36C10D24Q0270.docx

PAGE 1 OF

1. REQUISITION NO.

2. CONTRACT NO.

3. AWARD/EFFECTIVE DATE

4. ORDER NO.

5. SOLICITATION NUMBER

6. SOLICITATION ISSUE DATE

a. NAME

b. TELEPHONE NO. (No Collect Calls)

8. OFFER DUE DATE/LOCAL

TIME

9. ISSUED BY

CODE

10. THIS ACQUISITION IS

UNRESTRICTED OR

SET ASIDE:

% FOR:

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

8(A)

NAICS:

SIZE STANDARD:

11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

13a. THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700)

13b. RATING

14. METHOD OF SOLICITATION

RFQ

IFB

RFP

15. DELIVER TO

CODE

16. ADMINISTERED BY

CODE

17a. CONTRACTOR/OFFEROR

CODE

FACILITY CODE

18a. PAYMENT WILL BE MADE BY

CODE

TELEPHONE NO.

UEI:

EFT:

PHONE:

FAX:

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER 18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW IS CHECKED

SEE ADDENDUM

19.

20.

21.

22.

23.

24.

ITEM NO.

SCHEDULE OF SUPPLIES/SERVICES

QUANTITY

UNIT

UNIT PRICE

AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA

26. TOTAL AWARD AMOUNT (For Govt. Use Only) 27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA

ARE

ARE NOT ATTACHED.

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA

ARE

ARE NOT ATTACHED

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN _______________

29. AWARD OF CONTRACT: REF. ___________________________________ OFFER

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

DATED ________________________________. YOUR OFFER ON SOLICITATION

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED

SET FORTH HEREIN IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER) 30b. NAME AND TITLE OF SIGNER (TYPE OR PRINT) 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (TYPE OR PRINT) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION

(REV. NOV 2021)

PREVIOUS EDITION IS NOT USABLE

Prescribed by GSA - FAR (48 CFR) 53.212

7. FOR SOLICITATION

INFORMATION CALL:

STANDARD FORM 1449

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

VA

F36B331-24-0000031 36C10D24Q0270 08-28-2024 Josh Gallien 413-584-4040 09-13-2024 15:00

EDT

00101 Department of Veterans Affairs Veterans Benefits Administration Acquisition Directorate 1800 G Street NW Washington

DC

20006 X X 561621 $25 Million N/A X 00101 Department of Veterans Affairs Veterans Benefits Administration St. Louis Regional Benefits Office 9700 Page Ave St. Louis

MO

63132 00101 Department of Veterans Affairs Veterans Benefits Administration Acquisition Directorate 1800 G Street NW Washington

DC

20006

See Section A.3 Invoicing Instructions

See CONTINUATION Page This solicitation is to provide replacement, intsallation and integration of PIV card readers into the existing cCrure 9000 system located at the St. Louis Regional Benefits Office in accordance with the statement of work.

This requirement is a Total Small Business Set-Aside.

All questions pertaining to this solicitation shall be submitted via email to Joshua.Gallien@va.gov no later than 06-Sep-2024 by 11:00 AM EST. Questions shall be answered VIA amendment to the solicitation.

All quotes shall be submitted to Joshua.Gallien@va.gov no later than 13-Sep-2024 by 3:00 PM EST.

See CONTINUATION Page X X Joshua Gallien

VA-VBA-2024-0011

Table of Contents

A.2 CONTRACT ADMINISTRATION DATA

1. Contract Administration: All contract administration matters will be handled by the following individuals:

a. CONTRACTOR: To Be Determinated

b. GOVERNMENT: Contracting Officer 36C10D Department of Veterans Affairs Veterans Benefits Administration Acquisition Directorate 1800 G Street NW Washington DC 20006

2. CONTRACTOR REMITTANCE ADDRESS: All payments by the Government to the contractor will be made in accordance with:

3. INVOICES: Invoices shall be submitted in arrears:

4. GOVERNMENT INVOICE ADDRESS: All Invoices from the contractor shall be submitted electronically in accordance with VAAR Clause 852.232-72 Electronic Submission of Payment Requests.

ACKNOWLEDGMENT OF AMENDMENTS: The offeror acknowledges receipt of amendments to the Solicitation numbered and dated as follows:

A.3 INVOICING INSTRUCTIONS:

General invoicing instructions are included here.

Payment provided under the terms of this contract will be made upon delivery and acceptance in arrears for all services rendered and/or deliverables submitted and approved by the VA.

GOVERNMENT INVOICE ADDRESS:

TUNGSTEN (OB10) ELECTRONIC INVOICE SUBMISSION

FSC e-INVOICE PROGRAM THROUGH AUSTIN PORTAL

FSC MANDATORY ELECTRONIC INVOICE SUBMISSION FOR AUSTIN PAYMENTS

Please ensure that when the invoice is submitted in Tungsten by a contractor employee that the PO# (Given at time of Award) is used and please include the respective Contract line-item number (CLIN) which is being invoiced, such as 0001. Please also ensure that the uploaded invoice document’s description matches the contract’s line-item number information such as: Item number 0001, Quantity, Unit of issue, Unit Price, Extended Price and Period of Performance. Failure to follow these instructions will result in a rejection of the invoice by the VA Financial Service Center personnel.

