============================================================================= Run Date: MAY 01, 2026 Designation: WEBS*2*8 Package : WEBS - VISTA AUDIT SOLUTION Priority: Mandatory Version : 2 SEQ #8 Status: Released Compliance Date: MAY 31, 2026 ============================================================================= Subject: VAS 2.5.2 Category: - Informational Description: ============ Informational patch WEBS*2*8 announces the release of the Veterans Information System and Technology Architecture (VistA) Audit Solution (VAS) web application version 2.5.2. The VAS application is a real-time web-based interface that has dependencies on VistA patient data. It provides a nationwide Health Insurance Portability and Accountability Act (HIPAA) compliant Audit Tracking Solution with the ability to track and report on access logs for patients' Personal Identifiable Information (PII)/Protected Health Information (PHI) data across all VistA instances. VAS users are Privacy Officers and Information Systems Security Officers (ISSO) and their authorized representatives who need the ability to view the log of Create, Read, Update and/or Delete (CRUD) operations on patient information to respond to Freedom of Information Act (FOIA), HIPAA, employee and Inspector General (IG) requests. This data originates from VistA and flows through in-memory database servers to be stored in the Veterans Affairs Enterprise Cloud (VAEC) Amazon Web Services (AWS). VAS web-based User Interface will access and display the data stored in AWS. The VAS 2.5.2 release includes the following updates: Remediations The VAS 2.5.2 release will deploy updated code in the workflow (registry locations and non-migrated secrets) to support the GHEC-US migration. In addition, implements fix for Redshift Issue with Users identified by email rather than UID. Enhancements None EHRM Impact Statement: ---------------------- This patch should have no EHRM impact, and can be installed at all sites, including EHRM converted sites. Patch Components: ----------------- N/A Files & Fields Associated: -------------------------- N/A Forms Associated: ----------------- N/A Mail Groups Associated: ----------------------- N/A Options Associated: ------------------- N/A Protocols Associated: --------------------- N/A Security Keys Associated: ------------------------- N/A Templates Associated: --------------------- N/A Remote Procedures Associated: ----------------------------- N/A Parameter Definitions Associated: --------------------------------- N/A Additional Information: ----------------------- N/A New Service Requests (NSRs): ---------------------------- N/A Patient Safety Issues (PSIs): ----------------------------- N/A Defect Tracking System Ticket(s) & Overview: -------------------------------------------- N/A Test Sites ----------- Bath VAMC, Bath, NY (Station 528A6) McClellan Memorial Veterans Hospital, Little Rock, AR (Station 598) Test Sites - Change Orders -------------------------------- Bath VAMC: Pre-Prod: RLSE0019802 Prod: RLSE0019803 McClellan MVH (Little Rock): Pre-Prod: RLSE0019802 Prod: RLSE0019803 Software and Documentation Retrieval Instructions: -------------------------------------------------- VAS is a centrally managed web-based application and will be deployed to production servers by the VAS Technical team. No software will be installed at the facilities. Documentation describing this release can be found on the VA Software Documentation Library at: https://www.domain.ext/vdl/. Documentation can also be obtained at https://download.vista.domain.ext/index.html/SOFTWARE Documentation Title File Name --------------------------------------------------------------------- VAS Deployment, Installation, VAS_2_5_2_DIBRG.DOCX Back-out and Rollback Guide VAS_2_5_2_DIBRG.PDF VAS Release Notes VAS_2_5_2_RN.DOCX VAS_2_5_2_RN.PDF VAS User Guide VAS_2_5_2_UG.DOCX VAS_2_5_2_UG.PDF Patch Installation: ------------------- The VAS application is a centrally managed web-based application. No software will be installed at the facilities. Pre/Post Installation overview: --------------------------------------- N/A Pre-Installation Instructions: ------------------------------ N/A Installation Instructions: ------------------------- This is a centralized server promotion. No installation is required at local sites. Post-Installation Instructions: ----------------------------- N/A Back-Out Plan: -------------------------- Within context of this document, the term back-out pertains to a return to the last known good operational state of the software and appropriate platform settings. This does not apply for VAS 2.5.2 as the application resides in the Cloud. Routine Information: ==================== No routines included. ============================================================================= User Information: Entered By : Date Entered : FEB 17, 2026 Completed By: Date Completed: APR 30, 2026 Released By : Date Released : MAY 01, 2026 ============================================================================= Packman Mail Message: ===================== No routines included