Polypharmacy 36C10B26R0004_Amended_1.20.26 .pdf

PDF 1 MB Posted

Attached to
DA01--New Contract - Polypharmacy (VA-26-00018584) Federal contract opportunity
Solicitation number
36C10B26R0004
Issued by
Department of Veterans Affairs Technology Acquisition Center Austin

About this file

This is a Request for Proposal (RFP) for the development and implementation of a comprehensive polypharmacy management software solution for the Department of Veterans Affairs (VA). The solicitation, numbered 36C10B26R0004 and issued by the VA Technology Acquisition Center, seeks a firm-fixed-price contract valued at approximately $47 million with a deadline of January 28, 2026 at 4:00 PM ET. The solution must identify and reduce inappropriate polypharmacy among Veterans by consolidating VA and community-prescribed medications, assigning risk scores at patient and medication levels, flagging potential risks including drug-drug interactions and fall risk, and supporting safe deprescribing and shared decision-making. The software must integrate seamlessly with VA systems including CPRS and the Federal EHR, facilitate population management and medication reconciliation, and be hosted in the VA Enterprise Cloud (VAEC) environment.

The contract structure includes a six-month base period for pilot implementation at 10 VA Medical Centers, four 12-month option periods for expanded enterprise deployment, and two optional tasks for enterprise-wide deployment and full capability features. The base period focuses on software architecture, VAEC implementation planning, build and development, implementation, and outcomes reporting. Option periods transition to integrated pilots at 20 additional VAMCs and enterprise-wide sustainment including 24/7/2-hour response support. The proposal must be submitted in six volumes covering technical approach, past performance, small business participation commitment, veterans involvement, pricing, and certifications. Evaluation will prioritize technical capability and past performance of comparable polypharmacy software implementations, followed by small business participation (minimum 10-17.5% including specific goals for SDBs, WOSBs, HUBZone, VOSBs, and SDVOSBs), veteran involvement, and price. Contractors must demonstrate compliance with VA security requirements, including Zero Trust architecture, Federal identity and credential management, IPv6 support, and comprehensive information security and privacy controls.

View the file

Other files for this federal contract opportunity

Other files attached to DA01--New Contract - Polypharmacy (VA-26-00018584), newest first.
File Type Posted
SF30_36C10B26R0004_Amendment 0002.pdf PDF
36C10B26R0004 0002_1.docx DOCX document
Attachment 2 - Small Business Participation Commitment_1.16.26.xls XLS spreadsheet
Attachment 1_Business Associates Agreement_VHA.docx DOCX document
QA_Polypharmacy 36C10B26R0004_1.20.26 .pdf PDF
Attachment 3 - Small Business Participation Subcontracting Report_1.16.26.xlsx XLSX spreadsheet
36C10B26R0004 0001.docx DOCX document
36C10B26R0004 0001_SF30.pdf PDF
Attachment 1 - BAA Agreement.doc DOC document
Attachment 2 - Small Business Participation Commitment.xls XLS spreadsheet
Polypharmacy 36C10B26R0004_Final.pdf PDF
36C10B26R0004_1.docx DOCX document
Show all 12

On GovTribe

Work with this file on GovTribe

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

PAGE 1 OF 1. REQUISITION NO.

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NO. 5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

a. NAME b. TELEPHONE NO. (No Collect Calls) 8. OFFER DUE DATE/LOCAL

TIME

9. ISSUED BY CODE 10. THIS ACQUISITION IS UNRESTRICTED OR SET ASIDE: % FOR:

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

8(A)

NAICS:

SIZE STANDARD:

11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

13a. THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700)

13b. RATING

14. METHOD OF SOLICITATION

RFQ IFB RFP

15. DELIVER TO CODE 16. ADMINISTERED BY CODE

17a. CONTRACTOR/OFFEROR CODE FACILITY CODE 18a. PAYMENT WILL BE MADE BY CODE

TELEPHONE NO. UEI: EFT:

PHONE: FAX:

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW IS CHECKED

SEE ADDENDUM

19. 20. 21. 22. 23. 24.

ITEM NO. SCHEDULE OF SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Govt. Use Only)

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA ARE ARE NOT ATTACHED.

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN _______________ 29. AWARD OF CONTRACT: REF. ___________________________________ OFFER

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DATED ________________________________. YOUR OFFER ON SOLICITATION

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY (BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED SET FORTH HEREIN IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30b. NAME AND TITLE OF SIGNER (TYPE OR PRINT) 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (TYPE OR PRINT) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION (REV. NOV 2021)

PREVIOUS EDITION IS NOT USABLE Prescribed by GSA - FAR (48 CFR) 53.212

7. FOR SOLICITATION

INFORMATION CALL:

STANDARD FORM 1449

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

TBD

TBD TBD

TBD 36C10B26R0004 12-23-2025

Elena Juliano, Elena.Juliano@va.gov 848-377-5246 01-28-2026

4:00PM ET

Department of Veterans Affairs

Office of Procurement, Acquisition and

Logistics (OPAL)

Technology Acquisition Center

23 Christopher Way

Eatontown NJ 07724

X

513210

N/A

X

See Schedule of Supplies/Services

OPAL

Technology Acquisition Center

Eatontown NJ 07724

TBD

Technology Acquisition Center

Financial Services Center

PO Box 149971

Austin TX 78714-8971

See website at: http://www.fsc.va.gov/einvoice.asp

See CONTINUATION Page

Reducing Inappropriate Polypharmacy at the Department of

Veterans Affairs

Per Federal Acquisition Regulation (FAR) 52.204-7, offerors will be required to have an active Federal Government contracts registration in SAM when submitting an offer or quotation in response to this solicitation and at the time of award.

Having only a Unique Entity Identifier (UEI) may not suffice.

The Government must be able to identify socio-economic data, representations and certifications, and other offeror information.

This effort shall be firm-fixed price.

POCs:

CO: John Vardouniotis, ioannis.vardouniotis@va.gov

CS: Elena Juliano, Elena.Juliano@va.gov

See CONTINUATION Page

X X

John Vardouniotis

$47 million

Request for Proposal # 36C10B26R0004 Amendment 0002

Table of Contents

SECTION B - CONTINUATION OF SF 1449 BLOCKS

B.1 CONTRACT ADMINISTRATION DATA

B.2 GOVERNING LAW

B.3 SOFTWARE LICENSE, MAINTENANCE AND TECHNICAL SUPPORT

B.4 SCHEDULE OF SUPPLIES/SERVICES

B.5 PERFORMANCE WORK STATEMENT

SECTION C - CONTRACT CLAUSES

C.1 FAR 52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

C.2 FAR 52.217-7 OPTION FOR INCREASED QUANTITY-SEPARATELY PRICED LINE

ITEM (MAR 1989)

C.3 FAR 52.217-8 OPTION TO EXTEND SERVICES (NOV 1999)

C.4 FAR 52.217-9 OPTION TO EXTEND THE TERM OF THE CONTACT (MAR 2000)

C.5 VAAR 852.204-71 INFORMATION AND INFORMATION SYSTEMS SECURITY (FEB

2023)

