36C10B19Q0097-001.docx

VPS Self-Service Kiosk TAC Number: TAC-19-53185

PERFORMANCE WORK STATEMENT (PWS)

DEPARTMENT OF VETERANS AFFAIRS

Office of Veterans Access to Care Veterans Point of Service Program Office

Self- Service Kiosk

Date: November 19, 2018

TAC-19-53185

PWS Version Number: 0.9

Contents

BACKGROUND

VA Veterans Health Administration (VHA) evaluates process and technology improvements to improve clinical, administrative, and other services. The Connected Health (CH) initiative is deploying technologies to virtually connect Veterans with services and create bridges between healthcare and information technology (IT), allowing the delivery of Veteran-centric healthcare, when and where Veterans need it.

Connected Health is about extending the reach of the health care system beyond the traditional brick and mortar walls and empowering patients to assume a greater role for managing their own health. Access to care and exceptional Veteran experience are listed as Department of Veterans Affairs (VA) VHA top priorities. The VA CH initiative is aligning virtual care technologies to create a seamless, unified experience for Veterans by:

· Identifying patient needs to drive the next generation of tools.

· Translating Veteran needs to information and services.

· Developing Health Information Technology (IT) solutions to meet Veteran needs (e.g. reminders, secure email, and video visits)

· Tailoring across platforms to optimize reach (e.g. smart phone, feature phone, web and VA Point of Service Kiosks)

Veterans Point of Service (VPS) program office is an initiative under the Office of Veterans Access to Care (OVAC) that provides Veterans with convenient control of their own health information, while streamlining and standardizing basic patient-facing activities at VA medical centers and community-based clinics nationwide. VPS completed national deployment of over 6,300 kiosks to approximately 161 VA Medical Centers (VAMCs) and their Community Based Outpatient Clinics (CBOCs). The mission of the VPS program office is to provide benefits and services to Veterans of the United States, includes Alaska, Puerto Rico, Guam, Honolulu, and the Philippines while safeguarding their privacy and enhancing their healthcare experience by providing enhanced capabilities to self-report and participate more fully in their care. In meeting these goals, VPS strives to provide high quality, effective, and efficient clinical and business capabilities, along with Information Technology (IT) services to those persons who are responsible for providing care to the Veterans at the point-of-care. In addition, VPS strives to provide high quality health care to Veterans throughout all points of their experience in an effective, timely, and compassionate manner. VA depends on a strong business backing, Information Management (IM), and IT systems to meet mission goals. Leveraging VPS capabilities affords Veterans more opportunities to elevate the role they play in ensuring the accuracy of information critical to the continued delivery of services - taking greater ownership of managing their health, their data, and their relationship with VHA.

The VPS program office aligned under OVAC manages a nationally-deployed patient information exchange software platform that provides Veterans self-service access to easily perform a variety of administrative, financial, and clinical tasks related to their health care services; provide streamlined frontline staff-facing and care provider-facing User Interfaces (UI) and user experiences Leveraging kiosk capabilities affords Veterans more opportunities to elevate the role they play in ensuring the accuracy of information critical to the continued delivery of services - taking greater ownership of managing their health, their data, and their relationship with VHA. The VPS program is currently operating with VetLink hardware and software within the platform, which has a patient-facing UI, a VHA staff-facing UI, and a provider-facing UI that empowers Veteran patients, Caregivers, and VA medical facilities /CBOCs to efficiently and easily transact and perform a variety of administrative, financial, and clinical tasks related to delivery of healthcare services and benefits management in VA and non-VA care environments.

VHA has a need to replenish its depleted hardware inventory of self-service kiosk to meet new hardware kiosk requirements from sites (e.g. opening new Community-Based Outpatient Clinics (CBOC) and/or new clinic spaces). The VPS program office has always maintained a small sufficient inventory of kiosk that can be delivered to sites with a valid need.

APPLICABLE DOCUMENTS

In the performance of the tasks associated with this Performance Work Statement, the Contractor shall comply with the following:

1. 44 U.S.C. § 3541-3549, “Federal Information Security Management Act (FISMA) of 2002”

2. “Federal Information Security Modernization Act of 2014”

3. Federal Information Processing Standards (FIPS) Publication 140-2, “Security Requirements for Cryptographic Modules”

4. FIPS Pub 199. Standards for Security Categorization of Federal Information and Information Systems, February 2004

5. FIPS Pub 200, Minimum Security Requirements for Federal Information and Information Systems, March 2016

6. FIPS Pub 201-2, “Personal Identity Verification of Federal Employees and Contractors,” August 2013

7. 10 U.S.C. § 2224, "Defense Information Assurance Program"

8. Carnegie Mellon Software Engineering Institute, Capability Maturity Model® Integration for Development (CMMI-DEV), Version 1.3 November 2010; and Carnegie Mellon Software Engineering Institute, Capability Maturity Model® Integration for Acquisition (CMMI-ACQ), Version 1.3 November 2010

9. 5 U.S.C. § 552a, as amended, “The Privacy Act of 1974”

