HT0011-18-R-0053-0001_CONFORMED.pdf

SEE ADDENDUM

(No Collect Calls)

HT001118R0053 19-Nov-2018

b. TELEPHONE NUMBER

703-681-3980

8. OFFER DUE DATE/LOCAL TIME

10:00 AM 26 Nov 2018

5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA – FAR (48 CFR) 53.212

(TYPE OR PRINT)

(SIGNATURE OF CONTRACTING OFFICER)

ADDENDA ARE

26. TOTAL AWARD AMOUNT (For Gov t. Use Only )

23.

CODE 10. THIS ACQUISITION IS

SUCH ADDRESS IN OFFER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT

BELOW IS CHECKED

TELEPHONE NO.

HT00119. ISSUED BY

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a. UNLESS BLOCK

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME

STEPHANIE MARSH

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NUMBER

(TYPE OR PRINT)

30b. NAME AND TITLE OF SIGNER 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a.UNITED STATES OF AMERICA

0 27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1. 52.212-4. FAR 52.212-3. 52.212-5 ARE ATTACHED.

25. ACCOUNTING AND APPROPRIATION DATA

1. REQUISITION NUMBER

20.

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

. YOUR OFFER ON SOLICITATION

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

% FOR:SET ASIDE:UNRESTRICTED ORX

SMALL BUSINESS

17a.CONTRACTOR/ CODE FACILITY

OFFEROR CODE

DHA CONTRACTING OFFICE-(CO-FC) HT0011

7700 ARLINGTON BLVD

FALLS CHURCH VA 22042

18a. PAYMENT WILL BE MADE BY CODE

RATED ORDER UNDER

DPAS (15 CFR 700)

13a. THIS CONTRACT IS A

13b. RATING

CODE15. DELIVER TO CODE HT0073 16. ADMINISTERED BY

12. DISCOUNT TERMS11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

14. METHOD OF SOLICITATION

RFQ IFB RFPX

DHA COMBAT SUPPORT AGENCY

MARK CHIN

7700 ARLINGTON BLVD

FALLS CHURCH VA 22042

TEL: 703-681-8464 FAX:

FAX:

TEL: 703-681-1143 SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

8(A)

HUBZONE SMALL

BUSINESS

SIZE STANDARD:

$11,000,000

NAICS:

621111

X

OFFER DATED

29. AWARD OF CONTRACT: REF.

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

EMAIL:

TEL:

31c. DATE SIGNED

SEE SCHEDULE

SCHEDULE OF SUPPLIES/ SERVICESITEM NO. QUANTITY UNIT UNIT PRICE AMOUNT

24.22.21.19.

WOMEN-OWNED SMALL BUSINESS (WOSB)

ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

(CONTINUED)

PAGE 2 OF112

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: ______________________________________________________

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f . TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

37. CHECK NUMBER

FINALPARTIALCOMPLETE

36. PAYMENT35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER

FINAL

33. SHIP NUMBER

PARTIAL

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 2/2012) BACK

Prescribed by GSA – FAR (48 CFR) 53.212

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

SEE SCHEDULE

20.

SCHEDULE OF SUPPLIES/ SERVICES

21.

QUANTITY UNIT

22. 23.

UNIT PRICE

24.

AMOUNT

19.

ITEM NO.

HT001118R0053

Section SF 1449 - CONTINUATION SHEET

ITEM NO SUPPLIES/SERVICES MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

0001 100 Lot Medical/Dental Assessment Services

FFP

Provice medical and dental assessment services for the Reserve Health Readiness Program II (RHRP II Bridge) in accordance with the Performance Work Statement.

FOB: Destination Q999

MAX

NET AMT

UNIT UNIT PRICE MAX AMOUNT

0002 100 Lot Travel Cost

COST

CONUS Travel / OCONUS Travel to Support CLIN 0001 Services

V999

MAX COST

UNIT UNIT PRICE MAX AMOUNT

0003 100 Lot Shipping GFE

COST

Shipping GFE Cost to Support CLIN 0001 Services

UNIT UNIT PRICE MAX AMOUNT

0004 100 Lot Shipping Other

COST

Shipping Other Cost to Support CLIN 0001 Services

V999

CLIN MINIMUM/MAXIMUM QUANTITY AND CLIN VALUE

The minimum quantity(s) and CLIN value(s) for all orders issued against the CLIN(s) on this contract shall not be less than the minimum quantity(s) and CLIN value(s) stated in the following table. The maximum quantity(s) and CLIN value(s) for all orders issued against the CLIN(s) on this contract shall not exceed the maximum quantity(s) and CLIN value(s) stated in the following table.

CLIN

MINIMUM

QUANTITY

MINIMUM

AMOUNT

MAXIMUM

QUANTITY

MAXIMUM

AMOUNT

0001 $1.00 $81,000,000.00 0002 $1.00 $81,000,000.00 0003 $1.00 $81,000,000.00 0004 $1.00 $81,000,000.00

CLIN DELIVERY/TASK ORDER MINIMUM/MAXIMUM QUANTITY AND CLIN ORDER VALUE

The minimum quantity and order value for the given Delivery/Task Order issued for this CLIN shall not be less than the minimum quantity and order value stated in the following table. The maximum quantity and order value for the given Delivery/Task Order issued for this CLIN shall not exceed the maximum quantity and order value stated in the following table.

