36C10B25R0003 0001.pdf

5. PROJECT NUMBER (if applicable)

CODE 7. ADMINISTERED BY

2. AMENDMENT/MODIFICATION NUMBER

CODE

6. ISSUED BY

8. NAME AND ADDRESS OF CONTRACTOR

4. REQUISITION/PURCHASE REQ. NUMBER 3. EFFECTIVE DATE

9A. AMENDMENT OF SOLICITATION NUMBER

9B. DATED

PAGE OF PAGES

10A. MODIFICATION OF CONTRACT/ORDER NUMBER

10B. DATED

BPA NO. 1. CONTRACT ID CODE

FACILITY CODE CODE

Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended, by one of the following methods:

The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers

E. IMPORTANT:

is extended,

(a) By completing Items 8 and 15, and returning __________ copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted; or (c) By separate letter or electronic communication which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR

ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY is not extended.

12. ACCOUNTING AND APPROPRIATION DATA

(REV. 11/2016)

is required to sign this document and return ___________ copies to the issuing office. is not, A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE CONTRACT ORDER NO. IN ITEM 10A.

15C. DATE SIGNED

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES

SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(b).

RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by letter or electronic communication, provided each letter or electronic communication makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER

Contractor

16C. DATE SIGNED

14. DESCRIPTION OF AMENDMENT/MODIFICATION

16B. UNITED STATES OF AMERICA

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER 16A. NAME AND TITLE OF CONTRACTING OFFICER

15B. CONTRACTOR/OFFEROR

STANDARD FORM 30 PREVIOUS EDITION NOT USABLE

Prescribed by GSA - FAR (48 CFR) 53.243

(Type or print) (Type or print)

(Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

(Number, street, county, State and ZIP Code)

(If other than Item 6)

(Specify type of modification and authority)

(such as changes in paying office, appropriation date, etc.)

(If required)

(SEE ITEM 11)

(SEE ITEM 13)

(X)

CHECK

ONE

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS,

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

(Signature of person authorized to sign) (Signature of Contracting Officer)

1 134

0001 11-21-2024

VA-24-00050415

Department of Veterans Affairs

Technology Acquisition Center

23 Christopher Way

Eatontown NJ 07724

Department of Veterans Affairs

Technology Acquisition Center

23 Christopher Way

Eatontown NJ 07724

To all Offerors/Bidders

36C10B25R0003

X

X X

X 1

***Please see Continuation Page

Jason King

Contracting Officer

36C10B25R0003 0001

Continuation Page:

The purpose of Amendment 0001 to Request for Proposal (RFP) 36C10B25P0003 entitled

“Independent Enterprise Testing and Support Services (IETSS)” is as follows:

1. To revise Sections B.4 Price Schedule, B.5 Performance Work Statement, Section C –

Contract Causes, and Section E – Solicitation Provisions. Updates in track changes below.

2. To incorporate revised Attachment 0001 – IETSS Price Evaluation Spreadsheet_v1 and revised Attachment 0004 - Memorandum of Independence Confirmation 11-21-24 at

Section D – Contract Documents, Exhibits, or Attachments.

3. All other terms and conditions remain in full force and effect.

B.4 PRICE SCHEDULE

Inspection/Acceptance//F.O.B: Destination.

Any resulting contract will be awarded on a hybrid firm-fixed-price (FFP) and Time and

Material (T&M) basis as defined by Federal Acquisition Regulation (FAR) Subpart 16.202.

Accordingly, the Contractor shall ensure that any and all costs associated with the Contractor’s proposed application(s), software products, software solution, and/or system, shall be included in the Contractor’s proposed firm-fixed price, and shall serve as the Contractor’s firm-fixed price for the life of any resulting contract. No additional costs or fees relative to the Contractor’s proposed application(s), software products, software solution, and/or system including, but not limited to, licensing costs and any associated licensing maintenance required for the development, delivery, integration, operation, and/or maintenance of the Contractor’s proposed solution will be allowed, accepted, and/or paid by the Government. Software shall be delivered within five business day of award.

NOTE: Vendors are instructed to see solicitation Section E for proposal submission instructions inclusive of the price proposal. Vendors are cautioned that alterations to the line items as specified below may render quotes unacceptable. All questions shall be directed to the Contract

Specialist, Dana Seeler, dana.seeler@va.gov and the Contracting Officer, Jason King, jason.king6@va.gov prior to the closing date and time specified in the Request for Proposal

(RFP). In accordance with FAR 25.401(a)(1), the subject procurement is exempt from the requirements of the Trade Agreements Act (TAA). Accordingly, Non-TAA compliant items may be quoted for this procurement, and ultimately delivered under any resulting order.

Inspection, Acceptance, and F.O.B.: Destination

Deliverables throughout the performance of this contract shall be provided via electronic submission to: VA Program Manager (PM), Contracting Officer’s Representative (COR), and

Contracting Officer (CO)

Product Service Code for all line items: DA01

Base Period

The base period of performance for this effort shall be 12 months from date of award

CLIN DESCRIPTION QTY UNIT

UNIT

PRICE

TOTAL

PRICE

0001 Project Management in accordance with

(IAW) Performance Work Statement

(PWS) Paragraph 5.1, inclusive of subparagraphs.

This FFP Contract Line Item Number

(CLIN) includes all labor and deliverables

(X001AA through X001AD) required for the successful completion of the services detailed in PWS paragraph 5.1 and all of its subparagraphs.

12 MO $ $

Period of Performance (PoP): 12 months from date of award.

0002 Test and Evaluation Support; Testing and Technology Support; Test Systems

Engineering and Implementation

Support; Test Process and Quality

Management Support T&M IAW PWS

Paragraphs 5.2 through 5.5 inclusive of all subparagraphs.

This T&M CLIN includes all labor and deliverables (X002AA through X002BT) required for the successful completion of the tasks associated with PWS Paragraphs

5.2 through 5.5, including all

This T&M CLIN is in IAW Federal

Acquisition Regulation (FAR) 52.232-7 for invoicing or billing purposes.

