P01 Draft PD - VCS Oracle Retail_SIM Cloud Service Subscriptions 10-29-2026.docx

Oracle Retail and Store Inventory Management (SIM) Cloud Service Subscriptions TAC Number: VA-27-00001779

PRODUCT DESCRIPTION (PD)

DEPARTMENT OF VETERANS AFFAIRS

Veterans Canteen Service (VCS)

Oracle Retail and Store Inventory Management (SIM) Cloud Service Subscriptions

Date: September 3, 2026

VA-27-00001779

PD Version Number: 1.1

Contents

Background The Veterans Canteen Service (VCS) was statutorily established on August 7, 1946, under 38 U.S.C. Ch. 78 to provide America’s Veterans enrolled in VA’s healthcare system, their families, survivors, caregivers, and VA employees with reasonably priced merchandise and services essential to their comfort, health, and wellbeing. With our many retail stores, cafés and coffee shops across the country, we serve those who have served our country. Our Canteens are whole health spaces for Veterans to connect, relax, share and care for themselves in an environment that is their benefit. We are proud to Serve America’s Veterans and those who provide for their care.

Our Mission To provide America’s Veterans, enrolled in VA’s Health Care System, their families, caregivers, VA employees, volunteers, and visitors reasonably priced merchandise and services essential to their comfort, health and well-being.

Our Vision As an integral part of the VA community, be an efficient, innovative, customer-driven, environmentally friendly organization consistently delivering merchandise and services of exceptional quality and value by a knowledgeable, friendly and enthusiastic team that takes pride in our mission.

Giving Back VCS is proud to be part of the U.S. Department of Veterans Affairs. We are a self-sustaining entity providing merchandise and services to Veterans enrolled in VA’s healthcare system, their families, caregivers, VA employees, volunteers and visitors. We are honored to give back to the VA community through many programs established for the health and well-being of our nation’s heroes. Revenues generated from VCS are used to support a variety of programs, such as VA’s Rehabilitation Games, Fisher Houses, Poly-Trauma Centers for Operation Iraqi Freedom(OIF)/ Operation Enduring Freedom (OEF)/Operation New Dawn(OIF/OEF/OND) Veterans, disaster relief efforts, Substance Abuse Cessation, VA’s Homelessness initiatives, Women Veterans, Veteran Suicide Prevention and other activities.

PRODUCT REQUIREMENTS

VCS currently operates nationwide on Oracle Retail Merchandising System (RMS) v13, and Store Inventory Management (SIM) hosted on legacy on-premises application servers that do not meet the current Department of Veterans Affairs (VA) Office of Information and Technology (OIT) Security requirements. To achieve compliance, VCS must implement a modernized replacement system under an accelerated implementation timeline.

VA VCS requires the Oracle Retail Cloud Service components and subscriptions necessary to support the transition and migration of the existing Oracle Retail Merchandising System (RMS), Store Inventory Management (SIM), Retail Data Warehouse (RDW), and EDI Pre-processor applications operating within the Veterans Canteen Service (VCS) environment to Oracle Retail Merchandising Foundation Cloud Service (MFCS) and Oracle Retail Store Inventory and Operations Cloud Service (SIOCS). The Contractor shall provide all Oracle Retail Cloud Service subscriptions required to support this migration under this contract, unless otherwise specified. FedRAMP compliance and associated FedRAMP authorization activities shall not be required under this contract.

The Contractor shall provide and maintain all Oracle Retail Cloud Service subscriptions identified in this Product Description throughout the Period of Performance, including all exercised option periods. As part of the subscription service, the Contractor shall provide all commercially available Oracle Retail Cloud Services capabilities and standard service entitlements applicable to the subscribed products, including, at a minimum:

· Oracle-managed Development, Test/User Acceptance Testing (UAT), and Production Environments.

· Provisioning, maintenance, lifecycle management, refresh, and retirement of the subscribed Cloud Service environments throughout the subscription term.

· Oracle-managed hosting, infrastructure, compute, storage, monitoring, backup, disaster recovery, and platform maintenance services.

· Oracle technical support services, service request management, product documentation, knowledge base access, and Customer Success services that are commercially included with the subscribed offering.

· Oracle-managed quarterly releases, maintenance releases, patches, hot fixes, security updates, and other service updates made generally available for the subscribed services.

· Advance notification of planned maintenance activities, service updates, and product releases in accordance with Oracle's standard commercial notification processes.

