S02 RFQ 36C10A24Q0117 8.6 Revised.docx

36C10A24Q0117

PAGE 1 OF

1. REQUISITION NO.

2. CONTRACT NO.

3. AWARD/EFFECTIVE DATE

4. ORDER NO.

5. SOLICITATION NUMBER

6. SOLICITATION ISSUE DATE

a. NAME

b. TELEPHONE NO. (No Collect Calls)

8. OFFER DUE DATE/LOCAL

TIME

9. ISSUED BY

CODE

10. THIS ACQUISITION IS

UNRESTRICTED OR

SET ASIDE:

% FOR:

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

8(A)

NAICS:

SIZE STANDARD:

11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

13a. THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700)

13b. RATING

14. METHOD OF SOLICITATION

RFQ

IFB

RFP

15. DELIVER TO

CODE

16. ADMINISTERED BY

CODE

17a. CONTRACTOR/OFFEROR

CODE

FACILITY CODE

18a. PAYMENT WILL BE MADE BY

CODE

TELEPHONE NO.

UEI:

EFT:

PHONE:

FAX:

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER 18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW IS CHECKED

SEE ADDENDUM

19.

20.

21.

22.

23.

24.

ITEM NO.

SCHEDULE OF SUPPLIES/SERVICES

QUANTITY

UNIT

UNIT PRICE

AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA

26. TOTAL AWARD AMOUNT (For Govt. Use Only) 27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA

ARE

ARE NOT ATTACHED.

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA

ARE

ARE NOT ATTACHED

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN _______________

29. AWARD OF CONTRACT: REF. ___________________________________ OFFER

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

DATED ________________________________. YOUR OFFER ON SOLICITATION

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED

SET FORTH HEREIN IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER) 30b. NAME AND TITLE OF SIGNER (TYPE OR PRINT) 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (TYPE OR PRINT) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION

(REV. NOV 2021)

PREVIOUS EDITION IS NOT USABLE

Prescribed by GSA - FAR (48 CFR) 53.212

7. FOR SOLICITATION

INFORMATION CALL:

STANDARD FORM 1449

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

TAC

757-24-4-641-0079

Anna Deputy 848-377-5203 08-20-2024

10:00 AM EST

Department of Veterans Affairs Technology Acquisition Center

23 Christopher Way Eatontown NJ 07724

X

517112 1500 Employees

N/A

See Schedule

Y Department of Veterans Affairs Technology Acquisition Center

23 Christopher Way Eatontown NJ 07724

Y Department of Veteran Affairs Financial Services Center P.O. Box 149971

Austin TX 78714-8971

(877) 353-9791

See CONTINUATION Page Chalmers P. Wylie Ambulatory Care Center Patient Internet (WiFi) Services Connectivity

See Continuation pages

See CONTINUATION Page

Claudetta N. Smith

SECTION B - CONTINUATION OF SF 1449 BLOCKS

B.1 PRICE/COST SCHEDULE

ITEM INFORMATION

CLIN 0001 24/7 streaming of Wi-Fi services, maintenance and repairs at the following locations IAW Paragraph 4 of the SOW

Chalmers P. Wylie Ambulatory Care Center 420 N. James Rd.

Columbus, OH 43219

Grove City CBOC 1955-1957 Ohio Drive Grove City, OH 43123

Newark CBOC 1855 W. Main Street Newark, OH 43055

Marion CBOC 1203 Delaware Avenue Marion, OH 43302

Zanesville CBOC 2800 Maple Avenue, Suites A-F Zanesville, OH 43701

Behavioral Health CBOC 2720 Airport Drive Columbus, OH 43219

Contract Period: Base POP Begin: 09-01-2024 POP End: 08-31-2025 PRINCIPAL NAICS CODE: 517112 - Wireless Telecommunications Carriers (except Satellite) PRODUCT/SERVICE CODE: DG10 - IT and Telecom - Network As A Service

Base Period Total $______________

Option Period One

CLIN 1001 24/7 streaming of Wi-Fi services, maintenance and repairs at the following locations IAW Paragraph 4 of the SOW

420 N. James Rd.

Columbus, OH 43219

Grove City CBOC 1955-1957 Ohio Drive Grove City, OH 43123

Newark CBOC 1855 W. Main Street Newark, OH 43055

Marion CBOC 1203 Delaware Avenue Marion, OH 43302

Zanesville CBOC 2800 Maple Avenue, Suites A-F Zanesville, OH 43701

Behavioral Health CBOC 2720 Airport Drive Columbus, OH 43219 Contract Period: Option 1 POP Begin: 09-01-2025 POP End: 08-31-2026

Option Period One Total $______________

Option Period Two

CLIN 2001 24/7 streaming of Wi-Fi services, maintenance and repairs at the following locations IAW Paragraph 4 of the SOW

