36C25026R0092.pdf

PAGE 1 OF 1. REQUISITION NO.

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NO. 5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

a. NAME b. TELEPHONE NO. (No Collect Calls) 8. OFFER DUE DATE/LOCAL

TIME

9. ISSUED BY CODE 10. THIS ACQUISITION IS UNRESTRICTED OR SET ASIDE: % FOR:

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

8(A)

NAICS:

SIZE STANDARD:

11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

13a. THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700)

13b. RATING

14. METHOD OF SOLICITATION

RFQ IFB RFP

15. DELIVER TO CODE 16. ADMINISTERED BY CODE

17a. CONTRACTOR/OFFEROR CODE FACILITY CODE 18a. PAYMENT WILL BE MADE BY CODE

TELEPHONE NO. UEI: EFT:

PHONE: FAX:

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW IS CHECKED

SEE ADDENDUM

19. 20. 21. 22. 23. 24.

ITEM NO. SCHEDULE OF SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Govt. Use Only)

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA ARE ARE NOT ATTACHED.

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN _______________ 29. AWARD OF CONTRACT: REF. ___________________________________ OFFER COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DATED ________________________________. YOUR OFFER ON SOLICITATION DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY (BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED SET FORTH HEREIN IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30b. NAME AND TITLE OF SIGNER (TYPE OR PRINT) 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (TYPE OR PRINT) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION (REV. NOV 2021)

PREVIOUS EDITION IS NOT USABLE Prescribed by GSA - FAR (48 CFR) 53.212

7. FOR SOLICITATION

INFORMATION CALL:

STANDARD FORM 1449

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

36C25026R0092 09-19-2026

Jennifer Nowak 937-268-6511 09-29-2026 2:00pm EDT

36C250 Department of Veterans Affairs Network Contracting Office 10 3140 Governor's Place Blvd Suite 210 Kettering OH 45409-1337

X 100

X

561210

$47 Million

N/A

36C250

Department of Veterans Affairs Network Contracting Office (NCO) 10 3140 Governor's Place Blvd Suite 210 Ketterin OH 45409

36C250

Department of Veterans Affairs Network Contracting Office 10 3140 Governor's Place Blvd Suite 210 Kettering OH 45409-1337

36C250

Department of Veterans Affairs Financial Services Center Invoices To Be submitted electronically https://www.tungsten-network.com

877-489-6135

See CONTINUATION Page

This is an RFP for water testing services at multiple locations in the state of Ohio.

All questions and solicitation responses shall be emailed to Thomas.Bellamy@va.gov and Jennifer.Nowak@va.gov.

All questions and communications via email only.

See Quote Preparation Instructions, read all documents and attachments to understand the scope of these services.

Incomplete responses can result in exclusion from consideration.

This is a 100% SDVOSB set aside that will be a FFP IDIQ.

This is subject to the Wage Determinations 2015-4731 Rev 31 Published 8/17/26, 2015-4727 Rev 31 Pub 8/22/26, 2015-4729 Rev 34 Pub 8/17/26, 2015-4771 Rev 34 Pub 8/17/26, 2015-4719 Rev 34 Pub 8/17/26 all found on SAM.gov.

See CONTINUATION Page

X 1

36C25026R0092

Table of Contents

SECTION B - CONTINUATION OF SF 1449 BLOCKS

B.1 CONTRACT ADMINISTRATION DATA

B.2 Statement of Work (SOW) B.3 PRICE/COST SCHEDULE – see Price/Cost Excel Sheet Attachment

ITEM INFORMATION

SECTION C - CONTRACT CLAUSES

C.1 52.212-2 EVALUATION—COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES (OCT

2025) (DEVIATION)

C.2 52.212-4 CONTRACT TERMS AND CONDITIONS—COMMERCIAL PRODUCTS AND

COMMERCIAL SERVICES (OCT 2025) (DEVIATION)

C.3 52.216-18 ORDERING (AUG 2020)

C.4 52.216-19 ORDER LIMITATIONS (OCT 1995)

C.5 52.216-22 INDEFINITE QUANTITY (NOV 2025) (DEVIATION) ALTERNATE II (NOV 2025)

C.6 52.217-8 OPTION TO EXTEND SERVICES (NOV 1999)

C.7 52.217-9 OPTION TO EXTEND THE TERM OF THE CONTRACT (MAR 2000)

C.8 VAAR 852.211-72 TECHNICAL INDUSTRY STANDARDS (NOV 2018)

C.9 VAAR 852.219-73 VA NOTICE OF TOTAL SET-ASIDE FOR CERTIFIED SERVICE-DISABLED

VETERAN-OWNED SMALL BUSINESSES (JAN 2023) (DEVIATION)

C.10 VAAR 852.219-75 VA NOTICE OF LIMITATIONS ON SUBCONTRACTING—CERTIFICATE OF

COMPLIANCE FOR SERVICES AND CONSTRUCTION (JAN 2023) (DEVIATION)

C.11 52.252-1 SOLICITATION PROVISIONS INCORPORATED BY REFERENCE (FEB 1998)

C.12 52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

C.13 VAAR 852.232-72 ELECTRONIC SUBMISSION OF PAYMENT REQUESTS (NOV 2018)

C.14 VAAR 852.237-75 KEY PERSONNEL (OCT 2019)

C.15 VAAR 852.233-70 PROTEST CONTENT/ALTERNATIVE DISPUTE RESOLUTION (OCT 2018)

SECTION E - SOLICITATION PROVISIONS

E.1 52.203-8 CANCELLATION, RESCISSION, AND RECOVERY OF FUNDS FOR ILLEGAL OR

IMPROPER ACTIVITY (MAY 2014)

