36C24724Q0234_1.docx

Combined Synopsis/Solicitation Notice Combined Synopsis/Solicitation Notice

GENERAL INFORMATION

VISN 7 Network Contracting Office LaVista Business Park - Bldg A 2008 Weems Road Tucker GA 30084

POINT OF CONTACT*

Gail Bargaineer gail.bargaineer2@va.gov Gail.Bargaineer2@va.gov 404-321-6069

PLACE OF PERFORMANCE

ADDRESS

POSTAL CODE

COUNTRY

ADDITIONAL INFORMATION

AGENCY’S URL

URL DESCRIPTION

DESCRIPTION

COMBINED SYNOPSIS SOLICITATION

i. This is a combined synopsis/solicitation for commercial services prepared in accordance with the format in Subpart 12.6, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; proposals are being requested and a written solicitation will not be issued.

ii. Solicitation 36C24724Q0234 is issued as a request for quotation (RFQ).

iii. The solicitation incorporates provisions and clauses in effect through Federal Acquisition Circular 2023-06, dated 12-04-2023.

iv. This solicitation is set-aside exclusively for Service-Disabled Veteran-Owned Small Business concerns. To be considered for award prospective offerors must be registered and active in the System for Award Management (www.SAM.gov) and SBA verified SDVOSB Veteran Small Business Certification SBA Veteran Small Business Certification (sba.gov) concern verified at the date and time set for receipt of offers. An Offeror, who is not SAM registered or SBA Vet Cert verified SDVOB concern at the date and time set for receipt of offers will have their offer rejected as non-responsive and will not be considered for award. The applicable NAICS Code for this solicitation is 561210, Small Business Size Standard $47.0 Million. Applicable wage determination WD # 2015-4591 Revision 26 dated 12/26/2023 is incorporated.

v. Contractor shall provide quote as listed within the Price/Cost Schedule sheet.

vi. PRICE/COST SCHEDULE

ITEM INFORMATION

This is a non-personal services contract to provide janitorial services for the Birmingham VA Medical Center. The janitorial services will be performed 7 days per week from 7:00am - 3:30pm, including Federal holidays. See specific comments in the Statement of Work. Contracting Officer Representative has Statement of Work and will be forwarded to contracting Office. This is a one-year contract.

Contract Period: Base POP Begin: 02-04-2024 POP End: 02-03-2025

vii. Description of Requirement: The contractor shall provide all management of tools, equipment, and labor necessary to ensure the facility maintenance services are performed in a manner that will maintain a satisfactory facility condition and present a clean, neat and professional appearance.

viii. Performance Work Statement (PWS)

ix. Scope of Work – Workload Service Contract

Section 1: General Information

1.1 General: This is a non-personal services contract to provide janitorial services for the Birmingham VA Medical Center. In order to maintain a high state of readiness due to staff shortage, the Birmingham VA requiring additional cleaning at the Medical Center. The Government shall exercise all supervision and control over the contract service providers performing the services herein. Such contract service providers shall be accountable to the Government and to the Contractor who, in turn is responsible to the Government. Agencies shall train their employees in appropriate cleaning and disinfection procedures following Centers for Disease Control and Prevention (CDC) Guidance as well as for interaction with private sector temporaries to assure that the supervisory responsibilities identified in paragraph (a) of § 300.501 of this subpart are carried out by the temporary help service firm. At the same time, agencies must give technical, task-related instructions to private sector temporaries including orientation, assignment of tasks, and review of work products, in order that the temporaries may properly perform their services under the contract.

1.2 Period of Performance: “TBD” - Estimated 1year Base with a 4-time option period in accordance with the authority, criteria, and conditions of 5 CFR Part 300, Subpart E, Use of Private Sector Temporaries, and agency procedures.

1.3 Quantity of Employee: At least 12 employees, with the option to add as needed.

1.4 Hours of Operation: Normal business hours are between 7:00 a.m. to 3:30 every day including Federal holidays. The janitorial services will be required 7 days per week, including Federal holidays. The contractor will be provided a list of the areas/rooms to be cleaned by 9:00 a.m. Additional areas/rooms to be cleaned may be assigned to the contractor at varying times of the workday.

Federal Holiday New Year’s Day Martin Luther King Birthday Presidents' Day Memorial Day Juneteenth Independence Day Labor Day Columbus Day Veterans Day Thanksgiving Day Christmas Day

1.5 Work Schedule: Prior to commencing performance under this contract, the Contractor shall provide a proposed work scheduled to the Point of Contact (POC) on site describing how services will be accomplished. The facility POC will communicate with the designated Contracting Officer Representative (COR) services and completion of those services to validate work was accomplished as required. The Contractor shall maintain a CEH on site during normal work hours 9-5:30 and by phone 24/7.