CLIN

MINIMUM

QUANTITY

MINIMUM

AMOUNT

MAXIMUM

QUANTITY

MAXIMUM

AMOUNT

$1.00

$81,000,000.00

INSPECTION AND ACCEPTANCE TERMS

Supplies/services will be inspected/accepted at:

CLIN INSPECT AT INSPECT BY ACCEPT AT ACCEPT BY

0001 Destination Government Destination Government 0002 Destination Government Destination Government 0003 Destination Government Destination Government 0004 Destination Government Destination Government

DELIVERY INFORMATION

CLIN DELIVERY DATE QUANTITY SHIP TO ADDRESS DODAAC /

CAGE

0001 POP 01-DEC-2018 TO

31-MAY-2019

N/A DHA COMBAT SUPPORT AGENCY

MARK CHIN

7700 ARLINGTON BLVD

FALLS CHURCH VA 22042

703-681-8464

HT0073

0002 POP 01-DEC-2018 TO

31-MAY-2019

N/A (SAME AS PREVIOUS LOCATION)

0003 POP 01-DEC-2018 TO

N/A (SAME AS PREVIOUS LOCATION)

0004 POP 01-DEC-2018 TO

N/A (SAME AS PREVIOUS LOCATION)

PERFORMANCE WORK STATEMENT

Department of Defense Defense Health Agency – Performance Work Statement – Reserve Health Readiness Program-2 (RHRP-2) Bridge

Combat Support Public Health Division/Deployment Health Branch

Solicitation Number: HT0011-18-R-0053 Version: 4.0 Date: 19 November 2018

PART 1

1.0 GENERAL INFORMATION

1.1 This is a non-personal services contract to provide health readiness services to the Service Components (SC), which are composed of the Reserve Components (RC), Active Components (AC) and Department of Defense (DoD) civilians enabling the SCs to meet the necessary medical and dental standards and requirements essential in maintaining a deployable force.

1.2 Description of services/introduction: The contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform health readiness services as defined in this Performance Work Statement (PWS) except for those items specified as government furnished property and services. The contractor shall perform to the standards in this performance work statement.

1.3 Background: The RHRP has provided health readiness support services to the SCs since 2007. SCs require these medical and dental services to have a medically ready, deployable force. The dash-8 extension to the RHRP-2 contract currently provides these services and expires November 30, 2018. The RHRP-3 follow-on contract procurement is projected to be awarded in April 2019. The transition in for the RHRP-3 is up to 12 months, necessitating the bridge contract.

1.4 Objectives:

Provide health readiness services to Reserve Component and geographically remote Active Component Service members as well as certain DoD civilians which enable them to be deployable

Provide those services in every state, U.S. Territory, the District of Columbia and Germany in a quality, effective, and efficient manner meeting the requirements of the SCs and needs of the Service members

1.5 Scope: Reserve Health Readiness Program (RHRP) services which the contractor shall accomplish include immunizations, physical examinations, Periodic Health Assessments (PHA), Post-Deployment Health Reassessments (PDHRA), Mental Health Assessments (MHA), dental examinations and x-rays, dental treatment, laboratory services, occupational health services, and other services as required to satisfy SC health readiness needs.

The Contractor shall develop, administer, train, and coordinate a nationwide Integrated Network of private sector Health Care Providers (HCPs) used to provide health readiness services in support of the SC, shall obtain and distribute necessary supplies to all involved parties; and shall receive and process all medical documentation, paper and electronic, related to services delivered within this PWS.

These services are provided in every state, U.S. Territory, the District of Columbia, and Germany, in group events (gatherings of Service Members [SMs] for provision of services face-to-face) at SC-designated sites (e.g., Armories, drill halls), through the Contractor’s Call Center, and within the Integrated Network

1.6 Period of Performance (PoP): The period of performance is six-months, beginning December 1, 2018 and ending 31 May 2019. There is the potential in accordance with FAR clause 52.217-8 to exercise an additional 6-months, beginning 1 June 2019 and ending November 30, 2019.

1.6.1 Transition: Phase in/phase out period:

1.6.1.1 Phase in period. There will be no phase in period. The Bridge Contract will be awarded to the current RHRP-2 incumbent and expected to immediately continue services at the full performance level. No other entity is capable of performing these duties without a significant gap in health readiness service provision and large decrement in military readiness, neither of which are acceptable to DoD leadership. The contractor shall continue to meet all contract requirements from the outset of the Bridge Contract.

1.6.1.2 Phase out period. The period of time 90 days prior to the end of the award date. Phase out performance is defined as coordination with Government representatives and successor staff and management; review, evaluation and transition of current support services; transition of historic data to incoming contractor systems; transfer of all necessary documentation; transfer of Government Owned Equipment; and Government Owned Equipment inventory management assistance.

This 90 day period will run concurrently with the final days of the PoP.

1.7 Administrative specifications

1.7.1 Place of performance: The work shall be performed in all 50 States, U.S. Territories, the District of Columbia, Germany, and, if agreed to by the contractor, limited countries overseas.