C.6 VAAR 852.211-76 LIQUIDATED DAMAGES—REIMBURSEMENT FOR DATA

BREACH COSTS (FEB 2023)

C.7 VAAR 852.239-76 INFORMATION AND COMMUNICATION TECHNOLOGY

ACCESSIBILITY (FEB 2023)

C.8 SMALL BUSINESS PARTICIPATION REQUIREMENTS

SECTION D - CONTRACT DOCUMENTS, EXHIBITS, OR ATTACHMENTS

SECTION E - SOLICITATION PROVISIONS

E.1 FAR 52.252-1 SOLICITATION PROVISIONS INCORPORATED BY REFERENCE (FEB

1998)

E.2 FAR 52.209-5 CERTIFICATION REGARDING RESPONSIBILITY MATTERS (AUG

2020) REPRESENTATION REGARDING CERTAIN TELECOMMUNICATIONS AND

VIDEO SURVEILLANCE SERVICES OR EQUIPMENT (NOV 2025 DEVIATION)

E.3 FAR 52.209-7 INFORMATION REGARDING RESPONSIBILITY MATTERS (NOV 2025

DEVIATION)

E.4 FAR 52.209-11 REPRESENTATION BY CORPORATIONS REGARDING DELINQUENT

TAX LIABILITY OR A FELONY CONVICTION UNDER ANY FEDERAL LAW (NOV 2025

DEVIATION)

E.5 FAR 52.216-1 TYPE OF CONTRACT (APR 1984)

E.6 FAR 52.233-2 SERVICE OF PROTEST (SEP 2006)

E.7 SUBMISSION INSTRUCTIONS

E.8 BASIS FOR AWARD

SECTION B - CONTINUATION OF SF 1449 BLOCKS

B.1 CONTRACT ADMINISTRATION DATA

1. Contract Administration: All contract administration matters will be handled by the following individuals:

a. CONTRACTOR: TBD

b. GOVERNMENT: Contracting Officer 36C10B

Technology Acquisition Center

Eatontown, NJ 07724

2. CONTRACTOR REMITTANCE ADDRESS: All payments by the Government to the contractor will be made in accordance with:

[X] 52.232-33, Payment by Electronic Funds Transfer—System For Award

Management, or

[ ] 52.232-36, Payment by Third Party

3. INVOICES: Invoices shall be submitted in arrears:

a. Quarterly []

b. Semi-Annually []

c. Other [IAW Section B.4 Schedule of Supplies/Services and acceptance of deliverables]

4. GOVERNMENT INVOICE ADDRESS: All Invoices from the contractor shall be submitted electronically in accordance with VA Acquisition Regulation (VAAR) Clause

852.232-72 Electronic Submission of Payment Requests.

See website at: http://www.fsc.va.gov/einvoice.asp

5. ACKNOWLEDGMENT OF AMENDMENTS: The offeror acknowledges receipt of amendments to the Solicitation numbered and dated as follows:

AMENDMENT NO DATE

A0001 1/13/2026

A0002 1/20/2026 http://www.fsc.va.gov/einvoice.asp

B.2 GOVERNING LAW

Federal law and regulations, including the Federal Acquisition Regulations (FAR), shall govern this Contract/Order. Commercial license agreements may be made a part of this Contract/Order but only if both parties expressly make them an addendum hereto, as permitted by FAR 12.212.

If the commercial license agreement is not made an addendum, it shall not apply, govern, be a part of or have any effect whatsoever on the Contract/Order; this includes, but is not limited to, any agreement embedded in the computer software (clickwrap), any agreement that is otherwise delivered with or provided to the Government with the commercial computer software or documentation (shrinkwrap), or any other license agreement otherwise referred to in any document. If a commercial license agreement is made an addendum, only those provisions addressing data rights regarding the Government’s use, duplication and disclosure of data (e.g., restricted computer software) are included and made a part of this Contract/Order, and only to the extent that those provisions are not duplicative or inconsistent with Federal law, Federal regulation, the incorporated FAR clauses and the provisions of this Contract/Order; those provisions in the commercial license agreement that do not address data rights regarding the

Government’s use, duplication and disclosure of data shall not be included or made a part of the

Contract/Order. Federal law and regulation including, without limitation, the Contract Disputes

Act (41 U.S.C. § 7101 et seq.), the Anti-Deficiency Act (31 U.S.C. § 1341 et seq.), the

Competition in Contracting Act (41 U.S.C. § 3301 et seq.), the Prompt Payment Act (31 U.S.C. §

3901 et seq.), Contracts for Data Processing or Maintenance (38 USC § 5725), and FAR clauses

52.212-4, 52.227-14, 52.227-19 shall supersede, control, and render ineffective any inconsistent, conflicting, or duplicative provision in any commercial license agreement. In the event of conflict between this clause and any provision in the Contract/Order or the commercial license agreement or elsewhere, the terms of this clause shall prevail. The Contractor shall deliver to the

Government all data first produced under this Contract/Order with unlimited rights as defined by

FAR 52.227-14. Claims of patent or copyright infringement brought against the Government as a party shall be defended by the U.S. Department of Justice (DOJ) in accordance with 28 U.S.C. §

516; at the discretion of DOJ, the Contractor may be allowed reasonable participation in the defense of the litigation. Any additional changes to the Contract/Order must be made by modification (Standard Form 30) and shall only be made by a warranted Contracting Officer.

Nothing in this Contract/Order or any commercial license agreement shall be construed as a waiver of sovereign immunity.

B.3 SOFTWARE LICENSE, MAINTENANCE AND TECHNICAL SUPPORT

(1) Definitions.

(a) Licensee. The term “licensee” shall mean the U.S. Department of Veterans Affairs

(“VA”) and is synonymous with “Government.”

(b) Licensor. The term “licensor” shall mean the contractor having the necessary license or ownership rights to deliver license, software maintenance and support of the computer software being acquired. The term “contractor” is the party identified in Block 17a on the

SF1449. If the contractor is a reseller and not the Licensor, the contractor remains responsible for performance under this order.

(c) Software. The term “software” shall mean the licensed computer software product(s) cited in the Schedule of Supplies/Services.

(d) Maintenance. The term “maintenance” is the process of enhancing and optimizing software, as well as remedying defects. It shall include all new fixes, patches, releases, updates, versions and upgrades, as further defined below.

(e) Technical Support. The term “technical support” refers to the range of services providing assistance for the software via the telephone, email, a website or otherwise.

(f) Release or Update. The term “release” or “update” are terms that refer to a revision of software that contains defect corrections, minor enhancements or improvements of the software’s functionality. This is usually designated by a change in the number to the right of the decimal point (e.g., from Version 5.3 to 5.4). An example of an update is the addition of new hardware.

(g) Version or Upgrade. The term “version” or “upgrade” are terms that refer to a revision of software that contains new or improved functionality. This is usually designated by a change in the number to the left of the decimal point (e.g., from Version 5.4 to 6).

