RFQ FINAL - 36C24726Q0218 - ATL CT IMAGING EQUIP AND TECHS.pdf

PDF 1 MB Posted

Attached to
ATLANTA VAMC - PIKE - COBB CBOCs CT IMAGING EQUIP & SERVICES
Solicitation number
36C24726Q0218
Issued by

About this file

This is a Request for Quote (RFQ) for Computed Tomography (CT) Imaging Equipment and Services for the Department of Veterans Affairs Veterans Health Administration (VA) Atlanta Medical Center. The solicitation seeks a firm-fixed-price contract to provide CT imaging equipment and technician services at two Community Based Outpatient Clinics (CBOCs) located in Zebulon and Marietta, Georgia. The contract is set aside for Service-Disabled Veteran-Owned Small Businesses (SDVOSB) with a small business size standard of $19 million.

The contract duration is one base year with four one-year option periods, running from May 1, 2026 to April 30, 2031. The contractor will be required to provide a minimum 128-slice CT scanner, perform an estimated 15-16 CT studies per day, and supply certified CT technologists. Key requirements include maintaining equipment, transferring images to VA systems, complying with HIPAA regulations, and providing services Monday through Friday from 8:00 AM to 5:00 PM. Quotes are due by February 3, 2026 at 1:00 PM EST, and the solicitation number is 36C24726Q0218.

View the file

Other files

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Combined Synopsis/Solicitation Notice

*= Required Field Combined Synopsis/Solicitation Notice

SUBJECT* ATLANTA CT IMAGING EQUIP AND SERVICES 36C24726Q0218 B 4 - POP START: 1 MAY 26 - 30

APR 27

GENERAL INFORMATION

CONTRACTING OFFICE’S ZIP CODE* 31021

SOLICITATION NUMBER* 36C24726Q0218

RESPONSE DATE/TIME/ZONE 13:00 EASTERN TIME, NEW YORK, USA

ARCHIVE 15 DAYS AFTER THE RESPONSE DATE

RECOVERY ACT FUNDS N

SET-ASIDE SDVOSBC

PRODUCT SERVICE CODE* Q522

NAICS CODE* 621512

CONTRACTING OFFICE ADDRESS

Department of Veterans Affairs Carl Vinson VA Medical Center 1826 Veterans Blvd.

Dublin GA 31021

POINT OF CONTACT*

CONTRACTING OFFICER

JAMES E. BOLES JR.

james.boles2@va.gov

PLACE OF PERFORMANCE

ADDRESS DEPARTMENT OF VETERANS AFFAIRS

ATLANTA VAMC

PIKE AND COBB CBOCs

1870 CLAIRMONT RD

DECATUR GA

POSTAL CODE 30033

COUNTRY USA

ADDITIONAL INFORMATION

AGENCY’S URL

URL DESCRIPTION

AGENCY CONTACT’S EMAIL ADDRESS

EMAIL DESCRIPTION

DESCRIPTION

SUBJECT* ATLANTA CT IMAGING EQUIP AND SERVICES 36C24726Q0218

B+4 – POP START: 1 MAY 26 – 30 APR 27

GENERAL INFORMATION

CONTRACTING OFFICE’S ZIP CODE* 31021

SOLICITATION NUMBER* 36C24726Q0218

RESPONSE DATE/TIME/ZONE 2-3-2026 13:00 PM EASTERN TIME, NEW YORK, USA

ARCHIVE 15 DAYS AFTER THE RESPONSE DATE

RECOVERY ACT FUNDS N

SET-ASIDE SDVOSBC

PRODUCT SERVICE CODE* Q522

NAICS CODE* 621512

CONTRACTING OFFICE ADDRESS

Department of Veterans Affairs Carl Vinson VA Medical Center

POINT OF CONTACT*

CONTRACTING OFFICER

JAMES E. BOLES JR.

james.boles2@va.gov email only

PLACE OF PERFORMANCE

ADDRESS DEPARTMENT OF VETERANS AFFAIRS

ATLANTA VAMC

PIKE AND COBB CBOCs

1870 CLAIRMONT RD

DECATUR

POSTAL CODE 30033

COUNTRY USA

ADDITIONAL INFORMATION

AGENCY’S URL

URL DESCRIPTION

AGENCY CONTACT’S EMAIL ADDRESS

EMAIL DESCRIPTION

DESCRIPTION

This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in Federal Acquisition Regulation (FAR) subpart 12.6, Streamlined Procedures for

Evaluation and Solicitation for Commercial Items, as supplemented with additional information included in this notice. Solicitation 36C24726Q0218 is issued as a request for quotation. This announcement constitutes the only solicitation; quotations are being requested, and a written solicitation document will not be issued. This solicitation is issued as A SDVOSB set-aside, the associated NAICS code is 621512 and small business size $19 Million.

DESCRIPTION: The Department of Veterans Affairs, Networking Office 7 is looking to award a firm-fixed price contract for CT Imaging Equipment and Imaging Technician Services for the

Atlanta VAMC’s Community Based Outpatient Clinic’s (CBOC) located at Pike and Cobb County

(see specific addresses in PWS).

TERMS: This requirement incorporates one or more clauses/provisions by reference, with the same force and effect as if they were given in full text. The full text of a clause or provision may be accessed at http:///www.acquisition.gov/far/index.html and http://www.va.gov/oal/library/vaar/. Offerors are encouraged to, and responsible for, reviewing the full solicitation (attached) for detailed requirement description, applicable terms and conditions, provisions, submittal instructions to offerors, and evaluation procedures prior to submitting their quotes. All Offerors must have an active registration in the System for Award Management (SAM), www.sam.gov, at the time of submittal.

QUESTIONS: Any questions pertaining to this requirement must be emailed to james.boles2@va.gov no later than 10:00 AM EST, January 22, 2026, include Solicitation

36C24726Q0218 in the subject line of the email to ensure timely review and response. No questions will be accepted nor answered after this date and time. Response to questions will be posted as an amendment to the solicitation once the question period has expired. Offerors are responsible for monitoring Contracting Opportunities at www.sam.gov for any amendments to the solicitation as the government will not send notice of amendments. Representatives from potential Offerors or on behalf of potential Offerors shall not contact any VA Medical Center representative to discuss nor inquire about this solicitation.