1.7.2 Recognized Federal holidays: The contractor is required to work on Federal holidays.

New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day President’s Day Veteran’s Day Memorial Day Thanksgiving Day Independence Day Christmas Day

1.7.3 Hours of operation: The Contractor shall have the capabilities to conduct telephonic Mental Health Assessments and Post-Deployment Health Reassessments on a 24 hours/day, seven days/week basis. The medical readiness mission is a seven days/week enterprise with group events typically occurring over the weekend. The Contractor shall have a 24 hours/seven days a week (including federal holidays) toll free number and Call Center staffed by HCPs, BHSs, Military Benefits Advisors (MBAs), and administrative personnel who can interview, triage and refer SMs who call to accomplish MHA and PDHRA assessments. The Contractor shall provide a toll-free, dedicated customer service department and a dedicated scheduling line available M-F 8:00 am -11:00 pm Eastern Standard Time (EST) and Saturday 8:00 am – 4:00 pm EST to perform all appointment scheduling and customer service related services.

1.8 Contractor travel:

Arrangements for and costs of all travel, transportation, meals, lodging, and incidentals are the responsibility of the Contractor. Travel costs shall be incurred and billed in accordance with FAR Part 31. Costs for these expenses shall be reviewed, certified, and approved by the COR. All travel and transportation shall use commercial sources and carriers provided the method used for the appropriate geographical area results in reasonable charges to the Government. Costs for travel will be reimbursed only if that travel was for group events or at the request of the COR. The Government shall not pay for business class or first-class travel. Lodging and meals shall be reimbursed in accordance with regulations defined in FAR Part 31.

The Contractor shall not incur any of the following costs without prior written approval of the COR. Incurring such costs with the intent of claiming reimbursement as direct costs under this contract shall be at the Contractor’s own risk, if done without written authorization:travel for general, professional or scientific meetings and foreign travel.

1.9 Other Direct Costs (ODC): Not applicable.

1.10 Quality

1.10.1 Quality Control (QC): The contractor shall develop and maintain an effective quality control program to ensure services are performed in accordance with this PWS. The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The contractor’s quality control program is the means by which the work complies with stated requirements. The QCP is to be delivered within 30 days after contract award. After acceptance of the Quality Control Plan (QCP) the contractor shall receive the contracting officer’s (CO) acceptance in writing of any proposed change to its QC system. See Part 7, 7.6 Technical Exhibit 1 - Contract Data Requirements List (CDRL) A001.

1.10.2 Quality assurance: The government will evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan provides a systematic method for the Government to evaluate performance and to ensure that the contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.11 Security and Common Access Card (CAC) requirements: All security and CAC requirements are identified in the attachment found in Part 7, 7.4. Contractor personnel performing work must have and maintain the appropriate security and designation required. All work under this contract is unclassified.

1.11.1 The Automated Data Processing/Information Technology (ADP/IT) levels and position sensitivity designation for positions under this contract is:

1.11.1.1. ADP/IT II: Non-critical sensitive position

1.11.2 Cybersecurity Requirements:

1.11.2.1 Contractor Employees Who Require Access to Government Information Technology. All contractor employees requiring access to government information technology shall successfully complete the current DoD approved Cyber Awareness Challenge training prior to being granted access, and annually thereafter. This training takes approximately 30 – 60 minutes to complete and requires the student to pass a test at the conclusion. The official DoD certificate of completion must be presented to the COR. DoD Cyber Awareness Challenge must be taken utilizing the Defense Health Agency (DHA) Learning Management System , Joint Knowledge Online (JKO):

http://jko.jten.mil/mhs.

1.11.2.2 Contractor Employees Performing Cybersecurity / Cyberspace Functions shall comply with the requirements listed below:

1.11.2.2.1 Training: All contractor and associated subcontractor employees working Cybersecurity (Information Assurance (IA))/Cyberspace functions must comply with DoD training requirements in Department of Defense Directive (DoDD) 8140.01, and DoD 8570.01-M.

1.11.2.2.2 Certification: Per DoDD 8140.01, Defense Federal Acquisition Regulation Supplement (DFARS) 252.239-7001, contractor employees supporting Cybersecurity (Information Assurance)/Cyberspace functions shall be appropriately certified upon contract/task order award. The baseline certification as stipulated in DoD 8570.01- M must be completed prior to the beginning of their contract support services. In addition, the contractor shall comply with Computing Environment (CE) certification requirements as specified in the contract. CE certifications shall be obtained within the timelines specified in DoD 8570.01-M.

1.11.2.3 General Cybersecurity requirements – Information Systems: The contractor shall comply with DoDI

8582.01 "Security of Unclassified DoD Information on Non-DoD Information Systems" and “Cybersecurity” and National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53/53a and NIST SP 800-37, “Risk Management Framework (RMF) Guide for Applying the Risk Management Framework to Federal Information Systems, as well as emerging DoD Cybersecurity policy designed to address evolving threats and submit requirements contain in Contract Data Requirements List (CDRL) A002.

1.11.2.3.1 The contractor shall identify the security controls in accordance with Committee on National Security Systems (CNSS) Instruction No. 1253, “Security Categorization and Control Selection for National Security Systems” as outlined within NIST SP 800-171, based on the categorization of confidentiality, availability and integrity of the information type and information technology provided by the government.

1.11.2.3.2 The contractor shall implement security controls in accordance with NIST implementation and validation requirements specified in the NIST SP 800-37 Risk Management Framework (RMF).

