7J20--C-CURE 9000 Series PIV Entry Point Licenses Software and Install

Solicitation / RFP / RFQ

This is a combined synopsis/solicitation (RFQ #: 36C25926Q0545) for commercial items, specifically the C-CURE 9000 Series S PACS EntryPoint Identity and Access Management Base License, including software and installation support. The government anticipates awarding a firm-fixed-price contract.

• Procurement of 3 C-CURE S PACS EntryPoint Identity and Access Management Base Licenses.

• Each license includes: (1) Client Workstation Connection, (1) PACS Service Connection, and (1) USB Card Reader.

• The base license must include 1 year of service.

• Contractor shall provide assistance with installation questions and support.

• This is a brand-name requirement.

• No remanufactured or gray market items will be accepted; only new OEM supplies, software, and licenses.

• Offeror must be an OEM, authorized dealer, distributor, or reseller, verified by an OEM authorization letter.

• Contract type: Firm-fixed-price.

• Delivery: F.O.B Destination to VA Salt Lake City Healthcare System, George E. Wahlen Medical Center.

• Option to Increase Quantity (FAR 52.217-6) may be exercised.

• Questions Deadline: 9:00 am MT, June 25, 2026 (submit in writing).

• Quote Submission Deadline: 12:00 pm MT, July 6, 2026.

• Submission Method: Email only to jacqueline.obryan@va.gov (4MB email limit). Faxed or hand-carried quotes will not be accepted.

• Evaluation Factors:

  1. Technical capability or quality.
  2. Delivery Lead Time.
  3. Price.
  4. Completion of Provision 52.225-2.
  5. Letter of Authorized Distributor.

• Award will be made on an All or Nothing Basis.

• The government may award based solely on initial quotes received.

• NAICS Code: 513210 (Small business size standard: $47.0M).

• This solicitation is a 100% set-aside for small businesses.

• Offerors must complete and submit specific volumes: Technical capability, Delivery Lead Time, Price, Provision 52.225-2, and Letter of Authorized Distributor (if not OEM).

• Clearly state on the quote if items are available through existing Government-wide Acquisition Contracts (GWAC), GSA MAS, or VA-wide Acquisition Contracts.

• Contact Jacqueline O’Bryan (Jacqueline.Obryan@va.gov) for solicitation information.

Form / Attachment / Pricing Sheet

This document is the "Buy American Certificate" provision (FAR 52.225-2), which must be completed by offerors as part of their proposal submission. It is used to certify compliance with the Buy American Act.

• Domestic vs. Foreign End Products: Offerors must certify that each end product is a domestic end product, unless listed otherwise.
• Critical Components: Offerors must identify domestic end products that contain a critical component.
• Foreign End Product Details: For foreign end products not made of iron or steel, offerors must indicate if they exceed 55% domestic content (yes/no).
• COTS Items: Commercially Available Off-the-Shelf (COTS) items are exempt from certain requirements.
• Definitions: Key terms such as "domestic end product," "foreign end product," and "critical component" are defined within the solicitation's "Buy American-Supplies" clause.

Bidders must carefully review this provision and complete the required certifications accurately. Failure to properly complete this certificate may impact the evaluation of offers. The government will evaluate offers based on the policies and procedures in FAR Part 25.

Other / Unclassified

This document is a Brand Name Justification and Approval (IAW RFO 12.102(a)) for a procurement over the micro-purchase threshold but not exceeding the simplified acquisition threshold. It details the need for 3 USB Card readers and associated licenses for C-CURE 9000 software, along with client workstation and PACS service connections. This equipment is required by the Salt Lake City (SLC) Veterans Affairs Medical Center (VAMC) to control entry and access to three VA locations.

This justification explains the rationale for a sole-source procurement, highlighting the unique characteristics of the existing C-CURE 9000 system. It states that no alternative software can interface with the current system to allow PIV badge reader access. The document emphasizes that utilizing a single, approved source ensures consistency, security, and operational efficiency, minimizing risks and costs associated with multiple systems. It also details market research conducted, including searches for SDVOSB and VOSB vendors, and concludes that while multiple small businesses could fulfill the requirement, the Contracting Officer recommends soliciting this requirement as a small business set-aside.

• Procurement Item: 3 USB Card readers and 3 licenses of C-CURE 9000 software, plus connections.
• Purpose: To allow three new VA-owned laptops to gain access to the existing C-CURE 9000 physical security system.
• Justification for Sole Source: Inability of alternative software to interface with the current system; risks and costs associated with switching systems.
• Market Research: Searches conducted on SBA VetCert, ADDS Up, Contract Opportunities, and GSA.
• Recommendation: Solicit as a small business set-aside.

