36C10B24Q0263 AR Tour App Final.docx

36C10B24Q0263

1. REQUISITION NO.

2. CONTRACT NO.

3. AWARD/EFFECTIVE DATE

4. ORDER NO.

5. SOLICITATION NUMBER

6. SOLICITATION ISSUE DATE

a. NAME

b. TELEPHONE NO. (No Collect Calls)

8. OFFER DUE DATE/LOCAL

TIME

9. ISSUED BY

CODE

10. THIS ACQUISITION IS

UNRESTRICTED OR

SET ASIDE:

% FOR:

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

8(A)

NAICS:

SIZE STANDARD:

11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

13a. THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700)

13b. RATING

14. METHOD OF SOLICITATION

RFQ

IFB

RFP

15. DELIVER TO

CODE

16. ADMINISTERED BY

CODE

17a. CONTRACTOR/OFFEROR

CODE

FACILITY CODE

18a. PAYMENT WILL BE MADE BY

CODE

TELEPHONE NO.

UEI:

EFT:

PHONE:

FAX:

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER 18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW IS CHECKED

SEE ADDENDUM

19.

20.

21.

22.

23.

24.

ITEM NO.

SCHEDULE OF SUPPLIES/SERVICES

QUANTITY

UNIT

UNIT PRICE

AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA

26. TOTAL AWARD AMOUNT (For Govt. Use Only) 27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA

ARE

ARE NOT ATTACHED.

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA

ARE

ARE NOT ATTACHED

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN _______________

29. AWARD OF CONTRACT: REF. ___________________________________ OFFER

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

DATED ________________________________. YOUR OFFER ON SOLICITATION

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED

SET FORTH HEREIN IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER) 30b. NAME AND TITLE OF SIGNER (TYPE OR PRINT) 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (TYPE OR PRINT) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION

(REV. NOV 2021)

PREVIOUS EDITION IS NOT USABLE

Prescribed by GSA - FAR (48 CFR) 53.212

7. FOR SOLICITATION

INFORMATION CALL:

STANDARD FORM 1449

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

05-13-2024 Joseph Jeranek, Contract Specialist 8483775247 05-23-2024 15:00

EDT

36C10B Department of Veterans Affairs Technology Acquisition Center

23 Christopher Way Eatontown NJ 07724

X

541519 $34 Million

N/A

See Delivery Schedule

36C10B Department of Veterans Affairs Technology Acquisition Center

23 Christopher Way Eatontown NJ 07724

36C10A Department of Veterans Affairs Technology Acquisition Center Financial Services Center PO Box 149971 Austin TX 78714-8971

See CONTINUATION Page VA History Office Augmented Reality/Virtual Museum Enterprise Solution

POC:

Joseph Jeranek; Joseph.Jeranek@va.gov

Alternate POC:

Kendra Casebolt; Kendra.Casebolt@va.gov

Period of Performance:

12 months with two 12-month option periods

Kendra M. Casebolt Contracting Officer

Table of Contents

SECTION B - CONTINUATION OF SF 1449 BLOCKS

B.1 CONTRACT ADMINISTRATION DATA

1. Contract Administration: All contract administration matters will be handled by the following individuals:

a. CONTRACTOR: TBD

b. GOVERNMENT: Contracting Officer 36C10B Kendra M. Casebolt Department of Veterans Affairs Technology Acquisition Center 23 Christopher Way Eatontown NJ 07724

2. CONTRACTOR REMITTANCE ADDRESS: All payments by the Government to the contractor will be made in accordance with:

3. INVOICES: Invoices shall be submitted in arrears:

4. GOVERNMENT INVOICE ADDRESS: All Invoices from the contractor shall be submitted electronically in accordance with VAAR Clause 852.232-72 Electronic Submission of Payment Requests.