1.11.2.3.3 The contractor shall configure the information system in accordance with Defense Information Agency (DISA) security technical implementation guides (STIGs).

1.11.2.3.4 The contractor shall ensure that the information system conforms to the requirements of DoDI 8551.01 “Ports, Protocols, and Services Management (PPSM)”.

1.11.2.3.5 The contractor shall ensure that the information system shall authenticate all entities as specified in DoDI

8520.03 “Identity Authentication for Information Systems” prior to granting access.

1.11.2.3.6 The contractor shall Public Key enable the information system, implementing digital signature and encryption requirements specified in DoDI 8520.02, “Public Key Infrastructure (PKI) and Public Key (PK) Enabling.”

1.11.2.3.7 The contractor will be responsible for compliance with the United States Cyber Command issuances and Information Assurance Vulnerability Management (IAVM) issuances by ensuring that the issuances are assessed, implemented and maintained throughout development and sustainment in accordance with specified timelines.

1.11.2.3.8 The contractor shall support reciprocity, by providing all NIST security documents directed information to the government.

1.11.2.3.9 The contractor shall implement system level protection and detection capabilities that are consistent with their contract for NIST Security requirements that meet DoD and DHA Cybersecurity Architectures.

1.11.2.3.10 The contractor shall self-certify that the information system is compliant with the applicable NIST security controls annually by submission of a Security Assessment Report (SAR) and security test plan for compliance of testing IA controls.

1.11.2.3.11 The contractor shall comply with the incident management requirements of Chairman of the Joint Chiefs of Staff Manual (CJCSM) 6510.01B, “Cyber Incident Handling Program”.

1.11.2.4 Reserved.

1.11.2.5 Commercial Cloud Computing Services:

1.11.2.5.1 Reserved.

1.11.2.5.2 Contractors contracting with (Commercial Cloud Computing Services) shall comply with NIST SP 800- 37 “RMF NIST SP 500-291 Cloud Computing Requirements, and DFARS 239.9902, Policy and responsibilities.

(DEVIATION 2015-O0011) DFARS Case 2013-D018, Interim Rule on Network Penetration Reporting and Contracting for Cloud Services and shall implement the requirements of the Defense Information Systems Agency (DISA) DoD Cloud Computing SRG.

1.11.2.5.3 To the maximum extent practicable, cloud computing services that are commercial items shall be acquired under the terms and conditions (e.g., license agreements, End User License Agreements (EULA). Terms of Service (TOS), or other similar legal instruments or agreements) customarily provided to the public, to the extent that such terms and conditions are consistent with Federal law and otherwise satisfy the Government’s needs, including those requirements specified in this section. Any applicable service provider terms and conditions shall be incorporated into the contract (e.g., by attachment or other appropriate mechanism).

1.11.2.5.4 The contracting officer shall not award a contract to acquire cloud computing services from any cloud service provider (e.g., contractor or subcontractor, regardless of tier), that has not been granted provisional authorization to provide the relevant cloud computing services in accordance with the Cloud Computing SRG (version in effect at time of contract award) found at http://iase.disa.mil/cloud_security/Pages/index.aspx. All necessary SRG requirements, including cloud access point connections and authorizations to operate, must be satisfied before the cloud computing service becomes operational.

1.11.2.5.5 Contractors contracting for Cloud services will only use cloud services that have been issued both a DoD Provisional Authorization by DISA and obtained an Authority to Operate (ATO) (Reference (f)) by the DHA Authorizing Official (AO).

1.11.2.5.6 Non-DoD cloud services hosting Controlled Unclassified Information (CUI) (Personally Identifiable Information (PII)) shall be connected to customers through a Cloud Access Point that has been approved by the DoD Chief Information Officer (CIO) and have a Computer Network Defense Service Provider (CND SP).

1.11.2.5.7 Cloud Service providers shall establish a security baseline in accordance with the Federal Risk Authorization and Management Program (FedRAMP) and achieve a FedRAMP (level 4-5) authorization to store/process DoD sensitive information within the Cloud Service Provider (CSP).

1.11.2.5.8 The contractor shall connect to customers through a DoD Cloud Access Point (CAP) for commercial cloud services hosting Controlled Unclassified Information

1.11.2.5.9 The contractor shall implement CNSSI 1253 Privacy Overlay for cloud services that contain PII/Protected Health Information (PHI).

1.11.2.5.10 The contractor is solely responsible for the cost associated with obtaining a FedRAMP Provisional Authorization (PA) to host Federal Government missions and obtaining a DoD Provisional Authorization to Operate (P-ATO).

1.11.2.5.11 The Contractor shall adopt and maintain administrative, technical, and physical safeguards and controls that are required for the security level and services being provided, in accordance with the Cloud Computing SRG, (version in effect at the time of contract award) found at http://iase.disa.mil/cloud_security/Pages/index.aspx. (Note:

the new cyber incident reporting requirements of SRG section 6.4 become enforceable by the Government upon the effective date of the information collection governing the new reporting requirements (see DFARS case 2013- D018).

1.11.3 Physical Security: The contractor shall be responsible for safeguarding all government equipment, information and property provided for contractor use.

1.11.4 Reserved.

1.11.5 Reserved.

1.11.6 PII/PHI, and Federal Information Requirements The contractor shall adhere to DHA Procedures, Guidance and Information 224.90.

