FINAL - SPOK RFQ - 36C10B21Q0564.pdf

PAGE 1 OF 1. REQUISITION NO.

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NO. 5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

a. NAME b. TELEPHONE NO. (No Collect Calls) 8. OFFER DUE DATE/LOCAL

TIME

9. ISSUED BY CODE 10. THIS ACQUISITION IS UNRESTRICTED OR SET ASIDE: % FOR:

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

8(A)

NAICS:

SIZE STANDARD:

11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

13a. THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700)

13b. RATING

14. METHOD OF SOLICITATION

RFQ IFB RFP

15. DELIVER TO CODE 16. ADMINISTERED BY CODE

17a. CONTRACTOR/OFFEROR CODE FACILITY CODE 18a. PAYMENT WILL BE MADE BY CODE

TELEPHONE NO. DUNS: DUNS+4:

PHONE: FAX:

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW IS CHECKED

SEE ADDENDUM

19. 20. 21. 22. 23. 24.

ITEM NO. SCHEDULE OF SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Govt. Use Only)

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA ARE ARE NOT ATTACHED.

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN _______________ 29. AWARD OF CONTRACT: REF. ___________________________________ OFFER COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DATED ________________________________. YOUR OFFER ON SOLICITATION DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY (BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED SET FORTH HEREIN IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30b. NAME AND TITLE OF SIGNER (TYPE OR PRINT) 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (TYPE OR PRINT) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION (REV. 2/2012)

PREVIOUS EDITION IS NOT USABLE Prescribed by GSA - FAR (48 CFR) 53.212

7. FOR SOLICITATION

INFORMATION CALL:

STANDARD FORM 1449

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS 71

36C10B21Q0564 09-27-2021

Nasaya Morgan 848-377-5147 09-28-2021

13:00 ET

Department of Veterans Affairs Technology Acquisition Center

23 Christopher Way Eatontown NJ 07724

X

Y

1500 Employees

N/A

See Delivery Schedule

Eatontown

Eatontown NJ 07724

Financial Services Center PO Box 149971 Austin TX 78714-8971

Pager Lease and Support Services Brand Name SPOK, Inc.

See Section B **This is a Fiscal Year 2022 requirement. No funding has been appropriated for this effort at this time and is subject to the availability of funding. Refer to FAR 52.232- 18**

The period of Performance (PoP) is 4-month base period with two, 1-month Option Periods.

Points of Contact:

Nasaya Morgan, Contract Specialist Nasaya.Morgan@va.gov Michael Weckesser, Contracting Officer Michael.Weckesser@va.gov

X X

Michael Weckesser Contracting Officer

36C10B21Q0564

Table of Contents

SECTION A

A.1 SF 1449 SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

SECTION B - CONTINUATION OF SF 1449 BLOCKS

B.1 GOVERNING LAW

B.2 CONTRACT ADMINISTRATION DATA

B.3 PRICE SCHEDULE

B.4 PERFORMANCE WORK STATEMENT

SECTION C - CONTRACT CLAUSES

C.1 52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

C.2 52.212-5 CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT

STATUTES OR EXECUTIVE ORDERS—COMMERCIAL ITEMS (SEP 2021)

C.3 52.217-9 OPTION TO EXTEND THE TERM OF THE CONTRACT (MAR 2000) .. 47

C.4 VAAR 852.212-70 PROVISIONS AND CLAUSES APPLICABLE TO VA

ACQUISITION OF COMMERCIAL ITEMS (APR 2020)

SECTION D - CONTRACT DOCUMENTS, EXHIBITS, OR ATTACHMENTS

SECTION E - SOLICITATION PROVISIONS

E.1 52.252-1 SOLICITATION PROVISIONS INCORPORATED BY REFERENCE (FEB

1998)

E.2 52.204-24 REPRESENTATION REGARDING CERTAIN TELECOMMUNICATIONS

AND VIDEO SURVEILLANCE SERVICES OR EQUIPMENT (OCT 2020)

E.3 52.204-26 COVERED TELECOMMUNICATIONS EQUIPMENT OR SERVICES—

REPRESENTATION (OCT 2020)

E.4 52.212-3 OFFEROR REPRESENTATIONS AND CERTIFICATIONS—

COMMERCIAL ITEMS (FEB 2021)

E.5 52.216-1 TYPE OF CONTRACT (APR 1984)

E.6 52.233-2 SERVICE OF PROTEST (SEP 2006)

E.13 RESPONSE INSTRUCTIONS

SECTION B - CONTINUATION OF SF 1449 BLOCKS

B.1 GOVERNING LAW

Federal law and regulations, including the Federal Acquisition Regulations (FAR), shall govern this Contract/Order. Commercial license agreements may be made a part of this Contract/Order but only if both parties expressly make them an addendum hereto. If the commercial license agreement is not made an addendum, it shall not apply, govern, be a part of or have any effect whatsoever on the Contract/Order; this includes, but is not limited to, any agreement embedded in the computer software (clickwrap), any agreement that is otherwise delivered with or provided to the Government with the commercial computer software or documentation (shrinkwrap), or any other license agreement otherwise referred to in any document. If a commercial license agreement is made an addendum, only those provisions addressing data rights regarding the Government’s use, duplication and disclosure of data (e.g., restricted computer software) are included and made a part of this Contract/Order, and only to the extent that those provisions are not duplicative or inconsistent with Federal law, Federal regulation, the incorporated FAR clauses and the provisions of this Contract/Order;

those provisions in the commercial license agreement that do not address data rights regarding the Government’s use, duplication and disclosure of data shall not be included or made a part of the Contract/Order. Federal law and regulation including, without limitation, the Contract Disputes Act (41 U.S.C. § 7101 et seq.), the Anti- Deficiency Act (31 U.S.C. § 1341 et seq.), the Competition in Contracting Act (41 U.S.C.