The NTE amount shall be calculated using the proposed rates for the labor categories and the estimated number of labor hours listed in Attachment 001.

The T&M rates for this CLIN will be incorporated at time of award as ceiling rates based on the offeror’s proposal.

PoP shall be 12 months from date of award.

1 LO Not-To-Exceed

(NTE) $

NTE $

0003 T&M TRAVEL IAW PWS Paragraph

4.3.

Travel shall be in accordance with the

Federal Travel Regulations (FTR). Travel requires advanced concurrence and shall be approved by the VA PM/COR in writing. Task orderContract travel within the local commuting area will not be reimbursed. The Contractor’s fixed handling rate as set forth herein may be applied to the billable travel cost and shall not exceed that set forth in the basic contract. Profit shall not be applied.

Government Not to Exceed Travel Ceiling:

$156,200.00 + Fixed Handling Rate %

= Travel NTE Ceiling $ ________

1 LO NTE $ NTE $

(Inclusive of Government NTE travel ceiling + Fixed Handling Rate)

PoP shall be 12 months from date of award.

BASE PERIOD TOTAL $

OPTION PERIOD 1

This option period may be exercised in the sole discretion of the Government IAW FAR 52.217-9 Option to

Extend the Term of the Contract (MAR 2000). Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer. If exercised, this option shall commence immediately after expiration of the base period.

CLIN DESCRIPTION QTY UNIT UNIT PRICE TOTAL PRICE

1001 Project Management IAW PWS

Paragraph 5.1, inclusive of

This FFP CLIN includes all labor and deliverables (X001AA through X001AD) required for the successful completion of the services detailed in PWS paragraph 5.1 and all of its subparagraphs.

PoP: 12 months from expiration of base period, if exercised.PoP: 2 months from expiration of the base period, if exercised.

12 MO $ $

1002 Test and Evaluation Support; Testing and

Technology Support; Test Systems

Engineering and Implementation

Support; Test Process and Quality

Management Support Time and Material

(T&M) IAW PWS Paragraphs 5.2 through 5.5 inclusive of all required for the successful completion of the tasks associated with PWS Paragraphs 5.2 through 5.5, including all subparagraphs.

Acquisition Regulation (FAR) 52.232-7 for invoicing or billing purposes.

The NTE amount shall be calculated using the proposed rates for the labor categories

1 LO Not-To-Exceed

(NTE) $

NTE $

incorporated at time of award as ceiling rates based on the offeror’s proposal.

period, if exercisedPoP shall be 12 months from date of award.

1003 T&M TRAVEL IAW PWS Paragraph

4.3.

Travel shall be in accordance with the

Federal Travel Regulations (FTR). Travel requires advanced concurrence and shall be approved by the VA PM/COR in writing.

Task orderContract travel within the local commuting area will not be reimbursed. The

Contractor’s fixed handling rate as set forth herein may be applied to the billable travel cost and shall not exceed that set forth in the basic contract. Profit shall not be applied.

$152,956.00 + Fixed Handling Rate %

= Travel NTE Ceiling $ ________

(Inclusive of Government NTE travel ceiling

+ Fixed Handling Rate) period, if exercised.

OPTION PERIOD 1 TOTAL $

OPTION PERIOD 2

This option period may be exercised in the sole discretion of the Government IAW FAR 52.217-9 Option to modification is issued by the Contracting Officer. If exercised, this option shall commence immediately after expiration of option period 1.

CLIN DESCRIPTION QTY UNIT UNIT PRICE TOTAL PRICE

2001 Project Management IAW PWS

This FFP CLIN includes all labor and deliverables (X001AA through X001AD) required for the successful completion of the

12 MO Not-To-Exceed

PoP: 12 months from expiration of option period 1, if exercised.

2002 Test and Evaluation Support; Testing and

Technology Support; Test Systems

Engineering and Implementation

Support; Test Process and Quality

Management Support Time and Material

(T&M) IAW PWS Paragraphs 5.2 required for the successful completion of the invoicing or billing purposes.

The NTE amount shall be calculated using the proposed rates for the labor categories period 1, if exercised.PoP shall be 12 months from date of award.

1 LO NTE $ NTE $

2003 T&M TRAVEL IAW PWS Paragraph requires advanced concurrence and shall be approved by the VA PM/COR in writing.

Task orderContract travel within the local commuting area will not be reimbursed.

The Contractor’s fixed handling rate as set forth herein may be applied to the billable travel cost and shall not exceed that set forth in the basic contract. Profit shall not be applied.

$145,025.44 + Fixed Handling Rate %

= Travel NTE Ceiling $ ________ period 1, if exercised.

OPTION PERIOD 2 TOTAL $

OPTION PERIOD 3

This option period may be exercised in the sole discretion of the Government IAW FAR 52.217-9 Option to modification is issued by the Contracting Officer. If exercised, this option shall commence immediately after expiration of option period 2.

CLIN DESCRIPTION QTY UNIT UNIT PRICE TOTAL PRICE

3001 Project Management in accordance with

(IAW) Performance Work Statement

(PWS) Paragraph 5.1, inclusive of

This Firm-Fixed-Price (FFP) Contract Line

Item Number (CLIN) includes all labor and deliverables (X001AA through X001AD) required for the successful completion of the

Period of Performance (PoP): 12 months from date of awardexpiration of option period 2, if exercised.

12 MO $ $

3002 Test and Evaluation Support; Testing and

Technology Support; Test Systems

Engineering and Implementation

Support; Test Process and Quality

Management Support Time and Material

(T&M) IAW PWS Paragraphs 5.2 required for the successful completion of the tasks associated with PWS Paragraphs 5.2 through 5.5, including all subparagraphs.

1 LO Not-To-Exceed invoicing or billing purposes.

The NTE amount shall be calculated using the proposed rates for the labor categories period 2, if exercised.PoP shall be 12 months from date of award.

