Loren Data's SAM Daily™

SAMDAILY.US - ISSUE OF JANUARY 18, 2026 SAM #8819
SPECIAL NOTICE

70 -- NOTICE OF INTENT TO SOLE SOURCE Neurology: Analytics Subscription

Notice Date

1/16/2026 11:07:47 AM
 

Notice Type

Special Notice
 

NAICS

541519 — Other Computer Related Services
 

Contracting Office

241-NETWORK CONTRACT OFFICE 01 (36C241) TOGUS ME 04330 USA
 

ZIP Code

04330
 

Solicitation Number

36C24126Q0192
 

Response Due

1/21/2026 7:00:00 AM
 

Archive Date

02/20/2026
 

Point of Contact

Phillip Crockett, CONTRACT OFFICER, Phone: 802-295-9363 x5199
 

E-Mail Address

Phillip.crockett@va.gov
(Phillip.crockett@va.gov)
 

Awardee

null
 

Description

Page 14 of 33 PRODUCT DESCRIPTION (PD) DEPARTMENT OF VETERANS AFFAIRS National TeleEEG and Epilepsy Program VISN 1 Health Level Date: 11/14/2025 PD Version Number: 1.0 PRODUCT REQUIREMENTS The VA National TeleEEG and Epilepsy program (NTEEG-EP) operates a virtual network for neurology care, connecting multiple facilities and staff members working non-standard rotating shifts to provide 24-hour, 365-day clinical coverage across multiple VISNs and time zones. To effectively visualize and analyze internal NTEEG=EP data and share it with internal and external stakeholders, a data analytics program license is required, including the following: Retrieval and display of real-time incoming phone call information from NTEEG-EP supported phone system Retrieval and display of nearly real time daily NTEEG-EP Interfacility Consults (IFC) Retrieval and display of case metrics near-real-time data extraction from the central external sources and administrative data not limited to a central data source Retrieval and display of provider on-call analytics from the Qgenda scheduling system Retrieval and display of NTEEG-EP case informatics from NTEEG-EP call log Provides essential reporting tools on usage and shift coverage Systems and data shall be installed and configured to integrate seamlessly with existing infrastructure, security protocols, and technical resources within the VA Enterprise Infrastructure. Leveraging this environment enables the Veterans Health Administration (VHA) to accelerate innovation, improve accessibility, and maintain a flexible, scalable foundation that supports the dynamic and evolving needs of healthcare delivery. Access to reports and dashboards shall be via web browser-based access. System shall support and configure for VA s Single Sign On (SSO) with Personal Identity Verification Card (PIV) Salient Characteristics Implement and use Foundations from HealthLevel as solution for the data analytics for quality and performance reporting and data driven applications. The pathway to achieving this is by engaging the entire NTEEG-EP staff with useful and actionable insights, with reports and worklists that do not require human intervention and manual effort. Overall NTEEG-EP should expect improved efficiency and quality rapidly. In the medium-to-long-term horizon new applications that augment the existing and future EMR, without duplication, driving high efficiency and reliability with a financial outlay that is far lower than alternate OEHRM augmentation solutions. Foundations relies on data sources to provide metrics which will then drive additional applications as well. In addition to data sources, there is an option of building and provisioning data capture applications, program, or additional chart review/data capture capability. In a simplified view Foundations consumes data from multiple external data sources such as HL7, SQL Data Extracts, Calendar files, etc. and delivers a near-real-time web based interactive user interface to end-users. Typically, the entire customer organization uses Foundations in some form, from analytics and insights for decision making, self-service QI/PI insights, as well as worklists for efficient and reliable workflows. Web-based reporting with fully end-user customizable reports that can be created from scratch or modified based on an extensive preconfigured report set to be developed by the vendor. Unlimited workspaces and reports for available data content in the information model deployed. Unlimited users accounts, concurrent users, and access times (24x7x365) User account management to assure role-based access and security features for staff data privacy. Provide data governance and security controls to ensure appropriate access levels based on need to know . Reconciliation of data feeds purchased into common information model and data content. Data analytics and reporting for order workflow from order pending to schedule to active through to completion. Provide workflow, business intelligence and