36C25218B0213-001.docx

SOLICITATION 36C25218B0213

SOLICITATION 36C25218B0213

1. SOLICITATION NUMBER

2. TYPE OF SOLICITATION

3. DATE ISSUED

PAGE OF PAGES

4. CONTRACT NUMBER

5. REQUISITION/PURCHASE REQUEST NUMBER

6. PROJECT NUMBER

7. ISSUED BY

CODE

8. ADDRESS OFFER TO

a. NAME

b. TELEPHONE NUMBER (Include area code) (NO COLLECT CALLS)

10. THE GOVERNMENT REQUIRES PERFORMANCE OF THE WORK DESCRIBED IN THESE DOCUMENTS (Title, identifying number, date) 12a. THE CONTRACTOR MUST FURNISH ANY REQUIRED PERFORMANCE AND PAYMENT BONDS?

(If "YES," indicate within how many calendar days after award in Item 12B.)

12b. CALENDAR DAYS

13. ADDITIONAL SOLICITATION REQUIREMENTS:

STANDARD FORM 1442 (REV. 8/2014)

STANDARD FORM 1442

Prescribed by GSA-FAR (48 CFR) 52.236-1(d)

SOLICITATION, OFFER,

AND AWARD

(Construction, Alteration, or Repair)

SOLICITATION

SOLICITATION

IMPORTANT - The "offer" section on the reverse must be fully completed by offeror.

9. FOR INFORMATION

CALL:

NOTE: In sealed bid solicitations "offer" and "offeror" mean "bid" and "bidder".

SEALED BID (IFB)

NEGOTIATED (RFP)

11. The Contractor shall begin performance within ____________ calendar days and complete it within calendar days after receiving award, notice to proceed. This performance period is mandatory negotiable. (See _____________________________).

YES

NO

a.

Sealed offers in original and ___________________copies to perform the work required are due at the place specified in Item 8 by _____________ (hour) local time _____________________ (date). If this is a sealed bid solicitation, offers must be publicly opened at that time. Sealed envelopes containing offers shall be marked to show the offeror's name and address, the solicitation number, the date and time offers are due.

b.

An offer guarantee is, is not required.

c.

All offers are subject to the (1) work requirements, and (2) other provisions and clauses incorporated in the solicitation in full text or by reference.

d.

Offers providing less than _______________________ calendar days for Government acceptance after the date offers are due will not be considered and will be rejected.

36C25218B0213 X 1-12-2018 695-17-4-6985-0056 695-18-121 0069D Great Lakes Acquisition Center (GLAC) Department of Veterans Affairs

GLAC (69D)

115 South 84th Street, Suite 101 Milwaukee WI 53214-1476 WI 53214-1476 Great Lakes Acquisition Center (GLAC) Department of Veterans Affairs

GLAC (69D)

115 South 84th Street, Suite 101 Milwaukee WI 53214-1476 WI 53214-1476 Travis Sharp Travis.sharp@va.gov

Contractor shall provide for and furnish all labor, materials, equipment, qualified supervision, and other items designated in this contract in accordance with the scope of work, specifications and drawings to complete Project 695- 18-121, “Upgrade Nurse Call ICU & Head End Equipment,” at the Clement J. Zablocki VA Medical Center, Milwaukee WI.

This procurement is a 100% set-aside for CVE-Verified Service-Disabled Veteran-Owned Small Business Firms (SDVOSB) per authority 38 U.S.C. 8127 (Public Law 109-461).

NAICS 238210 (Electrical Contractors and Other Wiring Installation Contractors), Size Standard: $15.0 million

Project Magnitude: Between $250,000 and $500,000

For pre-bid/site visit information, see 52.236-27 SITE VISIT (CONSTRUCTION).

NOTICE: VA and/or a third party (support contractor) will require access to VA contractor records to assess contractor compliance with the limitations on subcontracting requirements included at VAAR 852.219-10. See LIMITATIONS ON

SUBCONTRACTING AND COMPLIANCE (JUNE 2011).

All bidders are responsible for monitoring and downloading any amendments from FedBizOpps at https://www.fbo.gov/

In accordance with VAAR 819.7003(b), at the time of submission of bid, the bidder must represent that it is a SDVOSB concern, a small business concern under the NAICS code assigned to the acquisition, and is CVE verified for eligibility the VIP database.

X X 52.211-10 X

10 DAYS

1:00 PM CT

02-12-2018 X

14. NAME AND ADDRESS OF OFFEROR

15. TELEPHONE NUMBER

16. REMITTANCE ADDRESS

CODE

FACILITY CODE

17. The offeror agrees to perform the work required at the prices specified below in strict accordance with the terms of the solicitation, if this offer is accepted by the Government in writing within __________ calendar days after the date offers are due.

AMOUNTS

18. The offeror agrees to furnish any required performance and payment bonds.

19. ACKNOWLEDGMENT OF AMENDMENTS

AMENDMENT

NUMBER

DATE.