3003 T&M TRAVEL IAW PWS Paragraph requires advanced concurrence and shall be approved by the VA PM/COR in writing.

Task orderContract travel within the local commuting area will not be reimbursed. The

Contractor’s fixed handling rate as set forth herein may be applied to the billable travel

$147,969.46 + Fixed Handling Rate %

= Travel NTE Ceiling $ ________ period 2, if exercised.

OPTION PERIOD 3 TOTAL $

OPTION PERIOD 4

This option period may be exercised in the sole discretion of the Government IAW FAR 52.217-9 Option to modification is issued by the Contracting Officer. If exercised, this option shall commence immediately after expiration of option period 3.

CLIN DESCRIPTION QTY UNIT UNIT PRICE TOTAL PRICE

4001 Project Management IAW PWS

This Firm-Fixed-Price (FFP) Contract Line

Item Number (CLIN) includes all labor and deliverables (X001AA through X001AD) required for the successful completion of the period 3, if exercised.Period of Performance

(PoP): 12 months from date of award.

12 MO $ $

4002 Test and Evaluation Support; Testing and

Technology Support; Test Systems

Engineering and Implementation

Support; Test Process and Quality

Management Support Time and Material

(T&M) IAW PWS Paragraphs 5.2 required for the successful completion of the invoicing or billing purposes.

The NTE amount shall be calculated using the proposed rates for the labor categories period 3, if exercised.PoP shall be 12 months from date of award.

1 LO Not-To-Exceed

(NTE) $

NTE $

4003 T&M TRAVEL IAW PWS Paragraph

Travel shall be in accordance with the

Federal Travel Regulations (FTR). Travel requires advanced concurrence and shall be approved by the VA PM/COR in writing.

Task orderContract travel within the local commuting area will not be reimbursed. The

Contractor’s fixed handling rate as set forth herein may be applied to the billable travel

$150,973.24 + Fixed Handling Rate %

= Travel NTE Ceiling $ ________ period 3, if exercised.

OPTION PERIOD 4 TOTAL $

OPTIONAL TASK – TRANSITION SUPPORT

This is an optional task, FAR 52.217-7, Option for Increased Quantity – Separately priced Line Item (MAR

1989). Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer.

This optional task may be exercised anytime, in whole or in part, within the Base Period or Option Periods 1 through 4.

CLIN DESCRIPTION QTY UNIT UNIT PRICE TOTAL PRICE

5001 Optional Task – Transition Support

(T&M) IAW PWS Paragraph 5.6.

deliverables required for the successful completion of the tasks associated with

PWS Paragraph 5.6.

This T&M CLIN is in IAW FAR 52.232-7 for invoicing or billing purposes.

The NTE amount shall be calculated using the proposed rates for the labor categories incorporated at time of award as ceiling rates based on the offeror’s proposal.

1 LO Not-To-Exceed

NOTE: Activities related to this task will be performed if a Contractor other than the incumbent Contractor is awarded the follow-on IETSS contract/order

Task 5.6 is designated as an Optional Task and will be exercised at the discretion of the

Government in accordance with FAR

52.217-7.

If exercised, the period of performance will be up to a total of 180 days. The period of performance for the optional task will not exceed 180 days past the expiration date of the period in which it is exercised.

The Contractor shall prepare a comprehensive Transition Plan within 21 calendar days of exercise of the optional task. The Contractor shall attend regularly scheduled meetings with ETS for the remaining 150-days after receipt of the

Transition Plan.

Work shall not commence until a formal task ordercontract modification has been issued by the Contracting Officer.

5001AA Contract Transition Team Roster IAW PWS

Paragraph 5.6

Due/Frequency: 21 days after optional task if exercised

1 LO NSP NSP

5001AB Transition-Out Plan IAW PWS Paragraph

5.6

Due/Frequency: 30 days after optional task if exercised

1 LO NSP NSP

OPTIONAL TASK TOTAL $

TOTAL CONTRACT (INCLUSIVE OF ALL OPTIONS) NTE $

RECURRING DELIVERABLES

(Base and Option Periods)

CLIN DESCRIPTION QTY UNIT UNIT PRICE TOTAL PRICE

X001AA Contractor Project Management Plan IAW

PWS Paragraph 5.1.1

1 LO NSP NSP

Due 30 days after award and updated monthly thereafter.

X001AB PM - Monthly Progress Reports IAW

PWS Paragraph 5.1.3

Due the seventh day of each month throughout the period of performance.

1 LO NSP NSP

X001AC PM - Memorandum of Independence

Confirmation IAW PWS paragraph 5.1.4

Due annually or within three business days of changes.

1 LO NSP NSP

X001AD PM - Contractor Staff Roster IAW PWS paragraph 6.2.2

Due within three business days after award, and updated roster is due within three business days of changes.

1 LO NSP NSP

X002AA TE - Work Product Review Analysis

Report IAW PWS paragraph 5.2.1

Due: Due the seventh day of each month throughout the PoP.

1 LO NSP NSP

X002AB TE - Risk Analysis Summary IAW PWS paragraph 5.2.3

Due: Ad hoc throughout the PoP.