1.12 Key personnel (Government): The following personnel are considered key personnel by the government:

Contracting Officer, Contracting Officer Representative, Alternate Contracting Officer Representative.

1.12.1 Key personnel (Contractor): The contractor shall provide a contract manager who shall be responsible for the performance of the work. The name of this person and an alternate who shall act for the contractor when the manager is absent shall be designated in writing to the CO. The contract manager or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. The contract manager or alternate shall be available 24 hours/day, seven days/week.

1.13 Reserved.

1.14 Government training: The Contractor shall ensure that all Contractor employees attend or successfully complete all mandatory Government training. The training typically encompasses matters of security and safety, and is provided during billable time at no cost to the Contractor.

1.15 Reporting

1.15.1 Contractor Manpower Reporting (CMR): The Office of the Secretary of Defense (OSD) Personnel and Readiness (P&R) operates and maintains a secure data collection site where the Contractor shall report Contractor manpower (including subcontractor manpower). The contractor shall completely fill in all the information in the format using the following web address http://www.ecmra.mil/.

1.15.1.1 As part of its submission, the Contractor shall provide the estimated total cost (if any) incurred to comply with this reporting requirement. Reporting period shall be the period of performance not to exceed 12 months ending September 30 of each government fiscal year and must be reported by 31 October of each calendar year.

Contractors may use a direct Extensible Markup Language (XML) data transfer to the database server or fill in the fields on the website. The XML direct transfer is a format for transferring files from a Contractor’s system to the secure website without the need for separate data entries for each required data element at the website. The specific formats for the XML direct transfer may be downloaded from the website.

1.15.1.2 Service portfolio groups are further define in DFARS PGI 237.102-74 Taxonomy for the acquisition of service and supplies and equipment.

1.15.1.3 Contractors shall direct questions to the help desk at: http://www.ecmra.mil/.

1.15.2 Reserved.

1.15.3 Contracting Officer Representative (COR): The COR will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract;

perform inspections necessary in connection with contract performance; maintain written and oral communications with the Contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs, specifications; monitor Contractor's performance and notifies both the CO and Contractor of any deficiencies; coordinate availability of government furnished property;

and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting contract.

1.15.4 Post award conference/periodic progress meetings: The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation Subpart 42.5. The CO, COR, and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. At these meetings the CO will apprise the contractor of how the government views the contractor's performance and the contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues.

These meetings shall be at no additional cost to the government.

PART 2

2.0 DEFINITIONS & ACRONYMS

2.1 Definitions:

2.1.1 Category D: Information Technology and Telecommunications Services (called D-Services)

2.1.2 Category R: Support (Professional/Administrative/Managements) Services (called R-Services)

2.1.3 Contracting Officer (CO): A person with the authority to enter into, administer, and/or terminate contracts and make related determinations and findings.

2.1.4 Contracting Officer’s Representative (COR): An individual, including a contracting officer’s technical representative (COTR), designated and authorized in writing by the contracting officer to perform specific technical or administrative functions. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.5 Nonpersonal services contract: a contract under which the personnel rendering the services are not subject, either by the contract’s terms or by the manner of its administration, to the supervision and control usually prevailing in relationships between the Government and its employees.

2.1.6 Quality Assurance Surveillance Plan (QASP): An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance. The Government may either prepare the quality assurance surveillance plan or require the offerors to submit a proposed quality assurance surveillance plan for the Government’s consideration in development of the Government’s plan.

2.1.7 Commander. The individual in charge of a military unit and designees.

2.1.8 Contact. Communication with another party through various means to include telephone, text, email, and other media generally accepted and used by the target audience.

2.1.9 Emergency. A significant occurrence or extraordinary event which requires immediate care or assessment because of an acute or unstable health condition, e.g., very high blood pressure, high risk behavioral health issues expressed by the SM or identified by healthcare professional, suicide risk, or if the SM is turned over to Command or sent to the VA or Emergency Department.

2.1.10 Face-to-face. An encounter when the individuals are physically in the presence of each other.

2.1.11 Group events. A gathering of SMs, typically at a government facility such as a drill hall or armory, where services are provided.

2.1.12 Health care personnel. Health care providers, nurses including LVNs, and civilian equivalent to military medics/corpsmen.

2.1.13 Licensed mental health professional. A psychologist, social worker, psychiatrist, psychiatric nurse practitioner, or other professional licensed at an independent level to provide behavioral health services who has been certified by taking the DoD training and passing the quiz to perform mental health assessments.

2.1.14 Person-to-person. Face-to-face, telephone, or video teleconference dialogue with an individual that is conducted in a private setting to foster trust and openness in discussing sensitive health concerns.

2.1.15 Unusual incident. An unusual incident is when during the course of provision of service something occurs that may have or will result in risks to health and safety or an event which could result in a legal claim or involvement of senior Government officials, e.g., SM fainting during a blood draw; all falls, accidents or injuries even if no significant injury occurred; medical errors made by the healthcare provider; or a SM stating she or he was going to complain to their Congressional representative.