Fax, email and scanned documents are not acceptable forms of submission for payment requests. Electronic form means an automated system transmitting information electronically according to the accepted data transmissions below.

1. VA’s Electronic Invoice Presentment and Payment System – The Financial Services Center (FSC) in Austin, TX uses a third-party contractor, Tungsten, to transition vendors from paper to electronic invoice submission. Please go to this website: http://www.tungsten-network.com/US/en/veterans-affairs/ to begin submitting electronic invoices, free of charge.

2. A system that conforms to the X12 electronic data interchange (EDI) formats established by the Accredited Standards Center (ASC) chartered by the American National Standards Institute (ANSI). The X12 EDI Web site is http://www.x12.org.

Vendor e-Invoice Set-up Information:

Please contact Tungsten at the phone number or email address listed below to begin submitting your electronic invoices to the VA Financial Services Center in Austin, TX for payment processing. If you have questions about the payment status of a properly submitted invoice, the e-invoicing program, or Tungsten, please contact the FSC at the phone number or email address listed below.

· Tungsten e-Invoice setup information: 1-877-489-6135

· Tungsten e-Invoice email: VA.Registration@tungsten-network.com

· VA TUNGSTEN Number: AAA544240062

· FSC e-Invoice contact information: 1-877-353-9791

· FSC e-Invoice email: vafsccshd@va.gov

· FSC Internet: http://www.fsc.va.gov/einvoice.asp

Page 1 of Page 1 of

SECTION B - CONTINUATION OF SF 1449 BLOCKS

B.1 PRICE/COST SCHEDULE

ITEM INFORMATION

Remove, replace, integrate and test PIV card readers in accordance with the statement of work.

Contract Period: Base POP Begin: 09-24-2024 POP End: 01-31-2025 PRINCIPAL NAICS CODE: 561621 - Security Systems Services (except Locksmiths) PRODUCT/SERVICE CODE: N063 - Installation of Equipment - Alarm, Signal, and Security Detection Systems

B.2 STATEMENT OF WORK

DEPARTMENT OF VETERANS AFFAIRS

Veterans Benefits Administration St. Louis Regional Benefits Office 9700 Page Avenue, St. Louis, MO 63134

1) Introduction: The Department of Veterans Affairs St. Louis Regional Office (VAROSTL) facility, requires the replacement of all of the existing Innometriks card readers utilized by the St. Louis Regional Office.

2) Location of Facility:

9700 Page Ave St. Louis MO, 63132

3) Scope: VAROSTL intends to enter into a Firm-Fixed Price (FFP) contract for replacement of all Innometriks card readers with a new model (as identified in table 1) to ensure maximum security and access. The CCure security system has a total of 80 card readers to be replaced throughout the building. The Contractor shall furnish all labor, tools, materials, transportation, equipment, disposal, and supervision necessary to perform all required on-site card reader replacement services to include integration into the existing CCure 9000 system and testing for the 80 card readers to include 2 spare card readers.

The Government’s regular (normal) working hours are 8:00AM to 4:00PM Central Time Monday through Friday, except for federal holidays: New Year’s Day, Martin Luther King Jr.’s Birthday, President’s Day, Memorial Day, Independence Day, Labor Day, Columbus Day, Veterans Day, Thanksgiving Day and Christmas Day.

4) Description of Supplies/Services:

The contractor shall provide the following: (services to take place between the hours of 8:00 AM and 4:00 PM central time, Monday through Friday excluding federal holidays.

(Table 1)

ACCESS CONTROL

Reader - High Assurance

Installation Kits

Miscellaneous parts/equipment required for installation

Alternate comparable equipment will be considered prior to award (all equipment shall be compatible with cCure 9000).

· Remove, replace, integrate and test 80 PIV card readers

· Provide two (2) spare readers

· Schedule an initial facility visit within 20 calendar days of contract award to determine locations and equipment needed

· Provide at minimum One (1) year warranty from date of completed installation to cover at minimum product defects and installation craftsmanship

· Provide initial training to VA staff on the basic troubleshooting and functionality of the installed equipment

5) Requirement & Task Performance Standards

Quality Standards:

The Contractor shall have the capability of responding to warranty / craftsmanship calls with 24 hours of notification and shall be able to resolve discrepancies within 24 hours of warranty / craftmanship of evaluation. (total 48 hours) . The Contractor is to ensure that all card readers operate at an optimal level of performance after replacement.

The Contractor shall be an authorized Software House vendor and demonstrate capability of removing, installing and integrating PIV card readers into the cCure 9000 system. All work shall be performed by Contractor personnel specifically qualified and trained to work on the specified equipment.

All work shall be accomplished in conformance with the approved and accepted standards of the Security System trade industry; equipment manufacturers; local, state, and federal standards; all applicable building and safety codes; and the National Electrical Code. Replacement work shall be carried to completion, including operational checks and cleanup of the job site. Except where otherwise noted, replacements shall match existing dimensions, finish, designs, and function.

6) Employee Identification:

Contractor personnel shall wear an identification badge that, at minimum, displays the company’s name, the employee’s photo, and employee’s name. Contractor personnel shall comply with all Government rules and regulations while at the facility.

7) Period of Performance:

90 days from the date of award.

