Notice of Intent to Sole Sole HIPAA Compliant Global Desktop Computer Electronic Communication

The Defense Health Agency (DHA) at Lyster Army Health Clinic on Fort Novosel, AL requires global desktop computer electronic communication capabilities that are Health Insurance Portability Accountability Act (HIPAA) compliant as required by public law and National Institute of Standards and Technology (NIST) certified. This requirement is in support of the referral management system to communicate and provide data/clinical information between our military treatment facilities (MTFs) and the Military Health Systems (MHS) global TRICARE regional contractors and their network civilian providers. The life of the contract will be a base year with an additional two option years. The Government may add additional venues to the support requirement. The communication documents are to be handled at all levels as originals or digital image representations of the original paper or computer-generated documents or pages, thus eliminating the need to create, process, transmit, and store paper documents. Specifications: The system shall be secure, i.e. able to function across the internet, military network, and the MHS two TRICARE regional contractor's systems, with a level of security encryption that meets the technical requirements below. The system must be simple to use, requiring no Government or TRICARE regional contractor maintenance or support staff. Communications currently include facsimiles and emails with and without attachments. Technological advances over the life of the contract may result in additional communication venues. Be web-enabled and meet Department of Defense (DoD), Military Health System (MHS), Army, Navy, Air Force, and DHA HIPAA and security requirements. Be validated under the National Institute of Standards and Technology (NIST) Cryptographic Module Validation Program (CMVP) that, at a minimum, meets level 2 security requirements of the Federal Information Processing Standard 140'2 (FIPS 140'2) for a Secure Sockets Layer (SSL) architecture. Provide a secure, encrypted end-to-end connection supported by authentication and server SSL certification. Support https and http, and Virtual Private Network (VPN) configurations. Support Lightweight Directory Access Protocol (LDAP) in accordance with (IAW) DHA/ MHS requirements; Integrated anti-Spam, antivirus and directory services (LDAP, Active Directory). Be compliant with section 508 of the Rehabilitation Act of 1973, as amended (29 U.S.C. 794d). Use the Standard (HTML) version instead of the Advanced (AJAX) version to satisfy the Section 508 compliance. Ensure data encryption during data transmission and storage of PHI data outside of source system IAW MHS PHI data management and HIPAA requirements. Have the ability to audit capability IAW Evaluation Assurance Level - 3 (EAL3). Support interactive, batch and scheduled communication. Must be compatible with the latest Microsoft Operating System (DHA approved and imaged EUD) - currently Windows 11 and Microsoft Edge Browser. Have and utilize communication number portability capability; enables end-users to keep their telephone number (local and toll-free numbers assigned by Contractor) when switching from one telecommunications service provider to another; and Measure the time required to transmit communication messages by minutes and seconds; and Support and provide 100GB of storage capability for each account / mailbox. Super User Account. A super user account will be provided to Lyster Army Health Clinic. Additional Super User accounts will be available upon request by the COR. Super Users shall have the ability/capability to manage and audit accounts and reset passwords for surrogate and satellite accounts. Satellite accounts are accounts utilized by Community-Based Primary Care Clinics and other potential DHA facilities located near, and associated with, an MTF. Super Users will have the capability to allow user access to each account. Super Users will also have the capability to allow oversight of multiple accounts. Only one source, Lab Information Technology Inc., offers HIPAA compliant eFAX services approved for use by Lyster Army Health Clinic at Fort Novosel, AL. The associated North American Industry Classification System (NAICS) code is 541512 - Computer Systems Design Services which has a size standard of $34M. This Notice of Intent is not a request for competitive quotes. Responses to this notice will not be considered as a response to any solicitation, a request to be added to a prospective offerors list, or to receive a copy of any solicitation. A determination by the Government not to compete the contract based upon responses to this notice is solely within the discretion of the Government. Information received will be considered solely for the purpose of determining whether to conduct future competitive procurements for this item. Responses to this notice shall be submitted NLT 5:00 PM CST, 24 May 2024 to shonta.l.curtis.civ@army.mil. Telephone responses will not be accepted. Note: In order to be eligible for award of a Government contract, vendors must be actively registered in the System for Award Management (SAM), have no active exclusions, and complete the FAR and DFARS representations and certifications.