ACKNOWLEDGMENT OF AMENDMENTS: The offeror acknowledges receipt of amendments to the Solicitation numbered and dated as follows:

B.2 GOVERNING LAW CLAUSE

Federal law and regulations, including the Federal Acquisition Regulations (FAR), shall govern this Contract/Order. Commercial license agreements may be made a part of this Contract/Order but only if both parties expressly make them an addendum hereto, as permitted by FAR 12.212. If the commercial license agreement is not made an addendum, it shall not apply, govern, be a part of or have any effect whatsoever on the Contract/Order; this includes, but is not limited to, any agreement embedded in the computer software (clickwrap), any agreement that is otherwise delivered with or provided to the Government with the commercial computer software or documentation (shrinkwrap), or any other license agreement otherwise referred to in any document. If a commercial license agreement is made an addendum, only those provisions addressing data rights regarding the Government’s use, duplication and disclosure of data (e.g., restricted computer software) are included and made a part of this Contract/Order, and only to the extent that those provisions are not duplicative or inconsistent with Federal law, Federal regulation, the incorporated FAR clauses and the provisions of this Contract/Order; those provisions in the commercial license agreement that do not address data rights regarding the Government’s use, duplication and disclosure of data shall not be included or made a part of the Contract/Order. Federal law and regulation including, without limitation, the Contract Disputes Act (41 U.S.C. § 7101 et seq.), the Anti-Deficiency Act (31 U.S.C. § 1341 et seq.), the Competition in Contracting Act (41 U.S.C. § 3301 et seq.), the Prompt Payment Act (31 U.S.C. § 3901 et seq.), Contracts for Data Processing or Maintenance (38 USC § 5725), and FAR clauses 52.212-4, 52.227-14, 52.227-19 shall supersede, control, and render ineffective any inconsistent, conflicting, or duplicative provision in any commercial license agreement. In the event of conflict between this clause and any provision in the Contract/Order or the commercial license agreement or elsewhere, the terms of this clause shall prevail. The Contractor shall deliver to the Government all data first produced under this Contract/Order with unlimited rights as defined by FAR 52.227-14. Claims of patent or copyright infringement brought against the Government as a party shall be defended by the U.S. Department of Justice (DOJ) in accordance with 28 U.S.C. § 516; at the discretion of DOJ, the Contractor may be allowed reasonable participation in the defense of the litigation. Any additional changes to the Contract/Order must be made by modification (Standard Form 30) and shall only be made by a warranted Contracting Officer. Nothing in this Contract/Order or any commercial license agreement shall be construed as a waiver of sovereign immunity.

B.3 SOFTWARE LICENSE, SOFTWARE MAINTENANCE AND SOFTWARE TECHNICAL SUPPORT

(1). Definitions.

a) Licensee. The term “licensee” shall mean the U.S. Department of Veterans Affairs (“VA”) and is synonymous with “Government.”

b) Licensor. The term “licensor” shall mean the Contractor having the necessary license or ownership rights to deliver license, software maintenance and support of the computer software being acquired. The term “Contractor” is the party identified in Block 17a on the SF1449. If the Contractor is a reseller and not the Licensor, the Contractor remains responsible for performance under this Contract/Order.

c) Software. The term “software” shall mean the licensed computer software product(s) cited in the Schedule of Supplies/Services.

d) Maintenance. The term “maintenance” is the process of enhancing and optimizing software, as well as remedying defects. It shall include all new fixes, patches, releases, updates, versions and upgrades, as further defined below.

e) Technical Support. The term “technical support” refers to the range of services providing assistance for the software via the telephone, email, a website or otherwise.

f) Release or Update. The term “release” or “update” are terms that refer to a revision of software that contains defect corrections, minor enhancements, or improvements of the software’s functionality. This is usually designated by a change in the number to the right of the decimal point (e.g., from Version 5.3 to 5.4). An example of an update is the addition of new hardware.

g) Version or Upgrade. The term “version” or “upgrade” are terms that refer to a revision of software that contains new or improved functionality. This is usually designated by a change in the number to the left of the decimal point (e.g., from Version 5.4 to 6).

(2). Software License.

a) Unless otherwise stated in the Schedule of Supplies/Services, the Performance Work Statement or Product Description, the software license provided to the Government is a perpetual, nonexclusive license to use the software.

b) The Government may use the software in a networked environment.

c) Any dispute regarding the license grant or usage limitations shall be resolved in accordance with the Disputes Clause incorporated in FAR 52.212-4(d).

d) All limitations of software usage are expressly stated in the Schedule of Supplies/Services and the Performance Work Statement/Product Description.