· Continuous availability of the subscribed Oracle Retail Cloud Services in accordance with Oracle's applicable commercial Software-as-a-Service (SaaS)_ Service Level Agreement (SLA).

The Contractor shall ensure that all subscribed Oracle Retail Cloud Services remain operational, supported, and available throughout the Period of Performance and that all commercially available service enhancements, maintenance, support, and standard subscription services associated with the subscribed offerings are made available to the Government in accordance with the Contractor's standard commercial practices.

The Period of Performance shall be 12 months with four 12-month option periods and six (6) Optional Tasks, if exercised by the VA. The overall Period of Performance shall not exceed 60 months, inclusive of all options periods and optional tasks.

The following table outlines the Oracle Retail Cloud Service components that shall be included:

Base Period

Base Period - Optional Task

**Optional tasks may be exercised anytime during the Base Period and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during the Base Period and will be pro-rated based on when exercised.

Option Period One

Option Period One - Optional Tasks

**Optional tasks may be exercised anytime during Option Period One and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period One and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period One and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period One and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period One and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period One and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period One and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during the Base Period and will be pro-rated based on when exercised.

Option Period Two

Option Period Two – Optional Tasks

**Optional tasks may be exercised anytime during Option Period Two and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period Two and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period Two and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period Two and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period Two and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period Two and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period Two and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during the Option Period Two and will be pro-rated based on when exercised.

Option Period Three

Option Period Three – Optional Tasks

**Optional tasks may be exercised anytime during Option Period Three and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period Three and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period Three and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period Three and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period Three and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period Three and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period Three and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during the Option Period Three and will be pro-rated based on when exercised.

Option Period Four

Option Period Four – Optional Tasks

**Optional tasks may be exercised anytime during Option Period Four and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period Four and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period Four and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period Four and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period Four and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period Four and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during Option Period Four and will be pro-rated based on when exercised.

**Optional tasks may be exercised anytime during the Option Period Four and will be pro-rated based on when exercised.

SPECIFIC TASKS AND DELIVERABLES

The Contractor shall provide the Oracle Retail Cloud Service environments and subscription services to support approximately 220 stores—including PatriotStore (retail), PatriotCafé (food), and PatriotBrew (coffee)—located across the United States and its territories. These environments must accommodate a minimum of 49,000 distinct retail, food, coffee, and vending services products that are sold to over 40 million customers annually.

BASE ORACLE RETAIL CLOUD SERVICE COMPONENTS

The following Oracle Retail Cloud Service components are included in the firm-fixed-price Base Period and each exercised Option Period, and are not subject to separate exercise or ordering:

· Oracle Retail Merchandising Foundation Cloud Service (MFCS)

· Oracle Retail Pricing Cloud Service (RPCS)

· Oracle Retail Invoice Matching Cloud Service (ReIM)

· Oracle Retail Allocation Cloud Service

· Oracle Retail AI Foundation Cloud Service

· Oracle Retail Data Compute Cloud Service

· Enterprise Inventory Cloud Service (EICS)

· Oracle Retail Store Operations Cloud Service

· Oracle Retail AI Foundation Storage Cloud Service

· Oracle Retail Data Storage Cloud Service These applications collectively support foundational merchandising and store operations including item and supplier maintenance, purchasing and invoice matching, pricing, stock ledger processes, integration flows, and store inventory management.

OPTIONAL TASK CLOUD SERVICE COMPONENTS

In addition to the base components listed in Section 2.1.1, the Government may separately exercise or order any of the following six Optional Tasks, if and when required. Each Optional Task is separately priced, may be exercised at any time during the Period of Performance identified for that CLIN, and shall be invoiced and prorated in accordance with the terms specified in the applicable PD subsection. The following table cross-references each Optional Task to its governing PD subsection:

None of the Optional Tasks identified above are included in the base component list in Section 2.1.1. The Contractor shall not invoice for any Optional Task unless and until it has been exercised by the Government via task order or contract modification, consistent with the CLIN structure identified in Section 2.0.

SYSTEM INTERFACES

The Cloud Services provided shall interface with the following VCS internal and external systems. These interfaces shall be designed, developed, and implemented by the Government's designated systems integration contractor. The Contractor shall coordinate with the Integrator, as required, to support interface provisioning, connectivity, testing, and operational readiness consistent with the subscribed Oracle Retail Cloud Services.

