Cybersecurity Patching and Software Updates for Medical Devices

The contract requires the implementation of manufacturer-issued cybersecurity patches and software updates on BD Alaris infusion systems to meet federal healthcare cybersecurity standards and Department of Veterans Affairs policies. The work is focused on maintaining the integrity and security of medical devices used in VA healthcare environments, ensuring they remain protected against emerging threats and compliant with regulatory requirements. This involves coordinating closely with the manufacturer to identify, test, and reliably deploy updates in a manner that does not disrupt clinical operations or compromise patient safety. The opportunity is issued as a subcontract under the 250-NETWORK Contract Office 10 (36C250) and is managed by the Department of Veterans Affairs. The solicitation was posted on May 11, 2026, with a response deadline of May 14, 2026, at 5:00 PM. While no specific set-aside status is designated, the North American Industry Classification System code 541512 indicates the work falls under computer systems design and related services. Performance is expected to support VA facilities nationwide, though no specific location is listed, and the nature of the work implies a nationwide or multi-site deployment effort.