36C24718R0750-010.pdf

PAGE 1 OF 1. REQUISITION NO.

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NO. 5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

a. NAME b. TELEPHONE NO. (No Collect Calls) 8. OFFER DUE DATE/LOCAL

TIME

9. ISSUED BY CODE 10. THIS ACQUISITION IS UNRESTRICTED OR SET ASIDE: % FOR:

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

8(A)

NAICS:

SIZE STANDARD:

11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

13a. THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700)

13b. RATING

14. METHOD OF SOLICITATION

RFQ IFB RFP

15. DELIVER TO CODE 16. ADMINISTERED BY CODE

17a. CONTRACTOR/OFFEROR CODE FACILITY CODE 18a. PAYMENT WILL BE MADE BY CODE

TELEPHONE NO. DUNS: DUNS+4:

PHONE: FAX:

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW IS CHECKED

SEE ADDENDUM

19. 20. 21. 22. 23. 24.

ITEM NO. SCHEDULE OF SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Govt. Use Only)

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA ARE ARE NOT ATTACHED.

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN _______________ 29. AWARD OF CONTRACT: REF. ___________________________________ OFFER COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DATED ________________________________. YOUR OFFER ON SOLICITATION DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY (BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED SET FORTH HEREIN IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30b. NAME AND TITLE OF SIGNER (TYPE OR PRINT) 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (TYPE OR PRINT) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION (REV. 2/2012)

PREVIOUS EDITION IS NOT USABLE Prescribed by GSA - FAR (48 CFR) 53.212

7. FOR SOLICITATION

INFORMATION CALL:

STANDARD FORM 1449

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS 59

509-18-2-5468-0003

36C24718R0750 09-14-2018

Jamal K. Carter 404-321-6111 x 201481 09-21-2018

Department of Veterans Affairs VISN 7 Network Contracting Activity 501 Greene Street Hatcher Building - Suite 2 Augusta GA 30901

X 100

X

519130

1000 Employees

N/A

Charlie Norwood VA Medical Center One Freedom way

Augusta GA 30904-6285

VISN 7 Network Contracting Activity 501 Greene Street Hatcher Building - Suite 2 Augusta GA 628530901

FMS-VA-2 (101)

Financial Services Center P.O. Box 149971 Austin TX 78714-9971

See CONTINUATION Page

$0.00 See CONTINUATION Page

X X

X 2

Laurinda Millage

CONTRACTING OFFICER

36C24718R0750

Table of Contents

SECTION A

A.1 SF 1449 SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

SECTION B - CONTINUATION OF SF 1449 BLOCKS

B.1 CONTRACT ADMINISTRATION DATA

B.2 LIMITATIONS ON SUBCONTRACTING-- MONITORING AND COMPLIANCE (JUN

2011)

B.3 PRICE/COST SCHEDULE

ITEM INFORMATION

SECTION C - CONTRACT CLAUSES

C.1 52.217-8 OPTION TO EXTEND SERVICES (NOV 1999)

C.2 52.217-9 OPTION TO EXTEND THE TERM OF THE CONTRACT (MAR 2000)

C.3 VAAR 852.203-70 COMMERCIAL ADVERTISING (MAY 2018)

C.4 VAAR 852.232-72 ELECTRONIC SUBMISSION OF PAYMENT REQUESTS (NOV

2012)

C.5 VAAR 852.237-70 CONTRACTOR RESPONSIBILITIES (APR 1984)

C.6 52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

C.7 52.212-5 CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT

STATUTES OR EXECUTIVE ORDERS—COMMERCIAL ITEMS (JAN 2018)

C.8 VAAR 852.211-73 BRAND NAME OR EQUAL (JAN 2008)

SECTION E - SOLICITATION PROVISIONS

E.1 52.233-2 SERVICE OF PROTEST (SEP 2006)

E.2 52.212-3 OFFEROR REPRESENTATIONS AND CERTIFICATIONS—COMMERCIAL

ITEMS (NOV 2017)

E.3 52.252-1 SOLICITATION PROVISIONS INCORPORATED BY REFERENCE (FEB

1998)

E.4 VAAR 852.219-10 VA NOTICE OF TOTAL SERVICE-DISABLED VETERAN-OWNED

SMALL BUSINESS SET-ASIDE (JUL 2016)(DEVIATION)

SECTION D - CONTRACT DOCUMENTS, EXHIBITS, OR ATTACHMENTS

SECTION B - CONTINUATION OF SF 1449 BLOCKS

B.1 CONTRACT ADMINISTRATION DATA

1. Contract Administration: All contract administration matters will be handled by the following individuals:

a. CONTRACTOR:

b. GOVERNMENT: Contracting Officer 36C247 Laurinda Millage

VISN 7 Network Contracting Activity

501 Greene Street

Hatcher Building - Suite 2

Augusta GA 30901

2. CONTRACTOR REMITTANCE ADDRESS: All payments by the Government to the contractor will be made in accordance with:

[X] 52.232-33, Payment by Electronic Funds Transfer—System For Award Management, or

[] 52.232-36, Payment by Third Party

3. INVOICES: Invoices shall be submitted in arrears:

a. Quarterly []

b. Semi-Annually []

c. Other [X] Yearly

4. GOVERNMENT INVOICE ADDRESS: All Invoices from the contractor shall be submitted electronically in accordance with VAAR Clause 852.232-72 Electronic Submission of Payment Requests.