E.2 52.216-1 TYPE OF CONTRACT (NOV 2025) (DEVIATION)

E.3 52.216-22 INDEFINITE QUANTITY (NOV 2025) (DEVIATION)

E.4 52.222-90 ADDRESSING DEI DISCRIMINATION BY FEDERAL CONTRACTORS (DEVIATION

APR 2026)

E.5 52.232-19 AVAILABILITY OF FUNDS FOR THE NEXT FISCAL YEAR (APR 1984)

E.6 52.222-37 EMPLOYMENT REPORTS ON VETERANS (NOV 2025) (DEVIATION)

E.7 52.222-40 NOTIFICATION OF EMPLOYEE RIGHTS UNDER THE NATIONAL LABOR

RELATIONS ACT (NOV 2025) (DEVIATION)

E.8 52.244-2 SUBCONTRACTS (JUN 2020)

E.9 VAAR 852.273-70 LATE OFFERS (NOV 2021)

E.10 52.222-42 STATEMENT OF EQUIVALENT RATES FOR FEDERAL HIRES (MAY 2014)

E.11 52.209-6 PROTECTING THE GOVERNMENT'S INTEREST WHEN SUBCONTRACTING WITH

CONTRACTORS DEBARRED, SUSPENDED, PROPOSED FOR DEBARMENT, OR VOLUNTARILY

EXCLUDED (JAN 2025)

E.12 52.222-36 EQUAL OPPORTUNITY FOR WORKERS WITH DISABILITIES (NOV 2025)

(DEVIATION)

E.13 52.228-5 INSURANCE—WORK ON A GOVERNMENT INSTALLATION (JAN 1997)

E.14 VAAR 852.204-72 PERSONNEL VETTING AND CREDENTIALING (DEVIATION) (MAR 2026)

E.15 VAAR 852.208-71 SERVICE-DISABLED VETERAN-OWNED AND VETERAN-OWNED SMALL

BUSINESS EVALUATION FACTOR COMMITMENTS--ORDERS AND BPAS (NOV 2022)

E.16 VAAR 852.219-73 VA NOTICE OF TOTAL SET-ASIDE FOR VERIFIED SERVICE-DISABLED

VETERAN-OWNED SMALL BUSINESSES (NOV 2022)

E.17 VAAR 852.219-74 VA NOTICE OF TOTAL SET-ASIDE FOR VERIFIED VETERAN-OWNED

SMALL BUSINESSES (NOV 2022)

E.18 VAAR 852.236-90 RESTRICTION ON SUBMISSION AND USE OF EQUAL PRODUCTS (APR

2019)

E.19 VAAR 852.242-71 ADMINISTRATIVE CONTRACTING OFFICER (OCT 2020)

E.20 52.209-7 INFORMATION REGARDING RESPONSIBILITY MATTERS (OCT 2018)

E.21 52.212-1 INSTRUCTIONS TO OFFERORS—COMMERCIAL PRODUCTS AND COMMERCIAL

SERVICES (OCT 2025) (DEVIATION)

SECTION D - CONTRACT DOCUMENTS, EXHIBITS, OR ATTACHMENTS

QUOTE PREPARATION INSTRUCTIONS

BASIS FOR AWARD

SECTION B - CONTINUATION OF SF 1449 BLOCKS

B.1 CONTRACT ADMINISTRATION DATA

1. Contract Administration: All contract administration matters will be handled by the following individuals:

a. CONTRACTOR:

b. GOVERNMENT: Contracting Officer 36C250

Department of Veterans Affairs

Network Contracting Office 10

3140 Governor's Place Blvd

Suite 210

Kettering OH 45409-1337

2. CONTRACTOR REMITTANCE ADDRESS: All payments by the Government to the contractor will be made in accordance with:

[] 52.232-33, Payment by Electronic Funds Transfer—System for Award Management, or

[] 52.232-36, Payment by Third Party

3. INVOICES: Invoices shall be submitted in arrears:

a. Quarterly []

b. Semi-Annually []

c. Other [X] See #4 below. Utilize Tungsten Invoice System.

4. GOVERNMENT INVOICE ADDRESS: All Invoices from the contractor shall be submitted electronically in accordance with VAAR Clause 852.232-72 Electronic Submission of Payment Requests.

B.2 Statement of Work (SOW)

Contract Title: VA Ohio Water Testing Contract

Background

The Department of Veterans Affairs (VA) requires quarterly and periodic water testing, including sample collection, laboratory analysis, and results management, at government-owned facilities in Ohio where patients, residents, and visitors utilize, including overnight stays and for the management of select outdoor non-potable water systems. This contract supports compliance with VHA Directive 1061, VHA Directive 1116, ST 108 and other applicable standards, aiming to prevent healthcare-associated Legionella and other waterborne hazards. Attachments have been included with this posted solicitation.

This will be very similar to a Legionella water testing or ST108/SPS water testing contract but will cover multiple locations, CBOCs and clinics in Ohio as shown below utilizing a Firm-Fixed Price IDIQ (Indefinite Delivery Indefinite Quantity) contract vehicle. This means that while there will be standard weekly and quarterly legionella and SPS water testing there will also be task orders issued for retesting needs and/or additional testing needs. The contractor will plan with each site to come on site and provide these testing services on specific dates and times on regular basis and upon request in a timely fashion. Copies of the Directives, example sheets, and a list of tests have been added as attachments. This includes providing reports per VHA directives and the statement of work herein.

