Pneumatic Tube System (PTS) in Defense Health Agency (DHA) Facilities

Background
The Defense Health Agency (DHA) is responsible for managing Facility-Related Control Systems (FRCS) that ensure safe, secure, and resilient operations in healthcare environments. One of these systems is the Pneumatic Tube System (PTS), which must comply with Department of Defense (DoD) Information Technology cybersecurity, interoperability, and sustainment requirements.

The DHA aims to establish an enterprise standard for evaluating and integrating these systems across Medical Treatment Facilities (MTFs).

Work Details
The DHA Facilities Enterprise Program Management Office is seeking vendor input on various aspects of the PTS, including:
1. Standards guiding PTS design and security approaches, including an overview of the solution, core functions, deployment modes, system architecture, and integration with Enterprise Security Systems.
2. Support for Risk Management Framework (RMF) authorization and communication interfaces.
3. Integrated authentication and authorization capabilities, including user authentication methods and support for zero-trust principles.
4. Types of data processed by the PTS, including Personally Identifiable Information (PII) and electronic Protected Health Information (ePHI), along with encryption standards.
5. Approach to patching and vulnerability management, including update processes and support for credentialed scans.
6. Remote access capabilities for maintenance and associated access controls.
7. Addressing Operational Technology (OT) security requirements through network segmentation and monitoring tools.
8. Supply chain risk management compliance with Defense Supplement clauses.

Place of Performance
The contract will be performed within Defense Health Agency facilities.