8) Security:

All Contractors and Contractor personnel shall be subject to the same Federal security and privacy laws, regulations, standards and VA policies as VA, including the Privacy Act, 5 U.S.C.§552a, and VA personnel, regarding information and information system security. Contractors must follow policies and procedures outlined in VA Directive 6500, Information Security Program; and VA Handbook 6500.6. See attached VA 6500.6 Appendix C which is incorporated in the resulting task order to ensure appropriate security controls are in place.

Contractor Personnel Security Any individual who requires access to the VA site(s), personally identifiable information (PII) and/or access to VA local area network (LAN) systems shall be the subject of a favorable fingerprint check (SAC) adjudicated by VBA Personnel Security Office (PERSEC). Individuals are required a background investigation and must receive a favorable adjudication from the VA Personnel Security and Adjudication Center (PSAC). These requirements are applicable to all sub-contractor personnel requiring any Background Investigation (BI) conducted by Defense Counterintelligence Security Agency (DCSA).

The level of BI will be in accordance with VA Directive 0710 dated June 4, 2010 and is available at http://www.va.gov/vapubs/viewPublication.asp?Pub_ID=487&FTyp.

Background Investigation:

The Contractor employee level of BI required for this effort is:

Low Risk (T1) Security – Employees Moderate Risk (T2) – Managers and Directors

Note: The position sensitivity should reflect the results from the completion of the PDAT versus the title of the individual.

Investigation Documents: Immediately after contract award, the COR will provide the Contractor with the following background investigation documents to be completed by the Contractor and returned thru the COR to VBA PERSEC to begin the background investigations process for all contract employees working on the contract who will have access to VA/VBA facilities, VA systems, or privacy data:

a) Background Investigation Request Worksheet

b) Optional Form 306 – Declaration of Federal Employment

c) VBA Contractor Fingerprint Request Form

d) VA Form 0710 – Authorization for Release of Information Fair Credit Report (if T2 or higher)

e) (SC) Self-Certification Form (if applicable)

f) VA Form 0711 – Request for Personal Identity Verification Card

g) SIC Contractor Background Request Form (unsigned)

Submitting Completed Package:

Upon receipt of documents listed in above from the COR, the COR will submit the background investigation package to VBA’s Personnel Security Specialist. Upon notification of favorable fingerprint results, the COR should request the official VA email account and will be notified of all background investigation requirements preventing the Contractor from an immediate onboard. Thereafter, the Contractor shall receive an email notification from DCSA including detailed instructions regarding completion of the background clearance application process in the Electronic Questionnaires for Investigations Processing (e-QIP) system. e-QIP is an online, internet accessible system, where the Contractor employee shall complete the security questionnaire required for OPM to process background investigation. Once the e-QIP is released by VBA PERSEC, scheduled by OPM, the Contractor may begin work while the background investigation is ongoing.

Reciprocation: Contractors who have current favorable background investigation previously conducted by OPM or DCSA may be accepted through reciprocation. When a previous personnel security clearance is currently held, it does not preclude the Contractor form submitting a complete Background Investigation Package as stated above to the COR immediately after contract award for all Contractor employees who will be working on the contract.

Pre-Screen: The Contractor shall prescreen all personnel who require access to VA site(s) and/or access to VA LAN systems to ensure they maintain a U.S. citizenship or Alien Registration that authorizes them to work in the U.S., and are able to read, write, speak, and understand the English language.

Contractor Performance: Contract performance shall not commence before:

a) The VBA has confirmed favorable fingerprint results, or

b) PSAC confirms that it has received the Contractor’s investigative documents, The documents are complete, and that the background investigation information has been released to OPM for scheduling of the background investigation, or

c) VBA or the PSAC has confirmed that the verified investigation will be reciprocated.

Copy of Certificate of Investigation (COI): The COR will notify and forward the Contractor a copy of the Certificate of Investigation when the background investigation has been favorably completed or a Certificate of Eligibility (Form 4236) if the investigation has been reciprocated. The Contractor, if notified, of an unfavorable adjudication by the Government, shall withdraw the employee from consideration from working under the contract. Failure to comply, the Contractor personnel security requirements may result in termination of the contract for default.

Responsibility: The Contractor shall be responsible for the actions of those contract and subcontract employees it provides to perform work for the VBA. In the event damage arises from work performed by Contractor employees the Contractor will be responsible for resources necessary to remedy the incident.

Vendor Selection: Should the Contractor use a vendor other than OPM or DCSA to conduct background investigations, the investigative company must be certified by OPM/DCSA to conduct Contractor background investigations. The Vendor Cage Code number must be provided to the VA PSAC, which will verify the information and conclude whether access to the Government’s site(s) and/or VA LAN systems can be granted.

Investigative History: The investigative history for Contractor personnel working under this contract must be maintained in the databases of either OPM or DCSA.

Government Responsibilities:

C) VBA PERSEC will pay for background investigations and reciprocals processed through the VA PSAC and conducted by OPM in advance.

D) The COR will notify and forward the Contractor a copy of the Certificate of Investigation when the BI has been favorably adjudicated or a Certificate of Eligibility (Form 4236) if the investigation has been reciprocated. The COR will also notify the Contractor of an unfavorable adjudication by the Government.

Training A) All Contractor and sub-contractor personnel requiring access to VA information and VA information systems shall complete the following before being granted access to VA information and networks:

1. Sign and acknowledge understanding of and responsibilities for compliance with the National Rules of Behavior related to access to VA information and information systems.

