36C25525Q0219.docx

VA Heartland Network- VISN 15

STATEMENT OF REQUIREMENTS

VISN 15 Chemiluminescence Analyzer

GENERAL INFORMATION

SET-ASIDE

Network Contracting Office (NCO) 15 3450 S 4th Street Trafficway

Leavenworth KS 66048

POINT OF CONTACT*

Contract Specialist Maria Riza Owen maria.owen2@va.gov

PLACE OF PERFORMANCE

COLUMBIA VAMC, 800 HOSPITAL DRIVE, COLUMBIA MO 652

KANSAS CITY VAMC, 4801 EAST LINWOOD BLVD,

KANSAS CITY, MO 64128

POSTAL CODE

COUNTRY

ADDITIONAL INFORMATION

AGENCY’S URL

URL DESCRIPTION

DESCRIPTION

THIS REQUEST FOR INFORMATION (RFI)/SOURCES SOUGHT

DISCLAIMER

This sources sought is issued solely for information and planning purposes only and does not constitute a solicitation. All information received in response to this sources sought that is marked as proprietary will be handled accordingly. Responses to this notice are not offers and cannot be accepted by the Government to form a binding contract. Responders are solely responsible for all expenses associated with responding to this RFI.

The submission of pricing, capabilities for planning purposes, and other market information is highly encouraged and allowed under this sources sought In Accordance With (IAW) FAR Part 15.201(e).

SOURCES SOUGHT DESCRIPTION

This is NOT a solicitation announcement. This is an RFI/sources sought only. The purpose of this sources sought/RFI is to gain knowledge of potential qualified sources and their size classification relative to NAICS 334516, Analytical Laboratory Instrument Manufacturing; Size Standard: 1,000 employees. Responses to this sources sought will be used by the Government to make appropriate acquisition decisions. After review of the responses to this sources sought, a solicitation announcement may be published. Responses to this sources sought synopsis are not considered adequate responses for a solicitation announcement.

The following VAAR policies and clauses will be applicable to this requirement if an SDVOSB/VOSB entity is interested and qualified in this requirement:

limitations on subcontracting requirements set forth in 15 U.S.C. § 657s and in VAAR 852.219-10 and 852.219-11.

852.219-77, VA Notice of Limitations on Subcontracting—Certificate of Compliance for Services and Construction

Contractor Staff, Roles, and Responsibilities Must be in compliance with all NRC, USP, state, local and TJC guidelines.

It is the responsibility of the interested source to demonstrate to the government that the interested parties can provide the supplies/services that fulfill the brand name.

If you are interested and are capable of providing the sought supplies/services, please provide the requested information as well as the information indicated below. Response to this notice should include company name, address, point of contact, size of business pursuant to the following questions:

Please indicate the size status and representations of your business, such as but not limited to: Service Disabled Veteran Owned Small Business (SDVOSB), Veteran Owned Small Business (VOSB), Hubzone, Woman Owned Small Business (WOSB), Large Business, etc.)?

Is your company considered small under the NAICS code identified under this RFI?

Are you the manufacturer, distributor, or an equivalent solution to the items being referenced above?

If you’re a small business and you are an authorized distributor/reseller for the items identified above or an equivalent solution, do you alter; assemble; modify; the items requested in any way? If you do, state how and what is altered; assembled; modified?

Does your company have an FSS contract with GSA, VA NAC, NASA SEWP, or any other federal contract, that can be utilized to procure the requirement listed above? If so, please provide the contract number.

Please submit your capabilities that show clear, compelling, and convincing evidence that you can meet the requirement described in the attached SOW.

Please provide your Contractor’s Unique Entity ID (SAM):

Responses to this notice shall be submitted via email to Maria Riza Owen at maria.owen2@va.gov. Telephone responses shall not be accepted. Responses must be received no later than Tuesday, Sept 17, 2025, at 1300 CST. If a solicitation is issued it shall be announced at a later date, and all interested parties must respond to that solicitation announcement separately from the responses to this sources sought. Responses to this sources sought notice are not a request to be added to a prospective bidders list or to receive a copy of the solicitation.

