Q702--Cheshire County- Keene and Brattleboro Outpatient Clinic & Burlington, VT Outpatient Clinic IOT&A

1 | P a g e PWS Version November 2025 PERFORMANCE WORK STATEMENT “Attachment A” DEPARTMENT OF VETERANS AFFAIRS Veteran’s Health Administration White River Junction VA Healthcare System Cheshire County- Keene and Brattleboro Outpatient Clinic Burlington, VT Outpatient Clinic Initial Outfitting, Transition, and Activation Services (IOTA) Contract Date: 5/7/2026 -- 1 of 57 -- 2 | P a g e PWS Version November 2025 1.0 Objective The purpose of this acquisition is to provide the Department of Veterans Affairs, Veterans Health Administration (VHA) with Initial Outfitting, Transition, and Activation (IOT&A) services for the Cheshire County- Keene and Brattleboro OPC and Burlington, VT OPC. The objective is to have the IOT&A projects completed by the first day of clinical services. The projected first day of clinical services for the Burlington OPC is May 2029. The projected first day of clinical services for the Cheshire OPC is May 2029. North American Industry Classification System (NAICS) code for these services is 541614, Process, Physical Distribution, and Logistics Consulting Services. 2.0 Introduction Activation is defined as the process of identifying, planning, managing, and executing the logistical and operational requirements to bring a new medical center into full planned operations. The medical center assigns VHA staff to an Activation Team which is responsible for managing the Activation Project and ensuring the Cheshire County- Keene and Brattleboro OPC and Burlington, VT OPC mid-level leases are in full planned operations on ‘Day One’ (the first day clinical services are scheduled to be available to Veterans). IOTA Contractor services are often required to support the medical center's Activation Team. 3.0 Background In fiscal year 2023, White River Junction VA Medical Center was approved for mid-level leases that would expand our outpatient services for Veteran Healthcare. These new sites will replace our current Brattleboro, VT and Keene, NH Outpatient Clinics with a new facility that will expand access for Primary Care and Mental Health services, as well as replace our Burlington Vermont outpatient clinic with a new facility. The new Cheshire OPC will encompass approximately 17,735 net usable square feet and 250 parking places. Burlington OPC will encompass approximately 24,435 net usable square feet (NUSF) and 250 parking spaces. 4.0 Scope Conduct all necessary Planning, and IOTA activities, in accordance with the PWS, in support of the project(s) identified in paragraph 3.0 above. The IOTA contractor shall provide professional services to include all labor, materials, transportation, and equipment to conduct and provide IOTA support services to accomplish the PWS tasks. The scope includes project support for planning, activating, outfitting, and transitioning the staff and Veterans/patients associated with the project. The scope of services includes Comprehensive Project Management, Comprehensive Interior Design, FF&E, and Space Planning Support; CONOPS and Transitioning Planning; Acquisition Support Services to include package development, Activation, Delivery, Relocation and Installation, Training, and Turnover and Post Occupancy Support for the identified project. 5.0 Applicable Documents Applicable documents are listed below. IOTA contractor shall use the most current versions of all applicable documents listed below. A. Entire Lease/Construction contract to include the L100 from the Lease, Lease Design Narrative Appendix A-F B. Federal Information Processing Standards (FIPS) Publication 140-2, “Security Requirements for Cryptographic Modules” C. FIPS Pub 201-3, “Personal Identity Verification of Federal Employees and contractors,” January 2022 D. 5 U.S.C. § 552a, as amended, “The Privacy Act of 1974” E. Public Law 109-461, Veterans Benefits, Health Care, and Information Technology Act of 2006, title IX Information Security Matters F. 42 U.S.C. § 2000d “Title VI of the Civil Rights Act of 1964” G. Department of Veterans Affairs (VA) Directive 0710 Personnel Security and Suitability Program dated May 2, 2016 H. Department of Veterans Affairs (VA) Directive 6102 (Internet/Intranet Services) I. Health Insurance Portability and Accountability Act (HIPAA); 45 CFR Part 160, 162, and 164; Health Insurance Reform: Security Standards; Final Rule dated February 20, 2003 -- 2 of 57 -- 3 | P a g e PWS Version November 2025 J. VHA Security Handbook 1600.01, Business Associate Agreements K. 36 C.F.R. Part 1194 “Electronic and Information Technology Accessibility Standards,” July 1, 2024 L. Office of Management and Budget Circular A-130, “Management of Federal Information Resources’, November 28, 2000 M. U.S.C. Section 552a, as amended N. Title 32 CFR 199, “Civilian Health and Medical Program of the Uniformed Services (CHAMPUS)” O. An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule, February 2024 P. Sections 504 and 508 of the Rehabilitation Act (29 U.S.C. Section § 794d), as amended by the Workforce Investment Act of 1998 (P.L. 105-220), August 7, 1998 Q. Homeland Security Presidential Directive (12) (HSPD-12), March 27, 2024 R. Department of Veterans Affairs (VA) Directive 6500, “VA Cybersecurity Program,” February 24, 2021 S. VA Handbook 6500, “Risk Management Framework for VA Information Systems – Tier 3: VA Information Security Program,” February 24, 2021 T. VA Handbook 6500.1, “Mobile Device Security Policy” February 15, 2018 U. VA Handbook 6500.2, “Management of Data Breaches Involving Sensitive Personal Information”, June 30, 2023 V. VA Handbook 6500.3, “ASSESSMENT, AUTHORIZATION, AND CONTINUOUS MONITORING OF VA INFORMATION SYSTEMS,” March 10, 2015 W. VA Handbook, 6500.5, “Incorporating Security and Privacy in System Development Lifecycle,” March 12, 2010 X. VA Handbook 6500.6, “Contract Security,” March 12, 2010 Y. Federal Travel Regulation (FTR) July 1, 2021 Z. VA Directive…