10. Public Law 109-461, Veterans Benefits, Health Care, and Information Technology Act of 2006, Title IX, Information Security Matters

11. 42 U.S.C. § 2000d “Title VI of the Civil Rights Act of 1964”

12. VA Directive 0710, “Personnel Security and Suitability Program,” June 4, 2010, http://www.va.gov/vapubs/

13. VA Handbook 0710, Personnel Security and Suitability Security Program, May 2, 2016, http://www.va.gov/vapubs

14. VA Directive and Handbook 6102, “Internet/Intranet Services,” July 15, 2008

15. 36 C.F.R. Part 1194 “Electronic and Information Technology Accessibility Standards,” July 1, 2003

16. Office of Management and Budget (OMB) Circular A-130, “Managing Federal Information as a Strategic Resource,” July 28, 2016

17. 32 C.F.R. Part 199, “Civilian Health and Medical Program of the Uniformed Services (CHAMPUS)”

18. An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule, October 2008

19. Sections 504 and 508 of the Rehabilitation Act (29 U.S.C. § 794d), as amended by the Workforce Investment Act of 1998 (P.L. 105-220), August 7, 1998

20. Homeland Security Presidential Directive (12) (HSPD-12), August 27, 2004

21. VA Directive 6500, “Managing Information Security Risk: VA Information Security Program,” September 20, 2012

22. VA Handbook 6500, “Risk Management Framework for VA Information Systems – Tier 3: VA Information Security Program,” March 10, 2015

23. VA Handbook 6500.1, “Electronic Media Sanitization,” November 03, 2008

24. VA Handbook 6500.2, “Management of Breaches Involving Sensitive Personal Information (SPI)”, July 28, 2016

25. VA Handbook 6500.3, “Assessment, Authorization, And Continuous Monitoring of VA Information Systems,” February 3, 2014

26. VA Handbook 6500.5, “Incorporating Security and Privacy in System Development Lifecycle”, March 22, 2010

27. VA Handbook 6500.6, “Contract Security,” March 12, 2010

28. VA Handbook 6500.8, “Information System Contingency Planning”, April 6, 2011

29. OI&T Process Asset Library (PAL), https://www.va.gov/process/ . Reference Process Maps at https://www.va.gov/process/maps.asp and Artifact templates at https://www.va.gov/process/artifacts.asp

30. One-VA Technical Reference Model (TRM) (reference at https://www.va.gov/trm/TRMHomePage.aspx)

31. VA Directive 6508, “Implementation of Privacy Threshold Analysis and Privacy Impact Assessment,” October 15, 2014

32. VA Handbook 6508.1, “Procedures for Privacy Threshold Analysis and Privacy Impact Assessment,” July 30, 2015

33. VA Handbook 6510, “VA Identity and Access Management”, January 15, 2016

34. VA Directive 6300, Records and Information Management, February 26, 2009

35. VA Handbook, 6300.1, Records Management Procedures, March 24, 2010

36. NIST SP 800-37, Guide for Applying the Risk Management Framework to Federal Information Systems: a Security Life Cycle Approach, June 10, 2014

37. NIST SP 800-53 Rev. 4, Security and Privacy Controls for Federal Information Systems and Organizations, January 22, 2015

38. OMB Memorandum, “Transition to IPv6”, September 28, 2010

39. VA Directive 0735, Homeland Security Presidential Directive 12 (HSPD-12) Program, October 26, 2015

40. VA Handbook 0735, Homeland Security Presidential Directive 12 (HSPD-12) Program, March 24, 2014

41. OMB Memorandum M-06-18, Acquisition of Products and Services for Implementation of HSPD-12, June 30, 2006

42. OMB Memorandum 04-04, E-Authentication Guidance for Federal Agencies, December 16, 2003

43. OMB Memorandum 05-24, Implementation of Homeland Security Presidential Directive (HSPD) 12 – Policy for a Common Identification Standard for Federal Employees and Contractors, August 5, 2005

44. OMB memorandum M-11-11, “Continued Implementation of Homeland Security Presidential Directive (HSPD) 12 – Policy for a Common Identification Standard for Federal Employees and Contractors, February 3, 2011

45. OMB Memorandum, Guidance for Homeland Security Presidential Directive (HSPD) 12 Implementation, May 23, 2008

46. Federal Identity, Credential, and Access Management (FICAM) Roadmap and Implementation Guidance, December 2, 2011

47. NIST SP 800-116, A Recommendation for the Use of Personal Identity Verification (PIV) Credentials in Physical Access Control Systems, November 20, 2008

48. OMB Memorandum M-07-16, Safeguarding Against and Responding to the Breach of Personally Identifiable Information, May 22, 2007

49. NIST SP 800-63-3, 800-63A, 800-63B, 800-63C, Digital Identity Guidelines, June 2017

50. NIST SP 800-157, Guidelines for Derived PIV Credentials, December 2014

51. NIST SP 800-164, Guidelines on Hardware-Rooted Security in Mobile Devices (Draft), October 2012

52. Draft National Institute of Standards and Technology Interagency Report (NISTIR) 7981 Mobile, PIV, and Authentication, March 2014