The Department of Veterans Affairs (VA), VISN 15 Network Contracting Office, is seeking sources that can provide the following:

See Statement of Requirement below

Sources Sought Notice Sources Sought Notice

Sources Sought Notice

SCOPE OF PROCUREMENT:

· VISN 15 is looking to initiate a Cost Per Test (CPT) for an FDA-approved Fully Automated Random-Access Analyzer for TB-Gold (Quantiferon) Laboratory Testing for Columbia and Kansas City VA Medical Centers.

· New equipment shall be acquired for each of the clinical laboratories located at the VISN facilities listed in Attachment A.

· Attachment A provides an estimated volume by test as reflected in for each individual medical center. Pricing is based on the AVERAGE daily test volume per instrument/analyzer for each facility. The volumes listed per facility in Attachment A, are estimates ONLY.

· This will be a base year (12 MO) plus four (4) years (12 Mo) optional years. The period of performance is 01/02/2026 - 12/31/2031.

· The instrumentation shall have the capability of performing and reporting the clinical parameters as defined in this statement of requirements. The instrument shall be able to simultaneously perform the complete profile as described below meet the performance characteristics for accuracy and precision as defined by the 1988 Clinical Laboratory Improvement Act (CLIA) and the Clinical and Laboratory Standards Institute (CLSI).

· The Contractor will be required to provide a continuously stocked inventory of;

· Reagents

· Standards

· Controls

· Supplies

· Disposables

· Any other materials required to properly perform tests on the equipment such that equipment operations are not interrupted.

· These items shall be of the highest quality, sensitivity, specificity and tested to assure precision and accuracy.

· Expiration date must be clearly marked on reagent, standards, and control containers.

· Any unexpected changes in methodology/technology shall be at the expense of the Contractor.

· Alert/Notification of any delays in shipment as well as any or all technical advisory/recalls/alerts, prior to or simultaneously with field alerts should be forwarded to the designated individuals determined at contract award.

· Special handling for emergency orders of supplies: In the event that the supplies are found to be defective and unsuitable for use with the Contractor’s equipment, or the Contractor has failed to comply with the requirements for routine supply delivery, the Contractor is required to deliver the supplies within 24 hours of receipt of a verbal order for emergency delivery. If either circumstance has occurred, the Contractor shall deliver to the Government site in the most expeditious manner possible the necessary consumables in sufficient quantity as required to allow operation of the Contractor’s equipment for one week (under normal Government test load volume). If additional requests for emergency supply delivery are required by the Government, they shall be honored by the Contractor until the arrival at the laboratory of the monthly standing order/routine supplies delivery.

DEFINITIONS

· Cost per Test (CPT)- as defined in the Federal Supply Schedule FSC Group 66, Part III, Cost-Per-Test Clinical Laboratory Analyzers – Contractors are required to provide a price for each test that can be performed on its equipment. The per test price shall include costs covering (1) 4 year equipment use, (2) all reagents, standards, quality controls, supplies, consumable/disposable items, parts, accessories and any other item required for the proper operation of the Contractor’s equipment and necessary for the generation and reporting of a test result, (3) all necessary maintenance to keep the equipment in good operating condition (This element includes both preventive maintenance and emergency repairs) and (4) training for Government personnel. Contractors are required to provide delivery, installation, and removal of equipment at no additional charge.

GENERAL REQUIREMENTS

· The contractor is required to maintain the equipment. All work shall be performed in accordance with the guidelines established by Federal, State, and local ordinances, FDA manufacturer’s guidelines, and with all terms, conditions, provisions, and specifications provide herein.

· The system must be FDA-approved chemiluminescent immunoassay (CLIA) analyzer for TB Testing and other assays listed in Attachment A.

· Vendor shall provide latest model/version of instrumentation. Refurbished or discontinued models are not acceptable.

Operational Features / Required Testing Protocols

· The instrument is based on an immunodiagnostic testing platform featuring samples-in and results-out capability necessary to operate the contractor’s equipment.

· The system must be fully automated, fully integrated, and random access, with walk-away and continuous feed capability offering high throughput and increased sensitivity for lower analytical concentration detection.

Technical Features- The instrumentation must be approved by the Food and Drug Administration (FDA) and shall have the following:

· The instrument systems must be capable of performing FDA-approved CLIA testing on a Fully automated for the tests listed in the Attachment A.

· To maximize incubator efficiency, test cuvettes must be individual, not linked together.

· The analyzers must detect if each primary patient sample has inadequate volume for required testing and automatic clot detection.

· The analyzers must sample directly from the primary patient tube.