(2) Software License

(a) Unless otherwise stated in the Schedule of Supplies/Services, the

Performance Work Statement or Product Description, the software license provided to the Government is a perpetual, nonexclusive license to use the software

(b) The Government may use the software in a networked environment.

(c) Any dispute regarding the license grant or usage limitations shall be resolved in accordance with the Disputes Clause incorporated in FAR 52.212-4(d).

(d) All limitations of software usage are expressly stated in the Schedule of

Supplies/Services and the Performance Work Statement/Product

Description.

(3) Software Maintenance and Technical Support

(a) If the Government desires to continue software maintenance and support beyond the period of performance identified in this contract or order, the

Government will issue a separate contract or order for maintenance and support. Conversely, if a contract or order for continuing software maintenance and technical support is not received the contractor is neither authorized nor permitted to renew any of the previously furnished services.

(b) The contractor shall provide software support services, which includes periodic updates, enhancements and corrections to the software, and reasonable technical support, all of which are customarily provided by the contractor to its commercial customers so as to cause the software to perform according to its specifications, documentation or demonstrated claims.

(c) Any telephone support provided by contractor shall be at no additional cost.

(d) The contractor shall provide all maintenance services in a timely manner in accordance with the contractor’s customary practice or as defined in the Performance Work

Statement/Product Description. However, prolonged delay (exceeding 2 business days) in resolving software problems will be noted in the Government’s various past performance records on the contractor (e.g., www.ppirs.gov).

(e) If the Government allows the maintenance and support to lapse and subsequently wishes to reinstate it, any reinstatement fee charged shall not exceed the amounts that would have been charged if the Government had not allowed the subscription to lapse.

(4) Disabling Software Code. The Government requires delivery of computer software that does not contain any code that will, upon the occurrence or the nonoccurrence of any event, disable the software. Such code includes but is not limited to a computer virus, restrictive key, node lock, time-out or other function, whether implemented by electronic, mechanical, or other means, which limits or hinders the use or access to any computer software based on residency on a specific hardware configuration, frequency of duration of use, or other limiting criteria. If any such disabling code is present, the contractor agrees to indemnify the

Government for all damages suffered as a result of a disabling caused by such code, and the contractor agrees to remove such code upon the Government’s request at no extra cost to the

Government. Inability of the contractor to remove the disabling software code will be considered an inexcusable delay and a material breach of contract, and the Government may exercise its right to terminate for cause. In addition, the Government is permitted to remove the code as it deems appropriate and charge the Contractor for consideration for the time and effort expended in removing the code.

(5) Manuals and Publications. Upon Government request, the contractor shall furnish the most current version of the user manual and publications for all products/services provided under this contract or order at no cost.

http://www.ppirs.gov/

B.4 SCHEDULE OF SUPPLIES/SERVICES

Offerors are instructed to complete Section B.4 and submit with their quote.

Offerors are cautioned that alterations to the line items as specified below may render quotes unacceptable.

Inspection/Acceptance: Destination

BASE PERIOD

Period of Performance (PoP): Six 12 months

Product Service Code (PSC): DA01 for all Contract Line-Item Numbers (CLIN) unless otherwise noted.

CLIN/SLIN Description Qty Unit Unit Price Total Price

0001 Program Management

In accordance with (IAW) Performance

Work Statement (PWS) Paragraph 5.1 including all its subparagraphs.

Firm Fixed Price (FFP)

This CLIN includes all term software licenses, labor, material, supplies, travel, and any other costs required for successful completion for the services detailed in PWS paragraphs 5.1 inclusive of all subparagraphs.

The PoP shall be six months from the date of award.

The price of this CLIN shall be included in priced CLIN 0002.

6 Month

(MO)

Not Separately

Priced (NSP)

NSP

0001AA Deliverable

Kickoff Meeting Presentation

IAW PWS 5.1.1

Due five days after the beginning of the

PoP.

Electronic submission to: VA PM, COR, CO

1 Lot

(LT)

NSP NSP

0001AB Deliverable

Contractor Project Management Plan

IAW PWS 5.1.2

Due within 10 business days of award and updated monthly by 7th business day of the month. Update as needed throughout the PoP.

1 LT NSP NSP

0001AC Deliverable 1 LT NSP NSP

Monthly Progress Reports

IAW PWS 5.1.3

Due 30 days after award and then by the

7th business day of each month.

0001AD Deliverable

Contractor Staff Roster

IAW PWS 6.2.2

Due within three business days after award and updated as needed.

1 LT NSP NSP

0002 Base Period - Pilot Phase

IAW PWS 5.2 including all of its subparagraphs

FFP

travel, and any other costs required for successful completion for the services detailed in PWS paragraphs 5.2 and all of its subparagraphs.

6 MO $ $

0002AA Software Architecture and Design

IAW PWS 5.2.1

1 LT NSP NSP

0002AB Deliverable

Solution Architecture

Due within eight weeks of the date of award.

COR, CO.

1 LT NSP NSP

0002AC Deliverable

Solution Design

0002AD Deliverable

Source Code

1 LT NSP NSP

0002ADE Deliverable

Configuration Files

1 LT NSP NSP

0002AEF Deliverable

Build and Deployment Scripts

IAW PWS 5.2.1

1 LT NSP NSP

0002AFG Deliverable

Database Schemas

1 LT NSP NSP

0002AGH Deliverable

Application Programing Interface

Specifications

1 LT NSP NSP

0002AHJ Deliverable

Technical and User Documentation

0002AJK VA Enterprise Cloud (VAEC)

Implementation Planning

IAW PWS 5.2.2

1 LT NSP NSP

0002AKL Deliverable

VAEC Implementation Plan

1 LT NSP NSP

0002ALM Deliverable

Verification and Validation Test

Plans

1 LT NSP NSP

0002AMN Deliverable

Software Testing Scripts

1 LT NSP NSP

0002ANP Build and Development

IAW PWS 5.2.3

This SLIN includes all term software travel, and any other costs required for successful completion for the services detailed in PWS paragraphs 5.2.3 and all of its subparagraphs.

0002APQ Deliverable

VA Authority to Operate (ATO)

Artifacts

Due within 10 weeks of the date of

1 LT NSP NSP

0002AQR Deliverable

Production Readiness Review

Documentation

Due within 10 weeks of the date of

1 LT NSP NSP

0002ARS Implementation

IAW PWS 5.2.4

1 LT NSP NSP

0002AST Deliverable

Implementation Summary Report

Due within 12 weeks of the date of

1 LT NSP NSP

0002ATU Outcomes Reporting

IAW PWS 5.2.5

1 LT NSP NSP

0002AUV Deliverable

Outcomes Report

Due within 20 weeks of the date of

COR, CO.

0002AVW Clinical User Access and Engagement

Reporting

IAW PWS 5.2.12

1 LT NSP NSP

0002AWX Data Analytics

IAW PWS 5.2.13

1 LT NSP NSP

0002AXY Training

IAW PWS 5.2.14

1 LT NSP NSP

0002AYZ Deliverable

Training Materials

One week prior to training

COR, CO.

