36C24426Q0486 for posting .pdf

PAGE 1 OF 1. REQUISITION NO.

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NO. 5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

a. NAME b. TELEPHONE NO. (No Collect Calls) 8. OFFER DUE DATE/LOCAL

TIME

9. ISSUED BY CODE 10. THIS ACQUISITION IS UNRESTRICTED OR SET ASIDE: % FOR:

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

8(A)

NAICS:

SIZE STANDARD:

11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

13a. THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700)

13b. RATING

14. METHOD OF SOLICITATION

RFQ IFB RFP

15. DELIVER TO CODE 16. ADMINISTERED BY CODE

17a. CONTRACTOR/OFFEROR CODE FACILITY CODE 18a. PAYMENT WILL BE MADE BY CODE

TELEPHONE NO. UEI: EFT:

PHONE: FAX:

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW IS CHECKED

SEE ADDENDUM

19. 20. 21. 22. 23. 24.

ITEM NO. SCHEDULE OF SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Govt. Use Only)

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA ARE ARE NOT ATTACHED.

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN _______________ 29. AWARD OF CONTRACT: REF. ___________________________________ OFFER

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DATED ________________________________. YOUR OFFER ON SOLICITATION

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY (BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED SET FORTH HEREIN IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30b. NAME AND TITLE OF SIGNER (TYPE OR PRINT) 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (TYPE OR PRINT) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION (REV. NOV 2021)

PREVIOUS EDITION IS NOT USABLE Prescribed by GSA - FAR (48 CFR) 53.212

7. FOR SOLICITATION

INFORMATION CALL:

STANDARD FORM 1449

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

36C24426Q0486 04-29-2026

Michael Burke 215-823-5185 05-18-2026

12:00 EDT

00244

Department of Veterans Affairs

Network Contracting Office 4

X 100

X

524292

$45.5 Million

N/A

X

VISN 4 VAMCs (See Statement of Work)

00244

Austin Payment Center

PO Box 149971

Austin TX 78714-9971

(877) 353-9791 (512) 460-5429

See CONTINUATION Page

Pharmacy First Fill Services - VISN 4

Please see following pages for complete information.

Solicitation is for a 5-year Firm Fixed Priced IDIQ.

The IDIQ will serve as an Indefinite Delivery Vehicle and funding and authorization to proceed will be provided via task orders placed against this IDIQ, contingent upon the availability of VA funding and facility need.

Period of Performance is 07/31/2026 to 07/30/2031

Contractor shall comply with all applicable wage & hour laws and is responsible for the correct wage titles.

VAAR 852.219-75 must be complied with.

This is a FAR Part 12 transaction.

All responses to this RFQ must be emailed to

Michael Burke at Michael.Burke4@va.gov

Questions must be directed to Michael Burke at

Burke4@va.gov. Questions must be received by

05/06/2026 12:00 noon EDT otherwise they will not be responded to.

See CONTINUATION Page

X X

Michael Burke

Contracting Officer

36C24426Q0486

Table of Contents

SECTION A

A.1 SF 1449 SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS

AND COMMERCIAL SERVICES

SECTION B - CONTINUATION OF SF 1449 BLOCKS

B.1 CONTRACT ADMINISTRATION DATA

B.2 PRICE/COST SCHEDULE

ITEM INFORMATION

B.3 DELIVERY SCHEDULE

B.4 IT CONTRACT SECURITY

SECTION C - CONTRACT CLAUSES

C.1 52.212-4 CONTRACT TERMS AND CONDITIONS—COMMERCIAL PRODUCTS

AND COMMERCIAL SERVICES (NOV 2023)

C.2 52.216-18 ORDERING (AUG 2020)

C.3 52.216-19 ORDER LIMITATIONS (OCT 1995)

C.4 52.216-22 INDEFINITE QUANTITY (NOV 2025) (DEVIATION)

C.5 52.240-91 SECURITY PROHIBITIONS AND EXCLUSIONS (NOV 2025)

(DEVIATION)

C.6 VAAR 852.219-73 VA NOTICE OF TOTAL SET-ASIDE FOR CERTIFIED

SERVICE-DISABLED VETERAN-OWNED SMALL BUSINESSES (JAN 2023)

(DEVIATION)

C.7 VAAR 852.219-75 VA NOTICE OF LIMITATIONS ON SUBCONTRACTING—

CERTIFICATE OF COMPLIANCE FOR SERVICES AND CONSTRUCTION (JAN 2023)

(DEVIATION)

C.8 VAAR 852.232-72 ELECTRONIC SUBMISSION OF PAYMENT REQUESTS (NOV

2018)

C.9 VAAR 852.242-71 ADMINISTRATIVE CONTRACTING OFFICER (OCT 2020)

C.10 52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

C.11 MANDATORY WRITTEN DISCLOSURES

SECTION D - CONTRACT DOCUMENTS, EXHIBITS, OR ATTACHMENTS

SECTION E - SOLICITATION PROVISIONS

E.1 52.201-1 ACQUISITION 360: VOLUNTARY SURVEY (SEP 2023)

E.2 52.216-1 TYPE OF CONTRACT (NOV 2025) (DEVIATION) ALTERNATE I (NOV

2025)

E.3 VAAR 852.233-71 ALTERNATE PROTEST PROCEDURE (OCT 2018)

E.4 52.212-2 EVALUATION—COMMERCIAL PRODUCTS AND COMMERCIAL

SERVICES (NOV 2021)

E.5 52.252-1 SOLICITATION PROVISIONS INCORPORATED BY REFERENCE (FEB

1998)

SECTION B - CONTINUATION OF SF 1449 BLOCKS

B.1 CONTRACT ADMINISTRATION DATA

1. Contract Administration: All contract administration matters will be handled by the following individuals:

a. CONTRACTOR:

b. GOVERNMENT: Contracting Officer 36C244

2. CONTRACTOR REMITTANCE ADDRESS: All payments by the Government to the contractor will be made in accordance with:

[X] 52.232-33, Payment by Electronic Funds Transfer—System For Award Management, or

[] 52.232-36, Payment by Third Party

3. INVOICES: Invoices shall be submitted in arrears:

a. Quarterly []

b. Semi-Annually []

c. Other [X] monthly

4. GOVERNMENT INVOICE ADDRESS: All Invoices from the contractor shall be submitted electronically in accordance with VAAR Clause 852.232-72 Electronic Submission of Payment

Requests.