Department of Veterans Affairs

FMS-VA-2 (101)

Financial Services Center

P.O. Box 149971

Austin TX 78714-9971

ACKNOWLEDGMENT OF AMENDMENTS: The offeror acknowledges receipt of amendments to the Solicitation numbered and dated as follows:

AMENDMENT NO DATE

B.2 LIMITATIONS ON SUBCONTRACTING-- MONITORING AND

COMPLIANCE (JUN 2011)

This solicitation includes VAAR 852.219-10 VA Notice of Total Service- Disabled Veteran-Owned Small Business Set-Aside. Accordingly, any contract resulting from this solicitation will include this clause. The contractor is advised in performing contract administration functions, the CO may use the services of a support contractor(s) retained by VA to assist in assessing the contractor's compliance with the limitations on subcontracting or percentage of work performance requirements specified in the clause.

To that end, the support contractor(s) may require access to contractor's offices where the contractor's business records or other proprietary data are retained and to review such business records regarding the contractor's compliance with this requirement. All support contractors conducting this review on behalf of VA will be required to sign an “Information Protection and Non-Disclosure and Disclosure of Conflicts of Interest Agreement” to ensure the contractor's business records or other proprietary data reviewed or obtained in the course of assisting the CO in assessing the contractor for compliance are protected to ensure information or data is not improperly disclosed or other impropriety occurs. Furthermore, if VA determines any services the support contractor(s) will perform in assessing compliance are advisory and assistance services as defined in FAR 2.101, Definitions, the support contractor(s) must also enter into an agreement with the contractor to protect proprietary information as required by FAR 9.505-4, obtaining access to proprietary information, paragraph (b). The contractor is required to cooperate fully and make available any records as may be required to enable the CO to assess the contractor's compliance with the limitations on subcontracting or percentage of work performance requirement.

B.3 PRICE/COST SCHEDULE

ITEM INFORMATION

ITEM

NUMBE

R

DESCRIPTION OF

SUPPLIES/SERVIC

ES

QUANTIT

Y

UNI

T UNIT PRICE AMOUNT

0001 1.00 YR ________________

Contractor shall provide access to an electronic medical references database to all hospitals and all clinics in VISN 7. Offerer system must be compatible to work through Open Athens access management system.

Base plus 4 option years.

Contract Period: Base

POP Begin: 09-26-2018 POP End: 09-25-2019

0101 1.00 YR ________________

Option Yr 1 Contractor shall provide access to an electronic medical references database to all hospitals and all clinics in VISN 7. Offerer system must be compatible to work through Open Athens access management system.

Contract Period: Option 1 POP Begin: 09-26-2019 POP End: 09-25-2020

0201 1.00 YR ________________

Option Yr 2 Contractor shall provide access to an electronic medical references database to all hospitals and all clinics in VISN 7. Offerer system must be compatible to work through Open Athens access management system.

Contract Period: Option 2 POP Begin: 09-26-2020 POP End: 09-25-2021

0301 1.00 YR ________________

Option Yr 3 Contractor shall provide access to an electronic medical references database to all hospitals and all clinics in VISN 7. Offerer system must be compatible to work through Open Athens access management system.

Contract Period: Option 3 POP Begin: 09-26-2021 POP End: 09-25-2022

0401 1.00 YR ________________

Option Yr 4 Contractor shall provide access to an electronic medical references database to all hospitals and all clinics in VISN 7. Offerer system must be compatible to work through Open Athens access management system.

Contract Period: Option 4 POP Begin: 09-26-2022 POP End: 09-25-2023

GRAND TOTAL ________________

SECTION C - CONTRACT CLAUSES

FAR

Number

Title Date

52.212-1 INSTRUCTIONS TO OFFERORS—COMMERCIAL ITEMS JAN 2017

PERFORMANCE BASED WORK STATEMENT

VISN 7 Electronic Pharmacy & Medical Reference Database

1. GENERAL: The contractor will provide access to the electronic medical references database to all hospitals and all clinics in VISN 7. This will be available seven days a week, 24 hours a day. Contractor staff will be available either by phone or e-mail to remedy any problems with access to the database or within the database.

2. BACKGROUND: VISN 7 encompasses all VA hospitals and community based outpatient clinics in Alabama, Georgia and South Carolina. Having transitioned from hardcopy medical references to electronic reference databases; VISN 7 requires online web access to searchable medical reference databases for quick and easy retrieval of up to date and evidence based medical information for health care providers and patients.

3. PERIOD OF PERFORMANCE: One Base year with the possibility of four one-year option periods.

Base Year: 26 September 2018 to 25 September 2019 1st Option Period 26 September 2019 to 25 September 2020 2nd Option Period 26 September 2020 to 25 September 2021 3rd Option Period 26 September 2021 to 25 September 2022 4th Option Period 26 September 2022 to 25 September 2023

4. PLACE OF PERFORMANCE: VISN 7 VA Medical Centers located in Alabama, Georgia, and South Carolina, locations:

Department of Veterans Affairs Atlanta VAMC 1670 Clairmont Rd Decatur GA 30333

Department of Veterans Affairs Charlie Norwood VAMC One Freedom Way Augusta GA 30904

Department of Veterans Affairs Birmingham VAMC 700 South 19th St

Birmingham AL 35233

Central Alabama Health Care System 215 Perry Hill Rd Montgomery AL 36109

Department of Veterans Affairs Central Alabama Health Care Systems 2400 Hospital Rd Tuskegee AL 36083

Department of Veterans Affairs Ralph H. Johnson VAMC 109 Bee St Charleston SC 29493

Department of Veterans Affairs W B Dorn VA Medical Center 6349 Garners Ferry Rd Columbia SC 29209

Department of Veterans Affairs Carl Vinson VAMC 1826 Veterans Blvd Dublin GA 31021

Department of Veterans Affairs Tuscaloosa VAMC 3701 Loop Road East Tuscaloosa AL 35404

5. DAYS AND HOURS OF OPERATION: Monday thru Sunday, 24 hours/7 days a week.

6. PERFORMANCE REQUIREMENTS: Contractor will provide access to a Medical- Pharmacy database though OpenAthens system for VISN 7 hospitals and clinics. Database shall be available to staff without the need of password or user IDs.