20a. NAME AND TITLE OF PERSON AUTHORIZED TO SIGN OFFER 20b. SIGNATURE 20c. OFFER DATE

21. ITEMS ACCEPTED:

22. AMOUNT

23. ACCOUNTING AND APPROPRIATION DATA

24. SUBMIT INVOICES TO ADDRESS SHOWN IN

ITEM

25. OTHER THAN FULL AND OPEN COMPETITION PURSUANT TO

10 U.S.C. 2304(c)( 41 U.S.C. 3304(a) (

26. ADMINISTERED BY

27. PAYMENT WILL BE MADE BY

PHONE:

FAX:

28. NEGOTIATED AGREEMENT

29. AWARD

Your Contractor agrees offer on this solicitation is hereby accepted as to the items listed. This to furnish and deliver all items or perform all work requirements identified award consummates the contract, which consists of (a) the Government on this form and any continuation sheets for the consideration stated in solicitation and your offer, and (b) this contract award. No further cont-this contract. The rights and obligations of the parties to this contract ractual document is necessary.

shall be governed by (a) this contract award, (b) the solicitation, and (c) the clauses, representations, certifications, and specifications incorporated by reference in or attached to this contract.

30a. NAME AND TITLE OF CONTRACTOR OR PERSON AUTHORIZED 31a. NAME OF CONTRACTING OFFICER

TO SIGN

30b. SIGNATURE 30c. DATE 31b. UNITED STATES OF AMERICA 31c. AWARD DATE

BY

OFFER

AWARD

STANDARD FORM 1442 (REV. 8/2014) BACK

(Include ZIP Code) (Include area code) (Include only if different than Item 14.)

(Insert any number equal to or greater than the minimum requirement stated in Item 13d. Failure to insert any number means the offeror accepts the minimum in Item 13d.)

(The offeror acknowledges receipt of amendments to the solicitation -- give number and date of each) (Type or print) (4 copies unless otherwise specified) (Type or print) (Type or print) (Contractor is required to sign this document and return _______ copies to issuing office.)

(Contractor is not required to sign this document.)

(Must be fully completed by offeror) (To be completed by Government)

CONTRACTING OFFICER WILL COMPLETE ITEM 28 OR 29 AS APPLICABLE

SEE BID SCHEDULE

695-3670162-6985-854200-3220 23NRNR000

0069D Great Lakes Acquisition Center (GLAC) Department of Veterans Affairs 115 South 84th Street, Suite 101 Milwaukee WI 53214-1476 Department of Veterans Affairs Financial Services Center PO Box 149971 Austin TX 78714-9971 Great Lakes Acquisition Center (GLAC) Department of Veterans Affairs

GLAC (69D)

115 South 84th Street, Suite 101 Milwaukee 53214-1476

BID SCHEDULE

VA Project Number: 695-18-121 Title of Project: Upgrade Nurse Call ICU & Head End Equipment

VAAR 836.204 Disclosure of the magnitude of construction projects.

Magnitude of VA project; price range: between $250,000 and $500,000

Base Bid Contractor shall provide for and furnish all labor, materials, equipment, qualified supervision, and other items designated in this contract in accordance with the scope of work, specifications and drawings to complete Project 695-18-121, “Upgrade Nurse Call ICU & Head End Equipment,” at the Clement J. Zablocki VA Medical Center, Milwaukee WI.

Work includes, but is not limited to, infection control, temporary system installations, demolition (existing Nurse Call/Code Blue appurtenances and low voltage raceways and boxes), low voltage electrical raceway and box construction, interior finishes, and sole source installation of specialty medical equipment (Jeron 790 appurtenances) in Milwaukee VA Medical Center’s ICU Department and throughout multiple wards for Head End work.

All work shall be completed within 250 calendar days after receiving the Notice to Proceed. See Scope of Work for Phases and Phase durations.

Base Bid LUMP SUM: $________________

NOTICE TO BIDDERS: Award will be made to the responsible bidder who submitted the lowest responsive bid.

A single award will be made on Base Bid.

NOTICE TO BIDDERS: The contractor will be working in occupied buildings and in an active hospital. The ICU ward will not be vacated during construction. The contractor should expect to work off-hours and then in one room at a time (maximum). The same applies for the Head End work throughout the other Wards/Floors. Normal working hours are from 7:00 AM until 4:30 PM (local time) per specification section 01 01 10 (SN) – Special Notes. Off-hours and weekend outages may be required, and the contractor shall coordinate with the COR for these approvals. The contractor will share elevators and corridors with patients, visitors, staff, vendors and other contractors during the normal work day.

NOTICE TO BIDDERS: Submittals regarding staging of equipment, storage of supplies, etc. are required. Off-hours and/or week-end deliveries of construction equipment or materials may be required.

NOTICE TO BIDDERS: An approved cost-loaded, Critical Path Method (CPM) construction schedule is required prior to commencement of construction. See specifications for details. CPM schedule shall be approved by the Contracting Officer or the Contracting Officer’s Representative. See specifications for details.

NOTICE TO BIDDERS: Additional information regarding the general and specific scope of work is defined in the specifications and drawings. This BID SCHEDULE is in addition to and augments the specifications and drawings. ONLY ONE AWARD WILL BE MADE AS A RESULT OF THIS SOLICITATION.

Contracting Officer’s Special Instructions as follows:

Written requests for information or clarifications to solicitation documents shall be submitted to the Contract Specialist at travis.sharp@va.gov no later than January 25, 2018. No questions will be accepted after this deadline. Telephone inquiries will not be accepted.

After compiling all required information, submit the information in accordance with Block 13 of the SF 1442 (page 1 of this solicitation). Return the original and specified number of copies to the issuing office listed in Block 8 of the SF 1442 (page 1 of this solicitation).