(3). Software Maintenance and/or Technical Support.

a) If the Government desires to continue software maintenance and support beyond the period of performance identified in this Contract/Order, the Government will issue a separate contract or order for maintenance and support. Conversely, if a contract or order for continuing software maintenance and technical support is not received, the Contractor is neither authorized nor permitted to renew any of the previously furnished services.

b) The Contractor shall provide software support services, which includes periodic updates, enhancements and corrections to the software, and reasonable technical support, all of which are customarily provided by the Contractor to its commercial customers to cause the software to perform according to its specifications, documentation or demonstrated claims.

c) Any telephone support provided by Contractor shall be at no additional cost.

d) The Contractor shall provide all maintenance services in a timely manner in accordance with the Contractor’s customary practice or as defined in the Performance Work Statement or Product Description. However, prolonged delay (exceeding two business days) in resolving software problems will be noted in the Government’s various past performance records on the Contractor (e.g., www.cpars.gov).

e) If the Government allows the maintenance and support to lapse and subsequently wishes to reinstate it, any reinstatement fee charged shall not exceed the amounts that would have been charged if the Government had not allowed the subscription to lapse.

(4). Disabling Software Code.

The Government requires delivery of computer software that does not contain any code that will, upon the occurrence or the nonoccurrence of any event, disable the software. Such code includes but is not limited to a computer virus, restrictive key, node lock, time-out, or other function, whether implemented by electronic, mechanical, or other means, which limits or hinders the use or access to any computer software based on residency on a specific hardware configuration, frequency of duration of use, or other limiting criteria. If any such disabling code is present, the Contractor agrees to indemnify the Government for all damages suffered as a result of a disabling caused by such code, and the contractor agrees to remove such code upon the Government’s request at no extra cost to the Government. Inability of the Contractor to remove the disabling software code will be considered an inexcusable delay and a material breach of contract, and the Government may exercise its right to terminate for cause. In addition, the Government is permitted to remove the code as it deems appropriate and charge the Contractor for consideration for the time and effort expended in removing the code.

(5). Manuals and Publications.

Upon Government request, the Contractor shall furnish the most current version of the user manual and publications for all products/services provided under this Contract/Order at no cost.

B.4 PRICE/DELIVERY SCHEDULE

NOTE: Offerors are required to complete Section B.4, in its entirety and submit with their respective quote. Offerors are cautioned that alterations to, or failure to propose pricing for, any of the line items specified below may render quotes unacceptable and therefore, ineligible for award. Please be advised that any successful Offeror’s Section B.4 submitted in response to this Request for Quotation will be incorporated into any resulting award and thereby serve as the Offeror’s Pricing for the life of the contract. All questions shall be directed to the Contract Specialist, Joseph Jeranek, Joseph.Jeranek@va.gov, 848-377-5101 prior to the closing date and time specified in Block 8 on page 1 of the SF 1449.

BASE PERIOD

Period of Peformance (PoP): 12 months from Date of Award

This FFP Contract Line-Item Number (CLIN) shall include labor, materials, and other direct costs required for the successful completion of the services and deliverables detailed in Product Description (PD) Paragraph 1.0 and all associated subparagraphs

Due 75 days after award

Due 10 days after award.

Due 90 days after award

Due 113 calendar days after award

Due 30 days after SSP delivery

Due 60 days after FedRAMP Certification

Due 120 days after FedRAMP certification

BASE PERIOD – OPTIONAL TASKS

The below Optional Tasks may be exercised In Accordance With (IAW) Federal Acquisition Regulation (FAR) 52.217-7, Option for Increased Quantity – Separately Priced Line Item (MAR 1989) at any time during the contract’s Base Period of Performance. Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer. If exercised, optional tasks shall commence immediately after exercise unless otherwise noted.

OPTION PERIOD ONE

This 12-month option period may be exercised at the Government’s discretion IAW FAR 52.217-9, Option to Extend the Term of the Contract. Work shall not commence until, and unless, a formal modification is issued by the contracting officer. If exercised, the 12-month Option Period is to commence immediately upon expiration of the Base Period.

If exercised, the PoP shall be: 12 months from the end of the Base Period.

This FFP Contract Line-Item Number (CLIN) shall include labor, materials, and other direct costs required for the successful completion of the services and deliverables detailed in Product Description (PD) Paragraph 1.0 and all associated subparagraphs

OPTION PERIOD ONE – OPTIONAL TASKS

The below Optional Tasks may be exercised IAW FAR 52.217-7, Option for Increased Quantity – Separately Priced Line Item (MAR 1989) at any time during the contract’s Option Period One PoP. Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer. If exercised, optional tasks shall commence immediately after exercise unless otherwise noted.