420 N. James Rd.

Columbus, OH 43219

Grove City CBOC 1955-1957 Ohio Drive Grove City, OH 43123

Newark CBOC 1855 W. Main Street Newark, OH 43055

Marion CBOC 1203 Delaware Avenue Marion, OH 43302

Zanesville CBOC 2800 Maple Avenue, Suites A-F Zanesville, OH 43701

Behavioral Health CBOC 2720 Airport Drive Columbus, OH 43219 Contract Period: Option 2 POP Begin: 09-01-2026 POP End: 08-31-2027

Option Period Two Total $______________

Option Period Three

CLIN 3001 24/7 streaming of Wi-Fi services, maintenance and repairs at the following locations IAW Paragraph 4 of the SOW

420 N. James Rd.

Columbus, OH 43219

Grove City CBOC 1955-1957 Ohio Drive Grove City, OH 43123

Newark CBOC 1855 W. Main Street Newark, OH 43055

Marion CBOC 1203 Delaware Avenue Marion, OH 43302

Zanesville CBOC 2800 Maple Avenue, Suites A-F Zanesville, OH 43701

Behavioral Health CBOC 2720 Airport Drive Columbus, OH 43219 Contract Period: Option 3 POP Begin: 09-01-2027 POP End: 08-31-2028

Option Period Three Total $______________

Option Period Four

CLIN 4001 24/7 streaming of Wi-Fi services, maintenance and repairs at the following locations IAW Paragraph 4 of the SOW

420 N. James Rd.

Columbus, OH 43219

Grove City CBOC 1955-1957 Ohio Drive Grove City, OH 43123

Newark CBOC 1855 W. Main Street Newark, OH 43055

Marion CBOC 1203 Delaware Avenue Marion, OH 43302

Zanesville CBOC 2800 Maple Avenue, Suites A-F Zanesville, OH 43701

Behavioral Health CBOC 2720 Airport Drive Columbus, OH 43219 Contract Period: Option 4 POP Begin: 09-01-2028 POP End: 08-31-2029

Option Period Four Total $______________

GOVERNING LAW

Federal law and regulations, including the Federal Acquisition Regulations (FAR), shall govern this Contract/Order. Commercial license agreements may be made a part of this Contract/Order but only if both parties expressly make them an addendum hereto, as permitted by FAR 12.212. If the commercial license agreement is not made an addendum, it shall not apply, govern, be a part of or have any effect whatsoever on the Contract/Order; this includes, but is not limited to, any agreement embedded in the computer software (clickwrap), any agreement that is otherwise delivered with or provided to the Government with the commercial computer software or documentation (shrink-wrap), or any other license agreement otherwise referred to in any document. If a commercial license agreement is made an addendum, only those provisions addressing data rights regarding the Government’s use, duplication and disclosure of data (e.g., restricted computer software) are included and made a part of this Contract/Order, and only to the extent that those provisions are not duplicative or inconsistent with Federal law, Federal regulation, the incorporated FAR clauses and the provisions of this Contract/Order; those provisions in the commercial license agreement that do not address data rights regarding the Government’s use, duplication and disclosure of data shall not be included or made a part of the Contract/Order. Federal law and regulation including, without limitation, the Contract Disputes Act (41 U.S.C. § 7101 et seq.), the Anti-Deficiency Act (31 U.S.C. § 1341 et seq.), the Competition in Contracting Act (41 U.S.C. § 3301 et seq.), the Prompt Payment Act (31 U.S.C. §3901 et seq.), Contracts for Data Processing or Maintenance (38 USC § 5725), and FAR clauses 52.212-4, 52.227-14, 52.227-19 shall supersede, control, and render ineffective any inconsistent, conflicting, or duplicative provision in any commercial license agreement. In the event of conflict between this clause and any provision in the Contract/Order or the commercial license agreement or elsewhere, the terms of this clause shall prevail. The Contractor shall deliver to the Government all data first produced under this Contract/Order with unlimited rights as defined by FAR 52.227-14. Claims of patent or copyright infringement brought against the Government as a party shall be defended by the U.S. Department of Justice (DOJ in accordance with 28 U.S.C. § 516; at the discretion of DOJ, the Contractor may be allowed reasonable participation in the defense of the litigation. Any additional changes to the Contract/Order must be made by contract/order modification (Standard Form 30) and shall only be made by a warranted Contracting Officer. Nothing in this Contract/Order or any commercial license agreement shall be construed as a waiver of sovereign immunity.

B.2 CONTRACT ADMINISTRATION DATA

1. Contract Administration: All contract administration matters will be handled by the following individuals:

a. CONTRACTOR:

b. GOVERNMENT: Contracting Officer 36C10B Department of Veterans Affairs Technology Acquisition Center 23 Christopher Way Eatontown NJ 07724

2. CONTRACTOR REMITTANCE ADDRESS: All payments by the Government to the contractor will be made in accordance with:

3. INVOICES: Invoices shall be submitted in arrears:

4. GOVERNMENT INVOICE ADDRESS: All Invoices from the contractor shall be submitted electronically in accordance with VAAR Clause 852.232-72 Electronic Submission of Payment Requests.