· Oracle Financials version 12.2.14 and higher

· VendMAX version 5.0.13.6 and higher

· US Foods®

· VCS Point of Sale Software Application Flooid version 3.107 and higher

· St. Paul Software (SPS) Commerce Electronic Data Interchange or equivalent

· Oracle Analytics Server/OBIEE (Custom Reports)

· CA7/Control-M (Batch Scripts)

· VA Email System (system generated emails)

ENVIRONMENTS

The Contractor shall make available separate Cloud Service Environments for Development, Testing, and Production. Each environment shall be isolated, fully functional, and capable of supporting configuration, integration, and validation activities without impacting Production operations.

The Contractor shall provision, manage, maintain, refresh, and retire Development, Test/UAT, and Production environments throughout the subscription term. Environment provisioning, lifecycle management, scheduled maintenance, and availability shall be included as part of the Cloud Services subscription.

STANDARD SERVICE ENTITLEMENTS

The Contractor shall provide fully functional Oracle Retail Cloud Service subscriptions, including all standard features, functionality, software components, hosting services, maintenance, updates, patches, upgrades, technical support, security updates, backups and disaster recovery capabilities, and other services or entitlements that are commercially included by Oracle within the subscribed offering. All such standard services and entitlements shall be included in the subscription price at no additional cost to the Government.

At a minimum, the subscribed Oracle Retail Cloud Services shall include, as applicable to each subscribed offering:

· Oracle-managed hosting and infrastructure services

· Environment lifecycle management

· Environment provisioning and refresh services

· Backup and disaster recovery services

· Oracle-managed platform monitoring

· Security updates and patches

· Standard release and upgrade management

· Technical support

· Service request management and portal access

· Release notifications and maintenance communications

· Release and product documentation

· Knowledge based resources and

· Customer Success services, where included as part of Oracle’s standard commercial subscription offering The Contractor shall maintain all subscribed Oracle Retail Cloud Services and associated standard service entitlements for the duration of the applicable subscription term.

REQUIRED CLOUD SERVICE ENVIRONMENTS

The Contractor shall provide, provision, host, operate, and maintain the Oracle Retail Cloud Service environments required to support development, configuration, integration, testing, user acceptance testing, deployment, and production operations.

At a minimum, the Contractor shall provide and maintain the following environments for the duration of the applicable subscription term:

A. Development Environment: The Contractor shall provide and maintain a Development environment to support authorized system configuration, integration development, interface development, validation, troubleshooting, and other non-production activities required to implement and maintain the subscribed Oracle Retail Cloud Services.

B. Testing/User Acceptance Testing (UAT) Environment: The Contractor shall provide and maintain a Testing/UAT environment to support system testing, integration testing, regression testing, user acceptance testing, release validation, and other pre-production testing activities required to validate the subscribed Oracle Retail Cloud Services prior to production deployment.

C. Production Environment: The Contractor shall provide and maintain a Production environment to support VA's operational use of the subscribed Oracle Retail Cloud Services.

The required environments shall include the Oracle-managed hosting, infrastructure, platform services, monitoring, maintenance, security updates, backup and disaster recovery capabilities, and other standard environment services commercially included with the applicable Oracle Retail Cloud Service subscriptions.

The Contractor shall perform environment provisioning, maintenance, refreshes, updates, and lifecycle management in accordance with Oracle's standard commercial cloud service practices and the requirements of this PD.

SOCS MOBILE APPLICATION ENTITLEMENT

As part of the Oracle Retail Store Operations Cloud Service (SOCS) subscription, the Contractor shall provide all commercially available software entitlements, mobile/handheld application components (SOCS Mobile), documentation, updates, patches, security updates, and standard technical support required to enable SOCS-supported store inventory and store operations functions on VA-approved mobile devices. The Oracle Retail Enterprise Inventory Cloud Service (EICS) subscription identified elsewhere in this PD is a required backend prerequisite that provides the inventory services and transaction processing supporting SOCS Mobile functionality.

The SOCS subscription shall include the Oracle-provided SOCS Mobile application used to perform supported store inventory and store operations functions, including receiving, cycle counting, stock transfers, and other SOCS Mobile-supported task flows. The entitlement shall include subsequent supported versions or replacement applications made generally available by Oracle as part of the subscribed service during the subscription term.