Scope of Work

The Contractor shall provide all labor, materials, shipping, equipment, supervision, transportation, and electronic data reporting required to conduct water sampling and analysis at all VA Medical Centers and associated sites in Ohio, including but not limited to –

Louis Stokes Cleveland VA Medical Center – 10701 East Blvd. Cleveland, OH 44106

Fisher House 1&2, 10521 Lee Ave., Cleveland, OH 44106

TR House, 9401 Lorain Rd., Cleveland, OH 44106

Chillicothe VA Medical Center – 17273 State Route 104, Chillicothe, OH 45601

Dayton VA Medical Center – 4100 West Third Street, Dayton, OH 45428

Buildings 320,330,350,410,425

Cincinnati VA Medical Center – 3200 Vine Street, Cincinnati, OH 45220

Main Building #1, Community Living Center (CLC) Bldg. 2, Fisher House Bldg. 16, Campus Chiller Plant Bldg. #13 and Fort Thomas Campus: Main Building, Bldg. 64

Columbus Chalmers P. Wylie VA Ambulatory Center – 420 North James Road, Columbus, OH 43219

Note: The Government reserves the right to add or remove any additional Medical Centers, CBOCs, or other facilities to the contract as they become available. Furthermore, the Government reserves the right to add, increase, or decrease the number of facilities, or users to allow for fluctuations of client demand that are otherwise unknown at time of solicitation. Vendors are advised that VA reorganization may necessitate adding additional locations to, or deleting existing locations from, this contract in the future. Any such additions and/or deletions will be complete by bilateral modification.

Contractor Responsibilities (Recurring Tasks)

• Collection of water samples at each facility, including required sample containers and field-testing equipment.

• On-site physical and chemical testing

• Sampling from primary and secondary disinfectant systems for both hot and cold water at all required/requested points

• Heterotrophic Plate Count (HPC) testing for Dental Clinics and Cooling towers (activated by task order/facility opt-in)

• All reports submitted electronically

• Biocide testing is required for each sample, both hot and cold sample for every sample point.

• Testing is required for both the primary and the secondary disinfectant.

• On-site physical/chemical testing: pH, temperature, residual biocide (chlorine/monochloramine/chlorine dioxide as appropriate).

• Testing both primary and secondary disinfectant systems for hot and cold water at designated distal points.

LEGIONELLA SAMPLE COLLECTION:

• Legionella testing by culture method only (PCR/DFA not permitted).

• Laboratory must be CDC ELITE certified and ISO 11731 accredited (A2LA/AIHA-

EMLAP/NELAP).

• Quantify L. pneumophila (serogroups 1, 2-14) and non-pneumophila species, reported in CFU/ml.

Dental Waterline Testing

• Quarterly order expectation and ad-hoc, per Infection Control Standards for VA Dental Clinics.

• EPA/state-certified lab using Standard Methods 9215C (spread plate method).

Potable Water Quality Analysis

• Weekly testing for 10 hot and 10 cold outlets, plus incoming supply

• Parameters: temperature, pH, Oxidant residual

• Results uploaded or provided on day of collection

Cooling Tower Analysis

• Weekly field testing: temperature, pH, oxidant/non-oxidant residuals.

• Total Heterotrophic Aerobic Bacteria (THAB) by certified lab.

Sterile Processing System Testing

• Monthly and quarterly panels, per AAMI TIR34: 2014 or current standard.

• Monthly: HPC, TOC, conductivity, pH, color, turbidity

• Quarterly: LAL/Endotoxin, hardness, chloride, iron, copper, manganese

Supplemental/Ad-Hoc Sampling

• Sampling determined by facility COR (e.g., coliforms/E. coli, legionella, HPC, THAB)

• Contractor will provide fixed pricing for sampling and analysis per test

• Necessary treatment requirements

• All samples shall be evaluated and tested by a CDC certified Elite Laboratory. The specific sampling points within identified buildings, and the type of sample (e.g., hot water or cold water) will be specified by the Contracting Officers Representative (COR) for each medical center in consultation with the contractor.

• The Contractor shall be responsible for sampling, testing, analysis, and the transportation of all samples to the laboratories actively certified by the Centers for Disease Control and Prevention (CDC) and Environmental Legionella Isolation Techniques Evaluation (ELITE) laboratory.

• The contractor shall read VHA Directive 1116(2), 1061, ST 108 and have an understanding of local and state regulations in regard to water testing requirements at medical centers in the state of Ohio. Contractors shall comply with all mandatory Federal, State, local and Department of Veteran Affairs regulations governing these services. Site COR will assist with any clarifications that might arise and both parties will communicate updates on these directives and regulations with each other and contract point of contact.

• Facility staff will assist and ensure access to all identified sample locations. These locations should alter/change each quarter to maximize testing throughout the system over time. Quantity and testing needs and dates will be determined between the contractor and site Point of Contact based on what is needed but with an expectation of at least routine quarterly testing.

• The Contractor shall furnish all sample collection equipment. Bottles must be sterile, collect each water sample in clean, unused, sample collector using first draw method to be appropriate for the analysis, properly preserved and promptly transported to the laboratory under strict chain of custody procedures. Using a waterproof marker, label each bottle with unique sample number corresponding to the sample site listed on a chain of custody (COC) records. The location (building number and room number), date and time of sampling, type of water sampled (hot, cold, etc.) fixture type, chlorine residual level, pH level and water temperatures will be logged and documented.

• Measuring devices, such as pH or conductivity meters, used for field monitoring must be maintained and calibrated following the EPA-approved analytical methods and the manufacturers’ instructions. The calibration standards used must be within their expiration dates and free of suspended matter.