Areas that could be assigned to the contractor for cleaning include but will not be limited to:

· Exam Rooms

· Waiting Areas

· Reception Areas

· Restrooms

· Pharmacy

· Offices

· Laundry Room

· Doctors Lounge

· House Keeping Aide Closet

· X-Ray Rooms

· Labs

· Public Areas

· Hallways and Lobbies

· Elevators and Doors

· Sinks

· Toilets

· Showers

· Windows

· Mini Blinds

· Corridors

· Stairwell

· Entryways

· Administration Areas

· Break Rooms

· Kitchen and Dining Areas

· Ice Machines and Water Dispensing Units

· Drinking Fountains

· Refrigerators

· Vents

· Light Fixtures

· Hard Surface and Carpeted Floor Care

1.6 Type of Contract: Firm Fixed Price (FFP)

1.7 Contract Changes: Additional tasking required by changes in mission assignments must be documented by a written contract modification. If the contractor receives a request from VA personnel directing or requesting work that the contractor believes is not within the terms of the PWS or the contract, then the contractor must notify the COR and the Contracting Officer of the request. The only person that has the authority to modify the terms of the contract or request work for which compensation will be provided is a Contracting Officer.

Section 3: Government Furnished Property, Equipment, and Services The government will furnish all supplies and equipment, including cleaning supplies (chemicals, PPE, mops, equipment, and SDS).

Section 4: Contractor Furnished Items and Services The contractor shall provide a standard custodial type of uniform which is easily recognizable and clearly distinguish them as the “Contractor.”

Uniforms shall present a neat, distinctive appearance; shall be clean and maintained in good repair; and shall be worn as designed by the manufacturer. Standard custodial type uniform is defined as collared work short (button-down or polo style) and pants or skirt of twill or similar material (no denim). The Contractor shall wear appropriate footwear that will cover the entire foot for safety purposes. The Contractor will not wear hats.

Section 5: Specific Tasks Standards: Aseptic areas apply to all areas within the medical center. Contractor will be required to perform Two-Step Cleaning in accordance with Centers for Disease Control (CDC) guidance. https://www.cdc.gov/infectioncontrol/guidelines/environmental/background/services.html There will be cases where a room requires a “terminal cleaning” in the case of discharge, an isolation room, sick patient or otherwise. Upon request from VA staff, the contractor shall perform a terminal clean to affected areas.

5.1 Tasks and Cleaning Standards

2. Place furniture in proper locations

3. Spot clean/wash interior windows and door glass

4. Dust mop/wet mop all tile floors

5. Clean patient restrooms mid-day

6. Clean public restrooms

7. Clean public areas and waiting rooms

8. Check and refill all paper towel, toilet paper, sanitizer and soap dispensers

9. Clean and organize all housekeeping closets

10. Clean/sanitize all bathrooms utilizing a germicidal disinfectant

11. Dust all horizontal and vertical surfaces

12. Spot clean furniture

13. Spot clean waste cans

14. Empty Recycling Containers

15. Wash walls and doors

16. Vacuum carpets, entrance mats, and runners

17. Clean and polish all stainless steel

18. Staging and storage of both clean and soiled linen, which includes washing of bed sheets

19. Deliver linen to designated areas

20. Strip and refinish all tile floors

21. Shampoo/extract carpets utilizing soil retardant

22. Interior and Exterior of windows and doors on first floor level.

23. Cleaning of High Touch Surfaces

24. Change privacy curtains

1. Carpet Maintenance: Vacuum all carpeted areas in the corridors, elevators, offices, group rooms and public areas. Furniture shall be moved for thorough cleaning and replace the furniture after cleaning. Spot cleaning as required so that the carpet presents a uniform and clean appearance, free of spots and stains. The Contractor shall report any tears, burns and raveling to the attention of the on-site POC or designated representative.

2. Door and Doorjambs: Perform spot cleaning by damp-wiping and polishing unpainted metal doors, washable surfaces of walls, partitions, doors and fixtures, and handrails. Sanitize as needed.

3. Ducts, Light Fixtures, Vents: These areas are to be cleaned and vacuumed. The ducts shall be cleaned as needed.

4. Elevators: The Contractor shall clean all interior surfaces, including doors, metal thresholds, tracks, fans. Spot-clean walls.

5. Entrance Area: Sweep landing, steps, sidewalk of front entrance area, clean the walk-off mats, hose off as required, and remove standing water. The Contractor shall damp-mop the entrance and lobby floors during inclement weather. Trash containers located inside and outside of entrances shall be emptied.

6. Floor maintenance (non-carpeted):

a) The Contractor shall wet mop using a neutral floor cleaner, using a Micro-Fiber Mopping System to mop all accessible areas including corners and abutments. The Contractor shall remove any splash marks or streaks on furniture, walls, baseboards, etc... Isolation room cleaning will include disinfecting floors using a flat microfiber system.

b) The Contractor shall sweep, dust, and damp mop hard-surfaces, resilient flooring to include normal traffic areas, group rooms, and restrooms. The floors shall be swept, dusted and damp mop using a treated or dust- free method/mop. The Contractor shall ensure that the cleaning includes the corners and abutments. The Contractor shall tilt or move chairs, trash receptacles, and other easily movable items to clean underneath and shall return items to their proper position.

