CCN NG Dental Record of Questions Amendment 0009.pdf

Question Numbers

Vendor Questions VA Answers

Could you please clarify whether the VA CCN Dental Network will be a Single-Award or a Multiple- Award IDIQ? There is conflicting language between the synopsis and the RFP.

The Government acknowledges this error. As stated in RFP section E.3, "the Government anticipates awarding a single award, Indefinite Delivery, Indefinite Quantity (IDIQ) contract to the Offeror whose proposal conforms to the solicitation requirements and represents the Best Value to the Government." Additionally, the Government hereby replaces the original attachment "Next Gen Dental Combined synopsis_solicitation_Final_12.15.2025.docx" in full with "Next Gen Dental Combined Synopsis_Solicitation_v2.pdf," which was updated with Amendment 0001.

Could you kindly confirm whether the effort is still in the pre-RFP stage? If so, is there an anticipated timeline for the RFP release? Additionally, have there been any determinations made regarding the contract vehicle or potential set-asides?

We are no longer in the pre-RFP stage known as the RFI. The RFP was released to SAM.gov on 12/15/2025 to the public. As stated on the RFP, page 1 this is an unrestricted solicitation. As stated in RFP section E.3, "the Government anticipates awarding a single award, Indefinite Delivery, Indefinite Quantity (IDIQ) contract to the Offeror whose proposal conforms to the solicitation requirements and represents the Best Value to the Government."

Could you please confirm whether the Government intends to award a Multiple Award, Indefinite Delivery Indefinite Quantity contract (as stated in the Combined Synopsis/Solicitation document) or a Single Award, Indefinite Delivery Indefinite Quantity contract (as described in the Solicitation 36C10G26R0004 document)?

The Government acknowledges this error. As stated in RFP section E.3, "the Government anticipates awarding a single award, Indefinite Delivery, Indefinite Quantity (IDIQ) contract to the Offeror whose proposal conforms to the solicitation requirements and represents the Best Value to the Government." Additionally, the Government hereby replaces the original attachment "Next Gen Dental Combined synopsis_solicitation_Final_12.15.2025.docx" in full with "Next Gen Dental Combined Synopsis_Solicitation_v2.pdf," which was updated with Amendment 0001.

We would like to know if this is a brand new contract OR if there is (was) an incumbent performing these services. If not brand new, could you please provide the current / previous contract number?

This requirement is a recompete. The services were previously performed under the following existing contracts 36C10G19D0038, 36C10G21D0001, 36C79119D0004, 36C79119D0005, 36C79119D0006

Can we please access an all eligible census (inclusive of home zip codes) - for those who will be offered the plan?

Historical purchasing patterns and volume data, provided as Attachment O ‘Dental Scheduling and Dental Comprehensive Care Estimated Volumes’ can be used to inform Offerors’ proposals and network development. There is no guarantee for future purchase volumes.

The solicitation also contains VA information security and privacy requirements (Sections B.9 and C.20 / VAAR 852.204-71), emphasizing protection of PII/PHI and VA sensitive information, which would encompass home ZIP-level eligibility files.

Of the eligible census, how many are enrolled in coverage? And what take rate are we expecting in year one and longer term?

Historical purchasing patterns and volume data, provided as Attachment O ‘Dental Scheduling and Dental Comprehensive Care Estimated Volumes’ can be used to inform Offerors’ proposals and network development.

What is the current administrative fee that is being charged per enrolled member per month?

Does this include broker commission? If so, what amount?

Please reference Factor 4: Price, Directions for Pricing CLINs and Section B.6 Dental CLIN Structure. The administrative PMPM fee is intended to cover all administrative services required by the contract (claims processing, network management, eligibility, reporting, customer service, etc.). The VA does not provide a standard broker commission amount as part of the CCN PMPM structure.

Who will be the policyholder in charge of paying the administrative fees and claims reimbursement?

The Department of Veterans Affairs (VA) is the entity responsible for reimbursing the Contractor for claims and paying administrative fees under this contract. The Contractor does not act as the policy holder; rather, the Contractor submits invoices to VA for reimbursement after paying network providers. Details regarding administrative fees may be located in section 2.9 of the CCN Next Gen Dental Network PWS and CCN Next Gen Dental Contractor Manual. Details regarding claims invoice reimbursements are located in section 10 of the CCN Next Gen Dental Network PWS and CCN Next Gen Dental Contractor Manual.

What is the effective date of the Dental benefits? The performance period has been added to the RFP via Amendment 0003.

Can we please access the dollar amounts associated with the fee schedule provided? The Dental VA Fee Schedule (DVAFS) establishes the maximum allowable reimbursement rates for network dental providers. These rates are derived from the 50th percentile of Usual and Customary Rates (UCR), as detailed in the Community Care Network (CCN) Dental Manual, Part 2, Section B.5 – Pricing.

In accordance with contractual obligations and VA policy, the specific dollar amounts associated with the DVAFS are considered proprietary and may not be disclosed publicly prior to contract award. Upon award, the applicable fee schedule rates will be made available to the awarded contractor in accordance with VA guidelines.

Any additional clarity you can share around expected enrollment, plan design parameters, network requirements, and operational expenses would be helpful.