• Probes must be washed with deionized water after each use and stored according to instructions. Other equipment items used to collect samples also must be rinsed with deionized water and kept clean between sampling events to prevent contamination of the samples. Contractors should be able to demonstrate that equipment is properly calibrated while onsite if requested by facility point of contact.

• The Contracting Officer's Representative (COR) will assist contractor personnel in obtaining required identification badges to enter the facilities and collect samples.

Contractor personnel shall comply with all VA procedures governing building access and security.

Information regarding ENVIRONMENTAL VALIDATION:

Environmental validation is the process of testing the building’s potable water distribution system(s) to determine if the engineering controls are successfully inhibiting the growth of Legionella. Testing of the building's hot and cold-water distribution system(s) for L.

pneumophila must be performed quarterly (once per Federal Fiscal Year quarter). Additional testing may be required following positive test results.

• Water samples shall be collected and analyzed at a minimum of 10 outlets on the hot water distribution system and 10 outlets on the cold-water distribution system for each building occupied by overnight stays in accordance with latest version of VHA Directive 1061 (1).

• Each medical center will have a representative that will provide a list of buildings where samples are to be taken prior to the commencement of work.

• VA facilities may request additional testing at outlets or areas (e.g., water tanks, distribution piping). Additional testing shall be determined by the COR or suggested by the contractor based on local conditions (e.g., size of building, patient population risk factors, known history of healthcare-associated Legionella Disease [HCA LD], suspicion for recent or current HCA LD occurrence, previous environmental testing results, and/or ability to implement engineering controls to prevent Legionella growth in the building water distribution systems). Additional testing will be invoiced separately.

• Non-routine testing (outside of the quarterly sampling) may be conducted as needed. For non-routine testing, the contractor shall sample within 3 business days following receipt of notice to proceed by the COR. Swab sampling may be conducted in conjunction with the water collection sampling for non-routine sampling. Swab sampling will be done in accordance with VHA direction and in accordance with direction from the laboratory where the samples will be analyzed. This will be invoiced separately. Examples of nonroutine testing include but are not limited to testing after eradication. Contractor is to provide pricing information on the Price Schedule. Non-routine sampling shall include onsite physical and chemical testing.

In addition to the CDC ELITE certification, the laboratory will be accredited to the most recent version of the ISO 11731 standard, Water Quality- Detection and Enumeration of Legionella, and accredited by a recognized an environmental laboratory accrediting agency, for example, Environmental Laboratory Approval Program (ELAP) for environmental analyses of potable water. Laboratory must be able to report results to at least 1 CFU/ ml for potable domestic water and will report up to 3000 CFU/ml without conducting additional sampling or charges. Must disclose labs certifications with proposal.

• Information about CDC ELITE certified laboratories can be found at:

https://wwwn.cdc.gov/elite/Public/MemberList.aspx

• Information about American Association for Laboratory Accreditation (A2La) can be found at: https://www.a2la.org/

• Information about American Industrial Hygiene Association (AIHA) laboratories can be found at:

https://www.aihaaccreditedlabs.org/LabAccreditationPrograms/Pages/default.aspx

Sample Shipping to Contractor Lab:

Place the COC record in a zip-top bag to protect against water damage and include this in the package with samples. Securely tighten bottle caps to prevent leaking and potential cross-contamination. Electrical tape can be wrapped around bottle caps to prevent leaks.

Ship sample overnight the day they are collected; deliveries by noon to receiving laboratory the following day. Routine samples are to be performed Monday through Thursday, to ensure samples are not stored for greater than 72 hours.

Sample Results:

Results will be provided including location, date, time specimen was collected, type of water (hot, cold, ice machine, utility, etc.), fixture type, date inoculated, date analyzed, total heterotrophic aerobic bacteria (THAB), Legionella testing results, temperature, pH and chlorine residual level.

Results should be sent electronically via email to individuals specified by the COR. Preliminary results of positive samples are to be sent to COR within 24 hours with results identified as positive. If there are positive samples, the testing laboratory shall provide storage of environmental isolates for at least (4) years. The laboratory will provide a report indicating analytical results for each sample submitted to be provided to COR within 10 days of sample https://wwwn.cdc.gov/elite/Public/MemberList.aspx https://wwwn.cdc.gov/elite/Public/MemberList.aspx https://www.a2la.org/ https://www.aihaaccreditedlabs.org/LabAccreditationPrograms/Pages/default.aspx received and uploaded to the contractor provided web-based data management site and emailed to the COR. Lower limits of detection will align with AAMI TIR 34: 2014(R)2017 recommended levels of water quality for medical device reprocessing when results and testing applies. Provide final test results within 2 weeks of completion of sampling as directed by SOW and site POC.

Example:

Performance Standards

• All testing performed under current, applicable, VHA directives/regulations.

• Work performed Monday-Friday, 7:30 am – 4:00 pm, excluding federal holidays.

• Only successful analyzed/reported samples may be invoiced

• Only successfully analyzed/reported samples may be invoiced.

Records management Obligations

• Contractor must comply with all Federal records laws (44 U.S.C., NARA Regulations, Privacy Act, FOIA), safeguard VA records/data, and follow VA records disposition schedules.

• VA owns all data and records created under this contract

• Contractor employees must complete any required VA records management training

• Contractor must flow down all records and privacy requirements to subcontractors

• Correspondence Requirements: All contractor correspondence (emails) related to this contract shall include the contract number, contract title, VA medical center name.

Correspondence shall be emailed to site POC and contracting officer/specialist.