INQUIRIES:

Inquiries and all correspondence concerning this solicitation document should be submitted in writing to the Contract Specialist. YOU ARE INSTRUCTED SPECIFICALLY TO CONTACT ONLY THE CONTRACT SPECIALIST ISSUING THE SOLICITATION ABOUT ANY ASPECT OF THIS REQUIREMENT PRIOR TO CONTRACT AWARD.

CONTRACTOR'S SIGNATURE:

In accordance with Federal Acquisition Regulations Part 4, contractual documents (e.g. bids, proposals, awards, modifications, etc.) shall be completed and signed by the Contractor as follows:

(a) Individuals. Signed by the individual.

(b) Individual doing business as a firm. Signed by that individual, and the signature shall be followed by the individual's typed, stamped, or printed name and the words, "an individual doing business as __________________ (insert name of firm)".

(c) Partnership. Signed in the partnership name. Prior to award, provide list of all partners and designate which partners have authority to bind the partnership.

(d) Corporations. Signed in the corporate name followed by the word "by" and the signature, and title of the person authorized to sign. Prior to award, provide list of individuals who have authority to bind the corporation.

(e) Joint Ventures. Signed by each participant in the joint venture in the manner prescribed in (a) through (d) above.

(f) Agents. When an agent is to sign the contract, other than as stated in paragraph (a) through (e) above, the agent's authorization to bind the principal must be established by evidence satisfactory to the contracting officer.

CONTRACTOR INFORMATION:

TAX ID Number:

DUNS Number:

Past Performance Point of Contact (within your company), include name and email address:

SECTION 1

INFORMATION REGARDING BIDDING MATERIAL, BID GUARANTEE AND BONDS

(a) This solicitation and all associated bid documents are available to interested parties in electronic file format from www.fedbizops.gov. No hard copy documents will be provided by the government.

(b) A bid guarantee is required in an amount not less than 20 percent of the bid price but shall not exceed $3,000,000. Failure to furnish the required bid guarantee on form SF 24, in the proper form and amount, by the time set for opening of bids, will result in rejection of the bid in all cases except those listed in FAR 28.101-4, and may be cause for rejection even then.

(c) The bidder to whom a contract is awarded will be required to furnish a Payment Bond, on form SF 25A, and a Performance Bond, on form SF 25. Each bond shall be issued for a penal sum equal to the value of the awarded contract. Copies of forms SF 25 and 25A may be obtained from the Contracting Officer upon request.

36C25218B0213

Page 1 of

Page 1 of

Contractor Safety or Environmental Violation & Experience Modification Rating Information

1.) All Bidders/Offerors shall submit information pertaining to their past Safety and Environmental record. The information must contain a certification that the bidder/offeror has no more than three (3) serious, or one (1) repeat or one (1) willful OSHA or any EPA violation(s) in the past three years. If such certification cannot be made, a Bidder/Offeror shall explain why and submit as much information as possible regarding the circumstances of its past safety and environmental record, including the number of EPA violations and/or the number of serious, repeat, and/or willful OSHA violations, along with a detailed description of those violations.

2.) All Bidders/Offerors shall submit information regarding their current Experience Modification Rate (EMR). This information shall be obtained from the Bidder’s/Offeror’s insurance carrier and be furnished on the insurance carrier’s letterhead. If a Bidder/Offeror’s EMR is above 1.0, Bidder/Offeror must submit a written explanation of the EMR from its insurance carrier furnished on the insurance carrier’s letterhead, describing the reasons for the elevated EMR and the anticipated date the EMR may be reduced to 1.0 or below.

3.) Self-insured contractors or other contractors that cannot provide their EMR rating on insurance letterhead must obtain a rating from the National Council on Compensation Insurance, Inc. (NCCI) by completing/submitting form ERM-6 and providing the rating on letterhead from NCCI. Note: Self insured contractors or other contractors that cannot provide EMR rating on insurance letterhead from the states or territories of CA, DE, MI, NJ, ND, OH, PA, WA, WY, and PR shall obtain their EMR rating from their state run worker’s compensation insurance rating bureau.

4.) If the NCCI cannot issue an EMR because the Bidder/Offeror lacks insurance history, Bidder/Offeror shall submit a letter indicating so from its insurance carrier furnished on the insurance carrier’s letterhead, and include a letter from the NCCI indicating that is has assigned Bidder/Offeror a Unity Rating of 1.0.

5.) The above information, along with other information obtained from Government systems, such as the OSHA and EPA online inspection history databases, will be used to make an initial Determination of Responsibility.

6.) This requirement is applicable to all subcontracting tiers, and prospective prime contractors are responsible for determining the responsibility of their prospective subcontractors.

Pre-Award Contractor Safety and Environmental Record Evaluation Form

Company Name: ______________________________________________ Address: _____________________________________________________ Telephone: ______________________ Fax: ________________________ Email: _______________________________________________________ Contact: ______________________________________________________

1. Utilizing your OSHA 300 Forms, please complete the following information:

Number of man hours (jobsite and office).

Number of cases involving days away from work, restricted activity, or both (Column H and I of OSHA 300).

Days away, restricted, or transferred rate (# of days away, restricted, or transferred cases x 200,000/# of man hours) (DART Rate).

Number of serious, willful, or repeat violations from OSHA within the last 3 years. Please attach explanation for any violations.