§ 3301 et seq.), the Prompt Payment Act (31 U.S.C. §3901 et seq.), Contracts for Data Processing or Maintenance (38 USC § 5725), and FAR clauses 52.212-4, 52.227-14, 52.227-19 shall supersede, control, and render ineffective any inconsistent, conflicting, or duplicative provision in any commercial license agreement. In the event of conflict between this Clause and any provision in the Contract/Order or the commercial license agreement or elsewhere, the terms of this Clause shall prevail. Claims of patent or copyright infringement brought against the Government as a party shall be defended by the U.S. Department of Justice (DOJ). 28 U.S.C. § 516. At the discretion of DOJ, the Contractor may be allowed reasonable participation in the defense of the litigation. Any additional changes to the Contract/Order must be made by contract/order modification (Standard Form 30) and shall only be effected by a warranted Contracting Officer. Nothing in this Contract/Order or any commercial license agreement shall be construed as a waiver of sovereign immunity.

B.2 CONTRACT ADMINISTRATION DATA

(continuation from Standard Form 1449, block 18A.)

1. Contract Administration: All contract administration matters will be handled by the following individuals:

a. CONTRACTOR: TBD

b. GOVERNMENT: Michael Weckesser, Contracting Officer Michael.Weckesser@va.gov Department of Veterans Affairs Technology Acquisition Center

Eatontown, NJ 07724

2. CONTRACTOR REMITTANCE ADDRESS: All payments by the Government to the contractor will be made in accordance with VAAR Clause 852.232-72, Electronic Submission of Payment.

3. INVOICES: Invoices shall be submitted in arrears:

a. Quarterly []

b. Semi-Annually []

c. Other [X] Upon Delivery receipt

4. GOVERNMENT INVOICE ADDRESS: All Invoices from the contractor shall be submitted electronically in accordance with VAAR Clause 852.232-72 Electronic Submission of Payment Requests.

5. ACKNOWLEDGMENT OF AMENDMENTS: The offeror acknowledges receipt of amendments to the Solicitation numbered and dated as follows:

AMENDMENT NO DATE

B.3 PRICE SCHEDULE

Note: Days used below refer to calendar days unless otherwise stated. Deliverables with due dates falling on a weekend or holiday shall be submitted the following Government workday after the weekend or holiday.

BASE PERIOD

Period of Performance is 4 months from Contract Date of Award

CLIN/SLIN Description Qty Unit Unit Cost Extended Cost

0001 Leasing and Pager Services in accordance with (IAW) Performance Work Statement (PWS) Section 4.1 and its’ underlying subsections.

This is a Firm-Fixed- Priced Contract Line- Item Numbers (CLIN) that includes all labor and material to complete this task.

The cost for this CLIN shall be provided from Attachment 01 - Price Workbook for the total cost per month to provide the service.

4 MO $ $

0002 Pager Maintenance and Service Level Agreements (SLA) IAW PWS Section 4.2

4 MO Not Separately Priced

(NSP)

NSP

Priced CLIN that includes all labor and material to complete this task.

The costs for this CLIN shall be allocated as part of the costs for CLIN 0001.

0002AA Continuity of Operations Plan IAW PWS Sub-section 4.2.6.

The Contractor shall provide this deliverable within 30 days after contract award. Submission shall be provided electronically to the VA Contracting Officer’s Representative (COR) and Contract Specialist (CS).

Inspection:

Destination

Acceptance:

Destination

F.O.B.: Destination

1 LO NSP NSP

0002AB Account Records and Customer Service

4 EA NSP NSP

Records IAW PWS Sub-section 4.2.7.

The Contractor shall provide this deliverable 30 days after contract award and updated monthly.

Submission shall be provided electronically by way of MS Word or MS Excel to the COR and the CS.

Acceptance:

Destination

F.O.B.: Destination

0003 Pager Management Services IAW PWS Section 4.3 and its’ underlying includes all labor and allocated as part of the costs for CLIN 0001.

4 MO NSP NSP

Total Base Period $

OPTION PERIOD 1

This option period may be exercised IAW FAR 52.217-9 Option to Extend the Term of the Contract (MAR 2000). Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer.

If exercised, this option period shall commence immediately after expiration of the Base Period.

CLIN/SLIN Description Qty Unit Unit Cost Extended Cost

1001 Leasing and Pager Services in accordance with (IAW) Performance Work Statement (PWS) Section 4.1

Item Numbers (CLIN) that includes all labor from Attachment 01 - Price Workbook for the total cost per month to provide the service.

1 MO $ $

1002 Pager Maintenance and Service Level Agreements (SLA) IAW PWS Section 4.2 and its’ underlying subsections.

1 MO Not Separately Priced

(NSP)

NSP

includes all labor and allocated as part of the costs for CLIN 1001.

1002AA Account Records and Customer Service

To be updated monthly.

Acceptance:

Destination

F.O.B.: Destination

1 EA NSP NSP

1003 Pager Management Services IAW PWS Section 4.3 and its’ underlying includes all labor and

1 MO NSP NSP

CLIN shall be allocated as part of the costs for CLIN 1001.

Total Option Period 1 $

OPTION PERIOD 2

This option period may be exercised IAW FAR 52.217-9 Option to Extend the Term of the Contract (MAR 2000). Work shall not commence until, and unless, a formal modification is issued by the Contracting Officer.

If exercised, this option period shall commence immediately after expiration of Option Period 1.

CLIN/SLIN Description Qty Unit Unit Cost Extended Cost

2001 Leasing and Pager Services in accordance with (IAW) Performance Work Statement (PWS) Section 4.1

Item Numbers (CLIN) that includes all labor from Attachment 01 - Price Workbook for the total cost per

1 MO $ $

month to provide the service.