PTION PERIOD TWO

This 12-month option period may be exercised at the Government’s discretion IAW FAR 52.217-9, Option to Extend the Term of the Contract. Work shall not commence until, and unless, a formal modification is issued by the contracting officer. If exercised, the 12-month Option Period is to commence immediately upon expiration of the Option Period One.

If exercised, the PoP shall be: 12 months from the end of the Option Period One.

This FFP Contract Line-Item Number (CLIN) shall include labor, materials, and other direct costs required for the successful completion of the services and deliverables detailed in Product Description (PD) Paragraph 1.0 and all associated subparagraphs

OPTION PERIOD TWO – OPTIONAL TASKS

The below Optional Tasks may be exercised IAW FAR 52.217-7, Option for Increased Quantity – Separately Priced Line Item (MAR 1989) at any time during the contract’s Option Period Two PoP. Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer. If exercised, optional tasks shall commence immediately after exercise unless otherwise noted.

Summary

Page 1 of

PRODUCT DESCRIPTION (PD)

DEPARTMENT OF VETERANS AFFAIRS

VA History Office

Augmented Reality/Virtual Museum Enterprise Solution

Date: May 3, 2024

VA-24-00039734

PD Version Number: 4.0

1.0 PRODUCT REQUIREMENTS

The Department of Veterans Affairs (VA) VA History Office (VAHO) has a requirement for an Augmented Reality (AR) / Virtual Museum Software as a Service (SaaS) enterprise solution to develop an AR tour application for use at VA Medical Centers (VAMC), starting with the Dayton VAMC (Optional Tasks are included for expansion to up to 10 additional VA facilities). This enterprise solution shall be accessible on personal devices including Android and iPhone Operating System. The enterprise solution shall provide a Virtual Museum with online exhibit galleries and metaverse functions that will be accessed via the internet. The SaaS enterprise solution shall provide visitors with an immersive experience to learn the facility’s long history starting with its development as a National Home for Disabled Volunteer Soldiers utilizing historic resources and providing wayfinding, geolocation, holograms, interactive maps AR and Virtual Reality (VR). The development of the enterprise SaaS solution shall also provide infrastructure for the development of a Virtual Museum that shall provide an environment for the VAHO to share its collections with online visitors through virtual exhibits, game play and educational opportunities. The Contractor shall work with VA to develop the Virtual Museum galleries and experiences utilizing the archival and object collections of the National VA History Center. Both the AR/VR tour shall provide easy to utilize and easy to use interfaces that allows VA staff to develop and customize the experience without requiring Contractor interactions. The Contractor shall also utilize industry recognized interpretive techniques and shall provide accessibility for audiences with disabilities. Accessible design is a key feature and 508 compliance is required. The information system solution selected by the Contractor shall comply with the Federal Information Security Management Act (FISMA). The AR / Virtual Museum SaaS enterprise solution must be able integrate a variety of content, including historic images, records, audio visual material, digital assets, and 3D renderings. This content will be integrated into the solution and will be shared through video, audio, holograms, interactive characters, maps and experiences.

To meet these requirements, VA has identified Timelooper AR / Virtual Museum SaaS Enterprise Solution, however VA is looking for a brand name or equal solution.

The period of performance shall be a 12-month base period, with two (2) 12-month option periods with optional tasks, to be exercised at the Government’s discretion. Optional tasks are specified in the table below. Optional tasks include the expansion of the AR/VR application to up to ten (10) additional VA facilities across the country. These locations have not yet been identified, but the VAHO staff will work with the VA facility and the Contractor to choose appropriate sites and facilitate the project(s). The optional tasks may be exercised at VA’s discretion during the base period and each option period.

1.1 AR/ Virtual Museum SaaS enterprise solution Salient Characteristics The AR / Virtual Museum SaaS Enterprise Solution shall provide the following System features:

1. Virtual Reality experiences

2. Augmented Reality experiences

3. 3D Modeling

4. 2D Modeling

5. Timescape Video

6. Virtual Exhibition Gallery

7. Metaverse Capability

8. Standard 2D Video

9. Interactive Immersive Experience

10. AI Generation

11. Interactive Map

12. 3D Hologram

13. Motion Graphics

14. Animated Holographic Guide

15. Geolocation Services

16. Graphic Design

17. Ability to provide content offline through the Application

18. Tour and Virtual Museum available to IOS Devices

19. Tour and Virtual Museum available to Android Devices

20. Tour and Virtual Museum available to PC Devices

21. Ability to use AR/VR headsets with applications

22. Integration of applications across experiences

23. Ability to deliver customer specific metrics

24. Ability for VA staff to manage content in the Content Management System including customization and on demand editing.

