Attachment A - SOW Transportation.pdf

Purchase Order Number Title: Transportation Services – Attachment A (Statement of Work)

Attachment A Statement of Work (SOW)

Title: Shinnecock Service Unit Transportation Services

I. Background

The Department of Health and Human Services (HHS), Indian Health Service (IHS) Mission is to raise the physical, mental, social, and spiritual health of American Indians and Alaska Natives (AIAN) to the highest level. The Shinnecock Service Unit (SSU) is a field office of the regional Nashville Area Office of IHS, which works to ensure that comprehensive, culturally appropriate personal and public health services are available and accessible to AIAN people. The SSU is located on the Shinnecock Indian Nation territory in Suffolk County, New York. Transportation is an integral component of our program’s operation in making health care accessible to our rural population.

II. Purpose / General Description

The purpose of this requirement is to provide non-emergency medical transportation services for the Shinnecock Indian Nation through a program of day-to-day operations of Shinnecock Service location.

III. Period of Performance / Place of Performance

The period of performance shall be a base period of 12 months plus four 12-month option periods as follows:

Base Period: July 1, 2024 through June 30, 2025 Option Period 1: July 1, 2025 through June 30, 2026 Option Period 2: July 1, 2026 through June 30, 2027 Option Period 3: July 1, 2027 through June 30, 2028 Option Period 4: July 1, 2028 through June 30, 2029

The primary place of performance is within and between Suffolk County and Nassau County, NY. With additional justification such as access to specialty care or limited care, transportation may be provided from Suffolk and Nassau Counties to health care destinations within New York City.

Core Days and Hours of Operation

Transportation services are required Monday through Friday between 7:00 AM and 7:00 PM but some pickups may exceed these hours. Saturday transport may be requested on occasion with sufficient advanced scheduling.

No services or deliverables shall be provided on Sundays, Federal Government Holidays, or any other day as set forth by Presidential Executive Order, or any other Federal Government closures.

The following Federal Government holidays are established by law (5 U.S.C. 6103)

• New Year’s Day (January 1)

• Birthday of Martin Luther King, Jr. (Third Monday in January)

• Washington's Birthday (Third Monday in February)

• Memorial Day (Last Monday in May)

• Independence Day (July 4)

• Labor Day (First Monday in June)

• Columbus Day (Second Monday in October)

• Veterans Day (November 11)

• Thanksgiving Day (Fourth Thursday in November)

• Christmas Day (December 25)

IV. Tasks

Task 1: Federal Records Management.

The contractor shall manage and maintain Federal records, including electronic records, ensuing from this contract in accordance with all applicable records management laws and regulations, including but not limited to the Federal Records Act (44 U.S.C. Chapters. 21, 29, 31, 33); 36 CFR § 1236.20. What are appropriate recordkeeping systems for electronic records? & 1236.22 What are the additional requirements for managing electronic mail records? (http://www.ecfr.gov/cgi-bin/text-idx?rgn=div5&node=36:3.0.10.2.25); NARA Bulletin 2013-02, August 29, 2013, Guidance on a New Approach to Managing Email Records (https://www.archives.gov/records-mgmt/bulletins/2013/2013- 02.html); and NARA Bulletin 2010-05 June 08, 2010 (http://www.archives.gov/records-mgmt/bulletins/2010/2010-05.html), Guidance on Managing Records in Cloud Computing Environments..

Managing the records includes, maintaining records to retain functionality and integrity throughout the records' full lifecycle including: (1) maintenance of links between records and metadata, and (2) categorization of records to manage retention and disposal, either through transfer of permanent records to NARA or deletion of temporary records in accordance with NARA-approved retention schedules.