The Contractor shall:

· Provide and maintain entitlement to the SOCS mobile application for the duration of the subscription;

· Provide Oracle-supported application releases, updates, patches, security updates, and standard technical support consistent with Oracle's commercial service offering;

· Make the SOCS Mobile Android application package (APK) available for download via Oracle Software Delivery Cloud (OSDC), or Oracle's then-current standard distribution mechanism, for deployment by VA and/or its designated integration contractor;

· Provide the technical configuration parameters and supporting documentation necessary to connect the SOCS Mobile application to the Government's Oracle SIOCS environment, including at a minimum the SIOCS Base Service URI, Oracle Identity/IDCS Base URI, and OAuth Client ID, and any equivalent values required for supported Mobile Device Management (MDM) managed configuration profiles;

· Ensure the SOCS Mobile application supports native integration with integrated barcode scanning hardware on VA-approved Android enterprise handheld devices, consistent with Oracle's documented supported device manufacturers (e.g., Zebra, Honeywell);

· Support VA and/or its designated integration contractor with installation, configuration, and overall functionality with the VA-approved handheld device hardware and operating systems to the extent supported by Oracle for SOCS Mobile; and

· Make the applicable mobile application installation package or Oracle-approved distribution mechanism available to VA and/or its designated integration contractor for deployment through VA-approved application distribution and mobile device management processes.

Handheld/mobile device hardware is not included in the SOCS subscription and shall be provided separately by the Government or its designated integration contractor.

The Contractor is not responsible for the installation, deployment, or configuration of the SOCS Mobile application on individual handheld devices; such activities are the responsibility of the Government or its designated MDM/integration contractor. The Contractor's responsibility is limited to making the application, updates, and required configuration parameters available consistent with Oracle's standard commercial practices.

OPERATIONAL SUPPORT AND SERVICE LEVELS

The Contractor shall provide commercially available Oracle Retail Cloud Services operational support throughout the subscription term. Support shall include, as applicable to the subscribed offerings:

· Access to Oracle technical support;

· Service request submission, management, tracking, and escalation;

· Access to applicable Oracle support portals;

· Release and maintenance notifications;

· Product and technical documentation;

· Knowledge base resources;

· Security and patch notifications; and

· Customer Success services, where included as part of Oracle's standard commercial subscription offering.

The Contractor shall provide the subscribed Oracle Retail Cloud Services in accordance with Oracle's applicable commercial Software-as-a-Service (SaaS) service level commitments and support policies in effect for the subscribed offerings, including applicable commitments for service availability, planned maintenance, backup and disaster recovery, incident response, and standard technical support.

The Contractor shall notify the Government of planned maintenance, service interruptions, material changes to the subscribed services, and other operational events in accordance with Oracle's applicable commercial notification practices and any additional notification requirements specified elsewhere in this PD.

SUBSCRIPTION CONTINUITY

The Contractor shall maintain continuous entitlement to the subscribed Oracle Retail Cloud Services, required environments, SIOCS mobile/handheld application, and associated standard support services throughout the applicable period of performance.

The Contractor shall ensure that expiration, renewal, licensing, entitlement, or administrative actions within the Contractor's control do not result in an interruption or degradation of the Government's authorized access to the subscribed Oracle Retail Cloud Services.

Deliverables:

A. Oracle Retail Cloud Services Subscriptions B. Oracle Retail Cloud Services Development Environment C. Oracle Retail Cloud Services Testing/UAT Environment D. Oracle Retail Cloud Services Production Environment E. SOCS Mobile Application Entitlement

REPORTING REQUIREMENTS

The Contractor shall provide a Price and Utilization Report using the M-26-10 Template, completing the appropriate tabs, which collects information related to Software, Artificial Intelligence, Cloud, and Hardware acquisitions in accordance with OMB M-26-10. This information shall be submitted on a quarterly basis throughout the period of performance, including any exercised options or contract extensions. OMB M-26-10 is a requirement of this contract and requires IT vendors to disclose utilization and pricing information to the Government, without limiting the extent to which that information may be shared across agencies. The Contractor shall access the M-26-10 Template, located here, prior to reporting each quarter to ensure latest template is used.

Deliverable:

A. Price and Utilization Report

SUBSCRIPTION TERMINATION AND DATA PORTABILITY

Upon expiration, non-renewal, or termination of the subscription, the Contractor shall provide the Government with reasonable transition assistance necessary to facilitate an orderly transition of the Oracle Retail Cloud Service subscriptions.

