36C10B22Q0521 - BHL.pdf

PAGE 1 OF 1. REQUISITION NO.

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NO. 5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

a. NAME b. TELEPHONE NO. (No Collect Calls) 8. OFFER DUE DATE/LOCAL

TIME

9. ISSUED BY CODE 10. THIS ACQUISITION IS UNRESTRICTED OR SET ASIDE: % FOR:

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

8(A)

NAICS:

SIZE STANDARD:

11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

13a. THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700)

13b. RATING

14. METHOD OF SOLICITATION

RFQ IFB RFP

15. DELIVER TO CODE 16. ADMINISTERED BY CODE

17a. CONTRACTOR/OFFEROR CODE FACILITY CODE 18a. PAYMENT WILL BE MADE BY CODE

TELEPHONE NO. UEI: EFT:

PHONE: FAX:

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW IS CHECKED

SEE ADDENDUM

19. 20. 21. 22. 23. 24.

ITEM NO. SCHEDULE OF SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Govt. Use Only)

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA ARE ARE NOT ATTACHED.

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN _______________ 29. AWARD OF CONTRACT: REF. ___________________________________ OFFER

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DATED ________________________________. YOUR OFFER ON SOLICITATION

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY (BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED SET FORTH HEREIN IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30b. NAME AND TITLE OF SIGNER (TYPE OR PRINT) 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (TYPE OR PRINT) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION (REV. NOV 2021)

PREVIOUS EDITION IS NOT USABLE Prescribed by GSA - FAR (48 CFR) 53.212

7. FOR SOLICITATION

INFORMATION CALL:

STANDARD FORM 1449

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

36C10B22Q0521 09/14/2022

Rachel Fromm 848-377-5124 09-19-2022

2PM EDT

36C10B

Department of Veterans Affairs

Technology Acquisition Center

23 Christopher Way

Eatontown NJ 07724

X 100

X

541511

$30 Million

N/A

X

See Delivery Schedule

36C10B

23 Christopher Way

Eatontown NJ 07724

36C10A

Technology Acquisition Center

Financial Services Center

PO Box 149971

Austin TX 78714-8971

RFQ 36C10B22Q0521 Behavioral Health Lab

POCs:

Contracting Officer: David Sette; David.Sette@va.gov

Contract Specialist: Rachel Fromm; Rachel.Fromm@va.gov

X X

David J. Sette

Contracting Officer

36C10B22Q0521

Table of Contents

SECTION B - CONTINUATION OF SF 1449 BLOCKS

B.1 COMBINED SYNOPSIS/SOLICITATION

B.2 GOVERNING LAW…………………………………………………….…………...5

B.3 SOFTWARE LICENSE, MAINTENANCE AND TECHNICAL SUPPORT

B.4 CONTRACT ADMINISTRATION DATA

B.5 SCHEDULE OF DELIVERABLES

B.6 PRODUCT DESCRIPTION

SECTION C - CONTRACT CLAUSES

C.1 52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

C.2 52.204-21 BASIC SAFEGUARDING OF COVERED CONTRACTOR

INFORMATION SYSTEMS (JUN 2016)

C.3 52.212-5 CONTRACT TERMS AND CONDITIONS REQUIRED TO

IMPLEMENT STATUTES OR EXECUTIVE ORDERS—COMMERCIAL

PRODUCTS AND COMMERCIAL SERVICES (MAY 2022)

C.4 52.217-7 OPTION FOR INCREASED QUANTITY—SEPARATELY PRICED

LINE ITEM (MAR 1989)

C.5 52.217-9 OPTION TO EXTEND THE TERM OF THE CONTRACT (MAR 2000)

C.6 52.227-19 COMMERCIAL COMPUTER SOFTWARE LICENSE (DEC

2007)……………………………………………………………………………………..44

C.7 VAAR 852.212-70 PROVISIONS AND CLAUSES APPLICABLE TO VA

ACQUISITION OF COMMERCIAL ITEMS (APR 2020)

SECTION D - CONTRACT DOCUMENTS, EXHIBITS, OR ATTACHMENTS

SECTION E - SOLICITATION PROVISIONS

E.1 52.252-1 SOLICITATION PROVISIONS INCORPORATED BY REFERENCE

(FEB 1998)

E.2 52.204-24 REPRESENTATION REGARDING CERTAIN

TELECOMMUNICATIONS AND VIDEO SURVEILLANCE SERVICES OR

EQUIPMENT (NOV 2021)……………………………………………………..…..…..49

E.3 52.204-26 COVERED TELECOMMUNICATIONS EQUIPMENT OR

SERVICES—REPRESENTATION (OCT 2020)

E.4 52.209-7 INFORMATION REGARDING RESPONSIBILITY MATTERS (OCT

2018)

E.5 OFFEROR REPRESENTATIONS AND CERTIFICATIONS - COMMERCIAL

PRODUCTS AND COMMERCIAL SERIVICES (MAY

2022)……………………………………………………………………………………..53

E.6 52.216-1 TYPE OF CONTRACT (APR 1984)

E.7 52.233-2 SERVICE OF PROTEST (SEP 2006)

E.8 BASIS FOR AWARD………………..……………………………………………..73

E.9 PROPOSAL SUBMISSION INSTRUCTIONS

SECTION B - CONTINUATION OF SF 1449 BLOCKS/SCHEDULE OF

SUPPLIES/SERVICES

B.1 COMBINED SYNOPSIS/SOLICITATION

This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in Subpart 12.6, as supplemented with additional information included in this notice.