DEADLINE: All offers/quotes must be submitted in a single email to sheryl.harris5@va.gov and received no later than 1:00 PM EST, February 3, 2026, include Solicitation 36C24726Q0218 in the subject line of the email. Offerors are encouraged to, and responsible for, reviewing the full solicitation (attached) for detailed requirement description, applicable terms and conditions, provisions, submittal instructions to offerors, and evaluation procedures prior to submitting their quotes.

PAGE 1 OF 1. REQUISITION NO.

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NO. 5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

a. NAME b. TELEPHONE NO. (No Collect Calls) 8. OFFER DUE DATE/LOCAL

TIME

9. ISSUED BY CODE 10. THIS ACQUISITION IS UNRESTRICTED OR SET ASIDE: % FOR:

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

8(A)

NAICS:

SIZE STANDARD:

11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

13a. THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700)

13b. RATING

14. METHOD OF SOLICITATION

RFQ IFB RFP

15. DELIVER TO CODE 16. ADMINISTERED BY CODE

17a. CONTRACTOR/OFFEROR CODE FACILITY CODE 18a. PAYMENT WILL BE MADE BY CODE

TELEPHONE NO. UEI: EFT:

PHONE: FAX:

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW IS CHECKED

SEE ADDENDUM

19. 20. 21. 22. 23. 24.

ITEM NO. SCHEDULE OF SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Govt. Use Only)

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA ARE ARE NOT ATTACHED.

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN _______________ 29. AWARD OF CONTRACT: REF. ___________________________________ OFFER

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DATED ________________________________. YOUR OFFER ON SOLICITATION

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY (BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED SET FORTH HEREIN IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30b. NAME AND TITLE OF SIGNER (TYPE OR PRINT) 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (TYPE OR PRINT) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION (REV. NOV 2021)

PREVIOUS EDITION IS NOT USABLE Prescribed by GSA - FAR (48 CFR) 53.212

7. FOR SOLICITATION

INFORMATION CALL:

STANDARD FORM 1449

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

508-26-3-2041-0001

36C24726Q0218 01-15-2026

James E. Boles Jr. 478.277.2832 02-03-2026

1300 EST

Department of Veterans Affairs

Carl Vinson VA Medical Center

X 100

X

621512

$19 Million

N/A

X

See Section 2.1 of the PWS

FMS-VA-2(101)

Financial Services Center

PO Box 149971

Austin TX 78714-9971

See CONTINUATION Page

THE PURPOSE OF THIS REQUIREMENT IS TO PROCURE CT SCAN

SERVICES FOR THE PIKE AND COBB CBOCs. THE PIKE AND COBB

CBOCs FALL UNDER THE ATLANTA VAMC

SEE 52.212-1, INSTRUCTION TO OFFERORS

THIS IS A SDVOSB SET-ASIDE

THIS IS NOT A REQUIREMENT FOR MOBILE CT SCAN EQUIPMENT OR

TRAILER. THE EQUIPMENT REQUIRED IS TO BE INSTALLED AT THE

SPECIFIED LOCATION STATED IN THE PWS.

THIS IS A BASE PLUS FOUR (4) ONE (1) YEAR OPTION PERIOD

REQUIREMENT:

BASE: 1 MAY 26 - 30 APR 27

OY1: 1 MAY 27 - 30 APR 28

OY2: 1 MAY 28 - 30 APR 29

OY3: 1 MAY 29 - 30 APR 30

OY4: 1 MAY 30 - 30 APR 31

ALL QUESTIONS SHOULD BE EMAILED TO JAMES E. BOLES JR. @

james.boles2@va.gov NLT 0900 EST ON 26 JAN 26.

See CONTINUATION Page

508-3610160-2041-822200-2579 0100L00H1

X X

James E. Boles Jr.

CONTRACTING OFFICER, NCO7

36C24726Q0218

Table of Contents

SECTION A

A.1 SF 1449 SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS

AND COMMERCIAL SERVICES

SECTION B - CONTINUATION OF SF 1449 BLOCKS

B.1 CONTRACT ADMINISTRATION DATA

B.2 PRICE/COST SCHEDULE

ITEM INFORMATION

B.3 DELIVERY SCHEDULE

SECTION C - CONTRACT CLAUSES

C.1 52.212-4 CONTRACT TERMS AND CONDITIONS—COMMERCIAL PRODUCTS

AND COMMERCIAL SERVICES (NOV 2023)

C.2 52.217-8 OPTION TO EXTEND SERVICES (NOV 1999)

C.3 52.217-9 OPTION TO EXTEND THE TERM OF THE CONTRACT (MAR 2000) ...34

C.4 SUPPLEMENTAL INSURANCE REQUIREMENTS

C.5 VAAR 852.211-76 LIQUIDATED DAMAGES – REIMBURSEMENT FOR DATA

BREACH COSTS (FEB 2023) ALTERNATE I (FEB 2023)

C.6 VAAR 852.219-73 VA NOTICE OF TOTAL SET-ASIDE FOR CERTIFIED

SERVICE-DISABLED VETERAN-OWNED SMALL BUSINESSES (JAN 2023)

(DEVIATION)

C.7 VAAR 852.219-75 VA NOTICE OF LIMITATIONS ON SUBCONTRACTING—

CERTIFICATE OF COMPLIANCE FOR SERVICES AND CONSTRUCTION (JAN 2023)

(DEVIATION)

C.8 VAAR 852.232-72 ELECTRONIC SUBMISSION OF PAYMENT REQUESTS (NOV

2018)

C.9 VAAR 852.242-71 ADMINISTRATIVE CONTRACTING OFFICER (OCT 2020)

C.10 52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

C.11 52.212-5 CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT

STATUTES OR EXECUTIVE ORDERS—COMMERCIAL PRODUCTS AND

COMMERCIAL SERVICES (OCT 2025) (DEVIATION FEB 2025)

