36C10B22R0017 0002.docx

DOCX document 623 KB Posted Jul 28, 2022

Attached to: DA01--Clinical Information System/Anesthesia Record Keeping System (CIS/ARK) Analytics/Decision Support Solution
Solicitation number: 36C10B22R0017
Issued by: Department of Veterans Affairs Technology Acquisition Center Austin

About this file

Written by GovTribe AI · Dec 28, 2023

This performance work statement outlines requirements for a clinical information system/anesthesia record keeping system analytics/decision support solution. Key details include providing a solution using multiple VA data sources to perform extracts, custom reporting, and analytics to aid quality improvement for surgical and critically ill patients. The contractor must also offer training, help desk support, and assessment and authorization services. The base period of performance is one year with four optional one-year extensions. The solicitation number is 36C10B22R0017 and proposals are due by August 1, 2022. Pricing is included for required tasks across the base and option years.

View the file

Other files

File	Type	Posted
36C10B22R0017 Questions and Answers.docx	DOCX document	Jul 27, 2022
36C10B22R0017 0001.docx	DOCX document	Jul 27, 2022
36C10B22R0017.docx	DOCX document	Jul 20, 2022
36C10B22R0017_Final.docx	DOCX document	Jul 20, 2022

On GovTribe

Work with this file

Download the original file
Contacts named in this file
Similar government files
Ask GovTribe AI about this file

Try for free Login

Text version

The file's text, extracted by GovTribe without its formatting.

36C10B22R0017

SUBJECT*

Clinical Information System/Anesthesia Record Keeping System (CIS/ARK) Analytics/Decision Support Solution

GENERAL INFORMATION

CONTRACTING OFFICE’S ZIP CODE*

07724

SOLICITATION NUMBER*

36C10B22R0017

RESPONSE DATE/TIME/ZONE

08-01-2022 12:00 EASTERN TIME, NEW YORK, USA

ARCHIVE

60 DAYS AFTER THE RESPONSE DATE

RECOVERY ACT FUNDS

SET-ASIDE

SBA

PRODUCT SERVICE CODE*

DA01

NAICS CODE*

541519

CONTRACTING OFFICE ADDRESS

Department of Veterans Affairs

Technology Acquisition Center

23 Christopher Way Eatontown NJ 07724

POINT OF CONTACT*

Contract Specialist James Cummiskey james.cummiskey@va.gov 848-377-5117

PLACE OF PERFORMANCE

ADDRESS

POSTAL CODE

COUNTRY

ADDITIONAL INFORMATION

AGENCY’S URL

URL DESCRIPTION

AGENCY CONTACT’S EMAIL ADDRESS

EMAIL DESCRIPTION

DESCRIPTION

Clinical Information System/Anesthesia Record Keeping (CIS/ARK) Analytics/Decision Support The purpose of this amendment is to:

1. Update Section B4, CLIN 5001 for Optional Task, “CIS/ARK Analytics Report Customization Development Support IAW PWS 5.7.” This Optional Task may be exercised in the base or any option period in increments of 50 hours, not to exceed 500 hours per contract year, for a total not to exceed 2500 hours over the entire period of performance.

Contract Specialist: James Cummiskey, james.cummiskey@va.gov, 848-377-5117

Contracting Officer: Heather Utt, heather.utt@va.gov, 848-377-5047 Amendment to a Previous Combined Solicitation 36C10B22R0017 Amendment 0002

*= Required Field

Amendment to a Previous Combined Solicitation

Page 1 of

Amendment to a Previous Combined Solicitation

5. PROJECT NUMBER (if applicable)

CODE

ADMINISTERED BY

2. AMENDMENT/MODIFICATION NUMBER

CODE

6. ISSUED BY

8. NAME AND ADDRESS OF CONTRACTOR

4. REQUISITION/PURCHASE REQ. NUMBER

3. EFFECTIVE DATE

9A. AMENDMENT OF SOLICITATION NUMBER

9B. DATED

PAGE OF

PAGES

10A. MODIFICATION OF CONTRACT/ORDER NUMBER

10B. DATED

BPA NO.

1. CONTRACT ID CODE

FACILITY CODE

CODE

Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended, by one of the following methods:

The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers

E. IMPORTANT:

is extended,

(a) By completing Items 8 and 15, and returning ________ __ copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted; or (c) By separate letter or electronic communication which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY is not extended.

12. ACCOUNTING AND APPROPRIATION DATA

(REV. 11/2016)

is required to sign this document and return ___________ copies to the issuing office.

is not, A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE CONTRACT ORDER NO. IN ITEM 10A.

15C. DATE SIGNED

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(b).

RESULT IN REJECTI

ON OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by letter or electronic communication, provided each letter or electronic communication makes reference to the solicitation and th is amendment, and is received prior to the opening hour and date specified.

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER

Contractor

16C. DATE SIGNED

14. DESCRIPTION OF

AMENDMENT/MODIFICATION

16B. UNITED STATES OF AMERICA

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SI

GNER

16A. NAME AND TITLE OF CONTRACTING OFFICER

15B. CONTRACTOR/OFFEROR

STANDARD FORM 30

PREVIOUS EDITION NOT USABLE

Prescribed by GSA - FAR (48 CFR) 53.243 (Type or print) (Type or print) (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

(Number, street, county, State and ZIP Code) (If other than Item 6) (Specify type of modification and authority) (such as changes in paying office, appropriation date, etc.)

