36C10B26R0019.pdf

PAGE 1 OF 1. REQUISITION NO.

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NO. 5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

a. NAME b. TELEPHONE NO. (No Collect Calls) 8. OFFER DUE DATE/LOCAL

TIME

9. ISSUED BY CODE 10. THIS ACQUISITION IS UNRESTRICTED OR SET ASIDE: % FOR:

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

8(A)

NAICS:

SIZE STANDARD:

11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

13a. THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700)

13b. RATING

14. METHOD OF SOLICITATION

RFQ IFB RFP

15. DELIVER TO CODE 16. ADMINISTERED BY CODE

17a. CONTRACTOR/OFFEROR CODE FACILITY CODE 18a. PAYMENT WILL BE MADE BY CODE

TELEPHONE NO. UEI: EFT:

PHONE: FAX:

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW IS CHECKED

SEE ADDENDUM

19. 20. 21. 22. 23. 24.

ITEM NO. SCHEDULE OF SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Govt. Use Only)

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA ARE ARE NOT ATTACHED.

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN _______________ 29. AWARD OF CONTRACT: REF. ___________________________________ OFFER COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DATED ________________________________. YOUR OFFER ON SOLICITATION DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY (BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED SET FORTH HEREIN IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30b. NAME AND TITLE OF SIGNER (TYPE OR PRINT) 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (TYPE OR PRINT) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION (REV. NOV 2021)

PREVIOUS EDITION IS NOT USABLE Prescribed by GSA - FAR (48 CFR) 53.212

7. FOR SOLICITATION

INFORMATION CALL:

STANDARD FORM 1449

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

36C10B26R0019

06-09-2026

10:00 EDT

Department of Veterans Affairs Technology Acquisition Center 23 Christopher Way Eatontown NJ 07724

X

541519

$34 Million

N/A

X

See Delivery Schedule

Financial Services Center PO Box 149971 Austin TX 78714-8971

This is a sole source solicitation issued for:

PYXIS Maintenance Support Services

This RFQ will result in a Firm Fixed Price Contract.

CO: Christopher Minetti, Christopher.Minetti@va.gov

848-377-5149

CS: Gary Throckmorton, Gary.Throckmorton@va.gov 848-377-5269

Period of performance shall be a 12-month Base Period with four 12-month Option Periods.

Contracting Officer mailto:Christopher.Minetti@va.gov mailto:Gary.Throckmorton@va.gov

Table of Contents

SECTION A

A.1 SF 1449 SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND

COMMERCIAL SERVICES

SECTION B - CONTINUATION OF SF 1449 BLOCKS

B.1 GOVERNING LAW

B.2 SOFTWARE LICENSE, MAINTENANCE AND TECHNICAL SUPPORT:

B.3 CONTRACT ADMINISTRATION DATA

B.4 PRICE SCHEDULE

B.5 PERFORMANCE WORK STATEMENT

SECTION C - CONTRACT CLAUSES

C.1 FEDERAL AQCQUISITION REGULATION (FAR) CLAUSES INCORPORATED BY

REFERENCE (FEB 1998)

C.2 FAR 52.217-9 OPTION TO EXTEND THE TERM OF THE CONTRACT (MAR 2000) .. 63

C.3 VAAR 852.204-71 INFORMATION AND INFORMATION SECURITY (FEB 2023)

C.4 VAAR 852.232-72 ELECTRONIC SUBMISSION OF PAYMENT REQUESTS (NOV

2018)

C.5 VAAR 852.239-70 SECURITY REQUIREMENTS FOR INFORMATION TECHNOLOGY

RESOURCES (FEB 2023)

C.6 VAAR 852.239-71 INFORMATION SYSTEM SECURITY PLAN AND

ACCREDITATION (FEB 2023)

C.7 VAAR 852.247-72 MARKING DELIVERABLES (OCT 2018)

C.8 VAAR 852.247-74 ADVANCE NOTICE OF SHIPMENT (OCT 2018)

C.9 ARTIFICIAL INTELLIGENCE IN VA CONTRACTS

SECTION D - CONTRACT DOCUMENTS, EXHIBITS, OR ATTACHMENTS

SECTION E - SOLICITATION PROVISIONS

E.1 52.252-1 SOLICITATION PROVISIONS INCORPORATED BY REFERENCE (FEB 1998)

E.2 VAAR 852.211-72 TECHNICAL INDUSTRY STANDARDS (NOV 2018)

E.3 VAAR 852.211-76 LIQUIDATED DAMAGES - REIMBURSEMENT FOR DATA

BREACH COSTS (FEB 2023)

E.4 VAAR 852.212-72 GRAY MARKET AND COUNTERFEIT ITEMS - INFORMATION

TECHNOLOGY MAINTENANCE ALLOWING OTHER-THAN-NEW PARTS (FEB 2023) 82

E.5 VAAR 852.233-70 PROTEST CONTENT/ALTERNATIVE DISPUTE RESOLUTION

(OCT 2018)

E.6 VAAR 852.233-71 ALTERNATE PROTEST PROCEDURE (OCT 2018)

E.7 FAR 52.212-2 EVALUATION—COMMERCIAL ITEMS (NOV 2021)

E.8 ARTIFICIAL INTELLIGENCE EFFORTS

E.9 BASIS FOR AWARD

E.10 SUBMISSION INSTRUCTIONS

SECTION B - CONTINUATION OF SF 1449 BLOCKS (SCHEDULE OF

SUPPLIES/SERVICES)