This announcement constitutes the only solicitation; proposals are being requested and an additional solicitation will not be issued.

(ii) This solicitation is a Request for Quotation (RFQ), number 36C10B22Q0521

(iii) The solicitation document and incorporated provisions and clauses are those in effect through Federal Acquisition Circular 2022-07.

(iv) This requirement is not being set aside. See accompanying Justification for Other than Full and Open Competition. See 1449 of the RFQ for associated NAICS code and small business size standard.

(v) See Section B in the attached RFQ for the Price Schedule.

(vi) See Section B in the attached RFQ for the Product Description.

(vii) The ordering period for the basic contract shall be 12 months. Freight-On-Board

(FOB) is Destination.

(viii) The provision at 52.212-1, “Instructions to Offerors – Commercial Products and

Commercial Services,” applies to this acquisition. See Section E in the attached RFQ.

(ix) The provision at 52.212-2, “Evaluation -- Commercial Products and Commercial

Services,” does not apply to this acquisition. See Section E in the attached RFQ for the

Evaluation procedures and Basis for Award.

(x) Offerors shall include a completed copy of the provision at 52.212-3, “Offeror

Representations and Certifications -- Commercial Products and Commercial Services,” with its offer. See Section E in the attached RFQ.

(xi) The clause at 52.212-4, “Contract Terms and Conditions -- Commercial Products and

Commercial Services,” applies to this acquisition. See Section C in the attached RFQ.

(xii) The clause at 52.212-5, “Contract Terms and Conditions Required To Implement

Statutes Or Executive Orders -- Commercial Products and Commercial Services,” applies to this acquisition. See Section C in the attached RFQ.

(xiii) See Section B in the attached RFQ regarding requirements for Software License, Maintenance, and Technical Support.

(xv) Offers are due by 2:00PM ET on September 19, 2022. Please see submission instructions in Section E.9 in the attached RFQ.

(xvi) Please contact Contract Specialist Rachel Fromm; Rachel.Fromm@va.gov, 848-

377-5124, or Contracting Officer David Sette, David.Sette@va.gov, 848-377-5041 for information regarding the solicitation.

B.2 GOVERNING LAW

Federal law and regulations, including the Federal Acquisition Regulations (FAR), shall govern this Contract. Commercial license agreements may be made a part of this Contract but only if both parties expressly make them an addendum hereto, as permitted by FAR 12.212. If the commercial license agreement is not made an addendum, it shall not apply, govern, be a part of or have any effect whatsoever on the Contract; this includes, but is not limited to, any agreement embedded in the computer software (clickwrap), any agreement that is otherwise delivered with or provided to the Government with the commercial computer software or documentation

(shrinkwrap), or any other license agreement otherwise referred to in any document. If a commercial license agreement is made an addendum, only those provisions addressing data rights regarding the Government’s use, duplication and disclosure of data (e.g., restricted computer software) are included and made a part of this Contract, and only to the extent that those provisions are not duplicative or inconsistent with Federal law, Federal regulation, the incorporated FAR clauses and the provisions of this Contract; those provisions in the commercial license agreement that do not address data rights regarding the Government’s use, duplication and disclosure of data shall not be included or made a part of the Contract. Federal law and regulation including, without limitation, the Contract Disputes Act (41 U.S.C. § 7101 et seq.), the Anti-Deficiency Act (31 U.S.C. § 1341 et seq.), the Competition in Contracting Act (41

U.S.C. § 3301 et seq.), the Prompt Payment Act (31 U.S.C. § 3901 et seq.), Contracts for Data

Processing or Maintenance (38 U.S.C. § 5725), and FAR clauses 52.212-4, 52.227-14, 52.227-19 shall supersede, control, and render ineffective any inconsistent, conflicting, or duplicative provision in any commercial license agreement. In the event of conflict between this clause and any provision in the Contract or the commercial license agreement or elsewhere, the terms of this clause shall prevail. The Contractor shall deliver to the Government all data first produced under this Contract with unlimited rights as defined by FAR 52.227-14. Claims of patent or copyright infringement brought against the Government as a party shall be defended by the U.S.

Department of Justice (DOJ) in accordance with 28 U.S.C. § 516; at the discretion of DOJ, the

Contractor may be allowed reasonable participation in the defense of the litigation. Any additional changes to the Contract must be made by modification (Standard Form 30) and shall only be made by a warranted Contracting Officer. Nothing in this Contract or any commercial license agreement shall be construed as a waiver of sovereign immunity.

B.3 SOFTWARE LICENSE, MAINTENANCE AND TECHNICAL SUPPORT

(1) Definitions.

a) Licensee. The term “licensee” shall mean the U.S. Department of Veterans Affairs

(“VA”) and is synonymous with “Government.”

b) Licensor. The term “licensor” shall mean the Contractor having the necessary license or ownership rights to deliver license, software maintenance and support of the computer software being acquired. The term “Contractor” is the party identified in Block 17a on the SF1449. If the Contractor is a reseller and not the Licensor, the

Contractor remains responsible for performance under this order.

c) Software. The term “software” shall mean the licensed computer software product(s) cited in the Price Schedule.

d) Maintenance. The term “maintenance” is the process of enhancing and optimizing software, as well as remedying defects. It shall include all new fixes, patches, releases, updates, versions, and upgrades, as further defined below.

e) Technical Support. The term “technical support” refers to the range of services providing assistance for the software via the telephone, email, a website or otherwise.

f) Release or Update. The term “release” or “update” are terms that refer to a revision of software that contains defect corrections, minor enhancements or improvements of the software’s functionality. This is usually designated by a change in the number to the right of the decimal point (e.g., from Version 5.3 to 5.4). An example of an update is the addition of new hardware.

g) Version or Upgrade. The term “version” or “upgrade” are terms that refer to a revision of software that contains new or improved functionality. This is usually designated by a change in the number to the left of the decimal point (e.g., from

Version 5.4 to 6).