Please attach copies of the following documents: OSHA 300 and 300a Forms. These forms can be accessed through the OSHA publications search page:

http://www.osha.gov/pls/publications/publication.html.

2. Provide six-digit North American Industrial Classification System (NAICS) Code for this acquisition: __________________________________

3. Who administers your company’s Safety and Health Program? ____________________________

4. Company’s Insurance Experience Modification Rate (EMR): ____________________________

SECTION 2

INSTRUCTIONS, CONDITIONS AND OTHER STATEMENTS TO BIDDERS/OFFERORS

VA Information Security Contractor will need to take Privacy/HIPAA and Information Security Training and sign the Rules of Behavior. See FAR 52.224-3. After award, contact the Contracting Officer’s Representative (COR) for details.

Appropriate background investigation level is: NACI. After award, the contractor shall contact the Contracting Officer’s Representative (COR) for details. The FY17 Product Price (effective 10/1/16 to 9/30/17) for a NACI is $381 per contractor employee. Potential bidders shall include the costs of NACIs in their bids.

VA HANDBOOK 6500.6, APPENDIX B

VA ACQUISITION REGULATION SOLICITATION PROVISION AND CONTRACT CLAUSE

NOTE: This clause will undergo official rule making by the Office of Acquisitions and Logistics.

The below language will be submitted for public review through the Federal Register. The final wording of the clause may be changed from what is outlined below based on public review and comment. Once approved, the final language in the clause can be obtained from the Office of Acquisitions and Logistics Programs and Policy.

1. SUBPART 839.2 – INFORMATION AND INFORMATION TECHNOLOGY SECURITY REQUIREMENTS

839.201 Contract clause for Information and Information Technology Security:

a. Due to the threat of data breach, compromise or loss of information that resides on either VA-owned or contractor-owned systems, and to comply with Federal laws and regulations, VA has developed an Information and Information Technology Security clause to be used when VA sensitive information is accessed, used, stored, generated, transmitted, or exchanged by and between VA and a contractor, subcontractor or a third party in any format (e.g., paper, microfiche, electronic or magnetic portable media).

b. In solicitations and contracts where VA Sensitive Information or Information Technology will be accessed or utilized, the CO shall insert the clause found at 852.273-75, Security Requirements for Unclassified Information Technology Resources.

2. 852.273-75 - SECURITY REQUIREMENTS FOR UNCLASSIFIED INFORMATION TECHNOLOGY RESOURCES (INTERIM- OCTOBER 2008)

As prescribed in 839.201, insert the following clause:

The contractor, their personnel, and their subcontractors shall be subject to the Federal laws, regulations, standards, and VA Directives and Handbooks regarding information and information system security as delineated in this contract.

(END OF CLAUSE)

1. GENERAL

Contractors, contractor personnel, subcontractors, and subcontractor personnel shall be subject to the same Federal laws, regulations, standards, and VA Directives and Handbooks as VA and VA personnel regarding information and information system security.

2. ACCESS TO VA INFORMATION AND VA INFORMATION SYSTEMS

a. A contractor/subcontractor shall request logical (technical) or physical access to VA information and VA information systems for their employees, subcontractors, and affiliates only to the extent necessary to perform the services specified in the contract, agreement, or task order.

b. All contractors, subcontractors, and third-party servicers and associates working with VA information are subject to the same investigative requirements as those of VA appointees or employees who have access to the same types of information. The level and process of background security investigations for contractors must be in accordance with VA Directive and Handbook 0710, Personnel Suitability and Security Program. The Office for Operations, Security, and Preparedness is responsible for these policies and procedures.

d. Custom software development and outsourced operations must be located in the U.S. to the maximum extent practical. If such services are proposed to be performed abroad and are not disallowed by other VA policy or mandates, the contractor/subcontractor must state where all non-U.S. services are provided and detail a security plan, deemed to be acceptable by VA, specifically to address mitigation of the resulting problems of communication, control, data protection, and so forth. Location within the U.S. may be an evaluation factor.

e. The contractor or subcontractor must notify the Contracting Officer immediately when an employee working on a VA system or with access to VA information is reassigned or leaves the contractor or subcontractor’s employ. The Contracting Officer must also be notified immediately by the contractor or subcontractor prior to an unfriendly termination.

3. VA INFORMATION CUSTODIAL LANGUAGE

a. Information made available to the contractor or subcontractor by VA for the performance or administration of this contract or information developed by the contractor/subcontractor in performance or administration of the contract shall be used only for those purposes and shall not be used in any other way without the prior written agreement of the VA. This clause expressly limits the contractor/subcontractor's rights to use data as described in Rights in Data - General, FAR 52.227-14(d) (1).

b. VA information should not be co-mingled, if possible, with any other data on the contractor/ subcontractor’s information systems or media storage systems in order to ensure VA requirements related to data protection and media sanitization can be met. If co-mingling must be allowed to meet the requirements of the business need, the contractor must ensure that VA’s information is returned to the VA or destroyed in accordance with VA’s sanitization requirements. VA reserves the right to conduct on site inspections of contractor and subcontractor IT resources to ensure data security controls, separation of data and job duties, and destruction/media sanitization procedures are in compliance with VA directive requirements.