X002AC TE - Test Plan Summary IAW PWS paragraph 5.2.4

X002AD TE - Test Analysis Summary IAW PWS paragraph 5.2.6

X002AE TE - Patient Safety Issue Testing Report

IAW PWS paragraph 5.2.6

X002AF TTS - Configuration Management Plan of the Virtual Services IAW PWS paragraph

5.3

Due/Frequency: Monthly

X002AG TTS - Change Management Plan of the

Virtual Services IAW PWS paragraph 5.3

X002AH TTS - Change Management Plan of the

Automation Testing IAW PWS paragraph

X002AJ TTS - Virtual Service Creation and

Deployment Process IAW PWS paragraph

X002AK TTS - Test Data Management Plan IAW

PWS paragraph 5.3

X002AL TTS - Test Data Creation Process and

Strategy IAW PWS paragraph 5.3

X002AM TTS - Architecture Diagrams for Major

Programs IAW PWS paragraph 5.3

Due/Frequency: As required

X002AN TTS - Test Environment Logical

Requirements Document IAW PWS paragraph 5.3

Due/Frequency: As required

X002AP TTS - Interoperability Management

Process IAW PWS paragraph 5.3

X002AQ TTS - Data Migration Validation Strategy

IAW PWS paragraph 5.3

X002AR TTS - Data Migration Validation Test

Cases and Scripts IAW PWS paragraph

X002AS TTS - Interoperability Management

Process IAW PWS paragraph 5.3

X002AT TTS - Data Migration Validation Services

IAW PWS paragraph 5.3

X002AU TSEI – Revised TC System Architecture

Documentation 5.4.1

Due/Frequency: Due annually, by the seventh day of the month following contract or option period award, or when architecture changes require updates.

1 LO NSP NSP

X002AV TSEI - TC O&M Plan IAW PWS paragraph 5.4.2 contract or option period award

1 LO NSP NSP

X002AW TSEI - Revised Patch Management Plan

IAW PWS paragraph 5.4.2 contract or option period award.

1 LO NSP NSP

X002AX TSEI - Revised Configuration and Change

Management Documents IAW PWS paragraph 5.4.2.

contract or option period award

1 LO NSP NSP

X002AZ TSEI - TC O&M Monthly Status Report contract or option period award

1 LO NSP NSP

X002BA TSEI - Revised Disaster Recovery Plan contract or option period award

1 LO NSP NSP

X002BB TSEI - Revised Database Backup &

Recovery Plan IAW PWS paragraph 5.4.2

X002BC

TSEI - After Action Reports IAW PWS paragraph 5.4.2

Due/Frequency: Due ad hoc throughout the PoP.

X002BD TSEI - Revised Configuration and Change

Management Documents IAW PWS paragraph 5.4.3 contract or option period award, and as needed.

1 LO NSP NSP

X002BE TSEI - TC Database Administration Plan

IAW PWS paragraph 5.4.3 contract or option period award, and as needed.

1 LO NSP NSP

X002BF TSEI - Database Performance Report IAW

PWS paragraph 5.4.3

Due/Frequency: Due ad hoc throughout the period of performance (PoP).

1 LO NSP NSP

X002BG TSEI - Create and maintain Standard

Operating Procedures IAW PWS 5.4.3 contract or option period award, and as needed.

1 LO NSP NSP

X002BH TSEI - Tools Assessment Report IAW

PWS paragraph 5.4.5 contract or option period award, and as needed.

1 LO NSP NSP

X002BJ TPQM - Continuous Quality Improvement

Process Plan IAW PWS paragraph 5.5.1

Due/Frequency: Due three business days after the end of each quarter

1 LO NSP NSP

X002BK TPQM - Lessons Learned Repository

IAW PWS paragraph 5.5.2

Due/Frequency: Ongoing requirement to maintain

1 LO NSP NSP

X002BL TPQM - Lessons Learned Report IAW

PWS paragraph 5.5.2

Due/Frequency: Due 30 business days after each Lessons Learned Meeting

X002BM TPQM - Quality Review Report IAW

PWS paragraph 5.5.2

Due/Frequency: Quarterly

X002BN TPQM - Artifact Review Findings Report

IAW PWS paragraph 5.5.3

Due/Frequency: Due 15 days after the end of each month

1 LO NSP NSP

X002BP TPQM - Artifact Corrective Plan of

Action IAW PWS paragraph 5.5.3

Due/Frequency: Due 15 days after the end of each month

1 LO NSP NSP

X002BQ TPQM - Updated Measurement and

Metric Plan IAW PWS paragraph 5.5.6

Due/Frequency: Due the seventh day of the month following contract or option period award, but actual metrics are ongoing updates as required on SharePoint site.

1 LO NSP NSP

X002BR TPQM - CQIP Orientation and Overview

Briefing IAW PWS paragraph 5.5.7

Due/Frequency: Due three business days after the beginning of the month

1 LO NSP NSP

X002BS TPQM - Root Cause Analysis Incident

Report IAW PWS paragraph 5.5.8

Due/Frequency: Due 15 calendar days after completion of the Root Cause

Analysis

1 LO NSP NSP

X002BT Technical Data - IAW Contract Section

C.16, Data Rights

Due/Frequency: As Required

B.5 PERFORMANCE WORK STATEMENT

PERFORMANCE WORK STATEMENT (PWS)

DEPARTMENT OF VETERANS AFFAIRS (VA)

Office of Information and Technology (OIT)

Electronic Health Record Modernization Integration Office (EHRM-IO)

Independent Enterprise Testing and Support Services (IETSS)

Date: October 18,November 20, 2024

TAC-24-00050415

PWS Version Number: 3.12

1.0 BACKGROUND

The mission of Department of Veterans Affairs (VA), Office of Information & Technology

(OIT) is to collaborate with business partners to create the best experience for Veterans. In meeting these goals, OIT strives to provide high quality, effective, and efficient Information

Technology (IT) services to those who provide care to Veterans at point-of-care as well as throughout all points of each Veteran’s health care, in an effective, timely and compassionate manner. VA depends on Information Management/Information Technology (IM/IT) systems to meet mission goals.

OIT is the steward of VA’s IT resources and is responsible for ensuring the efficient and effective operation of VA’s IT Management System to meet mission requirements defined by the

VA Secretary and other key VA officials. OIT partners with other VA business units to deliver available, adaptable, secure, and cost-effective technology services to VA. Technology services are introduced into VA via two primary approaches: in-house development or acquisition of

Commercial Off The Shelf (COTS) and Government Off The Shelf (GOTS). These approaches follow industry, Government, and VA standards for technology, including but not limited to the phases of Software Development LifeCycle (SDLC) for development and Software Acquisition, Configuration, and Implementation (SACI) for COTS and GOTS.