2002 Pager Maintenance and Service Level Agreements (SLA) IAW PWS Section 4.2 includes all labor and allocated as part of the costs for CLIN 2001.

1 MO Not Separately Priced

(NSP)

NSP

2002AA Account Records and Customer Service

To be updated monthly.

Acceptance:

Destination

F.O.B.: Destination

1 EA NSP NSP

2003 Pager Management Services IAW PWS Section 4.3 and its’ underlying

1 MO NSP NSP

includes all labor and allocated as part of the costs for CLIN 2001.

Total Option Period 2 $

B.4 PERFORMANCE WORK STATEMENT

1.0 DESCRIPTION OF SERVICES

The Department of Veterans Affairs Office of Information and Technology (OIT) DevSecOps Service Delivery (SD) has a requirement to continue Brand Name SPOK leased pager and maintenance services for locations listed in Attachment 01.

2.0 APPLICABLE DOCUMENTS

In the performance of the tasks associated with this Performance Work Statement, the Contractor shall comply with the following:

1. 44 U.S.C. § 3541-3549, “Federal Information Security Management Act (FISMA) of 2002”

2. “Federal Information Security Modernization Act of 2014”

3. Federal Information Processing Standards (FIPS) Publication 140-2, “Security Requirements for Cryptographic Modules”

4. FIPS Pub 199. “Standards for Security Categorization of Federal Information and Information Systems,” February 2004

5. FIPS Pub 200, “Minimum Security Requirements for Federal Information and

Information Systems,” March 2006

6. FIPS Pub 201-2, “Personal Identity Verification of Federal Employees and Contractors,” August 2013

7. 10 U.S.C. § 2224, "Defense Information Assurance Program"

8. 5 U.S.C. § 552a, as amended, “The Privacy Act of 1974”

9. Public Law 109-461, Veterans Benefits, Health Care, and Information

Technology Act of 2006, Title IX, Information Security Matters

10. 42 U.S.C. § 2000d “Title VI of the Civil Rights Act of 1964”

11. VA Directive 0710, “Personnel Security and Suitability Program,” June 4, 2010, https://www.va.gov/vapubs/index.cfm

12. VA Handbook 0710, Personnel Security and Suitability Program,” May 2, 2016, https://www.va.gov/vapubs/index.cfm

13. VA Directive and Handbook 6102, “Internet/Intranet Services,” August 5,

14. 36 C.F.R. Part 1194 “Information and Communication Technology Standards and Guidelines,” January 18, 2017

15. OMB Circular A-130, “Managing Federal Information as a Strategic

Resource,” July 28, 2016

16. 32 C.F.R. Part 199, “Civilian Health and Medical Program of the Uniformed

Services (CHAMPUS)”

17. NIST SP 800-66 Rev. 1, “An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule,” October 2008

18. Sections 504 and 508 of the Rehabilitation Act (29 U.S.C. § 794d), as amended, January 18, 2017

19. Homeland Security Presidential Directive (12) (HSPD-12), August 27, 2004

20. VA Directive 6500, “VA Cybersecurity Program,” February 24, 2021

21. VA Handbook 6500, “Risk Management Framework for VA Information

Systems VA Information Security Program,” February 24, 2021

22. VA Handbook 6500.2, “Management of Breaches Involving Sensitive

Personal Information (SPI),” March 12, 2019

23. VA Handbook, 6500.5, “Incorporating Security and Privacy in System

Development Lifecycle.” March 22, 2010

24. VA Handbook 6500.6, “Contract Security,” March 12, 2010

25. VA Handbook 6500.8, “Information System Contingency Planning,” April 6,

26. VA Handbook 6500.10, “Mobile Device Security Policy,” February 15, 2018

27. VA Handbook 6500.11, “VA Firewall Configuration,” August 22, 2017

28. OIT Process Asset Library (PAL), https://www.va.gov/process. Reference

Process Maps at https://www.va.gov/process/maps.asp and Artifact templates at https://www.va.gov/process/artifacts.asp

29. One VA Technical Reference Model (TRM) (reference at https://www.va.gov/trm/TRMHomePage.aspx)

30. National Institute Standards and Technology (NIST) Special Publications https://www.va.gov/vapubs/index.cfm https://www.va.gov/vapubs/index.cfm https://www.va.gov/process/ https://www.va.gov/process/maps.asp https://www.va.gov/process/artifacts.asp https://www.va.gov/trm/TRMHomePage.aspx

31. VA Directive 6508, “Implementation of Privacy Threshold Analysis and VA Privacy Impact Assessment,” October 15, 2014

32. VA Handbook 6508.1, “Procedures for Privacy Threshold Analysis and Privacy Impact Assessment,” July 30, 2015

33. VA Handbook 6510, “VA Identity and Access Management,” January 15,

34. VA Directive and Handbook 6513, “Secure External Connections,” October 12, 2017

35. VA Directive 6300, “Records and Information Management,” September 21,

36. VA Handbook, 6300.1, “Records Management Procedures,” March 24, 2010

37. NIST SP 800-37 Rev 2, “Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy,” December 2018

38. NIST SP 800-53 Rev. 5, “Security and Privacy Controls for Federal Information Systems and Organizations,” September 23, 2020 (includes updates as of 12/10/2020)

39. VA Directive 0735, “Homeland Security Presidential Directive 12 (HSPD-12) Program,” October 26, 2015

40. VA Handbook 0735, “Homeland Security Presidential Directive 12 (HSPD-

12) Program,” March 24, 2014

41. OMB Memorandum 05-24, “Implementation of Homeland Security Presidential Directive (HSPD) 12 – Policy for a Common Identification Standard for Federal Employees and Contractors,” August 5, 2005

42. OMB Memorandum M-19-17, “Enabling Mission Delivery Through Improved Identity, Credential, and Access Management,” May 21, 2019

