DA10--Enterprise Digital Government Enablement (EDGE) 36C10B26Q0245

Implement VA Critical Security Controls in network-connected software systems prior to VA authorization.

ACCESS AND CONFIGURATION HANDOVER The outgoing Contractor shall transition: System administrator accounts, role-based access, and credentials (in accordance with VA security policy) Source code repositories, configuration files, and CI/CD pipeline documentation Platform configuration settings, APIs, plug-ins, and connectors Test scripts, automated testing tools, and deployment processes All accounts and licenses shal

Ensure all COTS products, software configurations, customizations, and new software are PIV card-enabled using VA EA and IAM approved ETGs.

Provide user authentication services compliant with NIST SP 800-63-3, VA Handbook 6500, and VA IAM enterprise requirements.

KNOWLEDGE TRANSFER The outgoing Contractor shall provide knowledge transfer to the incoming Contractor and the Government, including but not limited to: Project architecture, design, and data model documentation Configuration details of LCNC applications, workflows, automations, and integrations Security and compliance documentation, including ATO artifacts Current backlog, product roadmap, unresolved defects, and re

KNOWLEDGE TRANSFER PARTICIPATION The Contractor shall attend all Government-directed knowledge transfer sessions conducted by the outgoing Contractor.

PRIVACY TRAINING The Contractor shall ensure that all personnel submit Talent Management System (TMS) Training Certificates of completion for VA Privacy and Information Security Awareness and Rules of Behavior and provide signed copies of the Contractor Rules of Behavior in accordance with Section 9, Training, from Appendix C of the VA Handbook 6500.6, “Contract Security” which can be found at Addendum B of this PWS.

In instances of theft or break-in or other criminal activity, the Contractor/Subcontractor must concurrently report the incident to the appropriate law enforcement entity (or entities) of jurisdiction, including the VA OIG and the VA Office of Security and Law Enforcement.

Provide a roster of employees to the COR within 3 business days after award for background investigations.

Prescreen all personnel requiring system access for appropriate Background Investigation and English language proficiency.

Describe experience staffing and managing a minimum of 200 concurrent Scrum teams.

INFORMATION TECHNOLOGY INFRASTRUCTURE LIBRARY (ITIL) SERVICE OPERATIONS The Contractor shall provide Information Technology Infrastructure Library (ITIL) services operations for Incident Management, Event Management, Access Management, Request Fulfillment, and Problem Management.

The Contractor Onboarding POC shall be responsible for accurate and timely submission of all required VA onboarding paperwork to the COR or his/her onboarding designee.

In the event that NSD is not providing Tier 1 support on a EDGE solution basis, the Contractor shall provide Tier 1 support for the specified individual EDGE solutions.

AGILE EXECUTION The Contractor shall document, validate, and execute the team design and testing tasks and requirements IAW Section 5.2.4.1 Team Planning, Section 5.2.3 Solution Architecture & Engineering, and Section 5.2.1 Agile Requirements Elicitation and Elaboration.

Classify requirements as follows: New Feature Enhancement Feature Non-Functional Technology Investment Defect In addition, the Contractor shall ensure that defects are mapped back to the original agile requirement.

The Contractor shall ensure that all delivered applications and system solutions support: Interfacing with VA’s Master Person Index (MPI) (formerly the Master Veteran Index (MVI)) to provision identity attributes, if the solution relies on VA user identities.

Additionally, the Contractor shall provide a status of all reportable GFE as part of the Monthly Status Report as required by PWS paragraph 5.1.

WEEKLY ACTIVITY REPORT The Contractor shall provide a Weekly Activity Report to include the EDGE Program Brief detailing any risks and dependencies on a weekly basis.

The Contractor shall provide Elevated Permissions Training Certificate.

The Contractor shall submit the final updated Kickoff Meeting Power Point Presentation to the CO, CS, and COR for review three calendar days after the meeting.

The Contractor shall provide to the COR/CO a copy of the training certificates and certification of signing the Organizational Rules of Behavior for each applicable employee within five days of the initiation of the contract and annually thereafter, as required.

TRAINING SERVICES The Contractor shall develop and deliver a Training Plan detailing the planning and delivery of instruction leveraging the most appropriate training methods and materials for the EDGE solution.

ACCESS AND ENVIRONMENT VALIDATION The Contractor shall validate that all system administrator accounts, user access, credentials, and licenses have been transitioned to VA-controlled ownership.

The Contractor shall develop a Transition Acceptance Report as formal certification that the Contractor has received, validated, and assumed ownership of all required documentation, access, and responsibilities.

OUTGOING TRANSITION STATUS AND REPORTING Provide incoming Contractor acknowledges sufficient receipt of documentation, access, and knowledge transfer to assume project responsibilities.

TRANSITION PLANNING The Contractor shall review the outgoing Contractor’s Transition Plan and provide feedback to the Government within five (5) business days of receipt.

TRANSITION PLANNING The outgoing Contractor shall develop and submit a Transition Plan within ten (10) business days of Government notice to transition.

Perform all work under this contract within the United States.

Do not substitute or replace Key Personnel within the first six months after award.

Do not remove, replace, or add Key Personnel without a compelling reason and written notification to the Contracting Officer.

Immediately notify the CO/CS/COR/PM in writing of any Key Personnel changes. Proposed replacements must meet or exceed designated qualifications and be of substantially equal ability.

Submit RFI response electronically via email by 3:00 PM EDT on March 25, 2026.

Contractor travel within the local commuting area will not be reimbursed. The Contractor shall provide cost estimates with each travel request to the COR.

Submit the proposal by 2026-03-25.

Comply with 508 Chapter 2 Scoping Requirements for all delivered electronic ICT and content.