53. VA Memorandum, VAIQ #7100147, Continued Implementation of Homeland Security Presidential Directive 12 (HSPD-12), April 29, 2011 (reference https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514)

54. IAM Identity Management Business Requirements Guidance document, May 2013, (reference Enterprise Architecture Section, PIV/IAM (reference https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514)

55. VA Memorandum “Mandate to meet PIV Requirements for New and Existing Systems” (VAIQ# 7712300), June 30, 2015, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4846

56. Trusted Internet Connections (TIC) Reference Architecture Document, Version 2.0, Federal Interagency Technical Reference Architectures, Department of Homeland Security, October 1, 2013, https://s3.amazonaws.com/sitesusa/wp-content/uploads/sites/482/2015/04/TIC_Ref_Arch_v2-0_2013.pdf

57. OMB Memorandum M-08-05, “Implementation of Trusted Internet Connections (TIC), November 20, 2007

58. OMB Memorandum M-08-23, Securing the Federal Government’s Domain Name System Infrastructure, August 22, 2008

59. VA Memorandum, VAIQ #7497987, Compliance – Electronic Product Environmental Assessment Tool (EPEAT) – IT Electronic Equipment, August 11, 2014 (reference Document Libraries, EPEAT/Green Purchasing Section, https://www.voa.va.gov/documentlistpublic.aspx?NodeID=552)

60. Sections 524 and 525 of the Energy Independence and Security Act of 2007, (Public Law 110–140), December 19, 2007

61. Section 104 of the Energy Policy Act of 2005, (Public Law 109–58), August 8, 2005

62. Executive Order 13693, “Planning for Federal Sustainability in the Next Decade”, dated March 19, 2015

63. Executive Order 13221, “Energy-Efficient Standby Power Devices,” August 2, 2001

64. VA Directive 0058, “VA Green Purchasing Program”, July 19, 2013

65. VA Handbook 0058, “VA Green Purchasing Program”, July 19, 2013

66. Office of Information Security (OIS) VAIQ #7424808 Memorandum, “Remote Access”, January 15, 2014, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28

67. Clinger-Cohen Act of 1996, 40 U.S.C. §11101 and §11103

68. VA Memorandum, “Implementation of Federal Personal Identity Verification (PIV) Credentials for Federal and Contractor Access to VA IT Systems”, (VAIQ# 7614373) July 9, 2015, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28

69. VA Memorandum “Mandatory Use of PIV Multifactor Authentication to VA Information System” (VAIQ# 7613595), June 30, 2015, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28

70. VA Memorandum “Mandatory Use of PIV Multifactor Authentication for Users with Elevated Privileges” (VAIQ# 7613597), June 30, 2015; https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28

71. VA Memorandum “Use of Personal Email (VAIQ #7581492)”, April 24, 2015, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28

72. VA Memorandum “Updated VA Information Security Rules of Behavior (VAIQ #7823189)”, September, 15, 2017, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28

73. Americans with Disability Act (ADA), https://www.ada.gov/

SCOPE OF WORK

The Contractor shall provide, install and deploy VKiosk model commercial grade, self-service kiosks manufactured by Vecna Technologies, Inc, at the following three VA locations:

1. Veterans Health Care System of the Ozarks - Joplin CBOC 3015 S. Connecticut Ave Joplin, MO 64801

2. Veterans Health Care System of the Ozarks - Springfield CBOC 1850 West Republic Street Springfield, MO 65897

3. VA St. Louis Health Care System Jefferson Barracks VAMC 1 Jefferson Barracks Dr. St. Louis, MO 63106

The hardware shall be forty (40) commercial grade VKiosk model self-service kiosk with appropriate peripherals devices and accessories that are powered by Vecna’ s VetLink proprietary software. The 40 kiosks shall be comprised of twenty-nine (29) self-service freestanding kiosk and eleven (11) self-service tabletop kiosks (also known as desktop) as identified in the table below:

Veterans Health Care System of the Ozarks - Joplin CBOC 3015 S. Connecticut Ave Joplin, MO 64801

Safety/Privacy/Facilities and OIT Teams have concurred with placement of hardware meeting all egress and safety/privacy criteria.

Veterans Health Care System of the Ozarks - Springfield CBOC 1850 West Republic Street Springfield, MO 65897

Safety/Privacy/Facilities and OIT Teams have concurred with placement of hardware meeting all egress and safety/privacy criteria.

VA St. Louis Health Care System Jefferson Barracks VAMC 1 Jefferson Barracks Dr. St. Louis, MO 63106

Data and Power line installation and testing has been confirmed

Safety/Privacy/Facilities and OIT Teams have concurred with placement of hardware meeting all egress and safety/privacy criteria

The Contractor shall provide VKiosk model self-service kiosks that are compatible with VetLink software, as VA infrastructure will remain operating with the existing VetLink software. The scope of this effort does not include replacement of the current software in use.

The Contractor shall perform all services in accordance with VA and VHA regulations, policies, procedures, and instructions as provided in the Applicable Documents Section 2.0 above.