The VA held a Dental Pre-Proposal conference on 1/21/2025 to provide additional opportunity for industry engagement. A video of the pre-proposal conference has been posted to SAM.gov via Amendment 0004.

Will there be a virtual option for the pre-proposal conference being held on January 21, 2026? If so, can we have this information?

The VA held a Dental Pre-Proposal conference on 1/21/2025 to provide additional opportunity for industry engagement. A video of the pre-proposal conference has been posted to SAM.gov via Amendment 0004.

Will the VA please provide the expected calendar year dates for this contract’s transition and performance periods? The performance period has been added to the RFP via Amendment 0003.

Will the VA please identify which CLINs in Attachment 3 are part of the Total Evaluated Price? The Total Evaluated Price are all priced CLINs, denoted in green in Attachment 3: CLIN X002 – Waivers of Payment Rates, CLIN X004 – Administrative Services, CLIN X005 – Implementation, OPTIONAL CLIN X006AA – Implementation for Dental Appointment Scheduling: VA Facility, OPTIONAL CLIN X006AB – Implementation for Dental Appointment Scheduling: Contractor’s Site, OPTIONAL CLIN X006AC –Dental Appointment Scheduling Administration, OPTIONAL CLIN X007AA – Extra Small Software Development Task Size, OPTIONAL CLIN X007AB – Small Software Development Task Size, OPTIONAL CLIN X007AC – Medium Software Development Task Size, OPTIONAL CLIN X007AD – Large Software Development Task Size, OPTIONAL CLIN X007AE – Extra Large Software Development Task Size, CLIN X008 – Transition Out.

Will the VA clarify if Optional CLINs X006 and X007 are part of the Total Evaluated Price? Yes, CLINs X006 and X007 are included in Total Evaluated Price. Please reference section B.6 Dental CLIN Structure, of the RFP for further CLIN information.

Does the VA expect all work under CLIN X006 to be the same level of effort at each VA site? If the level of effort is expected to be variable based on VA sites, will the VA please provide data allowing contractors to better understand level of expected effort in order to provide more credible pricing?

VA anticipates that the level of effort under CLIN X006 may vary by VA site. Offerors may use the volume information provided in Attachment O when estimating the expected level of effort at each VA site. As stated in the solicitation, this data is provided to inform proposals and network development and does not constitute a guarantee of future purchase volumes.

Attachment O forecasts CCN dental volumes to increase by nearly ~800K cases a year by FY 2034. Would the VA please provide similar data over the same period for dental volumes occurring inside VA’s direct care environment to allow offerors to better understand the CCN dental forecast and price more competitively as a result?

Direct Care data is not included in a solicitation as there are no evaluation criteria based on that information. Attachment O is to be used for forecasting purposes.

The RFP document mentions Attachment Past Performance Reference Template. We cannot locate that attachment. Please provide

Please see Attachment 5 - Past Performance Questionnaire PPQ- Dental Network posted on 15 Dec 2025. Revised see column K

Could we have the number of Dental claims processed by your current provider in the last 12 months, and if possible, the total amount paid out in Dental claims over the last 12 months as well.

VA issued a revision to Attachment O to support the Offerors’ planning and compliance with CCN Next Gen requirements. This will include aggregated, de identified historical data and projections related to applicable services and claims. Please refer to Amendment 0003 for updated attachment.

What are the required turnaround times for scheduling Veterans once a VA Approved dental Referral is received?

VA’s network adequacy standard requires that initial dental care be delivered no later than 28 days from the date the referral is approved by VA (measured to the initial date of service on the first claim). Reference PWS section 3.1 Dental Network Establishment and Maintenance, Table 2.

If VA exercises Optional Task 1 (Dental Appointment Scheduling) and assigns scheduling to the Contractor, two additional turnaround times apply: (1) the Contractor has 2 business days from receipt of a VA

Approved Referral to either return it or it is deemed accepted, and (2) the Contractor must schedule the Veteran’s first routine dental appointment with a network provider within 21 days of the date VA sent the referral to the Contractor.

Would the Department of Veterans Affairs please confirm whether any Use Case Oral Presentation materials are required to be submitted by the initial proposal due date of March 16, 2026 at 2:00 p.m. ET under Solicitation No. 36C10G26R0004 (Next Gen Dental)?

No Use Case Oral Presentation materials are required to be submitted by the initial proposal due date of March 16, 2026, at 2:00 p.m. ET.

Is FedRAMP compliance required prior to submission of the RFP? If not, does the VA expect the Contractor to demonstrate that FedRAMP compliance is “in process” at the time of RFP submission?

FedRAMP authorization is a requirement the Contractor must meet and maintain as directed by VA during contract performance, but there is no requirement that FedRAMP be in place or “in process” at the time of RFP due date.

Please clarify the number of Veterans who currently receive dental services through the Community Care Network compared to those receiving dental care directly from VA Medical Centers.

The Government does not publish a precise split of Veterans receiving dental care through the Community Care Network (CCN) versus VA Medical Centers. However, historical program data and utilization trends will be made available to the Contractor during transition and onboarding activities to support network planning, operational readiness, and staffing assumptions.

