36C26122Q1059_1.docx

Sources Sought Notice Sources Sought Notice

GENERAL INFORMATION

SET-ASIDE

VA Sierra Pacific Network (VISN 21) VA Central California Healthcare System 855 M St, Suite 1020 Fresno, CA 93721

POINT OF CONTACT*

Contract Specialist Mat Czeshinski mathew.czeshinski@va.gov

(559) 225-6100 x 6794

PLACE OF PERFORMANCE

VA Sierra Pacific Network (VISN 21)

VA Southern Nevada Healthcare System

5406 El Campo Grande Avenue, Suite 150

Las Vegas NV

ADDITIONAL INFORMATION

AGENCY’S URL

URL DESCRIPTION

AGENCY CONTACT’S EMAIL ADDRESS

EMAIL DESCRIPTION

DESCRIPTION

Subject: Sources Sought, Juniper MIST Network Subscription License for Department of Veterans Affairs, Veterans Health Administration (VHA) VISN 21.

The purpose of this sources sought is to conduct market research to support the procurement of Wayfinding and Veteran Guest Internet Access for VISN21. This notice serves to survey the market in an attempt to ascertain whether or not sources are capable of providing the requested services. This notice allows potential contractors/vendors to submit a non-binding statement of interest and documentation demonstrating their capability. The sources sought effort is intended to assess industry capabilities and develop/support the intended direction of acquisition planning. The Network Contracting Office (NCO 21) is requesting responses from qualified business concerns; the qualifying NAICS code for this effort is 541519– Other Computer Related Services This sources sought is to gain knowledge of potential qualified sources and their size classifications (Service Disabled/Veteran Owned Small Business (SDVOSB/VOSB), Hub zone, 8(a), small, small disadvantaged, woman owned small business, or large business) relative to NAICS 541519. Responses to this notice, will be used by the Government to make appropriate acquisition decisions. After review of the responses to this notice, a solicitation announcement may be published. Responses to this notice are not considered adequate responses to any corresponding solicitation announcement. All interested offerors will have to respond to the solicitation announcement in addition to responding to this notice.

Background: The Department of Veterans Affairs is seeking vendors who can provide Wayfinding and Veteran Guest Internet Access per the attached draft performance work statement (PWS). The vendors must demonstrate the ability to meet all requirements for this notice. See attached draft PWS.

INSTRUCTIONS:

Submit a brief description, two-three (2-3) pages (including cover letter) that demonstrates how your company can provide the requested services that are required in the attached draft PWS. Include past experience in providing this requirement to the VA, other Government (Federal or State) agency, or for a private facility. Please specify your availability and your address. The attached PWS is a draft, and is NOT finalized. If any portions seem unclear, prohibited, and/or you are unsure about the draft description of the requirement please list your comments and/or concerns in your response so they can be addressed. PLEASE INDICATE WHETHER YOU HOLD A GSA FEDERAL-SUPPLY SCHEDULE CONTRACT THAT COVERS THESE SERVICES AND, IF SO, THE CONTRACT NUMBER. Provide BUSINESS SIZE AND SOCIO-ECONOMIC STATUS; (a) Indicate whether your business is large or small (b) If small, indicate if your firm qualifies as a small, emerging business, or small disadvantages business (c) If disadvantages, specify under which disadvantaged group and if your firm is certified under Section 8(a) of the Small Business Act (d) Indicate if your firm is a certified Service-Disabled Veteran Owned Small Business (SDVOSB) or Veteran Owned Small Business (VOSB) (g) Include the DUNS number of your firm. (h) State whether your firm is registered with the System for Award Management (SAM) at http://www.sam.gov and/or the VetBiz Registry at http://vip.vetbiz.gov. If not, please NOTE that any future solicitation could only be awarded to a contractor who is registered in SAM and to receive award based on VOSB or SDVOSB status you must be registered in the VetBiz Registry (i) provide current commercial pricing for all items listed in the attached PWS and any applicable discounts. (j) link to the respondent’s General Services Administration (GSA) schedule, or attached file of same, if applicable (k) citation of any current or past customers (i.e., within the past two (2) years) to include contract number, point of contact telephone number or e-mail address; and (l) other material relevant to establishing core competencies of the firm.