C.12 IT CONTRACT SECURITY

SECTION D - CONTRACT DOCUMENTS, EXHIBITS, OR ATTACHMENTS

BUSINESS ASSOCIATE AGREEMENT BETWEEN THE DEPARTMENT OF

VETERANS AFFAIRS VETERANS HEALTH ADMINISTRATION, Atlanta Veterans

Affairs Medical Center, AND

SECTION E - SOLICITATION PROVISIONS

E.1 52.212-1 INSTRUCTIONS TO OFFERORS—COMMERCIAL PRODUCTS AND

COMMERCIAL SERVICES (SEP 2023)

E.2 52.201-1 ACQUISITION 360: VOLUNTARY SURVEY (SEP 2023)

E.3 52.209-7 INFORMATION REGARDING RESPONSIBILITY MATTERS (OCT 2018)

E.4 52.216-1 TYPE OF CONTRACT (DEVIATION) (NOV 2025)

E.5 52.233-2 SERVICE OF PROTEST (SEP 2006)

E.6 VAAR 852.233-71 ALTERNATE PROTEST PROCEDURE (OCT 2018)

E.7 52.252-1 SOLICITATION PROVISIONS INCORPORATED BY REFERENCE (FEB

1998)

E.8 52.212-2 EVALUATION—COMMERCIAL PRODUCTS AND COMMERCIAL

SERVICES (NOV 2021)

E.9 52.212-3 OFFEROR REPRESENTATIONS AND CERTIFICATIONS—

COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES (OCT 2025) (DEVIATION

FEB 2025)

SECTION B - CONTINUATION OF SF 1449 BLOCKS

B.1 CONTRACT ADMINISTRATION DATA

1. Contract Administration: All contract administration matters will be handled by the following individuals:

a. CONTRACTOR:

b. GOVERNMENT: Contracting Officer 36C247 JAMES E. BOLES JR.

1826 Veterans Blvd.

Dublin GA 31021

2. CONTRACTOR REMITTANCE ADDRESS: All payments by the Government to the contractor will be made in accordance with:

[X] 52.232-33, Payment by Electronic Funds Transfer—System For Award Management, or

[] 52.232-36, Payment by Third Party

3. INVOICES: Invoices shall be submitted in arrears:

a. Quarterly []

b. Semi-Annually []

c. Other []

4. GOVERNMENT INVOICE ADDRESS: All Invoices from the contractor shall be submitted electronically in accordance with VAAR Clause 852.232-72 Electronic Submission of Payment

Requests.

ACKNOWLEDGMENT OF AMENDMENTS: The offeror acknowledges receipt of amendments to the Solicitation numbered and dated as follows:

AMENDMENT NO DATE

Performance Work Statement

Computed Tomography Services

Atlanta Veterans Health Care System

1. GENERAL INFORMATION

1.1. Purpose: The Atlanta Veterans Affairs (VA) requires Computed Tomography (CT) imaging services at its off-site Community Based Outpatient Clinics (CBOC’s).

1.2. Background: Contracted imaging services are currently utilized at the Atlanta VA Healthcare

System. Past practice were to be procured through High-Cost High Tech Programs, however due to staffing shortages, equipment procurement and implementation delays and the lack of active service agreements, a diminished and possible lack of the expected 10-year life cycle is not feasible for return. The inclination to improve upon these types of barriers and challenges establishes best practice through contract services, until the above barriers and challenges can be resolved.

1.3. Scope of Work: CT Scan scanner services are required by the Atlanta VA Health Care System

(ATLVAHCS). The contractor shall furnish all personnel, materials, supplies, supervision and equipment necessary to provide CT Scan services as detailed in the schedule of supplies/services and Price/cost, all in accordance with the performance work statement (PWS). CT scanners shall be located at ATL VA HCS CBOC’s on-site.

1.4. Contract Type: Firm-Fixed Price (FFP)

2. PERFORMANCE

2.1. Place of Performance:

PIKE CBOC COBB CBOC

Department of VA

Pike CBOC

US Highway 19 North

Zebulon, GA 30295

Department of VA

Cobb CBOC

1263 Cobb Parkway NW

Marietta, GA 30066

2.2. Period of Performance: This contract is for a one (1) base year and four (4) one (1) year options.

In accordance with Federal Acquisition Regulations (FAR) 52.217-9 – Option to Extend the

Term of the Contract. An option does not obligate the VA to exercise an option. The VA has the discretion to unilaterally exercise or not exercise the option period. The period of performance dates are as follows:

PERIOD DATES

Base Year May 1, 2026 – April 30, 2027

Option One (1) May 1, 2027 – April 30, 2028

Option Two (2) May 1, 2028 – April 30, 2029

Option Three (3) May 1, 2029 – April 30, 2030

Option Four (4) May 1, 2030 – April 30, 2031

2.3. Hours of Performance: The contractor will provide the service during the hours of operation

Monday – Friday, 8:00 AM – 5:00 PM Eastern Time (ET) and is subject to change depending on the Governments need. Weekends may be added through a contract modification if funds permit.

Unless otherwise specified the Government observes the following holidays:

New Year’s Day January 1

Martin Luther King’s Birthday Third Monday in February

President’s Day Third Monday in February

Memorial Day Last Monday in May

Juneteenth June 19

Independence Day July 4

Labor Day First Monday in September

Columbus Day Second Monday in October

Veterans Day November 11

Thanksgiving Day Fourth Thursday in November

Christmas Day December 25

2.3.1. Any other date specifically declared by the President of The United States to be a national holiday will also be observed.

THIS IS NOT A MOBILE UNIT (TRAILER)

THIS EQUIPMENT IS TO BE INSTALLED (FIXED)

3. TASKS

3.1. Contractor will provide CT Scan services utilizing equipment meeting the minimum specifications listed in section 5;

3.2. Contractor shall successfully implement all services at all facilities covered under this contract in accordance with the time frames/dates stated in section 4.1;

3.3. CT Scans:

3.3.1. Contractor will be available and provide patient exams five (5) days per week, excluding

Federal Holidays listed in section 2.3;

3.3.2. Contractor will perform an estimated minimum fifteen to sixteen (15-16) CT studies per day, types of scans to be included are listed in section 5.1;

3.3.3. Contractor will provide an accurate screening VA form for each patient;

3.3.4. Contractor will provide an “Average” patient scan time of thirty (30) minutes;

3.4. Contractor will ensure arrival and departure such that the CT scan operates the hours of performance listed in section 2.3;

3.5. Contractor shall provide excellent customer service to all veterans who are being treated;

3.6. Contractor shall provide all preventative maintenance services on all furnished equipment. All equipment will be operational during service hours.

