6640--New Blanket Purchase Agreement for Molecular Testing- Strep ID, Respiratory Panel, and Blood Culture ID.

Form / Attachment / Pricing Sheet

This document is an Excel spreadsheet containing the Manufacturer Disclosure Statement for Medical Device Security (MDS2) form. It is designed to collect detailed information from manufacturers regarding the cybersecurity posture and data handling capabilities of medical devices. Bidders are expected to complete this form to disclose specific security features and configurations of the devices they propose.

The form is structured into several sections, each addressing a critical aspect of medical device security:

• Manufacturer Disclosure Statement (MDS2): Basic manufacturer and device identification, intended use, and vulnerability disclosure program details.
• Management of Personally Identifiable Information (PII): Questions regarding the device's ability to display, transmit, store, or modify PII/ePHI, and how it is managed.
• Automatic Logoff (ALOF): Device capabilities for session timeouts and user reauthorization.
• Audit Controls (AUDT): Mechanisms for logging and auditing device activities.
• Authorization (AUTH): User authentication and privilege management.
• Cyber Security Product Upgrades (CSUP): Processes for installing security patches and updates.
• Health Data De-Identification (DIDT): Capabilities for removing identifying information from health data.
• Data Backup and Disaster Recovery (DTBK): Procedures for data backup and system restoration.
• Emergency Access (EMRG): Features for accessing data in emergency situations.
• Health Data Integrity and Authenticity (IGAU): Mechanisms to ensure data integrity and authenticity.
• Malware Detection/Protection (MLDP): Capabilities for preventing, detecting, and removing malware.
• Node Authentication (NAUT): Device authentication for communication partners.
• Connectivity Capabilities (CONN): Information on hardware and network connections.
• Person Authentication (PAUT): User authentication methods.
• Physical Locks (PLOK): Physical security measures.
• Roadmap for Third Party Components (RDMP): Manufacturer's plans for managing third-party software.
• Software Bill of Materials (SBoM): Listing of software components.
• System and Application Hardening (SAHD): Device resistance to cyber attacks.
• Security Guidance (SGUD): Availability of security documentation.
• Health Data Storage Confidentiality (STCF): Encryption and protection of data at rest.
• Transmission Confidentiality (TXCF): Confidentiality of transmitted data.
• Transmission Integrity (TXIG): Integrity of transmitted data.
• Remote Service (RMOT): Capabilities and security of remote maintenance.

Bidders must carefully review and complete all relevant sections of this MDS2 form for each proposed medical device. The responses provided will be a critical factor in assessing the cybersecurity compliance and suitability of the proposed solutions. Failure to adequately complete this form may impact the evaluation of proposals.

Solicitation / RFP / RFQ

This solicitation is for Molecular Diagnostic Testing Services for the Department of Veterans Affairs, specifically for the VA Montana Healthcare system at Fort Harrison, MT, and the Benjamin Steele VA Clinic in Billings, MT. The contract aims to provide comprehensive molecular diagnostic testing, including Respiratory Pathogen Panel, Blood Culture Identification panel, and Streptococcus panel, on a cost-per-test basis. This includes providing all necessary equipment, reagents, supplies, maintenance, and technical support.

• Provision of a molecular diagnostic testing system (contractor-owned analyzer and peripherals).

• Cost-per-test (CPT) pricing structure covering equipment use, reagents, supplies, maintenance, and technical support.

• Specific test panels required: Respiratory Pathogen Panel, Blood Culture Identification panel (Gram positive, Gram negative, Fungus), and Streptococcus panel (Strep group C/G, Strep group A).

• Equipment must be FDA-approved, CLIA waived, moderately complex, fully-integrated, random access, and automated.

• Scheduled and unscheduled maintenance, technical support, and preventive maintenance inspections.

• New, state-of-the-art equipment; remanufactured or discontinued models are not acceptable.

• FDA-approved instruments and testing methods.

• On-site service within 24 hours for emergency repairs.

• 95% uptime guarantee for equipment.

• Training for Government personnel.

• Bi-directional interface for LIS connectivity.

• Contract Period of Performance: June 30, 2026, through June 29, 2031.

• Estimated Ceiling Limit: $2,400,000.00 over the period of performance.

• Estimated individual order limit: $400,000.00.

• Offers are due by June 19, 2026, 10:00 AM MDT.

• Proposals will be evaluated based on four factors: Technical Capability, BioMed Forms, Past Performance, and Price. Technical capability and past performance combined are more important than price.

• Clarification questions are due by May 26, 2026.

• Site visits are not allowed; floor plans are provided.

• Proposals must include a signed SF1449, acknowledgment of amendments, completed contract administration details, UEI, EIN, and pricing schedule.

• This acquisition is unrestricted.

• The solicitation references several attachments including VA Directives, MDS2 Worksheets, Past Performance Questionnaires, and Floor Plans.

Form / Attachment / Pricing Sheet

This document provides a floor plan for the Molecular Room at the Benjamin Charles Steele VA Clinic, specifically detailing spatial constraints for vendor instrumentation.

• Vendor instrumentation must fit within the blue box: Dimensions are 38" X 19" (Molecular dept).
• Pillars: These are fixed and cannot be moved.
• Power Source: All outlets are marked on the plan.
• Restrictions: Moving benchtops and tables outside designated areas is not permitted. No alterations of the space are allowed.

