Polypharmacy 36C10B26R0004_Amended_1.20.26 .pdf
PDF 1 MB Posted
- Attached to
- DA01--New Contract - Polypharmacy (VA-26-00018584) Federal contract opportunity
- Solicitation number
- 36C10B26R0004
About this file
This is a Request for Proposal (RFP) for the development and implementation of a comprehensive polypharmacy management software solution for the Department of Veterans Affairs (VA). The solicitation, numbered 36C10B26R0004 and issued by the VA Technology Acquisition Center, seeks a firm-fixed-price contract valued at approximately $47 million with a deadline of January 28, 2026 at 4:00 PM ET. The solution must identify and reduce inappropriate polypharmacy among Veterans by consolidating VA and community-prescribed medications, assigning risk scores at patient and medication levels, flagging potential risks including drug-drug interactions and fall risk, and supporting safe deprescribing and shared decision-making. The software must integrate seamlessly with VA systems including CPRS and the Federal EHR, facilitate population management and medication reconciliation, and be hosted in the VA Enterprise Cloud (VAEC) environment.
The contract structure includes a six-month base period for pilot implementation at 10 VA Medical Centers, four 12-month option periods for expanded enterprise deployment, and two optional tasks for enterprise-wide deployment and full capability features. The base period focuses on software architecture, VAEC implementation planning, build and development, implementation, and outcomes reporting. Option periods transition to integrated pilots at 20 additional VAMCs and enterprise-wide sustainment including 24/7/2-hour response support. The proposal must be submitted in six volumes covering technical approach, past performance, small business participation commitment, veterans involvement, pricing, and certifications. Evaluation will prioritize technical capability and past performance of comparable polypharmacy software implementations, followed by small business participation (minimum 10-17.5% including specific goals for SDBs, WOSBs, HUBZone, VOSBs, and SDVOSBs), veteran involvement, and price. Contractors must demonstrate compliance with VA security requirements, including Zero Trust architecture, Federal identity and credential management, IPv6 support, and comprehensive information security and privacy controls.
View the file
Other files for this federal contract opportunity
| File | Type | Posted |
|---|---|---|
| SF30_36C10B26R0004_Amendment 0002.pdf | ||
| 36C10B26R0004 0002_1.docx | DOCX document | |
| Attachment 2 - Small Business Participation Commitment_1.16.26.xls | XLS spreadsheet | |
| Attachment 1_Business Associates Agreement_VHA.docx | DOCX document | |
| QA_Polypharmacy 36C10B26R0004_1.20.26 .pdf | ||
| Attachment 3 - Small Business Participation Subcontracting Report_1.16.26.xlsx | XLSX spreadsheet | |
| 36C10B26R0004 0001.docx | DOCX document | |
| 36C10B26R0004 0001_SF30.pdf | ||
| Attachment 1 - BAA Agreement.doc | DOC document | |
| Attachment 2 - Small Business Participation Commitment.xls | XLS spreadsheet | |
| Polypharmacy 36C10B26R0004_Final.pdf | ||
| 36C10B26R0004_1.docx | DOCX document |
Show all 12
On GovTribe
Work with this file on GovTribe
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
PAGE 1 OF 1. REQUISITION NO.
2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NO. 5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE
a. NAME b. TELEPHONE NO. (No Collect Calls) 8. OFFER DUE DATE/LOCAL
TIME
9. ISSUED BY CODE 10. THIS ACQUISITION IS UNRESTRICTED OR SET ASIDE: % FOR:
SMALL BUSINESS
HUBZONE SMALL
BUSINESS
SERVICE-DISABLED
VETERAN-OWNED
SMALL BUSINESS
WOMEN-OWNED SMALL BUSINESS
(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED
SMALL BUSINESS PROGRAM
EDWOSB
8(A)
NAICS:
SIZE STANDARD:
11. DELIVERY FOR FOB DESTINA-
TION UNLESS BLOCK IS
MARKED
SEE SCHEDULE
12. DISCOUNT TERMS
13a. THIS CONTRACT IS A
RATED ORDER UNDER
DPAS (15 CFR 700)
13b. RATING
14. METHOD OF SOLICITATION
RFQ IFB RFP
15. DELIVER TO CODE 16. ADMINISTERED BY CODE
17a. CONTRACTOR/OFFEROR CODE FACILITY CODE 18a. PAYMENT WILL BE MADE BY CODE
TELEPHONE NO. UEI: EFT:
PHONE: FAX:
17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER
18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW IS CHECKED
SEE ADDENDUM
19. 20. 21. 22. 23. 24.
ITEM NO. SCHEDULE OF SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT
(Use Reverse and/or Attach Additional Sheets as Necessary)
25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Govt. Use Only)
27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA ARE ARE NOT ATTACHED.
27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED
28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN _______________ 29. AWARD OF CONTRACT: REF. ___________________________________ OFFER
COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DATED ________________________________. YOUR OFFER ON SOLICITATION
DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY (BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE
ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED SET FORTH HEREIN IS ACCEPTED AS TO ITEMS:
30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)
30b. NAME AND TITLE OF SIGNER (TYPE OR PRINT) 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (TYPE OR PRINT) 31c. DATE SIGNED
AUTHORIZED FOR LOCAL REPRODUCTION (REV. NOV 2021)
PREVIOUS EDITION IS NOT USABLE Prescribed by GSA - FAR (48 CFR) 53.212
7. FOR SOLICITATION
INFORMATION CALL:
STANDARD FORM 1449
SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES
OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30
TBD
TBD TBD
TBD 36C10B26R0004 12-23-2025
Elena Juliano, Elena.Juliano@va.gov 848-377-5246 01-28-2026
4:00PM ET
Department of Veterans Affairs
Office of Procurement, Acquisition and
Logistics (OPAL)
Technology Acquisition Center
23 Christopher Way
Eatontown NJ 07724
X
513210
N/A
X
See Schedule of Supplies/Services
OPAL
Technology Acquisition Center
Eatontown NJ 07724
TBD
Technology Acquisition Center
Financial Services Center
PO Box 149971
Austin TX 78714-8971
See website at: http://www.fsc.va.gov/einvoice.asp
See CONTINUATION Page
Reducing Inappropriate Polypharmacy at the Department of
Veterans Affairs
Per Federal Acquisition Regulation (FAR) 52.204-7, offerors will be required to have an active Federal Government contracts registration in SAM when submitting an offer or quotation in response to this solicitation and at the time of award.
Having only a Unique Entity Identifier (UEI) may not suffice.
The Government must be able to identify socio-economic data, representations and certifications, and other offeror information.
This effort shall be firm-fixed price.