· Must be an “open” system that will permit additional test panels as required.

· Must utilize disposable pipette tips, sample tips and cuvettes to avoid contamination.

· Must have an auto-pipettor.

· Must include reagent cooling.

· Must include bar code reader.

· Must be compatible with multiple specimen types.

· Must be compatible with multiple tube sizes.

· Must have ready to use reagents and calibrators.

· Must be random-access.

· Must be fully automated.

· The equipment must include automated processors and readers.

· All results, samples, calibrations, and quality controls must be traced by (RFID) Radio Frequency Identification instead of barcoding for on-board tracking of the number of tests and calibrations, lot number, and integral stability on the instrument.

· All the activities planned and scheduled must be continuously monitored by system including indication of run completion.

· The instrument software must inform user about instrument status (Stand-By; Ready; Running).

· The software must give user upfront estimation of the consumables needed to perform a run and during a run.

· The instrument must offer on-board User Manual with help feature icon that provides an Operator Guide.

· Only instruments, reagent cartridges, and supplies, which are FDA approved, will be considered.

· Data Management System:

· Must be able to interface with VistA via Data Innovations Instrument Manager

· Shall be capable of maintaining all data and if interfaced, retransmit data for up to 24 hours in the event of normal electrical power interruptions via battery backup.

· Shall have a built-in quality control program to regularly monitor performance of vital components.

· Shall possess capability to backup all data to a secondary external storage format (e.g. compact disk).

· Shall have sufficient memory to store patient information and test results for 10,000 records with downloading capability to an external medium for long term storage of patient records and other information.

Hardware Features – The instrumentation shall have the following:

· A total equipment footprint that when installed in the laboratory shall not impact the functionality/operations of that laboratory.

· An on-board monitor/screen that is easily readable.

· A printer that has the capability of printing a patient report with patient demographic information that includes minimally the patient’s name and accession number or unique identifier number (UID).

· An uninterruptible power supply with line conditioner for each instrument provided, including replacement of batteries.

Ancillary support equipment:

· The Contractor shall provide, install, and maintain through the life of the BPA , as indicated, all ancillary support equipment to fully operate or place the analyzer within a laboratory as defined in these specifications, e.g. cabinetry to support/house the analyzer, water systems (including consumable polishers, filters, etc.), and universal interface equipment, etc. In addition, the Contractor shall include all ancillary components that are customarily sold or provided with the model of equipment proposed, e.g. starter kits, tables/stands, line conditioners, UPS, and UPS batteries, etc.

Method Validation Requirements

· The Contractor shall assist each site in the performance all comparison and validation studies to include any materials and reagents needed for such correlation at no cost to the Government. The Contractor shall perform all statistical analysis, as applicable, and report data in an organized, clearly comprehensible format. This process shall be consistent with current CLSI Standards and related documents, The Joint Commission standards, CAP standards, and Federal Regulations.

Implementation/transition timeframe

· Need validation of equipment completed validated 90 days before final award.

· The implementation of the services/requirements described in this solicitation shall be completed no later than 120 days after award. This timeline is based on a reasonable attempt of the Contractor to complete all the necessary implementation requirements within the stated timeframe. Contractor shall not be penalized for implementation timelines that extend beyond the 120-day timeframe if the extension is through no fault of the Contractor and is a result of delays due to the Government.

· Upon award the transition period for the awarded BPA to have all equipment and peripherals installed and operational by January 2, 2026. During this same period all initial training of VA personnel in the operation and maintenance of said award shall also be completed.

· Contractor shall provide with its quotation an implementation plan for installation of new equipment. Contractor’s submitted plan shall project for the transition of all services under the awarded BPA including installation and training of personnel, transition of all testing materials, reagents, and supplies, etc., performance of all correlations and validations with a start date of January 2, 2026. Failure of the Contractor to conform to the transition period shall be considered as sufficient cause to terminate BPA for cause under the Termination for Cause clause of the BPA.

Equipment relocation: In the event of moving the new equipment to a new location (such as a new laboratory), the contractor shall move contracted lab equipment from the current location to the new lab space.

Support Features

· Commercial marketing. The equipment models being offered shall be in current production as of the date this offer is submitted. For purposes of this solicitation, “current production” shall mean that the clinical laboratory analyzer model is being offered as new equipment. Discontinued models that are only being made available as remanufactured equipment are not acceptable.