Ordering/Delivery

• Task orders will specify site, frequency, sampling type/quantity, and schedule

• Flexibility in ordering allows VA to adjust locations, quantities, and types of required services

• Contract is Firm-Fixed Price IDIQ with guaranteed minimum and maximum contract value.

Minimum order is $100.00, not-to-exceed maximum $200,000.00 per task order with a total contract value of $6,000,000.00. Contracting Officer will place orders for each site and required services by issuing a contract document.

RESULTS DATA MANAGEMENT: The Contractor shall outline a plan to facilitate the management of Environmental Validation data. The Contractor's plan shall include procedures for:

• Providing all sample analysis reports via email to each facility's COR. Analytical reports shall include a signed copy of the chain of custody, identification of sampling locations, analytical results and method detection limits and description of test methodology.

• Providing the POC & VAMC COR with progress reports on sampling completion dates and supplemental actions to be taken. This information will be provided upon award.

• Developing a chain of custody to identify the contractor's responsibility for;

collecting environmental water samples, ensuring that the water samples are transferred to the environmental testing laboratory, receiving the results, and reporting the results to the COR.

• Providing the POC & VAMC COR with reports of the water system monitoring and all Legionella sampling issues.

• All results will be in the VA/VHA format so that data can be uploaded easily. A sample document will be provided upon award. Contractor will also provide the results in a PDF document.

• If temperature is >110 degrees Fahrenheit, if readily apparent, contractor will indicate in the Notes section of the spreadsheet if a mixing valve is installed. If contractor is not sure, they will ask for the facility POC. In addition, if temperature is >110 degrees Fahrenheit, contractor will discuss with facility guide and indicate in the Notes section of the spreadsheet if it is a patient care area or not.

• Laboratory results must be reported to 1 CFU/ ml for potable domestic water and up to 3000 CFU/ml.

SAMPLING FOR SAFE DRINKING WATER COMPLIANCE FOR DENTAL WATERLINES:

For facilities who opt into this arrangement, sampling equipment and lab analysis will be provided to the COR for testing their waterlines for compliance with the EPA Safe Drinking Water Act standard for potable water and the “Infection Control Standards for VA Dental Clinic,” dated 21, October 2013. Sampling analysis will be for total colony forming units (cfu) of heterotrophic water bacteria per milliliter of water.

Sampling is required on a quarterly basis for each waterline in each Dental Clinic. The facility shall collect the dental waterline samples at the VA Medical Center’s Dental Offices; the contractor will coordinate sampling times with the Point of Contract at each of the facilities and shall notify the Point of Contact upon arrival. Each dental waterline will be tested separately. All hand pieces, air-water syringe tips, and any other equipment reprocessed by SPS before collection samples from the waterlines. The air-water syringe itself, if not changed between patients, shall remain on the line while collecting the sample.

Non-routine sampling (outside of the quarterly sampling) may be conducted as needed. Each dental clinic that is included in the contract is allowed non-routine samples numbering up to 10% of the total samples taken from each clinic annually. If sampling over this amount is needed, the contractor will provide a fixed price for the sampling equipment and analysis and for the collection of samples at the appropriate VA Medical Centers.

Provide all sample analysis reports via e-mail to the COR within determined timeframes.

Analytical reports shall include a signed copy of the chain of custody, identification of sampling locations, method detection limits, and a description of test methodology.

Reporting and Deliverables

• Chain of custody and collection/analysis documentation capturing facility, collection date, address, sampler, biocide, volume, preservative, test type, time/location, source, type, temperature, biocide, pH, notes

• Results in PDF and Excel; electronic submission within 30 calendar days (routine) or 10 days (dental).

• Web-based data management for real-time access provided by contractor.

VA INFORMATION AND INFORMATION SYSTEM SECURITY/PRIVACY

1. GENERAL

Contractors, contractor personnel, subcontractors, and subcontractor personnel shall be subject to the same Federal laws, regulations, standards, and VA Directives and Handbooks as VA and VA personnel regarding information and information system security.

2. ACCESS TO VA INFORMATION AND VA INFORMATION SYSTEMS

a. A contractor/subcontractor shall request logical (technical) or physical access to VA information and VA information systems for their employees, subcontractors, and affiliates only to the extent necessary to perform the services specified in the contract, agreement, or task order.

b. All contractors, subcontractors, and third-party servicers and associates working with VA information are subject to the same investigative requirements as those of VA appointees or employees who have access to the same types of information. The level and process of background security investigations for contractors must be in accordance with VA Directive and Handbook 0710, Personnel Suitability and Security Program if applicable. The Office for Operations, Security, and Preparedness is responsible for these policies and procedures.

3. VA INFORMATION CUSTODIAL LANGUAGE

a. Information made available to the contractor or subcontractor by VA for the performance or administration of this contract or information developed by the contractor/subcontractor in performance or administration of the contract shall be used only for those purposes and shall not be used in any other way without the prior written agreement of the VA. This clause expressly limits the contractor/subcontractor's rights to use data as described in Rights in Data - General, FAR 52.227- 14(d) (1).

b. VA information should not be co-mingled, if possible, with any other data on the contractor’s/subcontractor's information systems or media storage systems in order to ensure VA requirements related to data protection and media sanitization can be met. If co-mingling must be allowed to meet the requirements of the business need, the contractor must ensure that VA's information is returned to the VA or destroyed in accordance with VA's sanitization requirements. VA reserves the right to conduct onsite inspections of contractor and subcontractor IT resources to ensure data security controls, separation of data and job duties, and destruction/media sanitization procedures are in compliance with VA directive requirements.

