36C10E19Q0043_0001.docx

5. PROJECT NUMBER (if applicable)

CODE

7. ADMINISTERED BY

2. AMENDMENT/MODIFICATION NUMBER

CODE

6. ISSUED BY

8. NAME AND ADDRESS OF CONTRACTOR

4. REQUISITION/PURCHASE REQ. NUMBER

3. EFFECTIVE DATE

9A. AMENDMENT OF SOLICITATION NUMBER

9B. DATED

PAGE OF PAGES

10A. MODIFICATION OF CONTRACT/ORDER NUMBER

10B. DATED

BPA NO.

1. CONTRACT ID CODE

FACILITY CODE

CODE

Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended, by one of the following methods:

The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers

E. IMPORTANT:

is extended,

(a) By completing Items 8 and 15, and returning __________ copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted; or (c) By separate letter or electronic communication which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY is not extended.

12. ACCOUNTING AND APPROPRIATION DATA

(REV. 11/2016)

is required to sign this document and return ___________ copies to the issuing office.

is not, A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE CONTRACT ORDER NO. IN ITEM 10A.

15C. DATE SIGNED

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(b).

RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by letter or electronic communication, provided each letter or electronic communication makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER

Contractor

16C. DATE SIGNED

14. DESCRIPTION OF AMENDMENT/MODIFICATION

16B. UNITED STATES OF AMERICA

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER

16A. NAME AND TITLE OF CONTRACTING OFFICER

15B. CONTRACTOR/OFFEROR

STANDARD FORM 30

PREVIOUS EDITION NOT USABLE

Prescribed by GSA - FAR (48 CFR) 53.243 (Type or print) (Type or print) (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

(Number, street, county, State and ZIP Code) (If other than Item 6) (Specify type of modification and authority) (such as changes in paying office, appropriation date, etc.)

(If required)

(SEE ITEM 11)

(SEE ITEM 13)

(X)

CHECK

ONE

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS,

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

(Signature of person authorized to sign) (Signature of Contracting Officer)

VA

00101 Department of Veterans Affairs Veterans Benefits Administration Office of Acquisition 1800 G. Street N.W.

Washington

DC

20006 00101 Department of Veterans Affairs Veterans Benefits Administration Office of Acquisition 1800 G. Street N.W.

Washington

DC

20006

36C10E19Q0043 12-14-2018

X

See CONTINUATION Page x One A. Remove SOW dated 12/12/2018 , and incorporate SOW dated 12/21/2018.

B. Remove the CLIN structure incorporated into the original RFQ and incorporate the attached A.1 PRICE/COST Schedule, dated 12/21/2018.

C. The attached questions from industry and responses from the Government are provided.

D. The quotation due date is hereby extended to 01/03/2019 @ 3:00PM EST.

COMBINED SYNOPSIS SOLICITATION

i. This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in Subpart 12.6, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; quotes are being requested and a written solicitation will not be issued. The government anticipates award of a single firm fixed price contract. A quotation is not an offer and, consequently, cannot be accepted by the Government to form a binding contract. Therefore, issuance by the Government of an order in response to a supplier’s quotation does not establish a contract. The order is an offer by the Government to the supplier to buy certain supplies or services upon specified terms and conditions. A contract is established when the supplier accepts the offer. The government intends to award without discussion.

ii. Solicitation Amendment 36C10E19Q0043 0001 is issued as a request for quote (RFQ).

iii. The solicitation incorporates provisions and clauses in effect through Federal Acquisition Circular 2005-99A, effective June 15, 2018.

The combined synopsis/solicitation is set aside for Service Disabled Veteran Owned Small Business Concerns. Only quotes submitted by Disabled Veteran Owned Small Business concerns will be accepted by the Government. Any quote that is submitted by a contractor that is not a verified Service Disabled Veteran Owned Small Business in VIP will not be considered for award. The applicable NAICS Code for this solicitation is 561990 and the Small Business Size limitation is $11M. Offers from SDVOSB concerns must be registered and verified in the Center for Verification and Evaluation (CVE) Vendor Information Pages (VIP) website at https://www.vip.vetbiz.gov/ at the time and date set for receipt of offers and at the time and date of award to be considered for award. Offers from SDVOSB concerns that are not registered in VIP shall be rejected as non-responsive and shall not be considered for award.

iv. The contractor shall provide all equipment, services, material, tools, labor, facilities transportation and supervision to for the destruction of documents.

FOB Destination pricing to include most favored customer discounts.

Wage Determination: WD 15-4517 (Rev.9) 07/10/2018. Pricing considering should factor in consideration for final destruction of shredded documents and media by the contractor.

Please provide all requested information and pricing for all CLIN as shown:

Company Name:

Company DUNS Number:

Company Tax ID Number:

Point of Contact:

Telephone:

SCHEDULE PAGE RFQ 36C10E19Q0008

once a week for 10 each 95 GL per week, please quote on a per bin usage per week, as well as a total cost per week/year.