B.1 GOVERNING LAW

Federal law and regulations, including the Federal Acquisition Regulations (FAR), shall govern this Contract/Order. Commercial license agreements may be made a part of this Contract/Order but only if both parties expressly make them an addendum hereto, as permitted by FAR 12.212. If the commercial license agreement is not made an addendum, it shall not apply, govern, be a part of or have any effect whatsoever on the Contract/Order; this includes, but is not limited to, any agreement embedded in the computer software (clickwrap), any agreement that is otherwise delivered with or provided to the Government with the commercial computer software or documentation (shrinkwrap), or any other license agreement otherwise referred to in any document. If a commercial license agreement is made an addendum, only those provisions addressing data rights regarding the Government’s use, duplication and disclosure of data (e.g., restricted computer software) are included and made a part of this Contract/Order, and only to the extent that those provisions are not duplicative or inconsistent with Federal law, Federal regulation, the incorporated FAR clauses and the provisions of this Contract/Order; those provisions in the commercial license agreement that do not address data rights regarding the Government’s use, duplication and disclosure of data shall not be included or made a part of the Contract/Order. Federal law and regulation including, without limitation, the Contract Disputes Act (41 U.S.C. § 7101 et seq.), the Anti- Deficiency Act (31 U.S.C. § 1341 et seq.), the Competition in Contracting Act (41 U.S.C.

§ 3301 et seq.), the Prompt Payment Act (31 U.S.C. § 3901 et seq.), Contracts for Data Processing or Maintenance (38 USC § 5725), and FAR clauses 52.212-4, 52.227-14, 52.227-19 shall supersede, control, and render ineffective any inconsistent, conflicting, or duplicative provision in any commercial license agreement. In the event of conflict between this clause and any provision in the Contract/Order or the commercial license agreement or elsewhere, the terms of this clause shall prevail. The Contractor shall deliver to the Government all data first produced under this Contract/Order with unlimited rights as defined by FAR 52.227-14. Claims of patent or copyright infringement brought against the Government as a party shall be defended by the U.S.

Department of Justice (DOJ) in accordance with 28 U.S.C. § 516; at the discretion of DOJ, the Contractor may be allowed reasonable participation in the defense of the litigation. Any additional changes to the Contract/Order must be made by modification (Standard Form 30) and shall only be made by a warranted Contracting Officer. Nothing in this Contract/Order or any commercial license agreement shall be construed as a waiver of sovereign immunity.

B.2 SOFTWARE LICENSE, MAINTENANCE AND TECHNICAL SUPPORT:

(1). Definitions.

a) Licensee. The term “licensee” shall mean the U.S. Department of Veterans Affairs (“VA”) and is synonymous with “Government.”

b) Licensor. The term “licensor” shall mean the Contractor having the necessary license or ownership rights to deliver license, software maintenance and support of the computer software being acquired. The term “Contractor” is the party identified in Block 17a on the SF1449. If the Contractor is a reseller and not the Licensor, the Contractor remains responsible for performance under this Contract/Order.

c) Software. The term “software” shall mean the licensed computer software product(s) cited in the Schedule of Supplies/Services.

d) Maintenance. The term “maintenance” is the process of enhancing and optimizing software, as well as remedying defects. It shall include all new fixes, patches, releases, updates, versions and upgrades, as further defined below.

e) Technical Support. The term “technical support” refers to the range of services providing assistance for the software via the telephone, email, a website or otherwise.

f) Release or Update. The term “release” or “update” are terms that refer to a revision of software that contains defect corrections, minor enhancements or improvements of the software’s functionality. This is usually designated by a change in the number to the right of the decimal point (e.g., from Version 5.3 to 5.4). An example of an update is the addition of new hardware.

g) Version or Upgrade. The term “version” or “upgrade” are terms that refer to a revision of software that contains new or improved functionality. This is usually designated by a change in the number to the left of the decimal point (e.g., from Version 5.4 to 6).

(2). Software License.

a) Unless otherwise stated in the Schedule of Supplies/Services, the Performance Work Statement or Product Description, the software license provided to the Government is a perpetual, nonexclusive license to use the software.

b) The Government may use the software in a networked environment.

c) Any dispute regarding the license grant or usage limitations shall be resolved in accordance with the Disputes Clause incorporated in FAR 52.212-4(d).

d) All limitations of software usage are expressly stated in the Schedule of Supplies/Services and the Performance Work Statement/Product Description.

(3). Software Maintenance and Technical Support.

a) If the Government desires to continue software maintenance and support beyond the period of performance identified in this Contract/Order, the Government will issue a separate contract or order for maintenance and support. Conversely, if a contract or order for continuing software maintenance and technical support is not received, the Contractor is neither authorized nor permitted to renew any of the previously furnished services.

b) The Contractor shall provide software support services, which includes periodic updates, enhancements and corrections to the software, and reasonable technical support, all of which are customarily provided by the Contractor to its commercial customers so as to cause the software to perform according to its specifications, documentation or demonstrated claims.

c) Any telephone support provided by Contractor shall be at no additional cost.

d) The Contractor shall provide all maintenance services in a timely manner in accordance with the Contractor’s customary practice or as defined in the Performance Work Statement or Product Description. However, prolonged delay (exceeding 2 business days) in resolving software problems will be noted in the Government’s various past performance records on the Contractor (e.g., www.cpars.gov).

e) If the Government allows the maintenance and support to lapse and subsequently wishes to reinstate it, any reinstatement fee charged shall not exceed the amounts that would have been charged if the Government had not allowed the subscription to lapse.

(4). Disabling Software Code. The Government requires delivery of computer software that does not contain any code that will, upon the occurrence or the nonoccurrence of any event, disable the software. Such code includes but is not limited to a computer virus, restrictive key, node lock, time-out or other function, whether implemented by electronic, mechanical, or other means, which limits or hinders the use or access to any computer software based on residency on a specific hardware configuration, frequency of duration of use, or other limiting criteria. If any such disabling code is present, the Contractor agrees to indemnify the Government for all damages suffered as a result of a disabling caused by such code, and the contractor agrees to remove such code upon the Government’s request at no extra cost to the Government. Inability of the Contractor to remove the disabling software code will be considered an http://www.cpars.gov/ inexcusable delay and a material breach of contract, and the Government may exercise its right to terminate for cause. In addition, the Government is permitted to remove the code as it deems appropriate and charge the Contractor for consideration for the time and effort expended in removing the code.