analytics capabilities to assist with workload tracking, capacity planning, performance management, quality assurance functions. The platform must be able to assist with clinical data points analysis and workflow analysis. Worklist display of staff roles such as physicians, nurses, technicians, operational staff and leadership. No-code platform that enables building reports and analytics output without writing code. The system design must be predicated on a flexible, easy-to-use and highly customizable user interface. Automated alerts and email notifications for out-of-range values and daily/weekly/monthly reports. Administration tools for managing protocoling dictionaries and other relevant mapping tools Data must be exportable in Excel format. Commitment to 24x7x365 emergency support for escalations or issues. Commitment to SLA for support requests and urgency. Commitment to quarterly reviews for SLA satisfaction and overall value-benefit reviews. Vendor to specify normal support process. Vendor to specify user license management and restriction / pricing for additional user licenses. Software upgrades to be included in the contract term, any upgrade costs/fees must be disclosed. All server infrastructure supporting this solution must adhere to the following standards: Software Compliance: Servers must operate on the most current VA Office of Information and Technology (OIT)-approved software stack, ensuring alignment with VA cybersecurity, interoperability, and performance standards. Hosting Environment: All servers must be hosted within the VA Innovation Unit (VAIU) Digital Health Enclave (DHE), a secure and compliant environment designed to support digital health solutions across the VA enterprise. Real-Time Capabilities: Ability to Display Data in Real-Time Ability to support STAT orders for protocoling, with SLA and controls over order record availability from the time the data is available to Foundations. System shall be capable of supporting near-real-time reconciliation of data from external data sources Constraints and delays will be specified within 15 minutes and no more than 30 minutes of delay from the time data is made available to the system to make it available to end-users. All data sources that provide data shall be eligible for near-real-time data reconciliation metric. Infrastructure required for supporting near-real-time reconciliation of data shall be specified and specification updated regularly for the contracted study volumes. Vendor shall provide real-time dashboards with� instant access to critical business metrics, including, but not limited to, monitoring key performance indicators (KPIs) and identifying trends, anomalies, and emerging issues. Personalized Performance Capabilities Management level reports must provide normalized productivity reports by physicians. Individualized productivity reports must be provided for each provider that tracks their performance (volume, RVU and billable) against the mean, median and management who set performance targets for the group. Quality Assurance (QA) reports must be available. These reports must identify studies not meeting established turnaround time (TAT) targets and determine the TAT percentage of studies not meeting the established thresholds per variable time window. Ability to provide personalized performance metrics relevant to individual users, staff for order level and protocoling work effort. Each Scheduler, Technologist and Physician shall have their personalized, individual and confidential metrics. The system shall support the configuration of supervisor teams so that each supervisor can access only their staff s performance metrics. The contract s Period of Performance (POP) shall be a base year plus four option years. hardware specification It is estimated that the following infrastructure will be required to run the NTEEG-EP Foundations environment. All server infrastructure supporting this solution must adhere to the following standards: Software Compliance: Servers must operate on the most current VA Office of Information and Technology (OIT)-approved software stack, ensuring alignment with VA cybersecurity, interoperability, and performance standards. Hosting Environment: All servers must be hosted within the VA Innovation Unit (VAIU) Digital Health Enclave (DHE), a secure and compliant environment designed to support digital health solutions across the VA enterprise. Production (Live) and Test Environment (Total 5 virtual machines, 3 if OIT provide Database services) Figure 1: Foundation Medical Device Isolation Architecture (MDIA) Node / Purpose vCPU Memory Storage ACL/Network Node 1: Main WebSite 6 12 GB C: 150 GB D: 100 GB E: 200 GB DNS: https://NTEEG-EP.va.gov (recommended) and SSL Certificate. Cloud Enterprise Foundation Implementation Node 2: Data Gateway (this node stores raw data and needs more storage). Also serves as alternate to main website. 