(2) Software License

a) Unless otherwise stated in the Price Schedule, the Performance Work Statement or

Product Description, the software license provided to the Government is a perpetual, nonexclusive license to use the software

b) The Government may use the software in a networked environment.

c) Any dispute regarding the license grant or usage limitations shall be resolved in accordance with the Disputes Clause incorporated in FAR 52.212-4(d).

d) All limitations of software usage are expressly stated in the Price Schedule and the

Performance Work Statement/Product Description.

(3) Software Maintenance and Technical Support

a) If the Government desires to continue software maintenance and support beyond the period of performance identified in this contract or order, the Government will issue a separate contract or order for maintenance and support. Conversely, if a contract or order for continuing software maintenance and technical support is not received the Contractor is neither authorized nor permitted to renew any of the previously furnished services.

b) The Contractor shall provide software support services, which includes periodic updates, enhancements and corrections to the software, and reasonable technical support, all of which are customarily provided by the Contractor to its commercial customers so as to cause the software to perform according to its specifications, documentation or demonstrated claims.

c) Any telephone support provided by Contractor shall be at no additional cost.

d) The Contractor shall provide all maintenance services in a timely manner in accordance with the Contractor’s customary practice or as defined in the

Performance Work Statement or Product Description. However, prolonged delay

(exceeding 2 business days) in resolving software problems will be noted in the

Government’s various past performance records on the Contractor (e.g., www.cpars.gov).

e) If the Government allows the maintenance and support to lapse and subsequently wishes to reinstate it, any reinstatement fee charged shall not exceed the amounts that would have been charged if the Government had not allowed the subscription to lapse.

(4) Disabling Software Code. The Government requires delivery of computer software that does not contain any code that will, upon the occurrence or the nonoccurrence of any event, disable the software. Such code includes but is not limited to a computer virus, restrictive key, node lock, time-out or other function, whether implemented by electronic, mechanical, or other means, which limits or hinders the use or access to any computer software based on residency on a specific hardware configuration, frequency of duration of use, or other limiting criteria. If any such disabling code is present, the Contractor agrees to indemnify the Government for all damages suffered as a result of a disabling caused by such code, and the Contractor agrees to remove such code upon the

Government’s request at no extra cost to the Government. Inability of the Contractor to remove the disabling software code will be considered an inexcusable delay and a material breach of contract, and the Government may exercise its right to terminate for cause. In addition, the Government is permitted to remove the code as it deems appropriate and charge the Contractor for consideration for the time and effort expended in removing the code.

(5) Manuals and Publications. Upon Government request, the Contractor shall furnish the most current version of the user manual and publications for all products/services provided under this contract/order at no cost.

http://www.cpars.gov/

B.4 CONTRACT ADMINISTRATION DATA

(continuation from Standard Form 1449, block 18A.)

1. Contract Administration: All contract administration matters will be handled by the following individuals:

a. CONTRACTOR: TBD

b. GOVERNMENT: David Sette

Contracting Officer 36C10B

2. CONTRACTOR REMITTANCE ADDRESS: All payments by the Government to the contractor will be made in accordance with:

[X] 52.232-33, Payment by Electronic Funds Transfer—System For Award

Management, or

[] 52.232-36, Payment by Third Party

3. INVOICES: Invoices shall be submitted in arrears:

a. Quarterly []

b. Semi-Annually []

c. Other [X] In accordance with B.5 Price Schedule

4. GOVERNMENT INVOICE ADDRESS: All Invoices from the contractor shall be submitted electronically in accordance with VAAR Clause 852.232-72 Electronic Submission of

Payment Requests.

5. ACKNOWLEDGMENT OF AMENDMENTS: The offeror acknowledges receipt of amendments to the Solicitation numbered and dated as follows:

AMENDMENT NO DATE

B.5 SCHEDULE OF DELIVERABLES

Inspection/Acceptance: FOB Destination.

BASE PERIOD

THE PERIOD OF PERFORMANCE (PoP) SHALL BE 12 MONTHS.

CONTRACT

LINE ITEM

NUMBER

(CLIN)

DESCRIPTION QTY UNIT UNIT PRICE TOTAL PRICE

0001 Software, Software Updates, Software Maintenance, and

Technical Support for all CSD

BHL Software Installation Sites in accordance with (IAW) the

Product Description Section 1.1 –

1.5.

This Firm Fixed Price (FFP)

Contract Line-Item Number

(CLIN) includes all labor, materials, project management and deliverables required for the successful completion of the services detailed in PD paragraph 1.0, inclusive of all subsections 1.1 through 1.5.

12 MO $ $

0002 Monthly Progress Reports IAW the PD Section 1.1.

Delivery shall be by the fifth business day of every month.

Price of this item shall be included in and allocated to Contract Line

Item (CLIN) 0001.

12 EA Not Separately

Priced (NSP)

NSP

0003 Monthly Technical Support Report

IAW the PD Section 1.3.

Delivery shall be by the fifth business day of every month.

