DRAFT STATEMENT OF WORK.pdf

DRAFT Statement of Work for Internet Services

1. General Overview The Mental Health Service VHA Vocational Rehabilitation Compensated Work Therapy Program (CWT) at Overton Brooks (OVBAMC) is requires internet service, basic cable service, and corresponding equipment rental. The requested service will be used to continue the current television (TV) for the waiting room, and internet service in the Resource Room provided to the Veterans in the CWT Program so they may establish email addresses, perform job searches, and any other tasks necessary to obtain gainful employment.

The Resource Room is currently set up with computers and internet service through Comcast Business. These computers do not connect to any VA system.

The requested service will be used at the CWT Program located at 3000 Knight Street, Building 5, Shreveport, LA 71105-2502, in room 18 and the waiting room.

2. Tasks:

The Contractor shall provide TV and internet for the CWT Program located on 3000 Knight St, Suite 100, in room 18 and the waiting room.

LIN Description Quantity Unit

Data, SecurityEdge Package: Business Internet Advanced (download speeds up to 800 Mbps), or approved equal

BASE PERIOD

12 MO

Data, SecurityEdge Package: SecurityEdge, or approved equal

BASE PERIOD

12 MO

Data, SecurityEdge Package: Business Internet Advanced (download speeds up to 800 Mbps), or approved equal

OPTION PERIOD 1

12 MO

Data, SecurityEdge Package: SecurityEdge, or approved equal

OPTION PERIOD 1

12 MO

3. Place of Performance:

The requested service will be used at the CWT Program located at 3000 Knight Street, Building 5, Shreveport, LA 71105-2502, in room 18 and the waiting room.

4. Period of Performance and Schedule:

One Year plus one option year, commencing with the date of award of this contract.

Work Hours: The contractor shall be available during normal business hours of 8:00am – 4:00pm Monday – Friday excluding Federal Holidays and weekends.

Federal Holidays: New Year’s Day, Martin Luther King’s Birthday, President’s Day, Memorial Day, Juneteenth, Independence Day, Labor Day, Columbus Day, Veteran’s Day, Thanksgiving Day, and Christmas Day and any other day specifically declared by the President of the United States to be a national holiday.

5. Equipment List

The current router is Comcast Business Dual band Wi-Fi 802.11ac. This router facilitates the operation of internet browsing on six computers at the same time. Something similar is needed. The basic cable is connected by a small comcast box.

6. Contractor Requirements The Contractor will furnish all labor, transportation, parts, test equipment, tools, and expertise necessary to provide and implement the TV and internet service. At the current moment, everything is already in place. They would only be needed in the event there is an equipment failure.

7. Reporting Requirements

During performance of the contract, Comcast is responsible for entering bills monthly into the Tungsten system so that payment can be made in the required system. There is no requirement for a final report.

8. Applicable Documents

Contractor shall provide Operators Manual and quick reference guides on the equipment.

9. General Requirements The contractor shall provide a list of contractor employees or expected to enter building. While on VA premises, all contractor personnel shall comply with the rules, regulations, and procedures governing the conduct of personnel and the operation of the facility.

Contractor personnel shall be trained and qualified to work on all components of the equipment. Contractor personnel shall provide proof of successful completion of training and certifications upon customer inquiry.

The Government shall be responsible for making the equipment available to the Contractor during normal business hours 8:00 am - 4:30 pm. If there is a need for work to be done after hours, the Government will make arrangements for the Contractor to have access to the equipment.

10. Security Contractors, contractor personnel, subcontractors, and subcontractor personnel shall be subject to the same Federal laws, regulations, standards, and VA Directives and Handbooks as VA and VA personnel regarding information and information system security.

A prohibition on unauthorized disclosure: "Information made available to the contractor or subcontractor by VA for the performance or administration of this contract or information developed by the contractor in performance or administration of the contract shall be used only for those purposes and shall not be used in any other way without the prior written agreement of the VA." See VA Handbook 6500.6, Appendix C, paragraph 3.a.

A requirement for data breach notification: Upon discovery of any known or suspected security/privacy incidents, or any unauthorized disclosure of sensitive information, including that contained in system(s) to which the contractor/subcontractor has access, the contractor/subcontractor shall immediately and simultaneously notify the COR, the designated ISO, and Privacy Officer for the contract. The term 'security incident' means an event that has, or could have, resulted in unauthorized access to, loss or damage to VA assets, or sensitive information, or an action that breaches VA security procedures. See VA Handbook 6500.6, Appendix C, paragraph 6.a.