(If required)

(SEE ITEM 11)

(SEE ITEM 13)

(X)

CHECK

ONE

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS,

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

11. THIS ITEM ONLY

APPLIES TO AMENDMENTS OF SOLICITATIONS

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

(Signature of person authorized to sign) (Signature of Contracting Officer) Department of Veterans Affairs Technology Acquisition Center 23 Christopher Way Eatontown NJ 07724 Department of Veterans Affairs Technology Acquisition Center 23 Christopher Way Eatontown NJ 07724 To all Offerors/Bidders

36C10B22R0017 07-20-2022

Clinical Information System/Anesthesia Record Keeping (CIS/ARK) Analytics/Decision Support

The purpose of this amendment is as follows:

1.)

Update CLIN 5001, Section B4.

Contract Specialist: James Cummiskey, james.cummiskey@va.gov, 848-377-5117 Contracting Officer: Heather Utt, heather.utt@va.gov, 848-377-5047

Heather Utt Contracting Officer Page 1 of Page 1 of Table of Contents

SECTION B - CONTINUATION OF SF 1449 BLOCKS	8
B.1 GOVERNING LAW	8
B.2 SOFTWARE LICENSE, SOFTWARE MAINTENANCE AND SOFTWARE TECHNICAL SUPPORT	8
B.3 CONTRACT ADMINISTRATION DATA	11
B.4 PRICE SCHEDULE	12
B.5 PERFORMANCE WORK STATEMENT	43
1.0 BACKGROUND	43
2.0 APPLICABLE DOCUMENTS	44
3.0 SCOPE OF WORK	47
4.0 PERFORMANCE DETAILS	47
4.1 PERFORMANCE PERIOD	47
4.2 PLACE OF PERFORMANCE	48
4.3 TRAVEL	48
5.0 SPECIFIC TASKS AND DELIVERABLES	48
5.1 PROJECT MANAGEMENT	48
5.1.1 CONTRACTOR PROJECT MANAGEMENT PLAN	49
5.1.2 TECHNICAL KICKOFF MEETING	50
5.1.3 REPORTING REQUIREMENTS	50
5.2 CIS/ARK ANALYTICS/DECISION SUPPORT SOLUTION	50
5.3 ANALYTIC/REPORTING SERVICES	52
5.3.1 DEVELOPMENT OF CIS/ARK REPORTS	52
5.3.2 DEVELOPMENT OF CIS/ARK CUSTOMIZABLE REPORTS	53
5.3.3 DATA MAPPING DOCUMENT(S)	53
5.3.4 ACCESS NORMALIZED DATA	53
5.3.5 EVALUTION OF DATA QUALITY	54
5.3.6 FUNCTIONAL CAPABILITIES TO CONDUCT RESEARCH	54
5.4 TRAINING REQUIREMENTS	54
5.5 HELP DESK SUPPORT	55
5.6 ASSESSMENT AND AUTHORIZATION (A&A)	56
5.7 OPTIONAL TASK – CIS/ARK ANALYTICS SYSTEM REPORT CUSTOMIZATION DEVELOPMENT SUPPORT	56
5.8 OPTION PERIODS	57
6.0 GENERAL REQUIREMENTS	57
6.1 ENTERPRISE AND IT FRAMEWORK	57
6.1.1 VA TECHNICAL REFERENCE MODEL	57
6.1.2 FEDERAL IDENTITY, CREDENTIAL, AND ACCESS MANAGEMENT (FICAM)	57
6.1.3 INTERNET PROTOCOL VERSION 6 (IPV6)	58
6.1.4 TRUSTED INTERNET CONNECTION (TIC)	59
6.1.5 STANDARD COMPUTER CONFIGURATION	59
6.1.6 VETERAN FOCUSED INTEGRATION PROCESS (VIP) AND PRODUCT LINE MANAGEMENT (PLM)	59
6.1.7 PROCESS ASSET LIBRARY (PAL)	60
6.1.8 AUTHORITATIVE DATA SOURCES	60
6.1.9 SOCIAL SECURITY NUMBER (SSN) REDUCTION	61
6.2 SECURITY AND PRIVACY REQUIREMENTS	61
6.2.1 POSITION/TASK RISK DESIGNATION LEVEL(S)	61
6.2.2 CONTRACTOR PERSONNEL SECURITY REQUIREMENTS	62
6.3 METHOD AND DISTRIBUTION OF DELIVERABLES	64
6.4 PERFORMANCE METRICS	64
6.5 FACILITY/RESOURCE PROVISIONS	65
6.6 GOVERNMENT FURNISHED PROPERTY	66
ADDENDUM A – ADDITIONAL VA REQUIREMENTS, CONSOLIDATED	67
ADDENDUM B – VA INFORMATION AND INFORMATION SYSTEM SECURITY/PRIVACY LANGUAGE	77
SECTION C - CONTRACT CLAUSES	88
C.1 52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)	88
C.2 52.204-21 BASIC SAFEGUARDING OF COVERED CONTRACTOR INFORMATION SYSTEMS (JUN 2016)	88
C.3 52.212-5 CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT STATUTES OR EXECUTIVE ORDERS-COMMERCIAL ITEMS (JUL 2021)	90
(End of clause)	99
C.4 52.217-7 OPTION FOR INCREASED QUANTITY—SEPARATELY PRICED LINE ITEM (MAR 1989)	99
C.5 52.217-9 OPTION TO EXTEND THE TERM OF THE CONTRACT (MAR 2000)	99
C.6 VAAR 852.212-70 PROVISIONS AND CLAUSES APPLICABLE TO VA	99
ACQUISITION OF COMMERCIAL ITEMS. (APR 2020)	99
SECTION D - CONTRACT DOCUMENTS, EXHIBITS, OR ATTACHMENTS	102
ATTACHMENT 1 – PICIS 8.6 HARDWARE DIAGRAM	102
ATTACHMENT 2 – DATA ELEMENTS AND REPORTS	102
SECTION E - SOLICITATION PROVISIONS	103
E.1 52.252-1 SOLICITATION PROVISIONS INCORPORATED BY REFERENCE (FEB 1998)	103
E.2 52.204-24 REPRESENTATION REGARDING CERTAIN TELECOMMUNICATIONS AND VIDEO SURVEILLANCE SERVICES OR EQUIPMENT (OCT 2020)	103
E.3 52.204-26 COVERED TELECOMMUNICATIONS EQUIPMENT OR SERVICES-REPRESENTATION (OCT 2020)	106
E.4 52.209-7 INFORMATION REGARDING RESPONSIBILITY MATTERS (OCT 2018)	107
E.5 52.212-3 OFFEROR REPRESENTATIONS AND CERTIFICATIONS—COMMERCIAL ITEMS (FEB 2021)	108
E.6 52.216-1 TYPE OF CONTRACT (APR 1984)	128
E.7 52.233-2 SERVICE OF PROTEST (SEPT 2006)	128
E.8 BASIS FOR AWARD AND PROPOSAL INSTRUCTIONS	129