PERFORMANCE DETAILS

PERFORMANCE PERIOD

The period of performance shall be one, 12-month period. Warranty coverage shall not go into effect until actual delivery and successful installation of hardware has been completed and confirmed at the designated VA location.

Any work at the Government site shall not take place on Federal holidays or weekends unless directed by the Contracting Officer (CO). (If required, the CO may designate the Contractor to work during holidays and weekends)

There are ten (10) Federal holidays set by law (USC Title 5 Section 6103) that VA follows:

Under current definitions, four are set by date:

If any of the above falls on a Saturday, then Friday shall be observed as a holiday. Similarly, if one falls on a Sunday, then Monday shall be observed as a holiday.

The other six are set by a day of the week and month:

PLACE OF PERFORMANCE

Tasks under this PWS shall be performed at both Contractor and Government facilities. The Contractor shall be on site, when applicable, to install and deploy the hardware as well as when required during warranty support. As needed and with approval of the COR, the Contractor staff shall visit the three VA locations identified in section 3.0 Scope of Work of this PWS to provide the support defined in the tasks below. Unless otherwise stated in the PWS tasks, tasks shall be performed remotely at Contractor facilities.

TRAVEL

All authorized travel shall be on a Cost Reimbursement, no fee, basis. The Government anticipates travel under this effort to perform work at the three (3) VA locations identified in section 3.0 Scope of Work with prior approval of the Contracting Officer’s Representative (COR). Travel shall be in accordance with the Federal Travel Regulations and requires advanced concurrence by the COR. Contractor within the local commuting area will not be reimbursed. Any travel required due to a change in location or adjustment shall be reviewed and approved by the COR in advance of travel.

SPECIFIC TASKS AND DELIVERABLES

The Contractor shall perform the following tasks detailed below. The Contractor shall be responsible for providing the deliverables listed in the sections below, and conduct all the required services to meet all tasks in the PWS.

For delivery of all project artifacts, the Contract shall utilize approved Process Asset Library (PAL) templates (refer to Section 2.0). When no PAL template exists, the Contractor shall design and develop a template that must be reviewed and approved by the VA Project Manager (PM)/COR prior to delivery of the associated artifact.

The Contractor staff shall follow all Federal regulations and guidelines and shall be required to attend mandatory training – Privacy, Security, Sexual Harassment, Equal Employment Opportunity, and Fire and Safety. Any resource that does not complete VA mandated training shall not be permitted to perform under this effort.

PROJECT MANAGEMENT

KICK-OFF MEETING

The Contractor shall hold a technical kickoff meeting within 10 days after TO award. The Contractor shall present, for review and approval by the Government, the details of the intended approach, work plan, shipment/delivery, and project schedule. The Contractor shall present a Shipment/Delivery schedule including shipment/delivery activities during the meeting.The Contractor shall specify dates, locations (can be virtual), agenda (shall be provided to all attendees at least five (5) calendar days prior to the meeting), and meeting minutes (shall be provided to all attendees within three (3) calendar days after the meeting). The Contractor shall invite the Contracting Officer (CO), Contract Specialist (CS), VPS Asset Manager, Delivery Coordinator, Implementation Manager, COR, and the VA PM.

REPORTING REQUIREMENTS

The Contractor shall provide a Shipment/Delivery Weekly Progress Report based upon a reporting period of Sunday through Saturday to the COR which shall identify:

· Current work including items shipped, the serial number associated with each piece of equipment; the date of each shipment; the status of each shipment, tracking information, and information relative to Government-receipt of the equipment items at each delivery site;

· Planned and actual deliverables;

· Schedule updates;

· Identify any problems and provide a description of how the problems were resolved/addressed. If problems have not been completely resolved, the Contractor shall provide an explanation and status of resolution;

· Installation changes includes planned travel f, that includes the name of the traveler(s), dates, purpose, expected outcome, and cost;

· Risks, issues, and mitigations

The Contractor shall submit Shipment/Delivery Weekly Progress Reports in an electronic form in Microsoft Word and in Microsoft Excel Format to clearly identify each serial number of the equipment being delivered with one (1) serial number per cell.

As part of this activity, the VA VPS Asset Manager shall provide a weekly status report for review to the Contractor. The Contractor review shall confirm all hardware balances under this effort and shall be provided within three (3) business days by email to VA VPS Asset Manager.

The Contractor shall brief the VA COR on the Shipment/Delivery Weekly Progress Report based upon an agreed upon meeting schedule.

The Contractor shall notify the VA PM and VA COR, in writing immediately if shipment/delivery problems arise which adversely impacting the performance of the PWS.

Deliverables:

A. Shipment/Delivery Weekly Progress Report

KIOSK HARDWARE REQUIREMENTS

VPS program office manages a nationally deployed mature patient information exchange software platform that provides Veterans self-service access to patient pre-registration and check-in services, both online and in-facility, via stand-alone kiosks, tablets, and mobile devices. The VPS platform currently operates with VetLink software which will remain operational. This requirement is for self-service kiosk hardware only. The VetLink software has been modified over time to support VA specific requirements. The VPS platform has a patient-facing UI, a VHA staff-facing UI, and a provider-facing UI that empowers Veteran patients, Caregivers, and VAMCs /CBOCs to efficiently and easily transact and perform a variety of administrative, financial, and clinical tasks related to delivery of healthcare services and benefits management in VA.