At a minimum, the Contractor shall:

1. As part of the Data and Configuration Export Package, provide the Government with the ability to export all Government-owned data maintained within the subscribed Oracle Retail Cloud Service environments in a complete, usable, industry-standard, non-proprietary electronic format, including, at a minimum, CSV, XML, JSON, or other mutually agreed machine-readable formats, as applicable.

2. As part of the Data and Configuration Export Package, provide export of tenant-specific configuration information necessary to support transition of the Government environment, including system configuration settings, business rules, reference data, security roles, user configuration, and other customer-specific configuration information maintained within the subscribed services.

3. As part of the Data and Configuration Export Package, provide sufficient documentation describing the exported data structures, file layouts, metadata, and configuration information to enable the Government or its designated support contractor to interpret and use the exported information.

4. As part of the Data and Configuration Export Package, provide export of mobile/handheld device configuration data, including device profiles, workflow assignments, and offline synchronization settings associated with the SIOCS mobile application, in the same non-proprietary formats specified above.

5. Retain Government data following subscription expiration or termination for the Contractor's standard commercial retention period, unless otherwise directed by the Government or required by applicable law, to allow completion of Government-authorized data export activities.

6. Following completion of the Government-authorized data retrieval period, securely delete all Government data remaining within the Contractor's environment in accordance with applicable Federal requirements, NIST SP 800-88, and the Contractor's documented data sanitization procedures. Upon request, the Contractor shall provide written Data Deletion Certification that Government data has been securely deleted.

7. Provide reasonable transition assistance, including coordination with the Government and any successor contractor, to facilitate an orderly transfer of Government-owned data and customer-specific configuration information during the transition period.

Deliverables:

A. Data and Configuration Export Package B. Data Deletion Certification (upon Government request)

VA ATO SUPPORT REQUIREMENTS (FEDRAMP-WAIVED CLOUD SERVICE SOLUTIONS)

Vendor shall facilitate as required the transfer of necessary documentation from OEM to VA to complete VA Authority to Operate (ATO) approval as requested.

Deliverables:

A. ATO Package Documentation

ORACLE RETAIL INSIGHTS CLOUD SERVICE ADVANCED EDITION (OPTIONAL TASK ONE)

If exercised by the Government, the Contractor shall provide the Oracle Retail Insights Cloud Service Advanced Edition Subscription. The subscription shall include all commercially available hosting, infrastructure, maintenance, upgrades, technical support, disaster recovery, security updates, and other standard Oracle services associated with the subscribed module. The Government may exercise or order the Optional Task/Optional CLIN at any time during the Period of Performance. Upon issuance of a task order or modification activating the optional requirement, the Contractor shall invoice only for the portion of performance actually required and delivered. Pricing for the Optional Task shall be prorated based on the remaining period of performance, consistent with the unit pricing and terms established in the contract.

Deliverables:

A. Oracle Retail Insights Cloud Service - Advanced Edition Subscription

ORACLE RETAIL ASSORTMENT PLANNING CLOUD SERVICE ADVANCED EDITION (OPTIONAL TASK TWO) If exercised by the Government, the Contractor shall provide the Oracle Retail Assortment Planning Cloud Service Advanced Edition Subscription. The subscription shall include all commercially available hosting, infrastructure, maintenance, upgrades, technical support, disaster recovery, security updates, and other standard Oracle services associated with the subscribed module. The Government may exercise or order the Optional Task/Optional CLIN at any time during the Period of Performance. Upon issuance of a task order or modification activating the optional requirement, the Contractor shall invoice only for the portion of performance actually required and delivered. Pricing for the Optional Task shall be prorated based on the remaining period of performance, consistent with the unit pricing and terms established in the contract.

Deliverables:

B. Oracle Retail Assortment Planning Cloud Service - Advanced Edition Subscription

ORACLE RETAIL INVENTORY PLANNING OPTIMIZATION CLOUD SERVICE ADVANCED EDITION (OPTIONAL TASK THREE) If exercised by the Government, the Contractor shall provide the Oracle Retail Inventory Planning Optimization Cloud Service Advanced Edition Subscription. The subscription shall include all commercially available hosting, infrastructure, maintenance, upgrades, technical support, disaster recovery, security updates, and other standard Oracle services associated with the subscribed module. The Government may exercise or order the Optional Task/Optional CLIN at any time during the Period of Performance. Upon issuance of a task order or modification activating the optional requirement, the Contractor shall invoice only for the portion of performance actually required and delivered. Pricing for the Optional Task shall be prorated based on the remaining period of performance, consistent with the unit pricing and terms established in the contract.