Contractor shall provide technical support either by phone or e-mail. Contractor will provide 24-hour access to this system seven (7) days a week. Contractor will be available 24/7 to correct problems. This will be accomplished through the company representative or a company helpline through contact with a VISN 7 Librarian. Training will be provided by the contractor either online or in person through a company representative.

7. GENERAL REQUIREMENTS:

The contractor must provide 24/7 license rights for immediate access to unlimited simultaneous users from any web-enabled computer to employees in facilities/offices of the VA Southeast health Care Network, VISN 7, for deliverables that meet to or exceed the electronic drug reference database currently in use. (Micromedex through OpenAthens) OpenAthens is the gateway between the online world of subscription-based content and those who want to access it via their organization. It is the dashboard that makes librarians’ lives less complex. It is the portal that extends the audience of publishers. It is robust, reliable and ever-evolving

1. The VA Southeast Health Care Network requires online access to a drug reference database that shall provide via one interface and one search platform, access to the following capabilities.

a. Alternative or Herbal Medicine Reference

b. comprehensive drug information system

c. drug interaction and reaction identification system

d. international drug reference, that included international brand names and items

e. patient education/teaching system that can be printed out

f. Clinical Diagnostic tool related to emergency medicine

g. Clinical Diagnostic tool to help with identification and diagnosis of a specific disease

h. An IV compatibility and compounding reference to help with sterile compounding, similar to

Trissels and Kings (other trade names)

i. Material Safety Data Sheets (MSDS)-

j. Poison identification and treatment system

k. A pregnancy and lactation safety system for pharmacy, clinical database to help guide clinical decision making

l. A medical, hazard and regulatory information system for emergency response guidelines

2. Database shall provide drug information, dosing and therapeutic tools, and drug identification to ensure VA Southeast Health Care Network staff has tools necessary to provide safe and effective pharmaceutical care to Veterans. At a minimum, the reference shall provide:

a. medication dosage calculators, tablet/capsule identification and emergency treatment

b. administration, monitoring, compatibility, and admixing instructions for parenteral medications

c. patient management and treatment protocols (including drugs, plants, household products)

d. complementary and alternative medicine, including international coverage

e. an international directory providing formulas, synonyms, and therapeutic courses of drugs and drug derivatives

f. comprehensive drug monographs, drug consults, and references

g. online, comprehensive reference resource that is able to offer specialty focused clinical resources including multi-drug interaction checker and evidence-based application for PDA devices.

3. Status URL, account number, and password (if necessary).

4. The electronic reference must be accessible remotely through Open Athens access management system, developed by Eduserv, as well as mobile devices such as Smartphone or iPad devices.

5. The contractor shall provide usage statistics on a monthly basis. The format of the usage statistics is provided either via email or contractor provided login and should include session count, search count, and total document retrievals per title.

6. Contractor shall provide online tutorials. Contractor shall also provide on-site training, briefings, and updates to Health Care Systems in the VA Southeast Health Care Network if requested.

7. If a plug-in, additional software or recommended software is required for optimal use, please include specific requirements. Contractor will address any questions or problems encountered when using this product with supported software or hardware.

8. Contractor shall provide technical support numbers. Customer service shall be available to troubleshoot website/connectivity issues via phone, email, etc. The contractor is expected to trouble shoot access as needed, but it will not be necessary to respond during non-operational hours.

8. PER REVIEW OF VA HANDBOOK 6500.6, CONTRACT SECURITY, APPENDIX A-

INFORMATION SECURITY AND PRIVACY CHECKLIST:

“The C&A requirements do not apply and a Security Accreditation Package is not required.”

Acquisition of this service does not involve the storage, generating, transmitting, or exchanging of VA sensitive information to the vendor

There may exist exposure to VA sensitive information, in particular to sensitive personal information (SPI) while implementing contractual services

Minimum Statutory Requirements Prohibition on unauthorized disclosure: Information made available to the contractor or subcontractor by VA for the performance or administration of this contract or information developed by the contractor/subcontractor in performance or administration of the contract shall be used only for those purposes and shall not be used in any other way without the prior written agreement of the VA. This clause expressly limits the contractor/subcontractor's rights to use data as described in Rights in Data - General, FAR 52.227-14(d) (1). See VA Handbook 6500.6, Appendix C, paragraph 3.a.

Requirement for data breach notification: Upon discovery of any known or suspected security/privacy incidents, or any unauthorized disclosure of sensitive information, including that contained in system(s) to which the contractor/subcontractor has access, the contractor/subcontractor shall immediately and simultaneously notify the COR, the designated ISO, and Privacy Officer for the contract. The term ‘security incident’ means an event that has, or could have, resulted in unauthorized access to, loss or damage to VA assets, or sensitive information, or an action that breaches VA security procedures. See VA Handbook 6500.6, Appendix C, paragraph 6.a

Requirement to pay liquidated damages in the event of a data breach: Consistent with the requirements of 38 U.S.C. §5725, a contract may require access to sensitive personal information. If so, the contractor is liable to VA for liquidated damages in the event of a data breach or privacy incident involving any SPI the contractor/subcontractor processes or maintains under this contract.