The EHRM-IO Program is the program executive office charged with the preparation, deployment, and transition to a new electronic health record (EHR) within VA. The program will ensure that the process of deploying the new EHR is done in a manner that meets VA needs and supports seamless healthcare to Veterans and qualified beneficiaries. The Integrated Testing program within the EHRM-IO manages and oversees the execution of the test and evaluation activities across the EHRM program and its products. The testing community that makes up the

EHRM-IO Integrated Testing Program is comprised of three main organizations: Integrated

Testing Enterprise Test (IntT-ET), Office of Functional Champion, Functional Test & Evaluation

(OFC Test/OFCt), and the Oracle Health Testing & Quality Assurance (T&QA). The resources delivering these services are a mix of EHRM-IO IntT VA resources and IntT-ET contractor services through this IETSS contract; OFC Test VA; and OIT Test Management and Operations

(TMO) and Test Center (TC) VA resources.

The IETSS Contract will provide services in support of EHRM-IO IntT and OFC Test and OIT

TMO and Test Center (TC) VA resources. IETSS resources will work closely and collaboratively with the Oracle Health T&QA team to ensure an integrated approach and schedule for the EHRM-IO Test and Evaluation lifecycle, the IETSS Contractor shall coordinate services with OIT and EHRM-IO. The IETSS Contract will provide services in support of

EHRM-IO as well as VA OIT current legacy and future major programs requiring test service support.

2.0 APPLICABLE DOCUMENTS

In the performance of the tasks associated with this Performance Work Statement, the Contractor shall comply with the most current version of the following:

1. “Federal Information Security Modernization Act of 2014”

2. Federal Information Processing Standards (FIPS) Publication 140-3, “Security

Requirements for Cryptographic Modules”, March 22, 2019

3. FIPS Pub 199. “Standards for Security Categorization of Federal Information and

Information Systems,” February 2004

4. FIPS Pub 200, “Minimum Security Requirements for Federal Information and

Information Systems,” March 2006

5. FIPS Pub 201-3, “Personal Identity Verification of Federal Employees and

Contractors,” January 2022

6. 10 U.S.C. § 2224, "Defense Information Assurance Program"

7. 5 U.S.C. § 552a, as amended, “The Privacy Act of 1974”

8. Public Law 109-461 (P.L. 109-461), Veterans Benefits, Health Care, and

Information Technology Act of 2006, Title IX, Information Security Matters

9. 42 U.S.C. § 2000d “Title VI of the Civil Rights Act of 1964”

10. VA Directive 0710, “Personnel Security and Suitability Program,” June 4, 2010, https://www.va.gov/vapubs/index.cfm

11. VA Handbook 0710, “Personnel Security and Suitability Program,” May 2, 2016, https://www.va.gov/vapubs/index.cfm

12. VA Directive and Handbook 6102, “Internet/Intranet Services,” August 5, 2019

13. 36 C.F.R. Part 1194 “Information and Communication Technology Standards and

Guidelines,” January 18, 2017

14. Office of Management and Budget (OMB) Circular A-130, “Managing Federal

Information as a Strategic Resource,” July 28, 2016

15. 32 C.F.R. Part 199, “Civilian Health and Medical Program of the Uniformed

Services (CHAMPUS)”

16. NIST SP 800-66 Rev. 1, “An Introductory Resource Guide for Implementing the

Health Insurance Portability and Accountability Act (HIPAA) Security Rule,”

October 2008

17. Sections 504 and 508 of the Rehabilitation Act (29 U.S.C. § 794d), as amended, January 18, 2017

18. Homeland Security Presidential Directive (12) (HSPD-12), August 27, 2004

19. VA Directive 6500, “VA Cybersecurity Program,” February 24, 2021

20. VA Handbook 6500, “Risk Management Framework for VA Information Systems

VA Information Security Program,” February 24, 2021

21. VA Handbook 6500.2, “Management of Breaches Involving Sensitive Personal

Information (SPI),” June 30, 2023

22. VA Handbook 6500.5, “Incorporating Security and Privacy into the System

Development Lifecycle,” March 22, 2010

23. VA Handbook 6500.6, “Contract Security,” March 12, 2010 (Appendix C updated

April 22, 2024

24. VA Handbook 6500.8, “Information System Contingency Planning,” April 6, 2011

25. VA Handbook 6500.10, “Mobile Device Security Policy,” February 15, 2018

26. VA Handbook 6500.11, “VA Firewall Configuration,” August 22, 2017

27. OIT Process Asset Library (PAL), https://www.va.gov/process/ . Reference Process

Maps at https://www.va.gov/process/maps.asp and Artifact templates at https://www.va.gov/process/artifacts.asp

28. One-VA Technical Reference Model (TRM) (reference at https://www.va.gov/trm/TRMHomePage.aspx)

29. VA Directive 6508, “Implementation of Privacy Threshold Analysis and Privacy

Impact Assessment,” October 15, 2014

30. VA Handbook 6510, “VA Identity and Access Management,” January 15, 2016

31. VA Directive and Handbook 6513, “Secure External Connections,” October 12,

32. VA Directive 6300, “Records and Information Management,” September 21, 2018 https://www.va.gov/vapubs/index.cfm https://www.va.gov/vapubs/index.cfm http://www.va.gov/vapubs http://www.va.gov/vapubs https://www.va.gov/process/ https://www.va.gov/process/maps.asp https://www.va.gov/process/artifacts.asp https://www.va.gov/trm/TRMHomePage.aspx

33. VA Handbook, 6300.1, “Records Management Procedures, “March 24, 2010

34. NIST SP 800-37 Rev 2, “Risk Management Framework for Information Systems and

Organizations: A System Life Cycle Approach for Security and Privacy,” December

35. NIST SP 800-53 Rev. 5, “Security and Privacy Controls for Federal Information

Systems and Organizations,” September 23, 2020 (includes updates as of

12/10/2020)