43. OMB Memorandum, “Guidance for Homeland Security Presidential Directive (HSPD) 12 Implementation,” May 23, 2008

44. Federal Identity, Credential, and Access Management (FICAM) Roadmap and Implementation Guidance, December 2, 2011, (NOTE: Part A of the FICAM Roadmap and Implementation Guidance, v2.0, was replaced in 2015 with an updated Architecture (https://arch.idmanagement.gov/#what-is-the-ficam-architecture)

45. NIST SP 800-116 Rev 1, “Guidelines for the Use of Personal Identity Verification (PIV) Credentials in Facility Access,” June 2018

46. NIST SP 800-63-3, 800-63A, 800-63B, 800-63C, “Digital Identity Guidelines,” updated March 02, 2020

47. Draft NIST SP 800-157, “Guidelines for Derived PIV Credentials,” December

48. NIST SP 800-164, “Guidelines on Hardware-Rooted Security in Mobile Devices (Draft),” October 2012 https://arch.idmanagement.gov/#what-is-the-ficam-architecture https://arch.idmanagement.gov/#what-is-the-ficam-architecture

49. Draft National Institute of Standards and Technology Interagency Report (NISTIR) 7981, ”Mobile, PIV, and Authentication,” March 2014

50. VA Memorandum, VAIQ #7100147, “Continued Implementation of Homeland Security Presidential Directive 12 (HSPD-12),” April 29, 2011 (reference https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514

51. IAM Identity Management Business Requirements Guidance document, May 2013, (reference https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514)

52. VA Memorandum “Personal Identity Verification (PIV) Logical Access Policy Clarification,” July 17, 2019, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4896

53. Trusted Internet Connections (TIC) 3.0 Core Guidance Documents, https://www.cisa.gov/publication/tic-30-core-guidance-documents

54. OMB Memorandum M-19-26, “Update to the Trusted Internet Connections (TIC) Initiative,” September 12, 2019

55. OMB Memorandum M-08-23, “Securing the Federal Government’s Domain Name System Infrastructure,” August 22, 2008

56. Sections 524 and 525 of the Energy Independence and Security Act of 2007, (Public Law 110–140), December 19, 2007

57. Section 104 of the Energy Policy Act of 2005, (Public Law 109–58), August 8, 2005

58. Executive Order 13834, “Efficient Federal Operations,” dated May 17, 2018

59. Executive Order 13221, “Energy-Efficient Standby Power Devices,” August 2, 2001

60. VA Directive 0058, “VA Green Purchasing Program,” July 19, 2013

61. VA Handbook 0058, “VA Green Purchasing Program,” July 19, 2013

62. Office of Information Security (OIS) VAIQ #7424808 Memorandum, “Remote Access,” January 15, 2014, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28

63. Clinger-Cohen Act of 1996, 40 U.S.C. §11101 and §11103

64. “Veteran Focused Integration Process (VIP) Guide 4.0,” January 2021, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4371

65. VA Memorandum “Proper Use of Email and Other Messaging Services,” January 2, 2018, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28

66. “DevSecOps Product Line Management Playbook” version 2.0, May 2021, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4946 https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514 https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514 https://www.voa.va.gov/DocumentView.aspx?DocumentID=4896 https://www.cisa.gov/publication/tic-30-core-guidance-documents https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28 https://www.voa.va.gov/DocumentView.aspx?DocumentID=4371 https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28 https://www.voa.va.gov/DocumentView.aspx?DocumentID=4946

67. NIST SP 500-267B Revision 1, ”USGv6 Profile,” November 2020

68. OMB Memorandum M-21-07, “Completing the Transition to Internet Protocol

Version 6 (IPv6),“ November 19, 2020

69. Social Security Number (SSN) Fraud Prevention Act of 2017

70. Section 240 of the Consolidated Appropriations Act (CAA) 2018, March 23,

3.0 PERFORMANCE DETAILS

3.1 PERFORMANCE PERIOD

The period of performance (PoP) shall be four-month base period, with two 1-month options for continued performance.

Any work at the Government site shall not take place on Federal holidays or weekends unless directed by the Contracting Officers Representative (COR).

3.2 PLACE OF PERFORMANCE

Tasks under this PWS shall be performed at Contractor facilities. The Contractor shall identify the Contractor’s place of performance in their proposal submission.

From time to time, the Contractor shall perform maintenance at VA Facilities and follow local procedures as noted within and at the direction of the VA COR.

4.0 SPECIFIC TASKS AND DELIVERABLES

The Contractor shall provide all tasks and services to support the below subtasks:

4.1 Leasing and Pager Services

The Contractor shall provide leased one-way and two-way messaging services, and wireless information services. These services may be offered on a local, statewide, regional, or national basis using digital paging networks. Such services shall be able to address the requirements associated with exclusively provisioned and dedicated to critical messaging paging services. Contractor shall provide paging services described herein for varying locations. The Contractor’s standard commercial warranty shall apply to furnished or installed equipment. All pagers shall include standard paging service.

These are the Salient Characteristics of the type of paging service that VA current has and needs:

Weckesser, Michael Any onsite work?

1. Consists of network telephony, base station transmitters, and radio towers that simulcast a pager message from each base station to the intended receiver/pager device.

2. A message is sent to a paging subscriber via a telephone keypad using a paging system access number.

3. Paging system transmits a page throughout the service area using base stations which simulcast the message on a radio carrier network.

4. Transmitters in the paging network broadcast signals over reserved radio high frequency bands allocated to wide area pager systems.

5. Satellite, cellular, or other radio services shall not be an acceptable solution.

The type of plans required by the government shall include the below:

Standard Paging Services A. Numeric Paging – Users transmit and receive numeric messages or codes.

1. Unlimited Calls B. 2-Way Paging - Users have the capability to either receive or send text messages to another two-way device.