Task 2: Records Management Training

Records Management Training: The contractor (and/or subcontractor) shall ensure that all employees having access to (1) Federal information or a Federal information system, or (2) personally identifiable information (PII), complete the HHS Records Management Training before performing work under this contract, and thereafter completing the annual refresher course during the life of the contract. The training is located at https://humancapital.learning.hhs.gov/courses/recordsmanagement/index.html. At the end of the Records Management training, the “Congratulations" slide is considered your certificate of completion. Please send the completion certificates to the Contracting Officer Representative (COR) of the contract. The listing of completed training shall be included in the first progress report. Any revisions to this listing as a result of staffing changes shall be submitted with next required progress report.

Task 3: Driver Responsibilities.

http://www.ecfr.gov/cgi-bin/text-idx?rgn=div5&node=36:3.0.10.2.25 http://www.ecfr.gov/cgi-bin/text-idx?rgn=div5&node=36:3.0.10.2.25 https://www.archives.gov/records-mgmt/bulletins/2013/2013-02.html https://www.archives.gov/records-mgmt/bulletins/2013/2013-02.html http://www.archives.gov/records-mgmt/bulletins/2010/2010-05.html http://www.archives.gov/records-mgmt/bulletins/2010/2010-05.html

The contractor shall:

1. Adhere to CDC regulations as it pertains to communicable diseases (COVID-19 and others) for medical transport. See https://www.osha.gov/SLTC/covid-19/emergency-response.html standards precautions for Safe Work Practices.

2. Operate, park, store, and lock vehicle as appropriate to prevent theft or damage.

3. Obey all State and local traffic laws.

4. Use all safety devices including seat belts.

5. Notify the COR and immediately and report all vehicle accidents using Standard Form (SF) 91

Motor Vehicle Accident Report (SOW Attachment C) at the time and scene of the crash if possible, even if damage to the motor vehicle is not noticeable, to include SF 94; (SOW Attachment D) Statement of Witness should there be any witness to the accident, if applicable.

Task 4: Transportation Services Coordination.

1. Coordinate with the Contracting Officer Representative (COR) or designated SSU employee via telephone and by Secure Data Transfer Service (SDTS) email as necessary on a daily basis.

2. Provide a Dispatcher or Transportation Coordinator who will receive telephone calls from patients with requests for non-emergency medical transportation services.

3. Record the date, time and physical location for passenger pick-up, the destination address and time of the patient’s appointment. This information will be recorded and entered into a log. (See Task 5, Section E. Patient Transportation Requests).

4. At the request of patients who have already scheduled services, make changes, cancellations and adjustments as necessary to transportation scheduling.

5. Re-submit to the SSU any changes that will result in significant cost increase; for example, a trip approved with a 30 minute wait time that changes to a 3 hour wait time, or approved mileage from a 15 mile distance one way to a change to a 100 mile distance one way.

6. The Contractor’s driver will wait for the patient at the destination. A secondary destination may be pre-authorized, such as to a local pharmacy to obtain prescribed medication treatment. In such cases the driver will wait for the patient while prescriptions are filled. At the completion of the patient’s pharmacy transaction, the driver will return the patient to the final authorized destination or residence.

7. This coordination is for planning purposes only and the anticipated transportation services discussed are not guaranteed at that point. Required transportation services won’t be confirmed until an email notification is sent to the contractor prior to the actual need. The contractor may then confirm the transportation service to the rider.

Task 5: Transportation Services.

A. Patient Pick-up Shinnecock Territory, Southampton, NY https://www.osha.gov/SLTC/covid-19/emergency-response.html

The contractor shall:

1. Arrive at the designated pickup location allowing enough time to then transit and arrive at destination before designated medical appointment time.

2. Utilize location markers to identify pickup locations. Location markers have been provided to each Shinnecock Nation Territory home and building by the Federal Emergency Management Agency (FEMA). Markers are located at the roadside designating the driveway or entryway to each household or building on the Territory.

3. Maintain a vehicle log for each pick up including passenger name, pick up location and time.

B. Patient Pick-up Suffolk and Nassau Counties, NY

The contractor shall:

1. Arrive at the designated pickup location allowing enough time to then transit and arrive at destination before designated medical appointment time.

2. Utilize standard address locations to identify pickup locations. Alternative pick up locations may include nursing homes, treatment centers or other health care locations.