7. Furniture and Flat Surface Cleaning: (Low Dusting refers to areas 36” and below) The Contractor shall dust specific uncluttered horizontal surfaces per direction of the on-site POC within reach with a treated dust cloth (i.e., desks, counters, file cabinets, ledges, bookcases, tables, credenzas, windowsills, etc.). The Contractor shall dust vertical surfaces and underneath desks in such a manner as to prevent airborne dust.

a) The Contractor shall dust furniture items such as chairs, file cabinets and other types of office furniture. The Contractor shall damp-dust other office furniture such as vinyl chairs, lamps, telephones, furniture bases, picture frames.

b) Furniture and Flat Surfaces Cleaning (High Dusting refers to areas higher than 36” up to 70”): High dusting includes all the wall surfaces, door frames, shelves, equipment, windowsills, ledges, handrails, etc. that are 70 inches from the floor or more.

a) Furniture: The Contractor shall vacuum upholstered furniture; clean behind furniture and corners. Move items as necessary to ensure thorough and adequate cleaning; replace to original position. The Contractor shall spot clean upholstered furniture as required.

8. Doors (Entrance areas): The Contractor shall clean all glass partitions, interior and exterior glass doors, display cases, directory boards, and draft shields on windows, mirrors and adjacent trim.

9. Stairwells: The Contractor shall sweep, dust and damp mop as needed. Lamps, vents, ceiling and wall areas shall be free of cobwebs, dust, debris and insects.

10. Walls: Spot/Clean/Wash. The Contractor shall spot-clean wall surfaces to remove cobwebs, fingerprints, smudges. The Contractor shall sanitize the walls as needed.

11. Blinds/Shades: The Contractor shall vacuum, and damp clean all blinds/shades to remove surface dust, vacuum drapes in place.

12. Window Cleaning Interior: The Contractor shall wash all windows on interior surfaces, damp-wipe window sashes/sills. The contractor is not responsible for the highest interior windows.

13. Laundry Service: The contractor shall collect all soiled linen daily and place in designated soiled linen storage until items are picked up by laundry distribution personnel.

14. Miscellaneous

a) Water Fountains: The Contractor shall empty, rinse and sanitize drinking fountains, water coolers, the hot/cold water dispensers with a germicidal type detergent ensuring that the surface remains visibly wet for the proper dwell time.

b) Polish Metal. The Contractor shall polish the brass and other metal, aluminum, stainless steel hardware on doors, push bars, and the kicking plates.

c) Loading Dock. The Contractor shall sweep and hose off loading dock area as needed.

15. Restrooms

a) The Contractor shall clean and sanitize sinks, urinals, and toilets.

b) The floor traps shall always be maintained free from odor.

c) The Contractor shall sweep and wet mop the floors daily and spray buff as required. The Contractor shall apply a uniform coating of non-skid floor finish. The Contractor shall remove any excess floor finish solutions.

d) The Contractor shall damp-wipe walls, doors, partitions, mirrors, shelving, and window frames and sills. The Contractor shall use an approved germicide/detergent in restrooms to disinfect all surfaces of partitions, stalls, faces of toilet bowls, urinals, lavatories, showers, dispensers, and other such surfaces.

e) The Contractor shall damp-wipe and polishes the chrome fixtures.

f) The Contractor shall clean (descale) toilet bowls and urinals.

g) The Contractor shall replenish restroom supplies for example: soap dispensers, paper towels and toilet tissue.

h) The Contractor shall empty, clean, disinfect, and re-line all sanitary napkin and all waste receptacles.

16. Waste

a) Trash Removal: The Contractor shall pick up and empty all trash or waste receptacles. Waste will be deposited at established waste collection sites/holding areas at the facility for waste hauler pick up.

b) Regulated Medical Waste (RMW) ‘Red Bag’ Bio-hazardous: All receptacles lined with "Red Bags" (plastic bags containing bio-hazardous medical waste material) shall be serviced. The Contractor shall pick up the Red Bag waste and deposit it in specially designated, locked "infectious waste" bins or designated holding areas in a safe and timely manner, and in accordance with established standards and procedures. NOTE: Red Bags may not be used for any other purpose. Under no circumstance will red bag waste be co-mingled with any other types of waste.

c) Recyclables: The Contractor shall pick up and empty all recycled collection receptacles and deposited them at established holding sites.

17. Supplies: The dispensers and supplies will be provided by the Government.

5.2 Contractors Responsibility

1. The contractor’s employees shall be English speaking and shall be able to read, write, speak, understand and communicate effectively in English.

2. Prior to beginning performance under this contract, the Contractor shall provide the following:

a) List of employees who will provide services under this contract.

b) Name, telephone number and address of a POC for this contract.

c) A secondary POC as needed.

3. The Contractor shall not consume food, snacks, or drinks products except during specified break periods in appropriate designated break areas only.

4. The Contractor shall adhere to the VHA smoke-free campus policy.

5. The Contractor shall also be responsible for adhering to all requirements under the Privacy Act due to the possibility that confidential medical record information may be accessible and/or visible to contractor employees during performance of their daily duties. The Contractor shall obtain a signed “Confidentiality Certificate” from each employee prior to allowing them to start work under this contract. The contractor shall keep a copy of confidentiality certificate on site for inspection purposes.