(5). Manuals and Publications. Upon Government request, the Contractor shall furnish the most current version of the user manual and publications for all products/services provided under this Contract/Order at no cost.

B.3 CONTRACT ADMINISTRATION DATA

1. Contract Administration: All contract administration matters will be handled by the following individuals:

a. CONTRACTOR: CareFusion Solutions, LLC 3750 Torrey View Court San Diego, CA 92130

b. GOVERNMENT: Contracting Officer 36C10B Christopher Minetti Christopher.Minetti@va.gov

Department of Veterans Affairs Technology Acquisition Center

2. CONTRACTOR REMITTANCE ADDRESS: All payments by the Government to the contractor will be made in accordance with:

[X] 52.232-33, Payment by Electronic Funds Transfer—System For Award

Management, or [] 52.232-36, Payment by Third Party

3. INVOICES: Invoices shall be submitted in arrears:

a. Quarterly []

b. Semi-Annually []

c. Other [X] Upon acceptance of deliverables, in accordance with B.3, Price Schedule.

4. GOVERNMENT INVOICE ADDRESS: All Invoices from the contractor shall be submitted electronically in accordance with VAAR Clause 852.232-72 Electronic Submission of Payment Requests.

Department of Veterans Affairs Technology Acquisition Center Financial Services Center PO Box 149971 Austin TX 78714-8971

ACKNOWLEDGMENT OF AMENDMENTS: The offeror acknowledges receipt of amendments to the Solicitation numbered and dated as follows:

AMENDMENT NO DATE

mailto:Christopher.Minetti@va.gov

B.4 PRICE SCHEDULE

Inspection/Acceptance//F.O.B: Destination.

Any resulting contract will be awarded on a firm-fixed-price basis as defined by Federal Acquisition Regulation Subpart 16.202. Accordingly, the Contractor shall ensure that any and all costs associated with the Contractor’s proposed application(s), software products, software solution, and/or system, shall be included in the Contractor’s proposed firm-fixed price, and shall serve as the Contractor’s firm-fixed price for the life of any resulting contract. No additional costs or fees relative to the Contractor’s proposed application(s), software products, software solution, and/or system including, but not limited to, licensing costs and any associated licensing maintenance required for the development, delivery, integration, operation, and/or maintenance of the Contractor’s proposed solution will be allowed, accepted, and/or paid by the Government.

In accordance with Federal Acquisition Regulation (FAR) 25.401(a)(1), the subject procurement is exempt from the requirements of the Trade Agreements Act (TAA).

Accordingly, Non-TAA compliant items may be quoted for this procurement and ultimately delivered under any resulting contract.

Base Period The Period of Performance (PoP) shall be 12 months from date of award

CLIN DESCRIPTION OF

SUPPLIES/SERVICES QTY UNIT UNIT Price TOTAL

Price

Pyxis Maintenance Support Services In accordance with (IAW) PWS paragraphs 5.0 through 6.2 inclusive of all subparagraphs.

This Firm-Fixed-Priced (FFP) CLIN includes all travel, preventative and corrective maintenance, including emergencies, on the Pyxis systems and deliverables for the successful completion of services detailed in PWS paragraphs 5.0 through 6.2 inclusive of all subparagraphs.

The Period of Performance (PoP) shall be 12 months from date of award.

12 MO $ $

0001AA

Service/Inspection Report IAW PWS 5.0.

Due: 7 days after service has been provided.

1 LO NSP NSP

0001AB

Contractor Staff Roster IAW Performance Work Statement 6.2.2

Due 3 days after contract award and updated throughout the PoP.

Base Year Total $

Option Period One This 12-month option period may be exercised in accordance with (IAW) FAR 52.217-9, Option to Extend the Term of the Contract (Mar 2000). Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer. If exercised, this option shall commence immediately after expiration of the Base Period.

CLIN DESCRIPTION OF

SUPPLIES/SERVICES QTY UNIT UNIT Price TOTAL

Price

Pyxis Maintenance Support Services In accordance with (IAW) PWS paragraphs 5.0 through 6.2 inclusive of all subparagraphs.

This Firm-Fixed-Priced (FFP) CLIN includes all travel, preventative and corrective maintenance, including emergencies, on the Pyxis systems and deliverables for the successful completion of services detailed in PWS paragraphs 5.0 through 6.2 inclusive of all subparagraphs.

The Period of Performance (PoP) shall be 12 months from date of award.

12 MO $ $

1001AA

Service/Inspection Report IAW PWS 5.0.

Due: 7 days after service has been provided.

1 LO NSP NSP

1001AB

Contractor Staff Roster IAW Performance Work Statement 6.2.2

Due 3 days after contract award and updated throughout the PoP.

Option Year One Total $

Option Period Two

Extend the Term of the Contract (Mar 2000). Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer. If exercised, this option shall commence immediately after expiration of Option Period One.

CLIN DESCRIPTION OF

SUPPLIES/SERVICES QTY UNIT UNIT Price TOTAL

Price

Pyxis Maintenance Support Services In accordance with (IAW) PWS paragraphs 5.0 through 6.2 inclusive of all subparagraphs.

This Firm-Fixed-Priced (FFP) CLIN includes all travel, preventative and corrective maintenance, including emergencies, on the Pyxis systems and deliverables for the successful completion of services detailed in PWS paragraphs 5.0 through 6.2 inclusive of all subparagraphs.

The Period of Performance (PoP) shall be 12 months from date of award.

12 MO $ $

2001AA

Service/Inspection Report IAW PWS 5.0.

Due: 7 days after service has been provided.

1 LO NSP NSP

2001AB

Contractor Staff Roster IAW Performance Work Statement 6.2.2

Due 3 days after contract award and updated throughout the PoP.