Offerors should use the data provided in conjunction with their own operational experience to develop proposals, Basis of Estimate (BOEs), and staffing models that support both CCN and VA-delivered dental services.

Please confirm what authorizations, approvals, or accreditations (whether for a Contractor or their vendor(s)) are required for a Contractor to use licensed vendor software or applications in support of this contract, and whether the VA expects specific structural components of vendor engagement/licensing (e.g., vendor registration) in addition to the Contractor’s Master Services/Licensing Agreement and Business Associate Agreement with the vendor (if applicable) for such software or applications.

For cloud or other solutions that store or display PHI, PII, or financial information, the contractor is required to achieve and maintain a FedRAMP rating as directed by VA. The solicitation also recognizes, but does not require, third party accreditations such as EHNAC or an existing Federal ATO; if such accreditations exist, the contractor is asked to provide the details or, if not, to describe its security control environment.

The solicitation does not require VA specific vendor registration requirement for software vendors beyond these security, privacy, and contractual obligations.

May the Contractor lease or partner with an existing national dental network to supplement its own network in meeting CCN Next Generation Dental Network requirements? Or how may the Contractor prove their ability to build a national network (through an LOI or previous experience) in the submission of the RFP?

Please see section 3.1.1 of the Dental PWS language that allows for the plan to use and disclose other unilateral contracts.

“This shall include details on the numbers and types of providers entering the CCN Next Generation Dental Network (including those from other contracts, Federally Qualified Healthcare Centers (FQHCs), and VA-identified preferred providers).”

Please defer to section 3.3.1 of the Dental PWS Network Adequacy Plan that outlines elements for sizing and capacity to meet network adequacy demands.

Will the VA provide detailed provider data for existing CCN dental network participants to support network build, adequacy analysis, and transition activities?

Please refer to Attachment O Dental Volumes by Station Dental Network_Updated.xlsx posted on Sam.gov on Jan 16, 2026.

Please confirm if the Contractor will be evaluated for the entire region or if the VA will be considering select regions under this solicitation.

The VA will evaluate the Contractor’s proposal on a regional, state, and catchment area basis as outlined in PWS Sections 3.1.1 and 3.2. The Contractor is required to submit a CCN Next Generation Dental Network Adequacy Plan by Region, State, and Catchment Area with the proposal. The plan will document how the Contractor intends to build and maintain a network that meets the network adequacy standards for all applicable regions and service categories.

For Use Case #3. Please clarify whether the requirement for real-time pharmacy dispensing data access applies to dental services or if an alternative interpretation should be used.

The requirement is to present the approach as stated in the PWS “How will your portal provide VA personnel and network providers with real-time access to pharmacy dispensing data from your Pharmacy Benefits Manager (PBM)?” The requirement is not to display real-time data.

Do Dental Network Waiver Requests require a clinical review by the Contractor prior to submission to the VA?

Dental waivers require sufficient justification, but clinical reviews are not a requirement, as outlined in PWS section 3.3.1 Dental Network Waiver Requests:

Seek to recruit and contract with alternative providers, practitioners, and facilities within the VAMC catchment area that offer the requested specialty but are not currently within the network.

Develop detailed documentation, including:

Detailed provider and facility profiles including qualifications, specialties, services offered, and geographical locations Records of correspondence with potential providers, practitioners, and facilities, including outreach efforts, responses received, and negotiations conducted Regular reports detailing the status of recruitment efforts, challenges encountered, and outcomes achieved Detailed tracking logs of all contacts made, responses received, and the status of ongoing negotiations Meeting notes or minutes from discussions with potential providers and facilities

Is the Contractor permitted to propose modifications to the Waiver of Payment Rates Request Form to support dental workflow efficiency or data capture needs?

The change would require negotiation and agreement between both the Contractor and VA. Additionally, there is a free text field on the request form for additional information from the contractor.

Please confirm the expected VA review timeline for dental Waiver of Payment Rates Requests. Waiver of payment rates request review and determination time varies. VA conducts a thorough assessment to confirm the waiver of payment rates is required based on scarcity or rurality and other factors, before a determination can be made.

If a Waiver of Payment Rates Request is approved, does the approval apply to the entire Tax Identification Number (TIN) group for the duration of dental participation, or is it limited to specific providers, codes, or timeframes?

Waiver of payment rates requests are reviewed, and determination is made based on the information the Contractor provides within the request form (Attachment Q). If a waiver of payment rates request is approved, it would apply to the code and NPI/TIN information the Contractor included within the request form and any applicable parameters VA set forth within the approval. Information related to waiver of payment rates is located in Part 2: B.5 Price/Cost Schedule Sections of the CCN Next Gen Dental Contractor Manual v1.0; section B.5.4 Waivers of Payment Rates of 36C10G26R0004 Next Gen Dental final 12.14.25 LC; and Attachment Q Network Adequacy Rate Waiver Form Dental Network.

Please confirm that, for authorized services without VA Dental Value Added Services (DVAS) rates, Contractors are required to reimburse 50% of billed charges, and whether this includes Single Case Agreements.

Yes, for authorized services that do not have an established rate on the Dental VA Fee Schedule, the reimbursement amount is 50% of billed charges. Single Case Agreements are able to be established with different rate, but must be approved by VA.