c. Prior to termination or completion of this contract, contractor/subcontractor must not destroy information received from VA, or gathered/created by the contractor in the course of performing this contract without prior written approval by the VA. Any data destruction done on behalf of VA by a contractor/subcontractor must be done in accordance with National Archives and Records Administration (NARA) requirements as outlined in VA Directive 6300, Records and Information Management and its Handbook 6300.1 Records Management Procedures, applicable VA Records Control Schedules, and VA Handbook 6500.1, Electronic Media Sanitization. Self-certification by the contractor that the data destruction requirements above have been met must be sent to the VA Contracting Officer within 30 days of termination of the contract.

d. The contractor/subcontractor must receive, gather, store, back up, maintain, use, disclose and dispose of VA information only in compliance with the terms of the contract and applicable Federal and VA information confidentiality and security laws, regulations and policies. If Federal or VA information confidentiality and security laws, regulations and policies become applicable to the VA information or information systems after execution of the contract, or if NIST issues or updates applicable FIPS or Special Publications (SP) after execution of this contract, the parties agree to negotiate in good faith to implement the information confidentiality and security laws, regulations and policies in this contract.

e. The contractor/subcontractor shall not make copies of VA information except as authorized and necessary to perform the terms of the agreement or to preserve electronic information stored on contractor/subcontractor electronic storage media for restoration in case any electronic equipment or data used by the contractor/subcontractor needs to be restored to an operating state. If copies are made for restoration purposes, after the restoration is complete, the copies must be appropriately destroyed.

f. If VA determines that the contractor has violated any of the information confidentiality, privacy, and security provisions of the contract, it shall be sufficient grounds for VA to withhold payment to the contractor or third party or terminate the contract for default or terminate for cause under Federal Acquisition Regulation (FAR) part 12.

h. The contractor/subcontractor must store, transport, or transmit VA sensitive information in an encrypted form, using VA-approved encryption tools that are, at a minimum, FIPS 140-2 validated.

i. The contractor/subcontractor’s firewall and Web services security controls, if applicable, shall meet or exceed VA’s minimum requirements. VA Configuration Guidelines are available upon request.

j. Except for uses and disclosures of VA information authorized by this contract for performance of the contract, the contractor/subcontractor may use and disclose VA information only in two other situations: (i) in response to a qualifying order of a court of competent jurisdiction, or (ii) with VA’s prior written approval. The contractor/subcontractor must refer all requests for, demands for production of, or inquiries about, VA information and information systems to the VA contracting officer for response.

l. For service that involves the storage, generating, transmitting, or exchanging of VA sensitive information but does not require C&A or an MOU-ISA for system interconnection, the contractor/subcontractor must complete a Contractor Security Control Assessment (CSCA) on a yearly basis and provide it to the COTR.

5. INFORMATION SYSTEM HOSTING, OPERATION, MAINTENANCE, OR USE

a. For information systems that are hosted, operated, maintained, or used on behalf of VA at non-VA facilities, contractors/subcontractors are fully responsible and accountable for ensuring compliance with all HIPAA, Privacy Act, FISMA, NIST, FIPS, and VA security and privacy directives and handbooks. This includes conducting compliant risk assessments, routine vulnerablity scanning, system patching and change management procedures, and the completion of an acceptable contingency plan for each system. The contractor’s security control procedures must be equivalent, to those procedures used to secure VA systems. A Privacy Impact Assessment (PIA) must also be provided to the COTR and approved by VA Privacy Service prior to operational approval. All external Internet connections to VA’s network involving VA information must be reviewed and approved by VA prior to implementation.

g. All electronic storage media used on non-VA leased or non-VA owned IT equipment that is used to store, process, or access VA information must be handled in adherence with VA Handbook 6500.1, Electronic Media Sanitization upon: (i) completion or termination of the contract or (ii) disposal or return of the IT equipment by the contractor/subcontractor or any person acting on behalf of the contractor/subcontractor, whichever is earlier. Media (hard drives, optical disks, CDs, back-up tapes, etc.) used by the contractors/subcontractors that contain VA information must be returned to the VA for sanitization or destruction or the contractor/subcontractor must self-certify that the media has been disposed of per 6500.1 requirements. This must be completed within 30 days of termination of the contract.

h. Bio-Medical devices and other equipment or systems containing media (hard drives, optical disks, etc.) with VA sensitive information must not be returned to the vendor at the end of lease, for trade-in, or other purposes. The options are:

(1) Vendor must accept the system without the drive;

(2) VA’s initial medical device purchase includes a spare drive which must be installed in place of the original drive at time of turn-in; or

(3) VA must reimburse the company for media at a reasonable open market replacement cost at time of purchase.

(4) Due to the highly specialized and sometimes proprietary hardware and software associated with medical equipment/systems, if it is not possible for the VA to retain the hard drive, then;

(a) The equipment vendor must have an existing BAA if the device being traded in has sensitive information stored on it and hard drive(s) from the system are being returned physically intact; and

(b) Any fixed hard drive on the device must be non-destructively sanitized to the greatest extent possible without negatively impacting system operation. Selective clearing down to patient data folder level is recommended using VA approved and validated overwriting technologies/methods/tools. Applicable media sanitization specifications need to be preapproved and described in the purchase order or contract.

(c) A statement needs to be signed by the Director (System Owner) that states that the drive could not be removed and that (a) and (b) controls above are in place and completed.

The ISO needs to maintain the documentation.