6 12 GB C: 150 GB D: 100 GB E: 300 GB F: 300 GB DNS: https:// NTEEG-EPgw.va.gov (recommended) and SSL Certificate Cloud Enterprise Foundation Implementation Node 3: Database Server 12 32 GB C: 150 GB D: 200 GB E: 400 GB Network backup for database would be preferred. Must have SQL Server Standard software and license Node 4: Test Web Server and Test gateway 4 8 GB C: 150 GB D: 100 GB DNS: https://NTEEG-EPtest.va.gov (recommended) and SSL Certificate Node 5: Test Database Server 6 12 GB C: 150 GB D: 200 GB E: 400 GB The contractor will collaborate with NTEEG-EP, Boston Medical Center VISN 1, VHA s Healthcare Technology Management (HTM) Program Office point of contact, National Telestroke Program (NTSP) Informatic Subject Matter Expertise (SME) and Office of Information Technology (OIT) to deliver the web-based platform using VA Enterprise provided virtual server infrastructure. The contractor shall work with the program manager, NTEEG-EP data team on software implementation, integration, and sustainment of connectors to the sources identified in the scope of work below. All servers, accounts, databases, and storage resources shall meet OIT s baseline standards to ensure information security and resilience. Software and License Base Year-POP-12 Months on Contract Award Table 1: Base Year-POP-12 Months on Contract Award and Pricing Option Year 1-POP-12 Months on Renewal Option Year 2-POP-12 Months on Renewal Option Year 3-POP-12 Months on Renewal Option Year 4-POP-12 Months on Renewal NOTICE OF THE FEDERAL ACCESSIBILITY LAW AFFECTING ALL INFORMATION AND COMMUNICATION TECHNOLOGY (ICT) PROCUREMENTS� (SECTION 508) On January 18, 2017, the Architectural and Transportation Barriers Compliance Board (Access Board) revised and updated, in a single rulemaking, standards for electronic and information technology developed, procured, maintained, or used by Federal agencies covered by Section 508 of the Rehabilitation Act of 1973, as well as our guidelines for telecommunications equipment and customer premises equipment covered by Section 255 of the Communications Act of 1934. The revisions and updates to the Section 508-based standards and Section 255-based guidelines are intended to ensure that information and communication technology (ICT) covered by the respective statutes is accessible to and usable by individuals with disabilities. SECTION 508 INFORMATION AND COMMUNICATION TECHNOLOGY (ICT) STANDARDS The Section 508 standards established by the Access Board are incorporated into and made part of all VA orders, solicitations, and purchase orders developed to procure ICT. These standards are found in their entirety at: https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines. A printed copy of the standards will be supplied upon request. Federal agencies must comply with the updated Section 508 Standards beginning on January 18, 2018. The Final Rule as published in the Federal Register is available from the Access Board: https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule. The Contractor shall comply with 508 Chapter 2: Scoping Requirements for all electronic ICT and content delivered under this contract. Specifically, as appropriate for the technology and its functionality, the Contractor shall comply with the technical standards marked here: E205 Electronic Content (Accessibility Standard -WCAG 2.0 Level A and AA Guidelines) E204 Functional Performance Criteria E206 Hardware Requirements E207 Software Requirements E208 Support Documentation and Services Requirements COMPATIBILITY WITH ASSISTIVE TECHNOLOGY The standards do not require installing specific accessibility-related software or attaching an assistive technology device. Section 508 requires that ICT be compatible with such software and devices so that ICT can be accessible to and usable by individuals using assistive technology, including but not limited to screen readers, screen magnifiers, and speech recognition software. ACCEPTANCE AND ACCEPTANCE TESTING Deliverables resulting from this solicitation will be accepted based in part on the satisfaction of the Section 508 Chapter 2: Scoping Requirements standards identified above. The Government reserves the right to test for Section 508 Compliance before delivery. The Contractor shall be able to demonstrate Section 508 Compliance upon Deliverables resulting from this solicitation, which will be accepted based in part on the satisfaction of the Section 508 