1. Unlimited Calls

2. Unlimited Characters

C. Alphanumeric Paging - Users transmit and receive either alphabetic and numeric messages or codes.

1. Unlimited Calls

2. Unlimited Characters

Occasionally, the Government may require specific feature-sets and functionality based on changing VA need. Historically, additional features/services included numeric retrieval, call forwarding, voicemail, group call/follow, alias, etc. The below listing identifies the VA’s current potential feature-set requirements. This list may be updated from time-to-time based upon the government’s need.

Pager Features Description of Features Simultaneous Message Delivery Ability to notify unlimited recipients simultaneously in seconds, ensuring that each recipient will receive a message at the same time

Message Carbon Copy • Message carbon copy

• Copy incoming pages to an unlimited number of pager addresses

Alias Email Send messages to alphanumeric or two-way pager using an easy-to-remember alias address

Additional Number Simultaneous transmission of a page to the assigned pager and additional numbers, such as a cell, smart phone whether a single device or group

Toll Free Number Toll-free pager numbers so anyone can send a page from anywhere in the country, without having to pay charges

Secondary Toll-Free Number Secondary number assignment for devices including local and toll-free service

Group Call Lead/Follow Group Paging Setup

• Multi-Messenger Groups

• Text or numeric message distributed to a pre-established group of pagers

Short Message Service (SMS) Two-way device can communicate directly with any SMS-equipped phone

Two-Way Group Call Feature Two-Way Group Call Feature Operator Dispatch 24/7 live operator answered dispatch service that will send alphanumeric messages to the pager owner

Custom Greeting Personal Greeting Page Forwarding Forward your page/message to another pager Numeric Retrieval • Message delivery services to ensure pages are not missed if the pager is left at home, leaves the coverage area, or if the battery runs down.

• Allow end-users to call their own pager numbers to retrieve pages

Private Voice Mailbox Various Voicemail (VM) packages

• VM Option 1; 10 Msg, 12 hrs, 30 sec

• VM Option 2; 10 Msg, 24 hrs, 45 sec

• VM Option 3; 15 Msg, 72 hrs, 60 sec

Web-based Software • Send messages from a personal computer to a pager.

• Displays critical messages on any PC, tablet or smartphone in an application.

The below table further details VA’s existing requirement.

Pager Service/Features Quantity

Numeric Pagers - Local 500

Numeric Pagers - Statewide 1,000

Numeric Pagers - Regional 1,500

Numeric Pagers - National 500

Alphanumeric Pagers - Local 875

Alphanumeric Pagers - Statewide 1,100

Alphanumeric Pagers - Regional 2,100

Alphanumeric Pagers -National 1,300

Two-Way Pagers 375

Numeric Pager - Replacements 100

Alphanumeric Pager - Replacements 100

Two Way Pager - Replacements 50

A. Send messages to alphanumeric or two-way pager using an easy-to-remember alias address. (ALI)

B. Secondary number assignment for devices including local and toll-free service. (ADT/TFN)

C. Two-way device can communicate directly with any SMS-equipped phone.

D. Two-Way Group Call Feature. 100

E. Message carbon copy.

Messages can be copied to up to 2 other devices, such as cell phone, email address and pager. (MCC)

F. Forward your page/message to another pager or to any email address. (FWD)

G. Allow end-users to call their own pager numbers to retrieve numeric pages. (NRT)

H. Personal greeting. (VPP) 100

I. Private voice mailbox. (MP1) 250

J. Simultaneous Message Delivery: Ability to notify unlimited recipients simultaneously in seconds, ensuring that each recipient will receive a message at the same time, regardless of the network conditions. Common capcode.

K. Multi-Messenger Groups. Copy messages sent to leader number to up to 100 devices, including cell phones, email addresses and pagers. (WGL)

L. Method and apparatus for paging message encryption and decryption. Paging messages encrypted at their source or by the paging system and delivered by radio signal in secure fashion to a paging system for delivery to a remote radio signal receiving paging device. (ENC)

3,000

M. Spares 300

N. Coaster 350

O. Charger 25

4.2 PAGER MAINTENENACE AND SERVICE LEVEL AGREEMENTS

The Contractor shall ensure paging service is accessible for VA use 24x7x365 and have availability including message delivery of 99.99%. The Contractor shall ensure no more than 1% of pagers are defective or configured with wrong services or features upon delivery at any site. The Contractor services shall conform to SLA parameters as defined in the following subtasks. This SLA shall apply from the Government Acceptance Date for the Service to the duration of the Service Term.

The Contractor shall provide technical Help Desk support. Technical Help Desk support is required 24 hours a day, 7 days a week, and 365 days year. A manned toll-free number shall be designated as the primary help number for VA to call to report a problem and have a Trouble Ticket assigned. Automated answering or ticket automation service shall not be an acceptable solution. The Contractor’s customer service representative shall be in the Continental United States (CONUS) and be fluent in spoken and written English. A Trouble Ticket is the method used by the Government to advise the Help Desk of a perceived fault, including a service outage or a failure to meet an SLA. A unique Trouble Ticket reference number shall be given to the Government representative and used each time the Government calls in to the Help Desk for any fault update or, if appropriate, to inform the Contractor of restoration of the service.

The Contractor shall notify the VA COR, or his designate, and the VA National Service Desk (NSD) of any scheduled system outages at least 72 hours in advance of the planned outage. In case of any unforeseen outages, the VA COR and the NSD shall be notified within four hours by both email and telephone call and kept up-to-date on the progress until service restoration. If the unscheduled outage is anticipated to be more than 24 hours, the Contractor shall provide an alternate plan for service coverage acceptable to VA.