4. IMPLEMENTATION

4.1. Implementation will follow the dates below unless otherwise modified:

FACILITY ON-SITE BY INSTALLATION SERVICE START

DATE

Pike CBOC 05/15/2026 3-4 Weeks 06/01/2026

Cobb CBOC 05/15/2026 3-4 Weeks 06/01/2026

4.1.1. On-Site By: The CT machines along with any other equipment needed to provide the services must be on site no later than the date in section 4.1.

4.1.1.1. All equipment will be delivered to the addresses listed in section 2.1.

4.1.2. Installation Duration: The anticipated installation time as stated in section 4.1

4.1.3. Service Start Date: The Contractor shall be on-site and start CT services by the date in section 4.1.

4.1.4. Equipment Removal: The Contractor shall be responsible for prompt removal of contractor equipment and all associated accessories, supplies and items upon end of contract and/or notification of services termination or no longer required. There will be no separate contract line item for equipment removal. Contractor pricing should be included in the overall pricing of contract installation and services being provided.

5. SPECIFICATIONS CT SCANNER

5.1. The Contractor shall provide a Computed Tomography (CT Scanner) to perform the following examinations:

5.1.1. Cervical spine

5.1.2. Thoracic spine

5.1.3. Lumbar spine

5.1.4. Spine

5.1.5. Extremities

5.1.6. Abdomen

5.1.7. Pelvis

5.1.8. Sinus/face, head, orbits, temporal bones

5.1.9. Chest without contrast, chest with contrast, Chest/Abdomen/Pelvis

5.1.10. Dual Phase Liver, Pancreatic protocol, Endograph protocol, AAA protocol, PE protocol

5.1.11. Complete high-resolution Lung CT exams

5.2. Equipment:

5.2.1. The provider will deliver on each scan day a clean well-maintained state-of-the-art Computed

Tomography (CT scan) unit - minimum 128 slice Siemens Xceed, and / or comparable unit that is currently utilized at the Atlanta VA main facility. Government prefers new Siemens

Xceed / or comparable unit not to exceed five (5) years old. The provider will have available, at the provider’s expense, any surface accessories for the performance of all imaging studies.

The provider will be responsible for the maintenance of all connectivity cables from the unit to the fixed connectivity ports. The ATLVAHCS will provide well maintained fixed connectivity ports. The provider will be responsible for collaborating with all connecting and disconnecting power, and network connections. The CT acquisition environment will have a means of redundant backup of all patient data.

5.2.2. Communication with CT workstation technology & Radiology service printers. The provider will ensure that all software and licenses necessary to have full Digital Imaging

Communications in Medicine (DICOM) communication between the CT workstation technology and ATLVAHCS Radiology service are acquired and installed.

5.2.3. Communication between CT systems & Radiology service Picture Archiving and

Communication System (PACS). The provider will ensure that a convenient and robust means of DICOM transfer of CT studies to the VAMC Radiology Service PACS is operational. The provider will obtain and provide VAMC any technology necessary to ensure that CT studies can be conveniently read on the existing VAMC PACS display technology. Any peripherals that the VAMC does not have but that are needed to ensure convenient and timely display of

CT studies in the ATLVAHCS Radiology service will be obtained by the provider, installed and maintained by the provider, and become the property of the VAMC. Such technology will be retained by the VAMC so that at future dates the archived studies can be reviewed. Each CT study will be transferred to the VAMC PACS immediately following acquisition of the study so that it can, if necessary, be reviewed before the patient leaves the Computed Tomography

(CT scan) and / or the CBOC. Contrast studies are to be determined, if needed.

5.2.4. The equipment shall have the capabilities necessary to perform the following:

5.2.4.1. Dedicated imaging protocols for all applications

5.2.4.2. CT scans to include: sinus/face, head, orbits, temporal bones, soft tissue neck, routine abdomen and pelvis, hi-resolution chest, chest without contrast, chest with contrast, Chest/Abdomen/Pelvis, A/P for Hematuria, Renal Mass protocol, Adrenal Mass protocol, Dual Phase Liver, Pancreatic protocol, Endograph protocol, AAA protocol, PE protocol, Runoff, CTA Head, CTA head and neck, CTA neck, cervical spine, thoracic spine, lumbar spine, upper extremity, and lower extremity.

5.2.4.3. Imaging, in multi-slice or 3D techniques, if needed

5.2.4.4. Perform sagittal and coronal reformats on all exams

5.2.4.5. Achieve lumen visualization in cardiac and vascular imaging as needed

5.2.4.6. Dedicated imaging protocols for Abdomen / Pelvis applications

5.2.4.7. To include Renal Mass Protocol, Dual Phase Liver, Endograph protocol, AAA, Hematuria, Adrenal Mass, Pancreatic Protocol, PE protocol, and CTA Runoff

5.2.4.8. High quality imaging for assessment of lesions in all anatomical areas

5.2.4.9. Complete high-resolution Lung CT exams

5.2.4.10. Copying of all examine parameters from any previous scan to a near acquisition

5.2.4.11. Selection of image matrix sizes freely up to 1024 X 1024

5.2.4.12. Dynamic studies with all imaging methods allowing entire scans to be repeated multiple times. To include Dual Phase Liver, Renal Mass Protocols, Hematuria, Endograph protocol, Adrenal Mass Protocol, and Pancreatic Protocol

5.2.4.13. Manual start controlled from the gantry or operator’s console

5.2.4.14. Various motion and artifact reduction techniques

5.2.4.15. Phase contrast imaging

5.2.4.16. The CT shall be capable of performing 0.6 mm thick scan images

6. CONTRACTOR REQUIREMENTS & RESPONSIBILITIES

6.1. Contractor to verify that equipment is used for federal government contract work only;

6.2. Contractor will be solely responsible for all staffing issues related to the CT scan.

6.3. Contractor will perform arrival, set-up, take-down, and departure of Computed Tomography (CT scan) in a manner that results in limited or no disruption to normal operations of the

ATLVAHCS

6.4. The Contractor will be responsible for providing all necessary QA Phantoms for quality assurance testing.

6.5. The Contractor will provide a clean Computed Tomography (CT scan) area and dispose of trash in a responsible manner.