Chapter 2: Scoping Requirements standards identified above. The Government reserves the right to test for Section 508 Compliance before delivery. The Contractor shall be able to demonstrate Section 508 Compliance upon delivery. INFORMATION TECHNOLOGY USING ENERGY-EFFICIENT PRODUCTS The Contractor shall comply with Sections 524 and Sections 525 of the Energy Independence and Security Act of 2007; Section 104 of the Energy Policy Act of 2005; Executive Order 13834, Efficient Federal Operations , dated May 17, 2018; Executive Order 13221, Energy-Efficient Standby Power Devices, dated August 2, 2001; and the Federal Acquisition Regulation (FAR) to provide ENERGY STAR®, Federal Energy Management Program (FEMP) designated, low standby power, and Electronic Product Environmental Assessment Tool (EPEAT) registered products in providing information technology products and/or services. The Contractor shall ensure that information technology products are procured and/or services are performed with products that meet and/or exceed ENERGY STAR, FEMP designated, low standby power, and EPEAT guidelines. The Contractor shall provide/use products that earn the ENERGY STAR label and meet the ENERGY STAR specifications for energy efficiency. Specifically, the Contractor shall: Provide/use ENERGY STAR products, as specified at www.energystar.gov/products (contains complete product specifications and updated lists of qualifying products). Provide/use the purchasing specifications listed for FEMP designated products at https://www4.eere.energy.gov/femp/requirements/laws_and_requirements/energy_star_and_femp_designated_products_procurement_requirements . The Contractor shall use the low standby power products specified at http://energy.gov/eere/femp/low-standby-power-products. Provide/use EPEAT registered products as specified at www.epeat.net. At a minimum, the Contractor shall acquire EPEAT® Bronze registered products. EPEAT registered products are required to meet the technical specifications of ENERGY STAR, but are not automatically on the ENERGY STAR qualified product lists. The Contractor shall ensure that applicable products are on the EPEAT Registry and ENERGY STAR Qualified Product Lists. The Contractor shall use these products to the maximum extent possible without jeopardizing the intended end use or detracting from the overall quality delivered to the end user. The following is a list of information technology products for which ENERGY STAR, FEMP designated, low standby power, and EPEAT registered products are available: Computer Desktops, Laptops, Notebooks, Displays, Monitors, Integrated Desktop Computers, Workstation Desktops, Thin Clients, Disk Drives Imaging Equipment (Printers, Copiers, Multi-Function Devices, Scanners, Fax Machines, Digital Duplicators, Mailing Machines) Televisions, Multimedia Projectors This list is continually evolving and, as a result, is not all-inclusive. SYSTEM ACCEPTANCE (PRE-PRODUCTION) TESTING SHIPMENT OF HARDWARE OR EQUIPMENT Inspection: Destination Acceptance: Destination Free on Board (FOB): Destination Ship To and Mark For: Primary Alternate Name: Name: Address: Address: Voice: Voice: Email: Email: SPECIAL SHIPPING INSTRUCTIONS NATIONAL ACQUISITIONS GENERAL REQUIREMENTS VA TECHNICAL REFERENCE MODEL (if applicable) The Contractor shall support the VA enterprise management framework. In association with the framework, the Contractor shall comply with the OI&T Technical Reference Model (VA TRM). The VA TRM is one component within the overall Enterprise Architecture (EA) that establishes a common vocabulary and structure for describing the information technology used to develop, operate, and maintain enterprise applications. Moreover, the VA TRM, which includes the Standards Profile and Product List, serves as a technology roadmap and tool for supporting OI&T. Architecture & Engineering Services (AES) has overall responsibility for the VA TRM. SOCIAL SECURITY NUMBER (SSN) REDUCTION The Contractor's solution shall support the Social Security Number (SSN) Fraud Prevention Act (FPA) of 2017, which prohibits the inclusion of SSNs in any document sent by mail. The Contractor support shall also be performed in accordance with Section 240 of the Consolidated Appropriations Act (CAA) 2018, enacted March 23, 2018, which mandates VA to discontinue using SSNs to identify individuals in all VA information systems as the Primary Identifier. The Contractor shall ensure that any new IT solution discontinues the use of SSN as the Primary Identifier to replace the SSN with the Integrated Control Number (ICN) in all VA information systems for all individuals. The Contractor shall ensure that all