POP Begin: 3/1/2019 POP End: 2/29/2020 ***Invoicing/payment will be for actual usage per week*** bin cost $____ X $ weekly cost of $_____ X 52 weeks = $_____

1 YR

once a week for 10 each 95 GL per week, please quote on a per bin usage per week, as well as a total cost per week/year.

POP Begin: 3/1/2020 POP End: 2/28/2021 bin cost $____ X $ weekly cost of $_____ X 52 weeks = $_____

1YR

once a week for 10 each 95 GL per week, please quote on a per bin usage per week, as well as a total cost per week/year.

POP Begin: 3/1/2021 POP End: 2/28/2022 bin cost $____ X $ weekly cost of $_____ X 52 weeks = $_____

1YR

once a week for 10 each 95 GL per week, please quote on a per bin usage per week, as well as a total cost per week/year.

POP Begin: 3/1/2022 POP End: 2/28/2023 bin cost $____ X $ weekly cost of $_____ X 52 weeks = $_____

1YR

once a week for 10 each 95 GL per week, please quote on a per bin usage per week, as well as a total cost per week/year.

POP Begin: 3/1/2023 POP End: 2/29/2024 bin cost $____ X $ weekly cost of $_____ X 52 weeks = $_____

1YR

STATEMENT OF WORK

DOCUMENT DESTRUCTION SERVICES FOR THE ATLANTA REGIONAL OFFICE (VBA)

1. SCOPE OF WORK

The Contractor shall provide all services, labor, equipment, tools, transportation, facilities and equipment to furnish on‐site document destruction of paper documents in accordance with Department of Veterans Affairs (VA) Directive 6371. The contractor shall provide for one scheduled service during normal working hours (Monday through Friday) and unscheduled services that may arise from time to time when Department of Veterans Affairs is purging records. Contractor shall perform all services on‐site at the Atlanta VA Regional Office, 1700 Clairmont Road, Decatur GA 30033.

2. REQUIREMENTS

A. Contractor shall provide one vehicle capable of shredding at time of service.

B. Contractor shall shred paper documents in accordance with VA Directive 6371. Destruction of Temporary Records. See Appendix A.

C. Contractor shall allow for on‐site vehicle inspection of shredded media for compliance of VA Policy.

D. Contractor shall allow for the inspection of the contractor warehouse at least annually if requested.

E. Contractor is responsible for safeguarding documents until final destruction and shall provide safeguard addendums to the service contract as required by Directive 6371. See Appendix A.

F. Contractor is responsible for moving containers from holding area to contractor’s vehicle for on‐site destruction.

G. Contractor shall provide (10) 95‐gallon bins with wheels for on‐site storage.

H. All Contractor employees that will handle VA Sensitive Information shall be required to adhere to the Contractor Rules of Behavior for safeguarding of VA Sensitive Information. Prior to the start of work, the Contractor shall submit to the Contracting Officer a signed copy of the Rules of Behavior for each employee who will handle VA Sensitive Information in the performance of the contract. The Contractor shall also provide the Contracting Officer a list of those employees that have reviewed the Contractor Rules of Behavior at the beginning or the Contract, whenever there is a change to the employee list, or at least annually.

3. CONFIDENTIALITY

Confidentiality: All work is to be performed by competent personnel, experienced and qualified to provide services. Contractors shall keep all VA records and related information strictly confidential.

4. CERTIFICATION & ACCREDITATION

The C&A requirements do not apply, and a C&A package is not required.

5. SHREDDING ESTIMATES:

The Atlanta VA Regional Office estimates but does not guarantee that it will destroy (10) 95 Gallon bin per week. Invoicing and actual services paid for will be for usage per week.

6. BILLING

Contractor will provide the VA Finance Department with a monthly invoice to include:

A. Weekly invoices showing the total number of bins destroyed.

B. Date and time service was provided.

C. Invoice Number D. Total monthly charge

7. ATLANTA REGIONAL OFFICE POINTS OF CONTACT

The Contractor shall comply with all security requirements imposed by the Regional Office Director at all times while on the installation. Contractor personnel involved in civil crimes and/or other incidents of misconduct may be restricted from entry onto the installation.

11. VA INFORMATION AND INFORMATION SYSTEM SECURITY/PRIVACY REQUIREMENTS

A. GENERAL

All Contractors and Contractor personnel shall be subject to the same Federal security and privacy laws, regulations, standards and VA policies as VA, including the Privacy Act, 5 U.S.C. §552a, and VA personnel, regarding information and information system security. Contractors must follow policies and procedures outlined in VA Directive 6500, Information Security Program which is available at: http://www1.va.gov/vapubs and its handbooks to ensure appropriate security controls are in place.

B. ACCESS TO VA INFORMATION AND VA INFORMATION SYSTEMS

The Contractor will not have access to VA Information and/or VA Information Systems.

C. SECURITY REQUIREMENTS FOR UNCLASSIFIED INFORMATION TECHNOLOGY RESOURCES

The contractor and their personnel shall be subject to the same Federal laws, regulations, standards and VA policies as VA personnel, regarding information and information system security. These include, but are not limited to Federal Information Security Management Act (FISMA), Appendix III of OMB Circular A‐ 130, and guidance and standards, available from the Department of Commerce’s National Institute of Standards and Technology (NIST). This also includes the use of common security configurations available from NIST’s Web site at: http://checklists.nist.gov.