ACKNOWLEDGMENT OF AMENDMENTS: The offeror acknowledges receipt of amendments to the Solicitation numbered and dated as follows:

B.3 ACCOUNTING AND APPROPRIATION DATA

Funds in the amount of $TBD are obligated on IFCAP Purchase Order number TBD to fund CLIN 0001. The contractor shall reference the IFCAP Purchase Order number on each invoice submitted for payment.

B.4 STATEMENT OF WORK

Chalmers P. Wylie Ambulatory Care Center Patient Internet Services Connectivity Statement of Work

1. GENERAL:

This solicitation shall result in a firm fixed-price contract for the installation and operation of the system for a base period of one year with four options that may be exercised at the government’s discretion, for a total performance period of five years.

This solicitation requests the contractor to provide and maintain Internet service and access for patients and family members of patients at the Chalmers P. Wylie Veterans Affairs Ambulatory Care Center (VA ACC).

2. BACKGROUND:

The Chalmers P. Wylie VAACC is an outpatient facility in Columbus, OH. Public Internet access while in a hospital setting is quickly becoming essential for our sick and wounded Veterans to aid in their transition from the battlefield to the bedside. The Veteran’s relational-based care plan has rapidly grown to include technology sets to provide real-time communication with family and friends as well as a modern day appliance for personal growth and high-quality of life.

Today’s Veteran has been raised on technology and will require this public venue to help transition to a new way of life. From a therapeutic perspective the Internet can be used as a form of rehabilitation, mental welfare, therapy and an aid to enhance the Veterans quality of life. The VA recognizes that its patient population and family members use the internet as a means of both researching information as well as remaining in communication with friends and family members on a near-constant basis.

As a result, it is our desire to provide these patients and their family members’ access to the internet to allow them to continue their communication.

With that being said technology guidelines have provided the following generalized criteria for decision making when deciding on a public internet access solution:

1. Separation of Veterans patient Internet network (air-gap) from VA patient care (employee) network to interface and maintain outside contact while hospitalized.

1. Enable the provision of public internet services in VA facilities in a standardized and secure fashion.

1. Minimize reliance on VA technology personnel and resources for installation, operation and maintenance of public internet services.

The Columbus VAACC recognizes that the proper operation and functioning of a health care facility requires its staff to have constant patient care network and internet access. It is the intent of this initiative is to provide our patients and their families’ public internet access without impinging on the efficient and effective operation of the hospital and its clinics (CBOCs).

3. PERIOD OF PERFORMANCE:

The Period of Performance (POP) is for a one-year base period with four one-year option periods:

1. PLACE OF PERFORMANCE:

Chalmers P. Wylie Ambulatory Care Center 420 N. James Rd.

Columbus, OH 43219

Grove City CBOC 1955-1957 Ohio Drive Grove City, OH 43123

Newark CBOC 1855 W. Main Street Newark, OH 43055

Marion CBOC 1203 Delaware Avenue Marion, OH 43302

Zanesville CBOC 2800 Maple Avenue, Suites A-F Zanesville, OH 43701

Behavioral Health CBOC 2720 Airport Drive Columbus, OH 43219

Page 1 of

COR: TBD

5. OBJECTIVE:

The Chalmers P. Wylie VAACC is seeking a solution to continue to provide our patients and guests wireless access to the internet while they are using our facility in Columbus, OH.

The objectives of this proposal are to continue to cover outpatient public Internet service to help Veterans and their families stay connected with their life beyond the clinical setting.

The Chalmers P. Wylie VAACC has requested public Internet access circuits will be placed at 420 N. James Rd. Columbus, OH 43219.

The bandwidth requirements will be based on the number of users that will be anticipated at the site. The site will host approximately 750 to 1000 users a day via this Internet connection. The facility currently has Wi-Fi provided by Spectrum internet and owns all 135 Aruba Networking brand access points and related devices. Contractor shall either use existing access points or provide new under the contract. Contractor responsible for ensuring adequate coverage for the facility and shall provide any and all access points as required.

The Chalmers P. Wylie VAACC has requested to maintain public Internet service for the main building as well as the engineering building and CBOCs. These public Internet access areas include but are not limited to the following:

NOTE: Facility diagrams will be provided upon request.

6. PERFORMANCE ASSUMPTIONS:

There are assumptions that will be taken into consideration for implementing public Internet access at the VA facility. The following assumptions will be made:

1. Chalmers P. Wylie Ambulatory Care Center will be the funding source for selected technology solution.

1. Infrastructure provided must be separate and distinct from the current networks that are used to provide official business functions, applications and data necessary for the operation of the clinic. It also must not interfere with current wireless infrastructure in-place in the facility which is currently used for both business functions and medical devices.

1. Chalmers P. Wylie VAACC point of contact, proxy or working sponsor for the Patient Internet Access infrastructure will be responsible to work with Information Security Officer and Chief Information Officer to develop business agreements, memorandums of understanding and/or infrastructure security agreements regarding design and rite of passage for patient internet access appliances and network infrastructure.

1. Network infrastructure will require using common radio frequency 2.4 GHz in order to accommodate customer device access. A spectrum analysis may be required before design, placement and implementation of Internet access can begin.

1. Blended solutions for both wire and wireless solutions will be required to the initial design. Patient Internet Network design must be centered on reliability, availability and scalability.