Price of this item shall be included in and allocated to CLIN 0001.

12 EA NSP NSP

0004 Contractor Staff Report IAW the

Product Description Section 3.3.

1 LO NSP NSP

Contractor Staff Report to be delivered and updated IAW the

Contractor Responsibilities section of the PD. Price of this item shall be included in and allocated to

CLIN 0001.

0005 Suicide Prevention Tasks IAW with PD Section 1.6

This FFP CLIN includes all labor, materials, project management and deliverables required for the successful completion of the services detailed in PD paragraph 1.6.

12 MO $ $

0006 Northeast Program Evaluation

Center (NEPEC) Tasks IAW with

PD Section 1.7.

This FFP CLIN includes all labor, materials, project management and deliverables required for the successful completion of the services detailed in PD paragraph 1.7.

12 MO $ $

Total Base Period:

Option Period One

This 12-month option period may be exercised IAW FAR 52.217-9, Option to Extend the Term of the

Contract (MAR 2000). Work shall not commence until, and unless, a formal modification is issued by the

Contracting Officer. If exercised, this option shall commence immediately after expiration of the Base

Period.

LINE ITEM DESCRIPTION QTY UNIT

UNIT

PRICE

TOTAL

PRICE

1001 Software Updates, Software

Maintenance, and Technical

Support for all CSD BHL Software

Installation Sites in accordance with (IAW) the PD.

Contract Line-Item Number

(CLIN) includes all labor, materials, project management and deliverables required for the successful completion of the services detailed in PD paragraph 1.0, inclusive of all

1002 Monthly Progress Reports IAW the PD Section 1.1.

Delivery shall be by the fifth business day of every month. Cost of this item shall be included in

CLIN 1001.

12 EA Not Separately

Priced (NSP)

NSP

1003 Monthly Technical Support Report

IAW the PD Section 1.3.

Delivery shall be by the fifth business day of every month. Cost of this item shall be included in

CLIN 1001.

12 EA NSP NSP

1004 Contractor Staff Report IAW the

PD Section 3.3.

Contractor Staff Report to be delivered and updated IAW the

Contractor Responsibilities section of the PD. Cost of this item shall be included in CLIN 1001.

1 LO NSP NSP

Total Option Period One: $

Option Period Two

This 12-month option period may be exercised IAW FAR 52.217-9, Option to Extend the Term of the

Contract (MAR 2000). Work shall not commence until, and unless, a formal modification is issued by the

Contracting Officer. If exercised, this option shall commence immediately after expiration of Option

Period One.

2001 Software Updates, Software

Maintenance, and Technical Support for all CSD BHL Software Installation

Sites in accordance with (IAW) the

PD.

Contract Line-Item Number (CLIN) includes all labor, materials, project management and deliverables required for the successful completion of the services detailed in

PD paragraph 1.0, inclusive of all

2002 Monthly Progress Reports IAW the PD

Section 1.1.

Delivery shall be by the fifth business day of every month. Cost of this item shall be included in CLIN 2001.

12 EA Not

Separately

Priced

(NSP)

NSP

2003 Monthly Technical Support Report

IAW the PD Section 1.3.

Delivery shall be by the fifth business day of every month. Cost of this item shall be included in CLIN 2001.

12 EA NSP NSP

2004 Contractor Staff Report IAW the PD

Section 3.3.

Contractor Staff Report to be delivered and updated IAW the Contractor

Responsibilities section of the PD.

Cost of this item shall be included in

CLIN 2001.

1 LO NSP NSP

Total Option Period Two: $

Optional Task

3000 Suicide Prevention Tasks IAW with

PD Section 1.8.

This optional task may be exercised at any time, up to three times, during the Base Period and Option

Periods, at the Government’s discretion, IAW FAR 52.217-7

Option for Increase Quantity-

Separately Priced Line Item.

Period of Performance: 12 months.

3 EA $ $

Total Optional Tasks: $

Total Contract Value: $

B.6 PRODUCT DESCRIPTION

PRODUCT DESCRIPTION (PD)

DEPARTMENT OF VETERANS AFFAIRS

Office of Information and Technology

Office of Mental Health Services

Veterans Integrated Service Network 4

Mental Illness Research and Education Clinical Center

Behavioral Health Lab (BHL) Software

Maintenance and Technical Support

Date: July 25, 2022

VA-22-000062887

Product Description Version Number: 4.0

1.0 PRODUCT REQUIREMENTS

The Department of Veterans Affairs (VA), Veterans Health Administration (VHA), Office of

Mental Health Services, Veteran Integrated Service Network (VISN) 4, Mental Illness Research

Education and Clinical Center (MIRECC), has a requirement for the renewal of software, maintenance and technical support for existing brand name Capital Solution Design (CSD) BHL software used throughout VA Medical Centers (VAMCs) for delivering evidence-based and measurement-based mental health care within various clinical settings with a focus on supporting integrated primary care/behavioral health care. This software is currently installed in 128

VAMCs and provides for regular structured assessments to monitor patient progress and determine when treatment adjustments or additional resources are needed to ensure Veterans are contacted and monitored on a regular basis. This software also provides clinical program informatics support that allows for tracking patients over time, monitoring patients’ symptoms, and accessing patient and program level data. The Contractor shall provide software maintenance services as identified in the subtasks below. This shall consist of all updates, patches, fixes, and security resolutions developed by CSD. The technical support services are required via email, telephone, or web portal, and shall provide for the analysis, troubleshooting, and resolution of any software product-related problems or questions encountered by

Government users with the CSD software products. It shall also include assessments and data feeds from the BHL data to the VA Office of Mental Health and Suicide Prevention (OMHSP) program evaluation team and close coordination with the Behavioral Health Council for the

Cerner transition to ensure that suicide prevention data is properly incorporated into Cerner medical records from BHL. These software maintenance and technical support services will ensure the current software is continually updated and remains fully operational.

