P09_Statement of Work-Updated-.docx

STATEMENT OF WORK

DEPARTMENT OF VETERANS AFFAIRS

Veterans Benefits Administration St. Louis Regional Benefits Office 9700 Page Avenue, St. Louis, MO 63134

1) Introduction: The Department of Veterans Affairs St. Louis Regional Office (VAROSTL) facility, requires the replacement of all of the existing Innometriks card readers utilized by the St. Louis Regional Office.

2) Location of Facility:

9700 Page Ave St. Louis MO, 63132

3) Scope: VAROSTL intends to enter into a Firm-Fixed Price (FFP) contract for replacement of all Innometriks card readers with a new model (as identified in table 1) to ensure maximum security and access. The CCure security system has a total of 83 card readers to be replaced throughout the building. The Contractor shall furnish all labor, tools, materials, transportation, equipment, disposal, and supervision necessary to perform all required on-site card reader replacement services to include integration into the existing CCure 9000 system and testing for the 83 card readers to include 3 spare card readers.

The Government’s regular (normal) working hours are 8:00AM to 4:00PM Central Time Monday through Friday, except for federal holidays: New Year’s Day, Martin Luther King Jr.’s Birthday, President’s Day, Memorial Day, Juneteenth, Independence Day, Labor Day, Columbus Day, Veterans Day, Thanksgiving Day and Christmas Day. Exceptions: facility closure due to local/national emergencies, administrative closures, or similar Government directed closures.

4) Description of Supplies/Services:

The contractor shall provide the following: (services to take place between the hours of 8:00 AM and 4:00 PM central time, Monday through Friday excluding federal holidays.

(Table 1)

ACCESS CONTROL

Reader - High Assurance

Installation Kits

Miscellaneous parts/equipment required for installation

Alternate comparable equipment will be considered prior to award (all equipment shall be compatible with cCure 9000).

· Remove, replace, integrate, and test 83 PIV card readers.

· Provide three (3) spare readers as indicated in Table 1.

· Schedule an initial facility visit within 20 calendar days of contract award to determine locations and equipment needed.

· Provide at minimum One (1) year warranty from date of completed installation to cover at minimum product defects and installation craftsmanship.

· Provide initial training to VA staff on the basic troubleshooting and functionality of the installed equipment.

5) Requirement & Task Performance Standards

Quality Standards:

The Contractor shall have the capability of responding to warranty / craftsmanship calls with 24 hours of notification and shall be able to resolve discrepancies within 24 hours of warranty / craftmanship of evaluation. (total 48 hours) . The Contractor is to ensure that all card readers operate at an optimal level of performance after replacement.

The Contractor shall be an authorized Software House vendor and demonstrate capability of removing, installing and integrating PIV card readers into the cCure 9000 system. All work shall be performed by Contractor personnel specifically qualified and trained to work on the specified equipment.

All work shall be accomplished in conformance with the approved and accepted standards of the Security System trade industry; equipment manufacturers; local, state, and federal standards; all applicable building and safety codes; and the National Electrical Code. Replacement work shall be carried to completion, including operational checks and cleanup of the job site. Except where otherwise noted, replacements shall match existing dimensions, finish, designs, and function.

6) Employee Identification:

Contractor personnel shall wear an identification badge that, at minimum, displays the company’s name, the employee’s photo, and employee’s name. Contractor personnel shall comply with all Government rules and regulations while at the facility.

7) Period of Performance:

90 days from the date of award.

8) Security:

All Contractors and Contractor personnel shall be subject to the same Federal security and privacy laws, regulations, standards and VA policies as VA, including the Privacy Act, 5 U.S.C.§552a, and VA personnel, regarding information and information system security. Contractors must follow policies and procedures outlined in VA Directive 6500, Information Security Program; and VA Handbook 6500.6. See attached VA 6500.6 Appendix C which is incorporated in the resulting task order to ensure appropriate security controls are in place.

Contractor Personnel Security Any individual who requires access to the VA site(s), personally identifiable information (PII) and/or access to VA local area network (LAN) systems shall be the subject of a favorable fingerprint check (SAC) adjudicated by VBA Personnel Security Office (PERSEC). Individuals are required a background investigation and must receive a favorable adjudication from the VA Personnel Security and Adjudication Center (PSAC). These requirements are applicable to all sub-contractor personnel requiring any Background Investigation (BI) conducted by Defense Counterintelligence Security Agency (DCSA).

The level of BI will be in accordance with VA Directive 0710 dated June 4, 2010 and is available at http://www.va.gov/vapubs/viewPublication.asp?Pub_ID=487&FTyp.

Background Investigation:

The Contractor employee level of BI required for this effort is:

Low Risk (T1) Security – Employees Moderate Risk (T2) – Managers and Directors

Note: The position sensitivity should reflect the results from the completion of the PDAT versus the title of the individual.