The Contractor shall provide 40 commercial grade VKiosk self-service kiosks (herein referred to as kiosks) with appropriate peripherals devices and accessories (e.g., Magstrip/barcode reader, thermal printer, and insurance card scanner) that are powered by Vecna’ s VetLink proprietary software. The 40 kiosks shall be comprised of twenty-nine (29) self-service freestanding kiosk and eleven (11) self-service tabletop kiosk (also known as desktops). Note: refer to the variants description below. The Contractor shall provide kiosks that are compatible with VetLink software, as the VA infrastructure will remain operating with the existing VetLink software. The scope of this effort does not include replacement of the current software product in use.

Currently VetLink kiosk hardware and proprietary software provided by Vecna Technologies, Inc., is deployed throughout the VA locations identified in Attachment A. The Contractor shall deliver kiosks that includes freestanding and table top (desktop) form factors, required peripherals (e.g., Magstrip/barcode reader, thermal printer, and insurance card scanner) and accessories (e.g. USB power adapters, power cords and cables) and relevant services (e.g. installation, deployment/activation, warranty) , .The kiosks hardware shall encompass hardware, peripherals, accessories, and any services needed to integrate the kiosk hardware with the VetLink system to meet the VPS Program’s mission requirements.

All kiosks furnished by the Contractor shall meet a System Availability (uptime metric) of 98.0 percent at all VAMC and CBOC facilities. Uptime shall be calculated as: based on the percentage of scheduled production time during which the kiosk is not down.

The hardware shall remain the property of the Contracl until acceptance of the hardware at the specified VA locations.

KIOSK TECHNICAL CHARACTERISTICS

The Contractor shall provide kiosks that meet at least the minimum requirements below for both freestanding and tabletop (desktop):

A. All kiosks delivered shall be ADA, Section 508 and HIPAA compliant B. All kiosks shall meet current VA Directive 6551, VA Directive 6550, and VA Handbook 6500 Handbook requirements C. Must be compatible with the current operating VetLink software at the time of award (NOTE: as of October 29, 2018, version 5.5.3.4 of the software is deployed nationally) D. Interactive touch-screen kiosks with a 17” or larger monitor with:

· privacy filter

· magnetic strip reader,

· proximity sensor,

· dual amplified speakers,

· video camera,

· headphone jack,

· microphone jack,

· audio jack,

· thermal receipt printer,

· card image/bar code scanner E. Ability to be anchored to the floor and/or desktop; and can be unsecured from the floor or desktop by authorized VA staff or personnel F. Tamper proof security with commercial grade locking mechanisms, hinges, and door mechanisms to resist vandalism and theft attempt; self-contained and fully integrated with housing that is secure ; sealed, tamper proof power and data lines G. Cleanable with off the shelf products such as using an ammonia-free cleaning agent along with a lint-free cloth, as well as a can of compressed air H. Meets demands of high 365/7/24 usage in an unattended environment I. All electrical equipment to operate on hardware to be approved for electrical safety by Underwriter’s Laboratory or equivalently listed, and be certified by a Nationally Recognized Testing Laboratory to be compliant with Federal Communications Commission regulations J. Meet industry standard 300dpi high resolution color touch screen video display monitors with a privacy filter which can display 300dpi high resolution digitized photographs, graphics, and video and meet VA Office of Information Technology (OIT)Technical Standards (refer to Section 2.0). Privacy filters shall allow kiosk users to provide and receive confidential information in a public environment while maintaining their privacy. The privacy filter shall not compromise touch screen functionality or responsiveness. The privacy filter shall provide protection from dust. . The finish of the privacy filter shall maintain high image clarity K. Display monitors that are flat to eliminate parallax distortion. The Contractor shall provide monitors that have been treated to minimize reflections and glare.

L. Display screen shall be scratch resistant.

M. Touch screen technology that is surface acoustic or capacitive.

N. Uninterrupted Power Supply backup capability that is line interactive, have LED indicators, an audible alarm to provide visual and audible indicators of the unit’s operation, and provide a minimum of 15 minutes continuous power backup.

O. Capability to return to the application upon restoration of power without the intervention of a system administrator in the event of a complete power failure to the kiosk for periods longer than 15 minutes. .

P. Power supply that has a master switch that controls the kiosk and is easily accessible to authorized personnel.

Q. Surge protection capability to support current and future enhancements and/or additions.

R. Supply any power source(s) needed (i.e., batteries) including spares as applicable.

S. Low power consumption with idle mode.

T. Bar code reader (also refer to as bar code scanner) that can scan and interpret at a swipe speed of 3 to 60 in/sec.: 1-Dimensional; 2-Dimensional and linear barcodes printed on; including but not limited to VA Veteran ID cards and health insurance cards. Ensure bar code reader processes user commands at a speed comparable with or faster than industry standard.