Deliverables:

A. Oracle Retail Inventory Planning Optimization Cloud Service - Advanced Edition Subscription

ORACLE RETAIL MERCHANDISE FINANCIAL PLANNING CLOUD SERVICE ADVANCED EDITION (OPTIONAL TASK FOUR) If exercised by the Government, the Contractor shall provide the Oracle Retail Merchandise Financial Planning Cloud Service Advanced Edition subscription. The subscription shall include all commercially available hosting, infrastructure, maintenance, upgrades, technical support, disaster recovery, security updates, and other standard Oracle services associated with the subscribed module. The Government may exercise or order the Optional Task/Optional CLIN at any time during the Period of Performance. Upon issuance of a task order or modification activating the optional requirement, the Contractor shall invoice only for the portion of performance actually required and delivered. Pricing for the Optional Task shall be prorated based on the remaining period of performance, consistent with the unit pricing and terms established in the contract.

Deliverables:

A. Oracle Retail Merchandise Financial Planning Cloud Service - Advanced Edition Subscription

ORACLE RETAIL LIFECYCLE PRICING OPTIMIZATION CLOUD SERVICE ADVANCED EDITION (OPTIONAL TASK FIVE) If exercised by the Government, the Contractor shall provide the Oracle Retail Lifecycle Pricing Optimization Cloud Service Advanced Edition subscription. The subscription shall include all commercially available hosting, infrastructure, maintenance, upgrades, technical support, disaster recovery, security updates, and other standard Oracle services associated with the subscribed module. The Government may exercise or order the Optional Task/Optional CLIN at any time during the Period of Performance. Upon issuance of a task order or modification activating the optional requirement, the Contractor shall invoice only for the portion of performance actually required and delivered. Pricing for the Optional Task shall be prorated based on the remaining period of performance, consistent with the unit pricing and terms established in the contract.

Deliverables:

A. Oracle Retail Lifecycle Pricing Optimization Cloud Service - Advanced Edition Subscription

ORACLE INTEGRATION CLOUD SERVICE – ENTERPRISE (OPTIONAL TASK SIX)

If exercised by the Government, the Contractor shall provide Oracle Integration Cloud Service – Enterprise subscription. The subscription shall include all commercially available hosting, infrastructure, maintenance, upgrades, technical support, disaster recovery, security updates, and other standard Oracle services associated with the subscription. The Government may exercise or order the Optional Task/Optional CLIN at any time during the Period of Performance. Upon issuance of a task order or modification activating the optional requirement, the Contractor shall invoice only for the portion of performance actually required and delivered. Pricing for the Optional Task shall be prorated based on the remaining period of performance, consistent with the unit pricing and terms established in the contract.

Deliverables:

A. Oracle Integration Cloud Services - Enterprise Subscription NOTICE OF THE FEDERAL ACCESSIBILITY LAW AFFECTING ALL INFORMATION AND COMMUNICATION TECHNOLOGY (ICT) PROCUREMENTS (SECTION 508)

On January 18, 2017, the Access Board issued a final rule that updated accessibility requirements covered by Section 508 and refreshed guidelines for telecommunications equipment subject to Section 255 of the Communications Act. The final rule went into effect on January 18, 2018. The revisions and updates to the Section 508-based standards and Section 255-based guidelines are intended to ensure that information and communication technology (ICT) covered by the respective statutes is accessible to and usable by individuals with disabilities.

SECTION 508 – INFORMATION AND COMMUNICATION TECHNOLOGY (ICT) STANDARDS

The Section 508 standards established by the Access Board are incorporated into, and made part of all VA orders, solicitations and purchase orders developed to procure ICT. These standards are found in their entirety at: Revised 508 Standards and 255 Guidelines (access-board.gov). A single PDF file version of the Revised Section 508 Standards and 255 Guidelines will be supplied upon request, or can be obtained from the Access Board website. Federal agencies must comply with the Rehabilitation Act of 1973, as amended.

The Contractor shall comply with “508 Chapter 2: Scoping Requirements” for all electronic ICT and content delivered under this contract. Specifically, as appropriate for the technology and its functionality, the Contractor shall comply with the technical standards marked here:

COMPATABILITY WITH ASSISTIVE TECHNOLOGY

The standards do not require installation of specific accessibility-related software or attachment of an assistive technology device. Section 508 requires that ICT be compatible with such software and devices so that ICT can be accessible to and usable by individuals using assistive technology, including but not limited to screen readers, screen magnifiers, and speech recognition software.