To ensure that appropriate security controls are in place, Contractors must follow the procedures set forth in “Contract Security” located in the VA Handbook 65000.6.

D. VA INFORMATION CUSTODIAL REQUIREMENTS

(1) VA information provided to the Contractor for either the performance or administration of this contract shall only be used for those purposes. No other use is permitted without the CO’s express written authorization. This clause expressly limits the Contractor’s rights to use data as described in Rights in Data ‐ General, FAR 52.227‐14(d)(1). The Government shall retain the rights to all data and records produced in the execution or administration of this contract.

(2) Information generated by the Contractor as part of the contractor’s normal business operations, such as medical records created in the course of providing treatment, is subject to review by the Office of General counsel OCG to determine if the information is the property of VA and subject to VA policy. If the information is determined by OCG to not be the property VA, the restrictions required for VA information will not apply.

(3) VA information will not be co‐mingled with any other data on the contractors/sub-contractors information systems/media storage systems in order to ensure VA requirements related to media sanitization can be met. VA also reserves the right to conduct on‐site inspection of information destruction/media sanitization procedures to ensure they are in compliance with VA policy requirements.

(4) Prior to termination or completion of this contract, Contractor will not destroy information received from VA or gathered or created by the Contractor in the course of performing this contract without prior written approval by the CO. A Contractor destroying data on VA’s behalf must do so accordance with National Archives and Records Administration (NARA) requirements as outlined in VA Directive 6300, Records and Information Management and its Handbook 6300.1 Records Management Procedures, and applicable VA Records Control Schedules

(5) Contractor will receive, gather, store, back up, maintain, use, disclose and dispose of VA information only in compliance with the terms of this contract and applicable federal and VA information confidentiality and security laws, regulations and policies. Applicable federal information security regulations include all Federal Information Processing Standards (FIPS) and Special Publications (SP) issued by the National Institute of Standards and Technology (NIST). If federal or VA information confidentiality and security laws, regulations and policies become applicable to the VA information or information systems after execution of the contract, or if NIST issues or updates applicable FIPS after execution of this contract, the parties agree to negotiate in good faith to implement the information confidentiality and security laws, regulations and policies, including FIPS or SP, in this contract.

(6) Contractors collecting, storing, or disseminating personal identifiable information (PII) or protected health information (PHI) data must conform to all pertinent regulations, laws, and VA directives related to privacy. Contractors must provide access for VA privacy reviews and assessments and provide appropriate documentation as required.

(7) The Contractor shall not make copies of VA information, electronic or otherwise, except as necessary to perform the terms of the agreement or to preserve electronic information stored on Contractor electronic storage media for restoration in case any electronic equipment or data used by the Contractor needs to be restored to an operating state.

(8) If VA determines that the contractor has violated any of the information confidentiality, privacy, and security provisions of the contract, it shall be sufficient grounds for VA to terminate the contract for default or terminate for cause under Federal Acquisition Regulation (“FAR”) part 12.

(9) The Contractor will store, transport or transmit VA sensitive information in an encrypted form, using a VA‐approved encryption application that meets the requirements of NIST’s FIPS 140‐2 standard.

(10) The Contractor’s firewall and Web services security controls, if applicable, shall meet or exceed VA’s minimum requirements. VA directives are available on the VA directives Web site at:

https://www.va.gov/vapubs .

(11) Except for uses and disclosures of VA information authorized by this contract for performance of the contract, the contractor may use and disclose VA information only in two other situations: (i) in response to a qualifying order of a court of competent jurisdiction, or (ii) with VA’s prior written approval. The contractor will refer all requests for, demands for production of, or inquiries about, VA information and information systems to the VA Contracting Officer for response.

(12) Notwithstanding the provision above, the contractor shall not release medical quality assurance records protected by 38 U.S.C. 5705 or records pertaining to drug addiction, sickle cell anemia, alcoholism or alcohol abuse, or infection with human immunodeficiency virus protected under 38 U.S.C. 7332 under any circumstances, including in response to a court order, and shall immediately refer such court orders or other inquiries to the VA contracting officer for response.

(13) The Contractor shall not use technologies banned in VA in meeting the requirements of the contract (e.g., Bluetooth‐enabled devices).

E. SECURITY INCIDENT INVESTIGATION

(1) The term “security incident” means an event that has, or could have, resulted in loss or damage to VA assets, or sensitive information, or an action that breaches VA security procedures. The contractor shall immediately (within 1 hour) notify the COTR and simultaneously, the VA Incident Management and Response (privacyservice@va.gov.) the designated ISO/Privacy Officer for the contract of any known or suspected security/privacy incident, or any unauthorized disclosure of sensitive information, including that contained in system(s) to which the contractor has access.