Contractor-delivered applications and systems integrate with the VA Master Person Index (MPI) for identity traits, including using the ICN as the Primary Identifier. POSITION/TASK RISK DESIGNATION LEVEL(S) Position Sensitivity and Background Investigation Requirements by Service Task/Item Number Service Task/ Item Number Tier1 / Low Risk Tier 2 / Moderate Risk Tier 4 / High Risk 1.0 The Tasks identified above and the resulting Position Sensitivity and Background Investigation requirements identify, in effect, the Background Investigation requirements for Contractor individuals, based upon the tasks the particular Contractor individual will be working. The submitted Contractor Staff Roster must indicate the required Background Investigation Level for each Contractor individual based upon the tasks the Contractor individual will be working on, in accordance with their submitted proposal. Notes to the Contracting Officer SCHEDULE FOR DELIVERABLES POINTS OF CONTACT VA Program Manager: Name: Stacy Washington and Rpbert Fanning Address: Voice: Email: Stacy.Washington@va.gov / Robert.Fanning@va.gov Contracting Officer s Representative: Name: Thomas Hebert Address: Voice: Email: Thomas.Hebert@va.gov Contracting Officer: Name: Address: Voice: Email: Contract Specialist: Name: Address: Voice: Email: ADDITIONAL ITEMS SPECIAL INSTRUCTIONS/REMARKS Response Instructions: Offerors shall provide with its quote/proposal a letter from the OEM for any and all proposed products certifying that the Offeror or the Offeror s teaming partner if acquiring the product through a teaming partner, is authorized to sell and provide the proposed product(s) as of the date of the submission of the quote/proposal. The OEM letter shall be provided on the OEM s letterhead and signed by an authorized representative of the OEM. Additionally, the Offeror s quote/proposal shall explicitly self-certify that it will not provide Gray Market Goods and/or Counterfeit Electronic Parts and that it has the level of certification/specialization, as required by the OEM(s), to support authorized product sale and pricing for the products proposed. Failure to include the requisite OEM letter(s) and Offeror self-certification may render the Offeror s quote Unacceptable and, thus, ineligible for award. INFORMATION SECURITY CONSIDERATIONS: The Assessment and Authorization (A&A) requirements do not apply, and a Security Accreditation Package is not required All VA sensitive information shall be protected at all times in accordance with local security field office System Security Plans (SSP s) and Authority to Operate (ATO) s for all systems/LAN s accessed while performing the tasks detailed in this Product Description. A prohibition on unauthorized disclosure: Information made available to the Contractor or Subcontractor by VA for the performance or administration of this contract or information developed by the Contractor/Subcontractor in performance or administration of the contract shall be used only for those purposes and shall not be used in any other way without the prior written agreement of the VA. This clause expressly limits the Contractor/Subcontractor s rights to use data as described in Rights in Data General, FAR 52.227-14(d).(1). A requirement for data breach notification: Upon discovery of any known or suspected security/privacy incidents, or any unauthorized disclosure of sensitive information, including that contained in system(s) to which the Contractor/Subcontractor has access, the Contractor/Subcontractor shall immediately notify the COR and simultaneously, the designated ISO, and Privacy Officer for the contract. The term security incident means an event that has, or could have, resulted in unauthorized access to, loss or damage to VA assets, or sensitive information, or an action that breaches VA security procedures. See VA Handbook 6500.6, Appendix C, paragraph 6.a. A requirement to pay liquidated damages in the event of a data breach: In the event of a data breach or privacy incident involving SPI the contractor processes or maintains under this contract, the contractor shall be liable to VA for liquidated damages for a specified amount per affected individual to cover the cost of providing credit protection services to those individuals. However, it is the policy of VA to forgo collection of liquidated damages in the event the Contractor provides payment of actual damages in an amount determined to be adequate by the agency. Based on the determinations of the independent risk analysis, the Contractor shall be responsible for paying to VA liquidated damages in the amount of $37.50 per affected individual to cover the cost of providing credit