36. VA Directive 0735, “Homeland Security Presidential Directive 12 (HSPD-12)

Program,” October 26, 2015

37. VA Handbook 0735, “Homeland Security Presidential Directive 12 (HSPD-12)

Program,” March 24, 2014

38. OMB Memorandum 05-24, “Implementation of Homeland Security Presidential

Directive (HSPD) 12 – Policy for a Common Identification Standard for Federal

Employees and Contractors,” August 5, 2005

39. OMB Memorandum M-19-17, “Enabling Mission Delivery Through Improved

Identity, Credential, and Access Management,” May 21, 2019

40. OMB Memorandum, “Guidance for Homeland Security Presidential Directive

(HSPD) 12 Implementation,” May 23, 2008

41. Federal Identity, Credential, and Access Management (FICAM) Architecture, June

30, 2023 (https://arch.idmanagement.gov/#what-is-the-ficam-architecture)

42. NIST SP 800-116 Rev 1, “Guidelines for the Use of Personal Identity Verification

(PIV) Credentials in Facility Access, “June 2018

43. NIST SP 800-63-3, 800-63A, 800-63B, 800-63C, “Digital Identity Guidelines,” updated March 02, 2020

44. NIST SP 800-157, “Guidelines for Derived PIV Credentials,” December 2014

45. NIST SP 800-164, “Guidelines on Hardware-Rooted Security in Mobile Devices

(Draft),” October 2012

46. Draft National Institute of Standards and Technology Interagency Report (NISTIR)

7981, “Mobile, PIV, and Authentication,” March 2014

47. VA Memorandum, VAIQ #7100147, “Continued Implementation of Homeland

Security Presidential Directive 12 (HSPD-12),” April 29, 2011 (reference https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514)

48. IAM Identity Management Business Requirements Guidance document, May 2013, (reference Enterprise Architecture Section, PIV/IAM (reference https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514)

49. VA Memorandum “Personal Identity Verification (PIV) Logical Access Policy

Clarification,” July 17, 2019, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4896

50. Trusted Internet Connections (TIC) 3.0 Core Guidance Documents, https://www.cisa.gov/publication/tic-30-core-guidance-documents

51. OMB Memorandum M-19-26, “Update to the Trusted Internet Connections (TIC)

Initiative,” September 12, 2019

52. OMB Memorandum M-08-23, “Securing the Federal Government’s Domain Name

System Infrastructure,” August 22, 2008

53. Sections 524 and 525 of the Energy Independence and Security Act of 2007, (P.L.

110–140), December 19, 2007

54. Section 104 of the Energy Policy Act of 2005, (P.L. 109–58), August 8, 2005

55. Executive Order 14057, “Catalyzing Clean Energy Industries and Jobs through

Federal Sustainability, 12/8/2021 https://arch.idmanagement.gov/#what-is-the-ficam-architecture https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514 https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514 https://www.voa.va.gov/DocumentView.aspx?DocumentID=4896 https://www.cisa.gov/publication/tic-30-core-guidance-documents

56. Executive Order 13221, “Energy-Efficient Standby Power Devices,” August 2, 2001

57. VA Directive 0057, “VA Environmental Management Program,” October 25, 2022

58. Office of Information Security (OIS) VAIQ #7424808 Memorandum, “Remote

Access,” January 15, 2014, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28

59. Clinger-Cohen Act of 1996, 40 U.S.C. §11101 and §11103

60. “Veteran Focused Integration Process (VIP) Guide 4.0,” January 2021, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4371

61. VA Memorandum “Proper Use of Email and Other Messaging Services,” January 2, 2018, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28

62. “Product Line Management Transformation Playbook” version 3.1, August 2023, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4946

63. NIST SP 500-267B Revision 1, “USGv6 Profile,” November 2020

64. OMB Memorandum M-21-07, “Completing the Transition to Internet Protocol

Version 6 (IPv6),” November 19, 2020

65. Social Security Number (SSN) Fraud Prevention Act of 2017

66. Section 240 of the Consolidated Appropriations Act (CAA) 2018, March 23, 2018

67. “VIP Release Process Guide”, Version 1.4, May 2016, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4411

68. “POLARIS User Guide”, Version 1.9, March 2017, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4412

69. EHRM-IO Joint Master Test Plan (JMTP)

3.0 SCOPE OF WORK

The Contractor shall provide support in the areas of test and evaluation of software, infrastructure, environments, and operations of the Independent Verification and Validation

(IV&V) TC, operations for TC environments hosted in VA Enterprise Cloud, and continuous quality process and program management support.

OIT and major program offices each require specific services during the period of performance to support all areas of daily operations. This work includes test and evaluation of existing legacy solutions, and VA applications in support of VA modernization initiatives. These applications include but are not limited to EHRM solutions and all systems integration to the EHR, Financial

Management Business Transformation (FMBT), future modernization programs, and other

GOTS and COTS applications. The required services also involve testing-related activities associated with Legacy Veterans Health Information Systems and Technology Architecture

(VistA) (Mumps, Delphi), modernized applications (Java/Oracle, Microsoft.Net / Structured

Query Language (SQL)), and other middleware and custom interface and data exchange systems.

While OIT TMO and TC may cover any application in this arena, primary focus is on modernization initiatives, data migration, major system interoperability, and data exchange applications while concurrently supporting testing activities during the transition from VA legacy systems.

3.1 CONTRACT TYPE

The effort shall be a hybrid Firm-Fixed-Price (FFP) and Time-and-Materials (T&M) contract.

https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28 https://www.voa.va.gov/DocumentView.aspx?DocumentID=4371 https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28 https://www.voa.va.gov/DocumentView.aspx?DocumentID=4946 https://www.voa.va.gov/DocumentView.aspx?DocumentID=4411 https://www.voa.va.gov/DocumentView.aspx?DocumentID=4412

4.0 PERFORMANCE DETAILS

4.1 PERFORMANCE PERIOD

The Period of Performance (PoP) shall be 12 months from date of award with four 12-month option periods. The contract includes one optional task to provide Transition Support. If exercised, the period of performance of the optional task will be a total of 180 days. The period of performance for the optional task will not exceed 180 days past the expiration date of the period in which it is exercised.