(2) To the extent known by the contractor, the contractor’s notice to VA will identify the information involved, the circumstances surrounding the incident (including to whom, how, when, and where the VA information/assets were placed at risk or compromised), and any other information that the contractor considers relevant.

(3) Contractor will simultaneously report the incident to the appropriate law enforcement entity(ies) of jurisdiction in instances of theft or break‐in. The contractor, its employees, and its subcontractors and their employees will cooperate with VA and any law enforcement authority responsible for the investigation and prosecution of any possible criminal law violation(s) associated with any incident. The contractor will cooperate with VA in any civil litigation to recover VA information, to obtain monetary or other compensation from a third party for damages arising from any incident, or to obtain injunctive relief against any third party arising from, or related to, the incident.

(4) To the extent practicable, contractor shall mitigate any harmful effects on individuals whose VA information was accessed or disclosed in a security incident. In the event of a data breach with respect to any sensitive personal information processed or maintained by the contractor or subcontractor under the contract, the contractor is responsible for liquidated damages to be paid to VA.

12. CONFIDENTIALITY AND NONDISCLOSURE

It is agreed that:

(1) The preliminary and final deliverables and all associated working papers, application source code, and other material deemed relevant by the VA which have been generated by the contractor in the performance of this task order are the exclusive property of the U.S. Government, and shall be submitted to the COTR at the conclusion of the task order.

(2) The CO will be the sole authorized official to release verbally or in writing, any data, the draft deliverables, the final deliverables, or any other written or printed materials pertaining to this task order. No information shall be released by the contractor. Any request for information relating to this task order presented to the contractor shall be submitted to the CO for response.

(3) Press releases, marketing material or any other printed or electronic documentation related to this project, shall not be publicized without the written approval of the CO.

13. PERIOD OF PERFORMANCE

The period of performance under this contract is March 16, 2019 – March 15, 2020 unless the term of the contract is extended through the exercise of the clause at FAR 52.217‐9, Option to Extend the Term of the Contract. The ultimate completion date of the contract considering the award of the Base Period and all Option Periods shall not exceed March 15, 2024.

14. HOLIDAYS

The contractors shall not be required to perform any under this contract on any of the following federal holidays:

New Year's Day, Martin Luther King Jr’ s Birthday, Washington's Birthday, Memorial Day, Independence Day, Labor Day, Columbus Day, Veterans' Day, Thanksgiving Day, and Christmas Day.

vii. FAR 52.212-1, Instructions to Offerors – Commercial Items (JAN 2017), applies to this solicitation. The following provisions are added as addenda:

52.217-5 Evaluation of Options (JUL 1990) 52.252-1 Solicitation Provisions Incorporated by Reference (FEB 1998) This solicitation incorporates one or more solicitation provisions by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. The offeror is cautioned that the listed provisions may include blocks that must be completed by the offeror and submitted with its quotation or offer. In lieu of submitting the full text of those provisions, the offeror may identify the provision by paragraph identifier and provide the appropriate information with its quotation or offer. Also, the full text of a solicitation provision may be accessed electronically at this/these address(es):

http://www.acquisition.gov/far/index.html http://www.va.gov/oal/library/vaar/

(End of Provision) 852.270-1 Representatives of Contracting Officers (JAN 2008) (End of Addendum to 52.212-1)

52.212-2, Evaluation – Commercial Items, applies to this solicitation. The Government will award a contract resulting from this solicitation to the responsible offeror whose offer conforming to the solicitation will be most advantageous to the Government.

0. Technical

i. AAA NAID CERTIFIED

ii. Must be compliant with VA Directive 6371.

iii. What is your final destruction process? What do you do with the shredded documents and media?

0. Past Performance Submit three At least 3 references.

0. Technical and Past Performance when combined are more important than price.

Price will be determined by total cost of the contract. (base+4 option years)

Submission of Offers:

1. Offers are due no later than January 03, 2019 by 3:00 PM EST.

2. Offers shall be submitted electronically to eric.davidson@va.gov

3. The email subject line must contain the following: “Quote in Response to 36C10E19Q0043 0001, Shredding services for Atlanta VARO”.

4. Offers shall be based on the requirements of the request for quotation and must contain the following:

a) A cover page including the following information: Business Name, Socioeconomic category (i.e. SDVOSB, VOSB), Address, DUNS Number, Name, Phone number, and email address for the Primary Point of Contact, Tax Identification Number (TIN), and any GSA contract number if applicable to this solicitation.

b) Detailed information showing the specifics of the proposed equipment and monitoring/reporting of security incidents.

c) A completed price schedule in the format as provided in the attachment.

d) Acknowledgement of any amendments (if applicable).

5. Solicitation Questions: Questions of a technical nature shall be submitted to the Contracting Officer in writing via e-mail. No phones calls will be taken. Oral questions of a technical nature are not acceptable due to the possibility of misunderstanding or misinterpretation. The cut-off date and time for receipt of questions is December 27, 2018 by 3:00 PM EST. Questions received after this date and time may not be answered. Questions will be answered in a formal amendment to the solicitation so all interested parties can see the responses. Questions must be submitted via email NO PHONE CALLS.