The Contractor shall ensure that VA is the officially registered customer for these pager services. These pager services are critical to VA’s mission and directly impact VA’s ability to provide quality care to our Veterans. The Contractor shall include service plans in the cost of the lease for each pager. All VA accounts shall be identified in the Contractor’s network as a Federal Government account and shall not be subject to disconnect for any reason other than instances where the Government requests that it be disconnected.

4.2.1 MEAN TIME TO REPAIR (MTTR)

MTTR is the average time for the Contractor to restore the service during a service outage in a billing month. The SLA for MTTR shall be four hours for outage and 72 hours for service degraded. The Contractor shall provide technical support/resolution during established business hours to remediate service issues pertaining to the Support Services in Section 5.4. MTTR times begin when the Contractor receives a support request from VA. The Contractor shall respond to VA’s support requests according to the following fault classifications.

4.2.2 PRIORITY 1– SERVICE OUTAGE

A service outage is defined as an unscheduled period in which the service is interrupted and unavailable for use by Customer for 60 or more Unavailable Seconds within a 15-minute period. This includes a business impacting function or service is not available such as inability to receive an electronic message due to service outages. This shall include total loss of service or the service is degraded to the extent where the Government is unable to use it. This shall include the inability to receive or transmit data or access critical messaging systems due to network impairment. The Contractor shall restore to all service outages within four hours. Notifications shall be provided to VA local POC as identified within this contract, every business day via telephone until restored. The fault shall not return for seven calendar days or it shall be considered a continuation of the original service impact.

4.2.3 PRIORITY 2– SERVICE DEGRADED

Service Degraded means VA’s workflow is not seriously affected or limited. The Contractor repair technician shall respond to all Service Degraded reports within four hours. Status notifications shall be provided to VA local POC as identified in this contract, every business day until restored. The fault shall not return for 30 calendar days or it shall be considered a continuation of the original fault.

4.2.4 EXCLUSIONS

During scheduled maintenance of the Paging Service, the Contractor shall notify VA COR/PM within three business days of the maintenance window and describe in detail how long and to what level degraded service is to be expected. The Contractor shall obtain approval in advance from the appropriate VA POC as within this contract before scheduled maintenance occurs. The paging service shall not be unavailable for any outage that results from any maintenance performed by the Contractor as defined by the following three exceptions:

1. VA is notified at least three business days in advance of outage or service degradation;

2. During the installation period; or

3. Trouble beyond the demarcation point or Network Interface (NI) not caused by the Contractor.

4.2.5 MAINTENANCE PERFORMANCE

The Contractor shall obtain the approval of the VA Facility Area Manager (AM) [shall be identified within this contract] prior to starting any work that will cause a service outage (refer to PWS Section 4.2.1). The Contractor shall notify the COR and VA Facility TM, if work needs to be performed outside of normal business hours, a minimum of three business days before the work is to begin (except in the case of Trouble Ticket repair).

The Contractor shall receive approval from the VA Facility TM prior to commencement of either intrusive testing or contractor actions which may affect service quality.

The Contractor shall clean up all work areas immediately after completing work in VA facilities, including removal and disposal of defective equipment. The Contractor shall notify VA when any service request, repair, or maintenance is completed. Notification shall be by telephone call or email to the VA local technical contact. The service request, repair, or maintenance is not considered complete until a VA OIT Area Manager or designee confirms that the completion of service is acceptable.

4.2.6 CONTINUITY OF OPERATIONS PLAN (COOP)

The Contractor shall provide a COOP within 30 calendar days after basic contract award and shall update the plan annually or more frequently if required to satisfy the needs of the Government. This shall include:

1. Identification of hazards pertaining to services offered;

2. A vulnerability assessment to determine the effects of hazards;

3. Sufficient levels of physical security required to protect against identified threats;

and

4. Sufficient levels of information security required to protect against identified threats.

The Contractor shall exercise the COOP annually to ensure it performs as needed to restore paging services in the event of an outage.

Deliverable:

A. Continuity of Operations Plan

4.2.7 ACCOUNT RECORDS AND REPORTING

The Contractor shall provide account records aggregated by delivery service point with an itemized list of service types provided. Customer Service Records (CSR) shall have the price associated with each service and shall be organized by VA parent facility. All data must be in MS Word or MS Excel. The Account Records and CSR shall be delivered to the COR or designee by email on or about the same time every month.

Deliverable:

A. Account Records and Customer Service Records

4.3 PAGER MANAGEMENT SERVICES

The Contractor shall coordinate initial deliveries with Site Points of Contact (POCs) before shipment of hardware to ensure sites have adequate storage space. All shipments, either single or multiple container deliveries, shall bear the VA Purchase Order number on external shipping labels and associated manifests or packing lists. In the case of multiple container deliveries, concise summary near the VA PO number will indicate total number of containers for the complete shipment (e.g., Package 1 of 2), clearly readable on manifests and external shipping labels.

4.3.1 PAGER REPLACEMENT

The Contractor shall replace any pager types, including the associated features and plans specified in this PWS, that are defective or configured with the wrong paging services or features. Any pagers that have a latent defect shall be covered by the manufacturer’s warranty. If a pager has a latent defect, then the Contractor will replace the pager. If VA damages a pager, then the Contractor will replace the pager and VA will reimburse the Contractor for the damaged pager.

4.3.2 RETURNS SHIPPING SUPPORT

The Contractor shall supply VA with postage paid Return Shipping Labels for return of unneeded or repairable devices. Historically VA has found that 3% of pagers will be returned to be repaired or replaced during performance. In addition, VA may return pagers if VA does not need the pagers to stay within the 3% of spare devices; or, for the purpose of receiving credit for returning unneeded pagers. Include all estimated postage costs in your fixed price line items for shipping and return support. These costs will not be directly reimbursed by the Government.

Prior to shipping, the Contractor shall notify Site POCs, by phone, followed by email, of all incoming deliveries including line-by-line details for review of requirements. The Contractor shall not make any changes to the delivery schedule at the request of the Site POCs. Any changes to the delivery schedule need to be authorized by the COR.