25. Customer interface that allows for the simple location placement and uploads of content by customer staff. Provide training (may be provided remotely) on use of interface and content management. This shall include at least two (2) training session and additional training as needed for new staff. The Contractor shall provide a training manual and quick reference guide.

26. Ability to provide multifactor authentication using single sign on using PIV and credential.

27. 508 Compliant

28. Ability to provide content in multiple languages.

29. Must include accessibility features including the ability to include oral descriptions and subtitles

30. Must be delivered as SaaS

31. Must be FedRAMP certified or be able to obtain FedRAMP Certification

32. Must serve as technology partner to provide continued support for interpretive and interactive experiences

33. Demonstrated experience providing interpretive experience utilizing historic materials.

Deliverables:

a. Training Manual

b. Quick Reference Guide

1.2 PREMIER SUPPORT SERVICES

The Contractor shall provide the following:

a. Demo/Sandbox Environment Access

b. Online Case Submission and Management

e. Escalation support

f. Case Submission Response Time Target: < 8 Hours

g. Support Resolution Time Target: < 48 Hours

1.3 TASK: Professional Services

The Contractor shall provide the following:

a. Deployment And Implementation Support:

Schedule remote support with the VA team to provide guidance and collaboration to set-up infrastructure for AR Tour and Virtual Museum enterprise solution. Work with the VA team on content development and deployment to AR tour or Virtual Museum. Remote support shall be provided for configuration (implementation) of the DocuSign SaaS service and related support.

1.4 Software subscriptions

The Contractor shall provide software subscriptions identified in the table below.

1.5 ADDITIONAL SUBSCRIPTIONS AND SUPPORT SERVICES (OPTIONALTASK)

The Contractor shall provide VA the ability to acquire additional subscriptions and support services throughout each period of performance. Each Optional Task line item may be exercised as requested during the period of performance. See table below for Optional Tasks.

BASE PERIOD

The period of performance shall be 12 months from date of award.

FedRamp Compliant Software as a Service/License (12 Months)

Content Development - AR Tour Simple 3D Model

Content Development - AR Tour Complex 3D Model

Content Development - AR Tour Panoguide

Content Development - AR Tour Timescape

Content Development - AR Tour Hologram

Content Development - AR Tour Slideshow

Content Development - AR Tour Simple 2D Video

Project Management - AR Tour

Content Development - AR Tour Complex 3D Model

Content Development - AR Tour Panoguide

Content Development - AR Tour Timescape

Content Development - AR Tour Hologram

Content Development - AR Tour Slideshow

Content Development - AR Tour Simple 2D Video

Content Development - AR Tour Audio Voice Over

Project Management - AR Tour

OPTION PERIOD 1

FedRamp Compliant Software as a Service/License (12 Months)

Content Development - VR Exhibition Gallery

Content Development - VR Timescape Film

Content Development - Motion Graphics

Content Development - Video Editing

Graphics Design

Project Management

Content Development - Simple 3D Model

Content Development - AR Tour Complex 3D Model

Content Development - AR Tour Panoguide

Content Development - AR Timescape

Content Development - AR Tour Hologram

Content Development - AR Tour Slideshow

Content Development - AR Tour Simple 2D Video

Project Management

OPTION PERIOD 2

FedRamp Compliant Software as a Service/License (12 Months)

Content Development - AR Tour Panoguide

Content Development - AR Tour Timescape

Content Development - AR Tour Hologram

Content Development - AR Tour Slideshow

Exhibition Gallery

Content Development - Timescape 360

Content Development - Motion Graphics

Content Development - AI Generation

Video Editing

User Interface Design

Graphics Design

Project Management

1.6 FedRAMP APPROVAL

The Contractor shall comply with Federal Risk and Authorization Management Program (FedRAMP) requirements as mandated by Federal laws and policies, including making available any documentation, physical access, and logical access needed to support this requirement. The Digital Transformation Center determined the Data Security Categorization.

The Contractor shall provide a SaaS product as defined by the following criteria:

SaaS is an application delivery model in which the application is hosted on a cloud infrastructure outside the security boundary of VA and is provided to the Cloud Service Customer (CSC) over the internet. The CSC uses the SaaS offering via a thin-client interface, such as a web-browser or a program interface. The CSC subscribes to the SaaS offering and is only responsible for minor in-app customizations. The Cloud Service Provider (CSP) offering the application is responsible for management of the application, safeguarding of data stored or processed by the application, and all elements of the underlying infrastructure. Additionally, the CSP is responsible for all on-going compliance.