1. Provide a network filtering service and a network filtering device that prevents users from visiting inappropriate sites. The device must allow additional blocking as determined by VA policies and procedures. A filter list will be provided on a regular basis to the offeror as the need arises since websites may change addresses or new sites may appear from time to time.

1. Provide a toll-free telephone support function for users to report problems with the service and resolve those problems in a timely manner.

1. Although this concept provides a service to our customers, it is expected that it will be provided without a requirement to provide full time, redundant, fault-tolerant service. The Chalmers P. Wylie VAACC desires this service be available 24 hours a day, 7 days per week (24X7); however, we are neither requiring nor expecting the supplier to provide total fault tolerance.

1. The Veteran & their families will primarily be responsible for providing their own personal computer equipment; any proposals by Veteran organizations or vendors for any type of gift/loaner/lease whether wired or wireless devices is out of scope of this initiative.

1. Implement advisory banners, security solutions, and logging for all VA provided, public internet access.

1. Utilize a content filtering solution for monitoring all VA-provided public internet access.

1. Log files must be maintained for a one year period.

1. Facility can implement these services through their existing internet service provider and the service provider must be able to provide log file as requested for investigation.

1. Implementation of these requirements would be documented in the required MOU for an air gapped network.

7. PERFORMANCE REQUIREMENTS:

1. Installation of Internet circuits to Chalmers P. Wylie VAACC pre-determined locations.

0. Determine availability of Internet services at each location.

0. Determine bandwidth needs based on estimated number of users.

0. Provide circuit provisioning equipment at each location to provide Internet services.

0. Contractor may utilize existing wireless access points with Internet service to locations identified in Section 5. Contractor responsible for providing new and/or additional access points as required.

0. Provide testing results of circuits to ensure integrity of Internet service.

1. Perform spectrum analysis of the campus (as needed/required)

0. Validate documentation of existing patient internet devices and infrastructure.

0. Determine locations for legacy wireless access points.

0. Measure spectrum signals for employees wireless access points.

0. Measure spectrum signals for patient wireless access points.

0. Annotate spectrum findings on current facility architecture as builds.

1. Develop an installation and process plan for required equipment (as needed/required)

0. Survey current physical infrastructure.

0. Validate locations and placement for wireless access points.

0. Determine power requirements for wired infrastructure.

0. Determine equipment and communication closet requirements.

0. Outline and test process for client access and enrollment including time limited and/or token access.

0. Develop security controls to monitor and provide intrusion detection as well as intrusion protection from rogue, alien and malware/spyware protocols.

1. Develop pilot program (as needed/required)

3. Select sample population to work through process and technology controls (e.g. canteen, main atrium and surgery waiting).

3. Based on requirements # 4, 5 with successful results proceed with facility wide implementation.

3. Provide educational/training materials for client access and rules of behavior.

1. Install required equipment

4. Develop a schedule to install equipment in a manner that minimizes possible disruptions in patient areas.

4. Install equipment and test for functionality.

4. Contractor will be responsible for installation and testing of all components, fiber and cabling outlined in this document, in accordance with normal industry standards and practices.

1. Test system functionality

5. Provide process controls, documentation, education and support for use.

1. Publicize system availability

6. Ensure that system provides access at all installed points and provides complete coverage of desired areas.

6. Establish communication, education and marketing plan for VA Patient Wireless Internet Network Service (VA Patient WINS).

1. Maintain the system

7. Provide a 24 hour/toll free telephone number that provides users a capability to report problems and have problems resolved quickly and efficient.

7. Provide a maintenance team that has the capability to troubleshoot and repair system outages within 24 hours. Issues that cannot be resolved within this time frame will be handled on a case-by-case basis with the Contracting Officer’s Representative (COR)

1. System Performance

9.1 Network devices should be compatible with industry standard wireless protocols (i.e. 802.11b, 802.11g, and 802.11n)

1. Training

9. Vendor shall complete all required training and complete all applicable clearance documentation prior to commencement of work

8. ADDITIONAL REQUIREMENTS:

The major concern with this option is duality of wireless access points between the public and VA patient care network. The current patient care network is a CISCO network. As shown in the diagram (right) there will be competing wireless access point from two different networks using various channels and frequencies. As confirmed and recommended by CISCO networks there should be a division of 802.11 standards use as well as distance*, frequency and wireless channels. The channels for devices are in the low range of channel one (1) to the higher range channel eleven (11). The objective with this solution will be to “carve out” two channels for the Public Internet Access and leave the remaining channels for the VA network. The VA network has newer access points and will be in greater numbers throughout the Chalmers P. Wylie Ambulatory Care Center. CISCO states these newer wireless access points have the ability to boost their power and drown most of the interference from devices (e.g. Laptops, PCs) that are trying to contact the public Internet on 802.11a within those two dedicated (1) and (7) channels. CISCO also places a performance disclaimer on this solution which states that using the same standard and frequency with different channels could still drag down performance on the VA patient care network.

· - Heat mapping and spectrum analysis is mandatory to place controls on preventing attenuation and diffusion of competing wireless Wi-Fi networks.