ACKNOWLEDGMENT OF AMENDMENTS: The offeror acknowledges receipt of amendments to the Solicitation numbered and dated as follows:

AMENDMENT NO DATE

PERFORMANCE WORK STATEMENT

1. BACKGROUND

Veterans Integrated Service Network 4 (VISN 04) requires a Contractor to provide pharmacy benefit management first fill services such as filling and dispensing original prescriptions that are written by Veterans Affairs (VA) approved prescribers assigned to the Veteran Affairs Community Based Outpatient Clinic (CBOCs/Clinics), VA Emergency Rooms, and other locations within VISN 04 Veterans Affairs Medical Centers (VAMCs) catchment locations as required by the Department of Veterans Affairs. The retail pharmacies will also provide medication counseling per Omnibus Budget Reconciliation Act of 1990 requirements (OBRA-90) and other applicable State practice requirements.

Prices shall be offered at negotiated prices.

2. PERIOD OF PERFORMANCE (PoP) The estimated period of performance (PoP) is five (5) 12-month years as defined in the schedule.

Year Begin End

YEAR 1: 2026-2027 Altoona, Butler, Coatesville, Erie, Lebanon, Philadelphia, Pittsburgh, Wilkes-Barre, and Wilmington: 7/31/2026

Altoona, Butler, Coatesville, Erie, Lebanon, Philadelphia, Wilmington: 7/31/2027

YEAR 2: 2027-2028 Altoona, Butler, Coatesville, Wilmington: 7/31/2027

Wilmington: 7/31/2028

YEAR 3: 2028-2029 Altoona, Butler, Coatesville, Wilmington: 7/31/2028

Wilmington: 7/31/2029

YEAR 4: 2029-2030 Altoona, Butler, Coatesville, Wilmington: 7/31/2029

Wilmington: 7/30/2030

YEAR 5: 2030-2031 Altoona, Butler, Coatesville, Erie, Lebanon, Philadelphia, Wilmington: 7/31/2030

Wilmington: 7/30/2031

VISN 04 VAMCs will submit yearly task orders (TOs) under this contract. It will be at the Government’s discretion based on continued need for services, Contractor performance, and availability of funds.

3. CATCHMENT LOCATIONS

View Attachment A

Additional geographic areas may be added to this contract by mutual agreement as services will be needed for any new Community Based Outpatient Clinic (CBOCs/Clinics). Contractor must have one or more pharmacies within 10 miles of the catchment locations (provided in Attachment A). Contract requirements and rates will be stated in the proposal and subsequent contract.

4. GENERAL REQUIREMENTS

Contractor shall provide a list of potential pharmacies that fit the demographic requirements (within a ten (10) mile radius of the Community Based Outpatient Clinics and Emergency Departments listed in Attachment A). From this list, the VA will choose which pharmacies they would like to use for the services based on location, parking, and other Veteran convenience factors as determined by the VA Healthcare System/VISN 04.

In addition to the Community Based Outpatient Clinics (CBOCs) coverage, this contract will require services for the patients seen in the VA Emergency Department (24/7-365 days a year services), virtual-telehealth, and other associated clinics where there is need to provide first fill services to optimize patient care.

Throughout the contract, any additional pharmacy(s) requested by the Chief of Pharmacy or designee will be added, trained, and eligible with no additional expense. Contractor will coordinate training and implementation of designated pharmacies.

“Catch all” clinic vouchers may be applied as it is intended to utilize the vendor’s network, pharmacies, and pricing but it is open provider (pharmacy) and open formulary. It will only be used by VA Pharmacy Management to coordinate special cases where prescription needs in the community are outside of the normal CBOC process when necessary.

After a selection has been made, Contractor shall create networks such that only the chosen pharmacies can be used for prescriptions from the providers authorized by the VISN 04

Veterans Affairs Medical Centers. The CBOCs/Clinics operating hours are normally 8:00 a.m. to

4:30 p.m. Eastern Standard Time, Monday-Friday, but can include evening and weekend clinics.

It will exclude federal holidays.

FEDERAL HOLIDAYS:

• New Year’s Day

• Martin Luther King Jr.’s Birthday

• Presidents’ Day

• Memorial Day

• Juneteenth Day

• Independence Day

• Labor Day

• Columbus Day

• Veterans Day

• Thanksgiving Day

• Christmas Day

4.1 PRESCRIPTION FILL PROCESS

Pharmacy will fill and dispense original prescriptions that are written by VA providers assigned to the VISN 04 VA Health Care System and CBOCs/Clinics. Prescriptions to be filled will be presented to the contract pharmacy on a consult form for non-controlled substances.

4.1.1 This process is only for new, urgent/emergent prescriptions.

4.1.2 No refills or renewals are authorized.

4.1.3 No more than a 14-day supply or single unit dose item such as bottle of eye drops (unless repackaging is not an option -- examples: insulin, oral inhalers, etc.).

4.1.4 The course of antibiotics will be delivered as full course.

4.1.5 Non-emergent medications (i.e., any expendable stock/supply items [non-drug products], cosmetics, over-the-counter medications, nutritional supplements, vitamins, or herbal supplements) as identified by not being on the provided VA EDL are not to be dispensed by the pharmacy.

4.1.6 Prescriptions shall be filled with generic drugs to the extent permitted by law.

Generic drugs shall be dispensed in the professional judgment of the pharmacist.