Response is due by 15:00 EST Thursday, August 25, 2022. Please submit e-mail responses to Mat Czeshinski, Contract Specialist, at email address: mathew.czeshinski@va.gov . Your response should include a STATEMENT OF CAPABLILITY, GSA SCHEDULE INFORMATION, DUNS#, BUSINESS SIZE, AND SOCIO-ECONOMIC STATUS information as explained above. Please place “Attention: Wayfinding and Internet Access- *Your firm name*- VA Southern Nevada Healthcare System” in the subject line of your email. This notice is to assist the VA in determining sources only.

NOTES: Issuance of this notice does not constitute any obligation whatsoever on the part of the Government to procure these services, or to issue a solicitation, nor to notify respondents of the results of this notice. No solicitation documents exists at this time; however, in the event the acquisition strategy demonstrates that GSA is a viable option for procuring a solution, the RFQ shall be posted to GSA eBuy where only those firms who currently hold a GSA Schedule with the applicable SIN will be able to respond. The Department of Veterans Affairs is neither seeking quotes nor accepting unsolicited quotes, and responses to this notice cannot be accepted as offers. Any information the vendor considers proprietary should be clearly marked as such. The U.S. Government will not pay for any information or administrative costs incurred in response to this RFI.

ITEM INFORMATION

DEDICATED INTERNET 1000 MBPS - LAS VEGAS POP: 10/1/22 TO 9/30/23

LOCAL STOCK NUMBER: RRMS-ISP1

MANAGED SERVICES POP: 10/1/22 TO 9/30/23

LOCAL STOCK NUMBER: RRMS-VGIA-2

WAYFINDING APPLICATION - ANNUAL FEE POP: 10/1/22 TO 9/30/23

LOCAL STOCK NUMBER: TC-WAYFINDAPP

CISCO MERAKI MX250 ADVANCED SEC LICS & SUP 1YR POP: 10/1/22 TO 9/30/23

LOCAL STOCK NUMBER: LIC-MX250-SEC-1YR

MERAKI MX84 ADV SECURITY LICENSE 1YR POP: 10/1/22 TO 9/30/23

LOCAL STOCK NUMBER: LIC-MX84-SEC-1YR

Phase 1 Annual License, Hosting, Support (Annual) POP: 10/1/22 TO 9/30/23

LOCAL STOCK NUMBER: MM-VEG-AL

Juniper MIST Network Subscription License. 1 year. POP: 10/1/22 TO 9/30/23

LOCAL STOCK NUMBER: SUB-AI-1Y

Juniper MIST Network Subscription License. 1 year. POP: 10/1/22 TO 9/30/23

LOCAL STOCK NUMBER: SUB-1S-1Y

Veterans Affairs Southern Nevada Healthcare System Statement of Work (SOW)

1. CONTRACT TITLE.

Las Vegas VA Medical Center VGIA System (Guest WiFi) and Wayfinding Application Hosting/ Service/Licensing

2. DEFINITIONS.

VGIA- Veteran Guest Internet Access BLE- Bluetooth Low-Energy WF- Wayfinding IoS- Operating System used in Apple Mobile Devices TS- Troubleshoot AP-Access Point (Wireless Router)

3. SCOPE.

The VA of Southern Nevada has a continued need to provide Veteran Guest Internet Access (VGIA), indoor Wayfinding through Bluetooth beacons, the Las Vegas VA IoS and Android Applications, Access/Managed Services for all equipment associated with all systems to include, 582 Access Points, 256 Bluetooth beacons, 14 Wayfinding Kiosks, 37 Cisco 9200 Switches, 1 Meraki Firewall MX250 Security Appliance, 4 Meraki Firewalls MX84 and Application Support.

4. Specific Tasks.

· Provide Dedicated Internet Access (1GB/s) for the VA of Southern Nevada Main Hospital

· Provide Managed Services for all systems to include 1 (8hr) weekly tech to TS outages

· Provide the Wayfinding Application for WF within the hospital’s BLE/VGIA Infrastructure

· Provide the Licenses Required for Meraki Appliances within System (6)

· Main Hospital, and NE, NW, SE, SW, VRC Primary Care Clinics

· Annual Licensing for Hosting BLE location services, virtual beacons hosting

· Network Subscription License for 1 year for 582 Mist Access Points

· Network Subscription License for 1 year for 256 BLE Beacons

· Service and Support for:

· 14 Zivelo Kiosks, Windows 10 Pro, Bomgar Remote Monitoring

· 582 Mist AP41 Access Points

· 256 Mist BT11 BLE Beacons

· 1 Cisco MX250 Firewall (VAMC)

· 5 MX84 Firewalls (Clinics)

· 37 Cisco C9200L-24P-4X-E Switches

· 2 WS-C3850-12XS-E Switches

Plus 2 (two) optional years of all requirements above

5. PERIOD AND PLACE OF PERFORMANCE.

Base Year Period: 01 Oct 2022 Place: 30 Sep 2023

Option Years:

Period: 01 Oct 2023 Place: 30 Sep 2025

VA of Southern Nevada Healthcare System Main Hospital

6. CONTRACTING OFFICER’S REPRESENTATIVE (COR).

The Contractor shall not accept any instructions issued by any other person(s) other than the Contracting Officer. The Government may appoint a COR. If so, a Delegation of Authority letter shall be forwarded to the using service and the Contractor after contract has been signed, identifying the individual(s) as the COR(s).

7. SECURITY

Contractors, contractor personnel, subcontractors, and subcontractor personnel shall be subject to the same Federal laws, regulations, standards, and VA Directives and Handbooks as VA and VA personnel regarding information and information system security.

A prohibition on unauthorized disclosure: "Information made available to the contractor or subcontractor by VA for the performance or administration of this contract or information developed by the contractor in performance or administration of the contract shall be used only for those purposes and shall not be used in any other way without the prior written agreement of the VA." See VA Handbook 6500.6, Appendix C, paragraph 3.a.

A requirement for data breach notification: Upon discovery of any known or suspected security/privacy incidents, or any unauthorized disclosure of sensitive information, including that contained in system(s) to which the contractor/subcontractor has access, the contractor/subcontractor shall immediately and simultaneously notify the COR, the designated ISO, and Privacy Officer for the contract. The term 'security incident' means an event that has, or could have, resulted in unauthorized access to, loss or damage to VA assets, or sensitive information, or an action that breaches VA security procedures. See VA Handbook 6500.6, Appendix C, paragraph 6.a.

A requirement to pay liquidated damages in the event of a data breach: "In the event of a data breach or privacy incident involving any SPI the contractor processes or maintains under this contract, the contractor shall be liable to VA for liquidated damages for a specified amount per affected individual to cover the cost of providing credit protection services to those individuals." See VA Handbook 6500.6, Appendix C, paragraph 7.a., 7.d.

A requirement for annual security/privacy awareness training: "Before being granted access to VA information or information systems, all contractor employees and subcontractor employees requiring such access shall complete on an annual basis either: (i) the VA security/privacy awareness training (contains VA's security/privacy requirements) within 1 week of the initiation of the contract, or (ii) security awareness training provided or arranged by the contractor that conforms to VA's security/privacy requirements as delineated in the hard copy of the VA security awareness training provided to the contractor. If the contractor provides their own training that conforms to VA's requirements, they will provide the COR or CO, a yearly report (due annually on the date of the contract initiation) stating that all applicable employees involved in VA's contract have received their annual security/privacy training that meets VA's requirements and the total number of employees trained. See VA Handbook 6500.6, Appendix C, paragraph 9.

A requirement to sign VA's Rules of Behavior: "Before being granted access to VA information or information systems, all contractor employees and subcontractor employees requiring such access shall sign on an annual basis an acknowledgment that they have read, understand, and agree to abide by VA's Contractor Rules of Behavior which is attached to this contract." See VA Handbook 6500.6, Appendix C, paragraph 9, Appendix D. Note: If a medical device vendor anticipates that the services under the contract will be performed by 10 or more individuals, the Contractor Rules of Behavior may be signed by the vendor's designated representative. The contract must reflect by signing the Rules of Behavior on behalf of the vendor that the designated representative agrees to ensure that all such individuals review and understand the Contractor Rules of Behavior when accessing VA's information and information systems.

Bio-Medical devices and other equipment or systems containing media (hard drives, optical disks, etc.) with VA sensitive information must not be returned to the vendor at the end of lease, for trade-in, or other purposes." See VA Handbook 6500.6, Appendix C, paragraph 5.h., for the specific options.