3. Maintain a vehicle log for each pick up including passenger name, pick up location and time.

C. Patient Drop-off Suffolk and Nassau Counties, NY

The contractor shall:

1. Arrive at the approved designated destination allowing enough time for the patient to transfer to the appointment location.

2. Wait for the patient at the destination. A secondary destination may be pre-authorized, such as additional medical appointment(s), or to a local pharmacy to obtain prescribed medication treatment. In such cases, the driver will wait for the patient and then return the rider to the designated final destination.

3. Consult with the COR or designated SSU employee when wait times are expected to be three hours or more, such as for kidney dialysis or other outpatient procedures where the patient may travel without medical supervision. In these cases, drivers may not be required to wait.

4. Maintain a vehicle log for each time of arrival at destination and location, waiting time, arrival time at final destination and mileage.

D. Patient Drop-off New York City, NY

1. Arrive at the approved designated destination allowing enough time for the patient to transfer to the appointment location. Due to the distance and potential for commuter traffic, additional time will have to be reserved in order to ensure timely arrivals and departures.

2. Wait for the patient at the destination. A secondary destination may be pre-authorized, such as additional medical appointment(s), or to a local pharmacy to obtain prescribed medication treatment. In such cases the driver will wait for the patient and then return the rider to the designated final destination.

3. Maintain a vehicle log for each time of arrival at destination and location, waiting time, arrival time at final destination and mileage.

E. Patient Transportation Requests

1. Receive and record patient requests for transportation via telephone. A designated telephone line and number will be provided for individual patients to call to arrange services with the contractor’s Dispatcher or Transportation Coordinator. The line shall be covered at minimum by a voicemail messaging service during off-duty hours. Messages received should be responded to within one hour of the start of business on the next business day.

2. Ensure that transportation services are readily available within two days (48 hours) of patients’ requests. For next day transportation requests, calls received from patients before 12:00 PM Mondays through Fridays should be accommodated. Requests received after 12:00PM for service on the next business day will be accommodated as resources allow.

3. Daily, transmit the request log for the next business day’s services to be provided to the SSU.

The IHS Secure Data Transfer Service (SDTS) shall be used by the contractor to transmit the log to the COR or designated SSU employee for review and approval. The SSU will respond with approval and/or requests for further information, etc.

4. Upon SSU approval, telephone each patient on the business day prior to the requested service date and confirm each individual transportation arrangement with the patient.

5. Patients may be accompanied by one caregiver or family member. Minors under the age of 18 years shall be accompanied by an adult parent or guardian.

F. Supply and Equipment Transportation

The contractor shall provide ambulette and livery services utilizing equipment appropriate for the safety and comfort of the ridership. All equipment shall meet safety and transport standards of the Americans with Disabilities Act and/or the New York State Department of Motor Vehicles.

1. Provide equipment that accommodates the patient’s level of ability. When needed, wheelchair vehicles will be provided.

2. For patients not using a wheelchair, assisting devices shall be provided such as handles, grips and steps. Safety equipment such as seat belts, wheelchair locks, etc., shall be provided as appropriate for the safety and comfort of passengers.

G. Vehicle Maintenance Transportation.

The contractor shall provide or ensure the provision of vehicle maintenance in accordance with New York State Depart of Motor Vehicles regulations. All vehicles will be appropriately licensed and inspected.

The contractor shall:

1. Maintain annual vehicle inspection as required by the New York State Depart of Transportation. Inspection stickers shall be appropriately displayed and records of inspection available to the SSU COR at any time.

2. Be fully insured for transportation liability and umbrella coverages as required by the State of New York. Proof of liability coverage shall be available to the COR for inspection.

3. Drop-off vehicle and wait until the vehicle maintenance is complete then pick-up vehicle and transport to Shinnecock Service Unit Clinical Center at 9181 Interline Ave., Southampton, NY. 70809.

4. Complete motor vehicle operator’s trip ticket (SOW Attachment E), drop-off vehicle keys and Government vehicle, at the conclusion of trip.