The table below outlines the connectivity speeds paralleled to each of the standards. The 802.11a will afford enough network throughputs for the patients to the latest Internet-based applications (web portals, iPod, YouTube, Facebook, etc.)

Table 1 The coexistence and collaboration of dual networks will require coordination along with the compatibility of security controls, management tools and supportability. Ideally using the higher 5.0 GHz frequency band would avoid conflicts. The 802.11n could be a targeted standard to implement. However, realistically the 802.11b and 802.11g are the primary venue for access that is currently used today with a majority and wide variety of devices that Veterans and family members and guests will be utilizing.

The following Security Services should be considered and provided by the Internet Service Provider or the vendor installing the public Internet access; Managed Firewall / Intrusion Detection and Prevention, Managed E-Authentication, Vulnerability Scanning /Anti-Virus Management , Incident Response / Event Management Processing, Managed Tiered Security, Metrics and Operations Reporting.

In each of the locations the contractor will provide commercial minimum 802.11 b/g wireless Internet connectivity to the following areas and wired Internet network connection in areas specified:

The connectivity will be provided from the nearest external contractor connection point via fiber runs to the respective division locations utilizing existing conduit on the respective location grounds. Internet access will be a minimum of three (3) synchronous Mbps at each location.

All medical center fiber terminations will use SC/ST connections as appropriate. Contractor is to provide all required labor and material. Contractor will be responsible for installation and maintenance of router, switches, wireless access points, and Category 6 wiring with connections (as required) to provide these capabilities. Installation will be coordinated with Department of Veteran Affairs V10 COL OIT support staff to ensure an air-gapped connectivity separate from the medical center’s network. All material used shall be UL approved and code compliant (NEC) as required for application. Installation shall be in accordance with NFPA and VA requirements. Existing cable trays and/or raceways shall be used to distribution. Locations where cable trays are not available, the distribution cable shall be run along the contour of the wall, being fastened with appropriate fasteners to ensure a secure and neat installation. Where cable penetrates fire and smoke walls that do not have existing cable trays metal sleeves shall be installed in accordance with VA requirements using approved fire stop material to seal ALL penetrations. Installation work will be performed during hours to meet facility requirements, which may include outside of normal non-duty hours to meet infection control and patient service requirements. A site visit and floor plans will be provided for interested proposers.

Proposals must include the annual ongoing cost for the provision of Internet Services and maintenance of supporting infrastructure to the respective locations. On-site response time required is 24 hours on next business day from notification. Service will be performed during normal business hours of 8 AM – 4:30 PM. Vendor will provide all parts and labor necessary to keep equipment operating in accordance with manufacturer specifications.

The contractor shall provide, in space below, the name, location and telephone number of the office where service calls are to be placed:

This contract will be a single vendor award; however, the awarded contractor may sub-contract to other providers for portions of this work. All contractors and sub-contractors must be identified and complete/pass security requirements for working in a VHA Medical Center. Installation and full operational capability is to be completed within 120 days of award.

TIMETABLE OF DELIVERABLES

Deliverable Definitions: The following deliverable definitions serve as a starting point for any questions or conversations concerning the products of this project.

1. Detailed description of equipment locations and requirements: This deliverable will produce a detailed documentation of where offertory equipment will be located, wiring requirements, and power requirements for this project and detail expected throughput and capacity for both numbers of users and their level of use.

1. Detailed list of installation locations, dates, times, and required access: This deliverable will provide a complete description of installation steps, timelines, requirements for closet access, and proposed locations of offeror’s equipment.

1. Equipment installed and fully functional: This step will involve the offeror demonstrating to the government’s satisfaction that the equipment installed functions as required.

1. Detailed list of results including coverage areas and wireless capability: The offeror will provide detailed reports showing the performance characteristics of the offeror’s equipment and that wireless coverage for required areas encompasses the area as required.

1. Maintain the system: The offeror will provide the government monthly reports that detail system usage, system up-time, number and types of customer problem calls and response times to those calls, both initial and at problem resolution.

Deliverable Acceptance Criteria: All deliverables, except number 4, are documents. The contractor will provide an electronic copy with all deliverables. The COR will notify the contractor in writing that the required documents are sufficient to meet the requirements above for the Statement of Work (SOW). In order to avoid problems with expectations of products, the contractor is encouraged to submit a draft document to the COR at reasonable time prior to final delivery to ensure acceptance criteria of products are met.

Deliverables and acceptance of deliverables such as reports, and diagrams will be given to the COR.

9. Contract Performance Monitoring

Monitoring of contractor’s performance shall be done by the COR.

1. Contract noncompliance: Incidents of contractor noncompliance as evidenced by the monitoring procedures shall be forwarded immediately to the Contracting Officer. A Quality Assurance Surveillance Plan is attached (Attachment No. 5) and will be signed by the Contractor Program Manager and COR, outlining the evaluation criteria to ensure the contractor is aware of the management and quality criteria required to meet the terms of the contract.