In order to qualify as SaaS for use at VA, and to align with FedRAMP requirements, the hosting for the offering must conform to the NIST 800-145 definition of Cloud Computing and thus contain following key characteristics:

• On-Demand Self-Service: The CSP fully automates the provisioning of both the customer interface and the underlying cloud components of the SaaS offering. In some cases, to the CSP may provision internal resources manually, while providing the CSC an automated interface to request and track the service.

• Broad Network Access: The SaaS capabilities are available over the internet or over a network that is available from all access points the CSC requires. The SaaS offering is accessible through common platforms (e.g., mobile phones, tablets, laptops, and workstations).

• Resource Pooling: The computing infrastructure supporting the SaaS offering is shared among more than one CSC using a multi-tenant model, and resources are dynamically assigned depending on customer demand.

• Rapid Elasticity: Computing capabilities are automatically provisioned and released in a manner that scales with customer demand. In some cases, the scaling of resources may not be fully automated, but it should be fast enough to support the needs of the CSC, which the CSC would have to define.

• Measured Service: Resource usage, such as storage, processing, bandwidth, and user activity are measured and reported on in a manner that is relevant to the SaaS offering.

The SaaS offering must comply with FedRAMP requirements surrounding data location within the Continental United States. FedRAMP specifies data location requirements in the High baseline as part of control SA-9 (5); however, FedRAMP does not provide or specify data location requirements for other baselines. CSPs should be aware of FedRAMP and ready to partner with VA through the SaaS FedRAMP Authorization Process.

Following guidance from the Federal CIO, VA will utilize existing JAB ATO or agency ATO issued by another agency as a starting point for FedRAMP requirements. If neither of those exist, VA will sponsor The Cloud Service Provider for a FedRAMP Authorization. VA will be using the FedRAMP baselines as a starting point, since they are specifically tailored for cloud services.

The Contractor shall, where applicable, assist with the VA ATO Process to help achieve agency authorization of the cloud service or migrated application at the impact level required by VA to utilize the product. For this solution the required impact level is: LOW.

The Contractor shall complete a FedRAMP System Security Plan (SSP) and supporting documentation including required attachments within 75 calendar days after award.

The Contractor shall develop a VA specific system boundary diagram including any integration and connectivity components that will be known as a VA Implementation Diagram (VAID) demonstrating the proposed implementation of this system at VA. The Contractor shall provide the VAID within 10 calendar days of award.

The Contractor shall complete a Third-Party Assessment Organization (3PAO) Security Assessment Plan (SAP) within 90 calendar days after contract award. (If Data Security Categorization is High Impact, this will be due after 113 calendar days after award.)

The Contractor shall complete a 3PAO Security Assessment Report (SAR) within 90 calendar days after the SSP is accepted by VA. (If Data Security Categorization is High Impact, this will be due 113 calendar days after the SSP is accepted by VA.)

Contractor shall work with assigned VA SME to develop a VA specific Incident Response Plan (IRP) and perform an IRP Tabletop Exercise with VA Stakeholders. This should be completed within 30 calendar days of the SSP being delivered.

The Contractor shall afford VA access to the Contractor’s and Cloud Service Provider’s (CSP) facilities, installations, technical capabilities, operations, documentation, records, and databases.

If new or unanticipated vulnerabilities are discovered by either VA or the Contractor, or if existing safeguards have ceased to function, the discoverer shall immediately bring the situation to the attention of the other party in accordance with Addendum B, VA Information and Information System Security/Privacy Language.

The Contractor shall comply with data management requirements.

Successful issuance of a VA ATO will be required before live VA data can be used in the system.

Deliverables:

A. FedRAMP System Security Plan (SSP) and supporting documentation (within 75 calendar days after award) B. VA Implementation Diagram: This is a VA specific architecture diagram demonstrating the proposed implementation of this system at VA (VAID) (within 10 calendar days after award) C. 3PAO Security Assessment Plan (SAP) (within 90 days after award) D. 3PAO Security Assessment Report (SAR) (within 113 calendar days after award) E. IRP Scenario (within 30 calendar days of SSP being delivered) F. Augmented Reality/Virtual Museum SaaS enterprise solution (within 60 days of FedRAMP certification) G. Application available in app stores for IOS and Android. (within 120 days of FedRAMP certification) H. Training on user interface including content uploads and management (within 90 days of FedRAMP certification).