Option Year Two Total $

Option Period Three This 12-month option period may be exercised in accordance with (IAW) FAR 52.217-9, Option to Extend the Term of the Contract (Mar 2000). Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer. If exercised, this option shall commence immediately after expiration of Option Period Two.

CLIN DESCRIPTION OF

SUPPLIES/SERVICES QTY UNIT UNIT Price TOTAL

Price

Pyxis Maintenance Support Services In accordance with (IAW) PWS paragraphs 5.0 through 6.2 inclusive of all subparagraphs.

This Firm-Fixed-Priced (FFP) CLIN includes all travel, preventative and corrective maintenance, including emergencies, on the Pyxis systems and deliverables for the successful completion of services detailed in PWS paragraphs 5.0 through 6.2 inclusive of all subparagraphs.

The Period of Performance (PoP) shall be 12 months from date of award.

12 MO $ $

3001AA

Service/Inspection Report IAW PWS 5.0.

Due: 7 days after service has been provided.

1 LO NSP NSP

3001AB

Contractor Staff Roster IAW Performance Work Statement 6.2.2

Due 3 days after contract award and updated throughout the PoP.

Option Year Three Total $

Option Period Four

Extend the Term of the Contract (Mar 2000). Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer. If exercised, this option shall commence immediately after expiration of Option Period Three.

CLIN DESCRIPTION OF

SUPPLIES/SERVICES QTY UNIT UNIT Price TOTAL

Price

Pyxis Maintenance Support Services In accordance with (IAW) PWS paragraphs 5.0 through 6.2 inclusive of all subparagraphs.

This Firm-Fixed-Priced (FFP) CLIN includes all travel, preventative and corrective maintenance, including emergencies, on the Pyxis systems and deliverables for the successful completion of services detailed in PWS paragraphs 5.0 through 6.2 inclusive of all subparagraphs.

The Period of Performance (PoP) shall be 12 months from date of award.

12 MO $ $

4001AA

Service/Inspection Report IAW PWS 5.0.

Due: 7 days after service has been provided.

1 LO NSP NSP

4001AB

Contractor Staff Roster IAW Performance Work Statement 6.2.2

Due within 3 business days of receipt of the e-QIP notification email.

Option Year Four Total $

B.5 PERFORMANCE WORK STATEMENT

PERFORMANCE WORK STATEMENT (PWS)

DEPARTMENT OF VETERANS AFFAIRS

MARION, ILLINOIS VA MEDICAL CENTER

PYXIS Maintenance Support Services

VA-26-00029250

Date: 4/29/2026

PWS Version Number: 1.0

1.0 BACKGROUND

The Department of Veterans Affairs (VA), strives to provide high quality, effective, and efficient Information Technology (IT) services to those responsible for providing care to the Veterans at the point-of-care as well as throughout all the points of the Veterans’ health care in an effective, timely and compassionate manner. VA depends on Information Management/Information Technology (IM/IT) systems to meet mission goals.

This contract is to ensure the continuous reliability of the already installed Becton Dickinson (BD) Pyxis systems and support of ancillary equipment identified in the Performance Work Statement (PWS). The equipment is critical for the storage and dispensing of medications and supplies at the VA Medical Center and associated healthcare facilities and clinics, The reliable and accurate operation of the equipment at all times is considered critical to the health of patients.

2.0 APPLICABLE DOCUMENTS

In the performance of the tasks associated with this Performance Work Statement, the Contractor shall comply with the following:

1. “Federal Information Security Modernization Act of 2014”

2. Federal Information Processing Standards (FIPS) Publication 140-3, “Security Requirements for Cryptographic Modules”, March 22, 2019

3. FIPS Pub 199. “Standards for Security Categorization of Federal Information and Information Systems,” February 2004

4. FIPS Pub 200, “Minimum Security Requirements for Federal Information and Information Systems,” March 2006

5. FIPS Pub 201-3, “Personal Identity Verification of Federal Employees and

Contractors,” January 2022

6. 10 U.S.C. § 2224, "Defense Information Assurance Program", as amended

7. 5 U.S.C. § 552a, as amended, “The Privacy Act of 1974”

8. Public Law 109-461 (P.L. 109-461), Veterans Benefits, Health Care, and

Information Technology Act of 2006, as amended, Title IX, Information Security Matters

9. 42 U.S.C. § 2000d “Title VI of the Civil Rights Act of 1964”, as amended

10. VA Directive 0710, “Personnel Security and Suitability Program,” June 4, 2010, https://www.va.gov/vapubs/index.cfm

11. VA Handbook 0710, “Personnel Security and Suitability Program,” May 2, 2016, https://www.va.gov/vapubs/index.cfm

12. VA Directive 6102, “Internet/Intranet Services,” August 5, 2019

13. 36 C.F.R. Part 1194 “Information and Communication Technology Standards and Guidelines,” as amended

14. Office of Management and Budget (OMB) Circular A-130, “Managing

Federal Information as a Strategic Resource,” July 28, 2016

15. 32 C.F.R. Part 199, “Civilian Health and Medical Program of the Uniformed

Services (CHAMPUS)”, as amended https://www.va.gov/vapubs/index.cfm https://www.va.gov/vapubs/index.cfm http://www.va.gov/vapubs http://www.va.gov/vapubs

16. NIST SP 800-66 Rev. 2, “Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide,” February 2024

17. 45 C.F.R Parts 160 and 164, Subparts A and E, the Standards for Privacy of Individually Identifiable Health Information (“Privacy Rule”); and 45 C.F.R.