1. Frequency of Measurement: During contract performance, the COR will periodically analyze whether the negotiated frequency of surveillance is appropriate for the work being performed. Semi-annual (or quarterly if warranted) reports are prepared by the COR.

1. Frequency of Performance Assessment Meetings: The COR shall visit with the contractor either on an as-needed basis or, at a minimum, twice during the contract period: (1) middle of contract period and (2) end of contract period to assess performance and shall provide a written assessment. This written assessment will be forwarded to the Contracting Officer as documentation of contractor’s performance and/or for a request to exercise option period, renewal of a contract or termination of a contract.

1. Contractor reviews: Contractor will review semi-annual (or quarterly) performance measure reports and acknowledge receipt of report by returning a signed copy, along with any comments, to the Contracting Officer within 30 days of receipt of the report.

The government reserves the right to monitor services in accordance with Performance Based Matrix.

TASK

performance

performance

10. INVOICES:

Payment will be made upon receipt of a properly prepared detailed invoice, prepared by the Contractor, validated by the Contracting Officer’s Representative (COR), and submitted to VA FSC, P. O. BOX 149971, AUSTIN, TX 78714.

A properly prepared invoice will contain:

· Invoice Number and Date

· Contractor’s Name and Address

· Accurate Purchase Order Number

· Monthly service and/or supply/service call(s) provided

· Total amount due

ADDENDUM A – ADDITIONAL VA REQUIREMENTS, CONSOLIDATED

A1.0 Cyber and Information Security Requirements for VA IT Services The Contractor shall ensure adequate LAN/Internet, data, information, and system security in accordance with VA standard operating procedures and standard PWS language, conditions, laws, and regulations. The Contractor’s firewall and web server shall meet or exceed VA minimum requirements for security. All VA data shall be protected behind an approved firewall. Any security violations or attempted violations shall be reported to the VA Program Manager and VA Information Security Officer as soon as possible. The Contractor shall follow all applicable VA policies and procedures governing information security, especially those that pertain to assessment and authorization and continuous monitoring Contractor supplied equipment, PCs of all types, equipment with hard drives, etc. for contract services must meet all security requirements that apply to Government Furnished Equipment (GFE) and Government Owned Equipment (GOE). Security Requirements include: a) VA Approved Encryption Software must be installed on all laptops or mobile devices before placed into operation, b) Bluetooth equipped devices are prohibited within VA; Bluetooth must be permanently disabled or removed from the device, unless the connection uses FIPS 140-2 (or its successor) validated encryption, c) VA approved anti-virus and firewall software, d) Equipment must meet all VA sanitization requirements and procedures before disposal. The COR, CO, the PM, and the Information Security Officer (ISO) must be notified and verify all security requirements have been adhered to.

Each documented initiative under this contract incorporates VA Handbook 6500.6, “Contract Security,” March 12, 2010 by reference as though fully set forth therein. The VA Handbook 6500.6, “Contract Security” shall also be included in every related agreement, contract, or order. The VA Handbook 6500.6, Appendix C, is included in this document as Addendum B.

Training requirements: The Contractor shall complete all mandatory training courses on the current VA training site, the VA Talent Management System (TMS) 2.0, and will be tracked therein. The TMS 2.0 may be accessed at https://www.tms.va.gov/SecureAuth35/ . If you do not have a TMS 2.0 profile, go to https://www.tms.va.gov/SecureAuth35/ and click on the “Create New User” link on the TMS 2.0 to gain access.

Contractor employees shall complete a VA Systems Access Agreement if they are provided access privileges as an authorized user of the computer system of VA.

A2.0 VA Enterprise Architecture Compliance The applications, supplies, and services furnished under this contract must comply with VA Enterprise Architecture (EA), available at http://www.ea.oit.va.gov/index.asp in force at the time of issuance of this contract, including the Program Management Plan and VA's rules, standards, and guidelines in the Technical Reference Model/Standards Profile (TRMSP). VA reserves the right to assess contract deliverables for EA compliance prior to acceptance.

A2.1 VA Internet and Intranet Standards The Contractor shall adhere to and comply with VA Directive 6102 and VA Handbook 6102, Internet/Intranet Services, including applicable amendments and changes, if the Contractor’s work includes managing, maintaining, establishing, and presenting information on VA’s Internet/Intranet Service Sites. This pertains, but is not limited to: creating announcements; collecting information; databases to be accessed, graphics and links to external sites.

Internet/Intranet Services Directive 6102 is posted at (copy and paste the following URL to browser): https://www.va.gov/vapubs/viewPublication.asp?Pub_ID=1056&FType=2 Internet/Intranet Services Handbook 6102 is posted at (copy and paste following URL to browser): https://www.va.gov/vapubs/viewPublication.asp?Pub_ID=1055&FType=2 A3.0 Notice of the Federal Accessibility Law Affecting All Information and Communication Technology (ICT) Procurements (Section 508) On January 18, 2017, the Architectural and Transportation Barriers Compliance Board (Access Board) revised and updated, in a single rulemaking, standards for electronic and information technology developed, procured, maintained, or used by Federal agencies covered by Section 508 of the Rehabilitation Act of 1973, as well as our guidelines for telecommunications equipment and customer premises equipment covered by Section 255 of the Communications Act of 1934. The revisions and updates to the Section 508-based standards and Section 255-based guidelines are intended to ensure that information and communication technology (ICT) covered by the respective statutes is accessible to and usable by individuals with disabilities.