6. Amendments: Amendments to this solicitation will be posted at http://www.fedbizopps.gov(FBO). Paper copies of the amendments will NOT be individually mailed. By registering to receive notifications on FBO, offerors will be notified by email of any new amendments that have been issued. No other notification of amendments will be provided. Potential Offerors are advised that they are responsible for obtaining and acknowledging any amendments to the solicitation. Failure to acknowledge an amendment may result in your offer being considered unacceptable.

viii. FAR 52.212-3, Offeror Representations and Certifications -Commercial Items (NOV 2017) applies to this solicitation. The offeror has completed the annual representations and certifications electronically via the SAM website access through http://www.acquisition.gov. After reviewing the SAM database information, the offeror verifies by submission of this offer that the representations and certifications currently posted electronically at FAR 52.212-3, Offeror Representations and Certifications-Commercial Items, have been entered or updated in the last 12 months, are current, accurate, complete, and applicable to this solicitation (including the business size standard applicable to the NAICS code referenced for this solicitation), as of the date of this offer and are incorporated in this offer by reference (see FAR 4.1201), except for paragraphs N/A.

ix. FAR 52.212-4, Contract Terms and Conditions – Commercial Items (JAN 2017) applies to this solicitation. The following provisions clauses are added as addenda:

52.252-2 Clauses Incorporated by Reference (FEB 1998) This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es):

http://www.acquisition.gov/far/index.html http://www.va.gov/oal/library/vaar/ (End of Clause) 52.203-19 Prohibition on Contracting with Entities That Require Certain Internal Confidentiality Agreements (JAN 2017) 52.217-8 Option to Extend Services (NOV 1999) 52.217-9 Option to Extend the Term of the Contract (MAR 2000)

(a) The Government may extend the term of this contract by written notice to the Contractor within 15 days provided that the Government gives the Contractor a preliminary written notice of its intent to extend at least 60 days before the contract expires. The preliminary notice does not commit the Government to an extension.

(b) If the Government exercises this option, the extended contract shall be considered to include this option clause.

(c) The total duration of this contract, including the exercise of any options under this clause, shall not exceed Five (5) years.

52.227-14 Rights in Data-General (MAY 2014) 52.232-18 Availability of Funds (APR 1984) 52.232-19 Availability of Funds for the Next Fiscal Year (Apr 1984) 52.232-33 Payment by Electronic Funds Transfer-System for Award Management (SAM)

(JUL 2013)

52.232-40 Providing Accelerated Payments to Small Business Subcontractors (DEC 2013) 52.246-4 Inspection of Services Fixed Price (AUG 1996) 52.252-6 Authorized Deviations in Clause (APR 1984) 852.203-70 Commercial Advertising (JAN 2008) 852.273-74 Award without Exchanges (Jan 2003) 852.219-10 VA Notice of Total Service Disabled Veteran-Owned Small Business Set-Aside (JUL 2016) (DEVIATION)

(a) Definition. For the Department of Veterans Affairs, “Service-Disabled Veteran-owned small business concern or SDVSOB:”

(1) Means a small business concern:

(i) Not less than 51 percent of which is owned by one or more service-disabled Veterans or, in the case of any publicly owned business, not less than 51 percent of the stock of which is owned by one or more service-disabled Veterans or eligible surviving spouses (see VAAR 802.201 Surviving Spouse definition);

(ii) The management and daily business operations of which are controlled by one or more service-disabled Veterans (or eligible surviving spouses) or, in the case of a service-disabled Veteran with permanent and severe disability, the spouse or permanent caregiver of such Veteran;

(iii) The business meets Federal small business size standards for the applicable North American Industry Classification System (NAICS) code identified in the solicitation document;

(iv) The business has been verified for ownership and control pursuant to 38 CFR 74 and is so listed in the Vendor Information Pages database, (https://www.vip.vetbiz.gov); and

(v) The business will comply with subcontracting limitations in 13 CFR 125.6, as applicable.

(2) “Service-disabled Veteran” means a Veteran, as defined in 38 U.S.C. 101(2), with a disability that is service-connected, as defined in 38 U.S.C. 101(16).

(b) General.

(1) Offers are solicited only from verified service-disabled Veteran-owned small business concerns. Offers received from concerns that are not verified service-disabled Veteran-owned small business concerns shall not be considered.

(2) Any award resulting from this solicitation shall be made to a verified service-disabled Veteran-owned small business concern.

(c) Agreement. A service-disabled Veteran-owned small business concern agrees that in the performance of the contract, the concern will comply with the limitation on subcontracting requirements in 13 CFR § 125.6.

(d) A joint venture may be considered a service-disabled Veteran owned small business concern if the joint venture complies with the requirements in 13 CFR 125.15, provided that any reference therein to SDVO SBC is to be construed to apply to a VA verified SDVOSB as appropriate.

(e) Any service-disabled Veteran-owned small business concern (non-manufacturer) must meet the requirements in FAR 19.102(f) of the Federal Acquisition Regulation to receive a benefit under this program.