Are specific specialty dental providers (e.g., endodontists, oral surgeons) required to be contracted to meet network adequacy and appointment timeliness standards?

Per the Dental PWS Section 3.2 Dental Provider Network, the CCN Next Generation Dental Network shall include both general and specialized dental care.

Can the Contractor customize the dental EOB template while still meeting data and language requirements, and what are the timeliness requirements and associated penalties, if any, for mailing or providing electronic EOBs?

No, per Section 11.2 of the PWS, VA requires that the "The Contractor shall issue an EOB to Veterans using the VA template, Attachment I, “CCN Veteran Explanation of Benefits (EOB) Template_Dental.”

Further please see SAM.gov to review the revised PWS Section 11.2 Issuance of Explanation of Benefits.

At what point in the credentialing, onboarding, or activation process must network dental providers complete VA required training modules in support of Veteran care?

All providers must complete all VA required training modules prior to receiving referrals. The provider must complete all training before becoming "active" or considered in network by VA.

Please confirm whether a VA Approved Referral is required before delivering routine dental examinations and prophylaxis.

Yes, a VA-Approved Referral is required prior to delivery of any dental services. The VA-Approved Referral will provide details on what services are approved.

The RFP specifies a 30-day requirement for clean claims. What is the required processing timeline for unclean or incomplete dental claims?

The 30 day processing requirement is applicable to all claims. Please see Attachment Ca QASP Dental Network, PO3.1 for more information on how this requirement will be measured and monitored.

What are the required turnaround times for scheduling Veterans once a VA Approved dental Referral is received?

No later than 28 days. Please refer to Table 2 in PWS section 3.1 Dental Network Establishment and Maintenance for network adequacy standards.

If a dental referral is missing mandatory data fields, is the Contractor expected to contact VA for correction, the Veteran, or both?

If a dental referral is missing mandatory data fields, the Contractor is expected to coordinate with VA to obtain the necessary corrections or missing information. The Contractor should not contact the Veteran directly to resolve referral data deficiencies.

Please confirm expectations for notifying Veterans when a dental referral is returned to VA for correction.

There is no requirement for notifying Veterans when a dental referral is returned to VA for correction.

Will the VA release updated DVAS fee schedules on a fixed annual cadence, or will updates occur ad hoc?

The VA updates the DVAS fee schedules on a fixed annual cadence. The 2026 VA Fee Schedule is effective from January 1, 2026, and is part of the annual updates that ensure fair and consistent reimbursement rates for authorized care to Veterans.

Does the Contractor need to support retroactive dental claims adjustments when VA updates fee schedules mid-year?

VA intends to have a fee schedule process that allows delivery and implementation prior to the effective date for the fee schedule, which will minimize the need for retroactive claims adjustments.

Is the Contractor required to perform pre payment clinical review for any dental procedure codes at the time of claim processing?

The Contractor must perform pre payment review (including clinical/documentation review) for certain flagged or high risk claims/providers, and for pended claims under Payment Integrity.

Does the VA have expected notification timelines for members affected by a provider’s removal from their network? Does this differ by provider type, e.g. PCP v. specialist? Are there model communications that should be used?

The Contractor must promptly update provider status in their system upon removal and notify VA of any network changes, including provider departures, within the timeframes specified in the Dental Manual and PWS Section 3.4 (Credentialing). While the PWS does not differentiate notification timelines by provider type (PCP vs. specialist), the Contractor must ensure timely communication to Veterans to minimize disruption in care. The VA provides templates for Veteran notifications, including letters or electronic communications, to advise members of provider status changes and SCA arrangements (see PWS Section 11.2, “Issuance of Explanation of Benefits,” which specifies use of VA-approved templates for member communications).

Does the Contractor need to support Third-Party liability (subrogation) when VA members are involved in an accident?

If yes, is the VA agreeable to the Contractor outsourcing subrogation to a Vendor with appropriate oversight?

Yes, the Contractor is responsible for supporting Third-Party Liability (subrogation) activities for incidents involving VA members, in accordance with the PWS requirements.

The VA allows the Contractor to outsource subrogation activities to a qualified third-party vendor, provided that the Contractor maintains overall responsibility and oversight for compliance with all PWS requirements, applicable laws, and VA policies. The Contractor remains accountable for performance, reporting, and any associated obligations under the contract.

Is a state third-party administrator license required by the Department of Veterans Affairs for this contract?

1. If a third-party administrator license is needed, does the Department of Veterans Affairs expect plans to be licensed in all state where they may serve veterans or only in the primary state where the contracting entity is registered?

The Department of Veterans Affairs does not require plans to hold licenses in every state where services may be delivered to Veterans.

Offerors must maintain all licenses, registrations, and certifications required by law in the primary state of the contracting entity and ensure compliance with applicable federal and state requirements for operations.

Can a Contractor utilize direct medical services for program beneficiaries towards satisfying the Small Business or Veteran Business subcontracting plan?

No. Direct services provided by the Contractor to program beneficiaries may not be counted toward satisfying the Small Business or Veteran Business subcontracting plan goals. Subcontracting plan commitments must be fulfilled through subcontracts awarded to qualifying small business or veteran-owned business entities in accordance with FAR Part 19, VAAR requirements, and the PWS.