SECTION B - CONTINUATION OF SF 1449 BLOCKS

B.1 GOVERNING LAW

Federal law and regulations, including the Federal Acquisition Regulations (FAR), shall govern this Contract/Order. Commercial license agreements may be made a part of this Contract/Order but only if both parties expressly make them an addendum hereto, as permitted by FAR 12.212. If the commercial license agreement is not made an addendum, it shall not apply, govern, be a part of or have any effect whatsoever on the Contract/Order; this includes, but is not limited to, any agreement embedded in the computer software (clickwrap), any agreement that is otherwise delivered with or provided to the Government with the commercial computer software or documentation (shrinkwrap), or any other license agreement otherwise referred to in any document. If a commercial license agreement is made an addendum, only those provisions addressing data rights regarding the Government’s use, duplication and disclosure of data (e.g., restricted computer software) are included and made a part of this Contract/Order, and only to the extent that those provisions are not duplicative or inconsistent with Federal law, Federal regulation, the incorporated FAR clauses and the provisions of this Contract/Order; those provisions in the commercial license agreement that do not address data rights regarding the Government’s use, duplication and disclosure of data shall not be included or made a part of the Contract/Order. Federal law and regulation including, without limitation, the Contract Disputes Act (41 U.S.C. § 7101 et seq.), the Anti-Deficiency Act (31 U.S.C. § 1341 et seq.), the Competition in Contracting Act (41 U.S.C. § 3301 et seq.), the Prompt Payment Act (31 U.S.C. § 3901 et seq.), Contracts for Data Processing or Maintenance (38 USC § 5725), and FAR clauses 52.212-4, 52.227-14, 52.227-19 shall supersede, control, and render ineffective any inconsistent, conflicting, or duplicative provision in any commercial license agreement. In the event of conflict between this clause and any provision in the Contract/Order or the commercial license agreement or elsewhere, the terms of this clause shall prevail. The Contractor shall deliver to the Government all data first produced under this Contract/Order with unlimited rights as defined by FAR 52.227-14. Claims of patent or copyright infringement brought against the Government as a party shall be defended by the U.S. Department of Justice (DOJ) in accordance with 28 U.S.C. § 516; at the discretion of DOJ, the Contractor may be allowed reasonable participation in the defense of the litigation. Any additional changes to the Contract/Order must be made by modification (Standard Form 30) and shall only be made by a warranted Contracting Officer. Nothing in this Contract/Order or any commercial license agreement shall be construed as a waiver of sovereign immunity.

B.2 SOFTWARE LICENSE, SOFTWARE MAINTENANCE AND SOFTWARE TECHNICAL SUPPORT

(1). Definitions.

a) Licensee. The term “licensee” shall mean the U.S. Department of Veterans Affairs (“VA”) and is synonymous with “Government.”

b) Licensor. The term “licensor” shall mean the Contractor having the necessary license or ownership rights to deliver license, software maintenance and support of the computer software being acquired. The term “Contractor” is the party identified in Block 17a on the SF1449. If the Contractor is a reseller and not the Licensor, the Contractor remains responsible for performance under this Contract/Order.

c) Software. The term “software” shall mean the licensed computer software product(s) cited in the Schedule of Supplies/Services.

d) Maintenance. The term “maintenance” is the process of enhancing and optimizing software, as well as remedying defects. It shall include all new fixes, patches, releases, updates, versions and upgrades, as further defined below.

e) Technical Support. The term “technical support” refers to the range of services providing assistance for the software via the telephone, email, a website or otherwise.

f) Release or Update. The term “release” or “update” are terms that refer to a revision of software that contains defect corrections, minor enhancements, or improvements of the software’s functionality. This is usually designated by a change in the number to the right of the decimal point (e.g., from Version 5.3 to 5.4). An example of an update is the addition of new hardware.

g) Version or Upgrade. The term “version” or “upgrade” are terms that refer to a revision of software that contains new or improved functionality. This is usually designated by a change in the number to the left of the decimal point (e.g., from Version 5.4 to 6).