Any work at a Government site shall not take place on Federal holidays or weekends unless directed by the Contracting Officer (CO). (If required, the CO may designate the Contractor to work during holidays and weekends)

There are 11 Federal holidays set by law (USC Title 5 Section 6103) that VA follows:

Under current definitions, five are set by date:

New Year's Day January 1

Juneteenth June 19

Independence Day July 4

Veterans Day November 11

Christmas Day December 25

If any of the above falls on a Saturday, then Friday shall be observed as a holiday. Similarly, if one falls on a Sunday, then Monday shall be observed as a holiday.

The other six are set by a day of the week and month:

Martin Luther King's Birthday Third Monday in January

Washington's Birthday Third Monday in February

Memorial Day Last Monday in May

Labor Day First Monday in September

Columbus Day Second Monday in October

Thanksgiving Fourth Thursday in November

4.2 PLACE OF PERFORMANCE

Tasks under this PWS shall be performed at Contractor facilities.

All support will be within the Continental United States (inclusive of Alaska, Hawaii, and US

Territories). Some tasks under this PWS require the on-site presence of contractor resources and shall be performed at a VA location designated by the VA PM.

4.3 TRAVEL (T&M)

The Government anticipates the need for travel events to perform tasks associated with the effort, and to attend program-related meetings or conferences throughout the PoP. Below are travel estimates for the base period and each option period; however, the number, location and duration of travel events listed below are subject to change and will be based on operational requirements.

Travel is on a T&M, no fee basis and shall be in accordance with the Federal Travel Regulations

(FTR) and requires advance concurrence by the Contracting Officer Representative (COR). The

Contractor shall provide cost estimates with each travel request to the COR. Each Contractor invoice must include copies of all requested, applicable, and required receipts (FTR §301-11.25:

required for lodging, regardless of amount, and a receipt for every authorized expense over $75) that support the travel costs claimed in the invoice.

Contractor travel within the local commuting area of 50-miles, as well as contractor participation in virtual meetings, will not be reimbursed. Travel performed for personal convenience and daily travel to and from work at the Contractor’s facility will not be reimbursed. Contractor travel within the local commuting area will not be reimbursed.

Travel will be performed in accordance with Federal Travel Regulations and will be billed after performance.

Estimated Travel per Year

EHRM

OIT

Type of Meeting Location Number of Trips

Number of

Persons

Number of

Days

EHRM Testing at

Deployment Site

(6 events)

TBD pending operational requirements 6 3 5

EHRM Integrated

Testing Team

Meetings Washington DC 2 12 5

OIT IV&V Strategic

Planning Austin, TX 1 9 5

5.0 SPECIFIC TASKS AND DELIVERABLES

The Contractor shall perform the following in accordance with VA processes to be provided to the contractor.

5.1 PROJECT MANAGEMENT (FFP)

5.1.1 Contractor Project Management Plan

The Contractor shall deliver a Contractor Project Management Plan (CPMP) that lays out the

Contractor’s approach, timeline, and tools to be used in execution of the contract. The CPMP shall take the form of both a narrative and graphic format that displays the schedule, milestones, risks, and resource support. The CPMP shall also include how the Contractor shall coordinate and execute planned, routine, and ad hoc data collection reporting requests as identified within the PWS. The initial baseline CPMP shall be concurred upon and updated monthly thereafter.

The Contractor shall update and maintain the VA-approved CPMP throughout the period of performance.

Deliverable:

Contractor Project Management Plan

5.1.2 Contract Key Personnel

The Contractor shall assign a single individual to serve as the Contract Program/Project Manager to support the contract, as well as any other key personnel deemed necessary for support of the contract. Any change of key personnel, defined as Contract Program/Project Manager, Project

Manager, and Division Leads shall require the, CO, and COR and IETSS VA Senior

Management notification and a transition plan to ensure minimum disruption to services delivered via the IETSS contract.

Any personnel the Contractor offers as substitutes shall have capabilities and qualifications at least equal to the key personnel being replaced, meaning that candidates shall have experience in program and project management, leadership, and testing services at an equivalent or greater level to the key personnel being replaced. If any change to a key personnel position becomes necessary, the Contractor shall immediately notify the VA PM in writing. Whenever possible the

Contractor shall notify the VA PM of substitutions of personnel in writing 30 calendar days prior to making any change in key personnel. The notification should provide a detailed explanation of the circumstances necessitating the proposed substitution and shall demonstrate that the proposed replacement is of at least substantially equal ability and qualifications as the individual originally proposed for that position.

The Contractor agrees that it has a contractual obligation to mitigate the consequences of the loss of key personnel and shall promptly secure any necessary replacements in accordance with this

PWS section. Failure to replace key personnel without a break in performance of the labor category at issue shall be considered a condition endangering contract performance and may provide grounds for termination.

5.1.3 Reporting Requirements & Management Meetings

The Contractor shall provide the COR with Monthly Progress Reports in electronic form in

Microsoft Word or Excel formats. The report shall include detailed explanations for each required area and ensure that data is accurate and consistent. These reports shall reflect data as of the last day of the preceding month.

The Contractor shall conduct weekly management meetings that summarizes services delivered for the past week, active or open services, issues resolved and issues still under consideration that are relevant for VA management visibility and related to the requirements review. Weekly management meetings are attended by VA and Contractor management and team leads with meeting notes generated as an artifact and distributed to the Government.