H. Vehicle Operators.

The contractor shall ensure the safe and efficient transportation of patients by providing qualified, screened Vehicle Operators.

The contractor shall:

1. Ensure that vehicle operators are appropriately licensed in the State of New York. Licensing includes driver certification, driver training and continuing education where appropriate.

2. Make available to the COR, Driver’s licenses and driving records at least annually and upon the occasion of any incident involving a Shinnecock Service Unit passenger.

3. Maintain vehicle operator records including training and competency to operate vehicles and safely transport patients, including but not limited to driver advanced certifications, Advanced Cardiac Life Support or specialized training to assist and secure patients, etc.

Task 6: Baseline Security

Security Requirements

1) Applicability. The requirements herein apply whether the entire contract or order (hereafter

“contract”), or portion thereof, includes either or both of the following:

a. Access (Physical or Logical) to Government Information: A Contractor (and/or any subcontractor) employee will have or will be given the ability to have, routine physical (entry) or logical (electronic) access to government information.

b. Operate a Federal System Containing Information: A Contractor (and/or any subcontractor) will operate a federal system and information technology containing data that supports the HHS mission. In addition to the Federal Acquisition Regulation (FAR) Subpart 2.1 definition of “information technology” (IT), the term as used in this section includes computers, ancillary equipment (including imaging peripherals, input, output, and storage devices necessary for security and surveillance), peripheral equipment designed to be controlled by the central processing unit of a computer, software, firmware and similar procedures, services (including support services), and related resources.

2) Safeguarding Information and Information Systems. In accordance with the Federal

Information Processing Standards Publication (FIPS)199, Standards for Security Categorization of Federal Information and Information Systems, the Contractor (and/or any subcontractor) shall:

a. Protect government information and information systems in order to ensure:

• Confidentiality, which means preserving authorized restrictions on access and disclosure, based on the security terms found in this contract, including means for protecting personal privacy and proprietary information;

• Integrity, which means guarding against improper information modification or destruction, and ensuring information non-repudiation and authenticity; and

• Availability, which means ensuring timely and reliable access to and use of information.

b. Provide security for any Contractor systems, and information contained therein, connected to an HHS network or operated by the Contractor on behalf of HHS regardless of location. In addition, if new or unanticipated threats or hazards are discovered by either the agency or contractor, or if existing safeguards have ceased to function, the discoverer shall immediately, within one (1) hour or less, bring the situation to the attention of the other party.

c. Adopt and implement the policies, procedures, controls, and standards required by the HHS Information Security Program to ensure the confidentiality, integrity, and availability of government information and government information systems for which the Contractor is responsible under this contract or to which the Contractor may otherwise have access under this contract. Obtain the HHS Information Security Program security requirements, outlined in the HHS Information Security and Privacy Policy (IS2P), by contacting the CO/COR or emailing fisma@hhs.gov.

d. Comply with the Privacy Act requirements and tailor FAR clauses as needed.

3) Protection of Sensitive Information. For security purposes, information is or may be sensitive because it requires security to protect its confidentiality, integrity, and/or availability. The Contractor (and/or any subcontractor) shall protect all government information that is or may be sensitive in accordance with OMB Memorandum M-06-16, Protection of Sensitive Agency Information by securing it with a FIPS 140-2 validated solution.

See the HHS Standard for the Definition of Sensitive Information, for additional information in defining and protecting sensitive information.

4) Confidentiality and Nondisclosure of Information. Any information provided to the contractor (and/or any subcontractor) by HHS or collected by the contractor on behalf of HHS shall be used only for the purpose of carrying out the provisions of this contract and shall not be disclosed or made known in any manner to any persons except as may be necessary in the performance of the contract. The Contractor assumes responsibility for protection of the confidentiality of Government records and shall ensure that all work performed by its employees and subcontractors shall be under the supervision of the Contractor. Each Contractor officer or employee or any of its subcontractors to whom any HHS records may be made available or disclosed shall be notified in writing by the Contractor that information disclosed to such officer or employee can be used only for that purpose and to the extent authorized herein.