Parts 160 and 164, Subparts A and C, the Security Standard (“Security Rule”); as amended

18. Sections 504 and 508 of the Rehabilitation Act (29 U.S.C. § 794d), as amended

19. Homeland Security Presidential Directive (12) (HSPD-12), August 27, 2004

20. VA Directive 6500, “VA Cybersecurity Program,” February 24, 2021 (see

VA NOTICE 24-18, dated September 27, 2024, “Update to VA Directive 6500 Cybersecurity Program”, and VA Notice 25-07, dated 3/18/25, “Amending VA Directive 6500 to incorporate M-24-15”)

21. VA Handbook 6500, “Risk Management Framework for VA Information Systems VA Information Security Program,” February 24, 2021 (see VA Notice 25-01, dated October 15, 2024, “Update to VA Handbook 6500 Risk Management Framework for VA Information Systems VA Information Security Program”, and VA Notice 25-06, dated 3/18/25, “Amending VA Directive 6500 to incorporate M-24-15”)

22. VA Handbook 6500.2, “Management of Breaches Involving Sensitive Personal Information (SPI),” June 30, 2023

23. VA Handbook 6500.6, “Contract Security,” March 12, 2010 (see VA Notice 24-12, dated April 22, 2024, “Update to VA Handbook 6500.6, Contract Security, Appendix C VA Information and Information System Security/Privacy Language For Inclusion Into Contracts, As Appropriate”)

24. VA Handbook 6500.8, “Information System Contingency Planning,” March 25, 2025

25. VA Handbook 6500.10, “Mobile Device Security Policy,” February 15, 2018

26. VA Handbook 6500.11, “VA Firewall Configuration,” August 22, 2017

27. OIT Process Asset Library (PAL), OIT Process Asset Library.

28. One-VA Technical Reference Model (TRM) (reference at https://www.va.gov/trm/TRMHomePage.aspx)

29. VA Directive 6508, “Implementation of Privacy Threshold Analysis and

Privacy Impact Assessment,” October 15, 2014

30. VA Directive 6510, “VA Identity, Credential and Access Management,”

September 3, 2024

31. VA Handbook 6510, “VA Identity, Credential and Access Management,”

September 27, 2024

32. VA Directive and Handbook 6513, “Secure External Connections,” October

12, 2017

33. VA Directive 6300, “Records and Information Management,” September 21,

34. VA Handbook, 6300.1, “Records Management Procedures,“ March 24, 2010 https://digital.va.gov/process-asset-library/ https://www.va.gov/trm/TRMHomePage.aspx

35. NIST SP 800-37 Rev 2, “Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy,” December 2018

36. NIST SP 800-53 Rev. 5, “Security and Privacy Controls for Federal Information Systems and Organizations,” September 23, 2020 (includes updates as of 12/10/2020)

37. VA Directive 0735, “Homeland Security Presidential Directive 12 (HSPD-

12) Program,” October 26, 2015

38. VA Handbook 0735, “Homeland Security Presidential Directive 12 (HSPD-

12) Program,” March 24, 2014

39. OMB Memorandum 05-24, “Implementation of Homeland Security Presidential Directive (HSPD) 12 – Policy for a Common Identification Standard for Federal Employees and Contractors,” August 5, 2005

40. OMB Memorandum M-19-17, “Enabling Mission Delivery Through Improved Identity, Credential, and Access Management,” May 21, 2019

41. OMB Memorandum, “Guidance for Homeland Security Presidential Directive (HSPD) 12 Implementation,” May 23, 2008

42. Federal Identity, Credential, and Access Management (FICAM) Architecture, June 30, 2023 (FICAM Architecture (idmanagement.gov))

43. NIST SP 800-116 Rev 1, “Guidelines for the Use of Personal Identity Verification (PIV) Credentials in Facility Access,“ June 2018

44. NIST SP 800-63-3, 800-63A, 800-63B, 800-63C, “Digital Identity Guidelines,” updated March 02, 2020

45. NIST SP 800-157, “Guidelines for Derived PIV Credentials,” December

46. VA Memorandum, VAIQ #7100147, “Continued Implementation of Homeland Security Presidential Directive 12 (HSPD-12),” April 29, 2011 (reference https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514)

47. IAM Identity Management Business Requirements Guidance document, May 2013, (reference Enterprise Architecture Section, PIV/IAM (reference https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514)

48. VA Memorandum “Personal Identity Verification (PIV) Logical Access Policy Clarification,” July 17, 2019, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4896

49. Trusted Internet Connections (TIC) 3.0 Core Guidance Documents, https://www.cisa.gov/publication/tic-30-core-guidance-documents

50. OMB Memorandum M-19-26, “Update to the Trusted Internet Connections (TIC) Initiative,” September 12, 2019

51. OMB Memorandum M-08-23, “Securing the Federal Government’s Domain Name System Infrastructure,” August 22, 2008

52. Sections 524 and 525 of the Energy Independence and Security Act of 2007, (P.L. 110–140), December 19, 2007

53. Section 104 of the Energy Policy Act of 2005, (P.L. 109–58), August 8, 2005

54. Executive Order 13221, “Energy-Efficient Standby Power Devices,” August

2, 2001 https://www.idmanagement.gov/arch/#:%7E:text=FICAM%20is%20the%20federal%20government%E2%80%99s%20enterprise%20approach%20to,identity%20processes%2C%20practices%2C%20policies%2C%20and%20information%20security%20disciplines.

https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514 https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514 https://www.voa.va.gov/DocumentView.aspx?DocumentID=4896 https://www.cisa.gov/publication/tic-30-core-guidance-documents

55. VA Directive 0057, “VA Environmental Management Program,” October 25,

56. Office of Information Security (OIS) VAIQ #7424808 Memorandum, “Remote Access,” January 15, 2014, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28

57. Clinger-Cohen Act of 1996, 40 U.S.C. §11101 and §11103

58. “Veteran Focused Integration Process (VIP) Guide 4.0,” March 2021, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4371

59. VA Memorandum “Proper Use of Email and Other Messaging Services,”

January 2, 2018, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28

60. “Product Line Management Transformation Playbook” version 3.1, August 2023, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4946