· Start-Up Reagents. The Contractor shall provide all reagents, calibrators, controls, consumable/disposable items, parts, accessories, and any other item included on the list of supplies defined in the Federal Supply Schedule contract and required to establish instruments for operation for performance of acceptance testing. The Contractor shall assist the Government with validation and method comparison studies. All materials and reagents needed for such correlation at no cost to the Government. The Contractor shall perform all the statistical analysis and report data in an organized, clearly comprehensible format. This process shall be completed within two weeks of installation of the analyzer at each site and shall be consistent with current CLSI and related documents, CAP Standards and Federal Regulations.

· Training

· Upon Installation: The Contractor shall provide advanced (key operator) instrument training program for at least three operators per facility at no charge to the Government that is coordinated with and timely with the equipment installation, sufficient to the size and scope of the facility’s services and minimally equivalent to the terms and conditions for training defined in the Contractor’s Federal Supply Schedule FSC Group 66, Part III, Cost-Per-Test Clinical Laboratory Analyzers contract. This shall include training on the operation of the system, data manipulation, and basic troubleshooting and repair.

· Thereafter: The Contractor shall provide training for minimally one operator per facility per year at the discretion of the Government for each model of instrumentation placed. Utilization of the training slots shall be mutually agreed upon between the VA and the Contractor. A training program that involves off-site travel shall include the cost of airfare, room, and board for each participant.

· Equipment Preventative Maintenance/Repair Service. The Contractor shall be able to provide emergency equipment repair and preventative maintenance on all primary instrumentation and any incremental support equipment, e.g. water system, offered according to the following terms:

· Service Requirements

· A technical assistance center shall be available by telephone 24 hours per day, 7 days per week with a maximum call back response time of 1 hours.

· Equipment repair service shall be provided during core business hours. See Attachment A defining core business hours of each facility included in this solicitation. Certain circumstances may dictate the need for repair service to be conducted outside routine business hours. All such arrangements shall be coordinated between the Contractor and VA laboratory personnel.

· Equipment repair response time shall be no more than 24 hours.

· Preventative maintenance will be performed as frequently as published in manufacturer’s operator’s manual and within 2 weeks of the scheduled due date.

· A malfunction incident report shall be furnished to the Laboratory upon completion of each repair call. The report shall include, as a minimum, the following:

· date and time notified

· date and time of arrival

· serial number, type, and model number of equipment

· time spent for repair, and

· proof of repair that includes documentation of a sample run of quality control verifying acceptable performance.

· Each notification for an emergency repair service call shall be treated as a separate and new service call.

· Upgrades - The Contractor shall provide upgrades to both the equipment hardware and software to maintain the integrity of the system and the state-of –the art technology, at no additional charge to the Government. These shall be provided as they become commercially available and at the same time as they are being provided to commercial customers. This requirement only applies to “system upgrades” that enhance the model of equipment being offered, i.e. new version of software, correction of hardware defect, upgrade offered to commercial customers at no additional charge, upgrade to replace model of equipment no longer Contractor supported, etc. This does not refer to replacing the original piece of equipment provided under the BPA; however, it does refer to significant changes in the hardware operational capability.

· Interface Requirements – The Contractor shall be responsible for providing all hardware required for the connection, implementation, and operation of the interface to the universal interface and any incremental fee that is required each time an instrument is added to an existing universal interface system (see Attachment A).

· Shall be capable to connect and integrate results through a middleware system

· Work with the Laboratory Information Managers to interface the middleware system with vendor provided instruments.

· Provide remote or onsite guidance on validation techniques and assist troubleshooting.

· The Contractor shall provide all necessary software support ensuring that successful interfacing has been established. Specific requirements for the communication of the data streams will be unique to the instrument system involved and dictated by the manufacturer itself. Information necessary to make the determination for type and amount of interfacing equipment is supplied in Attachment A.

· If a site already has a universal interface box, the Contractor is responsible for everything leading up to the box including any incremental fee required to add additional equipment (e.g. Lantronix box, licenses, ports/cards, cables, software, etc.) to the universal interfacing system.

· If a site does not have a universal interface and one is needed to optimally interface the instrument, then the Contractor is responsible for the acquisition of the universal interface box and everything else needed to connect with VA computerized hospital information system.