(End of Clause) 852.252-70 Solicitation Provisions or Clause Incorporated by Reference (Jan 2008) 852.232-72 Electronic Submission of Payment Requests (NOV 2012) 852.237-70 Contractor Responsibilities (APR 1984) 852.246-70 Guarantee (JAN 2008) 852.246-71 Inspection (JAN 2008) (End of Addendum to 52.212-4)

xii. 52.212-5, Terms and Conditions Required to Implement Executive Orders – Commercial Items (JAN 2017), applies to this solicitation. The following provisions and clauses are selected as appropriate to this solicitation:

Paragraph a clause applicable:

52.203-19 Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (JAN 2017) 52.209-10 Prohibition on Contracting with Inverted Domestic Corporations (NOV 2015) 52.233-3 Protest After Award (AUG 1996) (31 U.S.C. 3553).

52.233-4 Applicable Law for Breach of Contract Claim (OCT 2004) 52.233-1 Disputes (May 2014) 52.204-10 Reporting Executive Compensation & First-Tier Subcontract Awards (OCT 2016) 52.204-18 Commercial and Government Entity Code Maintenance (JUL 2016) 52.209-6 Protecting the Government’s Interest When Subcontracting with Contractors Debarred, Suspended, or Proposed for Debarment (OCT 2015) 52.219-28 Post-Award Small Business Program Representation (Jul 2013) 52.222-3 Convict Labor (June 2003) 52.222-19 Child Labor Cooperation with Authorities and Remedies (OCT 2016)

52.222-50 Combating Trafficking in Persons (MAR 2015) 52.223-18 Encouraging Contractor Policies to Ban Text Messaging While Driving (AUG 2011) 52.225-3 Buy American--Free Trade Agreements--Israeli Trade Act (MAY 2014) (Alt.I)

52.222-41 Service Contract Labor Standards (MAY 2014) 52.222-42 Statement of Equivalent Rates for Federal Hires (MAY 2014) This Statement is for Information Only:

It is not a Wage Determination

(End of clause) 52.222-43 Fair Labor Standards Act and Service Contract Labor Standards-Price Adjustment (Multiple Year and Option Contracts) (MAY 2014) 52.222-55 Minimum Wages Under Executive Order 13658 (DEC 2015) 52.222-62 Paid Sick Leave Under Executive Order 13706 (JAN 2017) 52.237-2 Protection of Government Buildings, Equipment and Vegetation (APR 1984)

xiii. Additional Contract Requirements or terms and conditions: None

xiv. Defense Priorities and Allocations Systems and assigned rating: N/A

xv. Vendors bear the burden of ensuring that quotes, and any applicable amendments, are emailed on time. All pages of the quote must be emailed before the deadline specified in this solicitation. Failure to provide any of the required information or the providing of inadequate or unclear information may result in the offer being considered unacceptable. Federal Acquisition Regulations require that federal contractors register in the System for Award Management (SAM) database at http://www.sam.gov and enter all mandatory information into the system. Award cannot be made until the contractor has registered.

Appendix A. VA Handbook 6500.1 6 (d). Destroying:

1. Destruction of media is the ultimate form of sanitization. After media are destroyed, they cannot be reused as originally intended. Physical destruction can be accomplished using a variety of methods including disintegration, incineration, pulverizing, shredding, and melting.

2. If destruction is decided upon, due to the high security categorization of the information or due to environmental factors, any residual medium must be able to withstand a laboratory attack. The following are destruction methods:

(a) Disintegration, Incineration, Pulverization, and Melting: These sanitization methods are designed to completely destroy media. These methods are typically carried out at an outsourced metal destruction or incineration facility with the specific capabilities to perform these activities effectively, securely, and safely.

(b) Shredding: Paper shredders may be used to destroy flexible media, such as diskettes, once the media are physically removed from their outer containers. The shred size of the refuse must be small enough so there is reasonable assurance, in proportion to the data confidentiality level, that the information cannot be reconstructed.

(c) Optical mass storage media, including compact disks (CD, CD_R, CD-RW, and CD-ROM), DVDs, and magneto optic (MO) disks must be destroyed by pulverizing, crosscut shredding or burning. When material is disintegrated or shredded, Refer to VA Directive 6371 for shredding requirement

Appendix B. Certification of Destruction: Written documentation by a records destruction or recycling contractor or vendor that attests to the completion of the destruction process after the destruction of VA hard drives has taken place. This certification is not considered a valid certification of destruction if submitted prior to the actual destruction of the records.

Certification will include the completion of VA Form 0751 (INFORMATION TECHNOLOGY EQUIPMENT SANITIZATION CERTIFICATE).

5.1 BACKGROUND CHECKS: If required by this RFQ background checks will be processed through VA Security and Investigation Center Resource Site (SIC).Instructions and forms will be provided only to the contractor receiving award, and must be completed before start of performance of contract of contract. Training per 6500 HB will be provided through the program office point of contact. Background investigation type will be “NACI” and forms that will be provided to selectee will be pre-populated in certain areas.