1 LT NSP NSP

0002BA Deliverable

Training Rosters for Completed

Training

Due within one week post training.

BASE PERIOD TOTAL $

OPTION PERIOD ONE

This option may be exercised in accordance with FAR 52.217-9, Option to Extend the Term of the Contract.

Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer. If exercised, this option shall commence immediately after expiration of the Base Period.

Period of Performance: 12 months

PSC: DA01 for all CLINs unless otherwise noted.

1001 Program Management

IAW PWS 5.1 including all its subparagraphs.

travel, and any other costs required for successful completion for the services

The PoP shall be 12 months from the date of exercise.

in priced CLIN 1002.

12 MO NSP NSP

1001AA Deliverable

Due within five days after the beginning of the PoP and updated throughout as specified in the contract.

1 LT NSP NSP

1001AB Deliverable

Due within 10 business days of exercise, updated monthly by 7th business day of the month and as required.

1 LT NSP NSP

1001AC Deliverable

Due monthly on the 7th business day of the month.

1001AD Deliverable

Updated as required.

1 LT NSP NSP

1002 Integrated Pilot

IAW PWS 5.3.1 including all its travel, and any other costs required for successful completion for the services

Monthly payment shall be contingent on successful deployment and adherence to agreed upon deployment schedule.

12 MO $ $

1002AA Software Architecture and Design

1 LT NSP NSP

1002AB Deliverable

Solution Architecture Updates exercise.

1 LT NSP NSP

1002AC Deliverable

Solution Design Updates

1002AD Deliverable

1 LT NSP NSP

1002ADE Deliverable

1 LT NSP NSP

1002AEF Deliverable

Build and Deployment Scripts

1 LT NSP NSP

1002AFG Deliverable

Database Schemas Updates

1 LT NSP NSP

1002AGH Deliverable

Application Programing Interface

Specifications Updates

1002AHJ Deliverable 1 LT NSP NSP

Technical and User Documentation

Updates

1002AJK VA Enterprise Cloud Implementation

Planning Updates

1 LT NSP NSP

1002AKL Deliverable

VAEC Implementation Plan Updates

Due within 24 weeks of the date of

1 LT NSP NSP

1002ALM Deliverable

Verification and Validation Test

Plans Updates

Due within 42 weeks of the date of

1 LT NSP NSP

1002AMN Deliverable

Software Testing Scripts Updates

1 LT NSP NSP

1002ANP Build and Development

1002APQ Deliverable 1 LT NSP NSP

VA Authority to Operate Artifacts

Due within 44 weeks of the date of

1002AQR Deliverable

Production Readiness Review

1 LT NSP NSP

1002ARS Implementation

1 LT NSP NSP

1002AST Deliverable

Due within 46 weeks of the date of

1 LT NSP NSP

1002AU Outcomes Reporting

1 LT NSP NSP

1002AUV Deliverable

Due within 52 weeks from the date of

1 LT NSP NSP

1002AVW Training

1002AWX Deliverable

Training Materials

1 LT NSP NSP

1002AXY Deliverable

Training Rosters for Completed

OPTION PERIOD ONE TOTAL $

OPTION PERIOD TWO

This option may be exercised in accordance with FAR 52.217-9, Option to Extend the Term of the Contract.

Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer. If exercised, this option shall commence immediately after expiration of Option Period One.

2001 Program Management travel, and any other costs required for successful completion for the services in priced CLIN 2002.

12 MO NSP NSP

2001AA Deliverable

Kickoff Meeting Presentation

PoP and updated throughout as

2001AB Deliverable

Update as required.

1 LT NSP NSP

2001AC Deliverable

Due monthly by the 7th business day of the month.

1 LT NSP NSP

2001AD Deliverable

Update as required.

1 LT NSP NSP

2002 Solution Sustainment - Enterprise

IAW PWS 5.4

travel, and any other costs required for successful completion for the services detailed in PWS paragraphs 5.4

12 MO $ $

2002AA Outcomes Reporting

IAW PWS 5.2.5 and 5.4

2002AB Deliverable

Due within 13 weeks of the date of

1 LT NSP NSP

2002AC Operate and Maintain

IAW PWS 5.4.1

1 LT NSP NSP

2002AD Monitor Performance and Reporting

IAW PWS 5.4.2

1 LT NSP NSP

2002AE Deliverable

Application Monitoring Plan

Due within six weeks of exercise and quarterly thereafter.

1 LT NSP NSP

2002AF Deliverable

Application Dashboard quarterly thereafter

1 LT NSP NSP

2002AG Deliverable

Postmortem Reports

Due within seven days of an outage.

1 LT NSP NSP

2002AH Deliverable

Quarterly Solution Performance

Report

Due within 13 weeks of exercise and

2002AJ Deliverable

Quarterly Resource Utilization

Optimization Plan

1 LT NSP NSP

2002AK Deliverable

Monthly Utilization Report

Due monthly by 7th business day of the month

1 LT NSP NSP

2002AL Software Outage Management Plan

IAW PWS 5.4.3

1 LT NSP NSP

2002AM Deliverable

Software Outage Management Plan

(Scheduled)

Within six weeks of exercise, updated quarterly.

1 LT NSP NSP

2002AN Deliverable

Software Outage Management Plan

(Unscheduled)

2002AP Training 1 LT NSP NSP

2002AQ Deliverable

1 LT NSP NSP

2002AR Deliverable

Training Rosters for Completed

OPTION PERIOD TWO TOTAL $

OPTION PERIOD THREE

This option may be exercised in accordance with FAR 52.217-9, Option to Extend the Term of the Contract.

Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer. If exercised, this option shall commence immediately after expiration of Option Period Two.

3001 Program Management travel, and any other costs required for successful completion for the services

The price of this CLIN shall be included in priced CLIN 3002.

12 MO NSP NSP

3001AA Deliverable

Due five days after the beginning of the PoP and updated throughout as

1 LT NSP NSP

3001AB Deliverable

Contractor Project Management

Plan

Due within 10 business days of exercise, updated monthly by 7th business day of the month and as required.

1 LT NSP NSP

3001AC Deliverable

Due 30 days after award and then by the 7th business day of the month.

1 LT NSP NSP

3001AD Deliverable exercise ward and updated as needed.

1 LT NSP NSP

3002 Solution Sustainment - Enterprise travel, and any other costs required for successful completion for the services

12 MO $ $

date of exercise.

3002AA Outcomes Reporting

1 LT NSP NSP

3002AB Deliverable

1 LT NSP NSP

3002AC Operate and Maintain

1 LT NSP NSP

3002AD Monitor Performance and

Reporting

1 LT NSP NSP

3002AE Deliverable

1 LT NSP NSP

3002AF Deliverable

1 LT NSP NSP

3002AG Deliverable

3002AH Deliverable

Quarterly Solution Performance

Report

1 LT NSP NSP

3002AJ Deliverable

Quarterly Resource Utilization

1 LT NSP NSP

3002AK Deliverable

1 LT NSP NSP

3002AL Software Outage Management Plan date of award.