The confidentiality, integrity, and availability of such information shall be protected in accordance with HHS and IHS policies. Unauthorized disclosure of information will be subject to the HHS/IHS sanction policies and/or governed by the following laws and regulations:

a. 18 U.S.C. 641 (Criminal Code: Public Money, Property or Records);

b. 18 U.S.C. 1905 (Criminal Code: Disclosure of Confidential Information); and

c. 44 U.S.C. Chapter 35, Subchapter I (Paperwork Reduction Act).

5) Contractor Non-Disclosure Agreement (NDA). Each Contractor (and/or any subcontractor) employee having access to non-public government information under this contract shall complete the IHS non-disclosure agreement. A copy of each signed and witnessed NDA shall be submitted to the Contracting Officer (CO) and/or CO Representative (COR) prior to performing any work under this acquisition.

• Training

1) Mandatory Training for All Contractor Staff. All Contractor (and/or any subcontractor) employees assigned to work on this contract shall complete the applicable HHS/IHS Contractor Information Security Awareness, Privacy, and Records Management training (provided upon contract award) before performing any work under this contract. Thereafter, the employees shall complete HHS/IHS Information Security Awareness, Privacy, and Records Management training at least annually, during the life of this contract. All provided training shall be compliant with HHS training policies.

2) Role-based Training. All Contractor (and/or any subcontractor) employees with significant security responsibilities (as determined by the program manager) must complete role-based training annually commensurate with their role and responsibilities in accordance with HHS policy and the HHS Role-Based Training (RBT) of Personnel with Significant Security

Responsibilities Memorandum.

3) Training Records. The Contractor (and/or any subcontractor) shall maintain training records for all its employees working under this contract in accordance with HHS policy. The training records shall be provided to the CO and/or COR within 30 days after contract award and annually thereafter or upon request.

• Rules of Behavior

1) The Contractor (and/or any subcontractor) shall ensure that all employees performing on the contract comply with the HHS Information Technology General Rules of Behavior, the IHS Information Technology Rules of Behavior (included in the IHS Information Security and Privacy Awareness Training), and any applicable system-level rules of behavior.

2) All Contractor employees performing on the contract must read and adhere to the Rules of

Behavior before accessing Department data or other information, systems, and/or networks that store/process government information, initially at the beginning of the contract and at least annually thereafter, which may be done as part of annual IHS Information Security Awareness Training. If the training is provided by the contractor, the signed ROB must be provided as a separate deliverable.

• Incident Response

FISMA defines an incident as “an occurrence that (1) actually or imminently jeopardizes, without lawful authority, the integrity, confidentiality, or availability of information or an information system; or (2) constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies. The HHS Policy for IT Security and Privacy Incident Reporting and Response further defines incidents as events involving cybersecurity and privacy threats, such as viruses, malicious user activity, loss of, unauthorized disclosure or destruction of data, and so on.

A privacy breach is a type of incident and is defined by Federal Information Security Modernization Act (FISMA) as the loss of control, compromise, unauthorized disclosure, unauthorized acquisition, or any similar occurrence where (1) a person other than an authorized user accesses or potentially accesses personally identifiable information or (2) an authorized user accesses or potentially accesses personally identifiable information for an other than authorized purpose. The HHS Policy for IT Security and Privacy Incident Reporting and Response further defines a breach as “a suspected or confirmed incident involving PII”.

In the event of a suspected or confirmed incident or breach, the Contractor (and/or any subcontractor), the Contractor (and/or any subcontractor) shall:

1) Protect all sensitive information, including any PII created, stored, or transmitted in the performance of this contract so as to avoid a secondary sensitive information incident with FIPS 140-2 validated encryption.

2) NOT notify affected individuals unless so instructed by the Contracting Officer or designated representative. If so instructed by the Contracting Officer or representative, the Contractor shall send notifications to affected individuals as expeditiously as practicable, without unreasonable delay, and in accordance with applicable law.