4.3.3 URGENT DELIVERIES

VA shall contact the Contractor for the purpose of obtaining accelerated delivery for pagers and/or transmitters (e.g., replace a transmitter or antenna in the event of a hurricane). The Contractor shall reply to the VA inquiry within 24 hours after receipt and provide confirmation in writing that the Contractor can provide the requested pager service.) If the Contractor offers an accelerated delivery time acceptable to the VA, any order(s) placed pursuant to the agreed upon accelerated delivery time frame shall be delivered within this shorter delivery time and in accordance with all other terms and conditions of the contract.

4.3.4 WEB-BASED PORTAL

The Contractor shall provide a web-based access portal for accounts access and management purposes. It shall also enable facility managers to assign, activate, swap, or disconnect devices in the most expeditious and convenient manner. The VA COR will provide the Contractor with a list of individuals who will need access to the web-based portal and the account numbers.

The Contractor shall provide VA with the capability of running reports through the web-based portal. VA will determine/provide the Contractor with the number and names of the VA employees who require access to the portal and will run the reports at contract level. At a minimum the Government shall be able to run reports specific to the facility for the following information:

a. Units in service by type, billed customer, department

b. Pager messages by billed customer, pager number, department

c. New sales, charges, or disconnects

d. Account Summary by sub-accounts

e. Zero-use devices F. Pager returns

5.0 GENERAL REQUIREMENTS

5.1 ENTERPRISE AND IT FRAMEWORK

5.1.1 VA TECHNICAL REFERENCE MODEL

The Contractor shall support the VA enterprise management framework. In association with the framework, the Contractor shall comply with OIT Technical Reference Model (VA TRM). The VA TRM is one component within the overall Enterprise Architecture (EA) that establishes a common vocabulary and structure for describing the information technology used to develop, operate, and maintain enterprise applications. Moreover, the VA TRM, which includes the Standards Profile and Product List, serves as a technology roadmap and tool for supporting OIT. Architecture & Engineering Services (AES), has overall responsibility for the One-VA TRM.

5.1.2 FEDERAL IDENTITY, CREDENTIAL, AND ACCESS MANAGEMENT (FICAM)

5.1.3 INTERNET PROTOCOL VERSION 6 (IPV6)

5.1.4 TRUSTED INTERNET CONNECTION (TIC)

5.1.5 STANDARD COMPUTER CONFIGURATION

5.1.6 VETERAN FOCUSED INTEGRATION PROCESS (VIP) AND PRODUCT LINE

MANAGEMENT (PLM)

5.1.7 PROCESS ASSET LIBRARY (PAL)

5.1.8 AUTHORITATIVE DATA SOURCES

1. N/A

5.1.9 SOCIAL SECURITY NUMBER (SSN) REDUCTION

5.2 SECURITY AND PRIVACY REQUIREMENTS

5.2.1 CONTRACTOR PERSONNEL SECURITY REQUIREMENTS

The Contractor(s) shall comply with all personnel security requirements included in this contract and local level organization security requirements described herein

VA requires that all Vendors be escorted at all times when on-site. Contractors will not be issued Personal-Identity Verification (PIV) cards/badges.

5.3 METHOD AND DISTRIBUTION OF DELIVERABLES

The Contractor shall deliver documentation in electronic format, unless otherwise directed in Section B of the solicitation/contract. Acceptable electronic media include:

MS Word 2000/2003/2007/2010, MS Excel 2000/2003/2007/2010, MS PowerPoint 2000/2003/2007/2010, MS Project 2000/2003/2007/2010, MS Access 2000/2003/2007/2010, MS Visio 2000/2002/2003/2007/2010, AutoCAD 2002/2004/2007/2010, and Adobe Postscript Data Format (PDF).

5.4 PERFORMANCE METRICS

The table below defines the Performance Standards and Acceptable Performance Levels for Objectives associated with this effort.

Performance Objective

Performance Standard Acceptable Levels of Performance

A. Technical / Quality of Product or Service

1. Demonstrates understanding of requirements

2. Efficient and effective in meeting requirements

3. Meets technical needs and mission requirements

4. Provides quality services/products

5. Incorporates “ease of use” Human Centered Design principles in any software developed.

Satisfactory or higher

B. Project Milestones and Schedule

1. Established milestones and project dates are met

2. Products completed, reviewed, delivered in accordance with the established schedule

3. Notifies customer in advance of potential problems

Satisfactory or higher

The COR will utilize a Quality Assurance Surveillance Plan (QASP) throughout the life of the contract to ensure that the Contractor is performing the services required by this PWS in an acceptable level of performance. The Government reserves the right to alter or change the surveillance methods in the QASP at its own discretion. A SAP Performance Based Service Assessment will be used by the COR in accordance with the QASP to assess Contractor performance.

5.5 FACILITY/RESOURCE PROVISIONS

5.6 SHIPMENT OF HARDWARE OR EQUIPMENT

Inspection: Destination Acceptance: Destination Free on Board (FOB): Destination

Ship To and Mark For: (As specified by the COR for locations noted in Attachment A)

Special Shipping Instructions:

Prior to shipping, Contractor shall notify Site POCs, by phone followed by email, of all incoming deliveries including line-by-line details for review of requirements. Contractor shall not make any changes to the delivery schedule at the request of Site POC.

Contractors shall coordinate deliveries with Site POCs before shipment of hardware to ensure sites have adequate storage space.

All shipments, either single or multiple container deliveries, shall bear the VA IFCAP Purchase Order number on external shipping labels and associated manifests or packing lists. In the case of multiple container deliveries, a statement readable near the VA IFCAP PO number shall indicate total number of containers for the complete shipment (e.g. “Package 1 of 2”), clearly readable on manifests and external shipping labels.