1 LT NSP NSP

3002AM Deliverable

Software Outage Management Plan

(Scheduled)

3002AN Deliverable 1 LT NSP NSP

Software Outage Management Plan

3002AP Training

1 LT NSP NSP

3002AQ Deliverable

1 LT NSP NSP

3002AR Deliverable

Training Rosters for Completed

OPTION PERIOD THREE TOTAL $

OPTION PERIOD FOUR

This option may be exercised in accordance with FAR 52.217-9, Option to Extend the Term of the Contract.

Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer. If exercised, this option shall commence immediately after expiration of Option Period Three.

4001 Program Management licenses, labor, material, supplies, travel, and any other costs required for successful completion for the services in priced CLIN 4002.

4001AA Deliverable

PoP and updated throughout as specified in the contract.

Electronic submission to: VA PM, COR, CO

1 LT NSP NSP

4001AB Deliverable

Due within 10 business days of exercise, updated monthly by 7th business day of the month and as required

1 LT NSP NSP

4001AC Deliverable

Due 30 days after award and then by the

7th business day of the month.

1 LT NSP NSP

4001AD Deliverable exercise and updated as needed.

1 LT NSP NSP

4002 Solution Sustainment - Enterprise

12 MO $ $

licenses, labor, material, supplies, travel, and any other costs required for successful completion for the services

4002AA Outcomes Reporting

1 LT NSP NSP

4002AB Deliverable

CO.

1 LT NSP NSP

4002AC Operate and Maintain

1 LT NSP NSP

4002AD Monitor Performance and Reporting

1 LT NSP NSP

4002AE Deliverable

1 LT NSP NSP

4002AF Deliverable

4002AG Deliverable

1 LT NSP NSP

4002AH Deliverable

Quarterly Solution Performance

Report

1 LT NSP NSP

4002AJ Deliverable

Quarterly Resource Utilization

1 LT NSP NSP

4002AK Deliverable

1 LT NSP NSP

4002AL Software Outage Management Plan

1 LT NSP NSP

4002AM Deliverable

Software Outage Management Plan

(Scheduled)

4002AN Deliverable

Software Outage Management Plan

1 LT NSP NSP

4002AP Training

1 LT NSP NSP

4002AQ Deliverable

1 LT NSP NSP

4002AR Deliverable

Training Rosters for Completed

OPTION PERIOD FOUR TOTAL $

OPTIONAL TASK ONE – ENTERPRISE DEPLOYMENT

This optional task may be exercised at any time during the option periods. Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer.

PoP: Not to Exceed (NTE) 48 months

5001 Enterprise Deployment

IAW PWS 5.5.1

NTE

MO NTE

NTE

This CSLIN includes all term software travel, and any other costs required for successful completion for the services detailed in PWS paragraphs 5.5.1 and

The PoP shall not exceed 48 months.

Monthly payment shall be contingent on successful deployment and adherence to agreed upon deployment schedule.

5001AA Software Architecture and Design

5001AB Deliverable

1 LT NSP NSP

5001AC Deliverable

1 LT NSP NSP

5001AD Deliverable

1 LT NSP NSP

5001ADE Deliverable

5001AEF Deliverable

1 LT NSP NSP

5001AFG Deliverable

Due within12t weeks of the date of

1 LT NSP NSP

5001AGH Deliverable

Application Programing Interface

1 LT NSP NSP

5001AHJ Deliverable

Technical and User Documentation

1 LT NSP NSP

5001AJK VA Enterprise Cloud Implementation

Planning

5001AKL Deliverable

5001ALM Deliverable

Verification and Validation Test

1 LT NSP NSP

5001AMN Deliverable

1 LT NSP NSP

5001ANP Build and Development

The PoP shall not exceed 36 months

5001APQ Deliverable

VA Authority to Operate Artifacts

1 LT NSP NSP

5001AQR Deliverable

1 LT NSP NSP

5001ARS Implementation

5001AST Deliverable

1 LT NSP NSP

5001ATU Outcomes Reporting

5001AUV Deliverable

1 LT NSP NSP

5001AVW Training

5001AWX Deliverable

COR, CO.

1 LT NSP NSP

5001AXY Deliverable

Training Rosters for Completed

OPTIONAL TASK ONE TOTAL $

OPTIONAL TASK TWO – FULL CAPABILITY

This optional task may be exercised at any time during the base period or option periods. Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer.

PoP: NTE 48 months

6001 Full Capability

IAW PWS 5.5.2

This CSLIN includes all term software travel, and any other costs required for successful completion for the services detailed in PWS paragraphs 5.5.2 and

NTE

MO NTE

NTE

6001AA Software Architecture and Design

1 LT NSP NSP

6001AB Deliverable

1 LT NSP NSP

6001AC Deliverable

1 LT NSP NSP

6001AD Deliverable

6001ADE Deliverable

1 LT NSP NSP

6001AEF Deliverable

1 LT NSP NSP

6001AFG Deliverable

1 LT NSP NSP

6001AGH Deliverable

Application Programing Interface

1 LT NSP NSP

6001AHJ Deliverable

Technical and User Documentation

1 LT NSP NSP

6001AJK VA Enterprise Cloud Implementation

Planning

6001AKL Deliverable

1 LT NSP NSP

6001ALM Deliverable

Verification and Validation Test

1 LT NSP NSP

6001AMN Deliverable

1 LT NSP NSP

6001ANP Build and Development

1 LT NSP NSP

6001APQ Deliverable

VA Authority to Operate Artifacts

1 LT NSP NSP

6001AQR Deliverable

6001ARS Implementation

1 LT NSP NSP

6001AST Deliverable

1 LT NSP NSP

6001ATU Outcomes Reporting

1 LT NSP NSP

6001AUV Deliverable

1 LT NSP NSP

6001AVW Training

1 LT NSP NSP

6001AWX Deliverable

6001AXY Deliverable

Training Rosters for Completed

OPTIONAL TASK TWO TOTAL $

Summary:

TOTAL BASE PERIOD: $

TOTAL OPTION PERIOD ONE: $

TOTAL OPTION PERIOD TWO: $

TOTAL OPTION PERIOD THREE: $

TOTAL OPTION PERIOD FOUR: $

TOTAL OPTIONAL TASK ONE $

TOTAL OPTIONAL TASK TWO $

TOTAL CONTRACT PRICE: $

B.5 PERFORMANCE WORK STATEMENT

PERFORMANCE WORK STATEMENT (PWS)

DEPARTMENT OF VETERANS AFFAIRS

Office of Discovery, Education and Affiliate Networks (DEAN)

Office of Healthcare Innovation & Learning (OHIL)

Reducing Inappropriate Polypharmacy at the Department of Veterans Affairs

Date: December 22, 2025 January 15, 2026

VA-26-00018584

PWS Version Number: v45

1.0 BACKGROUND

The Office of Information and Technology (OIT), Office of Healthcare Innovation & Learning

(OHIL), and the Office of Discovery, Education and Affiliate Networks, aim to acquire a comprehensive software solution to address and reduce inappropriate polypharmacy. This acquisition is needed due to current VA-developed software not meeting current requirements.

