This document is an amendment to Solicitation 36C10B26Q0064, issued by the Department of Veterans Affairs, Technology Acquisition Center, for the Durham VAMC Radiation Oncology Information Systems. The amendment, number 0001, extends the response due date to December 16, 2025, at 11:00 AM Eastern Time. It also updates the narrative for CLIN 0009, removes Addendum B6-B-9, and attaches "Attachment 001 - VA Critical Security Controls FAQ." All other terms and conditions of the original solicitation remain unchanged. The solicitation is set aside for Service-Disabled Veteran-Owned Small Business Concerns (SDVOSBC) and has a NAICS code of 541519.
Amendment 0001 to Solicitation 36C10B26Q0064 for the Radiation Oncology Information Management System Virtual Infrastructure Environment (ROISVIE) extends the offer receipt deadline to December 16, 2025, at 11:00 AM EST. The amendment also updates the narrative of CLIN 0009, removes Addendum B6-B-9, and attaches "Attachment 001 - VA Critical Security Controls FAQ - 36C10B26Q0064." All other terms and conditions of the solicitation remain unchanged. This amendment is issued by the Department of Veterans Affairs, Technology Acquisition Center.
This document is a Request for Proposal (RFP) from the Department of Veterans Affairs (VA) for Radiation Oncology Information System Virtual Infrastructure Environment (ROISVIE) software services. The VA Durham Healthcare System requires a contractor to provide hardware, software, and services for their ROISVIE therapy solution, which includes supporting Varian linear accelerators and associated applications like Eclipse and Aria. The contract has a base period from January 1, 2026, to December 31, 2026, with four subsequent 12-month option periods. Key requirements include proprietary hardware infrastructure support, software licenses, cybersecurity maintenance, strict access control, FIPS implementation, hosting of treatment planning platforms, backup management, antivirus software, and remote system monitoring. The contractor must deliver various plans, including project management, testing, implementation, configuration, and deployment, and provide quarterly status and monitoring reports. All services and products must comply with federal accessibility laws (Section 508) and sustainable product guidelines.
The Department of Veterans Affairs (VA) is issuing Solicitation 36C10B26Q0064, a Request for Quotation (RFQ) for a Radiation Oncology Information System Virtual Infrastructure Environment (ROISVIE) therapy solution for the Durham VAMC. This acquisition is a total Service Disabled Veteran Owned Business Set-Aside under the Veterans First Contracting Program. The solicitation, identified by Product Service Code DH10 and NAICS Code 541519, requests offers for commercial products or services. Responses are due by December 15, 2025, at 3:00 PM EST. The point of contact is david.gabrysiak@va.gov. The place of performance is Durham VAMC, Durham, NC, with a delivery date of January 1, 2026. This combined synopsis/solicitation incorporates provisions and clauses by reference, accessible at www.acquisition.gov. Additional information, including line items and requirements, is provided in the attached RFQ and Justification documents.
The Department of Veterans Affairs (VA) has issued a memorandum establishing mandatory Critical Security Controls for all new and existing VA information systems and applications. These controls, effective July 1, 2025, are designed to enhance the VA's cybersecurity posture, mitigate evolving cyber risks, and support the Zero Trust First Cyber Security Strategy. The requirements apply to all VA branches, including VHA, VBA, and NCA, and all system categorization levels. New systems must implement these controls before authorization, with no Plan of Action & Milestones (POA&M) accepted for non-compliance. Existing systems must also implement the controls, or create a POA&M by July 1, 2025. These controls cover multi-factor authentication, access management, asset inventory, continuous monitoring, vulnerability management, data encryption, contingency planning, and privacy risk assessments. Compliance will be assessed during the Authorization to Operate (ATO) process and continuous monitoring. Future VA contracts and acquisitions will also mandate these security controls.
The document justifies a sole-source award to VFI, a certified SDVOSB, for the maintenance and support of the Radiation Oncology Information Management System Virtual Infrastructure Environment (ROISVIE) for Veterans Affairs (VA). The current prime vendor, Varian, is discontinuing support by December 31, 2025. VFI, the existing subcontractor, has extensive experience with the legacy system, VA cybersecurity, and medical device requirements, ensuring a smooth transition and continued essential services. Market research confirmed no other system is compatible without significant cost and time delays. This acquisition, below $5 million, is deemed in the government's best interest to prevent loss of critical patient data and ensure continued life-saving cancer treatments for Veterans.