The substitute product is available, safe, effective, and to the greatest extent possible, contains the same chemical ingredients of the same strength, quantity, and dosage of the brand name. All generic products used must be in compliance with Federal and State requirements.

4.1.7 Brand name drugs will only be reimbursed if no generic form of the drug exists in the marketplace.

4.1.8 Contractor and all pharmacies shall keep all information concerning VA beneficiaries confidential and shall not release or disclose information to any person, except as authorized in writing and according to all applicable laws. The Privacy Act of 1974, Public Law 93-579, December 31, 1974,(5 U.S.C. 552a) applies to this procurement.

4.1.9 Government reserves the right to fill any prescriptions covered under this contract with its own resources and/or staff.

4.1.10 Recalled and Defective Products: Contractor will immediately notify the

Contracting Officer of any recalls of product or other important product safety issues.

As appropriate, Contractor will replace and/or reimburse recalled/defective products at no cost to the Government. Contractor may be liable for costs of processing recalls, i.e. administrative and clinical services to replace recalled/defective products.

4.1.11 Pharmacy hours shall be furnished by Contractor. The minimum allowable hours are

Monday through Friday, 8:00 a.m. to 6:00 p.m. Pharmacy hours will preferably be each day from 8:00 a.m. to 9:00 p.m.

4.2 PHARMACY LICENSING AND QUALIFICATIONS

Pharmacies utilized by Contractor shall be in good standing with their respective State Board of Pharmacy in Pennsylvania, New Jersey, Delaware, or Ohio.

Pharmacies utilized by Contractor shall have a current Drug Enforcement Administration (DEA) license, controlled substance license, and license from the respective State Board of Pharmacy in Pennsylvania, New Jersey, Delaware, and Ohio.

4.2.1 Pharmacists Requirements:

A. Graduate of an Accreditation Council for Pharmacy Education (ACPE)

College of Pharmacy B. Licensed in the States of Pennsylvania, New Jersey, Delaware, or Ohio and in good standing with the State Board of Pharmacy.

C. Pharmacy will fill and dispense original prescriptions that are written by

VA providers assigned to VISN 04 VA Healthcare System and CBOCs/Clinics.

4.2.2 Contractor shall provide Licensed Registered Pharmacists that will collect, synthesize, and interpret patient prescription, and disease data.

4.2.3 Identify, clarify, and resolve drug related problems with prescriber and patient.

4.2.4 Be available to answer any drug related questions that patients may have after prescription is filled.

4.2.5 Waiting times for prescription dispensing shall be thirty (30) minutes on average but shall not exceed one (1) hour.

4.2.6 Checks for factual and potential drug related problems, including (but not limited to):

A. Therapeutic duplication

B. Drug-disease contraindications

C. Drug interactions (including interactions with over-the-counter drugs)

D. Incorrect drug dosage

E. Drug/food interactions

4.3 PHARMACIST COUNSELING CONDITIONS

Contractor shall offer patients counseling from a Pharmacist for each prescription filled.

Counseling offered shall be consistent with the State Board of Pharmacy requirements to ensure appropriate use and optimal outcomes from drug therapy.

4.3.1 The counseling shall include, but is not limited to:

A. Name, strength, dosage form

B. Route of administration

C. Special directions and precautions

D. Common side effects and action required if side effects occur

E. Expectations and techniques for self-monitoring drug therapy

F. Action to be taken if a dose is missed

G. Proper storage

H. No refills

I. What the patient can expect from the medication

J. How to follow up and receive medication from VA Pharmacy

4.3.2 Pharmacies authorized to fill prescriptions under Contractor’s plan must agree to the following conditions:

4.3.2.1 Pharmacists will review allergy history with patients prior to filling prescriptions.

4.3.2.2 All information concerning VA beneficiaries shall be kept confidential and shall not be disclosed to any person, except as authorized in writing and according to all applicable laws.

4.3.2.3 Representatives of the VA are authorized to visit the contractor’s site and the premises of any pharmacy filling VA prescriptions during regular business hours for the purposes of auditing and evaluating, which may include the inspection of clinical records.

4.3.2.4 Contractor shall report all adverse drug events reported by VA beneficiaries to VISN 04, Chief of Pharmacy Services or designee, and to the approved prescribing provider.

4.3.2.5 Services provided to VA beneficiaries under this contract shall meet all applicable Federal and State regulations.

4.4 LABELING

All prescriptions must have proper auxiliary labels attached, appropriate counseling, federally required medication guides, and drug interaction sheets provided to VA beneficiaries.

4.5 CUSTOMER SERVICE

Pharmacy staff/pharmacists must provide excellent customer service to patients, VA staff, and providers. Treat all patients, VA staff, and providers with dignity, courtesy, and respect.

5 CONTRACTOR REPORTING REQUIREMENTS

Contractor shall provide monthly summary (for each contracted Pharmacy or VA CBOC/Clinic) via encrypted email to VISN 04 VAMCs’ Pharmacy Service detailing the following information for services provided:

A. Patient name and address B. Medication name and strength C. Quantity dispensed D. NDC (National Drug Code) E. Prescription Number F. Prescription Cost with change from previous month’s cost G. Prescriber Name H. Days’ Supply I. VA Location

J. Number of patients utilizing contract. All documents will be made available in excel or CSV format and will be enabled to allow the end users to articulate and compile data.

6.1 SUBMIT CLAIMS REPORTS

6.1.1 Contractor to submit monthly report that are sent electronically encrypted to VAMC Point of Contact (POC) for their review by 15th of the month for the previous month’s claims.

6.1.2 Reports to be sent to VAMC POC for their review to ensure the appropriate emergent prescription fill using approved formulary.

6.1.3 Contractor will be available to provide quarterly telephone conference calls to review monthly reports, trends, provider data, prescription totals, etc.