6. SECURITY INCIDENT INVESTIGATION

a. The term “security incident” means an event that has, or could have, resulted in unauthorized access to, loss or damage to VA assets, or sensitive information, or an action that breaches VA security procedures. The contractor/subcontractor shall immediately notify the COTR and simultaneously, the designated ISO and Privacy Officer for the contract of any known or suspected security/privacy incidents, or any unauthorized disclosure of sensitive information, including that contained in system(s) to which the contractor/subcontractor has access.

b. To the extent known by the contractor/subcontractor, the contractor/subcontractor’s notice to VA shall identify the information involved, the circumstances surrounding the incident (including to whom, how, when, and where the VA information or assets were placed at risk or compromised), and any other information that the contractor/subcontractor considers relevant.

c. With respect to unsecured protected health information, the business associate is deemed to have discovered a data breach when the business associate knew or should have known of a breach of such information. Upon discovery, the business associate must notify the covered entity of the breach. Notifications need to be made in accordance with the executed business associate agreement.

d. In instances of theft or break-in or other criminal activity, the contractor/subcontractor must concurrently report the incident to the appropriate law enforcement entity (or entities) of jurisdiction, including the VA OIG and Security and Law Enforcement. The contractor, its employees, and its subcontractors and their employees shall cooperate with VA and any law enforcement authority responsible for the investigation and prosecution of any possible criminal law violation(s) associated with any incident. The contractor/subcontractor shall cooperate with VA in any civil litigation to recover VA information, obtain monetary or other compensation from a third party for damages arising from any incident, or obtain injunctive relief against any third party arising from, or related to, the incident.

7. LIQUIDATED DAMAGES FOR DATA BREACH

a. Consistent with the requirements of 38 U.S.C. §5725, a contract may require access to sensitive personal information. If so, the contractor is liable to VA for liquidated damages in the event of a data breach or privacy incident involving any SPI the contractor/subcontractor processes or maintains under this contract.

b. The contractor/subcontractor shall provide notice to VA of a “security incident” as set forth in the Security Incident Investigation section above. Upon such notification, VA must secure from a non-Department entity or the VA Office of Inspector General an independent risk analysis of the data breach to determine the level of risk associated with the data breach for the potential misuse of any sensitive personal information involved in the data breach. The term 'data breach' means the loss, theft, or other unauthorized access, or any access other than that incidental to the scope of employment, to data containing sensitive personal information, in electronic or printed form, that results in the potential compromise of the confidentiality or integrity of the data. Contractor shall fully cooperate with the entity performing the risk analysis. Failure to cooperate may be deemed a material breach and grounds for contract termination.

c. Each risk analysis shall address all relevant information concerning the data breach, including the following:

(1) Nature of the event (loss, theft, unauthorized access);

(2) Description of the event, including:

(a) date of occurrence;

(b) data elements involved, including any PII, such as full name, social security number, date of birth, home address, account number, disability code; (3) Number of individuals affected or potentially affected;

(4) Names of individuals or groups affected or potentially affected;

(5) Ease of logical data access to the lost, stolen or improperly accessed data in light of the degree of protection for the data, e.g., unencrypted, plain text;

(6) Amount of time the data has been out of VA control;

(7) The likelihood that the sensitive personal information will or has been compromised (made accessible to and usable by unauthorized persons);

(8) Known misuses of data containing sensitive personal information, if any;

(9) Assessment of the potential harm to the affected individuals;

(10) Data breach analysis as outlined in 6500.2 Handbook, Management of Security and Privacy Incidents, as appropriate; and

(11) Whether credit protection services may assist record subjects in avoiding or mitigating the results of identity theft based on the sensitive personal information that may have been compromised.

d. Based on the determinations of the independent risk analysis, the contractor shall be responsible for paying to the VA liquidated damages in the amount of $37.50 per affected individual to cover the cost of providing credit protection services to affected individuals consisting of the following:

(1) Notification;

(2) One year of credit monitoring services consisting of automatic daily monitoring of at least 3 relevant credit bureau reports;

(3) Data breach analysis;

(4) Fraud resolution services, including writing dispute letters, initiating fraud alerts and credit freezes, to assist affected individuals to bring matters to resolution;

(5) One year of identity theft insurance with $20,000.00 coverage at $0 deductible; and

(6) Necessary legal expenses the subjects may incur to repair falsified or damaged credit records, histories, or financial affairs.

8. SECURITY CONTROLS COMPLIANCE TESTING

On a periodic basis, VA, including the Office of Inspector General, reserves the right to evaluate any or all of the security controls and privacy practices implemented by the contractor under the clauses contained within the contract. With 10 working-day’s notice, at the request of the government, the contractor must fully cooperate and assist in a government-sponsored security controls assessment at each location wherein VA information is processed or stored, or information systems are developed, operated, maintained, or used on behalf of VA, including those initiated by the Office of Inspector General. The government may conduct a security control assessment on shorter notice (to include unannounced assessments) as determined by VA in the event of a security incident or at any other time.