2. Successfully complete any cyber security or privacy training as required for VA personnel with equivalent information and/or system access.

B) The Contractor shall provide to the Contracting Officer a copy of the training certificates and signed Rules of Behavior for each applicable employee within one week from the date TMS access is granted and annually thereafter, as required. These online courses are located at https://www.tms.va.gov/learning/user/login.jsp

9. Changes to the Statement of Work (SOW):

Any changes to this SOW shall be authorized and approved only through written correspondence from the Contracting Officer. Costs incurred by the contractor through the actions of parties other than the Contracting Officer shall be borne by the contractor.

36C10D24Q0270

Page 1 of Page 1 of

SECTION C - CONTRACT CLAUSES

ADDENDUM to FAR 52.212-4 CONTRACT TERMS AND CONDITIONS—COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES Clauses that are incorporated by reference (by Citation Number, Title, and Date), have the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available.

The following clauses are incorporated into 52.212-4 as an addendum to this contract:

C.1 52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es):

https://www.acquisition.gov/browse/index/far https://www.va.gov/oal/library/vaar/

(End of Clause)

C.2 VAAR 852.203-70 COMMERCIAL ADVERTISING (MAY 2018)

The Contractor shall not make reference in its commercial advertising to Department of Veterans Affairs contracts in a manner that states or implies the Department of Veterans Affairs approves or endorses the Contractor’s products or services or considers the Contractor’s products or services superior to other products or services.

(End of Clause) C.3 VAAR 852.204-70 PERSONAL IDENTITY VERIFICATION OF CONTRACTOR PERSONNEL (MAY 2020)

(a) The Contractor shall comply with current Department of Veterans Affairs policy for personal identity verification of all employees performing under this contract when frequent and continuing access to VA facilities or information systems is required.

(b) The Contractor shall insert this clause in all subcontracts when the subcontractor’s employees will require frequent and continuing access to VA facilities or information systems.

(End of Clause) C.4 VAAR 852.211-76 LIQUIDATED DAMAGES - REIMBURSEMENT FOR DATA BREACH COSTS (FEB 2023)

(a) Definition. As used in this clause, ‘‘contract’’ means any contract, agreement, order or other instrument and encompasses the definition set forth in FAR 2.101.

(b) Non-disclosure requirements. As a condition of performance under a contract, order, agreement, or other instrument that requires access to sensitive personal information as defined in VAAR 802.101, the following is expressly required—

(1) The Contractor, subcontractor, their employees or business associates shall not, directly or through an affiliate or employee of the Contractor, subcontractor, or business associate, disclose sensitive personal information to any other person unless the disclosure is lawful and is expressly permitted under the contract; and

(2) The Contractor, subcontractor, their employees or business associates shall immediately notify the Contracting Officer and the Contracting Officer’s Representative (COR) of any security incident that occurs involving sensitive personal information.

(c) Liquidated damages. If the Contractor or any of its agents fails to protect VA sensitive personal information or otherwise engages in conduct which results in a data breach, the Contractor shall, in place of actual damages, pay to the Government liquidated damages of [$37.50] per affected individual in order to cover costs related to the notification, data breach analysis and credit monitoring. In the event the Contractor provides payment of actual damages in an amount determined to be adequate by the Contracting Officer, the Contracting Officer may forgo collection of liquidated damages.

(d) Purpose of liquidated damages. Based on the results from VA’s determination that there was a data breach caused by Contractor’s or any of its agents’ failure to protect or otherwise engaging in conduct to cause a data breach of VA sensitive personal information, and as directed by the Contracting Officer, the Contractor shall be responsible for paying to the VA liquidated damages in the amount of [$37.50] per affected individual to cover the cost of the following:

(1) Notification related costs.

(2) Credit monitoring reports.

(3) Data breach analysis and impact.

(4) Fraud alerts.

(5) Identity theft insurance.

(e) Relationship to termination clause, if applicable. If the Government terminates this contract, purchase order, or agreement, in whole or in part under clause 52.249–8, Default—Fixed-Price Supply and Service, or any other related FAR or VAAR clause included in the contract, in addition to the required liquidated damages for data breach related expenses specified in paragraph (c) above, the Contractor is liable for excess costs for those supplies and services for repurchase as may be required under the Termination clause.

(End of Clause)

C.5 VAAR 852.215-70 SERVICE-DISABLED VETERAN-OWNED AND VETERAN-OWNED SMALL BUSINESS EVALUATION FACTORS (JAN 2023) (DEVIATION)

(a) In an effort to achieve socioeconomic small business goals, VA shall evaluate offerors based on their service-disabled veteran-owned or veteran-owned small business certification status and their proposed use of eligible certified service-disabled veteran-owned small businesses (SDVOSBs) and certified veteran-owned small businesses (VOSBs) as subcontractors.

(b) Eligible and certified service-disabled veteran-owned small businesses offerors will receive full credit, and offerors qualifying as veteran-owned small businesses will receive partial credit for the certified Service-Disabled Veteran-Owned and Veteran-Owned Small Business Status evaluation factor. To receive credit, an offeror must be listed at the time of submission of offers and at time of award, as a certified SDVOSB/VOSB in the SBA certification database on the SBA Veteran Small Business Certification Program portal at https://veterans.certify.sba.gov/ (see 13 CFR 128) and be otherwise eligible in accordance with SBA size standards for the acquisition and limitations on subcontracting requirements set forth in SBA regulations (see 13 CFR 121, 125 and 128.).