6.1.4 Contractor will be available to provide a yearly in-person meeting or telephone conference call to review the prior fiscal year data. Contractor will provide verification, through local exercise participation or validated after action response report, of capability to mobilize and facilitate emergency pharmacy services due to disaster.

6.2 PROVIDER LIST

6.2.1 Contractor must update provider list within 5 business days of any updates from VISN 04 VAMCs.

6.2.2 All incidents are to be reported to VAMC POC.

6.3 PATIENT SAFETY

6.3.1 Patient safety incidents shall be reported using Patient Safety Report.

6.3.2 Medication errors or events that result in required hospitalization, clinical intervention, or significant negative events will be reported to the VA immediately (within 24 hours).

6.3.3 All incidents will need to be reported immediately (within 24 hours).

6.3.4 All medication errors and medication related incidents will be recorded, investigated, and reported to the VA on a quarterly basis.

6.3.5 Contractor is responsible for completing fact finding and reporting back to the VAMC POC/Contracting Officer’s Representative (COR) within 72 hours (three business days). No deviation will be acceptable.

6 GOVERNMENT RESPONSIBLITIES

7.1 EMERGENT DRUG LIST (EDL)

VA has developed a list of prescription drug products that are pre-approved to be sent to contract pharmacy for veterans. This list is known as the “Emergent Drug List" (EDL) and designates the days’ supply amount allowable for the given drug.

7.1.1 The VISN 04 VAMCs will be responsible for updating, maintaining, and providing copies of the EDL to the Contractor.

7.1.2 The EDL will generally be updated no more often than monthly to minimize database maintenance efforts by the Contractor.

7.2 Government shall be responsible for quality assurance and monitoring of Contractor’s performance. This may include, but not limited to: kickoff meeting, quarterly meetings, and/or site visits. If quarterly meetings are required, this will be accomplished via teleconference. Contractor will be notified at least 10 business days prior to the meeting.

7.3 VISN 04 VAMCs will provide Contractor with all the provider names for each VA facility location and their respective DEAs that are being used (or will notify if a provider does not use a DEA).

7.3.1 VA DEA numbers may be utilized for some providers at some locations;

however, special identifiers must be provided to ensure no cross prescribing by wrong providers.

7.4 The VA maintains the ability to provide an electronic version of the form and prescriptions, this includes either electronic transmissions and/or faxing the required information.

7.4.1 For any virtual–telehealth prescriptions, this will be the primary mechanism to provide the form and prescription.

7.5 For controlled substances (CII – CV) the consult form will be accompanied by a hand-written prescription on VA Form 10-2577F. A state-mandated controlled-substance prescription form will suffice, if medication is dispensed by a non-VA pharmacy.

7.6 Verbal pharmacy orders may be received by the contractor to expedite urgent/emergent orders but require hard copy RX or electronic equivalent for reimbursement.

7.7 The VA will issue written controlled prescriptions on the VA high security, tamper resistant, individually numbered VA Form 10-2577F, Security Prescription form or its equivalent. The successful Contractor may obtain a sample the VA Form from the COR/VAMC POC.

7.7.1 This form will have the certificate information which will include all legally required information, as well as BIN and billing information listed at the top and the prescription information to follow.

7.7.2 These forms will be used for each facility utilizing this system. These documents must be accepted by all participating facilities for any non-controlled prescriptions.

7.7.3 If a hard copy prescription is provided, it will have a "wet" signature from the VA provider.

7 METHODOLODY OF AVERAGE WHOLESALE PRICING (AWP)

Contractor’s pricing shall be based on MediSpan, one of the leading national drug-pricing systems used in the pharmaceutical industry.

8.1 Contractor’s pricing methodology/system is based on the IT platform of its PBM (Pharmacy Benefits Management) claim adjudication system.

8.2 Contractor’s claim system is linked to MediSpan, which allows them to monitor and adjust to pharmaceutical industry pricing daily, thereby providing the VA with the most current pricing available.

8 PERFORMANCE STANDARDS, QUALITY ASSURANCE (QA), and

QUALITY IMPROVEMENT (QI)

Contractor shall provide for quality control/performance improvement purposes the following information:

Customer complaints/suggestions/compliments shall be recorded and reported to the VA on a quarterly basis (or more frequently) if a significant problem occurs.

9.1 QUALITY MANAGEMENT/QUALITY ASSURANCE SURVELLIANCE

Contractor performance will be monitored by the government using the standards as outlined in this Performance Work Statement (PWS) and methods of surveillance detailed in the Quality Assurance Surveillance Plan (QASP). The QASP shall be attached to the resultant contract and shall define the methods and frequency of surveillance conducted.

9.2 PERFORMANCE STANDARDS

Contractor shall comply with the required standards as outlined in the Performance Work Statement (PWS) and the Quality Assurance Surveillance Plan (QASP). The QASP outlines required standards, defines the methods and frequency of surveillance, and will be a part of the resultant contract.

9.2.1 The Government reserves the right to refuse acceptance of contractor staff at any time after performance begins, if personal and professional conduct jeopardizes patient care or interferes with the regular and ordinary operation of the facility.

9.2.2 Breaches of conduct include intoxication or debilitation resulting from drug use, theft, patient abuse, dereliction, or negligence in performing contract requirements, or other conduct resulting in formal complaints by patients or staff members to designated Government representatives. Standards for conduct shall mirror those prescribed by current Federal Personnel Regulations.

9.2.3 The CO and COR shall deal with issues raised concerning contractor’s conduct and/or relations with Government employees or patients. The CO is the arbiter and the final authority on validating questions of acceptability of contractor conduct and complaint issues.

9.3 PATIENT COMPLAINTS

The Contracting Officer (CO) will resolve complaints concerning Contractor relations with the Government employees or patients. The CO is final authority on validating complaints. In the event that the Contractor is involved and named in a validated patient complaint, the Government reserves the right to refuse acceptance of the services of such personnel. This does not preclude refusal in the event of incidents involving physical or verbal abuse.

