives of the VA National Security Operations Center (NSOC) and Office of Information and Technology (OI&T) Service and Delivery and Engineering (SDE), outlined and analyzed the deficiencies of the current Access Control List (ACL)-based implementation of Medical Device Isolation Architecture (MDIA). As a result, the MedFusion project was established to investigate alternative approaches to device isolation (for both medical and non-medical devices) that would utilize network security management appliances and existing network isolation technologies in order to determine current availability and suitability for the task of medical device and special purpose system network isolation.



The North American Industrial Classification (NAICS) for this effort is 541512.

This solicitation shall close on July 17, 2017 at 3:00pm EST. Questions shall be submitted to Joanne DeFazio, Contract Specialist, at Joanne.Defazio@va.gov, and Contracting Officer, Juan Quinones, at Juan.Quinones@va.gov, no later than 12:00pm EST on July 10, 2017 with the subject line as the RFP number, VA118-17-R-2155. The Points of Contact (POCs) for this action are Joanne DeFazio, Contract Specialist, 732-440-9679 or Juan Quinones, Contracting Officer, 732-440-9714.