2.0 NOTICE OF THE FEDERAL ACCESSIBILITY LAW AFFECTING ALL INFORMATION AND COMMUNICATION TECHNOLOGY (ICT) PROCUREMENTS (SECTION 508) On January 18, 2017, the Architectural and Transportation Barriers Compliance Board (Access Board) revised and updated, in a single rulemaking, standards for electronic and information technology developed, procured, maintained, or used by Federal agencies covered by Section 508 of the Rehabilitation Act of 1973, as well as our guidelines for telecommunications equipment and customer premises equipment covered by Section 255 of the Communications Act of 1934. The revisions and updates to the Section 508-based standards and Section 255-based guidelines are intended to ensure that information and communication technology (ICT) covered by the respective statutes is accessible to and usable by individuals with disabilities.

2.1 SECTION 508 – INFORMATION AND COMMUNICATION TECHNOLOGY (ICT) STANDARDS

The Section 508 standards established by the Access Board are incorporated into, and made part of all VA orders, solicitations and purchase orders developed to procure ICT. These standards are found in their entirety at: https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines. A printed copy of the standards will be supplied upon request.

Federal agencies must comply with the updated Section 508 Standards beginning on January 18, 2018. The Final Rule as published in the Federal Register is available from the Access Board: https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule.

The Contractor shall comply with “508 Chapter 2: Scoping Requirements” for all electronic ICT and content delivered under this contract. Specifically, as appropriate for the technology and its functionality, the Contractor shall comply with the technical standards marked here:

2.2 COMPATABILITY WITH ASSISTIVE TECHNOLOGY

The standards do not require installation of specific accessibility-related software or attachment of an assistive technology device. Section 508 requires that ICT be compatible with such software and devices so that ICT can be accessible to and usable by individuals using assistive technology, including but not limited to screen readers, screen magnifiers, and speech recognition software.

2.3 ACCEPTANCE AND ACCEPTANCE TESTING

Deliverables resulting from this solicitation will be accepted based in part on satisfaction of the Section 508 Chapter 2: Scoping Requirements standards identified above.

The Government reserves the right to test for Section 508 Compliance before delivery. The Contractor shall be able to demonstrate Section 508 Compliance upon delivery. Deliverables resulting from this solicitation will be accepted based in part on satisfaction of the Section 508 Chapter 2: Scoping Requirements standards identified above.

3.0 GENERAL REQUIREMENTS

3.1 VA TECHNICAL REFERENCE MODEL

The Contractor shall support the VA enterprise management framework. In association with the framework, the Contractor shall comply with OI&T Technical Reference Model (VA TRM). The VA TRM is one component within the overall Enterprise Architecture (EA) that establishes a common vocabulary and structure for describing the information technology used to develop, operate, and maintain enterprise applications. Moreover, the VA TRM, which includes the Standards Profile and Product List, serves as a technology roadmap and tool for supporting OI&T. Architecture & Engineering Services (AES) has overall responsibility for the VA TRM.

3.2 APPROVALS

The VA Curator or designee will approve the development of interpretive experiences and content creation. The Contractor shall submit content for approval before it is published to the SaaS environment to the VA Curator or designee. The VA Curator or designee will work with the Contractor to develop an approval process that will be followed for each project. Only designated VA staff can approve the content to publish for public access.

3.3 Site Visits

Each project may require one (1) site visit for the development, coordination and geolocation services. These site visits should be included in the proposal and VA will not provide reimburse the Contractor for travel costs. The Contractor shall bear all costs associated with this project that are not covered by the agreed upon firm-fixed price.

4.0 ACCEPTANCE/DELIVERY

Inspection: Destination Acceptance: Destination

5.0 POINTS OF CONTACT

VA Program Manager:

Name: Kurt Senn Address:

Contracting Officer’s Representative:

Name: Kurt Senn Address:

Contracting Officer:

Contract Specialist:

6.0 INFORMATION SECURITY CONSIDERATIONS:

The Assessment and Authorization requirements do not apply and a Security Accreditation Package is not required for this SOW.