Form / Attachment / Pricing Sheet

This document, VA Handbook 6500.6 Appendix C, provides mandatory information and information system security/privacy language for inclusion into contracts with the Department of Veterans Affairs (VA).

• General Security Requirements: Contractors and personnel must adhere to VA security regulations and directives.
• Access to VA Systems: Details requirements for accessing VA information and systems, including background investigations, security clearances, and location of services.
• Information Custodial Language: Outlines responsibilities for handling VA information, including data use limitations, co-mingling restrictions, data destruction procedures, and compliance with federal/VA laws.
• Information System Design and Development: Specifies requirements for designing, developing, and operating VA information systems, including compliance with FISMA, HIPAA, NIST, and the Privacy Act.
• Security Controls Compliance Testing: Reserves VA's right to evaluate contractor security controls and privacy practices.
• Training Requirements: Mandates specific training for contractor employees and subcontractors requiring access to VA information and systems.
• Security Incident Investigation & Data Breach: Defines procedures for reporting security incidents and outlines contractor liability for liquidated damages in the event of a data breach.

This appendix is crucial for any bidder proposing to work with the VA, especially on contracts involving information systems, data handling, or access to sensitive information. It details the security, privacy, and training obligations that will be incorporated into the contract, impacting operational procedures, compliance efforts, and potential liabilities. Bidders must understand these requirements to accurately assess their ability to meet them and to factor associated costs into their proposals.

Form / Attachment / Pricing Sheet

This document, Appendix B of VA Handbook 6500.6, provides a solicitation provision and contract clause related to Information and Information Technology Security Requirements. It outlines the VA's approach to protecting sensitive information and IT resources.

• Subpart 839.2: Details the Information and Information Technology Security Requirements.
• Clause 839.201: Specifies that the VA has developed a security clause for use when VA sensitive information is accessed, used, stored, generated, transmitted, or exchanged.
• Clause 852.273-75: This clause, "Security Requirements for Unclassified Information Technology Resources (Interim- October 2008)," is to be inserted in solicitations and contracts where VA Sensitive Information or IT will be accessed or utilized. It mandates that contractors, their personnel, and subcontractors must adhere to Federal laws, regulations, standards, and VA Directives and Handbooks regarding information and information system security.

Bidders should note that this clause will be a part of any resulting contract. It signifies a strict requirement for compliance with information security protocols, including those mandated by Federal law and VA-specific directives. Understanding and adhering to these security requirements will be critical for contract performance.

Statement of Work (SOW) / Performance Work Statement (PWS)

To procure and install 3 Entry Point Identity and Access Management software and devices for PIV badging into the C-Cures S PACS system.

• Furnish all necessary services, equipment, labor, materials, supervision, and tools for the purchase and installation of 3 Entry Point Identity and Access Management software and devices.

• The contractor shall include a base license for 1 year for each system.

• The contractor shall provide assistance with installation questions and support.

• Items to be included in the bid:

  • 3 Base year licenses
  • 3 client workstation connections
  • 3 PACS service connections
  • 3 USB Card readers

• Period of Performance (POP): 30 days from Notice to Proceed (NTP).

• Locations: Elko CBOC, Saint George CBOC, and Idaho Falls CBOC for the Salt Lake City, UT, George E. Wahlen, Department of Veteran Affairs Medical Center.

Solicitation / RFP / RFQ

This solicitation is for the "C-CURE 9000 Series PIV Entry Point Licenses Software and Install Support" for the Department of Veterans Affairs, George E. Wahlen Medical Center, VA Salt Lake City Healthcare System. The procurement is for brand name "C-Cure 9000 Series S PACS system PIV Entry Point Licenses Software and Install Support."

• Procurement of C-CURE 9000 Series PIV Entry Point Licenses Software.

• Installation support for the software.

• Brand Name Justification and Approval is attached.

• The contracting office is Network Contracting Office NCO 19, located in Greenwood Village, CO.

• The Place of Performance is Department of Veterans Affairs, George E. Wahlen Medical Center, VA Salt Lake City Healthcare System, Salt Lake City, UT 84148-0001, USA.

• Response Date/Time/Zone: 07-06-2026 12 PM Mountain Time, Denver, USA.

• The solicitation number is 36C25926Q0545.

• This opportunity is set aside for SBA (Small Business Administration).

• The following documents are attached and referenced: Solicitation 36C25926Q0545, Statement of Work, APPENDIX B VA HANDBOOK 6500.6, APPENDIX C VA HANDBOOK 6500.6, Brand Name Justification and Approval Redacted, and 52.225-2 Buy American Certificate.