POCs:
CO: John Vardouniotis, ioannis.vardouniotis@va.gov
CS: Elena Juliano, Elena.Juliano@va.gov
See CONTINUATION Page
X X
John Vardouniotis
$47 million
Request for Proposal # 36C10B26R0004 Amendment 0002
Table of Contents
SECTION B - CONTINUATION OF SF 1449 BLOCKS
B.1 CONTRACT ADMINISTRATION DATA
B.2 GOVERNING LAW
B.3 SOFTWARE LICENSE, MAINTENANCE AND TECHNICAL SUPPORT
B.4 SCHEDULE OF SUPPLIES/SERVICES
B.5 PERFORMANCE WORK STATEMENT
SECTION C - CONTRACT CLAUSES
C.1 FAR 52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)
C.2 FAR 52.217-7 OPTION FOR INCREASED QUANTITY-SEPARATELY PRICED LINE
ITEM (MAR 1989)
C.3 FAR 52.217-8 OPTION TO EXTEND SERVICES (NOV 1999)
C.4 FAR 52.217-9 OPTION TO EXTEND THE TERM OF THE CONTACT (MAR 2000)
C.5 VAAR 852.204-71 INFORMATION AND INFORMATION SYSTEMS SECURITY (FEB
2023)
C.6 VAAR 852.211-76 LIQUIDATED DAMAGES—REIMBURSEMENT FOR DATA
BREACH COSTS (FEB 2023)
C.7 VAAR 852.239-76 INFORMATION AND COMMUNICATION TECHNOLOGY
ACCESSIBILITY (FEB 2023)
C.8 SMALL BUSINESS PARTICIPATION REQUIREMENTS
SECTION D - CONTRACT DOCUMENTS, EXHIBITS, OR ATTACHMENTS
SECTION E - SOLICITATION PROVISIONS
E.1 FAR 52.252-1 SOLICITATION PROVISIONS INCORPORATED BY REFERENCE (FEB
1998)
E.2 FAR 52.209-5 CERTIFICATION REGARDING RESPONSIBILITY MATTERS (AUG
2020) REPRESENTATION REGARDING CERTAIN TELECOMMUNICATIONS AND
VIDEO SURVEILLANCE SERVICES OR EQUIPMENT (NOV 2025 DEVIATION)
E.3 FAR 52.209-7 INFORMATION REGARDING RESPONSIBILITY MATTERS (NOV 2025
DEVIATION)
E.4 FAR 52.209-11 REPRESENTATION BY CORPORATIONS REGARDING DELINQUENT
TAX LIABILITY OR A FELONY CONVICTION UNDER ANY FEDERAL LAW (NOV 2025
DEVIATION)
E.5 FAR 52.216-1 TYPE OF CONTRACT (APR 1984)
E.6 FAR 52.233-2 SERVICE OF PROTEST (SEP 2006)
E.7 SUBMISSION INSTRUCTIONS
E.8 BASIS FOR AWARD
SECTION B - CONTINUATION OF SF 1449 BLOCKS
B.1 CONTRACT ADMINISTRATION DATA
1. Contract Administration: All contract administration matters will be handled by the following individuals:
a. CONTRACTOR: TBD
b. GOVERNMENT: Contracting Officer 36C10B
Technology Acquisition Center
Eatontown, NJ 07724
2. CONTRACTOR REMITTANCE ADDRESS: All payments by the Government to the contractor will be made in accordance with:
[X] 52.232-33, Payment by Electronic Funds Transfer—System For Award
Management, or
[ ] 52.232-36, Payment by Third Party
3. INVOICES: Invoices shall be submitted in arrears:
a. Quarterly []
b. Semi-Annually []
c. Other [IAW Section B.4 Schedule of Supplies/Services and acceptance of deliverables]
4. GOVERNMENT INVOICE ADDRESS: All Invoices from the contractor shall be submitted electronically in accordance with VA Acquisition Regulation (VAAR) Clause
852.232-72 Electronic Submission of Payment Requests.
See website at: http://www.fsc.va.gov/einvoice.asp
5. ACKNOWLEDGMENT OF AMENDMENTS: The offeror acknowledges receipt of amendments to the Solicitation numbered and dated as follows:
AMENDMENT NO DATE
A0001 1/13/2026
A0002 1/20/2026 http://www.fsc.va.gov/einvoice.asp
B.2 GOVERNING LAW
Federal law and regulations, including the Federal Acquisition Regulations (FAR), shall govern this Contract/Order. Commercial license agreements may be made a part of this Contract/Order but only if both parties expressly make them an addendum hereto, as permitted by FAR 12.212.
If the commercial license agreement is not made an addendum, it shall not apply, govern, be a part of or have any effect whatsoever on the Contract/Order; this includes, but is not limited to, any agreement embedded in the computer software (clickwrap), any agreement that is otherwise delivered with or provided to the Government with the commercial computer software or documentation (shrinkwrap), or any other license agreement otherwise referred to in any document. If a commercial license agreement is made an addendum, only those provisions addressing data rights regarding the Government’s use, duplication and disclosure of data (e.g., restricted computer software) are included and made a part of this Contract/Order, and only to the extent that those provisions are not duplicative or inconsistent with Federal law, Federal regulation, the incorporated FAR clauses and the provisions of this Contract/Order; those provisions in the commercial license agreement that do not address data rights regarding the
Government’s use, duplication and disclosure of data shall not be included or made a part of the
Contract/Order. Federal law and regulation including, without limitation, the Contract Disputes
Act (41 U.S.C. § 7101 et seq.), the Anti-Deficiency Act (31 U.S.C. § 1341 et seq.), the
Competition in Contracting Act (41 U.S.C. § 3301 et seq.), the Prompt Payment Act (31 U.S.C. §
3901 et seq.), Contracts for Data Processing or Maintenance (38 USC § 5725), and FAR clauses
52.212-4, 52.227-14, 52.227-19 shall supersede, control, and render ineffective any inconsistent, conflicting, or duplicative provision in any commercial license agreement. In the event of conflict between this clause and any provision in the Contract/Order or the commercial license agreement or elsewhere, the terms of this clause shall prevail. The Contractor shall deliver to the
Government all data first produced under this Contract/Order with unlimited rights as defined by
FAR 52.227-14. Claims of patent or copyright infringement brought against the Government as a party shall be defended by the U.S. Department of Justice (DOJ) in accordance with 28 U.S.C. §
516; at the discretion of DOJ, the Contractor may be allowed reasonable participation in the defense of the litigation. Any additional changes to the Contract/Order must be made by modification (Standard Form 30) and shall only be made by a warranted Contracting Officer.
Nothing in this Contract/Order or any commercial license agreement shall be construed as a waiver of sovereign immunity.
B.3 SOFTWARE LICENSE, MAINTENANCE AND TECHNICAL SUPPORT
(1) Definitions.
(a) Licensee. The term “licensee” shall mean the U.S. Department of Veterans Affairs
(“VA”) and is synonymous with “Government.”
(b) Licensor. The term “licensor” shall mean the contractor having the necessary license or ownership rights to deliver license, software maintenance and support of the computer software being acquired. The term “contractor” is the party identified in Block 17a on the
SF1449. If the contractor is a reseller and not the Licensor, the contractor remains responsible for performance under this order.
(c) Software. The term “software” shall mean the licensed computer software product(s) cited in the Schedule of Supplies/Services.
(d) Maintenance. The term “maintenance” is the process of enhancing and optimizing software, as well as remedying defects. It shall include all new fixes, patches, releases, updates, versions and upgrades, as further defined below.
(e) Technical Support. The term “technical support” refers to the range of services providing assistance for the software via the telephone, email, a website or otherwise.