(c) Non-Veteran offerors proposing to use certified SDVOSBs or VOSBs as subcontractors will receive some consideration under this evaluation factor. Offerors must state in their proposals the names of the certified SDVOSBs and VOSBs with whom they intend to subcontract and provide a brief description of the proposed subcontracts and the approximate dollar values of the proposed subcontracts. In addition, the proposed subcontractors must be listed at the time of submission of offers and at time of award, as a certified SDVOSB/VOSB in the SBA certification database.

(d) Pursuant to 38 U.S.C. 8127(g), any business concern that is determined by VA to have willfully and intentionally misrepresented a company’s SDVOSB/VOSB status is subject to debarment for a period of not less than five years. This includes the debarment of all principals in the business.

(End of Clause)

C.6 VAAR 852.215-71 EVALUATION FACTOR COMMITMENTS (OCT 2019)

(a) The offeror agrees, if awarded a contract, to use the service-disabled veteran-owned small businesses (SDVOSBs) or veteran-owned small businesses (VOSBs) proposed as subcontractors in accordance with 852.215–70, Service-Disabled Veteran-Owned and Veteran-Owned Small Business Evaluation Factors, or to substitute one or more SDVOSBs or VOSBs for subcontract work of the same or similar value.

(b) Pursuant to 38 U.S.C. 8127(g), any business concern that is determined by VA to have willfully and intentionally misrepresented a company’s SDVOSB/VOSB status is subject to debarment for a period of not less than five years. This includes the debarment of all principals in the business.

(End of Clause)

C.7 VAAR 852.232-72 ELECTRONIC SUBMISSION OF PAYMENT REQUESTS (NOV 2018)

(a) Definitions. As used in this clause—

(1) Contract financing payment has the meaning given in FAR 32.001;

(2) Designated agency office means the office designated by the purchase order, agreement, or contract to first receive and review invoices. This office can be contractually designated as the receiving entity. This office may be different from the office issuing the payment;

(3) Electronic form means an automated system transmitting information electronically according to the accepted electronic data transmission methods and formats identified in paragraph (c) of this clause. Facsimile, email, and scanned documents are not acceptable electronic forms for submission of payment requests;

(4) Invoice payment has the meaning given in FAR 32.001; and

(5) Payment request means any request for contract financing payment or invoice payment submitted by the contractor under this contract.

(b) Electronic payment requests. Except as provided in paragraph (e) of this clause, the contractor shall submit payment requests in electronic form. Purchases paid with a Government-wide commercial purchase card are considered to be an electronic transaction for purposes of this rule, and therefore no additional electronic invoice submission is required.

(c) Data transmission. A contractor must ensure that the data transmission method and format are through one of the following:

(1) VA’s Electronic Invoice Presentment and Payment System at the current website address provided in the contract.

(2) Any system that conforms to the X12 electronic data interchange (EDI) formats established by the Accredited Standards Center (ASC) and chartered by the American National Standards Institute (ANSI).

(d) Invoice requirements. Invoices shall comply with FAR 32.905.

(e) Exceptions. If, based on one of the circumstances in this paragraph (e), the Contracting Officer directs that payment requests be made by mail, the Contractor shall submit payment requests by mail through the United States Postal Service to the designated agency office. Submission of payment requests by mail may be required for—

(1) Awards made to foreign vendors for work performed outside the United States;

(2) Classified contracts or purchases when electronic submission and processing of payment requests could compromise the safeguarding of classified or privacy information;

(3) Contracts awarded by contracting officers in the conduct of emergency operations, such as responses to national emergencies;

(4) Solicitations or contracts in which the designated agency office is a VA entity other than the VA Financial Services Center in Austin, Texas; or

(5) Solicitations or contracts in which the VA designated agency office does not have electronic invoicing capability as described above.

(End of Clause) C.8 VAAR 852.239-70 SECURITY REQUIREMENTS FOR INFORMATION TECHNOLOGY RESOURCES (FEB 2023)

(a) Definitions. As used in this clause— Information technology has the same meaning in FAR 2.101 and also means Information and Communication Technology (ICT).

Information system security plan means a formal document that provides an overview of the security requirements for an information system and describes the security controls in place or planned for meeting those requirements.

(b) Responsibilities. The Contractor shall be responsible for information system security for all systems connected to a Department of Veterans Affairs (VA) network or operated by the Contractor for VA, regardless of location. This clause is applicable to all or any part of the contract that includes information technology resources or services in which the Contractor has physical or other system access to VA information that directly supports the mission of VA. Examples of tasks that require security provisions include—

(1) Hosting of VA e-Government sites or other information technology operations;

(2) Acquisition, transmission, or analysis of data owned by VA with significant replacement cost should the contractor’s copy be corrupted; and

(3) Access to VA general support systems/ major applications at a level beyond that granted the general public, e.g., bypassing a firewall.

