Statement of Work (SOW)

1. Project Title

BSI Software Support Contract - Hosting, Consulting Services for NHLBI

2. Introduction and Background The National Heart, Lung, and Blood Institute (NHLBI), Division of Intramural Research (DIR), requires continued access to and support for its Biospecimen Inventory (BSI) System. The BSI System enables DIR staff to track, manage, and report on biospecimen inventory in accordance with NIH policies and applicable federal requirements.

The current BSI database contains over 1.2 million specimen records. Continued subscription, hosting, maintenance, technical support, and consulting services are required to preserve system availability, data integrity, security, and operational continuity.

3. Statement of Need and Objectives

The objective of this procurement is to obtain continued access to the BSI System and associated services under a Firm-Fixed-Price (FFP) contract type for a five-year period of performance, consisting of a 12-month base period from January 9, 2027, through January 8, 2028, and four consecutive 12-month option periods extending through January 8, 2032.

4. Product Specifications/Features/Salient Characteristics

The Contractor shall provide the following products and services

1. BSI System Subscription

The annual subscription shall include:

• Continued access to the BSI Core System, including the Subjects and Single sign-on (SSO) integration modules.

• Compatibility of new system features with the DIR database.

• Enhancements to the BSI toolkit to take advantage of new features.

• Performance tuning.

• Programming necessary to implement new technologies.

• Installation of new features, as applicable.

2. Hosting Services

The Contractor shall provide multi-tenant hosting services, including:

• Hosting of the DIR BSI database.

• Maintenance of the SQL database.

• Firewall protection for DIR data.

• Routine data backups.

• Bandwidth and related computer center services.

• Other services necessary to operate and maintain the hosted BSI environment.

The applicable hosting tier shall support a database containing between one million and two million specimen records.

3. Technical Support

The Contractor shall provide technical support Monday through Friday, from 8:30 a.m. to 5:00 p.m. Eastern Time, excluding federal holidays.

Support shall be available by telephone and email. The Contractor shall respond to DIR support requests received during regular business hours within 24 hours.

The Contractor shall provide a tiered support structure consisting of:

• First-tier support staff capable of addressing routine questions and support requests.

• Second-tier development staff capable of addressing technical and system-specific issues.

• Third-tier system designers capable of addressing complex or historical system issues.

Technical support shall be tracked in 15-minute increments.

4. Consulting Services

Consulting services shall be provided on a time-and-materials basis and may include:

• Technical support.

• Meetings.

• Business analysis.

• Requirements analysis.

• Documentation.

• Sprint planning.

• Consultation.

• Custom enhancements to the DIR BSI database.

• Other approved technical services related to the BSI System.

The Contractor shall invoice only for actual labor performed. The Contractor shall obtain written approval before exceeding the approved consulting-services budget or undertaking additional funded effort.

5. System Availability and Maintenance

The Contractor shall provide DIR staff uninterrupted access to the BSI System during regular business hours, except as provided below:

• Planned maintenance, repairs, or enhancements that temporarily restrict access shall be performed outside regular business hours whenever practicable.

• If maintenance cannot be performed outside regular business hours, the Contractor shall obtain approval from the DIR Project Officer at least 24 hours before restricting access.

• For unforeseen system failures or security threats, the Contractor shall notify the DIR Project Officer before performing work that may restrict access, whenever practicable.

• Emergency repairs shall be performed during a mutually agreeable timeframe established by the Contractor and the DIR Project Officer.

5. General Contractor Responsibilities

The Contractor shall:

• Provide the licenses necessary for DIR staff to use the BSI System.

• Maintain uninterrupted system availability during normal DIR business hours, except for approved or emergency maintenance.

• Host and maintain the BSI database and related system components.

• Protect DIR data through firewall services and routine backups.

• Provide technical support by telephone and email.

• Perform system maintenance, performance tuning, minor enhancements, and installation of applicable new features and technologies.

• Provide consulting and business analyst services on a time-and-materials basis.