(f) Release or Update. The term “release” or “update” are terms that refer to a revision of software that contains defect corrections, minor enhancements or improvements of the software’s functionality. This is usually designated by a change in the number to the right of the decimal point (e.g., from Version 5.3 to 5.4). An example of an update is the addition of new hardware.
(g) Version or Upgrade. The term “version” or “upgrade” are terms that refer to a revision of software that contains new or improved functionality. This is usually designated by a change in the number to the left of the decimal point (e.g., from Version 5.4 to 6).
(2) Software License
(a) Unless otherwise stated in the Schedule of Supplies/Services, the
Performance Work Statement or Product Description, the software license provided to the Government is a perpetual, nonexclusive license to use the software
(b) The Government may use the software in a networked environment.
(c) Any dispute regarding the license grant or usage limitations shall be resolved in accordance with the Disputes Clause incorporated in FAR 52.212-4(d).
(d) All limitations of software usage are expressly stated in the Schedule of
Supplies/Services and the Performance Work Statement/Product
Description.
(3) Software Maintenance and Technical Support
(a) If the Government desires to continue software maintenance and support beyond the period of performance identified in this contract or order, the
Government will issue a separate contract or order for maintenance and support. Conversely, if a contract or order for continuing software maintenance and technical support is not received the contractor is neither authorized nor permitted to renew any of the previously furnished services.
(b) The contractor shall provide software support services, which includes periodic updates, enhancements and corrections to the software, and reasonable technical support, all of which are customarily provided by the contractor to its commercial customers so as to cause the software to perform according to its specifications, documentation or demonstrated claims.
(c) Any telephone support provided by contractor shall be at no additional cost.
(d) The contractor shall provide all maintenance services in a timely manner in accordance with the contractor’s customary practice or as defined in the Performance Work
Statement/Product Description. However, prolonged delay (exceeding 2 business days) in resolving software problems will be noted in the Government’s various past performance records on the contractor (e.g., www.ppirs.gov).
(e) If the Government allows the maintenance and support to lapse and subsequently wishes to reinstate it, any reinstatement fee charged shall not exceed the amounts that would have been charged if the Government had not allowed the subscription to lapse.
(4) Disabling Software Code. The Government requires delivery of computer software that does not contain any code that will, upon the occurrence or the nonoccurrence of any event, disable the software. Such code includes but is not limited to a computer virus, restrictive key, node lock, time-out or other function, whether implemented by electronic, mechanical, or other means, which limits or hinders the use or access to any computer software based on residency on a specific hardware configuration, frequency of duration of use, or other limiting criteria. If any such disabling code is present, the contractor agrees to indemnify the
Government for all damages suffered as a result of a disabling caused by such code, and the contractor agrees to remove such code upon the Government’s request at no extra cost to the
Government. Inability of the contractor to remove the disabling software code will be considered an inexcusable delay and a material breach of contract, and the Government may exercise its right to terminate for cause. In addition, the Government is permitted to remove the code as it deems appropriate and charge the Contractor for consideration for the time and effort expended in removing the code.
(5) Manuals and Publications. Upon Government request, the contractor shall furnish the most current version of the user manual and publications for all products/services provided under this contract or order at no cost.
http://www.ppirs.gov/
B.4 SCHEDULE OF SUPPLIES/SERVICES
Offerors are instructed to complete Section B.4 and submit with their quote.
Offerors are cautioned that alterations to the line items as specified below may render quotes unacceptable.
Inspection/Acceptance: Destination
BASE PERIOD
Period of Performance (PoP): Six 12 months
Product Service Code (PSC): DA01 for all Contract Line-Item Numbers (CLIN) unless otherwise noted.
CLIN/SLIN Description Qty Unit Unit Price Total Price
0001 Program Management
In accordance with (IAW) Performance
Work Statement (PWS) Paragraph 5.1 including all its subparagraphs.
Firm Fixed Price (FFP)
This CLIN includes all term software licenses, labor, material, supplies, travel, and any other costs required for successful completion for the services detailed in PWS paragraphs 5.1 inclusive of all subparagraphs.
The PoP shall be six months from the date of award.
The price of this CLIN shall be included in priced CLIN 0002.
6 Month
(MO)
Not Separately
Priced (NSP)
NSP
0001AA Deliverable
Kickoff Meeting Presentation
IAW PWS 5.1.1
Due five days after the beginning of the
PoP.
Electronic submission to: VA PM, COR, CO
1 Lot
(LT)
NSP NSP
0001AB Deliverable
Contractor Project Management Plan
IAW PWS 5.1.2
Due within 10 business days of award and updated monthly by 7th business day of the month. Update as needed throughout the PoP.
1 LT NSP NSP
0001AC Deliverable 1 LT NSP NSP
Monthly Progress Reports
IAW PWS 5.1.3
Due 30 days after award and then by the
7th business day of each month.
0001AD Deliverable
Contractor Staff Roster
IAW PWS 6.2.2
Due within three business days after award and updated as needed.
1 LT NSP NSP
0002 Base Period - Pilot Phase
IAW PWS 5.2 including all of its subparagraphs
FFP
travel, and any other costs required for successful completion for the services detailed in PWS paragraphs 5.2 and all of its subparagraphs.
6 MO $ $
0002AA Software Architecture and Design
IAW PWS 5.2.1
1 LT NSP NSP
0002AB Deliverable
Solution Architecture
Due within eight weeks of the date of award.
COR, CO.
1 LT NSP NSP
0002AC Deliverable
Solution Design
0002AD Deliverable
Source Code
1 LT NSP NSP
0002ADE Deliverable
Configuration Files
1 LT NSP NSP
0002AEF Deliverable
Build and Deployment Scripts
IAW PWS 5.2.1
1 LT NSP NSP
0002AFG Deliverable
Database Schemas
1 LT NSP NSP
0002AGH Deliverable
Application Programing Interface
Specifications
1 LT NSP NSP
0002AHJ Deliverable
Technical and User Documentation
0002AJK VA Enterprise Cloud (VAEC)
Implementation Planning
IAW PWS 5.2.2
1 LT NSP NSP
0002AKL Deliverable
VAEC Implementation Plan
1 LT NSP NSP
0002ALM Deliverable
Verification and Validation Test
Plans
1 LT NSP NSP
0002AMN Deliverable
Software Testing Scripts
1 LT NSP NSP
0002ANP Build and Development
IAW PWS 5.2.3
This SLIN includes all term software travel, and any other costs required for successful completion for the services detailed in PWS paragraphs 5.2.3 and all of its subparagraphs.
0002APQ Deliverable
VA Authority to Operate (ATO)
Artifacts
Due within 10 weeks of the date of
1 LT NSP NSP
0002AQR Deliverable
Production Readiness Review
Documentation
Due within 10 weeks of the date of
1 LT NSP NSP
0002ARS Implementation
IAW PWS 5.2.4
1 LT NSP NSP
0002AST Deliverable
Implementation Summary Report
Due within 12 weeks of the date of
1 LT NSP NSP
0002ATU Outcomes Reporting
IAW PWS 5.2.5
1 LT NSP NSP
0002AUV Deliverable
Outcomes Report
Due within 20 weeks of the date of
COR, CO.