6. The Contractor is required to have physical examination prior to work on this contract. The Contractor shall not be assigned to this contract if not in good physical health or pose a risk to patients. The Contractor who acquires a communicable illness shall not perform service under the contract and shall be free of illness before returning to work. The Contractor will inform the COR, if their employee was at risk of exposing Veterans, visitors or VHA employees to a communicable disease.

7. The Contractor will obtain appropriate background checks. Online questionnaire must be completed and scheduled for review prior to staff arriving at a VA location. Fingerprinting will be required to complete the background check but will not need completed prior to commencing work.

8. Contractor will be required to obtain a non-PIV badge from the VA. The Non-PIV badge is good for no more than 180 cumulative days onsite at any facility. If, contractors are expected to perform on-site more than 180 cumulative number of days, the Contractor will be required to obtain a PIV badge with no network access. It is the responsibility of the designated COR to track the number of days the Contractor is performing and collect the PIV badges at the end of the Contractor’s term.

5.3 Safety Training Requirements

1. Contractor-Furnished Safety Training: The Office of Occupational Safety and Health has identified the minimum worker safety standards and related training that are required by respective State Laws and that are applicable to all employees. All Contractors providing service at VA facilities shall follow these established Code of Regulations “General Industry Safety Orders (OSHA) section listed below, as a condition of contract award:

a) Section 3203 Title 8 “Illness and Injury Prevention Program.” Exception: Employers having fewer than 10 employees shall be permitted to communicate to and instruct orally in general safe work practices with specific instructions with respect to hazards unique to the employees’ job assignments, as compliance with subsection (a) (3).

b) Section 5193 Title 8. “Blood Borne Pathogens”

c) Section 5194 Title 8. “Hazard Communication”

d) The above-listed orders establish minimum standards and apply to-employment’s and places of employment’s in California as defined by Labor Code Section 6303; provided, however, that when the Occupational Safety and health Standards Board has adopted or adopts safety orders applying to certain industries, occupations or employment’s exclusively, in which like conditions and hazards exit, those orders shall take precedence wherever they are inconsistent with the General Industry Safety Orders hereinafter set forth.

e) The above-listed orders, effective 1 July 1991, require the employer to develop, implement and document written programs, as well as requiring initial and recurring employee training and record keeping. The Contractor shall provide to the COR an annual written certification that each employee has received the State-required safety training; that each employee has received the Hepatitis B vaccination; or provide a written certification from any employee who declines the Hepatitis B vaccination.

f) Hepatitis B Vaccination: The final rule on Occupation Exposure to Blood Borne Pathogens, 29 CFR Part 1910.1030, states “employers shall make available the Hepatitis B vaccine and vaccination series to all employees who have occupational exposure, and post-exposure evaluation and follow-up to all employees who have had an exposure incident. Under the terms of this contract, the Contractor shall either provide, at no expense to the Government, the required vaccination defined herein, or have a letter of declination on file with the Contractor.

g) All contract employees need to be screened for tuberculosis prior to employment

h) All contract employees need to be medically cleared to wear respiratory protection

i) All contract employees shall be cleared for fitness of duty to perform physical tasks required for the job such as lifting a minimum of 50 lbs., prolong standing walking and frequent bending.

j) All contract employees shall comply with VA policy regarding influenza vaccine for staff and contractors.

k) A copy of this letter shall also be filed with the COR and placed in the COR’s contract file, and an additional copy shall be sent to the VA employee physician’s office. Following Contractor employee’s exposure to a contaminated needle or other sharp object, the employee shall be seen by a physician. Records of treatment and follow-up shall be maintained for the duration of employment by the contractor and for thirty (30) years thereafter. Copies of treatment and follow up records shall be provided to the COR.

2. Handling of Regulated Medical Waste, Infectious Medical Waste (“Red Bag” Waste and “Sharps” Containers):

3. The Contractor may be required to collect bio-hazardous “Red Bags” waste (double-bagged) and solid, enclosed “SHARPS” containers from the medical facility exam and treatment rooms, and to deposit the bags and containers in designated bio-hazardous waste container (usually located outside and at the rear of the facility in locked cage or storage facilities). The Contractor shall maintain records on employee training and shall notify the COR appointed under this contract, as to when new annual training is required. The Contractor shall provide a certification of annual training for each employee.

5.4 Contractor’s Attire and Identification

1. The Contractor shall wear a standard custodial type of uniform which is easily recognizable and clearly distinguish them as the “Contractor.” Uniforms shall present a neat, distinctive appearance; shall be clean and maintained in good repair; and shall be worn as designed by the manufacturer. Standard custodial type uniform is defined as collared work short (button-down or polo style) and pants or skirt of twill or similar material (no denim). The Contractor shall wear appropriate footwear that will cover the entire foot for safety purposes.

2. Identification Tags/Cards. The Contractor shall wear on the front of the uniform, clearly readable name identification (ID) logo identifying the contractor’s and employee’s name. The Government will issue ID cards to the Contractor after background checks have been completed. The Contractor shall obtain “Visitors’ Badges” during the interim period via VA Police or Human Resource Department.

3. In precaution type isolation situations, the Contractor will be required to wear Personal Protective Equipment (PPE) which will be supplied by the medical facility. Such items are disposable and will be disposed of as directed by the on-site POC.