9. TRAINING

a. All contractor employees and subcontractor employees requiring access to VA information and VA information systems shall complete the following before being granted access to VA information and its systems:

(1) Sign and acknowledge (either manually or electronically) understanding of and responsibilities for compliance with the Contractor Rules of Behavior, Appendix E relating to access to VA information and information systems;

(2) Successfully complete the VA Cyber Security Awareness and Rules of Behavior training and annually complete required security training;

(3) Successfully complete the appropriate VA privacy training and annually complete required privacy training; and

(4) Successfully complete any additional cyber security or privacy training, as required for VA personnel with equivalent information system access [to be defined by the VA program official and provided to the contracting officer for inclusion in the solicitation document – e.g., any role-based information security training required in accordance with NIST Special Publication 800-16, Information Technology Security Training Requirements.]

b. The contractor shall provide to the contracting officer and/or the COTR a copy of the training certificates and certification of signing the Contractor Rules of Behavior for each applicable employee within 1 week of the initiation of the contract and annually thereafter, as required.

c. Failure to complete the mandatory annual training and sign the Rules of Behavior annually, within the timeframe required, is grounds for suspension or termination of all physical or electronic access privileges and removal from work on the contract until such time as the training and documents are complete.

2.1 52.216-1 TYPE OF CONTRACT (APR 1984)

The Government contemplates award of a Firm-Fixed-Price contract resulting from this solicitation.

(End of Provision)

2.2 52.222-5 CONSTRUCTION WAGE RATE REQUIREMENTS—SECONDARY SITE OF THE WORK (MAY 2014) (a)(1) The offeror shall notify the Government if the offeror intends to perform work at any secondary site of the work, as defined in paragraph (a)(1)(ii) of the FAR clause at 52.222-6, Construction Wage Rate Requirements, of this solicitation.

(2) If the offeror is unsure if a planned work site satisfies the criteria for a secondary site of the work, the offeror shall request a determination from the Contracting Officer.

(b)(1) If the wage determination provided by the Government for work at the primary site of the work is not applicable to the secondary site of the work, the offeror shall request a wage determination from the Contracting Officer.

(2) The due date for receipt of offers will not be extended as a result of an offeror's request for a wage determination for a secondary site of the work.

(End of Provision)

2.3 52.222-23 NOTICE OF REQUIREMENT FOR AFFIRMATIVE ACTION TO ENSURE EQUAL EMPLOYMENT OPPORTUNITY FOR CONSTRUCTION (FEB 1999)

(a) The offeror's attention is called to the Equal Opportunity clause and the Affirmative Action Compliance Requirements for Construction clause of this solicitation.

(b) The goals for minority and female participation, expressed in percentage terms for the Contractor's aggregate workforce in each trade on all construction work in the covered area, are as follows:

These goals are applicable to all the Contractor's construction work performed in the covered area. If the Contractor performs construction work in a geographical area located outside of the covered area, the Contractor shall apply the goals established for the geographical area where the work is actually performed. Goals are published periodically in the Federal Register in notice form, and these notices may be obtained from any Office of Federal Contract Compliance Programs office.

(c) The Contractor's compliance with Executive Order 11246, as amended, and the regulations in 41 CFR 60-4 shall be based on (1) its implementation of the Equal Opportunity clause, (2) specific affirmative action obligations required by the clause entitled "Affirmative Action Compliance Requirements for Construction," and (3) its efforts to meet the goals. The hours of minority and female employment and training must be substantially uniform throughout the length of the contract, and in each trade. The Contractor shall make a good faith effort to employ minorities and women evenly on each of its projects. The transfer of minority or female employees or trainees from Contractor to Contractor, or from project to project, for the sole purpose of meeting the Contractor's goals shall be a violation of the contract, Executive Order 11246, as amended, and the regulations in 41 CFR 60-4. Compliance with the goals will be measured against the total work hours performed.

(d) The Contractor shall provide written notification to the Deputy Assistant Secretary for Federal Contract Compliance, U.S. Department of Labor, within 10 working days following award of any construction subcontract in excess of $10,000 at any tier for construction work under the contract resulting from this solicitation. The notification shall list the—

(1) Name, address, and telephone number of the subcontractor;

(2) Employer's identification number of the subcontractor;

(3) Estimated dollar amount of the subcontract;

(4) Estimated starting and completion dates of the subcontract; and

(5) Geographical area in which the subcontract is to be performed.

(e) As used in this Notice, and in any contract resulting from this solicitation, the "covered area" is

STATE OF WISCONSIN, MILWAUKEE COUNTY, CITY OF MILWAUKEE

(End of Provision)

2.4 52.225-10 NOTICE OF BUY AMERICAN REQUIREMENT—CONSTRUCTION MATERIALS (MAY 2014)

(a) Definitions. "Commercially available off-the-shelf (COTS) item," "construction material," "domestic construction material," and "foreign construction material," as used in this provision, are defined in the clause of this solicitation entitled "Buy American—Construction Materials" (Federal Acquisition Regulation (FAR) clause 52.225-9).

(b) Requests for determinations of inapplicability. An offeror requesting a determination regarding the inapplicability of the Buy American statute should submit the request to the Contracting Officer in time to allow a determination before submission of offers. The offeror shall include the information and applicable supporting data required by paragraphs (c) and (d) of the clause at FAR 52.225-9 in the request. If an offeror has not requested a determination regarding the inapplicability of the Buy American statute before submitting its offer, or has not received a response to a previous request, the offeror shall include the information and supporting data in the offer.

(c) Evaluation of offers.

(1) The Government will evaluate an offer requesting exception to the requirements of the Buy American statute, based on claimed unreasonable cost of domestic construction material, by adding to the offered price the appropriate percentage of the cost of such foreign construction material, as specified in paragraph (b)(3)(i) of the clause at FAR 52.225-9.