0002AVW Clinical User Access and Engagement
Reporting
IAW PWS 5.2.12
1 LT NSP NSP
0002AWX Data Analytics
IAW PWS 5.2.13
1 LT NSP NSP
0002AXY Training
IAW PWS 5.2.14
1 LT NSP NSP
0002AYZ Deliverable
Training Materials
One week prior to training
COR, CO.
1 LT NSP NSP
0002BA Deliverable
Training Rosters for Completed
Training
Due within one week post training.
BASE PERIOD TOTAL $
OPTION PERIOD ONE
This option may be exercised in accordance with FAR 52.217-9, Option to Extend the Term of the Contract.
Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer. If exercised, this option shall commence immediately after expiration of the Base Period.
Period of Performance: 12 months
PSC: DA01 for all CLINs unless otherwise noted.
1001 Program Management
IAW PWS 5.1 including all its subparagraphs.
travel, and any other costs required for successful completion for the services
The PoP shall be 12 months from the date of exercise.
in priced CLIN 1002.
12 MO NSP NSP
1001AA Deliverable
Due within five days after the beginning of the PoP and updated throughout as specified in the contract.
1 LT NSP NSP
1001AB Deliverable
Due within 10 business days of exercise, updated monthly by 7th business day of the month and as required.
1 LT NSP NSP
1001AC Deliverable
Due monthly on the 7th business day of the month.
1001AD Deliverable
Updated as required.
1 LT NSP NSP
1002 Integrated Pilot
IAW PWS 5.3.1 including all its travel, and any other costs required for successful completion for the services
Monthly payment shall be contingent on successful deployment and adherence to agreed upon deployment schedule.
12 MO $ $
1002AA Software Architecture and Design
1 LT NSP NSP
1002AB Deliverable
Solution Architecture Updates exercise.
1 LT NSP NSP
1002AC Deliverable
Solution Design Updates
1002AD Deliverable
1 LT NSP NSP
1002ADE Deliverable
1 LT NSP NSP
1002AEF Deliverable
Build and Deployment Scripts
1 LT NSP NSP
1002AFG Deliverable
Database Schemas Updates
1 LT NSP NSP
1002AGH Deliverable
Application Programing Interface
Specifications Updates
1002AHJ Deliverable 1 LT NSP NSP
Technical and User Documentation
Updates
1002AJK VA Enterprise Cloud Implementation
Planning Updates
1 LT NSP NSP
1002AKL Deliverable
VAEC Implementation Plan Updates
Due within 24 weeks of the date of
1 LT NSP NSP
1002ALM Deliverable
Verification and Validation Test
Plans Updates
Due within 42 weeks of the date of
1 LT NSP NSP
1002AMN Deliverable
Software Testing Scripts Updates
1 LT NSP NSP
1002ANP Build and Development
1002APQ Deliverable 1 LT NSP NSP
VA Authority to Operate Artifacts
Due within 44 weeks of the date of
1002AQR Deliverable
Production Readiness Review
1 LT NSP NSP
1002ARS Implementation
1 LT NSP NSP
1002AST Deliverable
Due within 46 weeks of the date of
1 LT NSP NSP
1002AU Outcomes Reporting
1 LT NSP NSP
1002AUV Deliverable
Due within 52 weeks from the date of
1 LT NSP NSP
1002AVW Training
1002AWX Deliverable
Training Materials
1 LT NSP NSP
1002AXY Deliverable
Training Rosters for Completed
OPTION PERIOD ONE TOTAL $
OPTION PERIOD TWO
This option may be exercised in accordance with FAR 52.217-9, Option to Extend the Term of the Contract.
Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer. If exercised, this option shall commence immediately after expiration of Option Period One.
2001 Program Management travel, and any other costs required for successful completion for the services in priced CLIN 2002.
12 MO NSP NSP
2001AA Deliverable
Kickoff Meeting Presentation
PoP and updated throughout as
2001AB Deliverable
Update as required.
1 LT NSP NSP
2001AC Deliverable
Due monthly by the 7th business day of the month.
1 LT NSP NSP
2001AD Deliverable
Update as required.
1 LT NSP NSP
2002 Solution Sustainment - Enterprise
IAW PWS 5.4
travel, and any other costs required for successful completion for the services detailed in PWS paragraphs 5.4
12 MO $ $
2002AA Outcomes Reporting
IAW PWS 5.2.5 and 5.4
2002AB Deliverable
Due within 13 weeks of the date of
1 LT NSP NSP
2002AC Operate and Maintain
IAW PWS 5.4.1
1 LT NSP NSP
2002AD Monitor Performance and Reporting
IAW PWS 5.4.2
1 LT NSP NSP
2002AE Deliverable
Application Monitoring Plan
Due within six weeks of exercise and quarterly thereafter.
1 LT NSP NSP
2002AF Deliverable
Application Dashboard quarterly thereafter
1 LT NSP NSP
2002AG Deliverable
Postmortem Reports
Due within seven days of an outage.
1 LT NSP NSP
2002AH Deliverable
Quarterly Solution Performance
Report
Due within 13 weeks of exercise and
2002AJ Deliverable
Quarterly Resource Utilization
Optimization Plan
1 LT NSP NSP
2002AK Deliverable
Monthly Utilization Report
Due monthly by 7th business day of the month
1 LT NSP NSP
2002AL Software Outage Management Plan
IAW PWS 5.4.3
1 LT NSP NSP
2002AM Deliverable
Software Outage Management Plan
(Scheduled)
Within six weeks of exercise, updated quarterly.
1 LT NSP NSP
2002AN Deliverable
Software Outage Management Plan
(Unscheduled)
2002AP Training 1 LT NSP NSP
2002AQ Deliverable
1 LT NSP NSP
2002AR Deliverable
Training Rosters for Completed
OPTION PERIOD TWO TOTAL $
OPTION PERIOD THREE
This option may be exercised in accordance with FAR 52.217-9, Option to Extend the Term of the Contract.
Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer. If exercised, this option shall commence immediately after expiration of Option Period Two.
3001 Program Management travel, and any other costs required for successful completion for the services
The price of this CLIN shall be included in priced CLIN 3002.
12 MO NSP NSP
3001AA Deliverable
Due five days after the beginning of the PoP and updated throughout as
1 LT NSP NSP
3001AB Deliverable
Contractor Project Management
Plan
Due within 10 business days of exercise, updated monthly by 7th business day of the month and as required.
1 LT NSP NSP
3001AC Deliverable
Due 30 days after award and then by the 7th business day of the month.
1 LT NSP NSP
3001AD Deliverable exercise ward and updated as needed.
1 LT NSP NSP
3002 Solution Sustainment - Enterprise travel, and any other costs required for successful completion for the services
12 MO $ $
date of exercise.