c. Prior to termination or completion of this contract, contractor/ subcontractor must not destroy information received from VA, or gathered/ created by the contractor in the course of performing this contract without prior written approval by the VA. Any data destruction done on behalf of VA by a contractor/subcontractor must be done in accordance with National Archives and Records Administration (NARA) requirements as outlined in VA Directive 6300, Records and Information Management and its Handbook 6300.1 Records Management Procedures, applicable VA Records Control Schedules, and VA Handbook 6500.1, Electronic Media Sanitization. Self-certification by the contractor that the data destruction requirements above have been met must be sent to the VA Contracting Officer within 30 days of termination of the contract.

d. The contractor/subcontractor must receive, gather, store, back up, maintain, use, disclose and dispose of VA information only in compliance with the terms of the contract and applicable Federal and VA information confidentiality and security laws, regulations and policies. If Federal or VA information confidentiality and security laws, regulations and policies become applicable to the VA information or information systems after execution of the contract, or if NIST issues or updates applicable FIPS or Special Publications (SP) after execution of this contract, the parties agree to negotiate in good faith to implement the information confidentiality and security laws, regulations and policies in this contract.

e. The contractor/subcontractor shall not make copies of VA information except as authorized and necessary to perform the terms of the agreement or to preserve electronic information stored on contractor/subcontractor electronic storage media for restoration in case any electronic equipment or data used by the contractor/subcontractor needs to be restored to an operating state. If copies are made for restoration purposes, after the restoration is complete, the copies must be appropriately destroyed.

f. If VA determines that the contractor has violated any of the information confidentiality, privacy, and security provisions of the contract, it shall be sufficient grounds for VA to withhold payment to the contractor or third party or terminate the contract for default or terminate for cause under Federal Acquisition Regulation (FAR) part 12.

4. INFORMATION SYSTEM HOSTING, OPERATION, MAINTENANCE, OR USE

a. For information systems that are hosted, operated, maintained, or used on behalf of VA at non- VA facilities, contractors/subcontractors are fully responsible and accountable for ensuring compliance with all HIPAA, Privacy Act, FISMA, NIST, FIPS, and VA security and privacy directives and handbooks. This includes conducting compliant risk assessments, routine vulnerability scanning, system patching and change management procedures, and the completion of an acceptable contingency plan for each system. The contractor's security control procedures must be equivalent to those procedures used to secure VA systems. A Privacy Impact Assessment (PIA) must also be provided to the COR and approved by VA Privacy Service prior to operational approval. All external Internet connections to VA's network involving VA information must be reviewed and approved by VA prior to implementation.

b. Adequate security controls for collecting, processing, transmitting, and storing of Personally Identifiable Information (PII), as determined by the VA Privacy Service, must be in place, tested, and approved by VA prior to hosting, operation, maintenance, or use of the information system, or systems by or on behalf of VA. These security controls are to be assessed and stated within the PIA and if these controls are determined not to be in place, or inadequate, a Plan of Action and Milestones (POA&M) must be submitted and approved prior to the collection of PII.

c. Outsourcing (contractor facility, contractor equipment or contractor staff) of systems or network operations, telecommunications services, or other managed services requires certification and accreditation (authorization) (C&A) of the contractor's systems in accordance with VA Handbook 6500.3, Certification and Accreditation and/or the VA OCS Certification Program Office. Government-owned (government facility or government equipment) contractor-operated systems, third party or business partner networks require memorandums of understanding and interconnection agreements (MOU-ISA) which detail what data types are shared, who has access, and the appropriate level of security controls for all systems connected to VA networks.

d. The contractor/subcontractor's system must adhere to all FISMA, FIPS, and NIST standards related to the annual FISMA security controls assessment and review and update the PIA. Any deficiencies noted during this assessment must be provided to the VA contracting officer and the ISO for entry into VA's POA&M management process. The contractor/subcontractor must use VA's POA&M process to document planned remedial actions to address any deficiencies in information security policies, procedures, and practices, and the completion of those activities. Security deficiencies must be corrected within the timeframes approved by the government.

Contractor/subcontractor procedures are subject to periodic, unannounced assessments by VA officials, including the VA Office of Inspector General. The physical security aspects associated with contractor/ subcontractor activities must also be subject to such assessments. If major changes to the system occur that may affect the privacy or security of the data or the system, the C&A of the system may need to be reviewed, retested and re- authorized per VA Handbook 6500.3. This may require reviewing and updating all of the documentation (PIA, System Security Plan, Contingency Plan). The Certification Program Office can provide guidance on whether a new C&A would be necessary.

e. The contractor/subcontractor must conduct an annual self assessment on all systems and outsourced services as required. Both hard copy and electronic copies of the assessment must be provided to the COR. The government reserves the right to conduct such an assessment using government personnel or another contractor/subcontractor. The contractor/subcontractor must take appropriate and timely action (this can be specified in the contract) to correct or mitigate any weaknesses discovered during such testing, generally at no additional cost.

f. VA prohibits the installation and use of personally-owned or contractor/ subcontractor-owned equipment or software on VA's network. If non-VA owned equipment must be used to fulfill the requirements of a contract, it must be stated in the service agreement, SOW or contract. All of the security controls required for government furnished equipment (GFE) must be utilized in approved other equipment (OE) and must be funded by the owner of the equipment. All remote systems must be equipped with, and use, a VA-approved antivirus (AV) software and a personal (host-based or enclave based) firewall that is configured with a VA-approved configuration. Software must be kept current, including all critical updates and patches. Owners of approved OE are responsible for providing and maintaining the anti-viral software and the firewall on the non-VA owned OE.