(2). Software License.

a) Unless otherwise stated in the Schedule of Supplies/Services, the Performance Work Statement or Product Description, the software license provided to the Government is a perpetual, nonexclusive license to use the software.

b) The Government may use the software in a networked environment.

c) Any dispute regarding the license grant or usage limitations shall be resolved in accordance with the Disputes Clause incorporated in FAR 52.212-4(d).

d) All limitations of software usage are expressly stated in the Schedule of Supplies/Services and the Performance Work Statement/Product Description.

(3). Software Maintenance and/or Technical Support.

a) If the Government desires to continue software maintenance and support beyond the period of performance identified in this Contract/Order, the Government will issue a separate contract or order for maintenance and support. Conversely, if a contract or order for continuing software maintenance and technical support is not received, the Contractor is neither authorized nor permitted to renew any of the previously furnished services.

b) The Contractor shall provide software support services, which includes periodic updates, enhancements and corrections to the software, and reasonable technical support, all of which are customarily provided by the Contractor to its commercial customers to cause the software to perform according to its specifications, documentation or demonstrated claims.

c) Any telephone support provided by Contractor shall be at no additional cost.

d) The Contractor shall provide all maintenance services in a timely manner in accordance with the Contractor’s customary practice or as defined in the Performance Work Statement or Product Description. However, prolonged delay (exceeding two business days) in resolving software problems will be noted in the Government’s various past performance records on the Contractor (e.g., www.cpars.gov).

e) If the Government allows the maintenance and support to lapse and subsequently wishes to reinstate it, any reinstatement fee charged shall not exceed the amounts that would have been charged if the Government had not allowed the subscription to lapse.

(4). Disabling Software Code.

The Government requires delivery of computer software that does not contain any code that will, upon the occurrence or the nonoccurrence of any event, disable the software. Such code includes but is not limited to a computer virus, restrictive key, node lock, time-out, or other function, whether implemented by electronic, mechanical, or other means, which limits or hinders the use or access to any computer software based on residency on a specific hardware configuration, frequency of duration of use, or other limiting criteria. If any such disabling code is present, the Contractor agrees to indemnify the Government for all damages suffered as a result of a disabling caused by such code, and the contractor agrees to remove such code upon the Government’s request at no extra cost to the Government. Inability of the Contractor to remove the disabling software code will be considered an inexcusable delay and a material breach of contract, and the Government may exercise its right to terminate for cause. In addition, the Government is permitted to remove the code as it deems appropriate and charge the Contractor for consideration for the time and effort expended in removing the code.

(5). Manuals and Publications.

Upon Government request, the Contractor shall furnish the most current version of the user manual and publications for all products/services provided under this Contract/Order at no cost.

B.3 CONTRACT ADMINISTRATION DATA

1. Contract Administration: All contract administration matters will be handled by the following individuals:

a. CONTRACTOR: TBD

b. GOVERNMENT: Heather Utt, Contracting Officer 36C10B heather.utt@va.gov Department of Veterans Affairs Technology Acquisition Center 23 Christopher Way Eatontown NJ 07724

2. CONTRACTOR REMITTANCE ADDRESS: All payments by the Government to the contractor will be made in accordance with:

[X]

52.232-33, Payment by Electronic Funds Transfer—System For Award Management, or

[]

52.232-36, Payment by Third Party

3. INVOICES: Invoices shall be submitted in arrears:

a. Quarterly	[]
b. Semi-Annually	[]
c. Other	[X] Upon Acceptance of Deliverables in Price Schedule

4. GOVERNMENT INVOICE ADDRESS: All Invoices from the contractor shall be submitted electronically in accordance with VAAR Clause 852.232-72 Electronic Submission of Payment Requests.

ACKNOWLEDGMENT OF AMENDMENTS: The offeror acknowledges receipt of amendments to the Solicitation numbered and dated as follows:

AMENDMENT NO

DATE

B.4 PRICE SCHEDULE

Base Period

CONTRACT LINE ITEM NUMBER (CLIN)

DESCRIPTION

QTY

Unit

UNIT PRICE

TOTAL PRICE

0001

Project Management in accordance with (IAW) Performance Work Statement (PWS) Paragraph 5.1.

Period of Performance (PoP): Twelve (12) months This CLIN includes all tasks, labor and travel required for the successful completion of the services detailed in PWS section 5.1 and all subparagraphs.

0001AA

Staffing Plan

Due NLT 30 days after contract award, update upon staffing change IAW PWS 5.1 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

0001AB

Contractor Project Management Plan,

Due thirty (30) days after contract award and updated monthly thereafter IAW PWS 5.1.1 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

0001AC

Monthly Progress Report

Due thirty (30) days after contract award and update monthly thereafter IAW PWS 5.1.3 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

0002

CIS/ARK Analytics/Decision Support IAW PWS 5.2

Period of Performance (PoP): Twelve (12) months This CLIN includes all tasks, labor and travel required for the successful completion of the services detailed in PWS section 5.2 and all subparagraphs.

NSP

0002AA

CIS/ARK Analytics Solution Software Licenses

Due prior to solution being fielded to each VAMC.

Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

0003

Analytic/Reporting Services IAW PWS 5.3

Period of Performance (PoP): Twelve (12) months This CLIN includes all tasks, labor and travel required for the successful completion of the services detailed in PWS section 5.3 and all subparagraphs.