When does the contractor anticipate the go-live date of dental network IDIQ to occur and when would benefits become effective for annual limits? (i.e. Contract effective 1/1/2028 benefits run on the calendar year?)

Once the anticipated award date and corresponding transition and performance period dates are determined, VA will provide this information to offerors via an amendment or other formal notice, consistent with the relative timeframes and requirements set forth in the solicitation and

PWS.

What is the anticipated interplay between the offeror and existing CCN providers? Does VA expect plans to develop or maintain current CCN providers within a network or is this entirely at the offeror’s discretion?

The PWS requires the contractor’s Deployment and Implementation Plan (Section 2.3) to include a specific recruitment plan for “bringing in current community providers into the network and how providers will be engaged.” Likewise, the required Dental Network Adequacy Plan must describe how the network will be built and maintained “including those from other contractors” and must include a “recruitment and communication plan for transitioning currently contracted providers into the CCN Next Generation Dental Network.”

Dental solicitation Factor 2 Past Performance references "Past Performance Reference Template" (Attachment 6) which appears to be omitted from the solicitation package. Please provide via Amendment.

The Past Performance Reference Template (Attachment 6) has been uploaded via Amendment 0007.

Attachment 1 PWS, Section 2.7 Regarding information security, the RFP refers to following VA Directives which appear to be NIST-based. However, in the Schedule of Deliverables, the PWS specifies a SOC 2 Type 2 report and bridge letter as the only security deliverables with no mention of NIST. Can the Government clarify/confirm what security frameworks are to be followed along with the associated deliverables/assessments?

The Government confirms that Contractors are required to comply with applicable VA information security requirements, including VA directives and policies that incorporate NIST standards, for all systems and data used in performance of the contract.

For deliverables and assessments, the PWS Schedule of Deliverables specifies SOC 2 Type 2 reports and bridge letters as the required documentation for demonstrating security compliance. Contractors must maintain security controls and practices consistent with VA directives and NIST standards, but the SOC 2 Type 2 report and bridge letter are the primary deliverables submitted to the Government to satisfy the solicitation requirements.

Dental solicitation, Section B.9.

Please confirm VA requires FedRamp ratings for cloud-based solutions only.

VA requires FedRAMP and the Contractor is required to achieve and maintain a FedRamp rating as directed by VA and governed by the FedRamp.gov program. For Cloud Services hosting, the Contractor shall also ensure compliance with the Federal Risk and Authorization Management Program (FedRAMP) as detailed in attachment 36C10G26R0003 Next Gen Medical final 12.14.25_JP.pdf, Section, Information System Hosting, Operations, Maintenance, OR Use) , bullet #1 & Section System Security Governance"

Dental solicitation, Section B.9 The RFP states that, "Upon contract award the CCN Contractor shall complete a Contractor Security Control Assessment (CSCA) within 30 days of contract award." The CSCA is not mentioned within the PWS in the Schedule of Deliverables. Can the Government clarify/confirm whether the CSCA is required? If a CSCA is required, can the VA provide a current template?

Yes. The Government confirms that the Contractor Security Control Assessment (CSCA) is a required deliverable within 30 days of contract award, as stated in Section B.9 IT Security, in the section titled Information Security of the solicitation.

The VA does not provide a CSCA template. Contractors are expected to follow standard federal security assessment practices in accordance with FISMA, HIPAA, and NIST guidance when completing the CSCA. The VA will review and accept the Contractor’s CSCA documentation upon submission.

5. Attachment 1 Dental PWS Section 13.1 Regarding VA participation in committees. Section 13.1, #13 states mutually agreed upon between Contractor and VA; Section 13.5 voting and non-voting VA staff participation as determined by VA. Please confirm that participation will be mutually agreed upon between the VA and the Contractor.

VA confirms the per Section 13.1, the Contractor shall "Describe the process that allows VA staff, as mutually agreed upon between Contractor and VA, to actively participate as voting and non-voting members on each committee." Please monitor SAM.gov to review the updated PWS section 13.5 that has been revised to deconflict this requirement.

Attachment 1 Dental PWS Section 3.4 Currently NQCA standards are accreditation completion within 180 days, from the time of the provider's attestation. Would the VA be willing to align to this national standard? By following this standard, it allows broader access to care for Veterans.

Thank you for the question; however, VA has determined that credentialling should be completed within 90 days from the provider’s acknowledgement of the request for credentialling. This ensures compliance of VA standards.

Attachment 1 Dental PWS Section 5.3 This section states, "Acknowledgment of receipt as a point of contact shall be provided in the ticketing tool within 24 hours." Please confirm this means 24 business hours to account for weekend and holidays.

In 5.3 Contractor Use of VA-Provided Ticketing Tool, the language "Acknowledgement of receipt and a point of contact shall be provided in the ticketing tool within 24 hours” means 24 consecutive hours not “business hours”.

Attachment 1 Dental PWS, Section 5.3 Please confirm that the VA will consider requests for redesignation of inquiry Tier severity based on Contractor's assessment of resolution complexity and timeline.