• Provide system training upon request.

• Export DIR data upon request of the DIR Project Officer.

• Develop custom reports and database enhancements when requested and approved.

• Support the continued availability, security, reliability, and functionality of the BSI System.

6. Inspection and Acceptance

The Government will inspect and accept services based on the following criteria:

• The BSI System is available to authorized DIR users during regular business hours, subject to approved or emergency maintenance.

• The subscription, Subjects module, and SSO integration remain operational.

• Hosting services, including database maintenance, firewall protection, backups, and related computer services, are provided.

• Technical support requests receive a response within 24 hours during regular business hours.

• Approved maintenance, enhancements, reports, data exports, training, and consulting services are performed as requested.

• Monthly progress reports are complete and submitted to the DIR Project Officer.

• Invoices accurately reflect the subscription, hosting, and actual services rendered during the billing period.

• Contractor performance complies with applicable security, privacy, and federal requirements.

The DIR Project Officer will review deliverables and services for compliance with this Statement of Work. Deficiencies shall be corrected by the Contractor at no additional cost when the deficiency results from failure to meet the requirements of this Statement of Work.

7. Point of Contact

Clinical Center/Building 10 10 Center Drive, Room 6C201B Bethesda, Maryland 20892 Email:

Work cell:

8. Security

The Contractor shall comply with all applicable NIH, HHS, and federal information-security, privacy, and records-management requirements.

The Contractor shall:

• Protect DIR information from unauthorized access, use, disclosure, modification, or destruction.

• Restrict access to DIR information to authorized personnel with a legitimate business need.

• Comply with applicable requirements governing personally identifiable information, protected health information, and Government proprietary information.

• Maintain appropriate administrative, technical, and physical safeguards for the hosted BSI environment.

• Maintain firewall protection and routine backups.

• Notify the DIR Project Officer of known or suspected security incidents affecting the BSI System or DIR data.

• Cooperate with Government requests concerning security reviews, incident response, data preservation, and system access.

• Return or export DIR data upon request of the DIR Project Officer and at the conclusion of performance, as directed by the Government.

• Ensure that Contractor personnel comply with applicable confidentiality and security requirements.

9. Government Furnished Property (GFP) and Government Furnished Information (GFI)

The Government will provide the Contractor with access to information stored in the BSI System that is necessary to perform the requirements of this Statement of Work.

Government-furnished information may include:

• DIR biospecimen inventory data.

• Existing BSI database configuration and documentation.

• Information necessary to support system maintenance, troubleshooting, reporting, and approved enhancements.

• Government requirements and direction provided by the DIR Project Officer.

The Contractor shall use Government-furnished information solely to perform this contract and shall protect it in accordance with applicable NIH and federal requirements. The Government will not provide physical Government-furnished property unless specifically identified in the resulting contract or order.

DIR staff shall report system malfunctions and support needs to the Contractor through the designated support channels.

10. Invoices

• Three-Way Invoices: The Contractor shall submit invoices to the Department of

Treasury’s Invoice Processing Platform (IPP) at https://www.ipp.gov

• Invoices shall be submitted on a monthly basis.

The Contractor must submit invoices to the Department of Treasury’s Invoice Processing Platform (IPP) at https://www.ipp.gov mailto:with a copy to the approving official for approval, as directed below and in accordance with the definitions of timeliness set forth in the invoice instructions included as an attachment in Section J of this Solicitation/Contract.

The contractor’s failure to submit timely invoice(s) to the Government waives the contractor’s rights to receive payment pursuant to this contract. In the event of this waiver, the Government is not obligated to make such payment, and the Contracting Officer shall have the authority to unilaterally deobligate the funds in accordance with the requirements at 31 U.S.C. 1552(a) and downwardly adjust the total amount of the award by the amount of the deobligation. The contractor shall be given an opportunity to request the excusal of a late invoice from the Contracting Officer. If excused, the Contracting Officer will respond in writing to confirm that the contactor’s right to receive payment has not been waived.