6.6. Contractor will provide a system that is compatible with VistA Imaging;

6.7. Contractor will transfer images to VistA Imaging immediately on completion of each scan via network connection;

6.8. Contractor will abide by all VA hospital rules and regulations, to include all VA Information and

Security guidelines.

6.9. Contractor will maintain all training, licenses, and certifications to perform this service and provide technologist that meet the qualifications in section 3.1;

6.10. Contractor will be solely responsible for all technologists and other staffing issues related to the operation of the Computed Tomography (CT scan);

6.11. Contractor will provide each day a clean Computed Tomography (CT scan) and dispose of trash in a responsible manner;

6.12. Contractor will adhere to all Health Insurance Portability and Accountability Act

(HIPPA) and Occupational Safety and Health Administration (OSHA) requirements and regulations;

6.13. Contractor will communicate effectively with radiologist and other physicians;

6.14. Contractor will provide excellent customer service to all patients and staff and;

6.15. Contractor will provide back-up CT technologists when needed to limit any downtime.

6.16. Key Personnel:

6.16.1. CT Technologist –

6.16.1.1. Must be registered under the American Registry of Radiologic Technologists

(CT) (ARRT).

6.16.1.2. Must be Basic Life Support (BLS) certified;

6.16.1.3. Must be Cardiopulmonary Resuscitation (CPR) certified and;

6.16.1.4. Preferably at least three (3) years’ experience

6.16.1.5. All training and certifications must be up to date and maintained through the life of the contract.

6.16.1.6. All technologists will maintain all immunizations required of practicing medical professionals.

6.16.1.7. All technologists will adhere to all relevant radiation safety practices and relevant magnetic safety practices.

6.16.2. Required Documents & Reporting for Key Personnel –

6.16.2.1. Contractor shall provide proof of BLS certification for each employee within 30 days of contract start date and must recertify by 30 days of expiration.

6.16.2.2. Contractor shall report any instances of employees with communicable illness upon receipt of notification.

6.16.2.3. Contractor shall submit a resume of all service providers before service providers can perform

6.16.2.4. All service providers with access to VA system will follow all facility security standards stated in section 7. along with a background check described in section 7.5.

6.16.3. Conduct –

6.16.3.1. Contractor employees shall not loiter in any working or patron area. Upon completion of their assigned shifts, employees shall promptly depart from the facilities. Contractor will follow all local policies for employee conduct and comply with applicable laws on federal property.

6.16.4. Key Personnel Policy -

6.16.4.1. The contractor shall be responsible for protecting the personnel furnishing services under this contract. To carry out this responsibility, the contractor shall provide the following for these personnel

6.16.4.1.1. Worker’s compensation

6.16.4.1.2. Liability insurance

6.16.4.2. The parties agree that such contractor furnished personnel shall not be considered

VA employees for any purpose and shall be considered employees of the contractor.

6.16.4.3. The contractor will provide current copies of these records at the time of the contract award and annually on the anniversary date of the contract award to the VA

COR or upon request, for each of the contractor’s employees working on the contract

6.16.4.4. Candidates are required to be eligible for United States (US) employment and able to provide proof of employment eligibility. It is the responsibility of the contractor to assure their candidates have proof of citizenship or proof of the candidates’ right to work under a U.S. Citizenship and Immigration Services (USCIS)

VISA program.

6.17. The Contractor will provide the ATLVAHCS a study-quality standard (a binder and/or

CD of data and studies) that reflects the quality of the studies the provider is prepared to insure will be maintained throughout the duration of the contract. Examples of most, if not all, study types to be performed will be included in the study-quality standard.

6.18. The Contractor will have a documented quality assurance program and provide the

ATLVAHCS copies of quality assurance documents. The program will comply with all relevant

The Joint Commission (TJC) and HIPPA standards. The Contractor will have readily available several phantoms that can be used to determine CT parameters. Phantom studies will be conducted as needed to test and ensure study quality.

6.19. Clinical and/or other medical records, including images in DICOM form, of VA beneficiaries treated by the Contractor will be forwarded to the ATLVAHCS and shall remain the property of the US Government. The ATLVAHCS will own solely the data/images of the examinations and studies performed on the CT scanners / units.

6.20. HIPAA: Contractor must adhere to the provision of Public Law 104-191, Health

Insurance Portability and Accountability Act (HIPAA) of 1996 and the National Standards to

Protect the Privacy and Security of Protected Health Information (PHI). As required by HIPAA, the Department of Health and Human Services (HHS) has promulgated rules governing the security and use and disclosure of protected health information by covered entities, including the

Department of Veterans Affairs (VA). In accordance with 45 CFR 164.502(e), the Privacy Rule includes exceptions to the Business Associate Standard. This requirement meets the exception and does not require a Business Associate agreement in order for Covered Entity to disclose

Protected Healthcare Information to a health care provider for treatment. There will not be federal records created, maintained, used or dispositioned with this contract; regardless of format

[paper, electronic, etc.] or mode of transmission [e-mail, fax, etc.].

6.21. Employee Personal Identity Verification (PIV) Badges: The contractor shall submit requests for flash badges to the contract COR for their personnel as soon as they know the individual will be employed by the contractor. Renewals shall be submitted at a minimum of 30 workdays prior to expiration. The contract COR will notify the contractor site supervisor when the flash badge is ready to be picked up at VHA Human Resource Office.

6.22. Physical Security: The contractor shall safeguard all Government property provided for contractor use. At the end of each work shift, all Government facilities, equipment, and materials shall be secured.

