This government file outlines a solicitation and contract order for commercial products and services, specifically a MedBridge subscription for the Department of Veterans Affairs. It details administrative information, including contact details for the Contracting Officer Rachelle J. Hamer, payment procedures emphasizing electronic submission of invoices, and delivery schedules for the Louis Stokes Cleveland VAMC. The document incorporates various Federal Acquisition Regulation (FAR) and VA Acquisition Regulation (VAAR) clauses covering contract terms, conditions, and legal requirements. Key clauses address inspection, payment, disputes, termination, and compliance with federal statutes and executive orders related to business ethics, supply chain security, labor standards, and environmental protection. It also specifies instructions for offerors, including submission requirements and evaluation factors. The NAICS code for this acquisition is 513210 (Software Publishers) with a size standard of $47 million, indicating it is an unrestricted acquisition.
The Department of Veterans Affairs Cleveland Veterans Affairs Medical Center (CLE VAMC) intends to issue a sole source procurement to Medbridge, Inc. for a Medbridge Subscription. This action is justified under FAR 13.106(b)(1)(i) because the required license and software updates are proprietary to Medbridge, Inc., necessitating the use of Original Equipment Manufacturer (OEM) software for full functionality. Other interested parties capable of fulfilling this requirement must submit their capabilities by October 17, 2025, at 5 PM EST, to Rachelle Hamer at rachelle.hamer@va.gov, including "RFQ 36C25026Q0039| Medbridge Subscription" in the subject line. This notice is for informational purposes only, and a solicitation is not currently available.
The document outlines stringent information and IT security requirements for contractors and subcontractors working with the Department of Veterans Affairs (VA). They must comply with federal laws, VA directives, and handbooks concerning information and system security and privacy. Key requirements include strict access controls, background security investigations, and security clearances for national security programs. All custom software development and outsourced operations must primarily be in the U.S. Contractors must immediately report employee reassignments or terminations. VA information must be used solely for contract purposes, kept separate from other data, and destroyed according to NARA and VA directives upon contract termination. All sensitive VA information must be encrypted using FIPS 140-2 validated tools, and firewalls must meet VA standards. Contractors must complete annual security control assessments. Information systems designed or operated for VA at non-VA facilities must adhere to FISMA, HIPAA, NIST, and VA security and privacy controls, including Privacy Impact Assessments. Contractors are responsible for annual FISMA security control assessments, vulnerability scanning, and contingency plans. Personally-owned equipment on VA networks is prohibited. Security incidents, including data breaches, must be reported immediately, and contractors are liable for liquidated damages for breaches involving sensitive personal information. All contractor personnel must complete VA cybersecurity and privacy training and sign the Contractor Rules of Behavior, which emphasize no expectation of privacy on VA systems and strict adherence to security protocols.
The Department of Veterans Affairs, Network Contracting Office (NCO) 10, intends to award a single-source, firm-fixed-price purchase order for Medbridge Subscriptions for the Cleveland Veterans Affairs Medical Center (CLE VAMC). This justification, under FAR 13.106-1, is for an acquisition above the micro-purchase threshold but not exceeding the Simplified Acquisition Threshold ($250K). Medbridge is deemed the only source because its proprietary platform offers over 1,000 accredited continuing education courses tailored for clinical disciplines, with centralized tracking, certification management, and integration with professional licensing requirements. No other vendor provides the required breadth of accredited content, specialty-specific modules, and user management features. Market research, including GSA eLibrary, SAM.gov, and DSBS searches, found no other vendors or products meeting these specific needs. The VA and SBA Rule of Two cannot be met, and there are no distributors, necessitating a sole source award to Medbridge, Inc., a small business. The Contracting Officer certified the justification, with price reasonableness based on comparisons with previous purchases.