2.2 Acronyms:

AFI Air Force Instruction AFRC Air Force Reserve Command AIS Automated Information System AKO Army Knowledge Online ANG Air National Guard AO Authorizing Official AR Army Regulation ARNG Army National Guard USAR US Army Reserve AC TPR Active Army Component TRICARE Prime Remote ATO Authority to Operate AVS Automated Voucher System BHS Behavior Health Specialist BUMEDINST Bureau of Medicine and Surgery Instruction BW Bitewing CAE Comprehensive Audio Exam CAOHC Committee for Accreditation in Occupational Hearing Conservation CAP Cloud Access Point CBRN Chemical Biological Radiological Nuclear CDRL Contract Data Requirement List CIO Chief Information Officer CJCSM Chairman of the Joint Chiefs of Staff Manual CND SP Computer Network Defense Service Provider CNSS Committee on National Security Systems CO Contracting Officer CONUS Continental United States (excludes Alaska and Hawaii) COR Contracting Officer Representative COTR Contracting Officer's Technical Representative CPR Cardiopulmonary Resuscitation CS Contract Specialist CSP Cloud Service Provider CSR Customer Service Representative CUI Controlled Unclassified Information CVSP Cardiovascular Screening Program DDS Doctor of Dental Surgery DEERS Defense Enrollment Eligibility Reporting System DENCAS Dental Common Access System DENCLASS Dental Classification System DFARS Defense Federal Acquisition Regulation Supplement DHA Defense Health Agency DHAP Deployment Health Assessment Program DISA Defense Information Systems Agency DLA Defense Logistics Agency DMD Doctor of Dental Medicine DO Doctor of Osteopathy DOD Department of Defense DoDI Department of Defense Instruction

DOEHRS-HC Defense Occupational and Environmental Health Readiness System – Hearing Conservation

DRC Dental Readiness Classification EHR Electronic Health Record (HRR, MHS GENESIS, AHLTA) EIT Electronic Information Technology EKG Electrocardiogram EULA End User License Agreements.

FAR Federal Acquisition Regulation FBS Fasting Blood Sugar FedRAMP Federal Risk Authorization and Management Program GFE Government Furnished Equipment GFI Government Furnished Information HCP Health Care Professional HIPAA Health Insurance Portability and Accountability Act HIT Health Information Technology HIV Human Immunodeficiency Virus HRR Health Record Repository iRAPT Invoicing, Receipt, Acceptance, and Property Transfer (formerly Wide Area Work Flow) IA Information Assurance IMR Individual Medical Readiness IRR Individual Ready Reserve IS Information System IAVM Information Assurance Vulnerability Management LOD Line of Duty LVN Licensed Vocational Nurse MBA Military Benefits Advisor MD Medical Doctor MDG Medical Group MDR Medical Department Representative MEB Medical Evaluation Board MEDPROS Medical Protection System MFR Marine Forces Reserve MHA Mental Health Assessment MHS Military Health System MMRB Military Medical Readiness Review Board MMSO Military Medical Support Office MODS Medical Occupational Data System MPR Monthly Progress Report MRO Medical Review Officer MRRS Medical Readiness Reporting System NDA Non-Disclosure Agreement NIOSH National Institute for Occupational Safety and Health NIST National Institute of Standards and Technology NP Nurse Practitioner MWDE MEDPROS Web Data Entry OCI Organizational Conflict of Interest OCONUS Outside Continental United States (includes Alaska and Hawaii) ODC Other Direct Costs OSHA Occupational Safety and Health Administration P-ATO Provisional Authorization to Operate PA Physician Assistant PDHRA Post Deployment Health Re-Assessment PERMS Permanent Electronic Record System PHA Periodic Health Assessment PHI Protected Health Information

PII Personally Identifiable Information PIMR Preventive Health Assessment and Individual Medical Readiness PIPO Phase In/Phase Out PK Public Key PKI Public Key Infrastructure PMO Program Management Office POC Point of Contact PoP Period of Performance PPSM Ports, Protocols, and Services Management PRS Performance Requirements Summary PULHES Physical capacity/stamina Upper extremities Lower extremities Hearing Eye Psychiatric PWS Performance Work Statement QA Quality Assurance QAP Quality Assurance Program QASP Quality Assurance Surveillance Plan QC Quality Control QCP Quality Control Plan RC Reserve Component RHRPMO Reserve Health Readiness Program Management Office RMF Risk Management Framework RN Registered Nurse SAR Security Assessment Report SC Service Component SM Service member SPRINT Speech Recognition In Noise Test SRTS Spectacle Request Transmission System SP Special Publication SRG Security Requirements Guide(s) STIG Security Technical Implementation Guide(s) STR Service Treatment Record TE Technical Exhibit TOS Terms of Service TPR TRICARE Prime Remote USAMMA U.S. Army Medical Materiel Agency VAERS Vaccine Adverse Event Reporting Systems VHA Veterans Health Administration

PART 3

3.0 GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3.1 Services: Not applicable.

3.2 Facilities: The Government will provide work space for group events.

3.3 Utilities: Not applicable.

3.4 Equipment: The Government will provide information system items when agreed to by the Government and it is in the Government’s best interest to do so.

3.5 Materials: Not applicable.

3.6 Government Furnished Property (GFP) – No new GFP will be provided on this bridge contract. This bridge contract will transfer the Attachment 5 document that specifies the GFP originally provided under the RHRP 2 contract (HT0011-13-D-0001). No new GFP will be provided or cataloged on this bridge contract.

