Video Surveillance System (VSS) for Defense Health Agency (DHA) Facilities

The Defense Information System Agency (DISA), on behalf of the Defense Health Agency (DHA), is issuing this Request for Information (RFI) to gather market research on Video Surveillance Systems (VSS) for use in DHA facilities. The DHA manages Facility-Related Control Systems (FRCS), including VSS, to ensure safe, secure, and resilient operations in healthcare environments. This RFI aims to understand current technologies, compliance with Risk Management Framework (RMF), integration readiness, and support strategies to inform future acquisition and cybersecurity authorization efforts. The DHA is developing a standard VSS profile for consistent, secure, and sustainable deployment across its enterprise. Responses should highlight technical characteristics, cybersecurity controls, interoperability, and system readiness. Specifically, the agency is interested in information regarding VSS design, capabilities, security posture, lifecycle support, compliance with standards such as NIST SP 800-53 and 800-82, RMF authorization, communication interfaces, network connectivity (including DHA's Medical-Community of Interest and DoD networks), authentication and authorization capabilities, data handling (including PII and ePHI), encryption standards, patching and vulnerability management, remote access controls, Operational Technology (OT) security, and supply chain risk management, including compliance with DFARS clauses.