9.4 AUDIT

VA shall randomly audit all prescription fills. The Department of Veterans Affairs shall have free access during regular business hours, and a 24-hour advance notice for non-business hours, to such books, records, invoices, and prescription files as deemed necessary to verify claim information, prescription volume, and the usual and customary charges to the public for covered prescriptions.

Contractor shall make all prescription records and invoices available at the time of the audit.

9.5 QUALITY ASSURANCE SURVEILLANCE PLAN (QASP)

Performance Standards: The contractor shall comply with the required standards as outlined in the Performance Work Statement (PWS) and the Quality Assurance Surveillance Plan (QASP). The QASP outlines required standards, defines the methods and frequency of surveillance, and will be a part of the resultant contract.

9.5.1 Government reserves the right to refuse acceptance of contractor staff at any time after performance begins, if personal and professional conduct jeopardizes patient care or interferes with the regular and ordinary operation of the facility. Breaches of conduct include intoxication or debilitation resulting from drug use, theft, patient abuse, dereliction, or negligence in performing contract requirements, or other conduct resulting in formal complaints by patients or staff members to designated Government representatives. Standards for conduct shall mirror those prescribed by current Federal Personnel Regulations. The CO and COR shall deal with issues raised concerning contractor’s conduct and/or relations with Government employees or patients. The CO is the arbiter and the final authority on validating questions of acceptability of contractor conduct and complaint issues.

9.6 REGISTRATION WITH CONTRACTOR PERFORMANCE ASSESSMENT

REPORTING SYSTEM (CPARS)

As prescribed in Federal Acquisition Regulation (FAR) Part 42.15, the Department of Veterans Affairs (VA) evaluates Contractor past performance on all contracts that exceed the Simplified Acquisition Threshold (“SAT”) and shares those evaluations with other Federal Government contract specialists and procurement officials. The FAR requires that the Contractor be provided an opportunity to comment on past performance evaluations prior to each report closing. To fulfill this requirement VA uses an online database, CPARS, which is maintained by the Naval Seal Logistics Center in Portsmouth, New Hampshire. CPARS has connectivity with the Past Performance Information Retrieval System (PPIRS) database, which is available to all Federal agencies. PPIRS is the system used to collect and retrieve performance assessment reports used in source selection determinations and completed CPARS report cards transferred to PPIRS. CPARS also includes access to the federal awardee performance and integrity information system (FAPIIS). FAPIIS is a web-enabled application accessed via CPARS for Contractor responsibility determination information.

9.6.1 Failure to have a current registration with the CPARS database, or to re-assign the report to the CO within those thirty days, will result in the Government’s evaluation being placed on file in the database with a statement that the Contractor failed to respond

VISN 04 First Fill Pharmacy Attachment A (catchment areas)

WESTERN VAMC MARKET

Altoona:

Butler:

Abie Abraham VA Clinic 353 North Duffy Road, Butler, PA 16001

Michael A Marzano VA Clinic 295 N. Kerrwood Dr., Suite 110, Hermitage, PA 16148

Lawrence County VA Clinic 1750 New Butler Rd., New Castle, PA 16101

Armstrong County VA Clinic 11 Hilltop Plaza, Kittanning, PA 16201

Clarion County VA Clinic 56 Clarion Plaza, Ste 115, Monroe Township, PA 16214

Cranberry Township VA Clinic 900 Commonwealth Dr, Ste 900, Cranberry Township, PA 16066

Erie:

Erie VA (Primary Care and Urgent Care Clinics)

135 East 38th Street, Erie, PA 16504-1559

Crawford County VA Clinic 11200 Perry Highway, Meadville, PA 16335-6558

Ashtabula County VA Clinic 2044 Lambros Lane, Ashtabula, OH 44004-2700

McKean County VA Clinic 20 Foster Brook Boulevard, Bradford, PA 16701-3274

Venango County VA Clinic 125 Home Depot Drive, Franklin, PA 16323-8031

Warren County VA Clinic 3 Farm Colony Drive, Warren, PA 16365-5209

James E. Zandt – Emergency Room

2907 Pleasant Valley Blvd, Johnstown, PA 16602

Johnstown VA Clinic 598 Galleria Drive, Johnstown, PA 15904

DuBois VA Clinic 5690 Shaffer Road, Dubois, PA 15801

State College VA Clinic 2581 Clyde Ave, State College, PA 16801

Huntington County VA Clinic 13903 William Penn Highway, Mapleton Depot, PA 17052

Indiana County VA Clinic Regency Mall, 1570 Oakland Ave, Ste 100, Indiana, PA 15701

VISN 04 Virtual Urgent Care

Pittsburgh:

H.J. Heinz Campus – Emergency

1010 Delafield Road, Pittsburgh, PA 15240

Belmont County VA Clinic 103 Plaza Drive, Suite 10, St. Clairsville, OH 43950

Westmoreland County VA Clinic

5274 Route 30, Suite 10, Greensburg, PA 15601

Beaver County VA Clinic 300 Brighton Ave, Suite 110, Rochester, PA 15074

Washington County VA Clinic 1500 West Chestnut St, Suite 450, Washington, PA 15301

Fayette County VA Clinic 635 Pittsburgh Road, Suite 520, Uniontown, PA 15401

Monroeville VA Clinic 421 Mall Circle Drive, Monroeville, PA 15146

EASTERN VAMC MARKET

Coatesville:

Coatesville VA Medical Center 1400 Black Horse Hill Road, Coatesville, PA 19320

Delaware County CBOC 4883 West Chester Pike, Newtown Square, PA 19073

West Norriton VA Clinic 2495 General Armistead Avenue, Suite A, Norristown, PA 19403

Philadelphia:

Corporal Michael J. Crescenz VA Medical Center

3900 Woodland Ave., Philadelphia, PA 19104

Corporal Michael J. Crescenz VA Medical Center Primary Care Clinic

3900 Woodland Ave., Philadelphia, PA 19104

Burlington County VA Clinic 3000 Lincoln Drive, Ste #, Marlton, NJ 08053

Victor J. Saracini VA Clinic 433 Caredean Drive., Horsham, PA 19044

Gloucester County VA Clinic 211 County House Road, Sewell, NJ 08080

Camden VA Clinic 300 South Broadway, Ste 103, Camden, NJ 08103

West Philadelphia VA 6232 Market Street, Philadelphia, PA 19139

Outpatient Clinic

VISN 04 Virtual Urgent Care

Lebanon:

Lebanon VA Medical Center 1700 South Lincoln Avenue, Lebanon, PA 17067

Hershey Medical Center 500 University Drive, Hershey, PA 17033

Wellspan York 1001 S. George Street, York, PA 17403

Wellspan Ephrata 169 Martin Avenue, Ephrata, PA 17522

Wellspan Lebanon 252 S. 4th Street, Lebanon, PA 17042

UPMC Hospital Locations 111 S. Front Street, Harrisburg, PA 17101

310 Stock Street, Ste 1, Hanover, PA 17331

Penn Medicine LG Health 555 N. Duke Street, Lancaster, PA 17602

Cumberland County VA Clinic 5070 Ritter Road, Rossmoyne Business Park, Mechanicsburg, PA 17055

Lancaster VA Clinic 212 Willow Valley Lakes Drive, Ste 208, Willow Street, PA 17584

Berks County VA Clinic Ridgeview Professional Center, 2762 Century Blvd, Ste 120, Wyomissing, PA 19610

York VA Clinic 2251 Eastern Blvd, Ste 101, York, PA 17402

Schuylkill County VA Clinic 1410 Laurel Blvd, Ste 2, Pottsville, PA 17901

Wilkes-Barre:

Wilkes-Barre VA Medical Center

1111 East End Blvd, Wilkes-Barre, PA 18711

Allentown VA Clinic 3110 Hamilton Blvd, Allentown, PA 18103

Sayre VA Clinic 1537 North Elmire St., Sayre, PA 18840

Williamsport VA Clinic 1705 Warren Ave, Ste 304, Williamsport, PA 17701

Tobyhanna VA Clinic 11 Hap Arnold Blvd., Tobyhanna Army Depot, Bldg. 220, Tobyhanna, PA 18466

Columbia County VA Clinic 225 Columbia Mall Drive, Columbia County Mall, Bloomsburg, PA 17815

Northampton County VA Clinic Phoebe Center, 701 Slate Belt Blvd, Bangor, PA 18013

Wayne County VA Clinic Wayne Memorial Systems Complex, 600 Maple Ave., Ste 2, Honesdale, PA 18431

Wilmington:

Wilmington VA Medical Center 1601 Kirkwood Highway, Wilmington, DE 19805

Sussex County VA Clinic 21748 Roth Ave., Georgetown, DE 19947

Kent County VA Clinic 1198 South Governors Ave, Suite 201, Dover, DE 19904

Cape May County VA Clinic 1 Munro Ave., Cape May, NJ 08204

Atlantic County VA Clinic 1909 New Road, Northfield, NJ 08225

Cumberland County VA Clinic 79 West Landis Ave, Vineland, NJ 08360

B.2 PRICE/COST SCHEDULE

ITEM INFORMATION

ITEM

NUMBE

R

DESCRIPTION OF

SUPPLIES/SERVIC

ES

QUANTIT

Y

UNI

T UNIT PRICE AMOUNT

0.00 EA ________________

Dispense Fee (per prescription)

AWP % DISCOUNT FOR BRAND NAME

AWP % DISCOUNT FOR GENERIC

GRAND TOTAL ________________

B.3 DELIVERY SCHEDULE

ITEM

NUMBER SHIPPING INFORMATION QUANTITY

DELIVERY

DATE

0.00

B.4 IT CONTRACT SECURITY

VA INFORMATION AND INFORMATION SYSTEM SECURITY/PRIVACY

1. GENERAL

Contractors, contractor personnel, subcontractors, and subcontractor personnel shall be subject to the same Federal laws, regulations, standards, and VA Directives and Handbooks as

VA and VA personnel regarding information and information system security.

2. ACCESS TO VA INFORMATION AND VA INFORMATION SYSTEMS

a. A contractor/subcontractor shall request logical (technical) or physical access to VA information and VA information systems for their employees, subcontractors, and affiliates only to the extent necessary to perform the services specified in the contract, agreement, or task order.

b. All contractors, subcontractors, and third-party servicers and associates working with VA information are subject to the same investigative requirements as those of VA appointees or employees who have access to the same types of information. The level and process of background security investigations for contractors must be in accordance with VA Directive and

Handbook 0710, Personnel Suitability and Security Program. The Office for Operations, Security, and Preparedness is responsible for these policies and procedures.

c. Contract personnel who require access to national security programs must have a valid security clearance. National Industrial Security Program (NISP) was established by Executive

Order 12829 to ensure that cleared U.S. defense industry contract personnel safeguard the classified information in their possession while performing work on contracts, programs, bids, or research and development efforts. The Department of Veterans Affairs does not have a

Memorandum of Agreement with Defense Security Service (DSS). Verification of a Security

Clearance must be processed through the Special Security Officer located in the Planning and

National Security Service within the Office of Operations, Security, and Preparedness.

d. Custom software development and outsourced operations must be located in the U.S. to the maximum extent practical. If such services are proposed to be performed abroad and are not disallowed by other VA policy or mandates, the contractor/subcontractor must state where all non-U.S. services are provided and detail a security plan, deemed to be acceptable by VA, specifically to address mitigation of the resulting problems of communication, control, data protection, and so forth. Location within the U.S. may be an evaluation factor.

e. The contractor or subcontractor must notify the Contracting Officer immediately when an employee working on a VA system or with access to VA information is reassigned or leaves the contractor or subcontractor's employ. The Contracting Officer must also be notified immediately by the contractor or subcontractor prior to an unfriendly termination.