3) Report all suspected and confirmed information security and privacy incidents and breaches to the IHS Security Operations Center (SOC), COR, CO, IHS SOP (or his or her designee), and other stakeholders, including incidents involving PII, in any medium or form, including paper, oral, or electronic, as soon as possible and without unreasonable delay, no later than one (1) hour, and consistent with the applicable IHS and HHS policy and procedures, NIST standards and guidelines, as well as US-CERT notification guidelines. The types of information required in an incident report must include at a minimum: company and point of contact information, contract information, impact classifications/threat vector, and the type of information compromised. In addition, the Contractor shall:

a. cooperate and exchange any information, as determined by the Agency, necessary to effectively manage or mitigate a suspected or confirmed breach;

b. not include any sensitive information in the subject or body of any reporting e-mail; and

c. encrypt sensitive information in attachments to email, media, etc.

4) Comply with OMB M-17-12, Preparing for and Responding to a Breach of Personally

Identifiable Information, HHS, and IHS incident response policies when handling PII breaches.

5) Provide full access and cooperate on all activities as determined by the Government to ensure an effective incident response, including providing all requested images, log files, and event information to facilitate rapid resolution of sensitive information incidents. This may involve disconnecting the system processing, storing, or transmitting the sensitive information from the Internet or other networks or applying additional security controls.

• Position Sensitivity Designations

All Contractor (and/or any subcontractor) employees must obtain a background investigation commensurate with their position sensitivity designation that complies with Parts 1400 and 731 of Title 5, Code of Federal Regulations (CFR). The following position sensitivity designation levels apply to this solicitation/contract:

The requiring activity representative, in conjunction with Personnel Security, shall use the OPM Position Sensitivity Designation automated tool (https://www.opm.gov/investigations/) to determine the sensitivity designation for background investigations. After making those determinations, include all applicable position sensitivity designations.

• Homeland Security Presidential Directive (HSPD)-12

The Contractor (and/or any subcontractor) and its employees shall comply with Homeland Security Presidential Directive (HSPD)-12, Policy for a Common Identification Standard for Federal Employees and Contractors; OMB M-05-24; FIPS 201, Personal Identity Verification (PIV) of Federal Employees and Contractors; HHS HSPD-12 policy; and Executive Order 13467, Part 1 §1.2.

https://www.opm.gov/investigations/

For additional information, see HSPD-12 policy at: https://www.dhs.gov/homeland-security-presidential-directive-12)

Roster. The Contractor (and/or any subcontractor) shall submit a roster by name, position, e-mail address, phone number and responsibility, of all staff working under this acquisition where the Contractor will develop, have the ability to access, or host and/or maintain a government information system(s). The roster shall be submitted to the COR, with a copy to the Contracting Officer, within 14 days of the effective date of this contract. Any revisions to the roster as a result of staffing changes shall be submitted within 14 days of the change. The COR will notify the Contractor of the appropriate level of investigation required for each staff member.

If the employee is filling a new position, the Contractor shall provide a position description and the Government will determine the appropriate suitability level.

• Contract Initiation and Expiration

1) General Security Requirements. The Contractor (and/or any subcontractor) shall comply with information security and privacy requirements, Enterprise Performance Life Cycle (EPLC) processes, HHS Enterprise Architecture requirements to ensure information is appropriately protected from initiation to expiration of the contract. All information systems development or enhancement tasks supported by the contractor shall follow the IHS EPLC framework and methodology (https://sharepoint.IHS.gov/oo/oit/dcppm/pmo/Shared Documents/z_Old PMO Archives/Documents.aspx) and in accordance with the HHS Contract Closeout Guide (2012).

2) System Documentation. Contractors (and/or any subcontractors) must follow and adhere to NIST SP 800-64, Security Considerations in the System Development Life Cycle, at a minimum, for system development and provide system documentation at designated intervals (specifically, at the expiration of the contract) within the EPLC that require artifact review and approval.

