Occupational/Employee Health Electronic Health Records and Management Information Systems

Form / Attachment / Pricing Sheet

This document is a Request for Information (RFI) from the Department of Homeland Security (DHS) seeking responses regarding an Occupational/Employee Health Electronic Health Record & Medical Information System. It outlines instructions for vendors on how to respond to the RFI, emphasizing that not all questions need to be answered, but prioritizing those that best showcase capabilities and areas where additional clarity from DHS is needed. Vendors are encouraged to answer at least 20 questions across Sections 1-5.

The RFI is structured into seven sections:

• Section 1: Corporate Information and Qualifications: Gathers details on the company's legal name, website, contact information, SAM registration, UEI, NAICS code, company profile, financial stability, business size, and relevant experience in occupational/employee health systems.
• Section 2: Solution Overview and Architecture: Focuses on the proposed product(s), their architecture, hosting, FedRAMP/ATO readiness, and data residency.
• Section 3: Occupational Data Governance, Privacy, and Access Control: Inquires about how the system handles data governance, compliance with regulations (OSHA, ADA, HIPAA, etc.), role-based access control, and auditing/retention.
• Section 4: Occupational Health Functional Capabilities: Details the system's ability to support various encounter types, fitness-for-duty standards, pre-employment exams, injury/illness documentation, drug/alcohol testing, and immunizations/health surveillance.
• Section 5: Interoperability and Integration: Assesses the system's support for standards-based interoperability, integration with HR systems, and data migration capabilities.
• Section 6: Implementation, Configuration, and Support: Seeks information on the implementation approach, phasing strategy, configuration vs. customization, and support.
• Section 7: Acquisition Strategy, Pricing, and Price Drivers: Asks about available contract vehicles, recommended acquisition approaches, and pricing models, including included/optional modules and a Rough Order of Magnitude (ROM) estimate.

This RFI serves as an initial market research tool for DHS to understand available solutions for an Occupational Health EHR/Management Information System. Vendors interested in this potential future procurement should review the detailed questions across all sections to understand DHS's requirements and provide responses that highlight their capabilities and experience. The RFI also provides instructions on how to submit responses and indicates that responses will be used to inform DHS's acquisition strategy.

Statement of Objectives (SOO)

This document outlines the Department of Homeland Security's (DHS) need to license and implement a commercial, configurable Occupational Health Electronic Health Record / Management Information System (Occ Health EHR/MIS). The system aims to support the health and readiness of approximately 200,000 DHS civilian personnel across their full employment lifecycle.

The DHS Occ Health EHR/MIS shall provide a unified platform that supports occupational health activities, including:

• Employee health examinations (pre-placement, periodic, fitness-for-duty, exit)
• Workplace injury, illness, and exposure documentation and return-to-work management
• Drug and alcohol testing program workflows
• Immunizations and occupational surveillance programs
• Workforce medical readiness and clearance management
• Longitudinal medical surveillance and case management
• Employee wellness support and de-identified population-level analytics
• Occupational data governance, privacy, and access control

The system must integrate with existing DHS and Component systems, including HR, identity management, laboratory systems, and enterprise analytics platforms.

The solution must be a commercially available, configurable Occ Health EHR/MIS platform, deployable within the DHS cloud environment. It should feature an integrated architecture with a core EHR layer, an occupational/exposure data layer, and a CRM-style case-management layer.

Key objectives include:

• Providing a single, authoritative occupational health record for each employee.

• Supporting the full employee lifecycle with linkage to exposures and job roles.

• Enabling longitudinal data views and reuse of exam/surveillance data.

• Implementing granular role-based access controls and ensuring data privacy.

• Providing a configurable medical surveillance engine and supporting exposure-informed decision-making.

• Managing injury, illness, exposure, and return-to-work processes.

• Ensuring standards-based interoperability and integration capabilities.

• Meeting security requirements for deployment within a DHS-approved cloud environment.

• Demonstrating scalability, configurability, and user adoption.

• Supporting implementation, data migration, and ongoing operations.

• The government intends to acquire a commercially available solution, not fund extensive custom development.

• A configuration-first approach is preferred.

• All DHS data must reside within the DHS cloud environment and the continental United States.

• The solution must comply with all applicable laws, regulations, and DHS policies (e.g., OSHA, ADA, GINA, HIPAA, FISMA).

• The system must meet defined availability and performance requirements.