3002AA Outcomes Reporting
1 LT NSP NSP
3002AB Deliverable
1 LT NSP NSP
3002AC Operate and Maintain
1 LT NSP NSP
3002AD Monitor Performance and
Reporting
1 LT NSP NSP
3002AE Deliverable
1 LT NSP NSP
3002AF Deliverable
1 LT NSP NSP
3002AG Deliverable
3002AH Deliverable
Quarterly Solution Performance
Report
1 LT NSP NSP
3002AJ Deliverable
Quarterly Resource Utilization
1 LT NSP NSP
3002AK Deliverable
1 LT NSP NSP
3002AL Software Outage Management Plan date of award.
1 LT NSP NSP
3002AM Deliverable
Software Outage Management Plan
(Scheduled)
3002AN Deliverable 1 LT NSP NSP
Software Outage Management Plan
3002AP Training
1 LT NSP NSP
3002AQ Deliverable
1 LT NSP NSP
3002AR Deliverable
Training Rosters for Completed
OPTION PERIOD THREE TOTAL $
OPTION PERIOD FOUR
This option may be exercised in accordance with FAR 52.217-9, Option to Extend the Term of the Contract.
Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer. If exercised, this option shall commence immediately after expiration of Option Period Three.
4001 Program Management licenses, labor, material, supplies, travel, and any other costs required for successful completion for the services in priced CLIN 4002.
4001AA Deliverable
PoP and updated throughout as specified in the contract.
Electronic submission to: VA PM, COR, CO
1 LT NSP NSP
4001AB Deliverable
Due within 10 business days of exercise, updated monthly by 7th business day of the month and as required
1 LT NSP NSP
4001AC Deliverable
Due 30 days after award and then by the
7th business day of the month.
1 LT NSP NSP
4001AD Deliverable exercise and updated as needed.
1 LT NSP NSP
4002 Solution Sustainment - Enterprise
12 MO $ $
licenses, labor, material, supplies, travel, and any other costs required for successful completion for the services
4002AA Outcomes Reporting
1 LT NSP NSP
4002AB Deliverable
CO.
1 LT NSP NSP
4002AC Operate and Maintain
1 LT NSP NSP
4002AD Monitor Performance and Reporting
1 LT NSP NSP
4002AE Deliverable
1 LT NSP NSP
4002AF Deliverable
4002AG Deliverable
1 LT NSP NSP
4002AH Deliverable
Quarterly Solution Performance
Report
1 LT NSP NSP
4002AJ Deliverable
Quarterly Resource Utilization
1 LT NSP NSP
4002AK Deliverable
1 LT NSP NSP
4002AL Software Outage Management Plan
1 LT NSP NSP
4002AM Deliverable
Software Outage Management Plan
(Scheduled)
4002AN Deliverable
Software Outage Management Plan
1 LT NSP NSP
4002AP Training
1 LT NSP NSP
4002AQ Deliverable
1 LT NSP NSP
4002AR Deliverable
Training Rosters for Completed
OPTION PERIOD FOUR TOTAL $
OPTIONAL TASK ONE – ENTERPRISE DEPLOYMENT
This optional task may be exercised at any time during the option periods. Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer.
PoP: Not to Exceed (NTE) 48 months
5001 Enterprise Deployment
IAW PWS 5.5.1
NTE
MO NTE
NTE
This CSLIN includes all term software travel, and any other costs required for successful completion for the services detailed in PWS paragraphs 5.5.1 and
The PoP shall not exceed 48 months.
Monthly payment shall be contingent on successful deployment and adherence to agreed upon deployment schedule.
5001AA Software Architecture and Design
5001AB Deliverable
1 LT NSP NSP
5001AC Deliverable
1 LT NSP NSP
5001AD Deliverable
1 LT NSP NSP
5001ADE Deliverable
5001AEF Deliverable
1 LT NSP NSP
5001AFG Deliverable
Due within12t weeks of the date of
1 LT NSP NSP
5001AGH Deliverable
Application Programing Interface
1 LT NSP NSP
5001AHJ Deliverable
Technical and User Documentation
1 LT NSP NSP
5001AJK VA Enterprise Cloud Implementation
Planning
5001AKL Deliverable
5001ALM Deliverable
Verification and Validation Test
1 LT NSP NSP
5001AMN Deliverable
1 LT NSP NSP
5001ANP Build and Development
The PoP shall not exceed 36 months
5001APQ Deliverable
VA Authority to Operate Artifacts
1 LT NSP NSP
5001AQR Deliverable
1 LT NSP NSP
5001ARS Implementation
5001AST Deliverable
1 LT NSP NSP
5001ATU Outcomes Reporting
5001AUV Deliverable
1 LT NSP NSP
5001AVW Training
5001AWX Deliverable
COR, CO.
1 LT NSP NSP
5001AXY Deliverable
Training Rosters for Completed
OPTIONAL TASK ONE TOTAL $
OPTIONAL TASK TWO – FULL CAPABILITY
This optional task may be exercised at any time during the base period or option periods. Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer.
PoP: NTE 48 months
6001 Full Capability
IAW PWS 5.5.2
This CSLIN includes all term software travel, and any other costs required for successful completion for the services detailed in PWS paragraphs 5.5.2 and
NTE
MO NTE
NTE
6001AA Software Architecture and Design
1 LT NSP NSP
6001AB Deliverable
1 LT NSP NSP
6001AC Deliverable
1 LT NSP NSP
6001AD Deliverable
6001ADE Deliverable
1 LT NSP NSP
6001AEF Deliverable
1 LT NSP NSP
6001AFG Deliverable
1 LT NSP NSP
6001AGH Deliverable
Application Programing Interface
1 LT NSP NSP
6001AHJ Deliverable
Technical and User Documentation
1 LT NSP NSP
6001AJK VA Enterprise Cloud Implementation
Planning
6001AKL Deliverable
1 LT NSP NSP
6001ALM Deliverable
Verification and Validation Test
1 LT NSP NSP
6001AMN Deliverable
1 LT NSP NSP
6001ANP Build and Development
1 LT NSP NSP
6001APQ Deliverable
VA Authority to Operate Artifacts
1 LT NSP NSP
6001AQR Deliverable
6001ARS Implementation
1 LT NSP NSP
6001AST Deliverable
1 LT NSP NSP
6001ATU Outcomes Reporting
1 LT NSP NSP
6001AUV Deliverable
1 LT NSP NSP
6001AVW Training
1 LT NSP NSP
6001AWX Deliverable
6001AXY Deliverable
Training Rosters for Completed
OPTIONAL TASK TWO TOTAL $
Summary:
TOTAL BASE PERIOD: $
TOTAL OPTION PERIOD ONE: $
TOTAL OPTION PERIOD TWO: $
TOTAL OPTION PERIOD THREE: $
TOTAL OPTION PERIOD FOUR: $
TOTAL OPTIONAL TASK ONE $
TOTAL OPTIONAL TASK TWO $
TOTAL CONTRACT PRICE: $
B.5 PERFORMANCE WORK STATEMENT
PERFORMANCE WORK STATEMENT (PWS)
DEPARTMENT OF VETERANS AFFAIRS
Office of Discovery, Education and Affiliate Networks (DEAN)
Office of Healthcare Innovation & Learning (OHIL)
Reducing Inappropriate Polypharmacy at the Department of Veterans Affairs
Date: December 22, 2025 January 15, 2026
VA-26-00018584
PWS Version Number: v45
1.0 BACKGROUND
The Office of Information and Technology (OIT), Office of Healthcare Innovation & Learning
(OHIL), and the Office of Discovery, Education and Affiliate Networks, aim to acquire a comprehensive software solution to address and reduce inappropriate polypharmacy. This acquisition is needed due to current VA-developed software not meeting current requirements.