(c) Information system security plan. The Contractor shall develop, provide, implement, and maintain an Information System Security Plan. VA information systems must have an information system security plan that provides an overview of the security requirements for the system and describes the security controls in place or the plan for meeting those requirements. This plan shall describe the processes and procedures that the Contractor will follow to ensure appropriate security of information system resources developed, processed, or used under this contract. The information system security plan should include implementation status, responsible entities, resources, and estimated completion dates. Information system security plans may also include, but are not limited to, a compiled list of system characteristics, and key security-related documents such as a risk assessment, PIA, system interconnection agreements, contingency plan, security configurations, configuration management plan, and incident response plan. The plan shall address the specific contract requirements regarding information systems related support or services included in the contract, to include the performance work statement (PWS) or statement of work (SOW). The Contractor’s Information System Security Plan shall comply with applicable Federal Laws that include, but are not limited to, 40 U.S.C. 11331, the Federal Information Security Modernization Act (FISMA) of 2014 and the E-Government Act of 2002. The plan shall meet information system security requirements in accordance with Federal and VA policies and procedures, and as amended during the term of this contract, and include, but are not limited to the following.

(1) OMB Circular A–130, Managing Information as a Strategic Resource;

(2) National Institute of Standards and Technology (NIST) Guidelines; and

(3) VA Directive 6500, VA Cybersecurity Program, and the directives and handbooks in the VA 6500 series related to VA information (including VA sensitive information and sensitive personal information and information systems security and privacy), as well as those set forth in the contract specifications, statement of work, or performance work statement. These include, but are not limited to, VA Handbook 6500.6, Contract Security; and VA Directive and Handbook 0710, Personnel Security and Suitability Program, which establishes VA’s procedures, responsibilities, and processes for complying with current Federal law, Executive Orders, policies, regulations, standards and guidance for protecting VA information, information systems (see 802.101, Definitions) security and privacy, and adhering to personnel security requirements when accessing VA information or information systems.

(d) Submittal of plan. Within 90 days after contract award, the Contractor shall submit the Information System Security Plan to the Contracting Officer for review and approval.

(e) Security accreditation. As required by current VA policy, the Contractor shall submit written proof of information system security accreditation to the Contracting Officer for non-VA owned systems. Such written proof may be furnished either by the Contractor or by a third party. Accreditation shall be in accordance with VA policy available from the Contracting Officer upon request. The Contractor shall submit for acceptance by the Contracting Officer along with this accreditation a final information system security plan, such as a risk assessment, security test and evaluation, and disaster recovery plan/continuity of operations plan. The accreditation and the final information system security plan and the accompanying documents, such as a risk assessment, security test and evaluation, and disaster recovery/continuity of operations plan.

(f) Annual validation. On an annual basis, the Contractor shall verify in writing to the Contracting Officer that the Information System Security Plan remains valid.

(g) Banners. The Contractor shall ensure that the official VA banners are displayed on all VA systems (both public and private) operated by the Contractor that contain Privacy Act information before allowing anyone access to the system. The Office of Information Technology will make official VA banners available to the Contractor.

(h) Screening and access. The Contractor shall screen all personnel requiring privileged access or limited privileged access to systems operated by the Contractor for VA or interconnected to a VA network in accordance with VA Directives and Handbooks referenced in paragraph (c) of this clause.

(i) Training. The Contractor shall ensure that its employees performing services under this contract complete VA security awareness training on an annual basis. This includes signing an acknowledgment that they have read, understand, and agree to abide by the VA Information Security Rules of Behavior (VA National Rules of Behavior) as required by 38 U.S.C. 5723; FAR 39.105, Privacy; clause 852.204–71, Information and Information Systems Security, and this clause on an annual basis.

(j) Government access. The Contractor shall provide the Government access to the Contractor’s and subcontractors’ facilities, installations, operations, documentation, databases, and personnel used in performance of the contract. The Contractor shall provide access to enable a program of information system inspection (to include vulnerability testing), investigation and audit (to safeguard against threats and hazards to the integrity, availability and confidentiality of VA data or to the function of information systems operated on behalf of VA), and to preserve evidence of computer crime.

(k) Notification of termination of employees. The Contractor shall immediately notify the Contracting Officer when an employee who has access to VA information systems or data terminates employment.

(l) Subcontractor flow down requirement. The Contractor shall incorporate and flow down the substance of this clause to all subcontracts that meet the conditions in paragraph (a) of this clause.

(End of Clause)

C.9 VAAR 852.242-71 ADMINISTRATIVE CONTRACTING OFFICER (OCT 2020)

The Contracting Officer reserves the right to designate an Administrative Contracting Officer (ACO) for the purpose of performing certain tasks/duties in the administration of the contract. Such designation will be in writing through an ACO Letter of Delegation and will identify the responsibilities and limitations of the ACO. A copy of the ACO Letter of Delegation will be furnished to the Contractor.

(End of Clause) (End of Addendum to 52.212-4)

C.10 52.212-5 CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT STATUTES OR EXECUTIVE ORDERS—COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES (MAY 2024)

(a) The Contractor shall comply with the following Federal Acquisition Regulation (FAR) clauses, which are incorporated in this contract by reference, to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services:

(1) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (JAN 2017) (section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L. 113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(2) 52.204–23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab Covered Entities (DEC 2023) (Section 1634 of Pub. L. 115–91).

(3) 52.204–25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment. (NOV 2021) (Section 889(a)(1)(A) of Pub. L. 115–232).

(4) 52.209-10, Prohibition on Contracting with Inverted Domestic Corporations (NOV 2015).