7. SECURITY REQUIREMENTS

7.1. All personnel employed by the contractor in the performance of this contract, or any representative of the contractor entering the Government installation, shall abide by all security regulations of VHA. The contractor shall sign an agreement to comply with the security requirements of this contract.

7.2. Contractor Personnel shall wear uniforms of a clean appearance which displays the full name of the company, along with the appropriate Personal Protective Equipment.

7.3. Contractor Personnel are required to obtain VA-issued identification (PIV) badges within 30 days of beginning work at the DRRTP.

7.4. Contractor Personnel shall wear VA-issued identification (PIV) badges the entire time they are on VA Property.

7.5. All contractor employees are subject to the same level of investigation as VA employees who have access to VA Sensitive Information. The level of background investigation commensurate with the level of access needed to perform the performance work statement is Routine – Federal

Facility. This requirement is applicable to all subcontractor personnel requiring the same access.

7.6. Contractor Personnel are prohibited from smoking on VA Property.

7.7. Contractor Personnel shall refrain from using personal electronic devices during meal service.

7.8. Contractor Personnel shall only park in designated areas.

7.9. Contractor Personnel shall only enter Facility through designated area.

7.10. Contractor Personnel shall be older than eighteen (18) years of age.

7.11. Contractor Personnel shall adhere to VA security and screening guidelines.

7.12. The contractor shall safeguard all Government property provided for contractor use.

7.13. The contractor will abide by all security guidelines when accessing VA systems.

7.14. The contractor will have access to personal health information (PHI), the contractor will have access to the Computerized Patient Record System (electronic health record).

7.15. Contractor employees will not use any form of removable storage media when providing services under the terms of this contract. Removable storage media includes, but is not limited to, universal serial bus (USB) thumb drives, MP3 Players, and external hard drives.

8. GOVERNMENT RESPONSIBILITY

8.1. COR shall ensure that all key personnel have current badges to enter the facilities.

8.2. COR shall ensure that all work areas are available at the time services begin.

8.3. The COR shall ensure that all background checks have been cleared, and results shall be provided to the Contracting Officer (CO) for electronic filing.

8.4. COR shall notify the contractor of any changes in services that have been scheduled.

8.5. Government Furnished Property:

8.5.1. Fiber reinforced area

8.5.2. Power outlets are located for needed power requirements. An example of power requirements would be 480 volts, 3 phase, 150 amps, 112 kVA.]

8.5.3. Contrast Injector, if needed and Contrast Media if needed.

8.5.4. One (1) telephone line located in the CT Control area

8.5.5. One computer terminal with ATLVAHCS Radiology PACS network access

8.5.6. Telephone instruments as needed

8.5.7. Restroom facilities within a reasonable walking distance

8.5.8. Printer for printing request

8.5.9. Provide all supplies, including basic consumables and linens, required to perform the CT examinations

8.5.10. Dumpsters for waste disposal will be provided and maintained by the Government.

8.6. The ATLVAHCS will be responsible for maintenance of the appropriate equipment for support and location of the CT units. The ATLVAHCS will be responsible for maintenance of connectivity ports appropriate for linking the CT units to power, computer network, and local-access phone/modem/fax as needed. The telephone technology will include one line dedicated for access to the CBOC lines in the ATLVAHCS. The phone line must be a dedicated sole use line used for professional work. The ATLVAHCS will be responsible for connectivity from within the ATLVAHCS to connectivity ports located in the ATLVAHCS CBOC facility at the site. The Contractor will be responsible for collaboration of connectivity from the CT unit within the facility to the connectivity ports of the provided by the ATLVAHCS.

9. QUALITY ASSURANCE SURVEILLANCE PLAN (QASP)

9.1. Performance:

9.1.1. The contractor is responsible for the performance of ALL terms and conditions of the contract. CORs will provide contract progress reports quarterly to the CO reflecting performance on this plan and all other aspects of the resultant contract. The performance standards outlined in this QASP shall be used to determine the level of contractor performance in the elements defined.

9.1.2. Performance standards define desired services. The Government performs surveillance to determine the level of Contractor performance to these standards.

9.2. Incentives / Deducts:

9.2.1. The Government shall use exercise of option period and past performance as incentives.

Incentives shall be based on exceeding, meeting, or not meeting performance standards.

9.3. Methods of Surveillance:

9.3.1. DIRECT OBSERVATION - The COR and/or his designated alternate will regularly observe the work performance of the vendor or vendor’s employee during normal work hours and at dates and times consistent with operational efficiency.

9.3.2. PERIODIC INSPECTION - The COR and/or his designated alternate will perform periodic inspection of equipment service reports and other standard documentation of all maintenance performed.

9.3.3. PATIENT/CUSTOMER COMPLAINTS - The COR and/or his designated alternate will review and investigate as necessary any staff patient or visitor’s complaints, with results to be discussed with vendor as required.

9.4. Performance Standards:

PERFORMANCE

INDICATORS

REF

PERFORMANCE

MEASURE

FREQUENCY

OF

ASSESSMENT

RATING

INCENTIVE / DIS-

INCENTIVE

Provide personnel in the work area and available for work at appointed times

3.3 Personnel shall

arrive for all duty shifts timely of the time

Weekly EXCEPTIONAL

96% – 100 %

SATISFACTORY

90 - 95%

UNSATISFACTORY

0% - 89%

Positive Past

Performance

Options Awarded /

Poor Past performance/Options

Not Awarded

Adhere to

HIPPA

requirements

6 Contractor shall adhere to all

HIPPA

Daily EXCEPTIONAL

Zero (0) Violations

SATISFACTORY

Positive Past

Performance

10. PAYMENT & INVOICING

10.1.1. The Contractor will be paid monthly, in arrears, upon receipt of a properly prepared invoice. The invoice shall include at a minimum: invoice number, invoice amount, Contract’s name and address, contract number, purchase order number and period of performance. The Contractor will provide backup document to COR for verification of amount invoiced. The backup document shall include invoice number, Contractor’s name and address, the contract number, and purchase order. Invoices will be reconciled with VA record prior to disbursement of payments.