61. NIST SP 500-267B Revision 1, “USGv6 Profile,” November 2020

62. OMB Memorandum M-21-07, “Completing the Transition to Internet

Protocol Version 6 (IPv6),” November 19, 2020

63. Social Security Number (SSN) Fraud Prevention Act of 2017

64. Section 240 of the Consolidated Appropriations Act (CAA) 2018, March 23,

65. C.F.R Title 15 Part 7, “Securing the Information and Communications

Technology and Services (ICTS) Supply Chain”, as amended

66. Executive Order 14028, “Executive Order on Improving the Nation's

Cybersecurity,” May 12, 2021, https://bidenwhitehouse.archives.gov/briefing-room/presidential-actions/2025/01/16/executive-order-on-strengthening-and-promoting-innovation-in-the-nations-cybersecurity/

67. OMB Memorandum M-22-09, “Moving the U.S. Government Toward Zero Trust Cybersecurity Principles”, January 26, 2022, https://www.whitehouse.gov/wp-content/uploads/2022/01/M-22-09.pdf.

68. NIST SP 800-52 Revision 2, “Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations

69. OMB M-22-18, “Enhancing the Security of the Software Supply Chain through Secure Software Development Practices,” September 14, 2022

70. OMB M-23-16, “Update to Memorandum M-22-18,” June 9, 2023

71. OMB M-21-31, “Improving the Federal Government’s Investigative and

Remediation Capabilities Related to Cybersecurity Incidents,” August 27,

72. NIST SP 800-88 Revision 1 “Guidelines for Media Sanitization,” December

73. CISA Binding Operational Directive (BOD) 19-02: “Vulnerability Remediation Requirements of Internet-Accessible Systems,” April 29, 2019, BOD 19-02: Vulnerability Remediation Requirements for Internet- Accessible Systems | CISA

74. CISA BOD 22-01: “Reducing the Significant Risk of Known Exploited Vulnerabilities,” November 3, 2021, BOD 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities | CISA https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28 https://www.voa.va.gov/DocumentView.aspx?DocumentID=4371 https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28 https://www.voa.va.gov/DocumentView.aspx?DocumentID=4946 https://bidenwhitehouse.archives.gov/briefing-room/presidential-actions/2025/01/16/executive-order-on-strengthening-and-promoting-innovation-in-the-nations-cybersecurity/ https://bidenwhitehouse.archives.gov/briefing-room/presidential-actions/2025/01/16/executive-order-on-strengthening-and-promoting-innovation-in-the-nations-cybersecurity/ https://bidenwhitehouse.archives.gov/briefing-room/presidential-actions/2025/01/16/executive-order-on-strengthening-and-promoting-innovation-in-the-nations-cybersecurity/ https://www.whitehouse.gov/wp-content/uploads/2022/01/M-22-09.pdf https://www.cisa.gov/news-events/directives/bod-19-02-vulnerability-remediation-requirements-internet-accessible-systems https://www.cisa.gov/news-events/directives/bod-19-02-vulnerability-remediation-requirements-internet-accessible-systems https://www.cisa.gov/news-events/directives/bod-22-01-reducing-significant-risk-known-exploited-vulnerabilities https://www.cisa.gov/news-events/directives/bod-22-01-reducing-significant-risk-known-exploited-vulnerabilities

75. CISA BOD 23-01: Improving Asset Visibility and Vulnerability Detection on Federal Networks.” Cybersecurity & Infrastructure Security Agency (CISA), BOD 23-01: Improving Asset Visibility and Vulnerability Detection on Federal Networks | CISA

76. VA Directive 6550, Pre-Procurement Assessment and Implementation of Medical Devices/Systems, June 03, 2019

77. VA Memorandum, “VA Security Controls,” January 17, 2025, https://www.voa.va.gov/DocumentView.aspx?DocumentID=5010

3.0 SCOPE OF WORK

The Contractor shall supply all labor, travel, materials, equipment, tools, supervision, and all incidentals required to complete on-site full service planned maintenance and corrective maintenance (repair) of the Pyxis Medication and Supply System being utilized within the VA facilities listed in this PWS, in accordance with Manufacturer’s recommendations, Joint Commission standards, design specifications, and the specifications, terms, and conditions of this contract. No software under this contract shall be considered perpetual licenses.

In addition, the Contractor shall provide replacement parts, labor, and equipment as necessary to keep the Products and Contractor-provided software performing in accordance with the material specifications. The Contractor shall provide software updates and upgrades, as defined as:

Software Updates include bug fixes, error corrections, virus updates, minor enhancements, or modification to existing features to maintain the security or operation of the Software. Software Updates also include Contractor approved software patches for its software.

Software Upgrades include major enhancements, new features, or other improvement to the software, but does not include any equipment, Third Party Software, or any other software that Contractor generally licenses separately.

4.0 PERFORMANCE DETAILS

4.1 PERFORMANCE PERIOD

The PoP shall be 12 months from date of award, with four 12-month option periods. The overall Period of Performance shall not exceed 60 months.

Any work at the Government site shall not take place on Federal holidays or weekends unless directed by the Contracting Officer (CO).

https://www.cisa.gov/news-events/directives/bod-23-01-improving-asset-visibility-and-vulnerability-detection-federal-networks https://www.cisa.gov/news-events/directives/bod-23-01-improving-asset-visibility-and-vulnerability-detection-federal-networks

There are 11 Federal holidays set by law (USC Title 5 Section 6103) that VA follows:

Under current definitions, five are set by date:

New Year's Day January 1 Juneteenth June 19 Independence Day July 4 Veterans Day November 11 Christmas Day December 25

If any of the above falls on a Saturday, then Friday shall be observed as a holiday.

Similarly, if one falls on a Sunday, then Monday shall be observed as a holiday.