(5) 52.232–40, Providing Accelerated Payments to Small Business Subcontractors (MAR 2023) (31 U.S.C. 3903 and 10 U.S.C. 3801).

(6) 52.233-3, Protest After Award (AUG 1996) (31 U.S.C. 3553).

(7) 52.233-4, Applicable Law for Breach of Contract Claim (OCT 2004) (Public Laws 108-77 and 108-78 (19 U.S.C. 3805 note)).

(b) The Contractor shall comply with the FAR clauses in this paragraph (b) that the Contracting Officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services:

[] (1) 52.203–6, Restrictions on Subcontractor Sales to the Government (JUN 2020), with Alternate I (NOV 2021) (41 U.S.C. 4704 and 10 U.S.C. 4655).

[] (2) 52.203–13, Contractor Code of Business Ethics and Conduct (NOV 2021) (41 U.S.C. 3509).

[] (3) 52.203–15, Whistleblower Protections under the American Recovery and Reinvestment Act of 2009 (JUN 2010) (Section 1553 of Pub. L. 111-5). (Applies to contracts funded by the American Recovery and Reinvestment Act of 2009.)

[] (4) 52.203–17, Contractor Employee Whistleblower Rights (NOV 2023) (41 U.S.C. 4712); this clause does not apply to contracts of DoD, NASA, the Coast Guard, or applicable elements of the intelligence community—see FAR 3.900(a).

[X] (5) 52.204–10, Reporting Executive Compensation and First-Tier Subcontract Awards (JUN 2020) (Pub. L. 109–282) (31 U.S.C. 6101 note).

[] (6) [Reserved] [] (7) 52.204–14, Service Contract Reporting Requirements (OCT 2016) (Pub. L. 111–117, section 743 of Div. C).

[] (8) 52.204–15, Service Contract Reporting Requirements for Indefinite-Delivery Contracts (OCT 2016) (Pub. L. 111–117, section 743 of Div. C).

[X] (9) 52.204–27, Prohibition on a ByteDance Covered Application (JUN 2023) (Section 102 of Division R of Pub. L. 117–328).

[] (10) 52.204–28, Federal Acquisition Supply Chain Security Act Orders—Federal Supply Schedules, Governmentwide Acquisition Contracts, and Multi-Agency Contracts. (DEC 2023) (Pub. L. 115–390, title II).

[] (11)(i) 52.204–30, Federal Acquisition Supply Chain Security Act Orders— Prohibition. (DEC 2023) (Pub. L. 115–390, title II).

[] (ii) Alternate I (DEC 2023) of 52.204–30.

[X] (12) 52.209–6, Protecting the Government’s Interest When Subcontracting with Contractors Debarred, Suspended, or Proposed for Debarment. (NOV 2021) (31 U.S.C. 6101 note).

[] (13) 52.209-9, Updates of Publicly Available Information Regarding Responsibility Matters (OCT 2018) (41 U.S.C. 2313).

[] (14) [Reserved] [] (15) 52.219–3, Notice of HUBZone Set-Aside or Sole-Source Award (OCT 2022) (15 U.S.C. 657a).

[] (16) 52.219–4, Notice of Price Evaluation Preference for HUBZone Small Business Concerns (OCT 2022) (if the offeror elects to waive the preference, it shall so indicate in its offer) (15 U.S.C. 657a).

[] (17) [Reserved] [] (18)(i) 52.219-6, Notice of Total Small Business Set-Aside (NOV 2020) (15 U.S.C. 644).

[] (ii) Alternate I (MAR 2020) of 52.219-6.

[] (19)(i) 52.219-7, Notice of Partial Small Business Set-Aside (NOV 2020) (15 U.S.C. 644).

[] (ii) Alternate I (MAR 2020) of 52.219-7.

[] (20) 52.219-8, Utilization of Small Business Concerns (FEB 2024) (15 U.S.C. 637(d)(2) and (3)).

[] (21)(i) 52.219–9, Small Business Subcontracting Plan (SEP 2023) (15 U.S.C. 637(d)(4)).

[] (ii) Alternate I (NOV 2016) of 52.219-9.

[] (iii) Alternate II (NOV 2016) of 52.219-9.

[] (iv) Alternate III (JUN 2020) of 52.219–9.

[] (v) Alternate IV (SEP 2023) of 52.219–9.

[] (22)(i) 52.219-13, Notice of Set-Aside of Orders (MAR 2020) (15 U.S.C. 644(r)).

[] (ii) Alternate I (MAR 2020) of 52.219-13.

[] (23) 52.219–14, Limitations on Subcontracting (OCT 2022) (15 U.S.C. 657s).

[] (24) 52.219-16, Liquidated Damages—Subcontracting Plan (SEP 2021) (15 U.S.C. 637(d)(4)(F)(i)).

[] (25) 52.219–27, Notice of Set-Aside for, or Sole-Source Award to, Service-Disabled Veteran-Owned Small Business (SDVOSB) Concerns Eligible Under the SDVOSB Program (FEB 2024) (15 U.S.C. 657f).

[X] (26) (i) 52.219–28, Post-Award Small Business Program Representation (FEB 2024) (15 U.S.C. 632(a)(2)).

[] (ii) Alternate I (MAR 2020) of 52.219–28.

[] (27) 52.219–29, Notice of Set-Aside for, or Sole-Source Award to, Economically Disadvantaged Women-Owned Small Business Concerns (OCT 2022) (15 U.S.C. 637(m)).