The VA provides enrolled Veterans a Veteran Health Identification Card (VHIC) for use at VA Medical Facilities. The card serves as an identification mechanism for Veterans. It is also used to check-in for VA appointments at select VA facilities. The VHIC Card cannot be used as a credit card or an insurance card, and it does not authorize or pay for care at non-VA facilities. The VHIC card by itself does not serve as a Level II credential, but the proofing activities are at a Level II. The VHIC card provides increased security for Veteran’s personal information (no personally identifiable information is contained on the magnetic stripe or barcode); and displays the emblem of their latest branch of service. Several special awards (e.g., Former Prisoner of War, Service Connection, etc.) are also listed.

U. Magnetic strip reader that can read VA Veteran ID cards, and health insurance cards at a swipe speed of 3 to 60 in/sec; Additionally, magnetic strip reader processes user commands at a speed comparable with or faster than industry standard.

V. Card Scanner Imager that can scan and capture card images (e.g. ID cards and health insurance cards) in less than 1.0 seconds. Additionally, card scanner imager processes user commands at a speed comparable with or faster than industry standard.

W. Thermal receipt printer for printing receipts, coupons, and directions with a print speed of 250mm per second (9 8/10” per second) with cleaning technology which will allow for maintenance. Thermal printer device shall have sealed electronics without moving parts to ensure resistance to damage from dust and water.

X. Provide Wireless Capability.

Y. Designed for interior use.

DELIVERY, INSTALLATION AND ACTIVATION

Prior to the start of installation, the Contractor shall develop and deliver an Implementation Plan (IP) which encompass each VA site for COR/VA PM review. The IP shall, at a minimum, capture all planned installation activities for the three specific sites.

The Contractor shall deliver, install and activate the required quantities below based on the COR/VA PM reviewed Contractor IP.

At the time of installation, all kiosk hardware shall be new. The Contractor shall provide only new equipment and new parts for the required kiosk hardware, as well as any other subcomponents and/or incidental hardware. ABSOLUTELY NO “GRAY MARKET GOODS” shall be provided, to include any subcomponents and/or incidental hardware. Gray Market Goods are defined as genuine branded goods sold outside of an authorized sales-territory (or by non-authorized dealers in an authorized territory) at prices lower than being charged in authorized sales territories (or by authorized dealers).

The Contractor shall bear the responsibility for shipping the kiosks. The Contractor shall supervise packing, unpacking, assembling, and positioning of the kiosks to include, if required, any connections with internal utility services for operational purposes. The Contractor shall ship the kiosks for the VA medical center and the associated CBOCs to the medical center warehouse. When the kiosks arrive at the medical center warehouse, kiosks will be uncrated by Government logistics personnel. Then, Government logistics personnel shall affix asset tags and scan the serial numbers into an Equipment Inventory List (EIL). The CBOCs receive their kiosks from the medical center. The Government logistics personnel and the Contractor move the kiosks to the clinic areas and configure them into the network and the power source.

If damages are sustained either through transit or at a work site which is caused by the Contractor within a 24-hour period of installation, the Contractor shall be responsible to repair the kiosk to factory condition. If repairs are required, the Contactor is required to obtain verification from the designated site field staff that kiosk(s) has been repaired to factory condition.

The Contractor shall be entirely responsible for any loss or damage to his/her own materials, supplies, and equipment, and to the private property of his/her employees during on site installation activities.

Prior to delivery, installation, and activation, the Contractor shall be required to coordinate all tasks with VA VPS Assets Manager.

Prior to shipping, Contractor shall notify VPS Asset Manager by email, of all incoming deliveries including line-by-line details of hardware including Mac Address, Serial Number (SN), and shipment tracking information. Contractor shall not make any changes to the delivery schedule at the request of Site POC.

Contractors shall coordinate deliveries with VPS Asset Manager before shipment of hardware to ensure sites are aware of pending shipments.

All shipments, either single or multiple container deliveries, shall bear the VA IFCAP Purchase Order number and Site lead name on external shipping labels and associated manifests or packing lists. In the case of multiple container deliveries, a statement readable near the VA IFCAP PO number shall indicate total number of containers for the complete shipment (e.g. “Package 1 of 2”), clearly readable on manifests and external shipping labels.

Contractor shall provide Shipping Receipts to VA VPS PM/COR and VA VPS Asset Manager.

The Contractor shall ensure that all planning activities and any contingencies have been coordinated with the VA VPS staff (e.g., PM/COR, Asset Manager and Deployment Manager) such as any changes needed for installation to include cabling of the space, any electrical work required at the facilities, any relocation of electrical service, relocation of furniture, or relocation of existing cabling. If these changes are required, the Government is responsible to complete. All kiosk installations shall comply with building and facilities standards established by the VA. The Contractor shall perform all services in accordance with VA and VHA regulations, policies, procedures, and instructions as provided in the Applicable Documents Section 2.0 above.

When on site, the Contractor shall adhere to and support current VA VPS deployment, delivery and installation management procedures and methodologies. When on site, the Contractor resources shall communicate with site field staff. As part of delivery, installation, and activation activities, the Contractor shall track installation issues and respond to site installation issues/questions.