The contractor/subcontractor shall provide notice to VA of a “security incident” as set forth in the Security Incident Investigation section above. Upon such notification, VA must secure from a non- Department entity or the VA Office of Inspector General an independent risk analysis of the data breach to determine the level of risk associated with the data breach for the potential misuse of any sensitive personal information involved in the data breach. The term 'data breach' means the loss, theft, or other unauthorized access, or any access other than that incidental to the scope of employment, to data containing sensitive personal information, in electronic or printed form, that results in the potential compromise of the confidentiality or integrity of the data. Contractor shall fully cooperate with the entity performing the risk analysis. Failure to cooperate may be deemed a material breach and grounds for contract termination.

Each risk analysis shall address all relevant information concerning the data breach, including the following:

(1) Nature of the event (loss, theft, unauthorized access);

(2) Description of the event, including:

(a) date of occurrence;

(b) data elements involved, including any PII, such as full name, social security number, date of birth, home address, account number, disability code;

(3) Number of individuals affected or potentially affected;

(4) Names of individuals or groups affected or potentially affected;

(5) Ease of logical data access to the lost, stolen or improperly accessed data in light of the degree of protection for the data, e.g., unencrypted, plain text;

(6) Amount of time the data has been out of VA control;

(7) The likelihood that the sensitive personal information will or has been compromised (made accessible to and usable by unauthorized persons);

(8) Known misuses of data containing sensitive personal information, if any;

(9) Assessment of the potential harm to the affected individuals;

(10) Data breach analysis as outlined in 6500.2 Handbook, Management of Security and Privacy Incidents, as appropriate; and

(11) Whether credit protection services may assist record subjects in avoiding or mitigating the results of identity theft based on the sensitive personal information that may have been compromised.

Based on the determinations of the independent risk analysis, the contractor shall be responsible for paying to the VA liquidated damages in the amount of $37.50 per affected individual to cover the cost of providing credit protection services to affected individuals consisting of the following:

(1) Notification;

(2) One year of credit monitoring services consisting of automatic daily monitoring of at least 3 relevant credit bureau reports;

(3) Data breach analysis;

(4) Fraud resolution services, including writing dispute letters, initiating fraud alerts and credit freezes, to assist affected individuals to bring matters to resolution;

(5) One year of identity theft insurance with $20,000.00 coverage at $0 deductible; and

(6) Necessary legal expenses the subjects may incur to repair falsified or damaged credit records, histories, or financial affairs (see VA handbook 6500.6, appendix c, paragraph 7.a, 7.d)

9. INFORMATION SYSTEM DESIGN AND DEVELOPMENT:

a. Information systems that are designed or developed for or on behalf of VA at non-VA facilities shall comply with all VA directives developed in accordance with FISMA, HIPAA, NIST, and related VA security and privacy control requirements for Federal information systems. This includes standards for the protection of electronic PHI, outlined in 45 C.F.R. Part 164, Subpart C, information and system security categorization level designations in accordance with FIPS 199 and FIPS 200 with implementation of all baseline security controls commensurate with the FIPS 199 system security categorization (reference Appendix D of VA Handbook 6500, VA Information Security Program).

During the development cycle a Privacy Impact Assessment (PIA) must be completed, provided to the COR, and approved by the VA Privacy Service in accordance with Directive 6507, VA Privacy Impact Assessment.

b. The contractor/subcontractor shall certify to the COR that applications are fully functional and operate correctly as intended on systems using the VA Federal Desktop Core Configuration (FDCC), and the common security configuration guidelines provided by NIST or the VA. This includes Internet Explorer 7 configured to operate on Windows XP and Vista (in Protected Mode on Vista) and future versions, as required.

c. The standard installation, operation, maintenance, updating, and patching of software shall not alter the configuration settings from the VA approved and FDCC configuration. Information technology staff must also use the Windows Installer Service for installation to the default "program files" directory and silently install and uninstall.

d. Applications designed for normal end users shall run in the standard user context without elevated system administration privileges.

e. The security controls must be designed, developed, approved by VA, and implemented in accordance with the provisions of VA security system development life cycle as outlined in NIST Special Publication 800-37, Guide for Applying the Risk Management Framework to Federal Information Systems, VA Handbook 6500, Information Security Program and VA Handbook 6500.5, Incorporating Security and Privacy in System Development Lifecycle.

f. The contractor/subcontractor is required to design, develop, or operate a System of Records Notice (SOR) on individuals to accomplish an agency function subject to the Privacy Act of 1974, (as amended), Public Law 93-579, December 31, 1974 (5 U.S.C. 552a) and applicable agency regulations. Violation of the Privacy Act may involve the imposition of criminal and civil penalties.

g. The contractor/subcontractor agrees to:

(1) Comply with the Privacy Act of 1974 (the Act) and the agency rules and regulations issued under the Act in the design, development, or operation of any system of records on individuals to accomplish an agency function when the contract specifically identifies:

(a) The Systems of Records (SOR); and

(b) The design, development, or operation work that the contractor/ subcontractor is to perform;

(1) Include the Privacy Act notification contained in this contract in every solicitation and resulting subcontract and in every subcontract awarded without a solicitation, when the work statement in the proposed subcontract requires the redesign, development, or operation of a SOR on individuals that is subject to the Privacy Act; and

(2) Include this Privacy Act clause, including this subparagraph (3), in all subcontracts awarded under this contract which requires the design, development, or operation of such a SOR.

h. In the event of violations of the Act, a civil action may be brought against the agency involved when the violation concerns the design, development, or operation of a SOR on individuals to accomplish an agency function, and criminal penalties may be imposed upon the officers or employees of the agency when the violation concerns the operation of a SOR on individuals to accomplish an agency function. For purposes of the Act, when the contract is for the operation of a SOR on individuals to accomplish an agency function, the contractor/subcontractor is considered to be an employee of the agency.