3. VA INFORMATION CUSTODIAL LANGUAGE

a. Information made available to the contractor or subcontractor by VA for the performance or administration of this contract or information developed by the contractor/subcontractor in performance or administration of the contract shall be used only for those purposes and shall not be used in any other way without the prior written agreement of the VA. This clause expressly limits the contractor/subcontractor's rights to use data as described in Rights in Data -

General, FAR 52.227-14(d) (1).

b. VA information should not be co-mingled, if possible, with any other data on the contractors/subcontractor's information systems or media storage systems in order to ensure

VA requirements related to data protection and media sanitization can be met. If co-mingling must be allowed to meet the requirements of the business need, the contractor must ensure that

VA's information is returned to the VA or destroyed in accordance with VA's sanitization requirements. VA reserves the right to conduct on site inspections of contractor and subcontractor IT resources to ensure data security controls, separation of data and job duties, and destruction/media sanitization procedures are in compliance with VA directive requirements.

c. Prior to termination or completion of this contract, contractor/ subcontractor must not destroy information received from VA, or gathered/ created by the contractor in the course of performing this contract without prior written approval by the VA. Any data destruction done on behalf of VA by a contractor/subcontractor must be done in accordance with National Archives and Records Administration (NARA) requirements as outlined in VA Directive 6300, Records and Information Management and its Handbook 6300.1 Records Management Procedures, applicable VA Records Control Schedules, and VA Handbook 6500.1, Electronic Media

Sanitization. Self-certification by the contractor that the data destruction requirements above have been met must be sent to the VA Contracting Officer within 30 days of termination of the contract.

d. The contractor/subcontractor must receive, gather, store, back up, maintain, use, disclose and dispose of VA information only in compliance with the terms of the contract and applicable

Federal and VA information confidentiality and security laws, regulations and policies. If Federal or VA information confidentiality and security laws, regulations and policies become applicable to the VA information or information systems after execution of the contract, or if NIST issues or updates applicable FIPS or Special Publications (SP) after execution of this contract, the parties agree to negotiate in good faith to implement the information confidentiality and security laws, regulations and policies in this contract.

e. The contractor/subcontractor shall not make copies of VA information except as authorized and necessary to perform the terms of the agreement or to preserve electronic information stored on contractor/subcontractor electronic storage media for restoration in case any electronic equipment or data used by the contractor/subcontractor needs to be restored to an operating state. If copies are made for restoration purposes, after the restoration is complete, the copies must be appropriately destroyed.

f. If VA determines that the contractor has violated any of the information confidentiality, privacy, and security provisions of the contract, it shall be sufficient grounds for VA to withhold payment to the contractor or third party or terminate the contract for default or terminate for cause under Federal Acquisition Regulation (FAR) part 12.

g. If a VHA contract is terminated for cause, the associated BAA must also be terminated and appropriate actions taken in accordance with VHA Handbook 1600.01, Business Associate

Agreements. Absent an agreement to use or disclose protected health information, there is no business associate relationship.

h. The contractor/subcontractor must store, transport, or transmit VA sensitive information in an encrypted form, using VA-approved encryption tools that are, at a minimum, FIPS 140-2 validated.

i. The contractor/subcontractor's firewall and Web services security controls, if applicable, shall meet or exceed VA's minimum requirements. VA Configuration Guidelines are available upon request.

j. Except for uses and disclosures of VA information authorized by this contract for performance of the contract, the contractor/subcontractor may use and disclose VA information only in two other situations: (i) in response to a qualifying order of a court of competent jurisdiction, or (ii) with VA's prior written approval. The contractor/subcontractor must refer all requests for, demands for production of, or inquiries about, VA information and information systems to the VA contracting officer for response.

k. Notwithstanding the provision above, the contractor/subcontractor shall not release VA records protected by Title 38 U.S.C. 5705, confidentiality of medical quality assurance records and/or Title 38 U.S.C. 7332, confidentiality of certain health records pertaining to drug addiction, sickle cell anemia, alcoholism or alcohol abuse, or infection with human immunodeficiency virus.

If the contractor/subcontractor is in receipt of a court order or other requests for the above mentioned information, that contractor/subcontractor shall immediately refer such court orders or other requests to the VA contracting officer for response.

l. For service that involves the storage, generating, transmitting, or exchanging of VA sensitive information but does not require C&A or an MOU-ISA for system interconnection, the contractor/subcontractor must complete a Contractor Security Control Assessment (CSCA) on a yearly basis and provide it to the COR.

4. INFORMATION SYSTEM DESIGN AND DEVELOPMENT

a. Information systems that are designed or developed for or on behalf of VA at non-VA facilities shall comply with all VA directives developed in accordance with FISMA, HIPAA, NIST, and related VA security and privacy control requirements for Federal information systems. This includes standards for the protection of electronic PHI, outlined in 45 C.F.R. Part 164, Subpart

C, information and system security categorization level designations in accordance with FIPS

199 and FIPS 200 with implementation of all baseline security controls commensurate with the

FIPS 199 system security categorization (reference Appendix D of VA Handbook 6500, VA

Information Security Program). During the development cycle a Privacy Impact Assessment

(PIA) must be completed, provided to the COR, and approved by the VA Privacy Service in accordance with Directive 6507, VA Privacy Impact Assessment.

b. The contractor/subcontractor shall certify to the COR that applications are fully functional and operate correctly as intended on systems using the VA Federal Desktop Core Configuration