The Contractor shall test every kiosk to validate that it is recognized by the kiosk server and configured as operational. The kiosks shall be delivered in a “Just-in-Time” format, which requires installation at the time of arrival. The Contractor shall work with the Government on site field staff to install and initiate kiosk operations. The Contractor shall perform any adjustments, repairs, and/or replacements that may be required during installation of the kiosk hardware.

The Contractor shall support installation activities until designated site field staff verify the kiosk is fully operational. Upon completion, the Contractor shall remove all crating and other debris from the VA site.

Upon the completion of installation at each site, the Contractor shall perform final walk through with the VPS Deployment Team and/or site lead personnel to ensure all deployed kiosk hardware is installed and operable. The Contractor is responsible to fix all problems arising from the walk when handing off the kiosk to site lead to Go-Live. Go-live is achieved by completion and COR acceptance of the Go-live site check list in accordance with Attachment VPS Hardware Go-live Site Checklist v0.2.

The Contractor shall deliver Kiosk Hardware Installation and Activation Summary Report which shall include lessons learned to document items that can be improved upon and to document lessons learned issues that need additional consideration. The Contractor shall create and deliver a Kiosk Hardware Installation and Activation Summary after each site installation to the VA PM and COR.

Deliverables:

A. Site Implementation Plan B. Kiosk Hardware Installation and Activation Summary Report C. Shipping Receipts

SOLUTION SPECIFIC KIOSK HARDWARE DOCUMENTATION

The Contractor shall provide any commercial kiosk Hardware Materials such as technical specifications, installation guide/instructions, warranty; and operation and maintenance guide.

The Contractor shall provide any manuals and materials that contains all the procedures necessary to operate and interact with the kiosk hardware such as hardware overview, trouble shooting, monitoring and preventative maintenance tasks (i.e. cleaning).

Deliverable:

A. Hardware Materials and Manuals

WARRANTY

All kiosk hardware delivered shall be covered by a standard, commercial one (1) year warranty. The Contractor shall transfer all manufacturer’s warranties to the Government.

The one (1) year warranty for the kiosk shall not go into effect until actual delivery and installation of hardware have been successfully completed at each of the designated VA location in section 3.0, which is traceable through the Go-Live checklist(s) provided to the COR/VA PM by the site.

The Contractor shall perform all warranty support activities required in coordination with VPS personnel to manage the kiosk warranties.

GENERAL REQUIREMENTS

ENTERPRISE AND IT FRAMEWORK

The Contractor shall support the VA enterprise management framework. In association with the framework, the Contractor shall comply with OIT Technical Reference Model (One-VA TRM). One-VA TRM is one component within the overall Enterprise Architecture (EA) that establishes a common vocabulary and structure for describing the information technology used to develop, operate, and maintain enterprise applications. One-VA TRM includes the Standards Profile and Product List that collectively serves as a VA technology roadmap. ASD has overall responsibility for the One-VA TRM.

The Contractor solution shall support the latest Internet Protocol Version 6 (IPv6) based upon the directives issued by the Office of Management and Budget (OMB) on August 2, 2005 (http://www.whitehouse.gov/sites/default/files/omb/assets/omb/memoranda/fy2005/m05-22.pdf) and September 28, 2010 (https://cio.gov/wp-content/uploads/downloads/2012/09/Transition-to-IPv6.pdf). IPv6 technology, in accordance with the USGv6 Profile (NIST Special Publication (SP) 500-267 http://www-x.antd.nist.gov/usgv6/index.html), the Technical Infrastructure for USGv6 Adoption (http://www.nist.gov/itl/antd/usgv6.cfm), and the NIST SP 800 series applicable compliance (http://csrc.nist.gov/publications/PubsSPs.html) shall be included in all IT infrastructures, application designs, application development, operational systems and sub-systems, and their integration. All public/external facing servers and services (e.g. web, email, DNS, ISP services, etc.) shall support native IPv6 users, and all internal infrastructure and applications shall communicate using native IPv6 operations. Information concerning IPv6 transition in addition to OMB/VA Memoranda can be found at https://www.voa.va.gov/.

The Contractor IT end user solution that is developed for use on standard VA computers shall be compatible with and be supported on the standard VA operating system, currently Windows 7 (64bit), Internet Explorer 9 and Microsoft Office 2010. However, the migration from Windows XP to Windows 7 is not yet complete within all of VA. As a result, compatibility with and support on Windows XP, Internet Explorer 7 and Microsoft Office 2007 are also required until April 2014 when Microsoft’s extended support for Windows XP ends. Applications delivered to the VA and intended to be deployed to Windows XP or 7 workstations shall be delivered as a signed .msi package and updates shall be delivered in signed .msp file formats for easy deployment using System Center Configuration Manager (SCCM) VA’s current desktop application deployment tool. Signing of the software code shall be through a VA trusted code signing authority such as Verizon/Cybertrust or Symantec/VeriSign. The Contractor shall also ensure and certify that their solution functions as expected when used from a standard VA computer, with non-admin, standard user rights that has been configured using the Federal Desktop Core Configuration (FDCC) and United States Government Configuration Baseline (USGCB) specific to the particular client operating system being used.