protection services to affected individuals consisting of the following: Notification; One year of credit monitoring services consisting of automatic daily monitoring of at least 3 relevant credit bureau reports; Data breach analysis; Fraud resolution services, including writing dispute letters, initiating fraud alerts and credit freezes, to assist affected individuals to bring matters to resolution; One year of identity theft insurance with $20,000.00 coverage at $0 deductible; and Necessary legal expenses the subjects may incur to repair falsified or damaged credit records, histories, or financial affairs A requirement for annual security/privacy awareness training: Before being granted access to VA information or information systems, all Contractor employees and Subcontractor employees requiring such access shall complete on an annual basis either: (i) the VA security/privacy awareness training (contains VA security/privacy requirements) within 1 week of the initiation of the contract, or (ii) security awareness training provided or arranged by the contractor that conforms to VA s security/privacy requirements as delineated in the hard copy of the VA security awareness training provided to the Contractor. If the Contractor provides their own training that conforms to VA s requirements, they will provide the COR or CO, a yearly report (due annually on the date of the contract initiation) stating that all applicable employees involved in VA s contract have received their annual security/privacy training that meets VA s requirements and the total number of employees trained. See VA Handbook 6500.6, Appendix C, paragraph 9. A requirement to sign VA s Rules of Behavior: Before being granted access to VA information or information systems, all Contractor employees and Subcontractor employees requiring such access shall sign on annual basis an acknowledgement that they have read, understand, and agree to abide by VA s Contractor Rules of Behavior which is attached to this contract. See VA Handbook 6500.6, Appendix C, paragraph 9, and Appendix D. Note: If a medical device vendor anticipates that the services under the contract will be performed by 10 or more individuals, the Contractor Rules of Behavior may be signed by the vendor s designated representative. The contract must reflect by signing the Rules of Behavior on behalf of the vendor that the designated representative agrees to ensure that all such individuals review and understand the Contractor Rules of Behavior when accessing VA s information and information systems. ADDENDUM B VA INFORMATION AND INFORMATION SYSTEM SECURITY/PRIVACY LANGUAGE APPLICABLE PARAGRAPHS TAILORED FROM: THE VA INFORMATION AND INFORMATION SYSTEM SECURITY/PRIVACY LANGUAGE, VA HANDBOOK 6500.6, APPENDIX C, MARCH 12, 2010 GENERAL Contractors, contractor personnel, subcontractors, and subcontractor personnel shall be subject to the same federal laws, regulations, standards, VA directives, and handbooks regarding information and information system security as VA personnel. ACCESS TO VA INFORMATION AND VA INFORMATION SYSTEMS A Contractor/Subcontractor shall request logical (technical) or physical access to VA information and VA information systems for their employees, Subcontractors, and affiliates only to the extent necessary to perform the services specified in the contract, agreement, or task order. All Contractors, Subcontractors, and third-party servicers and associates working with VA information are subject to the same investigative requirements as those of VA appointees or employees who have access to the same types of information. The level and process of background security investigations for Contractors must be in accordance with VA Directive and Handbook 0710, Personnel Suitability and Security Program. The Office for Operations, Security, and Preparedness is responsible for these policies and procedures. Contract personnel who require access to national security programs must have a valid security clearance. National Industrial Security Program (NISP) was established by Executive Order 12829 to ensure that cleared U.S. defense industry contract personnel safeguard the classified information in their possession while performing work on contracts, programs, bids, or research and development efforts. The Department of Veterans Affairs does not have a Memorandum of Agreement with Defense Security Service (DSS). Verification of a Security Clearance must be processed through the Special Security Officer located in the Planning and National Security Service within the Office of Operations, Security, and Preparedness. Custom software development and outsourced operations must be located