10.1.2. The Contractor shall submit all invoices to the following address:

FSC VA (667)

PO BOX 149971

Austin, TX 78714-8971

11. CHANGES TO THE STATEMENT OF WORK

PERFORMANCE

INDICATORS

REF

PERFORMANCE

MEASURE

FREQUENCY

OF

ASSESSMENT

RATING

INCENTIVE / DIS-

INCENTIVE

requirements while at Government facilities.

No More Than two (2)

Violations

UNSATISFACTORY

Three (3) or More

Violations

Options Awarded /

Poor Past performance/Options

Not Awarded

Complete a screening form accurately for each patient and complete and complete scheduled exam

3.2 Contractor will

complete all necessary documents for all scheduled exams.

All exams will be scheduled during their appointment time.

Weekly EXCEPTIONAL

96% – 100 %

SATISFACTORY

90 - 95%

UNSATISFACTORY

0% - 89%

Positive Past

Performance

Options Awarded /

Poor Past performance/Options

Not Awarded

Equipment

3.5 All equipment will

be operational, and preventative maintenance will be performed when necessary.

Weekly EXCEPTIONAL

96% – 100 %

SATISFACTORY

90 - 95%

UNSATISFACTORY

0% - 89%

Positive Past

Performance

Options Awarded /

Poor Past performance/Options

Not Awarded

Customer

Service

3.4 Contacted service

providers will treat all patients and staff with courtesy and respect. All complaints will be validated.

Monthly EXCEPTIONAL

Zero (0) Complaints

SATISFACTORY

No More Than Three

(3) Complaints

UNSATISFACTORY

Four (4) or More

Complaints

Positive Past

Performance

Options Awarded /

Poor Past performance/Options

Not Awarded

11.1. Any changes to this PWS shall be authorized and approved only through written correspondence from the CO. A copy of each change will be kept in a project folder along with all other products of the project. Costs incurred by the contractor through the actions of parties other than the CO shall be borne by the contractor.

12. CONFLICT OF INTEREST:

12.1. The Contractor shall not employ any person who is an employee of the United States

Government if the employment of that person would create a conflict of interest. The Contractor shall not employ any person who is an employee of the Department of Veterans Affairs. Nor shall the Contractor employ any person who is a member of the immediate family of a VA employee, if the employment of that family member would create a conflict of interest, or the appearance of a conflict of interest, particularly with regard to influencing the contract negotiations, terms of the contract or the work carried out under the contract. In any such case

VA must review the matter and give its approval in accordance with agency ethics rules.

13. ACCESS TO VA INFORMATION AND VA INFORMATION SYSTEMS:

13.1.1 a. A contractor/sub-contractor shall request logical (technical) or physical access to VA information and VA information systems for their employees, subcontractors, and affiliates only to the extent necessary to perform the services specified in the contract, agreement, or task order.

13.1. b. All contractors, subcontractors, and third-party services and associates working with

VA information are subject to the same investigative requirements as those of VA appointees or employees who have access to the same types of information. The level and process of background security investigations for contractors must be in accordance with VA Directive and

Handbook 0710, Personnel Suitability and Security Program. The Office for Operations, Security, and Preparedness is responsible for these policies and procedures.

13.2. c. Contract personnel who require access to national security programs must have a valid security clearance. National Industrial Security Program (NISP) was established by Executive

Order 12829 to ensure that cleared U.S. defense industry contract personnel safeguard the classified information in their possession while performing work on contracts, programs, bids, or research and development efforts. The Department of Veterans Affairs does not have a

Memorandum of Agreement with Defense Security Service (DSS). Verification of a Security

Clearance must be processed through the Special Security Officer located in the Planning and

National Security Service within the Office of Operations, Security, and Preparedness.

13.3. d. Custom software development and outsourced operations must be in the U.S. to the maximum extent practical. If such services are proposed to be performed abroad and are not disallowed by other VA policy or mandates, the contractor/subcontractor must state where all non-U.S. services are provided and detail a security plan, deemed to be acceptable by VA, specifically to address mitigation of the resulting problems of communication, control, data protection, and so forth. Location within the U.S. may be an evaluation factor.

13.4. e. The contractor or subcontractor must notify the Contracting Officer immediately when an employee working on a VA system or with access to VA information is reassigned or leaves the contractor or subcontractor’s employ. The Contracting Officer must also be notified immediately by the contractor or subcontractor prior to an unfriendly termination.

13.5. f. All contractor employees and subcontractor employees requiring access to VA information and VA information systems shall complete the following before being granted access to VA information and its systems:

13.6. (01) Sign and acknowledge (either manually or electronically) understanding of and responsibilities for compliance with the Contractor Rules of Behavior, Appendix E relating to access to VA information and information systems.

13.7. (02) Successfully complete the VA Cyber Security Awareness and Rules of Behavior training and annually complete required security training.

13.8. (03) Successfully complete the appropriate VA privacy training and annually complete required privacy training; and

13.9. (04) Successfully complete any additional cyber security or privacy training, as required for VA personnel with equivalent information system access [to be defined by the VA program official and provided to the Contracting Officer for inclusion in the solicitation document – e.g., any role-based information security training required in accordance with NIST

Special Publication 800-16, Information Technology Security Training Requirements.]

13.10. g. The contractor shall provide to the Contracting Officer and/or the COR a copy of the training certificates and certification of signing the Contractor Rules of Behavior for each applicable employee within 1 week of the initiation of the contract and annually thereafter, as required.

13.11. h. Failure to complete the mandatory annual training and sign the Rules of Behavior annually, within the timeframe required, is grounds for suspension or termination of all physical or electronic access privileges and removal from work on the contract until the training and documents are complete.

13.12. i. Due to the threat of data breach, compromise or loss of information that resides on either VA-owned or contractor-owned systems, and to comply with Federal laws and regulations, VA has developed an Information and Information Technology Security clause to be used when VA sensitive information is accessed, used, stored, generated, transmitted, or exchanged by and between VA and a contractor, subcontractor or a third party in any format

(e.g., paper, microfiche, electronic or magnetic portable media).