Polypharmacy, characterized by the concurrent use of multiple medications or the use of unnecessary medications, elevates the risk of adverse drug events, medication non-adherence, drug-drug interactions, and increased healthcare costs. The primary goal is to identify cumulative multi-drug interactions, optimize medication regimens, and enhance clinical decision-making with evidence-based tools. This initiative is especially critical for Veterans with Post-Traumatic
Stress Disorder and other mental health conditions, who often require complex medication management. The project is aligned with VA's commitment to reduce the use of potentially inappropriate medications and improve patient safety across all care settings within the VA.
In November 2018, VA issued the Cloud First Policy mandating that all new and existing
Information Technology solutions be assessed to determine suitability to be offered as an enterprise cloud computing service. The VA Enterprise Cloud (VAEC) was established by the
Enterprise Cloud Solutions Office in 2017, to host cloud computing solutions. The solution shall be implemented and hosted in the VAEC.
2.0 APPLICABLE DOCUMENTS
In the performance of the tasks associated with this Performance Work Statement, the Contractor shall comply with the following:
1. “Federal Information Security Modernization Act of 2014”
2. Federal Information Processing Standards (FIPS) Publication 140-3, “Security
Requirements for Cryptographic Modules”, March 22, 2019
3. FIPS Pub 199. “Standards for Security Categorization of Federal Information and
Information Systems,” February 2004
4. FIPS Pub 200, “Minimum Security Requirements for Federal Information and
Information Systems,” March 2006
5. FIPS Pub 201-3, “Personal Identity Verification of Federal Employees and
Contractors,” January 2022
6. 10 U.S.C. § 2224, "Defense Information Assurance Program", as amended
7. 5 U.S.C. § 552a, as amended, “The Privacy Act of 1974”
8. Public Law 109-461 (P.L. 109-461), Veterans Benefits, Health Care, and
Information Technology Act of 2006, as amended, Title IX, Information Security
Matters
9. 42 U.S.C. § 2000d “Title VI of the Civil Rights Act of 1964”, as amended
10. VA Directive 0710, “Personnel Security and Suitability Program,” June 4, 2010, https://www.va.gov/vapubs/index.cfm
11. VA Handbook 0710, “Personnel Security and Suitability Program,” May 2, 2016, https://www.va.gov/vapubs/index.cfm
12. VA Directive 6102, “Internet/Intranet Services,” August 5, 2019
13. 36 C.F.R. Part 1194 “Information and Communication Technology Standards and
Guidelines,” as amended
14. Office of Management and Budget (OMB) Circular A-130, “Managing Federal
Information as a Strategic Resource,” July 28, 2016
15. 32 C.F.R. Part 199, “Civilian Health and Medical Program of the Uniformed
Services (CHAMPUS)”, as amended https://www.va.gov/vapubs/index.cfm https://www.va.gov/vapubs/index.cfm http://www.va.gov/vapubs http://www.va.gov/vapubs
16. NIST SP 800-66 Rev. 2, “Implementing the Health Insurance Portability and
Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide,”
February 2024
17. 45 C.F.R Parts 160 and 164, Subparts A and E, the Standards for Privacy of
Individually Identifiable Health Information (“Privacy Rule”); and 45 C.F.R. Parts
160 and 164, Subparts A and C, the Security Standard (“Security Rule”); as amended
18. Sections 504 and 508 of the Rehabilitation Act (29 U.S.C. § 794d), as amended
19. Homeland Security Presidential Directive (12) (HSPD-12), August 27, 2004
20. VA Directive 6500, “VA Cybersecurity Program,” February 24, 2021 (see VA
NOTICE 24-18, dated September 27, 2024, “Update to VA Directive 6500
Cybersecurity Program”, and VA Notice 25-07, dated 3/18/25, “Amending VA
Directive 6500 to incorporate M-24-15”)
21. VA Handbook 6500, “Risk Management Framework for VA Information Systems
VA Information Security Program,” February 24, 2021 (see VA Notice 25-01, dated
October 15, 2024, “Update to VA Handbook 6500 Risk Management Framework for
VA Information Systems VA Information Security Program”, and VA Notice 25-06, dated 3/18/25, “Amending VA Directive 6500 to incorporate M-24-15”)
22. VA Handbook 6500.2, “Management of Breaches Involving Sensitive Personal
Information (SPI),” June 30, 2023
23. VA Handbook 6500.6, “Contract Security,” March 12, 2010 (see VA Notice 24-12, dated April 22, 2024, “Update to VA Handbook 6500.6, Contract Security, Appendix C VA Information and Information System Security/Privacy Language
For Inclusion Into Contracts, As Appropriate”)
24. VA Handbook 6500.8, “Information System Contingency Planning,” March 25,
25. VA Handbook 6500.10, “Mobile Device Security Policy,” February 15, 2018
26. VA Handbook 6500.11, “VA Firewall Configuration,” August 22, 2017
27. OIT Process Asset Library (PAL), OIT Process Asset Library.
28. One-VA Technical Reference Model (TRM) (reference at https://www.va.gov/trm/TRMHomePage.aspx)
29. VA Directive 6508, “Implementation of Privacy Threshold Analysis and Privacy
Impact Assessment,” October 15, 2014
30. VA Directive 6510, “VA Identity, Credential and Access Management,” September
3, 2024
31. VA Handbook 6510, “VA Identity, Credential and Access Management,” September
27, 2024
32. VA Directive and Handbook 6513, “Secure External Connections,” October 12,
33. VA Directive 6300, “Records and Information Management,” September 21, 2018
34. VA Handbook, 6300.1, “Records Management Procedures,“ March 24, 2010
35. NIST SP 800-37 Rev 2, “Risk Management Framework for Information Systems and
Organizations: A System Life Cycle Approach for Security and Privacy,” December
36. NIST SP 800-53 Rev. 5, “Security and Privacy Controls for Federal Information
Systems and Organizations,” September 23, 2020 (includes updates as of
12/10/2020)
37. VA Directive 0735, “Homeland Security Presidential Directive 12 (HSPD-12)
Program,” October 26, 2015 https://digital.va.gov/process-asset-library/ https://www.va.gov/trm/TRMHomePage.aspx
38. VA Handbook 0735, “Homeland Security Presidential Directive 12 (HSPD-12)
Program,” March 24, 2014
39. OMB Memorandum 05-24, “Implementation of Homeland Security Presidential
Directive (HSPD) 12 – Policy for a Common Identification Standard for Federal
Employees and Contractors,” August 5, 2005
40. OMB Memorandum M-19-17, “Enabling Mission Delivery Through Improved
Identity, Credential, and Access Management,” May 21, 2019
41. OMB Memorandum, “Guidance for Homeland Security Presidential Directive
(HSPD) 12 Implementation,” May 23, 2008
42. Federal Identity, Credential, and Access Management (FICAM) Architecture, June
30, 2023 (FICAM Architecture (idmanagement.gov))
43. NIST SP 800-116 Rev 1, “Guidelines for the Use of Personal Identity Verification
(PIV) Credentials in Facility Access,“ June 2018
44. NIST SP 800-63-3, 800-63A, 800-63B, 800-63C, “Digital Identity Guidelines,” updated March 02, 2020
45. NIST SP 800-157, “Guidelines for Derived PIV Credentials,” December 2014
46. VA Memorandum, VAIQ #7100147, “Continued Implementation of Homeland
Security Presidential Directive 12 (HSPD-12),” April 29, 2011 (reference https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514)
47. IAM Identity Management Business Requirements Guidance document, May 2013, (reference Enterprise Architecture Section, PIV/IAM (reference https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514)
48. VA Memorandum “Personal Identity Verification (PIV) Logical Access Policy
Clarification,” July 17, 2019, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4896
49. Trusted Internet Connections (TIC) 3.0 Core Guidance Documents, https://www.cisa.gov/publication/tic-30-core-guidance-documents