in the U.S. to the maximum extent practical. If such services are proposed to be performed abroad and are not disallowed by other VA policy or mandates (e.g. Business Associate Agreement, Section 3G), the Contractor/Subcontractor must state where all non-U.S. services are provided and detail a security plan, deemed to be acceptable by VA, specifically to address mitigation of the resulting problems of communication, control, data protection, and so forth. Location within the U.S. may be an evaluation factor. The Contractor or Subcontractor must notify the CO immediately when an employee working on a VA system or with access to VA information is reassigned or leaves the Contractor or Subcontractor s employ. The CO must also be notified immediately by the Contractor or Subcontractor prior to an unfriendly termination. VA INFORMATION CUSTODIAL LANGUAGE Information made available to the Contractor or Subcontractor by VA for the performance or administration of this contract or information developed by the Contractor/Subcontractor in performance or administration of the contract shall be used only for those purposes and shall not be used in any other way without the prior written agreement of VA. This clause expressly limits the Contractor/Subcontractor's rights to use data as described in Rights in Data - General, FAR 52.227-14(d) (1). VA information should not be co-mingled, if possible, with any other data on the Contractors/Subcontractor s information systems or media storage systems in order to ensure VA requirements related to data protection and media sanitization can be met. If co-mingling must be allowed to meet the requirements of the business need, the Contractor must ensure that VA information is returned to VA or destroyed in accordance with VA s sanitization requirements. VA reserves the right to conduct on site inspections of Contractor and Subcontractor IT resources to ensure data security controls, separation of data and job duties, and destruction/media sanitization procedures are in compliance with VA directive requirements. Prior to termination or completion of this contract, Contractor/Subcontractor must not destroy information received from VA, or gathered/created by the Contractor in the course of performing this contract without prior written approval by VA. Any data destruction done on behalf ofVA by a Contractor/Subcontractor must be done in accordance with National Archives and Records Administration (NARA) requirements as outlined in VA Directive 6300, Records and Information Management and its Handbook 6300.1 Records Management Procedures, applicable VA Records Control Schedules, and VA Handbook 6500.1, Electronic Media Sanitization. Self-certification by the Contractor that the data destruction requirements above have been met must be sent to the VA CO within 30 days of termination of the contract. The Contractor/Subcontractor must receive, gather, store, back up, maintain, use, disclose and dispose of VA information only in compliance with the terms of the contract and applicable Federal and VA information confidentiality and security laws, regulations and policies. If Federal or VA information confidentiality and security laws, regulations and policies become applicable to VA information or information systems after execution of the contract, or if NIST issues or updates applicable FIPS or Special Publications (SP) after execution of this contract, the parties agree to negotiate in good faith to implement the information confidentiality and security laws, regulations and policies in this contract. The Contractor/Subcontractor shall not make copies of VA information except as authorized and necessary to perform the terms of the agreement or to preserve electronic information stored on Contractor/Subcontractor electronic storage media for restoration in case any electronic equipment or data used by the Contractor/Subcontractor needs to be restored to an operating state. If copies are made for restoration purposes, after the restoration is complete, the copies must be appropriately destroyed. If VA determines that the Contractor has violated any of the information confidentiality, privacy, and security provisions of the contract, it shall be sufficient grounds for VA to withhold payment to the Contractor or third party or terminate the contract for default or termi...
 

Web Link

SAM.gov Permalink
(https://sam.gov/workspace/contract/opp/6020962a4bd24a4690862291354548ef/view)
 

Record

SN07689359-F 20260118/260116230039 (samdaily.us)
 

Source

SAM.gov Link to This Notice
(may not be valid after Archive Date)

---

| FSG Index  |  This Issue's Index  |  Today's SAM Daily Index Page |