[] (28) 52.219–30, Notice of Set-Aside for, or Sole-Source Award to, Women-Owned Small Business Concerns Eligible Under the Women-Owned Small Business Program (OCT 2022) (15 U.S.C. 637(m)).

[] (29) 52.219-32, Orders Issued Directly Under Small Business Reserves (MAR 2020) (15 U.S.C. 644(r)).

[] (30) 52.219–33, Nonmanufacturer Rule (SEP 2021) (15 U.S.C. 657s).

[X] (31) 52.222-3, Convict Labor (JUN 2003) (E.O. 11755).

[] (32) 52.222–19, Child Labor—Cooperation with Authorities and Remedies (FEB 2024) (E.O. 13126).

[X] (33) 52.222-21, Prohibition of Segregated Facilities (APR 2015).

[X] (34)(i) 52.222–26, Equal Opportunity (SEP 2016) (E.O. 11246).

[] (ii) Alternate I (FEB 1999) of 52.222-26.

[X] (35)(i) 52.222–35, Equal Opportunity for Veterans (JUN 2020) (38 U.S.C. 4212).

[] (ii) Alternate I (JUL 2014) of 52.222-35.

[X] (36)(i) 52.222–36, Equal Opportunity for Workers with Disabilities (JUN 2020) (29 U.S.C. 793).

[] (ii) Alternate I (JUL 2014) of 52.222-36.

[X] (37) 52.222–37, Employment Reports on Veterans (JUN 2020) (38 U.S.C. 4212).

[] (38) 52.222-40, Notification of Employee Rights Under the National Labor Relations Act (DEC 2010) (E.O. 13496).

[X] (39)(i) 52.222-50, Combating Trafficking in Persons (NOV 2021) (22 U.S.C. chapter 78 and E.O. 13627).

[] (ii) Alternate I (MAR 2015) of 52.222-50 (22 U.S.C. chapter 78 and E.O. 13627).

[] (40) 52.222-54, Employment Eligibility Verification (MAY 2022). (E. O. 12989). (Not applicable to the acquisition of commercially available off-the-shelf items or certain other types of commercial products or commercial services as prescribed in FAR 22.1803.)

[] (41)(i) 52.223-9, Estimate of Percentage of Recovered Material Content for EPA-Designated Items (MAY 2008) (42 U.S.C.6962(c)(3)(A)(ii)). (Not applicable to the acquisition of commercially available off-the-shelf items.)

[] (ii) Alternate I (MAY 2008) of 52.223-9 (42 U.S.C. 6962(i)(2)(C)). (Not applicable to the acquisition of commercially available off-the-shelf items.)

[] (42) 52.223-11, Ozone-Depleting Substances and High Global Warming Potential Hydrofluorocarbons (MAY 2024) (42 U.S.C. 7671, et seq.).

[] (43) 52.223-12, Maintenance, Service, Repair, or Disposal of Refrigeration Equipment and Air Conditioners (MAY 2024) (42 U.S.C. 7671, et seq.).

[] (44) 52.223-20, Aerosols. (MAY 2024) (42 U.S.C. 7671, et seq.).

[] (45) 52.223-21, Foams (MAY 2024). (42 U.S.C. 7671, et seq.).

[X] (46) 52.223-23, Sustainable Products and Services (MAY 2024) (E.O. 14057, 7 U.S.C. 8102, 42 U.S.C. 6962, 42 U.S.C. 8259b, and 42 U.S.C. 7671I).

[] (47)(i) 52.224-3, Privacy Training (JAN 2017) (5 U.S.C. 552a).

[] (ii) Alternate I (JAN 2017) of 52.224-3.

[] (48)(i) 52.225-1, Buy American—Supplies (OCT 2022) (41 U.S.C. chapter 83).

[] (ii) Alternate I (OCT 2022) of 52.225-1.

[] (49)(i) 52.225-3, Buy American—Free Trade Agreements—Israeli Trade Act (NOV 2023) (19 U.S.C. 3301 note, 19 U.S.C. 2112 note, 19 U.S.C. 3805 note, 19 U.S.C. 4001 note, 19 U.S.C. chapter 29 (sections 4501-4732), Public Law 103-182, 108-77, 108-78, 108-286, 108-302, 109-53, 109-169, 109-283, 110-138, 112-41, 112-42, and 112-43.

[] (ii) Alternate I [Reserved].

[] (iii) Alternate II (DEC 2022) of 52.225-3.

[] (iv) Alternate III (FEB 2024) of 52.225-3.

[] (v) Alternate IV (OCT 2022) of 52.225-3.

[] (50) 52.225–5, Trade Agreements (NOV 2023) (19 U.S.C. 2501, et seq., 19 U.S.C. 3301 note [X] (51) 52.225-13, Restrictions on Certain Foreign Purchases (FEB 2021) (E.O.'s, proclamations, and statutes administered by the Office of Foreign Assets Control of the Department of the Treasury).

[] (52) 52.225–26, Contractors Performing Private Security Functions Outside the United States (OCT 2016) (Section 862, as amended, of the National Defense Authorization Act for Fiscal Year 2008; 10 U.S.C. Subtitle A, Part V, Subpart G Note).

[] (53) 52.226-4, Notice of…