(1) "Operation of a System of Records" means performance of any of the activities associated with maintaining the SOR, including the collection, use, maintenance, and dissemination of records.

(2) "Record" means any item, collection, or grouping of information about an individual that is maintained by an agency, including, but not limited to, education, financial transactions, medical history, and criminal or employment history and contains the person's name, or identifying number, symbol, or any other identifying particular assigned to the individual, such as a fingerprint or voiceprint, or a photograph.

(3) "System of Records" means a group of any records under the control of any agency from which information is retrieved by the name of the individual or by some identifying number, symbol, or other identifying particular assigned to the individual.

i. The vendor shall ensure the security of all procured or developed systems and technologies, including their subcomponents (hereinafter referred to as "Systems"), throughout the life of this contract and any extension, warranty, or maintenance periods. This includes, but is not limited to workarounds, patches, hotfixes, upgrades, and any physical components (hereafter referred to as Security Fixes) which may be necessary to fix all security vulnerabilities published or known to the vendor anywhere in the Systems, including Operating Systems and firmware. The vendor shall ensure that Security Fixes shall not negatively impact the Systems.

j. The vendor shall notify VA within 24 hours of the discovery or disclosure of successful exploits of the vulnerability which can compromise the security of the Systems (including the confidentiality or integrity of its data and operations, or the availability of the system). Such issues shall be remediated as quickly as is practical, but in no event longer than 7 days.

k. When the Security Fixes involve installing third party patches (such as Microsoft OS patches or Adobe Acrobat), the vendor will provide written notice to the VA that the patch has been validated as not affecting the Systems within 10 working days. When the vendor is responsible for operations or maintenance of the Systems, they shall apply the Security Fixes within 7 days.

l. All other vulnerabilities shall be remediated as specified in this paragraph in a timely manner based on risk, but within 60 days of discovery or disclosure. Exceptions to this paragraph (e.g. for the convenience of VA) shall only be granted with approval of the contracting officer and the VA Assistant Secretary for Office of Information and Technology.

10. INFORMATION SYSTEM HOSTING, OPERATION, MAINTENANCE, OR USE:

a. For information systems that are hosted, operated, maintained, or used on behalf of VA at non-VA facilities, contractors/subcontractors are fully responsible and accountable for ensuring compliance with all HIPAA, Privacy Act, FISMA, NIST, FIPS, and VA security and privacy directives and handbooks.

This includes conducting compliant risk assessments, routine vulnerability scanning, system patching and change management procedures, and the completion of an acceptable contingency plan for each system.

The contractor's security control procedures must be equivalent, to those procedures used to secure VA systems. A Privacy Impact Assessment (PIA) must also be provided to the COR and approved by VA Privacy Service prior to operational approval. All external Internet connections to VA's network involving VA information must be reviewed and approved by VA prior to implementation.

b. Adequate security controls for collecting, processing, transmitting, and storing of Personally Identifiable Information (PII), as determined by the VA Privacy Service, must be in place, tested, and approved by VA prior to hosting, operation, maintenance, or use of the information system, or systems by or on behalf of VA. These security controls are to be assessed and stated within the PIA and if these controls are determined not to be in place, or inadequate, a Plan of Action and Milestones (POA&M) must be submitted and approved prior to the collection of PII.

11. INVOICES: Payment will be made upon receipt of a properly prepared detailed invoice, prepared by the Contractor, validated by the Contracting Officer’s Representative (COR), and submitted electronically through OB-10.

A properly prepared invoice will contain:

o Invoice Number and Date o Contractor’s Name and Address o Accurate Purchase Order Number o Supply or Service provided o Total amount due

12. PERFORMANCE MEASURERS

PERFORMANCE MEASURES

Performance measures are comprised of performance indicators (some characteristic of a deliverable that can be measured) and performance measures (a mark, measure or benchmark that government personnel use as a point of comparison when evaluating contractor performance). The Government performs surveillance to determine if the contractor exceeds, meets or does not meet these measures.

This Performance Work Statement (PWS), includes performance measures. The Performance Requirements are listed below. The Government shall use these measures to determine contractor performance and shall compare contractor performance to the Acceptable Quality Level (AQL).

Performance Indicators

PWS

Ref

Performance Measure

Acceptable Level of Quality

Method of Assessment Incentive Dis-incentive

Access to the Pharmacy-Medical database for all staff in VISN 7, Including CBOCs

Para 6, 7(2)

Contractor will provide 24-hour access to the data base 7 days a week.

95% Employee access to the database 24/7 by VISN 7 staff.

Positive Past Performance

Negative performance reported to

CPARS

Emergency Maintenance performed in accordance with the Performance Work Statement (PWS).

Para 6, 7(2)

Contractor will be available 24/7 to correct problems This will be accomplished through the company rep or a company help line through contact with a

VISN 7

Librarian.

95% Employee access to the database 24/7 by VISN 7 staff.

Employee complaints and company response to complaints.

These will be monitored by the VISN 7 Library staff and reported to the contractor’s rep for VISN

7.

Positive Past Performance

Negative performance reported to

CPARS

Training Para 7(6)

Training will be provided by the contractor either online or in person through a company representative.

95% Direct contact with VISN 7 Librarians.