ACCEPTANCE AND ACCEPTANCE TESTING

Deliverables resulting from this solicitation will be accepted based in part on satisfaction of the Section 508 Chapter 2: Scoping Requirements standards identified above.

The Government reserves the right to test for Section 508 Compliance before delivery. The Contractor shall be able to demonstrate Section 508 Compliance upon delivery.

INFORMATION TECHNOLOGY USING SUSTAINABLE PRODUCTS

N/A

SHIPMENT OF HARDWARE OR EQUIPMENT

N/A

SPECIAL SHIPPING INSTRUCTIONS

N/A

NATIONAL ACQUISITIONS

N/A

GENERAL REQUIREMENTS

VA TECHNICAL REFERENCE MODEL

The Contractor shall comply with the VA OIT Technical Reference Model (VA TRM). Compliance with the VA TRM is achieved by using only technologies and standards that are listed as approved for use in the VA TRM. The Contractor shall provide all necessary information requested by VA to ensure TRM approval is obtained prior to use on VA’s network.

ZERO TRUST – VA CRITICAL SECURITY CONTROLS

VA has established minimum mandatory security requirements and requires that any network connected software system or service must meet the VA Critical Security Controls as outlined in the VA Memorandum, “VA Security Controls”, https://www.voa.va.gov/DocumentView.aspx?DocumentID=5010. VA Critical Security Controls identify the minimum mandatory requirements that must be implemented across all VA enterprise infrastructure, cloud computing environments, information systems, networks, and specialized devices (medical devices/systems, special-purpose systems, and research scientific computing devices) that process, store, and/or transmit VA data. Effective July 1, 2025, the Contractor shall implement these VA Critical Security Controls, within any network connected software system or service prior to being authorized for use in the VA. This functional requirement is not negotiable, and Plan of Action & Milestones (POAM) will not be accepted in the event these controls cannot be implemented for new systems. Critical Security Controls are intended to increase VA’s security posture and provide security and privacy risk visibility into the VA network and is not a new requirement. The Contractor’s failure to maintain these VA Critical Controls after implementation will result in VA discontinuing the use of the system.

SOCIAL SECURITY NUMBER (SSN) REDUCTION

The Contractor solution shall support the Social Security Number (SSN) Fraud Prevention Act (FPA) of 2017 which prohibits the inclusion of SSNs on any document sent by mail. The Contractor support shall also be performed in accordance with Section 240 of the Consolidated Appropriations Act (CAA) 2018, enacted March 23, 2018, which mandates VA to discontinue using SSNs to identify individuals in all VA information systems as the Primary Identifier. The Contractor shall ensure that any new IT solution discontinues the use of SSN as the Primary Identifier to replace the SSN with the Integrated Control Number (ICN) in all VA information systems for all individuals. The Contractor shall ensure that all Contractor delivered applications and systems integrate with the VA Master Person Index (MPI) for identity traits to include the use of the ICN as the Primary Identifier. The Contractor solution may only use a Social Security Number to identify an individual in an information system if and only if the use of such number is required to obtain information VA requires from an information system that is not under the jurisdiction of VA.

INTERNET PROTOCOL VERSION 6 (IPV6)

The Contractor solution shall support IPv6-Only based upon the memo issued by the Office of Management and Budget (OMB) on November 19, 2020 (https://www.whitehouse.gov/wp-content/uploads/2020/11/M-21-07.pdf). Which defines IPv6-only as the state of an operational system or service when IPv4 protocol functions (addressing, packet forwarding) are not in use. The NIST USGv6 profile defines technical requirements for a product to be capable of operating in IPv6-Only environments. IPv6-Only technology, in accordance with the USGv6 Program (https://www.nist.gov/programs-projects/usgv6-program/usgv6-revision-1), NIST Special Publication (SP) 500-267B Revision 1 “USGv6 Profile” (https://doi.org/10.6028/NIST.SP.500-267Br1), and NIST SP 800-119 “Guidelines for the Secure Deployment of IPv6” (https://doi.org/10.6028/NIST.SP.800-119), compliance shall be included in all IT infrastructures, application designs, application development, operational systems and sub-systems, and their integration.