No. The Government will not consider requests for redesignation of inquiry Tier severity based on Contractor assessments. Contractors must adhere to the Tier definitions and processes as specified in PWS Section 5.3, including timelines, response requirements, and escalation procedures.

Attachment 1 Dental PWS Section 5.3.d Please provide examples of the provider education included in this requirement.

The Government confirms that provider education under PWS Section 5.3.d (Contractor Use of VA-Provided Ticketing Tool) refers to activities designed to ensure that network providers are knowledgeable about VA policies, procedures, and program requirements. Examples include, but are not limited to:

Orientation on VA referral processes and prior authorization requirements;

Training on documentation and claims submission requirements;

Guidance on timely communication of critical findings and reporting obligations;

Updates on policy or procedural changes affecting clinical care or administrative processes; and Education regarding network adequacy standards and performance expectations.

Offerors may propose additional educational methods and tools to support effective provider engagement, consistent with PWS requirements.

Attachment 1 Dental PWS, Section 15.1.2 Please confirm that it is acceptable for network providers to require veterans to complete financial responsibility forms prior to their appointment.

According to Section 11. Coordination of Benefits, “The Contractor shall ensure providers do not require or request Veterans to sign financial responsibility forms before scheduling or being seen for an appointment.”

Dental solicitation Section E.3.A.f.

Please clarify proposal submission requirements based on the three provided email addresses.

The instructions require offerors to email to three separate email inboxes. To be considered an on-time and successful submission, do the email submission have to be received in all three of the provided email inboxes or, would receipt in one of, or two of the three email inboxes be deemed on-time and successful?

Proposals shall only be submitted to the Contracting Officer(s) and the Contracting Specialist(s) via email to CCNNextGenInquiries@va.gov so that they are received on or before date/time specified on the SF1449, Block 8. The email address was updated via Amendment 0001.

Attachment 1 Dental PWS Section 3.1.1 Please provide geographic data for each Catchment area, including zip, states, and county.

Historical purchasing patterns and volume data, provided as Attachment O ‘Dental Scheduling and Dental Comprehensive Care Estimated Volumes’ can be used to inform Offerors’ proposals and network development. There is no guarantee for future purchase volumes.

The solicitation also contains VA information security and privacy requirements (Sections B.9 and C.20 / VAAR 852.204-71), emphasizing protection of PII/PHI and VA sensitive information, which would encompass home ZIP-level eligibility files.

Attachment 1 Dental PWS Section 6.1.

1) Please confirm that the noted timeframes (i.e., urgent and standard) begin once the RFS is complete. 2) Please confirm that 4 hours is 4 business hours.

Yes. Per PWS Section 6.1, the RFS timeframes are triggered upon receipt of a complete and validated RFS package by the Contractor. 4 hours is defined as 4 hours, not 4 business hours.

Attachment C PRS PO 2.2 Please confirm the threshold definition for “short abandonments.” Provide the exact formula and any timing thresholds (e.g., ≤ x seconds) expected in production reporting.

Not enough information is provided. Attachment C – Performance Requirement Summary Dental Network does not mention short abandonment.

Attachment 1 PWS, 2.5.1 and PO 2.1 and PO 2.3 Please provide authoritative Dental definitions/formulas for Blockage, Abandonment (including treatment of short abandons), ASA, and IVR Abandoned; include handling of transfers, requeues, system disconnects, after-hours, and warm transfers.

Please refer to Section 5.7.3 of the PWS and the Definitions Table in Section 18 of the PWS for definitions and more information on each of these terms.

Dental solicitation, E.3.C.h Table 1 Please confirm:

• Offerors are permitted to submit no more than a 3-page narrative for each Past Performance reference for a total of 9 pages.

• Offerors are permitted to submit a 1-page Introduction and a 1-page Conclusion paragraph as part of Volume II Past Performance and those 2 pages will not count against the 9 pages for a total narrative of not more than 11 pages.

The Government has established the page limits for Factor 2 – Past Performance as specified in Table 2 of the solicitation. Offerors must comply with the existing instructions, which allow submission of three Past Performance Questionnaires (PPQs) plus a three-page overall narrative for all PPQs. The Government does not intend to modify these page limits.

Any pages submitted with the narrative will count towards the page limit.

Attachment 1 Dental PWS, Section 2.7.1 Please confirm that SOC reporting begins at the Start of Healthcare Delivery (SHCD)?

The Government confirms that SOC reporting begins at the Start of Healthcare Delivery (SHCD). Contractors are expected to establish the necessary security controls, monitoring, and reporting processes to support SOC compliance effective as of SHCD, consistent with the requirements in PWS Section 2.7.1. (SOC 1 and SOC 2 Reporting Specifications and Deliverables)

Attachment 3 Dental Pricing Template. CLIN Xxx4 Please provide the annual Veteran eligibility numbers that will be applied to calculate the per enrollee cost. This information has significant cost/price implications.

The Government will provide estimated annual Veteran eligibility numbers during transition and onboarding activities to support calculation of per-enrollee costs for CLIN Xxx4. These estimates are intended to allow Offerors to develop Basis of Estimate (BOEs) and pricing assumptions.

Offerors should use the provided estimates in combination with their operational experience and standard costing methodologies to develop per-enrollee pricing. Actual eligible Veteran counts may vary during contract performance, and pricing adjustments or reconciliations, if applicable, will be handled in accordance with contract terms.