Positive Past Performance

Negative performance reported to

CPARS

5. INCENTIVES AND DISINCENTIVES

Outstanding Past Performance CPARs rating. The Government shall use the scoring methods above for continuing contract performance.

6. METHODS OF QUALITY ASSURANCE SURVEILLANCE

Various methods exist to monitor performance. The COR may use any surveillance methods listed below in the administration of this QASP.

a. DIRECT OBSERVATION: The COR can perform periodically or through 100% surveillance.

b. PERIODIC INSPECTION. The COR evaluates outcomes on a periodic basis. Inspections may be scheduled daily, weekly, monthly, quarterly, or annually or use unscheduled inspections.

c. USER SURVEY: This method combines elements of validated user complaints and random sampling.

Random survey is conducted to solicit user satisfaction. The COR may also generate inspections and sampling.

d. VALIDATED USER/CUSTOMER COMPLAINTS. This method relies on the patient to identify deficiencies. Complaints are then investigated and validated.

e.100% INSPECTION. The COR may evaluate all outcomes.

f. RANDOM SAMPLING. This is designed to evaluate performance by randomly selecting and inspecting a sample of cases.

g. Progress reports or status meetings. The COR will analyze contractor's progress reports. (Evaluate cost, schedule, etc.)

7. RATINGS

Metrics and methods are designed to determine if performance exceeds, meets, or does not meet a given standard and acceptable quality level. A rating scale shall be used to determine a positive, neutral or negative outcome. The following ratings shall be used: 100% is positive, 95% is neutral, and 90% is negative.

8. DOCUMENTING PERFORMANCE

a. ACCEPTABLE PERFORMANCE (100% RATING)

The Government shall document positive performance. Any report may become a part of the supporting documentation for any contractual action.

b. UNACCEPTABLE PERFORMANCE (90% RATING)

When unacceptable performance occurs, the COR shall inform the contractor. This will normally be in writing unless circumstances necessitate verbal communication. In any case the COR shall document the discussion and place it in the COR file.

When the COR determines formal written communication is required, the COR shall prepare a Contract Discrepancy Report (CDR), and present it to the contractor and a copy to the Contracting Officer.

Any CDRs may become a part of the supporting documentation for any contractual action deemed necessary by the Contracting Officer.

Basis of Award

Project: Medical- Pharmacy database VISN 7 VAMCs

A. BASIS FOR AWARD.

Award will be made to the lowest priced, technically acceptable responsible offeror, whose proposal conforms to all stated terms, conditions, representations, certifications, and any other information required by this solicitation. Technical tradeoff will not be made and no additional credit will be given for exceeding the minimum requirements. In the event an offeror’s proposal is determined to be unacceptable in any of these factors, the entire proposal will be considered unacceptable and the offeror will be ineligible for award.

**ALL factors must be rated ACCEPTABLE to be considered for award.

B. EVALUATION METHODOLOGY. The award decision will be based on the following:

1. Technical Approach - Technical approach to complete the project in accordance with the Statement of Work (SOW). Offerors shall submit a capability statement showing how they intend to meet requirements of contract IAW SOW. At a MINIMUM shall include the following:

Contractor’s ability to provide all resources necessary to accomplish the deliverables described in this statement of work listed in the SOW.

Contractor must provide documentation showing ability to provide all service(s) and performance requirements listed in accordance with specifications listed in the statement of work document

Contractor must provide documentation showing ability to provide electronic reference access remotely through Open Athens access management system.

Availability to meet the specified timeframes listed in Delivery schedule Offeror must be registered as Service Disabled Veteran Owned–Small Business Vendor https://www.vip.vetbiz.gov/

2. Management/Quality Control Approach – Proposal shall address your Management/Quality Control Approach to provide services the required services in accordance with the Statement of Work (SOW).

Contractor’s ability to demonstrate the ability to perform the required services in accordance with Section 6 & 7 listed in the SOW.

Online access to a drug reference database that shall provide via one interface and one search platform Contractor shall provide technical support numbers.

Customer service shall be available to troubleshoot website/connectivity issues via phone, email, etc. The contractor is expected to trouble shoot access as needed, but it will not be necessary to respond during non-operational hours

Describe plans to meet the required response times listed in the specifications in accordance with the Statement of Work.

3. Relevant Experience/Past Performance – The Relevant Experience/Past Performance evaluation will assess the relative risks associated with an offeror's likelihood of success in performing the solicitation's requirements as indicated by that offeror's record of Relevant Experience/Past Performance.

Offerors must provide documentation of at least two (2) references and two (2) successfully completed contracts that demonstrate previous work experience in providing requested data base system of similar size, scope and complexity that are ongoing or have been completed; To include at a minimum, dollar value, and Point of Contact(s) including phone/FAX numbers.

SDVOSB Evaluation Factors do apply to LPTA and will be evaluated under this acquisition.

4. Price. All line items in the Price Schedule must include a price. The total evaluated price’s inclusiveness with all technical components met. Price realism will be performed by the Contracting Officer which consist of the offeror’s proposed price and the government’s independent cost estimate.

Each factor will be scored as Acceptable or Unacceptable as defined below. Each proposal will be evaluated against the SOW and the stated evaluation criteria. Each proposal is evaluated using the same standards.

"Lowest Price, Technically Acceptable" Evaluation Standards

Acceptable

ALL of the minimum acceptable criteria are clearly met by the proposal. The offeror's proposal meets the performance and technical capability requirements defined in the SOW.

NOTE: Once the proposals have been determined to be "technically acceptable," award will based on cost/price only.