The Monthly Progress Reports shall cover all work completed during the reporting period and work planned for the subsequent reporting period. The report shall also identify any problems that arose and a description of how the problems were resolved. If problems have not been completely resolved, the Contractor shall provide an explanation including its plan and timeframe for resolving the issue. The Contractor shall monitor performance against the CPMP and report any deviations. It is expected that the Contractor will keep in communication with VA accordingly so that when issues arise, they are visible to both parties, to enable solutions to be developed without escalation. The Monthly Progress Report shall organize the report into the

EHRM-IO Integration Testing Section & OIT Section.

A. Monthly Progress Report

5.1.4 Testing Independence

Under the terms of this contract/order, the Contractor or its subcontractors shall not test VA major IT program projects if they are acting as prime or subcontractor on a VA contract that provides IT project management, software development services as defined in Section C.14. To maximize transparency, the Government and Contractor will take an active role in ensuring that independence is established prior to contract award and maintained throughout the life of the contract.

The Contractor shall submit an annual Memorandum of Independence Confirmation that will enable VA to verify and monitor independence of Contractor and their subcontractors.

Additionally, throughout the period of performance of this contract, the Contractor shall immediately notify the CO, in writing, if it or its subcontractors intends on pursuing VA business opportunities for software development or IT project management. Thereafter, the Contractor agrees to comply with the directions of the CO that, in his or her discretion, deems necessary in order to ensure its independence. The ultimate responsibility for complying with this independence requirement remains with the Contractor. A CO’s response, or lack of response, to any notification made pursuant to this clause is not a representation of compliance with the independence requirement. Noncompliance with the independence requirement may lead to possible termination of this contract. These procedures will increase contract management effectiveness and will demonstrate Government due diligence.

A. Memorandum of Independence Confirmation

5.2 TEST AND EVALUATION SUPPORT (T&M)

The Contractor shall execute the following tasks in support of EHRM-IO Integrated Testing &

OIT. The Contractor shall support EHRM-IO Integrated Testing & OIT and execute required testing and testing-related activities. The EHRM-IO program services required from TMO and

TC cover the full scope of test and evaluation services needed for the successful implementation of the EHR COTS solutions across all waves of EHRM-IO deployment. In addition, the EHRM-

IO services required from TMO cover the large-scale data migration test and evaluation of legacy production data into the new EHR solutions.

5.2.1 Work Product Reviews

The Contractor shall conduct reviews of work products generated by organizations external to

TMO, TC and EHRM-IO Integrated Testing. Documents to be reviewed include task orders, test plans and other documents or products directly or indirectly related to testing activities. The

Contractor shall provide a Work Product Review Analysis Report that provides a summary of the product reviewed, highlighting positive areas as well as areas of concern. For EHRM-IO products tracked within the EHRM-IO deliverables review system, the Contractor shall conduct reviews of the assigned work products with the review comments being logged within the

EHRM-IO deliverables review system.

For informational purposes only, the current average monthly deliverable review workload is 55 artifacts, which is expected to ramp up significantly over the period of performance.

A. Work Product Review Analysis Report

5.2.2 Information Gathering/Requirements Analysis

The Contractor shall participate as a member of requirements reviews as requested by TMO and

TC in coordination with the project team responsible for the system under test (SUT). The

Contractor shall engage with a project team’s requirement management resources to understand the requirements management process for SUT, to determine processes for establishing traceability between test cases and SUT requirements and to provide input and feedback on the testability of the product software requirements under review. The Contractor shall use a specific approach agreed to between TMO and the project team PM prior to beginning work. The

Contractor shall coordinate the testability review of the requirements with other members of the review team.

Historically, there have been approximately 139 product requirement reviews per 12-month period.

5.2.3 Testing Intake Assessment/Criticality Analysis and Risk Assessment

The Contractor shall perform the Testing Intake Assessment (TIA) and Criticality Analysis and

Risk Assessment (CARA) processes on products and/or workflows for major programs utilizing the predefined processes. The Contractor shall provide detailed risk analyses, documenting the various aspects of competing risks and provide findings to IETSS management.

The Contractor shall:

a. Perform TIA process by accessing the project’s required repositories, such as GitHub, or other VA requirements sources such as contract task orders or performance work statements, or exports of requirements from Vendor requirements repository for COTS products.

b. Collaborate with the project team to resolve any issues with the data gathered via the

TIA. Review available documentation (e.g., Epics, User Stories) for initial completeness;

work with the project team to clarify any questions or issues pertaining to the documentation.

c. Generate Product/Project Assessment Summary (PAS) as applicable from TIA processes.

The Contractor shall use Government provided templates for the PAS.

d. Generate Build Assessment Summary (BAS) as applicable from TIA processes. The

Contractor shall use Government provided templates for the BAS.

e. Perform CARA process to evaluate, score and assess for criticality and risk of requirements and quality of the SUT documentation.

f. Conduct an Analysis Committee Meeting or Analysis Committee Review Briefing

(ACM/ACRB) with diverse expertise representation to consider the risk scores and other factors (e.g., availability of testing environment, quality of project documentation, resource availability) to determine the testing services recommended for a specific SUT.

g. Generate Risk Analysis Summary (RAS) as applicable as the output of the TIA, CARA and ACM/ACRB processes. The Contractor shall use Government provided templates for the RAS.

h. Perform a Quality Assurance Review of the RAS by submitting the RAS into the Change

Management tool and executing the QA Review Process for each project/product in the approved project artifact repository.

i. File all RAS documents in the approved project artifact repository.

Historical numbers of TIAs, CARAs, and RAS for the 12-month period are shown in the table below. Actual numbers will vary per requirements. CARA services in support of EHRM are based on historical workflow estimates with each workflow undergoing a CARA process. RAS produced in support of EHRM-IO IntT on EHRM workflows historically have been compiled as batches, thus the delta between CARA performed and RAS produced.

Table 5.2.3-1: Historical 12-month estimate for TIAs, CARAs, and RAS

OIT EHRM

TIA/Workflows 492 81

CARA 135 81

RAS 135…