5.2 SECURITY REQUIREMENTS

5.3 Government Responsibilities:

5.3.1 Contractor personnel involved in the actual handling and shredding of documents shall wear a contractor-provided, clearly readable identification badge that at a minimum state, the name of the employee and the company. Contractor personnel's clothes are to be clean and maintained in good repair.

5.3.2 If performing on site shredding, contractor shall be required to interrupt their work at any time so as not to interfere with the normal functioning at any facility, including utility services, fire protection systems, passage of facility visitors, personnel, equipment and carts.

5.3.3 Contractor shall coordinate schedule of days and times of anticipated performance with the station point of contact. Changes to the schedule shall be approved in advance of the contractor visiting the facility. Send a copy of the agreed schedule via email in pdf format to the Contracting Officer

5.3.4 The contractor shall schedule the times during normal business hours, which are between 8:00 a.m. and 4:30 p.m. Monday through Friday except Federal Holidays. For the first three months after contract implementation the Contractor shall monitor the usage on each container placed at the V A. Within 15 days after that period the Contractor shall provide a copy to the program office point of contact and cc the Contracting Officer a report detailing any suggestions regarding the placement, size or frequency of service

5.3.5 The government shall not sort paper, remove paper clips, staples, rubber bands or any other fasteners from restricted information. The contractor shall provide the necessary recycling containers for use in Government-designated storage areas in sufficient quantities for the storage of the recyclable material accumulations prior to removal by the contractor. The station point of contact shall be responsible for approving container styles and container location/placement. At the time of each pick up, all paper must be removed. After materials are completely shredded, material shall be destroyed by recycling.

5.3.6 The contractor shall provide shredding services for destruction of media material such as floppy disks; tapes, micro-film; microfiche; microfilm; audio tapes; video tapes; cd's; DVD’s; Mylar; stored data; disks & diskettes, and other similar items. At times, destruction of U.S. flags shall be required. The Contractor shall establish a system for the destruction of the U. S. flag according the US Flags due respect with approval by program office.

5.3.7 The station points of contact, Records Management Officer (RMO) and if available the Contracting Officer (CO) shall conduct an initial orientation/site visit of their facility. This should be scheduled annually prior to end of each year. Records Management shall provide a summary less than half a page of site visit, with cc to the Contracting via email.

Appendix C

a. CONTRACTOR RULES AND BEHAVIOR (Contractor shall complete and return all pages with quote as a separate attachment, pdf format preferred)

1. Contractor agrees to abide by these terms and account for the “I” and “my” and “me” used in these rules.

2. I understand and agree that I have no reasonable expectation of privacy in accessing or using any VA, or other Federal Government information systems.

3. I consent to reviews and actions by the Office of Information & Technology (OI&T) staff designated and authorized by the VA Chief Information Officer (CIO) and to the VA OIG regarding my access to and use of any information assets or resources associated with my performance of services under the contract terms with the VA. These actions may include monitoring, recording, copying, inspecting, restricting access, blocking, tracking, and disclosing to all authorized OI&T, VA, and law enforcement personnel as directed by the VA CIO without my prior consent or notification.

4. I consent to reviews and actions by authorized VA systems administrators and Information Security Officers solely for protection of the VA infrastructure, including, but not limited to monitoring, recording, auditing, inspecting, investigating, restricting access, blocking, tracking, disclosing to authorized personnel, or any other authorized actions by all authorized OI&T, VA, and law enforcement personnel systems; deny access to Federal government systems; accrue resources for unauthorized use on Federal government systems; or otherwise misuse Federal government systems or resources are prohibited.

5. I understand that such unauthorized attempts or acts are subject to action that may result in criminal, civil, or administrative penalties. This includes penalties for violations of Federal laws including, but not limited to, 18 U.S.C. §1030 (fraud and related activity in connection with computers) and 18 U.S.C. §2701 (unlawful access to stored communications).

6. I agree that OI&T staff, in the course of obtaining access to information or systems on my behalf for performance under the contract, may provide information about me including, but not limited to, appropriate unique personal identifiers such as date of birth and social security number to other system administrators, Information Security Officers (ISOs), or other authorized staff without further notifying me or obtaining additional written or verbal permission from me.

7. I understand I must comply with VA’s security and data privacy directives and handbooks. I understand that copies of those directives and handbooks can be obtained from the Contracting Officer. If the contractor believes the policies and guidance provided by the Contracting Officer is a material unilateral change to the contract, the contractor must elevate such concerns to the Contracting Officer for resolution.

8. I will report suspected or identified information security/privacy incidents to the Contracting Officer and to the local ISO or Privacy Officer as appropriate.