0003AA

Critical Clinical Data Reports

Due upon Solution being Operational and updated monthly thereafter IAW PWS 5.3.2 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

0003AB

Surgical Care Clinical Data Reports

Due upon Solution being Operational and updated monthly thereafter IAW PWS 5.3.2 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

0003AC

Customizable Reports

Due upon Solution being Operational and updated monthly thereafter IAW PWS 5.3.2 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

0003AD

Data Mapping Documents

Due upon Solution being Operational and updated monthly thereafter IAW PWS 5.3.2 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

0003AE

VA Data Mapping Guide

Due upon Solution being Operational and updated monthly thereafter IAW PWS 5.3.3 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

0003AF

Mirrored VISN 21 Picis Dataset onto Pre-Determine VA Servers and Documentation

Due within Thirty (30) days prior to the end of contract IAW PWS 5.3.4 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

0004

Training Requirements IAW PWS 5.4

This CLIN includes all tasks, labor and travel required for the successful completion of the services detailed in PWS section 5.4.

Performance to commence upon approval/acceptance of the CIS/ARK Analytic/Decision Support Solution.

0004AA

Training Plan

Draft Due within Thirty (30) days after contract (DAC) and Final due after Government approval IAW PWS 5.4.

Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

0004AB

Training Materials

Due five (5) days prior to first training class and updated as required IAW PWS 5.4.

Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

0004AC

Slide Deck and Recording of Training Session

Due five (5) days after each training session IAW PWS 5.4.

Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

0005

Help Desk Executive Summary Reports IAW PWS 5.5

This CLIN includes all tasks, labor and travel required for the successful completion of the services detailed in PWS section 5.5.

Performance to commence upon approval/acceptance of the CIS/ARK Analytic/Decision Support Solution.

Inspection: destination Acceptance: destination

0005AA

Help Desk Executive Summary Reports

Due 3rd business day of each month, throughout the POP.

Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

0006

Assessment and Authorization (A&A) IAW PWS 5.6

This CLIN includes all tasks, labor and travel required for the successful completion of the services detailed in PWS section 5.6.

Inspection: destination Acceptance: destination

0006AA

A&A Package

Due within 30 days after contract (DAC) Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

0007

Contractor Staff Roster IAW PWS 6.2.2

Due 3 days after contract award and updated throughout the PoP.

Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

Total Base Period Price

Option Period 1 This Option Period may be exercised In Accordance With (IAW) FAR 52.217-9 “Option to Extend the Term of the Contract” (MAR 2000)

CLIN

DESCRIPTION

QTY

Unit

UNIT PRICE

TOTAL PRICE

1001

Project Management in accordance with (IAW) Performance Work Statement (PWS) Paragraph 5.1.

1001AA

Staffing Plan

Due NLT 30 days after contract award, update upon staffing change IAW 5.1 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

1001AB

Contractor Project Management Plan

Due thirty (30) days after contract award and update monthly thereafter IAW 5.1.1 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

1001AC

Monthly Progress Report

Due thirty (30) days after contract award and update monthly thereafter IAW 5.1.3 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

1002

CIS/ARK Analytics/Decision Support IAW PWS 5.2

NSP

1002AA

CIS/ARK Analytics Solution Software Licenses

Due prior to solution being fielded to each VAMC.

Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

1003

Analytic/Reporting Services IAW PWS 5.3

1003AA

Critical Clinical Data Reports

Due upon Solution being Operational and updated monthly thereafter IAW 5.3.2 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

1003AB

Surgical Care Clinical Data Reports

Due upon Solution being Operational and updated monthly thereafter IAW 5.3.2 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

1003AC

Customizable Reports

Due upon Solution being Operational and updated monthly thereafter IAW 5.3.2 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

1003AD

Data Mapping Documents

Due upon Solution being Operational and updated monthly thereafter IAW 5.3.2 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

1003AE

VA Data Mapping Guide

Due upon Solution being Operational and updated monthly thereafter IAW 5.3.3 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

1003AF

Mirrored VISN 21 Picis Dataset onto Pre-Determine VA Servers and Documentation

Due within Thirty (30) days prior to the end of contract IAW 5.3.4 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

1004

Training Requirements IAW PWS 5.4

This CLIN includes all tasks, labor and travel required for the successful completion of the services detailed in PWS section 5.4.

Performance to commence upon approval/acceptance of the CIS/ARK Analytic/Decision Support Solution.

Inspection: destination Acceptance: destination

1004AA

Training Plan

Draft Due within Thirty (30) days after contract (DAC) and Final due after Government approval.

Electronic submission to: VA PM, COR, CO.

NSP

1004AB

Training Materials

Due five (5) days prior to first training class and updated as required.

Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

1004AC

Slide Deck and Recording of Training Session

Due five (5) days after each training session Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

1005

Help Desk Executive Summary Reports IAW PWS 5.5

This CLIN includes all tasks, labor and travel required for the successful completion of the services detailed in PWS section 5.5.

Performance to commence upon approval/acceptance of the CIS/ARK Analytic/Decision Support Solution.

Inspection: destination Acceptance: destination

1005AA

Help Desk Executive Summary Reports

Due 3rd business day of each month, throughout the POP.

Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

1006

Assessment and Authorization (A&A) IAW PWS 5.6

This CLIN includes all tasks, labor and travel required for the successful completion of the services detailed in PWS section 5.6.

Inspection: destination Acceptance: destination

1006AA

A&A Package

Due within 30 days after contract (DAC) Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

Total Option Period 1 Price

Option Period 2 This Option Period may be exercised In Accordance With (IAW) FAR 52.217-9 “Option to Extend the Term of the Contract” (MAR 2000)

CLIN

DESCRIPTION

QTY

Unit

UNIT PRICE

TOTAL PRICE

2001

Project Management in accordance with (IAW) Performance Work Statement (PWS) Paragraph 5.1.