50. OMB Memorandum M-19-26, “Update to the Trusted Internet Connections (TIC)
Initiative,” September 12, 2019
51. OMB Memorandum M-08-23, “Securing the Federal Government’s Domain Name
System Infrastructure,” August 22, 2008
52. Sections 524 and 525 of the Energy Independence and Security Act of 2007, (P.L.
110–140), December 19, 2007
53. Section 104 of the Energy Policy Act of 2005, (P.L. 109–58), August 8, 2005
54. Executive Order 13221, “Energy-Efficient Standby Power Devices,” August 2, 2001
55. VA Directive 0057, “VA Environmental Management Program,” October 25, 2022
56. Office of Information Security (OIS) VAIQ #7424808 Memorandum, “Remote
Access,” January 15, 2014, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28
57. Clinger-Cohen Act of 1996, 40 U.S.C. §11101 and §11103
58. “Veteran Focused Integration Process Guide 4.0,” March 2021, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4371
59. VA Memorandum “Proper Use of Email and Other Messaging Services,” January 2, 2018, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28
60. “Product Line Management Transformation Playbook” version 3.1, August 2023, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4946
61. NIST SP 500-267B Revision 1, “USGv6 Profile,” November 2020
62. OMB Memorandum M-21-07, “Completing the Transition to Internet Protocol
Version 6 (IPv6),” November 19, 2020 https://www.idmanagement.gov/arch/#:~:text=FICAM%20is%20the%20federal%20government%E2%80%99s%20enterprise%20approach%20to,identity%20processes%2C%20practices%2C%20policies%2C%20and%20information%20security%20disciplines.
https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514 https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514 https://www.voa.va.gov/DocumentView.aspx?DocumentID=4896 https://www.cisa.gov/publication/tic-30-core-guidance-documents https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28 https://www.voa.va.gov/DocumentView.aspx?DocumentID=4371 https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28 https://www.voa.va.gov/DocumentView.aspx?DocumentID=4946
63. Social Security Number (SSN) Fraud Prevention Act of 2017
64. Section 240 of the Consolidated Appropriations Act (CAA) 2018, March 23, 2018
65. C.F.R Title 15 Part 7, “Securing the Information and Communications Technology and Services (ICTS) Supply Chain”, as amended
66. Executive Order 14028, “Executive Order on Improving the Nation's
Cybersecurity,” May 12, 2021, https://bidenwhitehouse.archives.gov/briefing-room/presidential-actions/2025/01/16/executive-order-on-strengthening-and-promoting-innovation-in-the-nations-cybersecurity/
67. OMB Memorandum M-22-09, “Moving the U.S. Government Toward Zero Trust
Cybersecurity Principles”, January 26, 2022, https://www.whitehouse.gov/wp-content/uploads/2022/01/M-22-09.pdf.
68. NIST SP 800-52 Revision 2, “Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations
69. OMB M-22-18, “Enhancing the Security of the Software Supply Chain through
Secure Software Development Practices,” September 14, 2022
70. OMB M-23-16, “Update to Memorandum M-22-18,” June 9, 2023
71. OMB M-21-31, “Improving the Federal Government’s Investigative and
Remediation Capabilities Related to Cybersecurity Incidents,” August 27, 2021
72. NIST SP 800-88 Revision 1 “Guidelines for Media Sanitization,” December 2014
73. CISA Binding Operational Directive (BOD) 19-02: “Vulnerability Remediation
Requirements of Internet-Accessible Systems,” April 29, 2019, BOD 19-02:
Vulnerability Remediation Requirements for Internet-Accessible Systems | CISA
74. CISA BOD 22-01: “Reducing the Significant Risk of Known Exploited
Vulnerabilities,” November 3, 2021, BOD 22-01: Reducing the Significant Risk of
Known Exploited Vulnerabilities | CISA
75. CISA BOD 23-01: Improving Asset Visibility and Vulnerability Detection on
Federal Networks.” Cybersecurity & Infrastructure Security Agency (CISA), BOD
23-01: Improving Asset Visibility and Vulnerability Detection on Federal Networks |
CISA
76. VA Directive 6550, Pre-Procurement Assessment and Implementation of Medical
Devices/Systems, June 03, 2019
77. VA Memorandum, “VA Security Controls,” January 17, 2025, https://www.voa.va.gov/DocumentView.aspx?DocumentID=5010
78. 38 CFR 17.96, Medication prescribed by non-VA physicians, https://www.ecfr.gov/current/title-38/section-17.96
79. VA/DoD Clinical Practice Guideline for Management of Bipolar Disorder. Version
2.0, 2023, https://www.healthquality.va.gov/guidelines/MH/bd/VA-DOD-CPG-BD-
Full-CPGFinal508.pdf
80. VA/DoD Clinical Practice Guideline for Assessment and Management of Patients at
Risk for Suicide. Version 3.0, 2024, https://www.healthquality.va.gov/guidelines/MH/srb/VADOD-CPG-Suicide-Risk-
Full-CPG-2024_Final_508.pdf
81. VA/DoD Clinical Practice Guideline for Management of Posttraumatic Stress
Disorder and Acute Stress Disorder. Version 4.0, 2023, https://www.healthquality.va.gov/guidelines/MH/ptsd/VA-DoD-CPG-PTSD-Full-
CPG-Edited-111624-V5-81825.pdf
82. VA/DoD Clinical Practice Guideline for Management of First-Episode Psychosis and Schizophrenia. Version 2.0, 2023, https://bidenwhitehouse.archives.gov/briefing-room/presidential-actions/2025/01/16/executive-order-on-strengthening-and-promoting-innovation-in-the-nations-cybersecurity/ https://bidenwhitehouse.archives.gov/briefing-room/presidential-actions/2025/01/16/executive-order-on-strengthening-and-promoting-innovation-in-the-nations-cybersecurity/ https://bidenwhitehouse.archives.gov/briefing-room/presidential-actions/2025/01/16/executive-order-on-strengthening-and-promoting-innovation-in-the-nations-cybersecurity/ https://www.whitehouse.gov/wp-content/uploads/2022/01/M-22-09.pdf https://www.whitehouse.gov/wp-content/uploads/2022/01/M-22-09.pdf https://www.cisa.gov/news-events/directives/bod-19-02-vulnerability-remediation-requirements-internet-accessible-systems https://www.cisa.gov/news-events/directives/bod-19-02-vulnerability-remediation-requirements-internet-accessible-systems https://www.cisa.gov/news-events/directives/bod-22-01-reducing-significant-risk-known-exploited-vulnerabilities