J065--Omnicell Secure Storage Systems and Associated Equipment Support Services PoP: 05/01/2026 - 04/30/2027

The contract awards OEM-authorized maintenance and support services for Omnicell Secure Storage Systems and associated equipment across multiple Veterans Health Administration facilities in the Ozarks region, including Fayetteville, AR; Springfield, MO; Branson, MO; Fort Smith, AR; and Joplin, MO. The base period of performance runs from May 1, 2026, to April 30, 2027, with four optional one-year extensions available, though pricing for option years is not specified. The award value for the base period is $128,632, awarded under solicitation 36C25626Q0478, with the Department of Veterans Affairs Network Contracting Office 16 in Ridgeland, MS, as the contracting activity. Services encompass telephone and remote support during standard business hours, emergency on-site repairs within one business day, full coverage of parts, labor, and travel with priority overnight delivery, software and operating system updates, database management, interface support, and annual compliance assessments. All work must adhere to strict federal and VA-specific security standards, including HIPAA, FISMA, NIST SP 800-37 and 800-53, FDCC, and VA Handbook 6500, with mandatory annual Contractor Security Control Assessments. Personnel must complete VA cybersecurity awareness, privacy training, and Rules of Behavior prior to access and renew annually. The contractor is prohibited from removing equipment from VA facilities without Biomed authorization and must comply with strict data handling, encryption, and destruction protocols per VA Directive 6300 and Handbook 6500.1, ensuring all VA information and deliverables remain the exclusive property of the U.S. Government. Subcontractors require prior approval, and all security and privacy clauses must be flowed down. Access to VA systems and data requires background investigations under VA Directive 0710, valid access badges, and use of VA-approved tools only. Invoicing is to be submitted monthly via Tungsten Network, and service reports must be filed within five business days after each visit. All electronic media used for VA data must be sanitized or retained in VA custody, and unauthorized disclosure of protected health information requires immediate notification.