The Contractor shall utilize PAL, the OIT-wide process management tool that assists in the execution of an IT project (including adherence to VIP standards). It is a one-stop shop providing critical links to the formal approved processes, artifacts, and templates to assist project teams in facilitating their VIP-compliant work. PAL is used to build schedules to meet project requirements, regardless of the development methodology employed.

POSITION/TASK RISK DESIGNATION LEVEL(S) AND CONTRACTOR PERSONNEL SECURITY REQUIREMENTS

POSITION/TASK RISK DESIGNATION LEVEL(S)

The position sensitivity and the level of background investigation commensurate with the required level of access for the following tasks within the Performance Work Statement are as follows:

Position Sensitivity and Background Investigation Requirements

The Tasks identified above and the resulting Position Sensitivity and Background Investigation requirements identify, in effect, the Background Investigation requirements for Contractor individuals, based upon the tasks the Contractor individual will be working. The submitted Contractor Staff Roster must indicate the required Background Investigation Level for each Contractor individual based upon the tasks the Contractor individual will be working, in accordance with their submitted proposal.

CONTRACTOR PERSONNEL SECURITY REQUIREMENTS

Contractor Responsibilities:

1. The Contractor shall prescreen all personnel requiring access to the computer systems to ensure they maintain the appropriate Background Investigation, and are able to read, write, speak and understand the English language.

1. The Contractor shall bear the expense of obtaining background investigations.

1. Within 3 business days after award, the Contractor shall provide a roster of Contractor and Subcontractor employees to the COR to begin their background investigations. The roster shall contain the Contractor’s Full Name, Full Social Security Number, Date of Birth, Place of Birth, and individual background investigation level requirement (based upon Section 6.2 Tasks).

1. The Contractor should coordinate the location of the nearest VA fingerprinting office through the COR. Only electronic fingerprints are authorized.

1. For a Low Risk designation, the following forms are required to be completed: 1. OF-306 and 2. DVA Memorandum – Electronic Fingerprints. For Moderate or High Risk, the following forms are required to be completed: 1. VA Form 0710 and 2. DVA Memorandum – Electronic Fingerprints. These should be submitted to the COR within 5 business days after award.

1. The Contractor personnel will receive an email notification from the Security and Investigation Center (SIC), through the Electronics Questionnaire for Investigations Processes (e-QIP) identifying the website link that includes detailed instructions regarding completion of the investigation documents (SF85, SF85P, or SF 86). The Contractor personnel shall submit all required information related to their background investigations utilizing the Office of Personnel Management’s (OPM) Electronic Questionnaire for Investigations Processing (e-QIP).

1. The Contractor is to certify and release the e-QIP document, print and sign the signature pages, and send them to the COR for electronic submission to the SIC. These should be submitted to the COR within 3 business days of receipt of the e-QIP notification email.

1. The Contractor shall be responsible for the actions of all personnel provided to work for VA under this contract. In the event that damages arise from work performed by Contractor provided personnel, under the auspices of this contract, the Contractor shall be responsible for all resources necessary to remedy the incident.

1. A Contractor may be granted unescorted access to VA facilities and/or access to VA Information Technology resources (network and/or protected data) with a favorably adjudicated Special Agreement Check (SAC) or “Closed, No Issues” (SAC) finger print results, training delineated in VA Handbook 6500.6 (Appendix C, Section 9), and, the signed “Contractor Rules of Behavior.” However, the Contractor will be responsible for the actions of the Contractor personnel they provide to perform work for VA. The investigative history for Contractor personnel working under this contract must be maintained in the database of the Office of Personnel Management (OPM).

1. The Contractor, when notified of an unfavorably adjudicated background investigation on a Contractor employee as determined by the Government, shall withdraw the employee from consideration in working under the contract.

1. Failure to comply with the Contractor personnel security investigative requirements may result in termination of the contract for default.

METHOD AND DISTRIBUTION OF DELIVERABLES

The Contractor shall deliver documentation in electronic format, unless otherwise directed in Section B of the solicitation/contract. Acceptable electronic media include: MS Word 2000/2003/2007/2010, MS Excel 2000/2003/2007/2010, MS PowerPoint 2000/2003/2007/2010, MS Project 2000/2003/2007/2010, MS Access 2000/2003/2007/2010, MS Visio 2000/2002/2003/2007/2010, AutoCAD 2002/2004/2007/2010, and Adobe Postscript Data Format (PDF).

PERFORMANCE METRICS

The table below defines the Performance Standards and Acceptable Performance Levels for Objectives associated with this effort.

Performance Surveillance Method

Delivers complete solution within defined scope

Provides quality written products in conformance with agency standards, which are accurate, complete, clear, concise, readable, and consistent with other documentation

Provides quality knowledge transfer services to the Government

Project Milestones and Schedule Uses Contractor developed Shipment/Delivery Weekly Progress Report to manage work and report progress

Provides engineering services that leverage current expertise in…