· If there are any software upgrades in the instrument during its life, the Contractor is responsible for seeing that the interface can accommodate any changes in the data stream going to the VA computerized hospital information system.

· Vendor must supply the following documentation for all analyzers and data management systems proposed to VISN 15:

· MDS2 - Manufacturer Disclosure Statement for Medical Device Security.

· VA Directive 6550 Appendix A- Pre-Procurement Assessment

· ACL Communication Profile

· Commercial offerings - The Contractor shall provide any additional support material that is routinely provided to equivalent commercial customers and assists in regulatory compliance, e.g. Computer disc containing their procedure manual in CLSI format or an on-line procedure manual in the instrument software.

· Characterization of waste – The Contractor shall provide documentation that it has characterized the hazardous nature of all wastes produced by all equipment, devices, reagents, and discharges in accordance with the requirements of the Code of Federal Regulations Title 40 “Protection of the Environment” Part 261 et seq. and applicable state and local requirements. Documentation shall include a description of the characteristics of the hazardous waste produced as a byproduct of the instrument operations, Safety Data Sheets (SDS) meeting the requirements of the Occupational Safety and Health Administration (OSHA) and Environmental Protection Agency (EPA), the analytical process used to determine the hazardous nature and characteristics of the waste, and the analytical test results. Testing of hazardous waste is to be done in accordance with testing protocol specified for each individual waste as described in the Code of Federal Regulations Title 40 to make a determination if the waste is a hazardous waste or otherwise regulated.

· The determination and description shall address the following:

· Waste toxicity (Reference 40 CFR §261.11 and 40 CFR §261.24)

· Waste ignitability (Reference 40 CFR §261.21)

· Waste corrosivity (Reference 40 CFR §261.22)

· Waste reactivity (Reference 40 CFR §261.23)

· Hazardous waste from non-specific sources (F-listed) (Reference 40 CFR §261.31)

· Discarded commercial products (acutely toxic or P-listed and toxic or U-listed) (Reference 40 CFR §261.33)

· Solid Waste (Reference 40 CFR §261.2)

· Exclusions (Reference 40 CFR §261.4)

· The contractor will provide written instructions and training material to ensure VHA laboratory staff are trained as needed to properly operate devices with special emphasis to managing and disposing of hazardous waste in accordance with EPA and state requirements. Additionally, the training provided by the contractor must fulfill Resource Conservation and Recovery Act (RCRA) requirements for training as applicable to devices.

· Contractor shall provide a description of all wastes the process or equipment may discharge so that the facility can determine whether the discharge meets Local Publicly Owned Treatment Works (POTW), State and Federal discharge requirements. At a minimum the characteristics of ignitability, corrosivity, reactivity and toxicity as defined in 40 CFR §261 must be determined and documented. Any mercury containing reagents must be identified in any concentrations. All test results shall be provided. All listed chemicals (F, U, K and P) found in 40 CFR §261 shall be provided in product information and their concentrations documented. For those materials with a positive hazardous waste determination, a mechanism for the laboratory to meet local discharge requirements (i.e. mercury, thimerosol and formaldehyde) must be developed and SDS sheets must be provided in advance for review. At a minimum, documentation shall include, but not be limited to the concentration/measures of the elements and parameters listed below and must be included with vendor response:

· pH

· Flash point (to higher than 200F)

· BOD; biochemical oxygen demand

· The documentation the contractor provides will be used to work with the VAMC and the public and/or private organization (e.g., POTW) to determine whether or not the waste from each device can legally be disposed of via the sewerage system.

Standard and Quality of Performance- This paragraph establishes a standard of quality performance that shall be met before any equipment listed on the delivery order [or BPA] is accepted by the Government. This also includes replacement, substitute machines and machines that are added or field modified after a system has demonstrated successful performance. The acceptance period shall begin on the installation date. It shall end when the equipment has met the standard of performance for a period of 30 consecutive calendar days by operating in conformance with the Contractor’s technical specification or as quoted in any BPA at an effectiveness level of 90% or more.

If equipment does not meet the standard of performance during the initial 30 consecutive calendar days, the standard of performance tests shall continue on a day-by-day basis until the standard of performance is met for a total of 30 consecutive days.

If the equipment fails to meet the standard of performance after 90 calendar days from the installation date, the user may, at his/her option, request a replacement or terminate the order in accordance with the provisions of FAR 52.212-4 entitled “Termination for cause.” (The Contractor shall receive revenue for tests reported during the 90-day acceptance period.)