All VA sensitive information shall be protected at all times in accordance with local security field office System Security Plans (SSP’s) and Authority to Operate (ATO)’s for all systems/LAN’s accessed while performing the tasks detailed in this Product Description.

ADDENDUM B – VA INFORMATION AND INFORMATION SYSTEM SECURITY/PRIVACY LANGUAGE

B1. GENERAL

Contractors, Contractor personnel, Subcontractors, and Subcontractor personnel shall be subject to the same Federal laws, regulations, standards, and VA Directives and Handbooks as VA and VA personnel regarding information and information system security.

B2. ACCESS TO VA INFORMATION AND VA INFORMATION SYSTEMS

a. A Contractor/Subcontractor shall request logical (technical) or physical access to VA information and VA information systems for their employees, Subcontractors, and affiliates only to the extent necessary to perform the services specified in the contract, agreement, or task order.

b. All Contractors, Subcontractors, and third-party servicers and associates working with VA information are subject to the same investigative requirements as those of VA appointees or employees who have access to the same types of information. The level and process of background security investigations for Contractors must be in accordance with VA Directive and Handbook 0710, Personnel Suitability and Security Program. The Office for Operations, Security, and Preparedness is responsible for these policies and procedures.

c. Contract personnel who require access to national security programs must have a valid security clearance. National Industrial Security Program (NISP) was established by Executive Order 12829 to ensure that cleared U.S. defense industry contract personnel safeguard the classified information in their possession while performing work on contracts, programs, bids, or research and development efforts. The Department of Veterans Affairs does not have a Memorandum of Agreement with Defense Security Service (DSS). Verification of a Security Clearance must be processed through the Special Security Officer located in the Planning and National Security Service within the Office of Operations, Security, and Preparedness.

d. Custom software development and outsourced operations must be located in the U.S. to the maximum extent practical. If such services are proposed to be performed abroad and are not disallowed by other VA policy or mandates (e.g. Business Associate Agreement, Section 3G), the Contractor/Subcontractor must state where all non-U.S. services are provided and detail a security plan, deemed to be acceptable by VA, specifically to address mitigation of the resulting problems of communication, control, data protection, and so forth. Location within the U.S. may be an evaluation factor.

e. The Contractor or Subcontractor must notify the CO immediately when an employee working on a VA system or with access to VA information is reassigned or leaves the Contractor or Subcontractor’s employ. The CO must also be notified immediately by the Contractor or Subcontractor prior to an unfriendly termination.

B3. VA INFORMATION CUSTODIAL LANGUAGE

1. Information made available to the Contractor or Subcontractor by VA for the performance or administration of this contract or information developed by the Contractor/Subcontractor in performance or administration of the contract shall be used only for those purposes and shall not be used in any other way without the prior written agreement of VA. This clause expressly limits the Contractor/Subcontractor's rights to use data as described in Rights in Data - General, FAR 52.227-14(d) (1).

2. VA information should not be co-mingled, if possible, with any other data on the Contractors/Subcontractor’s information systems or media storage systems in order to ensure VA requirements related to data protection and media sanitization can be met. If co-mingling must be allowed to meet the requirements of the business need, the Contractor must ensure that VA information is returned to VA or destroyed in accordance with VA’s sanitization requirements. VA reserves the right to conduct on-site inspections of Contractor and Subcontractor IT resources to ensure data security controls, separation of data and job duties, and destruction/media sanitization procedures are in compliance with VA directive requirements.

3. Prior to termination or completion of this contract, Contractor/Subcontractor must not destroy information received from VA, or gathered/created by the Contractor in the course of performing this contract without prior written approval by VA. Any data destruction done on behalf of VA by a Contractor/Subcontractor must be done in accordance with National Archives and Records Administration (NARA) requirements as outlined in VA Directive 6300, Records and Information Management and its Handbook 6300.1 Records Management Procedures, applicable VA Records Control Schedules, and VA Handbook 6500.1, Electronic Media Sanitization. Self-certification by the Contractor that the data destruction requirements above have been met must be sent to the VA CO within 30 days of termination of the contract.

4. The Contractor/Subcontractor must receive, gather, store, back up, maintain, use, disclose and dispose of VA information only in compliance with the terms of the contract and applicable Federal and VA information confidentiality and security laws, regulations and policies. If Federal or VA information confidentiality and security laws, regulations and policies become applicable to VA information or information systems after execution of the contract, or if NIST issues or updates applicable FIPS or Special Publications (SP) after execution of this…