g. All electronic storage media used on non-VA leased or non-VA owned IT equipment that is used to store, process, or access VA information must be handled in adherence with VA Handbook 6500.1, Electronic Media Sanitization upon: (i) completion or termination of the contract or (ii) disposal or return of the IT equipment by the contractor/subcontractor or any person acting on behalf of the contractor/subcontractor, whichever is earlier. Media (hard drives, optical disks, CDs, back-up tapes, etc.) used by the contractors/ subcontractors that contain VA information must be returned to the VA for sanitization or destruction, or the contractor/subcontractor must self-certify that the media has been disposed of per 6500.1 requirements. This must be completed within 30 days of termination of the contract.

h. Bio-Medical devices and other equipment or systems containing media (hard drives, optical disks, etc.) with VA sensitive information must not be returned to the vendor at the end of lease, for trade-in, or other purposes. The options are:

(1) Vendor must accept the system without the drive;

(2) VA's initial medical device purchase includes a spare drive which must be installed in place of the original drive at time of turn-in; or

(3) VA must reimburse the company for media at a reasonable open market replacement cost at time of purchase.

(4) Due to the highly specialized and sometimes proprietary hardware and software associated with medical equipment/systems, if it is not possible for the VA to retain the hard drive, then;

(a) The equipment vendor must have an existing BAA if the device being traded in has sensitive information stored on it and hard drive(s) from the system are being returned physically intact; and

(b) Any fixed hard drive on the device must be non-destructively sanitized to the greatest extent possible without negatively impacting system operation. Selective clearing down to patient data folder level is recommended using VA approved and validated overwriting technologies/methods/tools. Applicable media sanitization specifications need to be pre-approved and described in the purchase order or contract.

(c) A statement that needs to be signed by the Director (System Owner) states that the drive could not be removed and that (a) and (b) controls above are in place and completed. The ISO needs to maintain the documentation.

5. SECURITY INCIDENT INVESTIGATION

a. The term "security incident" means an event that has, or could have, resulted in unauthorized access to, loss or damage to VA assets, or sensitive information, or an action that breaches VA security procedures. The contractor/ subcontractor shall immediately notify the COR and simultaneously, the designated ISO and Privacy Officer for the contract of any known or suspected security/privacy incidents, or any unauthorized disclosure of sensitive information, including that contained in system(s) to which the contractor/ subcontractor has access.

b. To the extent known by the contractor/subcontractor, the contractor/ subcontractor's notice to VA shall identify the information involved, the circumstances surrounding the incident (including to whom, how, when, and where the VA information or assets were placed at risk or compromised), and any other information that the contractor/subcontractor considers relevant.

c. With respect to unsecured protected health information, the business associate is deemed to have discovered a data breach when the business associate knew or should have known of a breach of such information. Upon discovery, the business associate must notify the covered entity of the breach. Notifications need to be made in accordance with the executed business associate agreement.

d. In instances of theft or break-in or other criminal activity, the contractor/subcontractor must concurrently report the incident to the appropriate law enforcement entity (or entities) of jurisdiction, including the VA OIG and Security and Law Enforcement. The contractor, its employees, and its subcontractors and their employees shall cooperate with VA and any law enforcement authority responsible for the investigation and prosecution of any possible criminal law violation(s) associated with any incident. The contractor/subcontractor shall cooperate with VA in any civil litigation to recover VA information, obtain monetary or other compensation from a third party for damages arising from any incident, or obtain injunctive relief against any third party arising from, or related to, the incident.

B.3 PRICE/COST SCHEDULE – see Price/Cost Excel Sheet Attachment

ITEM INFORMATION

ITEM

NUMBE

R

DESCRIPTION OF

SUPPLIES/SERVICE

S

QUANTIT

Y

UNI

T UNIT PRICE AMOUNT

1.00 YR ________________

On site water testing, sample collection, analysis, results management for government-owned buildings in which patients, residents or visitors stay overnight - Chillicothe, Cincinnati, Cleveland, Columbus and Dayton. Contractor will adhere to Statement of Work and ensure samples are properly submitted for testing.

Contract Period: Base POP Begin: 10-07-2026 POP End: 10-06-2027 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services PRODUCT/SERVICE CODE: F103 - Environmental Systems Protection - Water Quality Support

0001AA

2,500.00 ea ________________

Quarterly Environmental Validation Sampling required to comply with VHA Directive 1061, 1116, ST108.

Contract Period: Base POP Begin: 10-07-2026 POP End: 10-06-2027 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

0001AB

2,000.00 ea ________________

Non-Routine water testing, sample collection, analysis, including onsite physical and chemical testing, results management for government-owned buildings in which patients, residents or visitors stay overnight - Chillicothe, Cincinnati, Cleveland, Columbus and Dayton Contract Period: Base POP Begin: 10-07-2026 POP End: 10-06-2027 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

0001AC

400.00 ea ________________

Routine cooling tower sample collection, analysis, and results management Contract Period: Base

POP Begin: 10-07-2026 POP End: 10-06-2027 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

0001AD

60.00 ea ________________

Non-routine HPC Testing (Cooling tower) performance outside of quarterly sampling, including onsite physical and chemical testing Contract Period: Base POP Begin: 10-07-2026 POP End: 10-06-2027 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

0001AE

1,500.00 ea ________________

Routine Sterile Processing Service water testing refer to AAMI

ST108

Contract Period: Base POP Begin: 10-07-2026 POP End: 10-06-2027 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

0001AF

1,000.00 ea ________________

Non-routine SPS water testing outside of requirements typically for retesting or upon order Contract Period: Base POP Begin: 10-07-2026 POP End: 10-06-2027 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

0001AG

Additional Water testing to adhere to VHA Directives 1061, 1116 and ST108 or as ordered based on site needs Contract Period: Base POP Begin: 10-07-2026 POP End: 10-06-2027 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

On site water testing, sample collection, analysis, results management for government-owned buildings in which patients, residents or visitors stay overnight - Chillicothe, Cincinnati, Cleveland, Columbus and Dayton. Contractor will adhere to Statement of Work and ensure samples are properly submitted for testing.

