Sources Sought Notice HSCG23-12-I-PCI109 for IHiS Mobile Interface Component THIS IS A SOURCES SOUGHT ANNOUNCEMENT ONLY. There is no solicitation available at this time. This Sources Sought Notice is issued for the sole purpose of conducting market research in accordance with the Federal Acquisition Regulation (FAR) Part 10. The Government will not pay for any materials provided in response to this notice. If a solicitation is later released, it will be synopsized in FedBizOps. It is the potential business concerns responsibility to monitor this site for the release of any synopsis or solicitation. The U.S. Coast Guard (USCG) seeks companies who have a secure mobile solution (i.e., that can provide wireless access points integrated with the USCG network and provide access to USCG application through smart phones and tablets), and the capability to provide, implement, and pilot the solution at two USCG clinics, then (based on pilot results) rollout out to 40+ clinics throughout the USCG. The USCG is seeking a proven COTS capability and is not willing to pay for the development of the solution. The solution will be used to access the USCG Integrated Health Information System (IHiS), providing the ability to view medical information and document medical care in nearly any type of mission setting (e.g. chair/bed-side during examinations; remotely for physician review of labs; remotely at disaster recovery sites). IHiS uses the Epic electronic health record system. Users access the system via a Citrix session. The solution must meet the following requirements: 1)The solution shall provide secure mobile access to the IHiS. 2)The solution shall provide IEEE 802.11b/g/n wireless access at clinics as an extension of the USCG OneNet network. 3)The solution shall allow tablets and smart phones to access IHiS over 3G/4G cellular networks as well as wireless access points in clinics. 4)The solution shall provide tablets and smart phones with the capability to VPN to the Coast Guard OneNet network per FIPS 140-2. 5)The solution shall provide both User authentication using Common Access Card (CAC) and Device authentication for each session, ensuring only authenticated users on authorized devices are connected to the network. 6)The solution shall provide the capability of using the existing USCG enterprise certificate, Active Directory, to provide additional authentication credentials which enables user/device permissions to be set (e.g. query Active Directory for user information and reject/deny/authorize users). 7)The solution shall include the use of soft certifications to allow users on mobile devices to authenticate without having to read the certificate on the CAC for each session. This requirement is in addition to 5.2.1.e, which requires a CAC for each session. 8)The solution shall utilize an architecture extendable to multiple mobile platforms, including Android and iOS. 9)The solution shall not provide for storing any Personally Identifiable Information on the mobile devices. 10)The solution shall provide an enterprise management and monitoring tool for the network allowing complete visibility into the devices and users connected, providing the capability for the USCG to perform both Mobile Device Management and application management, including: a.managing the wireless network across the enterprise from at least two locations b.enforcing network security policies c.monitoring wireless activities d.providing centralized authentication and control of all the access points at the individual clinics e.ensuring that only those devices registered and providing correct certificate based credentials will be permitted to establish a connection to an access point f.monitoring performance g.administering roaming of wireless connections between individual access points to provide users with a seamless wireless experience 11)The solution shall work without modifying the USCG applications. Attached to this Sources Sought Notice is a draft RFP providing information regarding how the Mobile Interface Component is anticipated being implemented within the USCG. Capability statements in response to this market research shall include the following: (1) company information, including company name, address, point of contact, and telephone number; (2) a description of the solution, including software, telecommunications, hardware components; (3) completion of Table 1 identifying how the solution meets each of the requirements identified above; (4) a description of the company history with regard to (a) how the solution was developed and tested; and (b) prior experience with implementation of the solution; and (5) a statement of business size and classification (small business, 8(a) concern, veteran-owned small business, HUB Zone small business, small disadvantaged business, emergent business, women-owned small business or large business) with North American Industry Classification System (NAICS) Code 541519. This synopsis is for information and planning purposes only, does not constitute a solicitation, is not to be construed as a commitment by the Government, nor will the Government pay for information solicited. Respondents will not be notified of the results with regard to the evaluation of the capability statements received. No solicitation exists at this time; therefore, do not request a copy of the solicitation. Capability statements shall be limited to no more than ten pages (including Table 1) and sent directly to: judy.suttles@uscg.com . Only electronic responses will be accepted and shall be submitted no later than 30 March 2012. Please direct any questions or responses to this synopsis via email to judy.suttles@uscg.com. NO VERBAL QUESTIONS/REQUESTS WILL BE ACCEPTED.