PART 4

4.0 CONTRACTOR FURNISHED ITEMS AND SERVICES

4.1 General: The Contractor shall furnish all supplies, equipment, facilities and services required to perform work listed under Section 5 of this PWS.

4.2 Secret Facility Clearance: Not applicable.

4.3 Materials: The Contractor shall be responsible for providing all supplies needed to accomplish the PWS requirements except those the Government provides (flu and anthrax vaccines).

4.4 Equipment: The Contractor shall be responsible for providing all supplies and medical/dental equipment for the event process and not rely on or expect the SCs to provide any. Except as previously noted, all Contractor-provided supplies and equipment shall meet, at a minimum, current Occupational Safety and Health Administration (OSHA) standards at all times during performance of this contract. The Contractor shall provide sufficient IT resources needed for group events as well as that needed to accomplish the PWS requirements.

4.5 Facilities: The Contractor shall provide all facilities needed to accomplish the PWS requirements except those the Government provides for group events.

PART 5

5.0 SPECIFIC TASKS

☐ HIT:

☒ Non-HIT: Operations (J3), Public Health Division

5.1 Basic Services: The contractor shall provide the following services:

5.2 A Reserved

5.2 B Reserved

5.2 C.1.0 Reserved

5.2 C.2.0 CONTRACT ADMINISTRATION

5.2 C.2.1 Contract Management

The Contractor shall provide contract/project administration to ensure that tasks are performed efficiently, accurately, on-time, and in compliance with the requirements of this contract. Specifically, the Contractor shall designate a single manager to oversee this contract. The Government reserves the right to have the Contractor provide management plans as new services are developed or significant changes to the service delivery process is envisioned.

5.2 C.2.1.1 Non-Disclosure Agreement

Prior to performing work under the contract, the Contractor shall sign one copy of the non-disclosure agreement (Attachment 3) on behalf of their company and shall also ensure that all staff including all employees, subcontractors and consultants assigned to or performing under this PWS, execute, sign, and adhere to the terms of the non-disclosure agreement.

5.2 C.2.1.2 Reports

The Contractor can expect reports to evolve as the contract matures. The Contractor can expect at least three work days’ notice before a report is due unless there are extenuating circumstances, e.g., Congressional or senior DoD leadership request.

5.2 C.2.1.2.1 Monthly Progress Reports (MPR)

The Contractor shall submit a MPR (CDRL B001) of services provided, by the 15th of each month, and shall include at a minimum the following: command, provider name and site, individual names and services provided, and costs to RHRP from the Contractor. The MPR will outline expenditures, billing (purchase order detail), progress, status, and any problems/issues encountered performing this task. The Contractor shall submit a copy of the MPR electronically to the Contract Officer Representative (COR); (See Section G for address). As part of the MPR, the Contractor shall supply reports as required by the COR and SCs including but not limited to the number of services by service type and location (group event vs. in-clinic [i.e., within the Contractor network]) provided to members of each Component to include deployment limiting conditions requiring status action (USNR/MFR), identified with “P3 status” in PULHES who both do and do not meet Chapter 3 retention standards (ARNG/USAR/AC Army TPR);

PHAs where the SM was referred for follow-up and type (physical, behavioral, both) of referral discipline (to include discovered incomplete medical care actions resulting from Deployment Health Assessments or Line of Duty cases), PHAs identified with Deployment Limiting Conditions (USCG/USCGR) using ICD-9 code and condition description, the number of SMs who received immunizations to include number of immunizations given by type;

screened for vision with numbers by class assigned; screened for hearing with numbers by class assigned; drawn phlebotomy with number of blood draws by type; and completed dental screening with numbers by class assigned both for the current month and fiscal year to date by month, and a summary of any Unusual Incidents/Adverse Reactions/Emergent Referrals to include the action taken and Specialist/Consultation Referrals. The Contractor will provide other reports on a monthly basis to include but not be limited to procedure frequency and avoidable costs (no-shows/cancellations) (CDRL B001); Individual Medical Readiness (IMR) metrics (e.g., dental classification, PHA deployability) (CDRL B001); speed of data entry into SC databases (CDRL B001); customer satisfaction survey results including resolution of complaints (CDRL B001); accessibility to the Customer Service, PDHRA, and other service-related toll-free telephone lines (CDRL B001); the rapidity of response to SC requests for group events (CDRL B001); and adherence to report schedule (CDR B001) to the COR, who will forward aggregated results to the SC.

The customer satisfaction survey reports shall include a summary of all less than satisfactory responses and the resolution of those responses, including total number of less than satisfactory responses appropriately grouped into the following categories: PHA/IMR/Dental Group Event, PHA Call Center/In-Clinic, PDHRA Group Event, PDHRA/MHA Call Center, PHA, Medical, and Dental in-clinic services, and Point of Contact (POC) surveys for Group events for each of PDHRA, IMR, Dental, and PHA/IMR/Dental Services. The satisfaction survey categories shall include the total number of individual surveys returned. Additionally, the Contractor shall detail the aforementioned categories in terms of SC breakdown and shall have the capability to track services and complaints by provider and clinic.