2001AA

Staffing Plan

Due NLT 30 days after contract award, update upon staffing change IAW 5.1 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

2001AB

Contractor Project Management Plan

Due thirty (30) days after contract award and update monthly thereafter IAW 5.1.1 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

2001AC

Monthly Progress Report

Due thirty (30) days after contract award and update monthly thereafter IAW 5.1.3 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

2002

CIS/ARK Analytics/Decision Support IAW PWS 5.2

NSP

2002AA

CIS/ARK Analytics Solution Software Licenses

Due prior to solution being fielded to each VAMC.

Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

2003

Analytic/Reporting Services IAW PWS 5.3

2003AA

Critical Clinical Data Reports

Due upon Solution being Operational and updated monthly thereafter IAW 5.3.2 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

2003AB

Surgical Care Clinical Data Reports

Due upon Solution being Operational and updated monthly thereafter IAW 5.3.2 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

2003AC

Customizable Reports

Due upon Solution being Operational and updated monthly thereafter IAW 5.3.2 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

2003AD

Data Mapping Documents

Due upon Solution being Operational and updated monthly thereafter IAW 5.3.2 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

2003AE

VA Data Mapping Guide

Due upon Solution being Operational and updated monthly thereafter IAW 5.3.3 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

2003AF

Mirrored VISN 21 Picis Dataset onto Pre-Determine VA Servers and Documentation

Due within Thirty (30) days prior to the end of contract IAW 5.3.4 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

2004

Training Requirements IAW PWS 5.4

This CLIN includes all tasks, labor and travel required for the successful completion of the services detailed in PWS section 5.4.

Performance to commence upon approval/acceptance of the CIS/ARK Analytic/Decision Support Solution.

Inspection: destination Acceptance: destination

2004AA

Training Plan

Draft Due within Thirty (30) days after contract (DAC) and Final due after Government approval.

Electronic submission to: VA PM, COR, CO.

NSP

2004AB

Training Materials

Due five (5) days prior to first training class and updated as required.

Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

2004AC

Slide Deck and Recording of Training Session

Due five (5) days after each training session Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

2005

Help Desk Executive Summary Reports IAW PWS 5.5

This CLIN includes all tasks, labor and travel required for the successful completion of the services detailed in PWS section 5.5.

Performance to commence upon approval/acceptance of the CIS/ARK Analytic/Decision Support Solution.

Inspection: destination Acceptance: destination

2005AA

Help Desk Executive Summary Reports

Due 3rd business day of each month, throughout the POP.

Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

2006

Assessment and Authorization (A&A) IAW PWS 5.6

This CLIN includes all tasks, labor and travel required for the successful completion of the services detailed in PWS section 5.6.

Inspection: destination Acceptance: destination

2006AA

A&A Package

Due within 30 days after contract (DAC) Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

Total Option Period 2 Price

Option Period 3 This Option Period may be exercised In Accordance With (IAW) FAR 52.217-9 “Option to Extend the Term of the Contract” (MAR 2000)

CLIN

DESCRIPTION

QTY

Unit

UNIT PRICE

TOTAL PRICE

3001

Project Management in accordance with (IAW) Performance Work Statement (PWS) Paragraph 5.1.

3001AA

Staffing Plan

Due NLT 30 days after contract award, update upon staffing change IAW 5.1 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

3001AB

Contractor Project Management Plan

Due thirty (30) days after contract award and update monthly thereafter IAW 5.1.1 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

3001AC

Monthly Progress Report

Due thirty (30) days after contract award and update monthly thereafter IAW 5.1.3 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

3002

CIS/ARK Analytics/Decision Support IAW PWS 5.2

NSP

3002AA

CIS/ARK Analytics Solution Software Licenses

Due prior to solution being fielded to each VAMC.

Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

3003

Analytic/Reporting Services IAW PWS 5.3

3003AA

Critical Clinical Data Reports

Due upon Solution being Operational and updated monthly thereafter IAW 5.3.2 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

3003AB

Surgical Care Clinical Data Reports

Due upon Solution being Operational and updated monthly thereafter IAW 5.3.2 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

3003AC

Customizable Reports

Due upon Solution being Operational and updated monthly thereafter IAW 5.3.2 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

3003AD

Data Mapping Documents

Due upon Solution being Operational and updated monthly thereafter IAW 5.3.2 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

3003AE

VA Data Mapping Guide

Due upon Solution being Operational and updated monthly thereafter IAW 5.3.3 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

3003AF

Mirrored VISN 21 Picis Dataset onto Pre-Determine VA Servers and Documentation

Due within Thirty (30) days prior to the end of contract IAW 5.3.4 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

3004

Training Requirements IAW PWS 5.4

This CLIN includes all tasks, labor and travel required for the successful completion of the services detailed in PWS section 5.4.

Performance to commence upon approval/acceptance of the CIS/ARK Analytic/Decision Support Solution.

Inspection: destination Acceptance: destination

3004AA

Training Plan

Draft Due within Thirty (30) days after contract (DAC) and Final due after Government approval.

Electronic submission to: VA PM, COR, CO.

NSP

3004AB

Training Materials

Due five (5) days prior to first training class and updated as required.

Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

3004AC

Slide Deck and Recording of Training Session

Due five (5) days after each training session Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

3005

Help Desk Executive Summary Reports IAW PWS 5.5

This CLIN includes all tasks, labor and travel required for the successful completion of the services detailed in PWS section 5.5.

Performance to commence upon approval/acceptance of the CIS/ARK Analytic/Decision Support Solution.

Inspection: destination Acceptance: destination

3005AA

Help Desk Executive Summary Reports

Due 3rd business day of each month, throughout the POP.

Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

3006

Assessment and Authorization (A&A) IAW PWS 5.6

This CLIN includes all tasks, labor and travel required for the successful completion of the services detailed in PWS section 5.6.

Inspection: destination Acceptance: destination

3006AA

A&A Package

Due within 30 days after contract (DAC) Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

Total Option Period 3 Price

Option Period 4 This Option Period may be exercised In Accordance With (IAW) FAR 52.217-9 “Option to Extend the Term of the Contract” (MAR 2000)

CLIN

DESCRIPTION

QTY

Unit

UNIT PRICE

TOTAL PRICE

4001

Project Management in accordance with (IAW) Performance Work Statement (PWS) Paragraph 5.1.

4001AA

Staffing Plan

Due NLT 30 days after contract award, update upon staffing change IAW 5.1 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

4001AB

Contractor Project Management Plan

Due thirty (30) days after contract award and update monthly thereafter IAW 5.1.1 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

4001AC

Monthly Progress Report

Due thirty (30) days after contract award and update monthly thereafter IAW 5.1.3 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

4002

CIS/ARK Analytics/Decision Support IAW PWS 5.2

NSP

4002AA

CIS/ARK Analytics Solution Software Licenses

Due prior to solution being fielded to each VAMC.

Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

4003

Analytic/Reporting Services IAW PWS 5.3

4003AA

Critical Clinical Data Reports

Due upon Solution being Operational and updated monthly thereafter IAW 5.3.2 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

4003AB

Surgical Care Clinical Data Reports

Due upon Solution being Operational and updated monthly thereafter IAW 5.3.2 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

4003AC

Customizable Reports

Due upon Solution being Operational and updated monthly thereafter IAW 5.3.2 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

4003AD

Data Mapping Documents

Due upon Solution being Operational and updated monthly thereafter IAW 5.3.2 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

4003AE

VA Data Mapping Guide

Due upon Solution being Operational and updated monthly thereafter IAW 5.3.3 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

4003AF

Mirrored VISN 21 Picis Dataset onto Pre-Determine VA Servers and Documentation

Due within Thirty (30) days prior to the end of contract IAW 5.3.4 Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

4004

Training Requirements IAW PWS 5.4

This CLIN includes all tasks, labor and travel required for the successful completion of the services detailed in PWS section 5.4.

Performance to commence upon approval/acceptance of the CIS/ARK Analytic/Decision Support Solution.

Inspection: destination Acceptance: destination

4004AA

Training Plan

Draft Due within Thirty (30) days after contract (DAC) and Final due after Government approval.

Electronic submission to: VA PM, COR, CO.

NSP

4004AB

Training Materials

Due five (5) days prior to first training class and updated as required.

Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

4004AC

Slide Deck and Recording of Training Session

Due five (5) days after each training session Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

4005

Help Desk Executive Summary Reports IAW PWS 5.5

This CLIN includes all tasks, labor and travel required for the successful completion of the services detailed in PWS section 5.5.

Performance to commence upon approval/acceptance of the CIS/ARK Analytic/Decision Support Solution.

Inspection: destination Acceptance: destination

4005AA

Help Desk Executive Summary Reports

Due 3rd business day of each month, throughout the POP.

Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

4006

Assessment and Authorization (A&A) IAW PWS 5.6

This CLIN includes all tasks, labor and travel required for the successful completion of the services detailed in PWS section 5.6.

Inspection: destination Acceptance: destination

4006AA

A&A Package

Due within 30 days after contract (DAC) Electronic submission to: VA PM, COR, CO.

Inspection: destination Acceptance: destination

NSP

Total Option Period 4 Price

Optional Task – CIS/ARK Analytics System Report Customization Development Support This Option Task may be exercised In Accordance With (IAW) FAR 52.217-7 “Option for Increased Quantity – Separately Priced Line Item” (MAR 2000) Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer.

CLIN

DESCRIPTION

NTEQTY

Unit

UNIT PRICE

TOTAL PRICE

5001

OPTIONAL TASK 1: CIS/ARK Analytics Report Customization Development Support IAW PWS 5.7

If Optional Task 1 is exercised by VA, the Contractor shall perform the tasks identified in Section 5.7 of the PWS.

This Optional Task may be exercised in the base period or any option period, in increments of 50 hours, not to exceed a total of 500 hours per contract year, for a not to exceed total of 2,500 hours over the entire PoP.

Not-To-Exceed 500 hours per contract year.

Not-To-Exceed 2,500 hours over the entire PoP.

Inspection: destination Acceptance: destination

500

Hrs

NTE $

Total Optional Task 1 Price (Unexercised)

Total Contract Value (Base + Option Periods + Optional Task)

B.5 PERFORMANCE WORK STATEMENT

1.0 BACKGROUND

The mission of the Department of Veterans Affairs (VA), Veterans Health Administration (VHA) is to provide health care benefits and services to Veterans of the United States. In meeting this goal, VHA strives to provide high quality, effective, and efficient Medical Informatics systems to those responsible for providing care to Veterans in an effective, timely and compassionate manner. VHA depends on these systems to meet mission goals.

In Veterans Integrated Service Network (VISN) 21, Acute and Critical Care data of Intensive Care Unit (ICU), Intermediate Intensive Care Unit (IICU), Operating Room (OR), and Post Anesthesia Care Unit (PACU) data sets is stored in VISN 21 Picis Clinical Information System/Anesthesia Record Keeping System (CIS/ARK) database. The CIS/ARK system itself is maintained by a combination of Original Equipment Manufacturer (OEM) vendor staff under a software/support maintenance contract and VISN 21 staff. Picis is a vendor that provides the perioperative and critical care software and performs routine maintenance support for VISN 21.