Unacceptable

Not all of the minimum acceptable criteria are met by the proposal. An unacceptable proposal contains one or more deficiencies. Proposal fails to meet specified minimum performance and technical capability requirements defined in the SOW.

The following table will be used for each proposal received to score each LPTA factor as to whether it is Acceptable or Unacceptable.

Non- Cost/Price Factors Offeror Technically Acceptable

Technical Approach

Management/Quality control Approach

Past Performance

C. Instructions to ALL Offerors:

All RFP’s shall be submitted and received by 4:00 PM, EST, September 21, 2018. Failure to comply with ALL criteria as set forth by the solicitation and ALL documentation requested in basis of award will result in your proposal being deemed NON RESPONSIVE, and therefore not evaluated. If you have any questions, please contact the Contract Specialist, Jamal Carter, at 404-321-6111 Ext 201481 or e-mail jamal.carter@va.gov; or Laurinda Millage @va.gov

ADDENDUM to FAR 52.212-1 INSTRUCTIONS TO OFFERORS—COMMERCIAL ITEMS

Provisions that are incorporated by reference (by Citation Number, Title, and Date), have the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available.

The following provisions are incorporated into 52.212-1 as an addendum to this solicitation:

(End of Addendum to 52.212-1)

ADDENDUM to FAR 52.212-4 CONTRACT TERMS AND CONDITIONS—COMMERCIAL ITEMS

Clauses that are incorporated by reference (by Citation Number, Title, and Date), have the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available.

The following clauses are incorporated into 52.212-4 as an addendum to this contract:

C.1 52.217-8 OPTION TO EXTEND SERVICES (NOV 1999)

The Government may require continued performance of any services within the limits and at the rates specified in the contract. These rates may be adjusted only as a result of revisions to prevailing labor rates provided by the Secretary of Labor. The option provision may be exercised more than once, but the total extension of performance hereunder shall not exceed 6 months. The Contracting Officer may exercise the option by written notice to the Contractor within 30 days.

(End of Clause)

C.2 52.217-9 OPTION TO EXTEND THE TERM OF THE CONTRACT (MAR

2000)

(a) The Government may extend the term of this contract by written notice to the Contractor within 30 days; provided that the Government gives the Contractor a preliminary written notice of its intent to extend at least 60 days before the contract expires. The preliminary notice does not commit the Government to an extension.

(b) If the Government exercises this option, the extended contract shall be considered to include this option clause.

(c) The total duration of this contract, including the exercise of any options under this clause, shall not exceed five (5) years.

(End of Clause)

FAR

Number

Title Date

52.232-38 SUBMISSION OF ELECTRONIC FUNDS TRANSFER

INFORMATION WITH OFFER

JUL 2013

C.3 VAAR 852.203-70 COMMERCIAL ADVERTISING (MAY 2018)

The Contractor shall not make reference in its commercial advertising to Department of Veterans Affairs contracts in a manner that states or implies the Department of Veterans Affairs approves or endorses the Contractor’s products or services or considers the Contractor’s products or services superior to other products or services.

(End of Clause)

C.4 VAAR 852.232-72 ELECTRONIC SUBMISSION OF PAYMENT REQUESTS

(NOV 2012)

(a) Definitions. As used in this clause—

(1) Contract financing payment has the meaning given in FAR 32.001.

(2) Designated agency office has the meaning given in 5 CFR 1315.2(m).

(3) Electronic form means an automated system transmitting information electronically according to the

Accepted electronic data transmission methods and formats identified in paragraph (c) of this clause.

Facsimile, email, and scanned documents are not acceptable electronic forms for submission of payment requests.

(4) Invoice payment has the meaning given in FAR 32.001.

(5) Payment request means any request for contract financing payment or invoice payment submitted by the contractor under this contract.

(b) Electronic payment requests. Except as provided in paragraph (e) of this clause, the contractor shall submit payment requests in electronic form. Purchases paid with a Government-wide commercial purchase card are considered to be an electronic transaction for purposes of this rule, and therefore no additional electronic invoice submission is required.

(c) Data transmission. A contractor must ensure that the data transmission method and format are through one of the following:

(1) VA’s Electronic Invoice Presentment and Payment System. (See Web site at http://www.fsc.va.gov/einvoice.asp.)

(2) Any system that conforms to the X12 electronic data interchange (EDI) formats established by the Accredited Standards Center (ASC) and chartered by the American National Standards Institute (ANSI).

The X12 EDI Web site (http://www.x12.org) includes additional information on EDI 810 and 811 formats.

(d) Invoice requirements. Invoices shall comply with FAR 32.905.

(e) Exceptions. If, based on one of the circumstances below, the contracting officer directs that payment requests be made by mail, the contractor shall submit payment requests by mail through the United States Postal Service to the designated agency office. Submission of payment requests by mail may be required for:

(1) Awards made to foreign vendors for work performed outside the United States;

(2) Classified contracts or purchases when electronic submission and processing of payment requests could compromise the safeguarding of classified or privacy information;

(3) Contracts awarded by contracting officers in the conduct of emergency operations, such as responses to national emergencies;

(4) Solicitations or contracts in which the designated agency office is a VA entity other than the VA Financial Services Center in Austin, Texas; or

(5) Solicitations or contracts in which the VA designated agency office does not have electronic invoicing capability as described above.