4. Contractor’s Personal Hygiene: The Contractor’s attire and presentation shall be appropriate per industry standard.

5.5 Contractor Training

1. Contractor personnel shall not be assigned to work until they have completed initial orientation and required training as indicated below under item 5.5.2. Exception: An exception will be made during the first sixty (60) days of contract performance, whereby Contractor’s employees who have had general janitorial and OSHA training will be permitted to start work at the VA medical facilities, on the condition that the training specified herein shall be completed within sixty (60) days after contract effective date. The Contractor shall provide an initial training plan to the on-site POC for approval. The initial plan shall include topics, brief statement of content and method of training. Documentation verifying the content of such training and orientation shall be transmitted to the on-site POC and COR when deemed appropriate.

2. Minimum Contractor-Furnished Training: Initial training shall cover the topics listed below. The Contractor shall accomplish the training within 5 workdays.

a) General orientation of basic bacteriological concepts, including the basics of how disease is caused and transmitted, how it can be prevented, reduced or contained through proper environmental sanitation methods.

b) Infection control orientation, relating duty functions to the technical provision of this specification.

c) Proper use and handling of germicidal detergents, supplies and equipment.

d) Care and maintenance of Contractor and Government-furnished property.

e) Familiarization with applicable facility polices/regulations and their effect on sanitation Services.

f) Familiarization with the Contractors procedures manual.

g) Individual duties and responsibilities.

h) Procedures for replenishing cleaning supplies and obtaining equipment repair.

i) Role of Contractor’s personnel in the facility and their impact on patient care

j) Techniques/methods for measuring quality of work performance

k) Basic orientation to the facility, function, mission, goals

l) Facility emergency fire and disaster program

m) Hazardous Communication Standard

n) Bloodborne Pathogens

o) Respiratory Protection

p) Personal Protective Equipment (PPE) including proper donning and doffing

q) Utility Operation

r) Standard Precautions

s) Body Mechanics/Lifting

t) Accident Reporting

u) Sexual Harassment

v) Ethics

w) TB-Precautions (PPD)

x) Hep B

y) Mercury/Spills

z) Radiation Training (Government-furnished)

aa) Proper handling of Regulated Medical Waste, Solid Waste, Chemo Waste Handling and Recycling

ab) Linen exchange services, including proper handling and care of all linens.

3. Compliance and Business Integrity (CBI) Awareness Training: The Contractor shall complete initial compliance awareness training within thirty (30) days of contract award effective date. The Contractor shall also meet the annual compliance awareness refresher training. This requirement can be fulfilled by completing the training module available via the following Internet site: https://www.tms.va.gov/SecureAuth35/

4. Remedial Training: When notified, the Contractor shall complete remedial training and education to address any detected compliance issues.

5. Proof of Training: The Contractor shall submit proof of training by providing a copy of the training to the on-site POC or designated representative. The on-site POC will retain proof of training in accordance with applicable Records Control Schedule and provide to the COR when requested.

5.7 Fire Prevention and Emergency Procedures

1. The Contractor shall take such safety precautions as necessary to protect the lives and health of occupants of the buildings.

2. Any hazardous incidents created by the Contractor shall be corrected immediately.

3. The Contractor shall comply with applicable Federal, State, Local and facility safety and fire regulations and codes which are in effect at the beginning of the contract period. The Contractor shall keep abreast of and comply with changes in these regulations and codes applicable to the contract.

4. The Contractor shall follow applicable facility policies concerning fire and/or disaster events.

5. Posting Warning Signs: The Contractor shall display approved warning devices in all areas where operations may cause traffic obstruction or personnel hazard. The cleaning of lobbies and corridors, resulting in a temporary wet or slippery floor surface, shall be, appropriately posted with signs and shall be accomplished so that it will not be necessary for personnel or patients to cross the wet surface to gain access to other areas.

5.8 Building Security and Keys

1. The Contractor shall be responsible for safeguarding all Government property provided for the Contractor’s use. At the close of each work period, Government facilities, equipment and materials shall be secured.

2. The Government shall provide the Contractor with keys to access the required rooms. Access to restricted areas shall be provided to the Contractor by prior arrangements with the COR. Except for keys issued to CEH, keys provided to other Contractor personnel shall not be removed from the premises. Keys shall not be duplicated or issued to any other individuals. All keys not issued for the performance of work being accomplished at the present time shall be secured or returned. The COR or designated representative will perform an inventory of keys assigned to the Contractor at the end of the contract period or as needed. Any keys lost by the Contractor will be replaced by the Government, and the Contractor shall be charged the replacement value of the lost key. The Contractor shall also be responsible for any expense incurred for re-keying of the Facility caused by the lost key. The Contractor shall notify the COR of any lost or suspected lost key within 24 hours.

3. The Contractor shall not lend keys or open locked rooms or areas to permit entrance by persons other than the Contractor’s assigned staff. The Contractor shall be responsible for securing areas upon completion of duties. There may be certain areas identified by the COR in which Contractor personnel must immediately notify the COR or Security Personnel if a door is found unlocked.