Contract Period: Option 1 POP Begin: 10-07-2027 POP End: 10-06-2028 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

1001AA

Non-Routine water testing, sample collection, analysis, including onsite physical and chemical testing, results management for government-owned buildings in which patients, residents or visitors stay overnight - Chillicothe, Cincinnati, Cleveland, Columbus and Dayton Contract Period: Option 1 POP Begin: 10-07-2027 POP End: 10-06-2028 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

1001AB

Routine cooling tower sample collection, analysis, and results management Contract Period: Option 1 POP Begin: 10-07-2027 POP End: 10-06-2028 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

1001AC

Non-routine HPC Testing (Cooling tower) performance outside of quarterly sampling, including onsite physical and chemical testing Contract Period: Option 1 POP Begin: 10-07-2027 POP End: 10-06-2028 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

1001AD

Routine Sterile Processing Service water testing refer to AAMI

ST108

Contract Period: Option 1 POP Begin: 10-07-2027 POP End: 10-06-2028 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

1001AE

Non-routine SPS water testing outside of requirements typically for retesting or upon order Contract Period: Option 1 POP Begin: 10-07-2027 POP End: 10-06-2028 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

1001AF

Additional Water testing to adhere to VHA Directives 1061, 1116 and ST108 or as ordered based on site needs Contract Period: Option 1 POP Begin: 10-07-2027 POP End: 10-06-2028 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

1001AG

Additional Water testing to adhere to VHA Directives 1061, 1116 and ST108 or as ordered based on site needs Contract Period: Option 1 POP Begin: 10-07-2027 POP End: 10-06-2028 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

On site water testing, sample collection, analysis, results management for government-owned buildings in which patients, residents or visitors stay overnight - Chillicothe, Cincinnati, Cleveland, Columbus and Dayton. Contractor will adhere to Statement of Work and ensure samples are properly submitted for testing.

Contract Period: Option 2 POP Begin: 10-07-2028 POP End: 10-06-2029 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

2001AA

Routine cooling tower sample collection, analysis, and results management Contract Period: Option 2 POP Begin: 10-07-2028 POP End: 10-06-2029 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

2001AB

Non-routine HPC Testing (Cooling tower) performance outside of quarterly sampling, including onsite physical and chemical testing Contract Period: Option 2 POP Begin: 10-07-2028 POP End: 10-06-2029 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

2001AC

Routine Sterile Processing Service water testing refer to AAMI

ST108

Contract Period: Option 2 POP Begin: 10-07-2028 POP End: 10-06-2029 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

2001AD

Non-routine SPS water testing outside of requirements typically for retesting or upon order Contract Period: Option 2 POP Begin: 10-07-2028 POP End: 10-06-2029

PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

2001AE

Additional Water testing to adhere to VHA Directives 1061, 1116 and ST108 or as ordered based on site needs Contract Period: Option 2 POP Begin: 10-07-2028 POP End: 10-06-2029 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

2001AF

Additional Water testing to adhere to VHA Directives 1061, 1116 and ST108 or as ordered based on site needs Contract Period: Option 2 POP Begin: 10-07-2028 POP End: 10-06-2029 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

2001AG

Additional Water testing to adhere to VHA Directives 1061, 1116 and ST108 or as ordered based on site needs Contract Period: Option 2 POP Begin: 10-07-2028 POP End: 10-06-2029 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

On site water testing, sample collection, analysis, results management for government-owned buildings in which patients, residents or visitors stay overnight - Chillicothe, Cincinnati, Cleveland, Columbus and Dayton. Contractor will adhere to Statement of Work and ensure samples are properly submitted for testing.

Contract Period: Option 3 POP Begin: 10-07-2029 POP End: 10-06-2030 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

3001AA

Routine cooling tower sample collection, analysis, and results management Contract Period: Option 3 POP Begin: 10-07-2029 POP End: 10-06-2030 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

3001AB

Non-routine HPC Testing (Cooling tower) performance outside of quarterly sampling, including onsite physical and chemical testing Contract Period: Option 3 POP Begin: 10-07-2029 POP End: 10-06-2030 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

3001AC

Routine Sterile Processing Service water testing refer to AAMI

ST108

Contract Period: Option 3 POP Begin: 10-07-2029 POP End: 10-06-2030 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

3001AD

Non-routine SPS water testing outside of requirements typically for retesting or upon order Contract Period: Option 3 POP Begin: 10-07-2029 POP End: 10-06-2030 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

3001AE

Additional Water testing to adhere to VHA Directives 1061, 1116 and ST108 or as ordered based on site needs

Contract Period: Option 3 POP Begin: 10-07-2029 POP End: 10-06-2030 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

3001AF

Additional Water testing to adhere to VHA Directives 1061, 1116 and ST108 or as ordered based on site needs Contract Period: Option 3 POP Begin: 10-07-2029 POP End: 10-06-2030 PRINCIPAL NAICS CODE: 561210 - Facilities Support Services

3001AG

Additional Water testing to adhere to VHA…