Dental solicitation Section E.4 CLIN X006AB This CLIN references implementation, which is typically a one-time event, but the section references "for each year of the Period of Performance". Should bidders use this CLIN for implementation and on-going costs to maintain the appointment scheduling (e.g. software licenses, translation services)?

CLIN X006AB is intended to be a comprehensive "all-in" price for the appointment scheduling service per performance year, rather than just a one-time setup fee.

Attachment O Dental Volumes Please verify the offerors should use the enrolled Vet amounts in this tab as the basis for the monthly enrolled projections for Administrative CLIN reimbursement. Also, please confirm the enrollment provided in the enrolled Vet tab is a snapshot in time, and the FY enrollment figures represent the average monthly enrollment.

The solicitation requires offerors to use the "Projected Veteran Dental Eligibility Priority 1a" data found in Attachment O. Dental PMPM in CCN NG is calculated using the dental eligible Veteran population.

PMPM definition (Dental): the cost of administrative services per dental eligible Veteran per month.

Population used: the monthly (12 month) simple average of dental eligible Veterans, based on eligibility data provided daily by VA to the Contractor.

Invoice support: the Contractor must submit a supplemental data file with each invoice showing the monthly simple average and the source data used.

Variables:

•(n) = Annual eligibility per Attachment O •(x) = Total Admin Cost per FY •(y) = Annual Administrative Services Rate •(z) = Monthly Administrative Services Payment •(w) = Annual Administrative Services Payment

Formulas:

Attachment 3 Dental Pricing Template Please provide projections on the annual number of implementations an offeror should expect for implementation of appointment schedule at VA sites.

Projections on the annual number of implementations an offeror should expect for implementation of dental appointment scheduling at VA sites are not provided. Accordingly, the offeror should include and detail its own projected annual implementation volumes and related assumptions as part of its estimate (e.g., Basis of Estimate), consistent with the solicitation’s pricing and submission instructions.

Attachment 3 Pricing Template.

Following achievement of full healthcare delivery (HCD), how many months in Base Period Year 1 will be applied to CLIN xx04 to calculate the total evaluated price? What volume of average enrolled monthly veterans will be applied?

The solicitation requires offerors to use the "Projected Veteran Dental Eligibility Priority 1a" data found in Attachment O. Dental PMPM in CCN NG is calculated using the dental eligible Veteran population.

PMPM definition (Dental): the cost of administrative services per dental eligible Veteran per month.

Population used: the monthly (12 month) simple average of dental eligible Veterans, based on eligibility data provided daily by VA to the Contractor.

Following the achievement of full healthcare delivery (HCD) in Base Period Year 1, any remaining months are applied to CLIN xx04 to calculate the total evaluated price.

Attachment 3 Dental Pricing Template Please provide the volumes the government will use for appointment scheduling and what software task size will be assumed when calculating a total evaluated price?

For Appointment Scheduling – In Attachment O, refer to tab “Total Number of Unique Veterans with a Scheduled Authorization”

For Software Task Size – refer to PWS section 16.2 (Optional Task 2: Software, Process, and Proof of Concept Development)

The Amendment of the Solicitation states that VA may request the contractor provide copies of their (corporation’s, sole proprietorship’s, partnership’s, limited liability company (LLC), or other business structure entity’s) policies, procedures, evidence and independent report summaries related to specified cybersecurity frameworks (International Organization for Standardization (ISO), NIST Cybersecurity Framework (CSF), etc.). It also states that VA or its third-party/partner designee (if applicable) may perform audits and security/penetration tests of the contractor’s IT or systems and controls, to ascertain whether the contractor is complying with the information security, network or system requirements mandated in the agreement between VA and the contractor.

There is no question for VA to respond to.

Please confirm that any such evidence requests, audits, penetration tests, or security assessments will be limited to the contractor owned and contractor operated system/enclave supporting VA CCN Next Gen and the systems within that enclave that process, store, or transmit VA data, and that corporate-wide internal policies, systems, and IT environments unrelated to VA data or VA system access are out of scope for audit, inspection or testing.

The Government confirms that all evidence requests, audits, penetration tests, or security assessments are limited to the Contractor-owned and Contractor-operated systems or enclaves that support VA CCN Next Generation and any systems within those enclaves that process, store, or transmit VA data.

Corporate-wide internal policies, systems, and IT environments unrelated to VA data or VA system access are out of scope for such audits, inspections, or testing. Contractors are responsible only for ensuring compliance, security, and reporting within the systems that directly support performance under the PWS.

Dental solicitation, Amendment 3 The PWS and amendments state that all media used to store, process, or access VA information must be either returned to VA or sanitized in accordance with VA Handbook 6500.1 and NIST SP 800 88, and that certification of sanitization must be provided within 30 business days of contract termination. For Optum's contractor owned infrastructure in a Contractor Owned/Contractor Operated (COCO) architecture, will VA confirm that the requirement for “return of physical media” may be satisfied by

• NIST SP 800 88–compliant sanitization of dedicated logical storage constructs (e.g., volumes, LUNs, storage accounts) used exclusively for VA data within the contractor's COCO environment, and

• Provision of sanitization logs or attestations from the cloud service provider documenting media destruction events in lieu of returning physical disks, since physical drives underlying cloud storage are not contractor accessible?