(2) If evaluation results in a tie between an offeror that requested the substitution of foreign construction material based on unreasonable cost and an offeror that did not request an exception, the Contracting Officer will award to the offeror that did not request an exception based on unreasonable cost.

(d) Alternate offers.

(1) When an offer includes foreign solicitation in paragraph (b)(2) of the clause at FAR 52.225-9, the offeror also may submit an alternate offer based on use of equivalent domestic construction material.

(2) If an alternate offer is submitted, the offeror shall submit a separate Standard Form 1442 for the alternate offer, and a separate price comparison table prepared in accordance with paragraphs (c) and (d) of the clause at FAR 52.225-9 for the offer that is based on the use of any foreign construction material for which the Government has not yet determined an exception applies.

(3) If the Government determines that a particular exception requested in accordance with paragraph (c) of the clause at FAR 52.225-9 does not apply, the Government will evaluate only those offers based on use of the equivalent domestic construction material, and the offeror shall be required to furnish such domestic construction material. An offer based on use of the foreign construction material for which an exception was requested—

(i) Will be rejected as nonresponsive if this acquisition is conducted by sealed bidding; or

(ii) May be accepted if revised during negotiations.

(End of Provision)

2.5 52.228-1 BID GUARANTEE (SEP 1996)

(a) Failure to furnish a bid guarantee in the proper form and amount, by the time set for opening of bids, may be cause for rejection of the bid.

(b) The bidder shall furnish a bid guarantee in the form of a firm commitment, e.g., bid bond supported by good and sufficient surety or sureties acceptable to the Government, postal money order, certified check, cashier's check, irrevocable letter of credit, or, under Treasury Department regulations, certain bonds or notes of the United States. The Contracting Officer will return bid guarantees, other than bid bonds—

(1) To unsuccessful bidders as soon as practicable after the opening of bids; and

(2) To the successful bidder upon execution of contractual documents and bonds (including any necessary coinsurance or reinsurance agreements), as required by the bid as accepted.

(c) The amount of the bid guarantee shall be 20% percent of the bid price or $3,000,000.00, whichever is less.

(d) If the successful bidder, upon acceptance of its bid by the Government within the period specified for acceptance, fails to execute all contractual documents or furnish executed bond(s) within 10 days after receipt of the forms by the bidder, the Contracting Officer may terminate the contract for default.

(e) In the event the contract is terminated for default, the bidder is liable for any cost of acquiring the work that exceeds the amount of its bid, and the bid guarantee is available to offset the difference.

(End of Provision)

2.6 52.233-2 SERVICE OF PROTEST (SEP 2006)

Protests, as defined in section 33.101 of the Federal Acquisition Regulation, that are filed directly with an agency, and copies of any protests that are filed with the Government Accountability Office (GAO), shall be served on the Contracting Officer (addressed as follows) by obtaining written and dated acknowledgment of receipt from:

Travis Sharp, Contract Specialist Hand-Carried Address:

Department of Veterans Affairs

GLAC (69D)

115 South 84th Street, Suite 101 Milwaukee WI 53214-1476 Mailing Address:

Department of Veterans Affairs

GLAC (69D)

115 South 84th Street, Suite 101 Milwaukee WI 53214-1476

(b) The copy of any protest shall be received in the office designated above within one day of filing a protest with the GAO.

(End of Provision)

2.7 52.236-27 SITE VISIT (CONSTRUCTION) (FEB 1995) ALTERNATE I (FEB 1995)

(a) The clauses at 52.236-2, Differing Site Conditions, and 52.236-3, Site Investigations and Conditions Affecting the Work, will be included in any contract awarded as a result of this solicitation. Accordingly, offerors or quoters are urged and expected to inspect the site where the work will be performed.

(b) An organized site visit has been scheduled for— January 18, 2018 at 10:00 AM Central Time

(c) Participants will meet at— Clement J. Zablocki VAMC South Entrance (End of Provision)

2.8 52.252-1 SOLICITATION PROVISIONS INCORPORATED BY REFERENCE (FEB 1998)

This solicitation incorporates one or more solicitation provisions by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. The offeror is cautioned that the listed provisions may include blocks that must be completed by the offeror and submitted with its quotation or offer. In lieu of submitting the full text of those provisions, the offeror may identify the provision by paragraph identifier and provide the appropriate information with its quotation or offer. Also, the full text of a solicitation provision may be accessed electronically at this/these address(es):

http://www.acquisition.gov/far/index.html http://www.va.gov/oal/library/vaar/

(End of Provision)

2.9 VAAR 852.233-70 PROTEST CONTENT/ALTERNATIVE DISPUTE RESOLUTION (JAN 2008)

(a) Any protest filed by an interested party shall:

(1) Include the name, address, fax number, and telephone number of the protester;

(2) Identify the solicitation and/or contract number;

(3) Include an original signed by the protester or the protester's representative and at least one copy;

(4) Set forth a detailed statement of the legal and factual grounds of the protest, including a description of resulting prejudice to the protester, and provide copies of relevant documents;

(5) Specifically request a ruling of the individual upon whom the protest is served;

(6) State the form of relief requested; and

(7) Provide all information establishing the timeliness of the protest.

(b) Failure to comply with the above may result in dismissal of the protest without further consideration.

(c)…