A3.1 Section 508 – Information and Communication Technology (ICT) Standards The Section 508 standards established by the Access Board are incorporated into, and made part of all VA orders, solicitations and purchase orders developed to procure ICT. These standards are found in their entirety at: https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines. A printed copy of the standards will be supplied upon request.

Federal agencies must comply with the updated Section 508 Standards beginning on January 18, 2018. The Final Rule as published in the Federal Register is available from the Access Board: https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule.

The Contractor shall comply with “508 Chapter 2: Scoping Requirements” for all electronic ICT and content delivered under this contract. Specifically, as appropriate for the technology and its functionality, the Contractor shall comply with the technical standards marked here:

A3.2 Compatibility with Assistive Technology The standards do not require installation of specific accessibility-related software or attachment of an assistive technology device. Section 508 requires that ICT be compatible with such software and devices so that ICT can be accessible to and usable by individuals using assistive technology, including but not limited to screen readers, screen magnifiers, and speech recognition software.

A3.3 Acceptance and Acceptance Testing Deliverables resulting from this solicitation will be accepted based in part on satisfaction of the Section 508 Chapter 2: Scoping Requirements standards identified above.

The Government reserves the right to test for Section 508 Compliance before delivery. The Contractor shall be able to demonstrate Section 508 Compliance upon delivery.

A4.0 Physical Security & Safety Requirements:

The Contractor and their personnel shall follow all VA policies, standard operating procedures, applicable laws and regulations while on VA property. Violations of VA regulations and policies may result in citation and disciplinary measures for persons violating the law.

1. The Contractor and their personnel shall wear visible identification at all times while they are on the premises.

2. VA does not provide parking spaces at the work site; the Contractor must obtain parking at the work site if needed. It is the responsibility of the Contractor to park in the appropriate designated parking areas. VA will not invalidate or make reimbursement for parking violations of the Contractor under any conditions.

3. Smoking is prohibited inside/outside any building other than the designated smoking areas.

4. Possession of weapons is prohibited.

5. The Contractor shall obtain all necessary licenses and/or permits required to perform the work, with the exception of software licenses that need to be procured from a Contractor or vendor in accordance with the requirements document. The Contractor shall take all reasonable precautions necessary to protect persons and property from injury or damage during the performance of this contract.

A5.0 Confidentiality and Non-Disclosure The Contractor shall follow all VA rules and regulations regarding information security to prevent disclosure of sensitive information to unauthorized individuals or organizations.

The Contractor may have access to Protected Health Information (PHI) and Electronic Protected Health Information (EPHI) that is subject to protection under the regulations issued by the Department of Health and Human Services, as mandated by the Health Insurance Portability and Accountability Act of 1996 (HIPAA); 45 CFR Parts 160 and 164, Subparts A and E, the Standards for Privacy of Individually Identifiable Health Information (“Privacy Rule”); and 45 CFR Parts 160 and 164, Subparts A and C, the Security Standard (“Security Rule”). Pursuant to the Privacy and Security Rules, the Contractor must agree in writing to certain mandatory provisions regarding the use and disclosure of PHI and EPHI.

1. The Contractor will have access to some privileged and confidential materials of VA. These printed and electronic documents are for internal use only, are not to be copied or released without permission, and remain the sole property of VA. Some of these materials are protected by the Privacy Act of 1974 (revised by PL 93-5791) and Title 38. Unauthorized disclosure of Privacy Act or Title 38 covered materials is a criminal offense.

2. The VA CO will be the sole authorized official to release in writing, any data, draft deliverables, final deliverables, or any other written or printed materials pertaining to this contract. The Contractor shall release no information. Any request for information relating to this contract presented to the Contractor shall be submitted to the VA CO for response.

3. Contractor personnel recognize that in the performance of this effort, Contractor personnel may receive or have access to sensitive information, including information provided on a proprietary basis by carriers, equipment manufacturers and other private or public entities. Contractor personnel agree to safeguard such information and use the information exclusively in the performance of this contract. Contractor shall follow all VA rules and regulations regarding information security to prevent disclosure of sensitive information to unauthorized individuals or organizations as enumerated in this section and elsewhere in this Contract and its subparts and appendices.

4. Contractor shall limit access to the minimum number of personnel necessary for contract performance for all information considered sensitive or proprietary in nature. If the Contractor is uncertain of the sensitivity of any information obtained during the performance this contract, the Contractor has a responsibility to ask the VA CO.

5. Contractor shall train all of their employees involved in the performance of this contract on their roles and responsibilities for proper handling and nondisclosure of sensitive VA or proprietary information. Contractor personnel shall not engage in any other action, venture or employment wherein sensitive information shall be used for the profit of any party other than those furnishing the information. The sensitive information transferred, generated, transmitted, or stored herein is for VA benefit and ownership alone.