The Period of Performance shall be a 12-month Base Period commencing on September 26, 2022 through September 25, 2023 with two (2) 12-month Option Periods, if exercised, and one

Optional Task which may be exercised at any time, at the Government’s discretion, during the

Base and Option Periods.

1.1 REPORTING REQUIREMENTS

The Contractor shall provide the Contracting Officer’s Representative (COR) with Monthly

Progress Reports in electronic form in Microsoft Word and Project formats. The report shall include detailed instructions/explanations for each required data element, to ensure that data is accurate and consistent. These reports shall reflect data as of the last day of the preceding month.

The Monthly Progress Reports shall cover all work completed during the reporting period and work planned for the subsequent reporting period. The report shall also identify any problems that arose and a description of how the problems were resolved. If problems have not been completely resolved, the Contractor shall provide an explanation including their plan and timeframe for resolving the issue. The report shall also include an itemized list of all Electronic and Information Technology (EIT) deliverables and their current Section 508 conformance status. It is expected that the Contractor will keep in communication with VA accordingly so that issues that arise are transparent to both parties to prevent escalation of outstanding issues.

Deliverable:

Monthly Progress Report

1.2 WEEKLY, BI-MONTHLY AND AD-HOC TELECONFERENCES

The Contractor shall participate in bi-monthly teleconferences with representatives of the

OMHSP and VISN 4 MIRECC for ongoing project management review and discussions of priorities for upgrades and enhancements. The Contractor shall also participate in weekly conferences with representatives of the OMHSP for ongoing project management review and discussions of priorities for upgrades and enhancements. Ad-hoc calls may be necessary for urgent issues such as a system failure, deadlines that are urgent for the Government

Accountability Office, Inspector General or Congressional inquiries, or an unforeseen problem.

1.3 CLINICAL AND ADVANCED TECHNICAL SUPPORT SERVICES

The Contractor shall provide clinical and technical support to site users for all BHL software installed, to include User account configuration (multi-site), single sign-on and Cerner transmission (all tasks enabling new suicide prevention assessments to transfer to Cerner). The

Contractor shall also manage ad-hoc meetings with Cerner and the Behavioral Health council to identify assessment priority; define Cerner and CSD implementation assessment tasks; configure assessment mapping information; identify deployment dates; and coordinate rollout with Clinical

Suicide Prevention teams.

The support required ranges from normal to high priority to include log in issues, clinical set ups, platform crashes, and server downtime. The frequency of calls is on average 61 calls per month, one (1) to four (4) calls a day, Monday through Friday. (Calls may increase 5-10% due to the suicide prevention assessments.) Support services shall be provided Monday through Friday from

9:00 AM until 5:00 PM Eastern Standard Time (EST). The Contractor shall provide virtual remote clinical and technical support to manage user calls, create trouble tickets, and provide responses within four hours of a request. The Contractor shall provide a Monthly Technical Support Report to track all assistance support provided and the time it took to resolve issues.

Monthly Technical Support Report

1.4 MAINTENANCE AND INSTALLATION SUPPORT

The Contractor shall provide maintenance and technical support for all BHL software installation sites (currently 128) to ensure the BHL software remains operational. This shall include troubleshooting and software defect fixes for the BHL software applications and related databases. The Contractor shall upgrade any defect fixes for the BHL software to all the other installation sites. The Contractor shall also provide technical support for site audit, site inspection, backup issues and security issues to be handled through a help desk service operating Monday through Friday, 9:00AM until 5:00PM Eastern Standard Time.

1.5 BHL UPGRADES

The Contractor shall upgrade the BHL software code and database platform to include any security, deployed user feedback, and VA Standards based functional enhancements for all BHL users. This shall include new BHL measures to specifically support the Suicide Prevention (SP)

2.0 Program. This service encompasses changes requested by VA to be made to the BHL including:

➢ Operational sustainment task support

• Helpdesk

• Backup & Restoration

• System Upgrades

➢ Defect resolution and maintenance of:

• Assessment logic

• Reports

• Administrative functions

• Security

• Electronic Health Records interface modifications

• General BHL Software functions

➢ Assessment modules required by OMHSP

➢ VA specific documentation for security, policy or other required documents

1.6 Suicide Prevention Tasks (Base Period Only)

The Contractor shall provide programming and support for OMHSP’s program evaluation efforts, related to the SP 2.0 program. Assessments shall include Columbia Suicide Rating Scale, a hopelessness measure, and several treatment forms specific to Suicide Prevention Program.

These measures shall be completed in the base year of the contract.

The Contractor shall perform the following tasks:

• Building and testing new/existing program evaluation forms

• Close coordination with the Behavioral Health Council for the Cerner transition to ensure data is properly incorporated into Cerner medical records from BHL as appropriate. This requires regular calls with Contractor to review any standing business or issues regarding

Cerner integration.

• Support of user account configuration (multi-site), single sign-on and Cerner transmission (all tasks enabling new suicide prevention assessments to transfer to Cerner)

• Configure assessment mapping information, identify deployment dates and coordinate rollout with OMHSP teams

• Assist OMHSP with getting assessments approved for national use.