A requirement to pay liquidated damages in the event of a data breach: "In the event of a data breach or privacy incident involving any SPI the contractor processes or maintains under this contract, the contractor shall be liable to VA for liquidated damages for a specified amount per affected individual to cover the cost of providing credit protection services to those individuals." See VA Handbook 6500.6, Appendix C, paragraph 7.a., 7.d.

A requirement for annual security/privacy awareness training: "Before being granted access to VA information or information systems, all contractor employees and subcontractor employees requiring such access shall complete on an annual basis either: (i) the VA security/privacy awareness training (contains VA's security/privacy requirements) within 1 week of the initiation of the contract, or (ii) security awareness training provided or arranged by the contractor that conforms to VA's security/privacy requirements as delineated in the hard copy of the VA security awareness training provided to the contractor. If the contractor provides their own training that conforms to VA's requirements, they will provide the COR or CO, a yearly report (due annually on the date of the contract initiation) stating that all applicable employees involved in VA's contract have received their annual security/privacy training that meets VA's requirements and the total number of employees trained. See VA Handbook 6500.6, Appendix C, paragraph 9.

A requirement to sign VA's Rules of Behavior: "Before being granted access to VA information or information systems, all contractor employees and subcontractor employees requiring such access shall sign on an annual basis an acknowledgment that they have read, understand, and agree to abide by VA's Contractor Rules of Behavior which is attached to this contract." See VA Handbook 6500.6, Appendix C, paragraph 9, Appendix D. Note: If a medical device vendor anticipates that the services under the contract will be performed by 10 or more individuals, the Contractor Rules of Behavior may be signed by the vendor's designated representative. The contract must reflect by signing the Rules of Behavior on behalf of the vendor that the designated representative agrees to ensure that all such individuals review and understand the Contractor Rules of Behavior when accessing VA's information and information systems.

Bio-Medical devices and other equipment or systems containing media (hard drives, optical disks, etc.) with VA sensitive information must not be returned to the vendor at the end of lease, for trade-in, or other purposes." See VA Handbook 6500.6, Appendix C, paragraph 5.h., for the specific options.

11. National Archives and Records Administration (NARA) Records Management Language for Contracts

a. Citations to pertinent laws, codes and regulations such as 44 U.S.C. Chapter 21, 29, 31 and 33; Freedom of Information Act (5 U.S.C. 552); Privacy Act (5 U.S.C. 552a); 36 CFR Part 1222 and Part 1228.

b. Contractor shall treat all deliverables under the contract as the property of the U.S. Government for which the Government Agency shall have unlimited rights to use, dispose of, or disclose such data contained therein as it determines to be in the public interest.

c. Contractor shall not create or maintain any records that are not specifically tied to or authorized by the contract using Government ‘IT’ equipment and/or Government records.

d. Contractor shall not retain, use, sell, or disseminate copies of any deliverable that contains information covered by the Privacy Act of 1974 or that which is generally protected by the Freedom of Information Act.

e. Contractor shall not create or maintain any records containing any Government Agency records that are not specifically tied to or authorized by the contract.

f. The Government Agency owns the rights to all data/records produced as part of this contract.

g. The Government Agency owns the rights to all electronic information (electronic data, electronic information systems, electronic databases, etc.) and all supporting documentation created as part of this contract. Contractor must deliver sufficient technical documentation with all data deliverables to permit the agency to use the data.

h. Contractor agrees to comply with Federal and Agency records management policies, including those policies associated with the safeguarding of records covered by the Privacy Act of 1974. These policies include the preservation of all records created or received regardless of format [paper, electronic, etc.] or mode of transmission [e-mail, fax, etc.] or state of completion [draft, final, etc.].

i. No disposition of documents will be allowed without the prior written consent of the Contracting Officer. The Agency and its contractors are responsible for preventing the alienation or unauthorized destruction of records, including all forms of mutilation. Willful and unlawful destruction, damage or alienation of Federal records is subject to the fines and penalties imposed by 18 U.S.C. 2701.

Records may not be removed from the legal custody of the Agency or destroyed without regard to the provisions of the agency records schedules.

j. Contractor is required to obtain the Contracting Officer's approval prior to engaging in any contractual relationship (sub-contractor) in support of this contract requiring the disclosure of information, documentary material and/or records generated under or relating to this contract. The Contractor (and any sub-contractor) is required to abide by Government and Agency guidance for protecting sensitive and proprietary information.