Operational use time for performance testing for a system is defined as the accumulated time during which the machine is in actual use. System failure downtime is that period of time when any machine in the system is inoperable due to equipment failure. Downtime for each incident shall start from the time the Government makes a bona fide attempt to contact the Contractor’s designated representative at the prearranged contact point until the system or machine(s) is returned to the Government in proper operating condition.

During the performance period for a system, a minimum of 100 hours of operational use time with productive or simulated work shall be required as a basis for computation of the effectiveness level. However, in computing the effectiveness level, the actual number of operational use hours shall be used when in excess of the minimum of 100 hours.

The Government will maintain daily records to satisfy the requirements of the Standard and Quality of Performance section and shall notify the Contractor in writing of the date of the first day of the successful period of operation. Operations use time and downtime shall be measured in hours and whole minutes.

During the term of the contract, should the repair record of any individual piece of laboratory equipment reflect a downtime of 10% or greater of the normal working days in one calendar month, a determination shall be made by the COR to replace the malfunctioning equipment with new equipment. The responsibility for maintaining the equipment furnished in good condition in accordance with manufacturer’s instructions, shall be solely that of the Contractor. Each instrument provided by the Contractor shall maintain an uptime of 90% in each month of the term of the agreement for equipment.

The Contractor will identify if removable media is required to perform their duties. The Clinical Engineering Department will ensure the removable media is scanned with anti-virus software running current virus definitions prior to connection to any medical device/system. Any Contractor with patient sensitive information that is imported into the removable media device for any reason must purge all patient sensitive information prior to departure from the facility.

Prior to termination or completion of this BPA, Contractor/subcontractor must not destroy information received from VA, or gathered/created by the Contractor in the course of performing this BPA without prior written approval by the VA. Any data destruction done on behalf of VA by a Contractor/subcontractor must be done in accordance with National Archives and Records Administration (NARA) requirements as outlined in VA Directive 6300, Records and Information Management and its Handbook 6300.1 Records Management Procedures, applicable VA Records Control Schedules, and VA Handbook 6500.1, Electronic Media Sanitization. Self-certification by the Contractor that the data destruction requirements above have been met must be sent to the VA Contracting Officer within 30 days of termination or completion of the BPA.

All electronic storage media used on non-VA leased or non-VA owned IT equipment that is used to store, process, or access VA information must be handled in adherence with VA Handbook 6500.1, Electronic Media Sanitization upon: (i) completion or termination of the BPA or (ii) disposal or return of the IT equipment by the Contractor/subcontractor or any person acting on behalf of the Contractor/subcontractor, whichever is earlier. Media (hard drives, optical disks, CDs, back-up tapes, etc.) used by the Contractors/subcontractors that contain VA information must be returned to the VA for sanitization or destruction or the Contractor/subcontractor must self-certify that the media has been disposed of per 6500.1 requirements. This must be completed within 30 days of termination or completion of the BPA or disposal or return of the IT equipment, whichever is earlier.

Bio-Medical devices and other equipment or systems containing media (hard drives, optical disks, etc.) with VA sensitive information must not be returned to the Contractor at the end of lease, for trade-in, or other purposes. The options are:

· Contractor must accept the system without the drive;

· VA’s initial medical device procurement includes a spare drive which must be installed in place of the original drive at time of turn-in; or

· VA must reimburse the company for media at a reasonable open market replacement cost at time of purchase.

Due to the highly specialized and sometimes proprietary hardware and software associated with medical equipment/systems, if it is not possible for the VA to retain the hard drive, then;

The equipment Contractor must have an existing BAA if the device being traded in has protected health information stored on it and hard drive(s) from the system are being returned physically intact; and;

Any fixed hard drive on the device must be non-destructively sanitized to the greatest extent possible without negatively impacting system operation. Selective clearing down to patient data folder level is recommended using VA approved and validated overwriting technologies/methods/tools. Applicable media sanitization specifications need to be pre-approved and described in the purchase order or BPA.

A statement needs to be signed by the Director (System Owner) that states that the drive could not be removed and that (a) and (b) controls above are in place and completed. The Information Security Officer (ISO) needs to maintain the documentation.

See attached document: P01-Attachment A.

14 | Page