1.7 Northeast Program Evaluation Center Tasks (Base Period Only)

The Contractor shall provide programming and support for OMHSP’s Northeast Program

Evaluation Center (NEPEC). Assessments shall include Columbia Suicide Rating Scale, a hopelessness measure and several treatment forms specific to NEPEC. These measures shall be completed in the base year of the contract.

The Contractor shall perform the following tasks:

• Building and testing new/existing program evaluation forms

• Close coordination with the Behavioral Health Council for the Cerner transition to ensure data is properly incorporated into Cerner medical records from BHL as appropriate. This requires regular calls with Contractor to review any standing business or issues regarding

Cerner integration.

• Support of user account configuration (multi-site), single sign-on and Cerner transmission (all tasks enabling new suicide prevention assessments to transfer to Cerner)

• Configure assessment mapping information, identify deployment dates and coordinate rollout with OMHSP teams

• Assist OMHSP with getting assessments approved for national use.

1.8 Suicide Prevention Optional Task

The Contractor shall provide programming and support for OMHSP’s program evaluation efforts related to the SP 2.0 program and those needed by Northeast Program Evaluation Center

(NEPEC). This task may be exercised, at any time, up to three times, in the Base Year and in the

Option Years.

The Contractor shall perform the following tasks:

• Building and testing new/existing program evaluation forms, making additional changes to forms as needed, and assisting with deployment of forms to field sites; it is estimated based on historical data that this task shall require an estimated 2.6 Full Time Employees for the Base year, less as forms are complete and functioning. Regular maintenance and field support would be needed thereafter during the Option Periods; it is estimated based on historical data this task will require one less FTE during the Option Periods.

• Close coordination with the Behavioral Health Council for the Cerner transition to ensure that program evaluation data is properly incorporated into Cerner medical records from

BH as appropriate

• Support of user account configuration (multi-site), single sign-on and Cerner transmission (all tasks enabling new suicide prevention assessments to transfer to Cerner)

• Configure assessment mapping information, identify deployment dates, and coordinate rollout with OMHSP teams

• Assist OMHSP with getting assessments approved for national use as needed

• Building data feeds of form data to OMHSP/NEPEC servers and workspaces

• Regular conferences with representatives of the OMHSP for ongoing project management review and discussions of priorities for upgrades and enhancements

2.0 NOTICE OF THE FEDERAL ACCESSIBILITY LAW AFFECTING ALL

INFORMATION AND COMMUNICATION TECHNOLOGY (ICT)

PROCUREMENTS (SECTION 508)

On January 18, 2017, the Architectural and Transportation Barriers Compliance Board (Access

Board) revised and updated, in a single rulemaking, standards for electronic and information technology developed, procured, maintained, or used by Federal agencies covered by Section

508 of the Rehabilitation Act of 1973, as well as our guidelines for telecommunications equipment and customer premises equipment covered by Section 255 of the Communications

Act of 1934. The revisions and updates to the Section 508-based standards and Section 255-based guidelines are intended to ensure that information and communication technology (ICT) covered by the respective statutes is accessible to and usable by individuals with disabilities.

2.1 SECTION 508 – INFORMATION AND COMMUNICATION TECHNOLOGY

(ICT) STANDARDS

The Section 508 standards established by the Access Board are incorporated into, and made part of all VA orders, solicitations and purchase orders developed to procure ICT. These standards are found in their entirety at: https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines. A printed copy of the standards will be supplied upon request.

Federal agencies must comply with the updated Section 508 Standards beginning on January 18, 2018. The Final Rule as published in the Federal Register is available from the Access Board:

https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule.

The Contractor shall comply with “508 Chapter 2: Scoping Requirements” for all electronic ICT and content delivered under this contract. Specifically, as appropriate for the technology and its functionality, the Contractor shall comply with the technical standards marked here:

E205 Electronic Content – (Accessibility Standard -WCAG 2.0 Level A and AA

Guidelines)

E204 Functional Performance Criteria

E206 Hardware Requirements

E207 Software Requirements

E208 Support Documentation and Services Requirements

2.2 COMPATABILITY WITH ASSISTIVE TECHNOLOGY

The standards do not require installation of specific accessibility-related software or attachment of an assistive technology device. Section 508 requires that ICT be compatible with such software and devices so that ICT can be accessible to and usable by individuals using assistive technology, including but not limited to screen readers, screen magnifiers, and speech recognition software.

2.3 ACCEPTANCE AND ACCEPTANCE TESTING

Deliverables resulting from this solicitation will be accepted based in part on satisfaction of the

Section 508 Chapter 2: Scoping Requirements standards identified above.

The Government reserves the right to test for Section 508 Compliance before delivery. The

Contractor shall be able to demonstrate Section 508 Compliance upon Deliverables resulting from this solicitation will be accepted based in part on satisfaction of the Section 508 Chapter 2:

Scoping Requirements standards identified above.

The Government reserves the right to test for Section 508 Compliance before delivery. The

Contractor shall be able to demonstrate Section 508 Compliance upon delivery.

3.0 GENERAL REQUIREMENTS

3.1 VA TECHNICAL REFERENCE MODEL

https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule

The Contractor shall support the VA enterprise management framework. In association with the framework, the Contractor shall comply with OI&T Technical Reference Model (VA TRM).