3) Sanitization of Government Files and Information. As part of contract closeout and at expiration of the contract, the Contractor (and/or any subcontractor) shall provide all required documentation to the CO and/or COR to certify that, at the government’s direction, all electronic and paper records are appropriately disposed of and all devices and media are sanitized in accordance with NIST SP 800-88, Guidelines for Media Sanitization.

4) Notification. The Contractor (and/or any subcontractor) shall notify the CO and/or COR and system ISSO within 10 days before an employee stops working under this contract.

5) Contractor Responsibilities Upon Physical Completion of the Contract. The contractor (and/or any subcontractors) shall return all government information and IT resources (i.e., government information in non-government-owned systems, media, and backup systems) acquired during the term of this contract to the CO and/or COR. Additionally, the Contractor shall provide a certification that all government information has been properly sanitized and

HHS EA requirements may be located here:

https://www.hhs.gov/ocio/ea/documents/proplans.html https://www.dhs.gov/homeland-security-presidential-directive-12 https://www.dhs.gov/homeland-security-presidential-directive-12 https://sharepoint.hrsa.gov/oo/oit/dcppm/pmo/Shared%20Documents/z_Old%20PMO%20Archives/Documents.aspx https://sharepoint.hrsa.gov/oo/oit/dcppm/pmo/Shared%20Documents/z_Old%20PMO%20Archives/Documents.aspx purged from Contractor-owned systems, including backup systems and media used during contract performance, in accordance with HHS and/or IHS policies.

6) The Contractor (and/or any subcontractor) shall perform and document the actions identified in the IHS Contractor Employee Separation Checklist when an employee terminates work under this contract within 10 days of the employee’s exit from the contract. All documentation shall be made available to the CO and/or COR upon request.

V. Schedule of Deliverables

Regardless of format, all digital content or communications materials produced as a deliverable under this contract, must conform to applicable Section 508 standards to allow federal employees and members of the public with disabilities to access information that is comparable to information provided to persons without disabilities. Remediation of any materials that do not comply with the applicable requirements as set forth below, shall be the responsibility of the vendor.

HHS guidance regarding accessibility of documents can be found at http://www.hhs.gov/web/section- 508/making-files-accessible/index.html.

The contractor shall submit the following deliverables as identified in the tasks listed in the SOW and in the quantities stipulated and during the periods listed below.

Item Description Quantity Due Date Submit To

Provide documentation on maintaining Federal Records to include Records Management Schedule and Disposition Plan

Due Date 30 Days after Award

Email in Word Format to:

The COR

Provide Records Management training completion certificates 1 for each staff within 7 days after contract award and upon new staff onboarding.

Submit copy of completed training certificate to: The

COR.

Accident Report.

(Section IV, Task 3).

At the time and scene of the crash if possible

As soon as possible and without reasonable delay but no later than 1 hour of discovery.

Report shall be made using SF 91 and SF 94 witness form.

Submit handwritten report to COR (Anthony Hunter)

Motor Vehicle Log (Section IV, Task 5).

(1 to initiate a trip and 1 to

Monthly with Contractor Invoicing

Email in Excel format to:

The COR about:blank about:blank conclude a trip)

Contractor Employee Non-Disclosure Agreement NDA.

(Section IV, Task 6).

1 for each employee.

Prior to contractor performance.

Report shall be submitted as a .pdf document.

Sent via email to:

The COR

Incident Report (Section IV, Task 6).

As incidents or breaches occur.

As soon as possible and without reasonable delay but no later than 1 hour of discovery.

Report shall be submitted as a word document.

Sent via email to:

The COR

VI. Payment Schedule

This is a Hybrid Firm Fixed Price, Time and Material type contract. The contractor shall invoice on a monthly basis. Payment for services shall be made after submission of a proper invoice. In addition to the monthly total price for services performed, invoices shall reflect the number of Motor Vehicle Operator’s Trips (Attachment E) completed during the month being invoiced to include the number of Shinnecock Service Unit patients transported and other transportation services completed under Task 5.