Polypharmacy, characterized by the concurrent use of multiple medications or the use of unnecessary medications, elevates the risk of adverse drug events, medication non-adherence, drug-drug interactions, and increased healthcare costs. The primary goal is to identify cumulative multi-drug interactions, optimize medication regimens, and enhance clinical decision-making with evidence-based tools. This initiative is especially critical for Veterans with Post-Traumatic

Stress Disorder and other mental health conditions, who often require complex medication management. The project is aligned with VA's commitment to reduce the use of potentially inappropriate medications and improve patient safety across all care settings within the VA.

In November 2018, VA issued the Cloud First Policy mandating that all new and existing

Information Technology solutions be assessed to determine suitability to be offered as an enterprise cloud computing service. The VA Enterprise Cloud (VAEC) was established by the

Enterprise Cloud Solutions Office in 2017, to host cloud computing solutions. The solution shall be implemented and hosted in the VAEC.

2.0 APPLICABLE DOCUMENTS

In the performance of the tasks associated with this Performance Work Statement, the Contractor shall comply with the following:

1. “Federal Information Security Modernization Act of 2014”

2. Federal Information Processing Standards (FIPS) Publication 140-3, “Security

Requirements for Cryptographic Modules”, March 22, 2019

3. FIPS Pub 199. “Standards for Security Categorization of Federal Information and

Information Systems,” February 2004

4. FIPS Pub 200, “Minimum Security Requirements for Federal Information and

Information Systems,” March 2006

5. FIPS Pub 201-3, “Personal Identity Verification of Federal Employees and

Contractors,” January 2022

6. 10 U.S.C. § 2224, "Defense Information Assurance Program", as amended

7. 5 U.S.C. § 552a, as amended, “The Privacy Act of 1974”

8. Public Law 109-461 (P.L. 109-461), Veterans Benefits, Health Care, and

Information Technology Act of 2006, as amended, Title IX, Information Security

Matters

9. 42 U.S.C. § 2000d “Title VI of the Civil Rights Act of 1964”, as amended

10. VA Directive 0710, “Personnel Security and Suitability Program,” June 4, 2010, https://www.va.gov/vapubs/index.cfm

11. VA Handbook 0710, “Personnel Security and Suitability Program,” May 2, 2016, https://www.va.gov/vapubs/index.cfm

12. VA Directive 6102, “Internet/Intranet Services,” August 5, 2019

13. 36 C.F.R. Part 1194 “Information and Communication Technology Standards and

Guidelines,” as amended

14. Office of Management and Budget (OMB) Circular A-130, “Managing Federal

Information as a Strategic Resource,” July 28, 2016

15. 32 C.F.R. Part 199, “Civilian Health and Medical Program of the Uniformed

Services (CHAMPUS)”, as amended https://www.va.gov/vapubs/index.cfm https://www.va.gov/vapubs/index.cfm http://www.va.gov/vapubs http://www.va.gov/vapubs

16. NIST SP 800-66 Rev. 2, “Implementing the Health Insurance Portability and

Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide,”

February 2024

17. 45 C.F.R Parts 160 and 164, Subparts A and E, the Standards for Privacy of

Individually Identifiable Health Information (“Privacy Rule”); and 45 C.F.R. Parts

160 and 164, Subparts A and C, the Security Standard (“Security Rule”); as amended

18. Sections 504 and 508 of the Rehabilitation Act (29 U.S.C. § 794d), as amended

19. Homeland Security Presidential Directive (12) (HSPD-12), August 27, 2004

20. VA Directive 6500, “VA Cybersecurity Program,” February 24, 2021 (see VA

NOTICE 24-18, dated September 27, 2024, “Update to VA Directive 6500

Cybersecurity Program”, and VA Notice 25-07, dated 3/18/25, “Amending VA

Directive 6500 to incorporate M-24-15”)

21. VA Handbook 6500, “Risk Management Framework for VA Information Systems

VA Information Security Program,” February 24, 2021 (see VA Notice 25-01, dated

October 15, 2024, “Update to VA Handbook 6500 Risk Management Framework for

VA Information Systems VA Information Security Program”, and VA Notice 25-06, dated 3/18/25, “Amending VA Directive 6500 to incorporate M-24-15”)

22. VA Handbook 6500.2, “Management of Breaches Involving Sensitive Personal

Information (SPI),” June 30, 2023

23. VA Handbook 6500.6, “Contract Security,” March 12, 2010 (see VA Notice 24-12, dated April 22, 2024, “Update to VA Handbook 6500.6, Contract Security, Appendix C VA Information and Information System Security/Privacy Language

For Inclusion Into Contracts, As Appropriate”)

24. VA Handbook 6500.8, “Information System Contingency Planning,” March 25,

25. VA Handbook 6500.10, “Mobile Device Security Policy,” February 15, 2018

26. VA Handbook 6500.11, “VA Firewall Configuration,” August 22, 2017

27. OIT Process Asset Library (PAL), OIT Process Asset Library.

28. One-VA Technical Reference Model (TRM) (reference at https://www.va.gov/trm/TRMHomePage.aspx)

29. VA Directive 6508, “Implementation of Privacy Threshold Analysis and Privacy

Impact Assessment,” October 15, 2014

30. VA Directive 6510, “VA Identity, Credential and Access Management,” September

3, 2024

31. VA Handbook 6510, “VA Identity, Credential and Access Management,” September

27, 2024

32. VA Directive and Handbook 6513, “Secure External Connections,” October 12,

33. VA Directive 6300, “Records and Information Management,” September 21, 2018

34. VA Handbook, 6300.1, “Records Management Procedures,“ March 24, 2010

35. NIST SP 800-37 Rev 2, “Risk Management Framework for Information Systems and

Organizations: A System Life Cycle Approach for Security and Privacy,” December

36. NIST SP 800-53 Rev. 5, “Security and Privacy Controls for Federal Information

Systems and Organizations,” September 23, 2020 (includes updates as of

12/10/2020)

37. VA Directive 0735, “Homeland Security Presidential Directive 12 (HSPD-12)

Program,” October 26, 2015 https://digital.va.gov/process-asset-library/ https://www.va.gov/trm/TRMHomePage.aspx

38. VA Handbook 0735, “Homeland Security Presidential Directive 12 (HSPD-12)

Program,” March 24, 2014

39. OMB Memorandum 05-24, “Implementation of Homeland Security Presidential

Directive (HSPD) 12 – Policy for a Common Identification Standard for Federal

Employees and Contractors,” August 5, 2005

40. OMB Memorandum M-19-17, “Enabling Mission Delivery Through Improved

Identity, Credential, and Access Management,” May 21, 2019

41. OMB Memorandum, “Guidance for Homeland Security Presidential Directive

(HSPD) 12 Implementation,” May 23, 2008

42. Federal Identity, Credential, and Access Management (FICAM) Architecture, June

30, 2023 (FICAM Architecture (idmanagement.gov))