6. Contractor shall maintain physical security at all facilities housing the activities performed under this contract, including any Contractor facilities according to VA-approved guidelines and directives. The Contractor shall ensure that security procedures are defined and enforced to ensure all personnel who are provided access to patient data must comply with published procedures to protect the privacy and confidentiality of such information as required by VA.

7. Contractor must adhere to the following:

a. The use of “thumb drives” or any other medium for transport of information is expressly prohibited.

b. Controlled access to system and security software and documentation.

c. Recording, monitoring, and control of passwords and privileges.

d. All terminated personnel are denied physical and electronic access to all data, program listings, data processing equipment and systems.

e. VA, as well as any Contractor (or Subcontractor) systems used to support development, provide the capability to cancel immediately all access privileges and authorizations upon employee termination.

f. Contractor PM and VA PM are informed within twenty-four (24) hours of any employee termination.

g. Acquisition sensitive information shall be marked "Acquisition Sensitive" and shall be handled as "For Official Use Only (FOUO)".

h. Contractor does not require access to classified data.

8. Regulatory standard of conduct governs all personnel directly and indirectly involved in procurements. All personnel engaged in procurement and related activities shall conduct business in a manner above reproach and, except as authorized by statute or regulation, with complete impartiality and with preferential treatment for none. The general rule is to strictly avoid any conflict of interest or even the appearance of a conflict of interest in VA/Contractor relationships.

9. VA Form 0752 shall be completed by all Contractor employees working on this contract, and shall be provided to the CO before any work is performed. In the case that Contractor personnel are replaced in the future, their replacements shall complete VA Form 0752 prior to beginning work.

ADDENDUM B – VA INFORMATION AND INFORMATION SYSTEM SECURITY/PRIVACY LANGUAGE

APPLICABLE PARAGRAPHS TAILORED FROM: THE VA INFORMATION AND INFORMATION SYSTEM SECURITY/PRIVACY LANGUAGE, VA HANDBOOK 6500.6, APPENDIX C, MARCH 12, 2010

1. GENERAL.

Contractors, contractor personnel, subcontractors and subcontractor personnel will be subject to the same federal laws, regulations, standards, VA directives and handbooks, as VA personnel regarding information and information system security and privacy.

1. VA INFORMATION CUSTODIAL LANGUAGE.

N/A

1. ACCESS TO VA INFORMATION AND VA INFORMATION SYSTEMS.

N/A

1. TRAINING.

N/A

1. SECURITY INCIDENT INVESTIGATION.

N/A

1. INFORMATION SYSTEM DESIGN AND DEVELOPMENT.

N/A

1. INFORMATION SYSTEM HOSTING, OPERATION, MAINTENANCE OR USE.

N/A

1. SECURITY AND PRIVACY CONTROLS COMPLIANCE TESTING, ASSESSMENT

AND AUDITING.

N/A

1. PRODUCT INTEGRITY, AUTHENTICITY, PROVENANCE, ANTI-COUNTERFEIT

AND ANTI-TAMPERING.

N/A

1. VIRUSES, FIRMWARE AND MALWARE

N/A

1. CRYPTOGRAPHIC REQUIREMENT

N/A

1. PATCHING GOVERNANCE

N/A

1. SPECIALIZED DEVICES/SYSTEMS (MEDICAL DEVICES, SPECIAL PURPOSE

SYSTEMS, RESEARCH SCIENTIFIC COMPUTING).

N/A

1. DATA CENTER PROVISIONS

N/A

SECTION C - CONTRACT CLAUSES

C.1 52.212-4 CONTRACT TERMS AND CONDITIONS—COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES (NOV 2023) ADDENDUM to FAR 52.212-4 CONTRACT TERMS AND CONDITIONS—COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES Clauses that are incorporated by reference (by Citation Number, Title, and Date), have the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available.

The following clauses are incorporated into 52.212-4 as an addendum to this contract:

C.2 FAR 52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es):

https://www.acquisition.gov/browse/index/far https://www.va.gov/oal/library/vaar/

(End of Clause)

C.3 FAR 52.217-8 OPTION TO EXTEND SERVICES (NOV 1999)

The Government may require continued performance of any services within the limits and at the rates specified in the contract. These rates may be adjusted only as a result of revisions to prevailing labor rates provided by the Secretary of Labor. The option provision may be exercised more than once, but the total extension of performance hereunder shall not exceed 6 months. The Contracting Officer may exercise the option by written notice to the Contractor within 30 days.

(End of Clause)

C.4 FAR 52.217-9 OPTION TO EXTEND THE TERM OF THE CONTRACT (MAR 2000)

(a) The Government may extend the term of this contract by written notice to the Contractor within 30 days; provided that the Government gives the Contractor a preliminary written notice of its intent to extend at least 60 days before the contract expires. The preliminary notice does not commit the Government to an extension.

(b) If the Government exercises this option, the extended contract shall be considered to include this option clause.

(c) The total duration of this contract, including the exercise of any options under this clause, shall not exceed one (1) year.

(End of Clause)…