(End of Clause)

C.5 VAAR 852.237-70 CONTRACTOR RESPONSIBILITIES (APR 1984)

The contractor shall obtain all necessary licenses and/or permits required to perform this work. He/she shall take all reasonable precautions necessary to protect persons and property from injury or damage during the performance of this contract. He/she shall be responsible for any injury to himself/herself, his/her employees, as well as for any damage to personal or public property that occurs during the performance of this contract that is caused by his/her employees fault or negligence, and shall maintain personal liability and property damage insurance having coverage for a limit as required by the laws of the State of GA, SC, and AL. Further, it is agreed that any negligence of the Government, its officers, agents, servants and employees, shall not be the responsibility of the contractor hereunder with the regard to any claims, loss, damage, injury, and liability resulting there from.

(End of Clause)

C.6 52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es):

http://www.acquisition.gov/far/index.html http://www.va.gov/oal/library/vaar/

(End of Clause)

Number

Title Date

52.204-18 COMMERCIAL AND GOVERNMENT ENTITY CODE

MAINTENANCE

JUL 2016

52.232-40 PROVIDING ACCELERATED PAYMENTS TO SMALL

BUSINESS SUBCONTRACTORS

DEC 2013

(End of Addendum to 52.212-4)

C.7 52.212-5 CONTRACT TERMS AND CONDITIONS REQUIRED TO

IMPLEMENT STATUTES OR EXECUTIVE ORDERS—COMMERCIAL ITEMS

(JAN 2018)

(a) The Contractor shall comply with the following Federal Acquisition Regulation (FAR) clauses, which are incorporated in this contract by reference, to implement provisions of law or Executive orders applicable to acquisitions of commercial items:

(1) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (JAN 2017) (section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L. 113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(2) 52.209-10, Prohibition on Contracting with Inverted Domestic Corporations (NOV 2015).

(3) 52.233-3, Protest After Award (Aug 1996) (31 U.S.C. 3553).

(4) 52.233-4, Applicable Law for Breach of Contract Claim (Oct 2004) (Public Laws 108-77 and 108- 78 (19 U.S.C. 3805 note)).

(b) The Contractor shall comply with the FAR clauses in this paragraph (b) that the Contracting Officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial items:

[] (1) 52.203-6, Restrictions on Subcontractor Sales to the Government (Sept 2006), with Alternate I (Oct 1995) (41 U.S.C. 4704 and 10 U.S.C. 2402).

[] (2) 52.203-13, Contractor Code of Business Ethics and Conduct (OCT 2015) (41 U.S.C. 3509).

[] (3) 52.203-15, Whistleblower Protections under the American Recovery and Reinvestment Act of 2009 (JUN 2010) (Section 1553 of Pub. L. 111-5). (Applies to contracts funded by the American Recovery and Reinvestment Act of 2009.)

[X] (4) 52.204–10, Reporting Executive Compensation and First-Tier Subcontract Awards (OCT 2016) (Pub. L. 109–282) (31 U.S.C. 6101 note).

[] (5) [Reserved]

[] (6) 52.204–14, Service Contract Reporting Requirements (OCT 2016) (Pub. L. 111–117, section 743 of Div. C).

[] (7) 52.204–15, Service Contract Reporting Requirements for Indefinite-Delivery Contracts (OCT 2016) (Pub. L. 111–117, section 743 of Div. C).

[X] (8) 52.209-6, Protecting the Government's Interest When Subcontracting with Contractors Debarred, Suspended, or Proposed for Debarment. (OCT 2015) (31 U.S.C. 6101 note).

[] (9) 52.209-9, Updates of Publicly Available Information Regarding Responsibility Matters (Jul 2013) (41 U.S.C. 2313).

[] (10) [Reserved]

[] (11)(i) 52.219-3, Notice of HUBZone Set-Aside or Sole-Source Award (NOV 2011) (15 U.S.C.

657a).

[] (ii) Alternate I (NOV 2011) of 52.219-3.

[] (12)(i) 52.219-4, Notice of Price Evaluation Preference for HUBZone Small Business Concerns (OCT 2014) (if the offeror elects to waive the preference, it shall so indicate in its offer) (15 U.S.C. 657a).

[] (ii) Alternate I (JAN 2011) of 52.219-4.

[] (13) [Reserved]

[] (14)(i) 52.219-6, Notice of Total Small Business Set-Aside (NOV 2011) (15 U.S.C. 644).

[] (ii) Alternate I (NOV 2011).

[] (iii) Alternate II (NOV 2011).

[] (15)(i) 52.219-7, Notice of Partial Small Business Set-Aside (June 2003) (15 U.S.C. 644).

[] (ii) Alternate I (Oct 1995) of 52.219-7.

[] (iii) Alternate II (Mar 2004) of 52.219-7.

[] (16) 52.219-8, Utilization of Small Business Concerns (NOV 2016) (15 U.S.C. 637(d)(2) and (3)).

[] (17)(i) 52.219-9, Small Business Subcontracting Plan (JAN 2017) (15 U.S.C. 637(d)(4)).

[] (ii) Alternate I (NOV 2016) of 52.219-9.

[] (iii) Alternate II (NOV 2016) of 52.219-9.

[] (iv) Alternate III (NOV 2016) of 52.219-9.

[] (v) Alternate IV (NOV 2016) of 52.219-9.

[] (18) 52.219-13, Notice of Set-Aside of Orders (NOV 2011) (15 U.S.C. 644(r)).

[] (19) 52.219-14, Limitations on Subcontracting (JAN 2017) (15 U.S.C. 637(a)(14)).

[] (20) 52.219-16, Liquidated Damages—Subcontracting Plan (Jan 1999) (15 U.S.C. 637(d)(4)(F)(i)).

[] (21) 52.219-27, Notice of Service-Disabled Veteran-Owned…