43. NIST SP 800-116 Rev 1, “Guidelines for the Use of Personal Identity Verification

(PIV) Credentials in Facility Access,“ June 2018

44. NIST SP 800-63-3, 800-63A, 800-63B, 800-63C, “Digital Identity Guidelines,” updated March 02, 2020

45. NIST SP 800-157, “Guidelines for Derived PIV Credentials,” December 2014

46. VA Memorandum, VAIQ #7100147, “Continued Implementation of Homeland

Security Presidential Directive 12 (HSPD-12),” April 29, 2011 (reference https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514)

47. IAM Identity Management Business Requirements Guidance document, May 2013, (reference Enterprise Architecture Section, PIV/IAM (reference https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514)

48. VA Memorandum “Personal Identity Verification (PIV) Logical Access Policy

Clarification,” July 17, 2019, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4896

49. Trusted Internet Connections (TIC) 3.0 Core Guidance Documents, https://www.cisa.gov/publication/tic-30-core-guidance-documents

50. OMB Memorandum M-19-26, “Update to the Trusted Internet Connections (TIC)

Initiative,” September 12, 2019

51. OMB Memorandum M-08-23, “Securing the Federal Government’s Domain Name

System Infrastructure,” August 22, 2008

52. Sections 524 and 525 of the Energy Independence and Security Act of 2007, (P.L.

110–140), December 19, 2007

53. Section 104 of the Energy Policy Act of 2005, (P.L. 109–58), August 8, 2005

54. Executive Order 13221, “Energy-Efficient Standby Power Devices,” August 2, 2001

55. VA Directive 0057, “VA Environmental Management Program,” October 25, 2022

56. Office of Information Security (OIS) VAIQ #7424808 Memorandum, “Remote

Access,” January 15, 2014, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28

57. Clinger-Cohen Act of 1996, 40 U.S.C. §11101 and §11103

58. “Veteran Focused Integration Process Guide 4.0,” March 2021, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4371

59. VA Memorandum “Proper Use of Email and Other Messaging Services,” January 2, 2018, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28

60. “Product Line Management Transformation Playbook” version 3.1, August 2023, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4946

61. NIST SP 500-267B Revision 1, “USGv6 Profile,” November 2020

62. OMB Memorandum M-21-07, “Completing the Transition to Internet Protocol

Version 6 (IPv6),” November 19, 2020 https://www.idmanagement.gov/arch/#:~:text=FICAM%20is%20the%20federal%20government%E2%80%99s%20enterprise%20approach%20to,identity%20processes%2C%20practices%2C%20policies%2C%20and%20information%20security%20disciplines.

https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514 https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514 https://www.voa.va.gov/DocumentView.aspx?DocumentID=4896 https://www.cisa.gov/publication/tic-30-core-guidance-documents https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28 https://www.voa.va.gov/DocumentView.aspx?DocumentID=4371 https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28 https://www.voa.va.gov/DocumentView.aspx?DocumentID=4946

63. Social Security Number (SSN) Fraud Prevention Act of 2017

64. Section 240 of the Consolidated Appropriations Act (CAA) 2018, March 23, 2018

65. C.F.R Title 15 Part 7, “Securing the Information and Communications Technology and Services (ICTS) Supply Chain”, as amended

66. Executive Order 14028, “Executive Order on Improving the Nation's

Cybersecurity,” May 12, 2021, https://bidenwhitehouse.archives.gov/briefing-room/presidential-actions/2025/01/16/executive-order-on-strengthening-and-promoting-innovation-in-the-nations-cybersecurity/

67. OMB Memorandum M-22-09, “Moving the U.S. Government Toward Zero Trust

Cybersecurity Principles”, January 26, 2022, https://www.whitehouse.gov/wp-content/uploads/2022/01/M-22-09.pdf.

68. NIST SP 800-52 Revision 2, “Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations

69. OMB M-22-18, “Enhancing the Security of the Software Supply Chain through

Secure Software Development Practices,” September 14, 2022

70. OMB M-23-16, “Update to Memorandum M-22-18,” June 9, 2023

71. OMB M-21-31, “Improving the Federal Government’s Investigative and

Remediation Capabilities Related to Cybersecurity Incidents,” August 27, 2021

72. NIST SP 800-88 Revision 1 “Guidelines for Media Sanitization,” December 2014

73. CISA Binding Operational Directive (BOD) 19-02: “Vulnerability Remediation

Requirements of Internet-Accessible Systems,” April 29, 2019, BOD 19-02:

Vulnerability Remediation Requirements for Internet-Accessible Systems | CISA

74. CISA BOD 22-01: “Reducing the Significant Risk of Known Exploited

Vulnerabilities,” November 3, 2021, BOD 22-01: Reducing the Significant Risk of

Known Exploited Vulnerabilities | CISA

75. CISA BOD 23-01: Improving Asset Visibility and Vulnerability Detection on

Federal Networks.” Cybersecurity & Infrastructure Security Agency (CISA), BOD

23-01: Improving Asset Visibility and Vulnerability Detection on Federal Networks |

CISA

76. VA Directive 6550, Pre-Procurement Assessment and Implementation of Medical

Devices/Systems, June 03, 2019

77. VA Memorandum, “VA Security Controls,” January 17, 2025, https://www.voa.va.gov/DocumentView.aspx?DocumentID=5010

78. 38 CFR 17.96, Medication prescribed by non-VA physicians, https://www.ecfr.gov/current/title-38/section-17.96

79. VA/DoD Clinical Practice Guideline for Management of Bipolar Disorder. Version

2.0, 2023, https://www.healthquality.va.gov/guidelines/MH/bd/VA-DOD-CPG-BD-

Full-CPGFinal508.pdf

80. VA/DoD Clinical Practice Guideline for Assessment and Management of Patients at

Risk for Suicide. Version 3.0, 2024, https://www.healthquality.va.gov/guidelines/MH/srb/VADOD-CPG-Suicide-Risk-

Full-CPG-2024_Final_508.pdf

81. VA/DoD Clinical Practice Guideline for Management of Posttraumatic Stress

Disorder and Acute Stress Disorder. Version 4.0, 2023, https://www.healthquality.va.gov/guidelines/MH/ptsd/VA-DoD-CPG-PTSD-Full-