(FDCC), and the common security configuration guidelines provided by NIST or the VA. This includes Internet Explorer 7 configured to operate on Windows XP and Vista (in Protected Mode on Vista) and future versions, as required.

c. The standard installation, operation, maintenance, updating, and patching of software shall not alter the configuration settings from the VA approved and FDCC configuration. Information technology staff must also use the Windows Installer Service for installation to the default

"program files" directory and silently install and uninstall.

d. Applications designed for normal end users shall run in the standard user context without elevated system administration privileges.

e. The security controls must be designed, developed, approved by VA, and implemented in accordance with the provisions of VA security system development life cycle as outlined in NIST

Special Publication 800-37, Guide for Applying the Risk Management Framework to Federal

Information Systems, VA Handbook 6500, Information Security Program and VA Handbook

6500.5, Incorporating Security and Privacy in System Development Lifecycle.

f. The contractor/subcontractor is required to design, develop, or operate a System of Records

Notice (SOR) on individuals to accomplish an agency function subject to the Privacy Act of

1974, (as amended), Public Law 93-579, December 31, 1974 (5 U.S.C. 552a) and applicable agency regulations. Violation of the Privacy Act may involve the imposition of criminal and civil penalties.

g. The contractor/subcontractor agrees to:

(1) Comply with the Privacy Act of 1974 (the Act) and the agency rules and regulations issued under the Act in the design, development, or operation of any system of records on individuals to accomplish an agency function when the contract specifically identifies:

(a) The Systems of Records (SOR); and

(b) The design, development, or operation work that the contractor/ subcontractor is to perform;

(1) Include the Privacy Act notification contained in this contract in every solicitation and resulting subcontract and in every subcontract awarded without a solicitation, when the work statement in the proposed subcontract requires the redesign, development, or operation of a

SOR on individuals that is subject to the Privacy Act; and

(2) Include this Privacy Act clause, including this subparagraph (3), in all subcontracts awarded under this contract which requires the design, development, or operation of such a

SOR.

h. In the event of violations of the Act, a civil action may be brought against the agency involved when the violation concerns the design, development, or operation of a SOR on individuals to accomplish an agency function, and criminal penalties may be imposed upon the officers or employees of the agency when the violation concerns the operation of a SOR on individuals to accomplish an agency function. For purposes of the Act, when the contract is for the operation of a SOR on individuals to accomplish an agency function, the contractor/subcontractor is considered to be an employee of the agency.

(1) "Operation of a System of Records" means performance of any of the activities associated with maintaining the SOR, including the collection, use, maintenance, and dissemination of records.

(2) "Record" means any item, collection, or grouping of information about an individual that is maintained by an agency, including, but not limited to, education, financial transactions, medical history, and criminal or employment history and contains the person's name, or identifying number, symbol, or any other identifying particular assigned to the individual, such as a fingerprint or voiceprint, or a photograph.

(3) "System of Records" means a group of any records under the control of any agency from which information is retrieved by the name of the individual or by some identifying number, symbol, or other identifying particular assigned to the individual.

i. The vendor shall ensure the security of all procured or developed systems and technologies, including their subcomponents (hereinafter referred to as "Systems"), throughout the life of this contract and any extension, warranty, or maintenance periods. This includes, but is not limited to workarounds, patches, hotfixes, upgrades, and any physical components (hereafter referred to as Security Fixes) which may be necessary to fix all security vulnerabilities published or known to the vendor anywhere in the Systems, including Operating Systems and firmware. The vendor shall ensure that Security Fixes shall not negatively impact the Systems.

j. The vendor shall notify VA within 24 hours of the discovery or disclosure of successful exploits of the vulnerability which can compromise the security of the Systems (including the confidentiality or integrity of its data and operations, or the availability of the system). Such issues shall be remediated as quickly as is practical, but in no event longer than 3 days.

k. When the Security Fixes involve installing third party patches (such as Microsoft OS patches or Adobe Acrobat), the vendor will provide written notice to the VA that the patch has been validated as not affecting the Systems within 10 working days. When the vendor is responsible for operations or maintenance of the Systems, they shall apply the Security Fixes within 3 days.

l. All other vulnerabilities shall be remediated as specified in this paragraph in a timely manner based on risk, but within 60 days of discovery or disclosure. Exceptions to this paragraph (e.g.

for the convenience of VA) shall only be granted with approval of the contracting officer and the

VA Assistant Secretary for Office of Information and Technology.

5. INFORMATION SYSTEM HOSTING, OPERATION, MAINTENANCE, OR USE

a. For information systems that are hosted, operated, maintained, or used on behalf of VA at non-VA facilities, contractors/subcontractors are fully responsible and accountable for ensuring compliance with all HIPAA, Privacy Act, FISMA, NIST, FIPS, and VA security and privacy directives and handbooks. This includes conducting compliant risk assessments, routine vulnerablity scanning, system patching and change management procedures, and the completion of an acceptable contingency plan for each system. The contractor's security control procedures must be equivalent, to those procedures used to secure VA systems. A

Privacy Impact Assessment (PIA) must also be provided to the COR and approved by VA

Privacy Service prior to operational approval. All external Internet connections to VA's network involving VA information must be reviewed and approved by VA prior to implementation.

b. Adequate security controls for collecting, processing, transmitting, and storing of Personally

Identifiable Information (PII), as determined by the VA Privacy Service, must be in place, tested, and approved by VA prior to hosting, operation, maintenance, or use of the information system, or systems by or on behalf of VA. These security controls are to be assessed and stated within the PIA and if these controls are determined not to be in place, or inadequate, a Plan of Action and Milestones (POA&M) must be submitted and approved prior to the collection of PII.

c. Outsourcing (contractor facility, contractor equipment or contractor staff) of systems or network operations, telecommunications services, or other managed services requires certification and accreditation (authorization) (C&A) of the contractor's systems in accordance with VA Handbook 6500.3, Certification and Accreditation and/or the VA OCS…