The Contractor shall provide a non-physical pager, non-life safety text messaging software application solution that delivers Federal Risk and Authorization Management Program (FedRAMP) HIGH secure, and encrypted alpha, numeric and graphic communications.

The Contractor shall provide a non-physical pager, non-life safety text messaging software application solution that delivers Federal Risk and Authorization Management Program (FedRAMP) HIGH secure, and encrypted alpha, numeric and graphic communications. The Contractor shall either demonstrate/document current FedRAMP HIGH Authorization or document FedRAMP In-Process designation provided to Cloud Service Providers (CSPs) actively working towards a FedRAMP HIGH Authorization.

Additionally, the CSP offering the mobile application solution shall be responsible for management of the application, safeguarding of data stored or processed by the application, and all elements of the underlying infrastructure. The mobile messaging software application vendor shall be responsible to demonstrate/document current Federal Information Processing Standards (FIPS)-199 Security Characterization HIGH.

The Contractor shall provide a non-physical pager, non-life safety messaging software application solution which shall not store or save any Government data on Government Furnished Equipment (GFE) mobile smartphone s and tablets or Bring Your Own Device (BYOD) mobile smartphones and tablets. The Contractor shall enable the full capability and functionality of the solution with Government Furnished Equipment (GFE) smartphones and tablets and user Bring Your Own Device (BYOD) non-GFE smartphones and tablets.

The Contractor shall ensure the proposed messaging solution is designed to protect the confidentiality and integrity of all electronic Protected Health Information (PHI), Personally Identifiable information (PII), Sensitive Personal Information (SPI), and VA sensitive information, created, transmitted, received, and maintained/stored as alpha-numeric text messages.

All messages shall be encrypted according the Federal and Agency standards for all data at rest and in transmission to include compliance with Federal Information Security Management Act (FISMA) and Federal Information Processing Standards (FIPS). The Contractor shall ensure no VA data, of any nature, is stored on the device. The Contractor shall ensure 100% separation of government/corporate and personal device data and information.