4. When leaving a work area, the Contractor shall turn off lights if the area is unoccupied unless otherwise directed by the COR. The Contractor shall secure and lock the window(s) before leaving the area and if there is difficulty securing the areas, the Contractor shall notify the COR or designated representative.

5. The Contractor shall comply with the security clearances or access controls imposed.

6. The Contractor shall turn in all lost articles found during the performance of duties to the COR or designated representative.

7. If the contractor does not have access to an area due to either not having a key or otherwise, the contractor shall immediately notify the COR and cc the Contracting Officer in writing, so that appropriate action can be taken.

8. The engineering, IT, and telephone closets are restricted access. The contractor will not have keys to those areas and will require an escort to those areas.

5.9 Interference to Normal Function

The Contractor shall delay or interrupt their work at any time to avoid interference with patient care procedures and the normal function of the facility, including utility services, fire protection systems, and passage of facility patients, personnel, equipment, and carts.

5.10 Damage and Equipment Loss

1. The Contractor shall report damages or disfigurement of Government-owned furnishings, fixtures, equipment, and architectural or building structures to the COR immediately. The Contractor shall provide a written report of any damage or disfigurement to items to the COR or designated representative within 24 hours. The Government will not be responsible for Contractor’s equipment or belongings that are lost, stolen or damaged.

2. The Contractor shall use reasonable care to avoid damaging existing buildings, equipment, and vegetation on the Government installation.

3. The Contractor shall use reasonable care or be liable for the cost of repairs and/or replacement of damages to Government-owned equipment, fixtures, furnishings, grounds and architectural or building structures.

5.11 Handling of Government Furniture and Equipment

1. The COR or designated representative will instruct the Contractor what Government items should not to be moved or otherwise handled. Any medical apparatus in use on or by a patient will not be moved or otherwise handled by the Contractor except when prior arrangements have been made with the nurse supervisor.

2. In emergency situations, the Contractor’s assistance may be required to help move patients out of harm’s way.

5.12 Conservation of Utilities

1. The Contractor shall instruct employees in utilities conservation practices. The Contractor shall be responsible for operating under condition which precludes the waste of utilities, which shall include:

a) The Contractor shall not adjust any mechanical equipment controls for heating, ventilation and air conditioning system unless otherwise directed by the COR or designated representative.

b) The Contractor shall turn-off all water faucets or values when not in usage.

c) The Contractor shall not use Government telephones for personal reasons.

5.13 Applicable Regulations and Manuals

1. All work under this contract must be performed in accordance with (1) current Joint Commission Manual (JC); (2) Occupational Safety and Health Agency (OSHA); (3) Environmental Protection Agency (EPA) and Hazardous Materials requirements; (4) regulations cited in this Performance Work Statement (PWS); (5) Site-specific EPS Standard Operating Procedure Guidance and (5) industry standards.

2. Documents applicable to work described in this section are mandatory and are listed below. The Government will provide the Contractor copies of all regulations, manuals and specifications such as those listed below. Supplements and amendments will be updated and will be full force and effective immediately upon receipt by the Contractor. The policies and procedures of mandatory directives shall always be adhered to. The Contractor shall insure that all mandatory publications are posted and up to date.

a) Security Clearances, Access Controls, Identification Badges

b) Facility policies concerning fire / disaster program.

c) Parking Requirements

d) Infection Control Manuals

5.14 Required Security Training

1. All contractor employees and subcontractor employees requiring access to VA information and VA information systems shall complete the following before being granted access to VA information and its systems:

a) Sign and acknowledge (either manually or electronically) understanding of and responsibilities for compliance with the Contractor Rules of Behavior, Appendix E relating to access to VA information and information systems.

b) Successfully complete the VA Cyber Security Awareness and Rules of Behavior training and annually complete required security training.

c) The contractor shall provide to the COR a copy of the training certificates and certification of signing the Contractor Rules of Behavior for each applicable employee within 1 week of the initiation of the contract and annually thereafter, as required.

5.15 Information Security Requirements

1. The C&A requirements do apply and that a Security Accreditation Package is required. The vendor will be in contact or will have access to VA sensitive information. VA sensitive information procedures will be followed per VA Handbook 6500.6.

2. Contractors, contractor personnel, subcontractors, and subcontractor personnel shall be subject to the same Federal laws, regulations, standards, and VA Directives and Handbooks as VA and VA personnel regarding information and information system security.

3. Information Security and Privacy Training

a) All contractor employees and subcontractor employees requiring access to VA information and VA information systems shall complete the following before being granted access to VA information and its systems.

b) Sign and acknowledge (either manually or electronically) understanding of and responsibilities for compliance with the Contractor Rules of Behavior, VA Handbook 6500.6, Appendix E relating to access to VA information and information systems.

c) Successfully complete the VA Cyber Security Awareness and Rules of Behavior training and annually complete required security training.

d) Successfully complete the appropriate VA privacy training and annually complete required privacy training.

e) Successfully complete any additional cyber security or privacy training, as required for VA personnel with equivalent information system access to be defined by the VA program official and provided to the contracting officer for inclusion in the solicitation document – e.g., any role-based information security training required in accordance with NIST Special Publication 800-16, Information Technology Security Training Requirements.

f) The contractor shall provide to the contracting officer and/or the COR a copy of the training certificates and certification of signing the Contractor Rules of Behavior for each applicable employee within 1 week of the initiation of the contract and annually thereafter, as required.

g) Failure to complete the mandatory annual training and sign the Rules of Behavior annually, within the timeframe required, is grounds for suspension or termination of all physical or electronic access privileges and removal from work on the contract until such time as the training and documents are complete.