13.13. The contractor and their personnel shall be subject to the same Federal laws, regulations, standards and VA policies as VA personnel, regarding information and information system security. These include but are not limited to Federal Information Security Management Act

(FISMA), Appendix III of OMB Circular A-130, and guidance and standards, available from the

Department of Commerce’s National Institute of Standards and Technology (NIST). This also includes the use of common security configurations available from NIST’s Web site at:

http://checklists.nist.gov/. To ensure appropriate security controls are in place, contractors must follow the procedures set forth in “VA Information and Information System Security/Privacy

Requirements for IT Contracts” located at the following Web site: http://www.iprm.oit.va.gov/

(852.273-75, Security Requirements for Unclassified Information Technology Resources).

13.14. The contractor, their personnel, and their subcontractors shall be subject to the Federal laws, regulations, standards, and VA Directives and Handbooks regarding information and information system security as delineated in this contract.

13.15. VA INFORMATIONAL CUSTODIAL TERMS:

13.16. a. Information made available to the contractor or subcontractor by VA for the performance or administration of this contract or information developed by the contractor/subcontractor in performance or administration of the contract shall be used only for those purposes and shall not be used in any other way without the prior written agreement of the

VA. This clause expressly limits the contractor/subcontractor's rights to use data as described in

Rights in Data - General, FAR 52.227-14(d) (1).

13.17. b. VA information should not be co-mingled, if possible, with any other data on the contractors/subcontractor’s information systems or media storage systems in order to ensure VA requirements related to data protection and media sanitization can be met. If co-mingling must be allowed to meet the requirements of the business need, the contractor must ensure that VA’s information is returned to the VA or destroyed in accordance with VA’s sanitization requirements. VA reserves the right to conduct on-site inspections of contractor and subcontractor IT resources to ensure data security controls, separation of data and job duties, and destruction/media sanitization procedures are in compliance with VA directive requirements.

13.18. c. Prior to termination or completion of this contract, contractor/subcontractor must not destroy information received from VA, or gathered/created by the contractor in the course of performing this contract without prior written approval by the VA. Any data destruction done on behalf of VA by a contractor/subcontractor must be done in accordance with National Archives and Records Administration (NARA) requirements as outlined in VA Directive 6300, Records and Information Management and its Handbook 6300.1 Records Management Procedures, applicable VA Records Control Schedules, and VA Handbook 6500.1, Electronic Media

Sanitization. Self-certification by the contractor that the data destruction requirements above have been met must be sent to the VA contracting officer within 30 days of termination of the contract.

13.19. d. The contractor/subcontractor must receive, gather, store, back up, maintain, use, disclose and dispose of VA information only in compliance with the terms of the contract and applicable Federal and VA information confidentiality and security laws, regulations and policies. If Federal or VA information confidentiality and security laws, regulations and policies become applicable to the VA information or information systems after execution of the contract, or if NIST issues or updates applicable Federal Information Processing Standards (FIPS) or

Special Publications (SP) after execution of this contract, the parties agree to negotiate in good faith to implement the information confidentiality and security laws, regulations and policies in this contract.

13.20. e. The contractor/subcontractor shall not make copies of VA information except as authorized and necessary to perform the terms of the agreement or to preserve electronic information stored on contractor/subcontractor electronic storage media for restoration in case any electronic equipment or data used by the contractor/subcontractor needs to be restored to an operating state. If copies are made for restoration purposes, after the restoration is complete, the copies must be appropriately destroyed.

13.21. f. If VA determines that the contractor has violated any of the information confidentiality, privacy, and security provisions of the contract, it shall be sufficient grounds for

VA to withhold payment to the contractor or third party or terminate the contract for default or terminate for cause under Federal Acquisition Regulation (FAR) part 12.

13.22. g. If a VHA contract is terminated for cause, the associated BAA must also be terminated and appropriate actions taken in accordance with VHA Handbook 1600.01, Business

Associate Agreements. Absent an agreement to use or disclose protected health information, there is no business associate relationship.

13.23. h. The contractor/subcontractor must store, transport, or transmit VA sensitive information in an encrypted form, using VA-approved encryption tools that are, at a minimum, FIPS 140-2 validated.

13.24. i. The contractor/subcontractor’s firewall and Web services security controls, if applicable, shall meet or exceed VA’s minimum requirements. VA Configuration Guidelines are available upon request.

13.25. j. Except for uses and disclosures of VA information authorized by this contract for performance of the contract, the contractor/subcontractor may use and disclose VA information only in two other situations: (i) in response to a qualifying order of a court of competent jurisdiction, or (ii) with VA’s prior written approval. The contractor/subcontractor must refer all requests for demands for production of, or inquiries about, VA information and information systems to the VA contracting officer for response.

13.26. k. For service that involves the storage, generating, transmitting, or exchanging of

VA sensitive information but does not require C&A or an MOU-ISA for system interconnection, the contractor/subcontractor must complete a Contractor Security Control Assessment (CSCA) on a yearly basis and provide it to the COR.

13.27. INFORMATION SYSTEM HOSTING, OPERATION, MAINTENANCE, OR USE:

13.28. a. For information systems that are hosted, operated, maintained, or used on behalf of VA at non-VA facilities, contractors/subcontractors are fully responsible and accountable for ensuring compliance with all HIPAA, Privacy Act, FISMA, NIST, FIPS, and VA security and privacy directives and handbooks. This includes conducting compliant risk assessments, routine vulnerability scanning, system patching and change management procedures, and the completion of an acceptable contingency plan for each system. The contractor’s security control procedures must be equivalent to those procedures used to secure VA systems. A Privacy Impact

Assessment (PIA) must also be provided to the COR and approved by VA Privacy Service prior to operational approval. All external Internet connections to VA’s network involving VA information must be reviewed and approved by VA prior to implementation.

13.29. b. Adequate security controls for collecting, processing, transmitting, and storing of personally Identifiable Information (PII), as determined by the VA Privacy Service, must be in place, tested, and approved by VA prior to hosting, operation,…

This is the start of the file's text. The full file is on GovTribe.

File details come from the government source that posted it. Updated .