The VA TRM is one component within the overall Enterprise Architecture (EA) that establishes a common vocabulary and structure for describing the information technology used to develop, operate, and maintain enterprise applications. Moreover, the VA TRM, which includes the

Standards Profile and Product List, serves as a technology roadmap and tool for supporting

OI&T. Architecture & Engineering Services (AES) has overall responsibility for the VA TRM.

3.2 SOCIAL SECURITY NUMBER (SSN) REDUCTION

The Contractor solution shall support the Social Security Number (SSN) Fraud Prevention Act

(FPA) of 2017 which prohibits the inclusion of SSNs on any document sent by mail. The

Contractor support shall also be performed in accordance with Section 240 of the Consolidated

Appropriations Act (CAA) 2018, enacted March 23, 2018, which mandates VA to discontinue using SSNs to identify individuals in all VA information systems as the Primary Identifier. The

Contractor shall ensure that any new IT solution discontinues the use of SSN as the Primary

Identifier to replace the SSN with the Integrated Control Number (ICN) in all VA information systems for all individuals. The Contractor shall ensure that all Contractor delivered applications and systems integrate with the VA Master Person Index (MPI) for identity traits to include the use of the ICN as the Primary Identifier.

3.3 POSITION/TASK RISK DESIGNATION LEVEL(S)

In accordance with VA Handbook 0710, Personnel Security and Suitability Program, the position sensitivity and the level of background investigation commensurate with the required level of access for the following tasks within the PD are:

Position Sensitivity and Background Investigation Requirements by Service Task/Item Number

Service Task/

Item Number

Tier1 / Low Risk Tier 2 / Moderate

Risk

Tier 4 / High Risk

Software Upgrades, Software

Maintenance, and

Technical Support

The Tasks identified above, and the resulting Position Sensitivity and Background Investigation requirements identify, in effect, the Background Investigation requirements for Contractor individuals, based upon the tasks the particular Contractor individual will be working. The submitted Contractor Staff Roster must indicate the required Background Investigation Level for each Contractor individual based upon the tasks the Contractor individual will be working, in accordance with their submitted proposal.

A. Contractor Staff Roster

ADDENDUM B – VA INFORMATION AND INFORMATION SYSTEM

SECURITY/PRIVACY LANGUAGE

APPLICABLE PARAGRAPHS TAILORED FROM: THE VA INFORMATION AND

INFORMATION SYSTEM SECURITY/PRIVACY LANGUAGE, VA HANDBOOK

6500.6, APPENDIX C, MARCH 12, 2010

B1. GENERAL

Contractors, Contractor personnel, Subcontractors, and Subcontractor personnel shall be subject to the same Federal laws, regulations, standards, and VA Directives and Handbooks as VA and

VA personnel regarding information and information system security.

B2. ACCESS TO VA INFORMATION AND VA INFORMATION SYSTEMS

a. A Contractor/Subcontractor shall request logical (technical) or physical access to VA information and VA information systems for their employees, Subcontractors, and affiliates only to the extent necessary to perform the services specified in the contract, agreement, or task order.

b. All Contractors, Subcontractors, and third-party servicers and associates working with

VA information are subject to the same investigative requirements as those of VA appointees or employees who have access to the same types of information. The level and process of background security investigations for Contractors must be in accordance with VA Directive and

Handbook 0710, Personnel Suitability and Security Program. The Office for Operations, Security, and Preparedness is responsible for these policies and procedures.

c. Contract personnel who require access to national security programs must have a valid security clearance. National Industrial Security Program (NISP) was established by Executive

Order 12829 to ensure that cleared U.S. defense industry contract personnel safeguard the classified information in their possession while performing work on contracts, programs, bids, or research and development efforts. The Department of Veterans Affairs does not have a

Memorandum of Agreement with Defense Security Service (DSS). Verification of a Security

Clearance must be processed through the Special Security Officer located in the Planning and

National Security Service within the Office of Operations, Security, and Preparedness.

d. Custom software development and outsourced operations must be located in the U.S. to the maximum extent practical. If such services are proposed to be performed abroad and are not disallowed by other VA policy or mandates (e.g., Business Associate Agreement, Section 3G), the Contractor/Subcontractor must state where all non-U.S. services are provided and detail a security plan, deemed to be acceptable by VA, specifically to address mitigation of the resulting problems of communication, control, data protection, and so forth. Location within the U.S. may be an evaluation factor.

e. The Contractor or Subcontractor must notify the CO immediately when an employee working on a VA system or with access to VA information is reassigned or leaves the Contractor or Subcontractor’s employ. The CO must also be notified immediately by the Contractor or

Subcontractor prior to an unfriendly termination.

B3. VA INFORMATION CUSTODIAL LANGUAGE

1. Information made available to the Contractor or Subcontractor by VA for the performance or administration of this contract or information developed by the

Contractor/Subcontractor in performance or administration of the contract shall be used only for those purposes and shall not be used in any other way without the prior written agreement of VA.

This clause expressly limits the Contractor/Subcontractor's rights to use data as described in

Rights in Data - General, FAR 52.227-14(d) (1).

2. VA information should not be co-mingled, if possible, with any other data on the

Contractors/Subcontractor’s information systems or media storage systems in order to ensure VA requirements related to data protection and media sanitization can be met. If co-mingling must be allowed to meet the requirements of the business need, the Contractor must ensure that VA information is returned to VA or destroyed in accordance with VA’s sanitization requirements.

VA reserves the right to conduct onsite inspections of Contractor and Subcontractor IT resources to ensure data security controls, separation of data and job duties, and destruction/media sanitization procedures are in compliance with VA directive requirements.

