VA Opened Market Research for Enterprise Software Suite

The department is evaluating software alternatives for 540,000 users and relaxing security authorization requirements for potential vendors.

Updated on Oct. 5, 2026 in Military Jobs

Isometric editorial illustration of stacked, interlocking metallic components, representing a secure software infrastructure system. — The Department of Veterans Affairs has initiated market research for a new enterprise software suite, opening bidding to vendors meeting specific NIST security standards. AI Illustration. Upload story photo >

Live Poll

Should government agencies prioritize competitive bidding over sticking with established software providers?

The Department of Veterans Affairs has launched market research to identify potential replacements for its current enterprise software agreement. The agency is now accepting proposals from vendors that lack existing FedRAMP authorization, provided they meet specific security benchmarks.

Why it matters

The agency aims to conduct a should-cost analysis and mitigate vendor lock-in risks for its 540,000-user network. By removing the FedRAMP barrier, the department has lowered the entry threshold for specialized technology providers to compete for this contract.

The Department of Veterans Affairs supports 540,000 users under its current agreement and is now seeking detailed cost drivers for infrastructure and licensing. Officials have set a target of 60 days for an authority to operate decision once a system meets mandatory intake requirements.

The players

Department of Veterans Affairs

A federal agency managing healthcare and benefits for millions of veterans, operating a massive IT enterprise across national facilities.

The details

The agency is using a request for information process to gather granular data on pricing and components, requiring vendors to submit a full bill of materials. Participants are invited to bid on individual or multiple capability areas to allow for modular solutions. To qualify, all proposed systems must meet NIST SP 800-53 Rev. 5 security standards to ensure compatibility with departmental infrastructure.

July 28, 2026: The VA issued a policy memo allowing alternatives without prior FedRAMP authorization.
October 5, 2026: The department released the formal request for information.
October 16, 2026: The deadline for industry responses to the agency's request.

Market Landscape

The agency is shifting its procurement strategy by prioritizing modular compliance against NIST SP 800-53 Rev. 5 standards over legacy authorization requirements. This move marks a departure from traditional reliance on long-term, all-encompassing enterprise agreements in favor of a should-cost analysis approach.

Vendors should focus their responses on providing transparent cost drivers for labor and licensing to satisfy the agency's upcoming should-cost analysis. Firms without FedRAMP status should prioritize documentation that demonstrates compliance with NIST security benchmarks before the October 16 deadline.

The takeaway

The agency is actively working to dismantle vendor lock-in by segmenting its massive software footprint into smaller, modular capability areas. Business owners interested in the opportunity should evaluate their capability to meet the 60-day authority to operate window for their specific product segment.