Investigation Documents: Immediately after contract award, the COR will provide the Contractor with the following background investigation documents to be completed by the Contractor and returned thru the COR to VBA PERSEC to begin the background investigations process for all contract employees working on the contract who will have access to VA/VBA facilities, VA systems, or privacy data:

a) Background Investigation Request Worksheet

b) Optional Form 306 – Declaration of Federal Employment

c) VBA Contractor Fingerprint Request Form

d) VA Form 0710 – Authorization for Release of Information Fair Credit Report (if T2 or higher)

e) (SC) Self-Certification Form (if applicable)

f) VA Form 0711 – Request for Personal Identity Verification Card

g) SIC Contractor Background Request Form (unsigned)

Submitting Completed Package:

Upon receipt of documents listed in above from the COR, the COR will submit the background investigation package to VBA’s Personnel Security Specialist. Upon notification of favorable fingerprint results, the COR should request the official VA email account and will be notified of all background investigation requirements preventing the Contractor from an immediate onboard. Thereafter, the Contractor shall receive an email notification from DCSA including detailed instructions regarding completion of the background clearance application process in the Electronic Questionnaires for Investigations Processing (e-QIP) system. e-QIP is an online, internet accessible system, where the Contractor employee shall complete the security questionnaire required for OPM to process background investigation. Once the e-QIP is released by VBA PERSEC, scheduled by OPM, the Contractor may begin work while the background investigation is ongoing.

Reciprocation: Contractors who have current favorable background investigation previously conducted by OPM or DCSA may be accepted through reciprocation. When a previous personnel security clearance is currently held, it does not preclude the Contractor form submitting a complete Background Investigation Package as stated above to the COR immediately after contract award for all Contractor employees who will be working on the contract.

Pre-Screen: The Contractor shall prescreen all personnel who require access to VA site(s) and/or access to VA LAN systems to ensure they maintain a U.S. citizenship or Alien Registration that authorizes them to work in the U.S., and are able to read, write, speak, and understand the English language.

Contractor Performance: Contract performance shall not commence before:

a) The VBA has confirmed favorable fingerprint results, or

b) PSAC confirms that it has received the Contractor’s investigative documents, The documents are complete, and that the background investigation information has been released to OPM for scheduling of the background investigation, or

c) VBA or the PSAC has confirmed that the verified investigation will be reciprocated.

Copy of Certificate of Investigation (COI): The COR will notify and forward the Contractor a copy of the Certificate of Investigation when the background investigation has been favorably completed or a Certificate of Eligibility (Form 4236) if the investigation has been reciprocated. The Contractor, if notified, of an unfavorable adjudication by the Government, shall withdraw the employee from consideration from working under the contract. Failure to comply, the Contractor personnel security requirements may result in termination of the contract for default.

Responsibility: The Contractor shall be responsible for the actions of those contract and subcontract employees it provides to perform work for the VBA. In the event damage arises from work performed by Contractor employees the Contractor will be responsible for resources necessary to remedy the incident.

Vendor Selection: Should the Contractor use a vendor other than OPM or DCSA to conduct background investigations, the investigative company must be certified by OPM/DCSA to conduct Contractor background investigations. The Vendor Cage Code number must be provided to the VA PSAC, which will verify the information and conclude whether access to the Government’s site(s) and/or VA LAN systems can be granted.

Investigative History: The investigative history for Contractor personnel working under this contract must be maintained in the databases of either OPM or DCSA.

Government Responsibilities:

A) After the VBA PERSEC has quality controlled the BI package from the Contractor, the VBAPERSEC will send a courtesy e-mail notification to the Contractor and the COR identifying the e-QIP email from DCSA including detailed instructions regarding completion of the BI application process and the level of background that was requested.

B) Upon receipt of required background investigative documents, VBA PERSEC will review the background investigative documents for completion and initiate the background investigation by forwarding the background investigative documents to OPM to conduct the BI. If the background documents are not complete, VBA PERSEC will notify the Contractor and COR of deficiencies and include corrective instructions.

C) VBA PERSEC will pay for background investigations and reciprocals processed through the VA PSAC and conducted by OPM in advance.

D) The COR will notify and forward the Contractor a copy of the Certificate of Investigation when the BI has been favorably adjudicated or a Certificate of Eligibility (Form 4236) if the investigation has been reciprocated. The COR will also notify the Contractor of an unfavorable adjudication by the Government.

Training A) All Contractor and sub-contractor personnel requiring access to VA information and VA information systems shall complete the following before being granted access to VA information and networks:

1. Sign and acknowledge understanding of and responsibilities for compliance with the National Rules of Behavior related to access to VA information and information systems.

2. Successfully complete any cyber security or privacy training as required for VA personnel with equivalent information and/or system access.

B) The Contractor shall provide to the Contracting Officer a copy of the training certificates and signed Rules of Behavior for each applicable employee within one week from the date TMS access is granted and annually thereafter, as required. These online courses are located at https://www.tms.va.gov/learning/user/login.jsp

9. Changes to the Statement of Work (SOW):

Any changes to this SOW shall be authorized and approved only through written correspondence from the Contracting Officer. Costs incurred by the contractor through the actions of parties other than the Contracting Officer shall be borne by the contractor.