4. Contractor Personnel Security Requirements - Information Systems Access

a) All contractors, subcontractors, and third-party servicers and associates working with VA information are subject to the same investigative requirements as those of VA appointees or employees who have access to the same types of information. The level and process of background security investigations for contractors must be in accordance with VA Directive and Handbook 0710, Personnel Suitability and Security Program. The Office for Operations, Security, and Preparedness is responsible for these policies and procedures.

5. Access to and Safeguard of VA Information/Computer Systems

a) The contractor/subcontractor shall request logical (technical) or physical access to VA information and VA information systems only to the extent necessary to perform the services specified in the contract, agreement, or task order.

b) The contractor or subcontractor must notify the Contracting Officer immediately when an employee working on a VA system or with access to VA information is reassigned or leaves the contractor or subcontractor’s employ. The Contracting Officer must also be notified immediately by the contractor or subcontractor prior to an unfriendly termination.

6. VA Information Custodial Language: Information made available to the contractor or subcontractor by VA for the performance or administration of this contract or information developed by the contractor/subcontractor in performance or administration of the contract shall be used only for those purposes and shall not be used in any other way without the prior written agreement of the VA. This clause expressly limits the contractor/subcontractor's rights to use data as described in Rights in Data- General, FAR 52.227-14(d) (1).

7. Security Incident Investigation: The term “security incident” means an event that has, or could have, resulted in unauthorized access to, loss or damage to VA assets, or sensitive information, or an action that breaches VA security procedures. The contractor/subcontractor shall immediately notify the COR and simultaneously, the designated ISO and Privacy Officer for the contract of any known or suspected security/privacy incidents, or any unauthorized disclosure of sensitive information, including that contained in system(s) to which the contractor/subcontractor has access.

Invoicing

1. Payment will be made upon receipt of a properly prepared detailed invoice, prepared by the Contractor, validated by the Contracting Officer’s Representative (COR), and submitted electronically through OB-10 (https://portal.tungsten-network.com/).

2. A properly prepared invoice will contain:

a) Invoice Number and Date

b) Contractor’s Name and Address

c) Accurate Purchase Order Number

d) Supply or Service provided

e) Total Amount Due

Security

PER REVIEW OF VA HANDBOOK 6500.6, CONTRACT SECURITY, APPENDIX A- INFORMATION SECURITY AND PRIVACY CHECKLIST:

• “The C&A requirements do not apply, and a Security Accreditation Package is not required.”

• Acquisition of this service does not involve the storage, generating, transmitting, or exchanging of VA sensitive information to the vendor

• There may exist exposure to VA sensitive information, in particular to sensitive personal information (SPI) while implementing contractual services.

Minimum Statutory Requirements

Prohibition on unauthorized disclosure: Information made available to the contractor or subcontractor by VA for the performance or administration of this contract or information developed by the contractor/subcontractor in performance or administration of the contract shall be used only for those purposes and shall not be used in any other way without the prior written agreement of the VA. This clause expressly limits the contractor/subcontractor's rights to use data as described in Rights in Data - General, FAR 52.227-14(d) (1). See VA Handbook 6500.6, Appendix C, paragraph 3.a.

Requirement for data breach notification

Upon discovery of any known or suspected security/privacy incidents, or any unauthorized disclosure of sensitive information, including that contained in system(s) to which the contractor/subcontractor has access, the contractor/subcontractor shall immediately and simultaneously notify the COR, the designated ISO, and Privacy Officer for the contract. The term ‘security incident’ means an event that has, or could have, resulted in unauthorized access to, loss or damage to VA assets, or sensitive information, or an action that breaches VA security procedures. See VA Handbook 6500.6, Appendix C, paragraph 6.a

Requirement to pay liquidated damages in the event of a data breach.

Consistent with the requirements of 38 U.S.C. §5725, a contract may require access to sensitive personal information. If so, the contractor is liable to VA for liquidated damages in the event of a data breach or privacy incident involving any SPI the contractor/subcontractor processes or maintains under this contract.

The contractor/subcontractor shall provide notice to VA of a “security incident” as set forth in the Security Incident Investigation section above. Upon such notification, VA must secure from a non-Department entity or the VA Office of Inspector General an independent risk analysis of the data breach to determine the level of risk associated with the data breach for the potential misuse of any sensitive personal information involved in the data breach. The term 'data breach' means the loss, theft, or other unauthorized access, or any access other than that incidental to the scope of employment, to data containing sensitive personal information, in electronic or printed form, that results in the potential compromise of the confidentiality or integrity of the data. Contractor shall fully cooperate with the entity performing the risk analysis. Failure to cooperate may be deemed a material breach and grounds for contract termination.

