SPECIAL NOTICE
D -- De-Identification Software Requirement - ROM Request
- Notice Date
- 3/25/2011
- Notice Type
- Special Notice
- NAICS
- 511210
— Software Publishers
- Contracting Office
- Department of the Air Force, Direct Reporting Unit - Air Force District of Washington, AF Surgeon General, 2509 Kennedy Circle, Bldg 125, Rm 187, Brooks City-Base, Texas, 78235-5116, United States
- ZIP Code
- 78235-5116
- Solicitation Number
- RFI-AFMSA-HID-ROM
- Archive Date
- 4/18/2011
- Point of Contact
- Alice P. Sanders, Phone: (210) 395-9393
- E-Mail Address
-
alice.sanders.2@us.af.mil
(alice.sanders.2@us.af.mil)
- Small Business Set-Aside
- N/A
- Description
- This is a follow-on Request for Information (RFI) to RFI-AFMSA-HID. This is NOT a solicitation request for proposals or quotations. Previous RFI RFI-AFMSA-HID solicited capability information to determine a list of products meeting the requirements stated below. The purpose of this follow-on RFI is to determine the potential cost (Rough Order of Magnitude (ROM)), technical challenges, and schedule requirements. Responders to the RFI must address each of the listed requirements. If a vendor's software tool does not already support one or more of the requirements, but can be modified to do so in a timely manner, that will, in and of itself, not be a disqualification from consideration. This is not a custom development project and a non-Commercial-Off-The-Shelf (COTS) or GOTS solution will NOT be accepted. If a vendor has several software tools that, when integrated together, satisfy all requirements, the Government will give consideration to the vendor's proposed solution. The Healthcare Informatics Division (HID) of the Air Force Medical Support Agency (AFMSA) is soliciting government, industry and academia for a high quality software tool for encryption and de-identification of protected healthcare information in a large and dynamic healthcare research clinical data repository environment. The specific requirements for this software are as follows: 1. Security of the de-identification method The software should de-identify data in accordance with both HIPAA and ISO accepted standards, with a minimum probability of re-identification by unauthorized personnel. The pertinent sections of HIPAA are embodied by Public Law 111-5 Section 13402 and Public Law 104-191 Section 264 as implemented by the Code of Federal Regulations Title 45--Public Welfare, Subtitle A--Department Of Health And Human Services, Part 164-Security and Privacy, Subpart A-General Provisions, and Subpart E-Privacy of Individually Identifiable Health Information. The international standard for PHI is embodied in ISO Technical Standard (ISO/TS) 25237:2008. 2. Capability for re-identification The software should provide the capability for automated re-identification by authorized personnel when required. NOTE: This is a mandatory non-negotiable requirement and must be implementable without maintaining vast tables of reconversion information. 3. Retention of data integrity after de-identification Software must retain the integrity of internal data relationships after de-identification. e.g. If a patient number is used to relate two records for the same patient, the de-identification of that specific patient number must be consistently the same to maintain the integrity of the patient's records. Since the data may represent treatments that have both start and stop dates, the software must have the ability to retain the appropriate date spans for the data to be useful in many research studies. 4. Retention of data format after de-identification Software must retain the native formats of the data after de-identification. In other words, a numeric 9-digit SSN should continue to be a 9-digit numeric value. This prevents the need for redesign and redevelopment of existing databases and applications in order to use the software. 5. Encryption The software should support identity-based field-level encryption using AES (IBSE) in compliance with FIPS 140-2, and include tools to enable symmetric key management and data decryption. 6. Seamless Integration The software must integrate seamlessly into the ongoing operation of the U.S Air Force Medical Support Agency Healthcare Informatics Division's Healthcare Informatics Data Warehouse environment. This environment makes use of Microsoft SQL Server, Oracle, and Cache databases and the Informatica ETL tool. With approximately 40 TB of data, provision must be made for in-situ de-identification of data in the databases without unloading and reloading during initial integration. 7. Ease of use and learning curve associated with the software Any automated software tool for de-identification should require a minimum of overhead and present a short learning curve to be effectively accepted for use. Its use should be as unobtrusive to the normal workflow as possible. Delivery Cost and Schedule Provide a financial Rough Order of Magnitude (ROM) estimate to accomplish this effort, given the parameters shown in the requirements above. It is requested that the ROM be broken into areas of: software licensing cost, initial startup conversion cost, and ongoing maintenance cost. Identify a top level schedule to accomplish the above listed requirements. Identify where the effort will be conducted and the expected timeframe. Please list any assumptions, conditions, or limitations that would impact your company's ability to accomplish this effort. Please describe your business capacity for taking on this additional effort, taking into account current and planned workload. Describe any additional resources that are available to you to increase capacity. Please provide a description of Earned Value Management (EVM) processes your company uses to maintain cost, schedule, and performance of your contracts. Responses shall be limited to no more than 20 pages, not including cover letter, cover page, and table of contents. Each response must address all requirements stated above. Also include information such as: Company name, address, e-mail, telephone number, points of contact. The responses will also assist in identifying small businesses with sufficient capability and experience to accomplish this procurement which will be used to determine whether this procurement will be a small business set-aside. Please provide your size of business pursuant to the North American Industrial Classification System (NAICS) 511210, Software Publishers, Small Business Standard of $25 million. Upon review of all submissions in response to this RFI, AFMSA/HID may schedule individual meetings with any or all respondents to gain further understanding of their specific responses. Responses shall be submitted no later than 3:00 PM CST on 14 APRIL 2011 to points of contacts listed below. All responses shall be transmitted electronically. Submissions shall be compatible with and accessible using Microsoft Office software applications. Additional information: This notice does not obligate the Government to award a contract or otherwise pay for the information provided in response to this RFI synopsis or any future requests. Any information submitted in response to this RFI is strictly voluntary. This RFI is for information planning purposes and the Government will not pay or otherwise reimburse respondents for information submitted. It is the responsibility of potential offerors to monitor this site for the release of any follow-on information. All documentation shall become the property of the Government. Unless otherwise stated herein, no additional information is available and requests for the same will be disregarded. Respondents are advised that the Government is under no obligation to acknowledge receipt of the information received or provide feedback to respondents with respect to any information submitted. All proprietary, classified, or sensitive information must be marked in your response. The Government reserves the right to use any non-proprietary technical information in any resultant solicitation. Primary Points of Contact: Dr. William Redmond, PhD, PMP Senior Database Administrator SpecPro Technical Services william.redmond.ctr@us.af.mil (Non-Disclosure Agreement on file with Government) Alice P. Sanders, Civ, USAF Contracting Officer alice.sanders.2@us.af.mil
- Web Link
-
FBO.gov Permalink
(https://www.fbo.gov/notices/5190ac38a0e6513717a206cca5f19ef0)
- Record
- SN02409439-W 20110327/110325234451-5190ac38a0e6513717a206cca5f19ef0 (fbodaily.com)
- Source
-
FedBizOpps Link to This Notice
(may not be valid after Archive Date)
| FSG Index | This Issue's Index | Today's FBO Daily Index Page |