https://www.cisa.gov/news-events/directives/bod-22-01-reducing-significant-risk-known-exploited-vulnerabilities https://www.cisa.gov/news-events/directives/bod-23-01-improving-asset-visibility-and-vulnerability-detection-federal-networks https://www.cisa.gov/news-events/directives/bod-23-01-improving-asset-visibility-and-vulnerability-detection-federal-networks https://www.cisa.gov/news-events/directives/bod-23-01-improving-asset-visibility-and-vulnerability-detection-federal-networks https://www.voa.va.gov/DocumentView.aspx?DocumentID=5010 https://www.ecfr.gov/current/title-38/section-17.96 https://www.healthquality.va.gov/guidelines/MH/bd/VA-DOD-CPG-BD-Full-CPGFinal508.pdf https://www.healthquality.va.gov/guidelines/MH/bd/VA-DOD-CPG-BD-Full-CPGFinal508.pdf https://www.healthquality.va.gov/guidelines/MH/srb/VADOD-CPG-Suicide-Risk-Full-CPG-2024_Final_508.pdf https://www.healthquality.va.gov/guidelines/MH/srb/VADOD-CPG-Suicide-Risk-Full-CPG-2024_Final_508.pdf https://www.healthquality.va.gov/guidelines/MH/ptsd/VA-DoD-CPG-PTSD-Full-CPG-Edited-111624-V5-81825.pdf https://www.healthquality.va.gov/guidelines/MH/ptsd/VA-DoD-CPG-PTSD-Full-CPG-Edited-111624-V5-81825.pdf https://www.healthquality.va.gov/guidelines/MH/scz/VA-DOD-CPG-Schizophrenia-
CPG_Finalv231924.pdf
83. VA/DoD Clinical Practice Guideline for the Management of Major Depressive
Disorder. Version 4.0, 2022, https://www.healthquality.va.gov/guidelines/MH/mdd/VADODMDDCPGFinal508.
84. VA/DoD Clinical Practice Guideline for the Management of Substance Use
Disorders. Version 5.0, 2021, https://www.healthquality.va.gov/guidelines/MH/sud/VA-DoD-SUD-
CPG_Final_for-508_v3.pdf
85. Veterans Health Administration (VHA) Directive 1108.08, VHA Formulary
Management Process, July 29, 2022, https://www.va.gov/vhapublications/ViewPublication.asp?pub_ID=9889
86. VHA Directive 1108.13, Provision and Use of Nursing Medication Management
Protocols In Outpatient Team-Based Practice Settings, February 6, 2019, https://www.va.gov/vhapublications/ViewPublication.asp?pub_ID=8199
87. VHA Directive 1164, Essential Medication Information Standards, July 13, 2023, https://www.va.gov/vhapublications/ViewPublication.asp?pub_ID=11372
88. VHA Directive 1345, Medication Reconciliation, March 9, 2022, https://www.va.gov/vhapublications/ViewPublication.asp?pub_ID=9702
89. VHA Directive 6371, Electronic Health Information Exchange for Treatment, April
30, 2019, https://www.va.gov/vhapublications/ViewPublication.asp?pub_ID=8310
90. VA Directive 6066, “Protected Health Information (PHI) And Business Associate
Agreements Management”, September 2, 2014
91. VA Enterprise Cloud Technical Reference Guide, Version 1.3 July 2018
92. 170.205(b)(2) National Council for Prescription Drug Programs (NCPDP) SCRIPT
Standard, Implementation Guide, Version 10.6, October, 2008, (Approval date for
American National Standards Institute (ANSI) November 12, 2008) 1. 170.314(b)(3)
Electronic prescribing.
3.0 SCOPE OF WORK
The Contractor shall provide a software solution capable of identifying and reducing inappropriate polypharmacy among Veterans. The system shall automatically consolidate VA and community-prescribed medications, assign risk scores at both patient and medication levels, and flag potential risks including side effects, drug-drug interactions, duplication of therapy, and fall risk. The solution shall support safe deprescribing, shared decision-making, and care team collaboration while integrating seamlessly with VA systems, including Computerized Patient
Records System (CPRS)/ Veterans Health Information Systems and Technology Architecture and Cerner/Oracle Health. The software shall facilitate population management, medication reconciliation, and outcomes tracking. The Contractor shall ensure compliance with all VA information technology and security standards.
This solution shall be hosted in the VAEC environment. The Contractor shall coordinate with
VA to determine the best Cloud Service Provider (CSP) for the solution. The Contractor shall not be responsible for providing or acquiring cloud capacity or server hosting infrastructure for this contract. VA will furnish VAEC capacity as Government Furnished Equipment (GFE). The polypharmacy software will be deployed under the VA Clinical Decision Support (CDS) platform.
https://www.healthquality.va.gov/guidelines/MH/scz/VA-DOD-CPG-Schizophrenia-CPG_Finalv231924.pdf https://www.healthquality.va.gov/guidelines/MH/scz/VA-DOD-CPG-Schizophrenia-CPG_Finalv231924.pdf https://www.healthquality.va.gov/guidelines/MH/mdd/VADODMDDCPGFinal508.pdf https://www.healthquality.va.gov/guidelines/MH/mdd/VADODMDDCPGFinal508.pdf https://www.healthquality.va.gov/guidelines/MH/sud/VA-DoD-SUD-CPG_Final_for-508_v3.pdf https://www.healthquality.va.gov/guidelines/MH/sud/VA-DoD-SUD-CPG_Final_for-508_v3.pdf https://www.va.gov/vhapublications/ViewPublication.asp?pub_ID=9889 https://www.va.gov/vhapublications/ViewPublication.asp?pub_ID=8199 https://www.va.gov/vhapublications/ViewPublication.asp?pub_ID=11372 https://www.va.gov/vhapublications/ViewPublication.asp?pub_ID=9702 https://www.va.gov/vhapublications/ViewPublication.asp?pub_ID=8310
4.0 PERFORMANCE DETAILS
4.1 PERFORMANCE PERIOD
The period of performance shall be one, 6-month base period with four, 12-month option periods inclusive of two optional tasks for enterprise-wide deployment and full capability. VA requires the software solution to be implemented at pilot sites within 26 weeks of award. The pilot sites allow VA to test the software’s capabilities and functionality within the VA environment and allow the Contractor to make modifications if required. This pilot testing shall be completed within six months of the award. Once proven to be functional (even if before six months), Option
Period One will be executed, and the vendor shall be ready for enterprise deployment within six months of the execution of Option Period One. In addition to enterprise deployment, the
Contractor shall provide initial training to…
This is the start of the file's text. The full file is on GovTribe.
File details come from the government source that posted it. Updated .