Each risk analysis shall address all relevant information concerning the data breach, including the following:

(1) Nature of the event (loss, theft, unauthorized access).

(2) Description of the event, including:

(a) date of occurrence.

(b) data elements involved, including any PII, such as full name, social security number, date of birth, home address, account number, disability code.

(3) Number of individuals affected or potentially affected.

(4) Names of individuals or groups affected or potentially affected.

(5) Ease of logical data access to the lost, stolen or improperly accessed data in light of the degree of protection for the data, e.g., unencrypted, plain text.

(6) Amount of time the data has been out of VA control.

(7) The likelihood that the sensitive personal information will or has been compromised (made accessible to and usable by unauthorized persons).

(8) Known misuses of data containing sensitive personal information, if any.

(9) Assessment of the potential harm to the affected individuals.

(10) Data breach analysis as outlined in 6500.2 Handbook, Management of Security and Privacy Incidents, as appropriate; and

(11) Whether credit protection services may assist record subjects in avoiding or mitigating the results of identity theft based on the sensitive personal information that may have been compromised.

Based on the determinations of the independent risk analysis, the contractor shall be responsible for paying to the VA liquidated damages in the amount of $37.50 per affected individual to cover the cost of providing credit protection services to affected individuals consisting of the following:

at least 3 relevant credit bureau reports.

(3) Data breach analysis.

(4) Fraud resolution services, including writing dispute letters, initiating fraud alerts and credit freezes, to assist affected individuals to bring matters to resolution.

(5) One year of identity theft insurance with $20,000.00 coverage at $0 deductible.

And.

(6) Necessary legal expenses the subjects may incur to repair falsified or damaged credit records, histories, or financial affairs (see VA handbook 6500.6, appendix c, paragraph 7.a, 7.d).

VA INFORMATION SYSTEM SECURITY/PRIVACY CLAUSE

PER REVIEW OF VA HANDBOOK 6500.6, CONTRACT SECURITY, APPENDIX A- INFORMATION SECURITY AND PRIVACY CHECKLIST:

“The C&A requirements do not apply, and a Security Accreditation Package is not required. “Acquisition of this service does not involve the storage, generating, transmitting, or exchanging of VA sensitive information to the vendor. There may exist exposure to VA sensitive information, in particular to sensitive personal information (SPI) while implementing contractual services.

Minimum Statutory Requirements

Prohibition on unauthorized disclosure: Information made available to the contractor or subcontractor by VA for the performance or administration of this contract or information developed by the contractor/subcontractor in performance or administration of the contract shall be used only for those purposes and shall not be used in any other way without the prior written agreement of the VA. This clause expressly limits the contractor/subcontractor's rights to use data as described in Rights in Data - General, FAR 52.227-14(d) (1). See VA Handbook 6500.6, Appendix C, paragraph 3.a.

Requirement for data breach notification: Upon discovery of any known or suspected security/privacy incidents, or any unauthorized disclosure of sensitive information, including that contained in system(s) to which the contractor/subcontractor has access, the contractor/subcontractor shall immediately and simultaneously notify the COR, the designated ISO, and Privacy Officer for the contract. The term ‘security incident’ means an event that has, or could have, resulted in unauthorized access to, loss or damage to VA assets, or sensitive information, or an action that breaches VA security procedures. See VA Handbook 6500.6, Appendix C, paragraph 6.a Requirement to pay liquidated damages in the event of a data breach: Consistent with the requirements of 38 U.S.C. §5725, a contract may require access to sensitive personal information. If so, the contractor is liable to VA for liquidated damages in the event of a data breach or privacy incident involving any SPI the contractor/subcontractor processes or maintains under this contract.

The contractor/subcontractor shall provide notice to VA of a “security incident” as set forth in the Security Incident Investigation section above. Upon such notification, VA must secure from a non-Department entity or the VA Office of Inspector General an independent risk analysis of the data breach to determine the level of risk associated with the data breach for the potential misuse of any sensitive personal information involved in the data breach. The term 'data breach' means the loss, theft, or other unauthorized access, or any access other than that incidental to the scope of employment, to data containing sensitive personal information, in electronic or printed form, that results in the potential compromise of the confidentiality or integrity of the data. Contractor shall fully cooperate with the entity performing the risk analysis. Failure to cooperate may be deemed a material breach and grounds for contract termination.

Each risk analysis shall address all relevant information concerning the data breach, including the following:

(1) Nature of the event (loss, theft, unauthorized access).

(2) Description of the event, including:

(a) date of occurrence.

(b) data elements involved, including any PII, such as full name, social security number, date of birth, home address, account number, disability code.

(3) Number of individuals affected or potentially affected.

(4) Names of individuals or groups affected or potentially affected.

(5) Ease of logical data access to the lost, stolen or improperly accessed data in light of the degree of protection for the data, e.g., unencrypted, plain text.

(6) Amount of time the data has been out of VA control.

(7) The likelihood that the sensitive personal information will or has been compromised (made accessible to and usable by unauthorized persons).

(8) Known misuses of data containing sensitive personal information, if any.

(9) Assessment of the potential harm to the affected individuals.

(10…