GENERAL RULES OF BEHAVIOR

b. Rules of Behavior are part of a comprehensive program to provide complete information security. These rules establish standards of behavior in recognition of the fact that knowledgeable users are the foundation of a successful security program. Users must understand that taking personal responsibility for the security of their computer and the information it contains is an essential part of their job. The following rules apply to all VA contractors. I agree to:

c. Follow established procedures for requesting, accessing, and closing user accounts and access. I will not request or obtain access beyond what is normally granted to users or by what is outlined in the contract.

d. Use only systems, software, databases, and data which I am authorized to use, including any copyright restrictions.

e. I will not use other equipment (OE) (non‐contractor owned) for the storage, transfer, or processing of VA sensitive information without a VA CIO approved waiver, unless it has been reviewed and approved by local management and is included in the language of the of the contract. If authorized to use OE IT equipment, I must ensure that the system meets all applicable 6500 Handbook requirements for OE.

f. Not use my position of trust and access rights to exploit system controls or access information for any reason other than in the performance of the contract.

g. Not attempt to override or disable security, technical, or management controls unless expressly permitted to do so as an explicit requirement under the contract or at the direction of the Contracting Officer or ISO. If I am allowed or required to have a local administrator account on a government‐owned computer, that local administrative account does not confer me unrestricted access or use, nor the authority to bypass security or other controls except as expressly permitted by the VA CIO or CIO's designee.

h. Contractors’ use of systems, information, or sites is strictly limited to fulfill the terms of the contract. I understand no personal use is authorized. I will only use other Federal government information systems as expressly authorized by the terms of those systems. I accept that the restrictions under ethics regulations and criminal law still apply.

i. Grant access to systems and information only to those who have an official need to know.

j. Protect passwords from access by other individuals.

k. Create and change passwords in accordance with VA Handbook 6500 on systems and any devices protecting VA information as well as the rules of behavior and security settings for the system in question.

l. Protect information and systems from unauthorized disclosure, use, modification, or destruction. I will only use encryption that is FIPS 140‐2 validated to safeguard VA sensitive information, both safeguarding VA sensitive information in storage and in transit regarding my access to and use of any information assets or resources associated with my performance of services under the contract terms with the VA.

m. Follow VA Handbook 6500.1, Electronic Media Sanitization to protect VA information. I will contact the Contracting Officer for policies and guidance on complying with this requirement and will follow the Contracting Officer’s orders.

n. Ensure that the Contracting Officer has previously approved VA information for public dissemination, including e‐mail communications outside of the VA as appropriate. I will not make any unauthorized disclosure of any VA sensitive information through the use of any means of communication including but not limited to e‐mail, instant messaging, online chat, and web bulletin boards or logs.

o. Not host, set up, administer, or run an Internet server related to my access to and use of any information assets or resources associated with my performance of services under the contract terms with the VA unless explicitly authorized under the contract or in writing by the Contracting Officer.

p. Protect government property from theft, destruction, or misuse. I will follow VA directives and handbooks on handling Federal government IT equipment, information, and systems. I will not take VA sensitive information from the workplace without authorization from the Contracting Officer.

q. Only use anti‐virus software, antispyware, and firewall/intrusion detection software authorized by VA. I will contact the Contracting Officer for policies and guidance on complying with this requirement and will follow the Contracting Officer's orders regarding my access to and use of any information assets or resources associated with my performance of services under the contract terms with VA.

r. Not disable or degrade the standard anti‐virus software, antispyware, and/or firewall/intrusion detection software on the computer I use to access and use information assets or resources associated with my performance of services under the contract terms with VA. I will report anti‐virus, antispyware, firewall or intrusion detection software errors, or significant alert messages to the Contracting Officer.

s. Understand that restoration of service of any VA system is a concern of all users of the system.

t. Complete required information security and privacy training, and complete required training for the particular systems to which I require access.

ADDITIONAL CONDITIONS FOR USE OF NON‐ VA INFORMATION TECHNOLOGY RESOURCES

u. When required to complete work under the contract, I will directly connect to the VA network whenever possible. If a direct connection to the VA network is not possible, then I will use VA approved remote access software and services.

v. Remote access to non‐public VA information technology resources is prohibited from publicly‐ available IT computers, such as remotely connecting to the internal VA network from computers in a public library.

w. I will not have both a VA network line and any kind of non‐VA network line including a wireless network card, modem with phone line, or other network device physically connected to my computer at the same time, unless the dual connection is explicitly authorized by the Contracting Officer.

x. I understand that I may not obviate or evade my responsibility to adhere to VA security requirements by subcontracting any work under any given contract or agreement with VA, and that any subcontractor(s) I engage shall likewise be bound by the same security requirements and penalties for violating the same.

Questions/Answers from vendors on original RFQ (36C10E19Q0008 0001)

See responses below.

1. Is there a current contract in place, if so when does the current contract end? Yes. ends Feb 28, 2019

1. Who is the current contractor performing shredding service? Shred-it USA, LLC

1. What is the contract number assigned to the current contract VA101V-14-F-0434 and what year was it awarded 02/26/2014

1. Amount spent for shredding services over the last 6 months? Only Answered with FOIA request.

1. Will there be a need for the new contractor to destroy computer hard drives; if so, how many? Requirement removed from updated SOW, no services for computer hard drives.

1. Will the secure containers be placed on the same floor? Yes

1. P.3, 1. – will unscheduled services be handled via modification to the contract once the need is confirmed?