This floor plan is critical for bidders to understand the physical limitations of the space where any proposed instrumentation or equipment must be installed. It directly impacts the feasibility and design of solutions that can be accommodated within the specified dimensions and without altering the existing structure.

Form / Attachment / Pricing Sheet

This document is a floor plan for the second floor of a facility, likely related to a construction or renovation project. It provides detailed layout information for various spaces, including laboratories, offices, corridors, and utility chases.

• Architectural layout of rooms and spaces
• Dimensions and measurements for walls, doors, and columns
• Locations of mechanical, electrical, and plumbing elements (indicated by symbols)
• Labels for specific areas such as "LEAD TECH OFFICE," "WALK-IN COOLER," "ANATOMIC PATHOLOGY," and "MICROBIOLOGY LAB."
• References to other construction documents (e.g., structural, mechanical, electrical plans) and specific details like ""K" BRACE" and "GUARD RAIL."
• General notes providing construction guidelines and requirements.

This floor plan is crucial for bidders to understand the physical scope and layout of the work. It informs decisions regarding material quantities, labor requirements, site access, and potential construction challenges. Bidders must use this plan to accurately estimate costs and develop a feasible construction approach for any opportunity involving this facility's second floor.

Form / Attachment / Pricing Sheet

This document is a Past Performance Questionnaire intended to gather feedback on a contractor's performance for a specific contract. Bidders are instructed to complete all sections accurately and submit the signed questionnaire to the contracting officer or designated point of contact by the quote deadline.

• Contractor Identification: Name of the contractor being reviewed.
• Services Performed: Detailed description of services, objectives, scope, achievements, and challenges. Includes prime contractor status and complexity rating (High, Medium, Low).
• Performance Dates: Start and end dates of the contract.
• Total Contract Value: The total value of the contract in USD.
• Addresses: Organization's physical address.
• Contract Numbers: Prime contract number and task order number (if applicable).
• Point of Contact Information: Contact details for the contractor's representative.
• Performance Rating: An overall rating of the contractor's performance (Outstanding, Satisfactory, Unsatisfactory) with space for comments and justification if the rating is other than satisfactory.
• Verification: Signature, printed name, title, and date to confirm the accuracy of the provided information.

This questionnaire is crucial for the government to assess the past performance of potential offerors. Bidders should ensure that their submitted questionnaires are complete and accurate, as the ratings and comments provided will directly influence the evaluation of their proposal. The information requested will help the government understand the scope, value, and success of previous contracts performed by the contractor.

Form / Attachment / Pricing Sheet

This document, VA Directive 6550 Appendix A, is a fillable form to be completed for all procurements of network-connected medical devices and non-network-connected medical devices that store sensitive information. It serves as a supplement to the main directive, gathering specific technical and security details about the device.

• Device Identification: Manufacturer, model, NSI number, application name and version, operating system, and network information (VLAN, IP addresses).
• Security Features: Details on patching capabilities, OS lifecycle, wireless network compliance (FIPS 140-2/140-3), encryption methods, logging, antivirus support, two-factor authentication, and digital signature compliance.
• Connectivity & Integration: Information on external connectivity requirements, HL7 interface usage, and integration with VA systems like EHRM and Cerner.
• Risk Assessment: Fields to indicate if an Enterprise Risk Analysis (ERA) or MedMod ERA exists.
• Cloud & Server Details: Information on cloud platform approval, server specifications if applicable, and use of Java or machine learning.

Bidders must understand that completing this form accurately is crucial for the procurement process. It directly addresses security, interoperability, and compliance requirements mandated by the VA. The information provided will be used to assess the device's suitability and risk profile within the VA network. Failure to provide accurate or complete information, or procuring devices with unsupported features (e.g., unsupported OS, non-FIPS compliant wireless), is prohibited and imposes a significantly higher risk to the VA network.

Solicitation / RFP / RFQ

This is a pre-solicitation notice for a Request for Quote (RFQ) regarding a new Blanket Purchase Agreement (BPA) for Molecular Testing services. The contractor will be responsible for providing molecular diagnostic testing systems, including Strep ID, Respiratory Panel, and Blood Culture ID.

• Provide all equipment, reagents, standards, supplies, consumable/disposable items, parts, and accessories.

• Furnish all labor, parts, supplies, and equipment necessary for scheduled and unscheduled maintenance, technical support, and periodic preventative maintenance inspections for contractor-owned analyzers and peripherals.

• Services will be provided on a cost-per-test pricing structure.

• The system must support the generation of molecular diagnostic testing results.

• This procurement is UNRESTRICTED.

• Place of Performance: Department of Veterans Affairs, Fort Harrison VA Medical Center, with multiple locations as per the Statement of Work (SOW).

• Response Date/Time/Zone: 06-08-2026 10:00 MOUNTAIN TIME, DENVER, USA.

• This procurement is UNRESTRICTED.

• Product Service Code: 6640

• NAICS Code: 532490

• Contracting Office Address: Department of Veterans Affairs, Network Contracting Office 19, 6162 South Willow Drive, Suite 300, Greenwood Village CO 80111.

• Point of Contact: Ernest Appiah, Contract Specialist (Ernest.Appiah@va.gov).

• Agency Contact Email: NCO19Lab@va.gov