The other six are set by a day of the week and month:

Martin Luther King's Birthday Third Monday in January Washington's Birthday Third Monday in February Memorial Day Last Monday in May Labor Day First Monday in September Columbus Day Second Monday in October Thanksgiving Fourth Thursday in November

4.2 PLACE OF PERFORMANCE

Tasks under this PWS shall be performed in VA facilities located in the following locations:

Marion VA Medical Center 2401 West Main Marion, IL 62959 618-997-5311

Evansville Health Care Center 6211 E. Waterford Blvd Evansville, IN 47715 1-800-772-8740 Fax Specialty 812-474-3696 Fax East Behav Med/MHICM/OEF 812-474-3604

Effingham Community Based Outpatient Clinic 1011 Ford Avenue Effingham, IL 62401 217-347-7600

Madisonville Community Based Outpatient Clinic 99 Stagecoach Road Madisonville, KY 42431 270-326-3600 Fax 270-326-3615

Mt. Vernon Community Based Outpatient Clinic 4000 South Water Tower Mt. Vernon, IL 62864 618-246-2910 Fax 618-246-2912

Paducah Community Based Outpatient Clinic 2620 Perkins Creek Dr.

Paducah, KY 42001 270-444-8465 Fax 270-443-7734

Owensboro Community Based Outpatient Clinic 2060 East Parrish Avenue Owensboro, KY 42303 270-684-5034 Fax 270-685-2053 Nurses Fax 270-685-

Vincennes Community Based Outpatient Clinic 1813 Willow Street Suite 6A Vincennes, IN 47591 812-882-0894 Fax 812-882-5031

Mayfield Community Based Outpatient Clinic 1253 Paris Rd Suite A Mayfield, KY 42066 270-247-2455 Fax 270-247-7915

Harrisburg Community Based Outpatient Clinic 608 Rollie Moore Drive Harrisburg, IL 62946 618-252-6150 Fax 618-252-2105

Heartland Street VA Clinic 3403 Heartland Street Marion, IL 62959 618-993-7734 Fax 618-998-5697

Carbondale Community Based Outpatient Clinic 1130 East Walnut Street Carbondale, IL 62901 618-351-1031 Fax 618-351-1107

If required, work may be performed remotely with prior concurrence from the Contracting Officer’s Representative (COR).

4.3 TRAVEL

No travel is anticipated for this task.

5.0 SPECIFIC TASKS AND DELIVERABLE SPECIFIC TASKS AND

DELIVERABLE

The Contractor shall perform the following:

1) All preventative and corrective maintenance, including emergencies, on the Pyxis systems to include 24/7/365 remote and onsite support, Preventative Maintenance for applicable equipment, software upgrades, well as the following:

a) The Contractor shall use commercially reasonable efforts to provide support by following their internal escalation procedures depending on the nature of the support required to resolve each reported issue.

b) Replacement of all parts that fail during normal use to include, but not limited to:

i) Hardware issue resolution to keep products properly performing in accordance with the associated user guide.

ii) Pyxis equipment break/fix activities to include triage, troubleshooting, and service part replacement.

iii) Defective Pyxis Products

iv) Database/Operating System Services – See PWS Section 3.0 for definitions of

Software Updates and Software Upgrades.

v) Server

c) Unlimited technical service and clinical applications telephone support.

d) Remote Site Support (RSS)

i) For Remote Site Support, the Contractor shall ensure proper secure connectivity to allow all implementation services and support activities. The Contractor shall adhere to Attachment 2 - Product Security White Paper regarding PYXIS remote support. Remote Site Support shall meet guaranteed response time and uptime support. The Contractor shall provide security patches and assistance with cybersecurity incident response.

ii) The Contractor shall inform the VA of any connectivity issues that would prohibit them from performing this requirement.

e) On-board system diagnostics

f) Preventive maintenance, safety and calibration of equipment shall be performed on-site and in accordance with the Contractor provided current preventative maintenance schedule.

g) Pyxis product equipment that are RSS enabled shall perform properly for at least 97% of the time (Uptime guarantee) as based on BD coverage for equipment that falls under the Advanced and Elite Support Plans. Software updates (BD and Third Party that require BD integration/configuration) See PWS Section 3.0 for definitions of Software Updates and Software Upgrades.

h) On-site technicians shall arrive on-site within eight (8) hours of being dispatched.

i) Replacement parts, excluding consumables, shall be provided as needed to keep the product properly performing.

j) Preventative maintenance will be provided to applicable products in accordance with manufacturer’s then current preventive maintenance schedule.

2) Scheduled (Preventative) Maintenance (Initial to be done 30 days after Contract Award.)

a) The Contractor shall perform preventive maintenance (PM) service to ensure that equipment listed in Attachment 1 – Covered Equipment performs in accordance with Section 5.0. The Contractor shall provide checklists and utilize procedures with worksheet originals indicating work performed and actual performance values obtained (as applicable). for inclusion in the Service/Inspection Report.

Described in section 5.0 paragraph 9.

b) PM services shall be provided in accordance with manufacturer specifications.

Any exceptions to the PM schedule shall be arranged and approved in writing with the COR in advance. Any parts, services, manuals, tools, or software required to successfully complete scheduled PM shall be included within this contract at no additional cost. Any fuel surcharges shall not be authorized.

c) The Contractor shall notify the COR and Biomed Supervisor at least 48 hours in advance of the date of contemplated PM inspection. A designated staff member will accompany the Contractor as an observer during the inspection. The inspection shall be thorough and shall conform to manufacturer and Industry Standards for the equipment. Sufficient time shall be allowed to permit a thorough inspection and test of each device comprising the overall system. Maintenance work and inspections may be combined at the approval of the COR if down time is not considered significant.

d) The Contractor shall immediately, but no later than 24 hours after discovery, notify the CO and COR (in writing) of the existence or the development of any defects in or repairs required to the scheduled equipment.

e) PM shall include but not be limited to

i) Cleaning of the equipment.

ii) Completing installation and documentation of all minor operational and reliability engineering notice changes.

iii) Running system diagnostics (hardware and software).