This clarification will ensure that our media sanitization and contract closeout procedures align with VA expectations while operating within modern cloud infrastructures.

The Government confirms that, for Contractor-owned infrastructure in a Contractor Owned/Contractor Operated (COCO) architecture, the requirement for “return of physical media” may be satisfied by:

NIST SP 800-88–compliant sanitization of dedicated logical storage constructs (e.g., volumes, LUNs, storage accounts) used exclusively for VA data within the Contractor’s COCO environment; and

Provision of sanitization logs or attestations from the cloud service provider documenting media destruction or deallocation events, in lieu of returning physical disks, when physical media is not accessible to the Contractor.

The Contractor must submit documentation of sanitization or destruction within the 30-business-day period following contract termination, consistent with VA Handbook 6500.1 and applicable PWS requirements.

Dental solicitation, Amendment 3

1. The IT Contract Security requirements added as part of Dental Amendment 003 appear to be applicable for Government Owned, Contractor Operated (GOCO) systems. Please confirm that requirements applicable to GOCO systems would only apply for certain systems developed under the Software Development CLINs under TOPR1 and 2 or other TOPRs procured under this IDIQ which would require such GOCO systems.

• Will the government confirm that the services and corresponding systems utilized by contractors to deliver the requirements outlined in the Dental PWS, TOPR1 and TOPR2 are procured as commercial services and considered Contractor Owned, Contractor Operated (COCO), and that such systems are only subject to the corresponding applicability of VA Handbook 6500 for COCO systems?

The Government confirms that the systems and services utilized by Contractors to deliver the requirements in the Dental PWS, TOPR 1, and TOPR 2 are Contractor-owned, Contractor-operated (COCO) and may be procured as commercial services.

Such systems are subject to VA Handbook 6500 requirements applicable to COCO systems only. Contractors are responsible for ensuring compliance with applicable VA policies and data security requirements for the COCO systems that process, store, or transmit VA information.

Systems or services outside the COCO environment or unrelated to VA data are not subject to VA Handbook 6500 requirements.

The Amendment states that, "The contractor shall ensure all delivered applications, systems and information systems are compliant with Homeland Security Presidential Directive (HSPD) 12 and VA Identity and Access management (IAM) enterprise identity management requirements as set forth in OMB M-19-17, M-05-24, FIPS 201-3, Personal Identity Verification (PIV) of Federal Employees and Contractors (or its successor), M-21-31 and supporting NIST guidance." In addition, The Amendment states that, "Direct authentication at a minimum must include Public Key Infrastructure (PKI) based authentication supportive of Personal Identity Verification (PIV) and/or Common Access Card (CAC), as determined by the business need." Further, The Amendment states that, "All contractors and subcontractors working with VA information are subject to the same security investigative and clearance requirements as those of VA appointees or employees who have access to the same types of information."

• For those systems and solutions which are considered COCO, would the Government consider phishing-resistant Multifactor Authentication (MFA) for internal authentication COCO systems in lieu of VA PIVs?

Yes, VA will consider an alternative to VA Personal Identity Verification (PIVs) as long as the offeror provides evidence of compliance through independent verification and validation by a FedRAMP Third Party Assessing Organization (3PAO), sufficient to meet the VA's included guidelines.

The Amendment states that, "When the contractor is responsible for operations or maintenance of the systems, the contractor shall apply the security fixes within the timeframe specified by the associated controls on the VA Information Security Knowledge Service. When security fixes involve installing third party patches (such as Microsoft OS patches or Adobe Acrobat), the contractor shall provide written notice to the VA COR/CO that the patch has been validated as to not affecting the Systems within 10 business days." The Amendment also states that, "The contractor shall ensure the security of all procured or developed information systems, systems, major applications, minor applications, enclaves and platform information technologies, including their subcomponents (hereinafter referred to as “Information Systems”) throughout the life of this contract and any extension, warranty, or maintenance periods. This includes security configurations, workarounds, patches, hotfixes, upgrades, replacements and any physical components which may be necessary to remediate all security vulnerabilities published or known to the contractor anywhere in the information systems (including systems, operating systems, products, hardware, software, applications and firmware)."

• For COCO systems, when a contractor conducts internal testing and review before rolling a patch into production as part of the internal change control process. Would the Government consider a schedule of patch reporting so that patches may be applied promptly if needed?

Yes, VA will consider a schedule of patch reporting as long as the strategy includes a method to ensure security patches are tested and deployed within 10 days of availability.

Dental PWS Section 2.3, Dental Solicitation B.6 This section states, “The Contractor shall deploy the network in two phases (s) defined in Table 1

– Dental Deployment and Implementation. The first phase shall achieve HCD no later than six (6) months from contract award. The second phase shall achieve HCD non later than twelve (12) months from contract award.” Dental solicitation, Section B.6 Dental CLIN Structure CLIN X004 Administrative Services states, “This CLIN is paid following achievement of full healthcare delivery (HCD) based on the monthly Dental eligible Veteran population.