Packing Slips/Labels and Lists shall also include the following:

IFCAP PO #: ____________ (e.g., 166-E11234 (the IFCAP PO number is located in block #20 of the SF 1449))

Project Description: (e.g. Tier I Lifecycle Refresh)

Total number of Containers: Package ___ of ___. (e.g., Package 1 of 3)

ADDENDUM A – ADDITIONAL VA REQUIREMENTS, CONSOLIDATED

A1.0 Cyber and Information Security Requirements for VA IT Services The Contractor shall ensure adequate LAN/Internet, data, information, and system security in accordance with VA standard operating procedures and standard PWS language, conditions, laws, and regulations. The Contractor’s firewall and web server shall meet or exceed VA minimum requirements for security. All VA data shall be protected behind an approved firewall. Any security violations or attempted violations shall be reported to the VA Program Manager and VA Information Security Officer as soon as possible. The Contractor shall follow all applicable VA policies and procedures governing information security, especially those that pertain to assessment and authorization and continuous monitoring.

Contractor supplied equipment, PCs of all types, equipment with hard drives, etc. for contract services must meet all security requirements that apply to Government Furnished Equipment (GFE) and Government Owned Equipment (GOE). Security Requirements include: a) VA Approved Encryption Software must be installed on all laptops or mobile devices before placed into operation, b) Bluetooth equipped devices are prohibited within VA; Bluetooth must be permanently disabled or removed from the device, unless the connection uses FIPS 140-2 (or its successor) validated encryption,

c) VA approved anti-virus and firewall software, d) Equipment must meet all VA sanitization requirements and procedures before disposal. The COR, CO, the PM, and the Information Security Officer (ISO) must be notified and verify all security requirements have been adhered to.

Each documented initiative under this contract incorporates VA Handbook 6500.6, “Contract Security,” March 12, 2010 by reference as though fully set forth therein. The VA Handbook 6500.6, “Contract Security” shall also be included in every related agreement, contract or order. The VA Handbook 6500.6, Appendix C, is included in this document as Addendum B.

Training requirements: The Contractor shall complete all mandatory training courses on the current VA training site, the VA Talent Management System (TMS) 2.0, and will be tracked therein. The TMS 2.0 may be accessed at https://www.tms.va.gov/SecureAuth35/. If you do not have a TMS 2.0 profile, go to https://www.tms.va.gov/SecureAuth35/ and click on the “Create New User” link on the TMS 2.0 to gain access.

https://www.tms.va.gov/SecureAuth35/ https://www.tms.va.gov/SecureAuth35/

Contractor employees shall complete a VA Systems Access Agreement if they are provided access privileges as an authorized user of the computer system of VA.

A2.0 VA Enterprise Architecture Compliance The applications, supplies, and services furnished under this contract must comply with VA Enterprise Architecture (EA), available at http://www.ea.oit.va.gov/index.asp in force at the time of issuance of this contract, including the Program Management Plan and VA's rules, standards, and guidelines in the Technical Reference Model/Standards Profile (TRMSP). VA reserves the right to assess contract deliverables for EA compliance prior to acceptance.

A2.1. VA Internet and Intranet Standards

The Contractor shall adhere to and comply with VA Directive 6102 and VA Handbook 6102, Internet/Intranet Services, including applicable amendments and changes, if the Contractor’s work includes managing, maintaining, establishing, and presenting information on VA’s Internet/Intranet Service Sites. This pertains but is not limited to creating announcements; collecting information; databases to be accessed, graphics and links to external sites.

Internet/Intranet Services Directive 6102 is posted at (copy and paste the following URL to browser): https://www.va.gov/vapubs/viewPublication.asp?Pub_ID=1056&FType=2

Internet/Intranet Services Handbook 6102 is posted at (copy and paste following URL to browser): https://www.va.gov/vapubs/viewPublication.asp?Pub_ID=1055&FType=2

A3.0 Notice of the Federal Accessibility Law Affecting All Information and Communication Technology (ICT) Procurements (Section 508)

On January 18, 2017, the Architectural and Transportation Barriers Compliance Board (Access Board) revised and updated, in a single rulemaking, standards for electronic and information technology developed, procured, maintained, or used by Federal agencies covered by Section 508 of the Rehabilitation Act of 1973, as well as our guidelines for telecommunications equipment and customer premises equipment covered by Section 255 of the Communications Act of 1934. The revisions and updates to the Section 508-based standards and Section 255-based guidelines are intended to http://www.ea.oit.va.gov/index.asp https://www.va.gov/vapubs/viewPublication.asp?Pub_ID=1056&FType=2 https://www.va.gov/vapubs/viewPublication.asp?Pub_ID=1055&FType=2 ensure that information and communication technology (ICT) covered by the respective statutes is accessible to and usable by individuals with disabilities.

Section 508 – Information and Communication Technology (ICT) Standards

The Section 508 standards established by the Access Board are incorporated into, and made part of all VA orders, solicitations and purchase orders developed to procure ICT.

These standards are found in their entirety at: https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines. A printed copy of the standards will be supplied upon request.

Federal agencies must comply with the updated Section 508 Standards beginning on January 18, 2018. The Final Rule as published in the Federal Register is available from the Access Board: https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule.

The Contractor shall comply with “508 Chapter 2: Scoping Requirements” for all electronic ICT and content delivered under this contract. Specifically, as appropriate for the technology and its functionality, the Contractor shall comply with the technical standards marked here:

E205 Electronic Content – (Accessibility Standard -WCAG 2.0 Level A and AA Guidelines)

E204 Functional Performance Criteria E206 Hardware Requirements E207 Software Requirements E208 Support Services and Documentation Requirements

Compatibility with Assistive Technology The standards do not require installation of specific accessibility-related…