8. RECORDS MANAGEMENT

Contractor shall comply with all applicable records management laws and regulations, as well as National Archives and Records Administration (NARA) records policies, including but not limited to the Federal Records Act (44 U.S.C. Chapters. 21, 29, 31, 33), NARA regulations at 36 CFR Chapter XII Subchapter B, and those policies associated with the safeguarding of records covered by the Privacy Act of 1974 (5 U.S.C. 552a). These policies include the preservation of all records, regardless of form or characteristics, mode of transmission, or state of completion.

In accordance with 36 CFR 1222.32, all data created for Government use and delivered to, or falling under the legal control of, the Government are Federal records subject to the provisions of 44 U.S.C. chapters 21, 29, 31, and 33, the Freedom of Information Act (FOIA) (5 U.S.C. 552), as amended, and the Privacy Act of 1974 (5 U.S.C. 552a), as amended and must be managed and scheduled for disposition only as permitted by statute or regulation.

In accordance with 36 CFR 1222.32, the contractor shall maintain all records created for Government use or created in the course of performing the contract and/or delivered to, or under the legal control of the Government and must be managed in accordance with Federal law. Electronic records and associated metadata must be accompanied by sufficient technical documentation to permit understanding and use of the records and data.

The VA Southern Nevada Healthcare System (VASNHS) and its contractors are responsible for preventing the alienation or unauthorized destruction of records, including all forms of mutilation. Records may not be removed from the legal custody of VASNHS or destroyed except for in accordance with the provisions of the agency records schedules and with the written concurrence of the Head of the Contracting Activity. Willful and unlawful destruction, damage or alienation of Federal records is subject to the fines and penalties imposed by 18 U.S.C. 2701.

In the event of any unlawful or accidental removal, defacing, alteration, or destruction of records, the contractor must report to VASNHS. The agency must report promptly to NARA in accordance with 36 CFR 1230.

The contractor shall immediately notify the appropriate Contracting Officer (CO) upon discovery of any inadvertent or unauthorized disclosures of information, data, documentary materials, records or equipment. Disclosure of non-public information is limited to authorized personnel with a need-to-know as described in the contract documents. The contractor shall ensure that the appropriate personnel, administrative, technical, and physical safeguards are established to ensure the security and confidentiality of this information, data, documentary material, records and/or equipment is properly protected. The contractor shall not remove material from Government facilities or systems, or facilities or systems operated or maintained on the Government’s behalf, without the express written permission of the Head of the Contracting Activity. When information, data, documentary material, records and/or equipment is no longer required, it shall be returned to VASNHS control or the contractor must hold it until otherwise directed. Items returned to the Government shall be hand carried, mailed, emailed, or securely electronically transmitted to the CO or address prescribed in the contract documents. Destruction of records is EXPRESSLY PROHIBITED unless in accordance with Paragraph (4).

The contractor is required to obtain the CO's approval prior to engaging in any contractual relationship (sub-contractor) in support of this contract requiring the disclosure of information, documentary material and/or records generated under, or relating to, contracts. The contractor (and any sub-contractor) is required to abide by Government and VASNHS guidance for protecting sensitive, proprietary information, classified, and controlled unclassified information.

The contractor shall only use Government IT equipment for purposes specifically tied to or authorized by the contract and in accordance with VASNHS policy.

The contractor shall not create or maintain any records containing any non-public VASNHS information that are not specifically tied to or authorized by the contract.

The contractor shall not retain, use, sell, or disseminate copies of any deliverable that contains information covered by the Privacy Act of 1974 or that which is generally protected from public disclosure by an exemption to the FOIA.

VASNHS owns the rights to all data and records produced as part of this contract. All deliverables under the contract are the property of the U.S. Government for which VASNHS shall have unlimited rights to use, dispose of, or disclose such data contained therein as it determines to be in the public interest. Any contractor rights in the data or deliverables must be identified as required by FAR 52.227-11 through FAR 52.227-20.

Training. All contractor employees assigned to this contract who create, work with, or otherwise handle records are required to take VHA-provided records management training. The contractor is responsible for confirming training has been completed according to agency policies, including initial training and any annual or refresher training.

Flowdown of requirements to Subcontractors:

The contractor shall incorporate the substance of this clause, its terms and requirements including this paragraph, in all subcontracts under this contract document, and require written subcontractor acknowledgment of same.

Violation by a subcontractor of any provision set forth in this clause will be attributed to the contractor.

Sources Sought Notice