CPG-Edited-111624-V5-81825.pdf

82. VA/DoD Clinical Practice Guideline for Management of First-Episode Psychosis and Schizophrenia. Version 2.0, 2023, https://bidenwhitehouse.archives.gov/briefing-room/presidential-actions/2025/01/16/executive-order-on-strengthening-and-promoting-innovation-in-the-nations-cybersecurity/ https://bidenwhitehouse.archives.gov/briefing-room/presidential-actions/2025/01/16/executive-order-on-strengthening-and-promoting-innovation-in-the-nations-cybersecurity/ https://bidenwhitehouse.archives.gov/briefing-room/presidential-actions/2025/01/16/executive-order-on-strengthening-and-promoting-innovation-in-the-nations-cybersecurity/ https://www.whitehouse.gov/wp-content/uploads/2022/01/M-22-09.pdf https://www.whitehouse.gov/wp-content/uploads/2022/01/M-22-09.pdf https://www.cisa.gov/news-events/directives/bod-19-02-vulnerability-remediation-requirements-internet-accessible-systems https://www.cisa.gov/news-events/directives/bod-19-02-vulnerability-remediation-requirements-internet-accessible-systems https://www.cisa.gov/news-events/directives/bod-22-01-reducing-significant-risk-known-exploited-vulnerabilities https://www.cisa.gov/news-events/directives/bod-22-01-reducing-significant-risk-known-exploited-vulnerabilities https://www.cisa.gov/news-events/directives/bod-23-01-improving-asset-visibility-and-vulnerability-detection-federal-networks https://www.cisa.gov/news-events/directives/bod-23-01-improving-asset-visibility-and-vulnerability-detection-federal-networks https://www.cisa.gov/news-events/directives/bod-23-01-improving-asset-visibility-and-vulnerability-detection-federal-networks https://www.voa.va.gov/DocumentView.aspx?DocumentID=5010 https://www.ecfr.gov/current/title-38/section-17.96 https://www.healthquality.va.gov/guidelines/MH/bd/VA-DOD-CPG-BD-Full-CPGFinal508.pdf https://www.healthquality.va.gov/guidelines/MH/bd/VA-DOD-CPG-BD-Full-CPGFinal508.pdf https://www.healthquality.va.gov/guidelines/MH/srb/VADOD-CPG-Suicide-Risk-Full-CPG-2024_Final_508.pdf https://www.healthquality.va.gov/guidelines/MH/srb/VADOD-CPG-Suicide-Risk-Full-CPG-2024_Final_508.pdf https://www.healthquality.va.gov/guidelines/MH/ptsd/VA-DoD-CPG-PTSD-Full-CPG-Edited-111624-V5-81825.pdf https://www.healthquality.va.gov/guidelines/MH/ptsd/VA-DoD-CPG-PTSD-Full-CPG-Edited-111624-V5-81825.pdf https://www.healthquality.va.gov/guidelines/MH/scz/VA-DOD-CPG-Schizophrenia-

CPG_Finalv231924.pdf

83. VA/DoD Clinical Practice Guideline for the Management of Major Depressive

Disorder. Version 4.0, 2022, https://www.healthquality.va.gov/guidelines/MH/mdd/VADODMDDCPGFinal508.

pdf

84. VA/DoD Clinical Practice Guideline for the Management of Substance Use

Disorders. Version 5.0, 2021, https://www.healthquality.va.gov/guidelines/MH/sud/VA-DoD-SUD-

CPG_Final_for-508_v3.pdf

85. Veterans Health Administration (VHA) Directive 1108.08, VHA Formulary

Management Process, July 29, 2022, https://www.va.gov/vhapublications/ViewPublication.asp?pub_ID=9889

86. VHA Directive 1108.13, Provision and Use of Nursing Medication Management

Protocols In Outpatient Team-Based Practice Settings, February 6, 2019, https://www.va.gov/vhapublications/ViewPublication.asp?pub_ID=8199

87. VHA Directive 1164, Essential Medication Information Standards, July 13, 2023, https://www.va.gov/vhapublications/ViewPublication.asp?pub_ID=11372

88. VHA Directive 1345, Medication Reconciliation, March 9, 2022, https://www.va.gov/vhapublications/ViewPublication.asp?pub_ID=9702

89. VHA Directive 6371, Electronic Health Information Exchange for Treatment, April

30, 2019, https://www.va.gov/vhapublications/ViewPublication.asp?pub_ID=8310

90. VA Directive 6066, “Protected Health Information (PHI) And Business Associate

Agreements Management”, September 2, 2014

91. VA Enterprise Cloud Technical Reference Guide, Version 1.3 July 2018

92. 170.205(b)(2) National Council for Prescription Drug Programs (NCPDP) SCRIPT

Standard, Implementation Guide, Version 10.6, October, 2008, (Approval date for

American National Standards Institute (ANSI) November 12, 2008) 1. 170.314(b)(3)

Electronic prescribing.

3.0 SCOPE OF WORK

The Contractor shall provide a software solution capable of identifying and reducing inappropriate polypharmacy among Veterans. The system shall automatically consolidate VA and community-prescribed medications, assign risk scores at both patient and medication levels, and flag potential risks including side effects, drug-drug interactions, duplication of therapy, and fall risk. The solution shall support safe deprescribing, shared decision-making, and care team collaboration while integrating seamlessly with VA systems, including Computerized Patient

Records System (CPRS)/ Veterans Health Information Systems and Technology Architecture and Cerner/Oracle Health. The software shall facilitate population management, medication reconciliation, and outcomes tracking. The Contractor shall ensure compliance with all VA information technology and security standards.

This solution shall be hosted in the VAEC environment. The Contractor shall coordinate with

VA to determine the best Cloud Service Provider (CSP) for the solution. The Contractor shall not be responsible for providing or acquiring cloud capacity or server hosting infrastructure for this contract. VA will furnish VAEC capacity as Government Furnished Equipment (GFE). The polypharmacy software will be deployed under the VA Clinical Decision Support (CDS) platform.

https://www.healthquality.va.gov/guidelines/MH/scz/VA-DOD-CPG-Schizophrenia-CPG_Finalv231924.pdf https://www.healthquality.va.gov/guidelines/MH/scz/VA-DOD-CPG-Schizophrenia-CPG_Finalv231924.pdf https://www.healthquality.va.gov/guidelines/MH/mdd/VADODMDDCPGFinal508.pdf https://www.healthquality.va.gov/guidelines/MH/mdd/VADODMDDCPGFinal508.pdf https://www.healthquality.va.gov/guidelines/MH/sud/VA-DoD-SUD-CPG_Final_for-508_v3.pdf https://www.healthquality.va.gov/guidelines/MH/sud/VA-DoD-SUD-CPG_Final_for-508_v3.pdf https://www.va.gov/vhapublications/ViewPublication.asp?pub_ID=9889 https://www.va.gov/vhapublications/ViewPublication.asp?pub_ID=8199 https://www.va.gov/vhapublications/ViewPublication.asp?pub_ID=11372 https://www.va.gov/vhapublications/ViewPublication.asp?pub_ID=9702 https://www.va.gov/vhapublications/ViewPublication.asp?pub_ID=8310

4.0 PERFORMANCE DETAILS

4.1 PERFORMANCE PERIOD

The period of performance shall be one, 6-month base period with four, 12-month option periods inclusive of two optional tasks for enterprise-wide deployment and full capability. VA requires the software solution to be implemented at pilot sites within 26 weeks of award. The pilot sites allow VA to test the software’s capabilities and functionality within the VA environment and allow the Contractor to make modifications if required. This pilot testing shall be completed within six months of the award. Once proven to be functional (even if before six months), Option

Period One will be executed, and the vendor shall be ready for enterprise deployment within six months of the execution of Option Period One. In addition to enterprise deployment, the

Contractor shall provide initial training to…

This is the start of the file's text. The full file is on GovTribe.

File details come from the government source that posted it. Updated .