Access Control System in Defense Health Agency (DHA) Facilities

The Defense Health Agency (DHA), through the It Contracting Division - PL83 at Scott Air Force Base, Illinois, has issued a Request for Information (RFI) under FAR 52.215-3 to gather market research on Access Control Systems (ACS) for use in Medical Treatment Facilities. This solicitation, identified by number 832674714 and posted on May 14, 2026, with a response deadline of May 29, 2026, is strictly for planning purposes and does not constitute a commitment to award a contract or establish any funding. The NAICS code 561621 applies, and no set-aside provisions are in effect, making the opportunity open to all sizes and types of businesses. Respondents are required to submit a white paper, not to exceed 50 pages and 5 MB in file size, detailing system architectures, cybersecurity posture, and compliance with DoD standards including NIST SP 800-53, NIST SP 800-82, FIPS 140-3, FIPS 197, FIPS 199, and FIPS 200. Systems must also adhere to DFARS clauses 252.225-7000, 252.225-7001, and 252.225-7002 regarding Buy American requirements, foreign sourcing restrictions, and counterfeit parts prevention. Operational technology must align with the Purdue Model Levels 1–3 and utilize secure protocols such as OPC UA with encryption and MODBUS TCP with TLS. All responses must support integration with the Med-COI network, PIV/CAC authentication, and B2B VPN access while strictly prohibiting external remote access. The RFI mandates full supply chain traceability, including country of origin documentation for all hardware and software components, and requires systems to handle ePHI and PII in accordance with federal privacy regulations. All submitted materials become Government property, and no cost reimbursement is provided for response preparation. Evaluations, award basis, and contract values are not applicable at this stage, as this is a market research effort. Responses must be emailed to designated points of contact—Jennifer M. Everly, Son M. Pham, and Trevor K. Whitaker—with submissions closed at 5:00 PM Eastern Time on the deadline date. No physical