The VISN 21 facilities covered by the Picis CIS/ARK Systems are as follows:

1.	San Francisco VA Medical Center, 4150 Clement Street, San Francisco, CA
2.	VA Central California Health Care System, 2615 E. Clinton Avenue, Fresno, CA
3.	VA Northern California Health Care System (including Sacramento and Martinez), 10535 Hospital Way, Sacramento, CA
4.	VA Palo Alto Health Care System, 3801 Miranda Avenue, Palo Alto, CA
5.	VA Sierra Nevada Health Care System, 1000 Locust Street, Reno, NV
6.	VA Southern Nevada Healthcare System, 6900 North Pecos Road, North Las Vegas, NV

An overview of current CIS/ARK data sources are provided in Attachment 1 (Picis 8.6 Hardware Diagram).

The CIS/ARK system promotes facility level care and population level surveillance and research within VA. The overarching goal is the ongoing quality improvement of processes, care, and outcomes (both morbidity and mortality) for the surgical and critically ill patients; and the optimization of efficiency within care sites including but not exclusive of the OR, PACU, and ICU. The utilization of standardized, objective data from the CIS/ARK databases and electronic medical records i.e., Veterans Health Information Systems and Technology Architecture (VistA) electronic health record (EHR) have long been a goal of the VHA in establishing itself as a leader in the field of perioperative and critical care.

2.0 APPLICABLE DOCUMENTS

In the performance of the tasks associated with this Performance Work Statement, the Contractor shall comply with the following:

1. 44 U.S.C. § 3541-3549, “Federal Information Security Management Act (FISMA) of 2002”

2. “Federal Information Security Modernization Act of 2014”

3. Federal Information Processing Standards (FIPS) Publication 140-2, “Security Requirements for Cryptographic Modules”

4. FIPS Pub 199. “Standards for Security Categorization of Federal Information and Information Systems,” February 2004

5. FIPS Pub 200, “Minimum Security Requirements for Federal Information and Information Systems,” March 2006

6. FIPS Pub 201-2, “Personal Identity Verification of Federal Employees and Contractors,” August 2013

7. 10 U.S.C. § 2224, "Defense Information Assurance Program"

8. 5 U.S.C. § 552a, as amended, “The Privacy Act of 1974”

9. Public Law 109-461, Veterans Benefits, Health Care, and Information Technology Act of 2006, Title IX, Information Security Matters

10. 42 U.S.C. § 2000d “Title VI of the Civil Rights Act of 1964”

11. VA Directive 0710, “Personnel Security and Suitability Program,” June 4, 2010, https://www.va.gov/vapubs/index.cfm

12. VA Handbook 0710, “Personnel Security and Suitability Program,” May 2, 2016, https://www.va.gov/vapubs/index.cfm

13. VA Directive and Handbook 6102, “Internet/Intranet Services,” August 5, 2019

14. 36 C.F.R. Part 1194 “Information and Communication Technology Standards and Guidelines,” January 18, 2017

15. Office of Management and Budget (OMB) Circular A-130, “Managing Federal Information as a Strategic Resource,” July 28, 2016

16. 32 C.F.R. Part 199, “Civilian Health and Medical Program of the Uniformed Services (CHAMPUS)”

17. NIST SP 800-66 Rev. 1, “An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule,” October 2008

18. Sections 504 and 508 of the Rehabilitation Act (29 U.S.C. § 794d), as amended, January 18, 2017

19. Homeland Security Presidential Directive (12) (HSPD-12), August 27, 2004

20. VA Directive 6500, “VA Cybersecurity Program,” February 24, 2021

21. VA Handbook 6500, “Risk Management Framework for VA Information Systems VA Information Security Program,” February 24, 2021

22. VA Handbook 6500.2, “Management of Breaches Involving Sensitive Personal Information (SPI),” March 12, 2019

23. VA Handbook 6500.5, “Incorporating Security and Privacy into the System Development Lifecycle,” March 22, 2010

24. VA Handbook 6500.6, “Contract Security,” March 12, 2010

25. VA Handbook 6500.8, “Information System Contingency Planning,” April 6, 2011

26. VA Handbook 6500.10, “Mobile Device Security Policy,” February 15, 2018

27. VA Handbook 6500.11, “VA Firewall Configuration,” August 22, 2017

28. OIT Process Asset Library (PAL), https://www.va.gov/process/ . Reference Process Maps at https://www.va.gov/process/maps.asp and Artifact templates at https://www.va.gov/process/artifacts.asp

29. One-VA Technical Reference Model (TRM) (reference at https://www.va.gov/trm/TRMHomePage.aspx)

30. VA Directive 6508, “Implementation of Privacy Threshold Analysis and Privacy Impact Assessment,” October 15, 2014

31. VA Handbook 6508.1, “Procedures for Privacy Threshold Analysis and Privacy Impact Assessment,” July 30, 2015

32. VA Handbook 6510, “VA Identity and Access Management,” January 15, 2016

33. VA Directive and Handbook 6513, “Secure External Connections,” October 12, 2017

34. VA Directive 6300, “Records and Information Management,” September 21, 2018

35. VA Handbook, 6300.1, “Records Management Procedures,“ March 24, 2010

36. NIST SP 800-37 Rev 2, “Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy,” December 2018

37. NIST SP 800-53 Rev. 5, “Security and Privacy Controls for Federal Information Systems and Organizations,” September 23, 2020 (includes updates as…

This is the start of the file's text. The full file is on GovTribe.

File details come from the government source that posted it. Updated Jul 28, 2022.