iv) Calibrating, adjusting and lubricating the equipment to manufacturer’s specifications.

v) Each piece of equipment will be checked for leakage current and ground wire resistance to assure that the equipment meets NFPA 70, NEC: NFPA 99 AND

UL 544.

vi) Contractor shall provide all factory-required or recommended software or hardware updates. The Contractor is responsible for incorporating all manufacturers’ recommended hardware and software updates, which ensure performance to current product specifications. This service will be performed during preventive maintenance, or at a time specified by the VA and agreeable to the contractor. All contractors will be required to install and maintain the engineering updates as requested by the factory. The updates will be incorporated in a timeframe as specified by the manufacturer or mutually agreed upon by the VA and the contractor. All updates will be provided by the contractor at no additional cost to the VA

vii) It is the sole responsibility of the contractor to schedule and perform all preventive maintenance inspections. The VA will not assume the responsibility of reminding the contractor that a preventive maintenance inspection is due to be performed. Preventive maintenance inspections will be performed on a weekday at a time set once the contract is awarded. The equipment user, COR, and the contractor must all agree to the recurring time set for preventive maintenance inspections.

viii) Contractor will affix a durable, waterproof label on each piece of equipment identifying inspection. Label will include date of inspection, Inspector’s name, phone number and due date for reinspection.

3) Unscheduled Maintenance (Emergency Repair Service)

a) The Contractor shall maintain the equipment in accordance with Section 5.0 15))

Conformance Standards. Contractor shall provide unlimited telephone technical support and all required parts for the maintenance and general upkeep of the VA Pyxis System.

b) Only the COR, has the authority to approve/request an unscheduled service call to the Contractor. Authorization for any work of this type must be received prior to performance of work or payment will not be authorized.

c) Unscheduled service calls are unlimited and incur no charge.

d) Technicians responding for unscheduled emergency service must report to the

COR, Biomed Supervisor, or designee (after hours). Upon completion of service/repair, the technician shall again report to that person.

e) Response time for this equipment during normal VA working hours will be Monday through Friday, 8:00 am to 4:30 p.m. Sixty (60) minutes call back, three

(3) hours on site in an emergency and twenty-four (24) hours regular.

f) Routine service calls are ones which in the estimation of the VA, are necessary to diagnose and repair equipment problems, but can be performed within normal working hours. Response time of the contractor for routine service calls made during the hours of 8:00 am and 4:30 p.m. (of normal working days) will be 24 hours after being officially notified. Routine service calls outside the hours of 8:00 am and 4:30 p.m. (normal working days) will result in the contractor responding within the response time commencing the next available normal working day.

g) Emergency service calls are ones which, in the estimation of the VA, require the immediate response of the contractor. Response time of the contractor for emergency service calls made during the hours of 8:00 am through 4:30 pm. (of normal working days) will result in a response time of within 3 hours of being officially notified. Response time of the contractor made outside of the hours of weekdays from 8:00 am until 4:30 pm will result in a response time of the contractor of within 5 hours after being officially notified.

4) Parts

a) The Contractor shall have ready access to all parts, including unique and/or high mortality replacement parts. All parts supplied shall be compatible with existing equipment. The contract shall include all parts. It is preferred that the contractor use new Original Equipment Manufacturer (OEM) or OEM-approved parts;

however, the Contractor may use fully validated and quality tested refurbished parts as necessary. The Contractor shall provide notification of use of refurbished parts to the COR. All parts shall be of current manufacture and have complete versatility with the presently installed equipment. All parts shall perform identically to the original equipment specifications. Parts removed from another system, rebuilt and/or used, shall not be installed without specific approval by the COR. All defective parts replaced become the property of the Contractor, unless otherwise specified by the CO or COR.

5) Service Manuals/Tools/Equipment

a) The VA shall not provide tools, test equipment, service manuals, or service diagnostic software to the contractor. Contractor shall obtain, have on file, and make available to its Field Service Engineer (FSE) all operational and technical documentation (such as operational and service manuals, schematics, and parts list) which are necessary to meet the performance requirements of this contract.

The location and listing of the service manuals, by name and/or the manuals themselves shall be provided to the COR upon request. Maintenance manuals shall not be furnished by the Contractor.

b) The Contractor shall provide the COR and the electronic copies of all documentation that pertains to any hardware, software, or firmware upgrade or repair.

c) The Contractor shall provide copies of the latest version(s) of all documentation and licensing agreements, which shall include operation, service, and diagnostic software. The COR shall have access to the same operation, service, diagnostic software, and documentation as the OEM's FSE. The Contractor shall provide OEM Service Bulletins to the COR for the equipment covered under this contract.

All documentation and service bulletins, etc. shall be provided within 30 days of award in either hard copy or electronic format. Any future service bulletins generated during the contract period shall be provided to the COR within 30 days of receipt in either hard copy or electronic format.

6) Services Not Covered by Contract

a) No work outside the scope of this contract must be performed without prior authorization of the CO or receipt of a formal contract modification.

7) Removal of Equipment

a) Approval from the COR must be obtained before removing any equipment from the VA Medical Facility. No transportation charges will be allowed for either the repair person or equipment to or from the Contractors facility. The Contractor will be responsible for all damage or loss of equipment that is not a result of abuse or neglect on behalf of Government personnel.

8) Condition of Equipment

a) All equipment is currently fully operational per required BD CareFusion’s standards. The Contractor accepts responsibility for the equipment described in Attachment 1 – Covered Equipment in "as is" condition.

9) Documentation/Reports (Detailed Service/Inspection Report

a) No later than seven business days after the conclusion of Preventative Maintenance, Preventive Maintenance Inspections (PMI), Unscheduled Maintenance (Emergency Repair Service) or any maintenance or repair; the Contractor shall provide a signed detailed service/inspection report listing all devices, all repairs for each device, parts used to maintain or repair the devices, and operating…