3. Prior to termination or completion of this contract, Contractor/Subcontractor must not destroy information received from VA, or gathered/created by the Contractor in the course of performing this contract without prior written approval by VA. Any data destruction done on behalf of VA by a Contractor/Subcontractor must be done in accordance with National Archives and Records Administration (NARA) requirements as outlined in VA Directive 6300, Records and Information Management and its Handbook 6300.1 Records Management Procedures, applicable VA Records Control Schedules, and VA Handbook 6500.1, Electronic Media

Sanitization. Self-certification by the Contractor that the data destruction requirements above have been met must be sent to the VA CO within 30 days of termination of the contract.

4. The Contractor/Subcontractor must receive, gather, store, back up, maintain, use, disclose and dispose of VA information only in compliance with the terms of the contract and applicable

Federal and VA information confidentiality and security laws, regulations, and policies. If

Federal or VA information confidentiality and security laws, regulations and policies become applicable to VA information or information systems after execution of the contract, or if NIST issues or updates applicable FIPS or Special Publications (SP) after execution of this contract, the parties agree to negotiate in good faith to implement the information confidentiality and security laws, regulations, and policies in this contract.

5. The Contractor/Subcontractor shall not make copies of VA information except as authorized and necessary to perform the terms of the agreement or to preserve electronic information stored on Contractor/Subcontractor electronic storage media for restoration in case any electronic equipment or data used by the Contractor/Subcontractor needs to be restored to an operating state. If copies are made for restoration purposes, after the restoration is complete, the copies must be appropriately destroyed.

6. If VA determines that the Contractor has violated any of the information confidentiality, privacy, and security provisions of the contract, it shall be sufficient grounds for VA to withhold payment to the Contractor or third party or terminate the contract for default or terminate for cause under Federal Acquisition Regulation (FAR) part 12.

7. If a VHA contract is terminated for cause, the associated Business Associate Agreement

(BAA) must also be terminated and appropriate actions taken in accordance with VHA Directive

1605.05, Business Associate Agreements. Absent an agreement to use or disclose protected health information, there is no business associate relationship.

8. The Contractor/Subcontractor must store, transport, or transmit VA sensitive information in an encrypted form, using VA-approved encryption tools that are, at a minimum, FIPS 140-2 validated.

9. The Contractor/Subcontractor’s firewall and Web services security controls, if applicable, shall meet or exceed VA minimum requirements. VA Configuration Guidelines are available upon request.

10. Except for uses and disclosures of VA information authorized by this contract for performance of the contract, the Contractor/Subcontractor may use and disclose VA information only in two other situations: (i) in response to a qualifying order of a court of competent jurisdiction, or (ii) with VA prior written approval. The Contractor/Subcontractor must refer all requests for, demands for production of, or inquiries about, VA information and information systems to the VA CO for response.

11. Notwithstanding the provision above, the Contractor/Subcontractor shall not release VA records protected by Title 38 U.S.C. 5705, confidentiality of medical quality assurance records and/or Title 38 U.S.C. 7332, confidentiality of certain health records pertaining to drug addiction, sickle cell anemia, alcoholism or alcohol abuse, or infection with human immunodeficiency virus. If the Contractor/Subcontractor is in receipt of a court order or other requests for the above mentioned information, that Contractor/Subcontractor shall immediately refer such court orders or other requests to the VA CO for response.

12. For service that involves the storage, generating, transmitting, or exchanging of VA sensitive information but does not require Assessment and Authorization (A&A) or a

Memorandum of Understanding-Interconnection Security Agreement (MOU-ISA) for system interconnection, the Contractor/Subcontractor must complete a Contractor Security Control

Assessment (CSCA) on a yearly basis and provide it to the COR.

B4. INFORMATION SYSTEM DESIGN AND DEVELOPMENT

1. Information systems that are designed or developed for or on behalf of VA at non-VA facilities shall comply with all VA directives developed in accordance with FISMA, HIPAA, NIST, and related VA security and privacy control requirements for Federal information systems. This includes standards for the protection of electronic PHI, outlined in 45 C.F.R. Part

164, Subpart C, information and system security categorization level designations in accordance with FIPS 199 and FIPS 200 with implementation of all baseline security controls commensurate with the FIPS 199 system security categorization (reference VA Handbook 6500, Risk

Management Framework for VA Information Systems – Tier 3: VA Information Security

Program, and the TIC Reference Architecture). During the development cycle a Privacy Impact

Assessment (PIA) must be completed, provided to the COR, and approved by the VA Privacy

Service in accordance with Directive 6508, Implementation of Privacy Threshold Analysis and

Privacy Impact Assessment.

2. The Contractor/Subcontractor shall certify to the COR that applications are fully functional and operate correctly as intended on systems using the VA Federal Desktop Core

Configuration (FDCC), and the common security configuration guidelines provided by NIST or

VA. This includes Internet Explorer 11 configured to operate on Windows 10 and future versions, as required.

3. The standard installation, operation, maintenance, updating, and patching of software shall not alter the configuration settings from the VA approved and FDCC configuration.

Information technology staff must also use the Windows Installer Service for installation to the default “program files” directory and silently install and uninstall.

4. Applications designed for normal end users shall run in the standard user context without elevated system administration privileges.

5. The security controls must be designed, developed, approved by VA, and implemented in accordance with the provisions of VA security system development life cycle as outlined in

NIST…