5.2 C.2.1.2.2 Annual Summary Report

The Contractor shall provide an Annual Summary Report (CDRL B001 and B002) of services rendered by category, with an overview of the services provided throughout the contract period and shall include any requested changes for the future. This report shall provide a summary of the preceding contract period for services and charges using the same requirements as the MPR. The Contractor shall submit the Annual Summary Report in electronic form to the COR. The Contractor shall provide this report forty-five (45) Days After (DA) each contract year.

5.2 C.2.1.2.3 DoD Unusual Incidents/Adverse Reaction/Emergency Referral Report (CDRL B001)

The Contractor shall notify the COR within one working day of the contractor’s awareness of any incident that may have or will result in risks to health and safety or any event which could result in a legal claim or media coverage.

Legible notification must be made on DoD Unusual Incidents/Adverse Reaction Report (CDRL B001) which shall include client identity, provider identity and contact, location, date, time, circumstances, action, notifications and follow-up. The Contractor shall include a description of the service being provided at the time of the Unusual Incident/Adverse Reaction/Emergency Referral. An unusual incident is when during the course of provision of service something unusual occurs that may have or will result in risks to health and safety or any event which could result in a legal claim or media coverage, e.g., Service Member (SM) fainting during a blood draw, all falls, accidents or injuries even if no significant injury occurred, medical errors made by the healthcare providers, or a SM becoming extremely belligerent about a service and stating she or he was going to complain to their Congressional representative. The Vaccine Adverse Event Reporting System (VAERS) report is completed when an adverse reaction (e.g., rash) is possibly due to a vaccine. An Emergency Referral report is required when there is any significant occurrence or extraordinary event which requires immediate care or assessment because of an acute or unstable health condition, e.g., very high blood pressure, high risk behavioral health issues expressed by SM or identified by healthcare professional, suicide risk, and/or if the SM is turned over to Command, sent to the VA or Emergency Department, etc. In addition, the Contractor shall notify the SM’s command within one working day of the Contractor’s awareness of the incident. Listings of these reports will be included in the MPR.

5.2 C.2.1.2.4 SC-Specific Reports

SCs require reports detailing completed and to-be-completed activity on a monthly basis (CDRL B001).

5.2 C.2.1.2.5 Other Reports

As the contract evolves, the COR will require new or revised reports to better manage the program and assist the SCs. These reports shall be based on data the Contractor currently obtains and the format and timing of the reports will be determined by the COR and the Contractor.

5.2 C.2.1.2.6 Training

The Contractor shall provide for the Government’s approval materials to achieve the training required within this PWS and not later than 10 working days prior to implementation of new service processes or requirements.

Training materials developed for the purpose of this contract shall be the property of the Government.

5.2 C.2.1.3 Reserved

5.2 C.2.1.4 Quality Control Plan

The Contractor shall establish, maintain, and submit a prospective Quality Control Plan (QCP) with proposal submission and provide a finalized plan within thirty (30) days of contract award (CDRL A001). Following Government approval of this plan, the Contractor shall implement the plan, ensuring that all Contractor activities and products are consistent with the plan. The Contractor shall submit designated and accepted management reports on a monthly basis following contract award. A QCP is an organized written document which outlines the Contractor’s own steps to control the quality of the output, ensure conformance to contract requirements and reasonable standards of healthcare, and seek improvements in program effectiveness, efficiency, and quality. The plan shall include initiatives and self-reviews to ensure that services are provided on a timely and quality basis, that network HCPs meet contract requirements, that records are properly maintained, that Government databases are updated quickly and accurately, and the level of service remains high. The plan shall also include government-approved satisfaction surveys made available to SMs upon completion of the service and the lead unit POC for group events.

5.2 C.2.1.5 Post Award Conference

A post award conference shall be required within ten (10) days of award of contract to clarify details of the contract and to work out a transition plan (CDRL A003).

5.2 C.2.2 Tasks at no charge

The Contractor shall not charge the government for any service provided in error (e.g., incorrect immunization) or not provided due to Contractor error (e.g., malfunction of equipment or not delivering needed resources).

5.2 C.2.2.1 Task 1 – General Requirements

5.2 C.2.2.1.1 Privacy and Security

The Contractor shall ensure that all findings are clearly recorded on Government or other approved forms, and are protected by Privacy Act of 1974 and Health Insurance Portability and Accountability Act of 1996 (HIPAA) mandated safeguards to ensure confidentiality of health information. The Contractor shall work with the SCs and the SC units to maximize privacy when sensitive medical information may be shared during group events.

5.2 C.2.2.1.2 Licensure and Certifications

5.2 C.2.2.1.2.1 General Licensure and Certifications

The Contractor shall ensure all providers (Physicians, Dentists, Nurse Practitioners, Physician Assistants, Advance Practice Nurses, Advance Practice Registered Nurses, Audiologists, Optometrists, and Behavioral Health Specialists) maintain at least minimum amounts of malpractice insurance as required by state licensing requirements. The Contractor shall ensure that all providers, technicians and other HCPs performing services under this agreement have current licenses, registrations, and/or certifications according to industry standard and as required for the specific state, commonwealth, district or Territory in which they are providing contract services. If services are provided in another country (e.g., Germany), the Contractor shall ensure all providers have a current U.S. license, registrations, and/or certifications to practice at an independent level as well as Defense Base Overseas Insurance. The Contractor shall ensure that all HCPs have a current certification in basic life support or cardiopulmonary resuscitation (CPR).