HT940624Q0007-P0002.pdf

SEE ADDENDUM

(No Collect Calls)

HT940624Q0007 09-Nov-2023

b. TELEPHONE NUMBER

757-953-4038

8. OFFER DUE DATE/LOCAL TIME

04:00 PM 17 Nov 2023

5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA – FAR (48 CFR) 53.212

(TYPE OR PRINT)

(SIGNATURE OF CONTRACTING OFFICER)

ADDENDA ARE

26. TOTAL AWARD AMOUNT (For Gov t. Use Only )

23.

CODE 10. THIS ACQUISITION IS

SUCH ADDRESS IN OFFER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT

BELOW IS CHECKED

TELEPHONE NO.

HT94069. ISSUED BY

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a. UNLESS BLOCK

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME

MELISSA PEREGRINO-WHITE

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NUMBER

(TYPE OR PRINT)

30b. NAME AND TITLE OF SIGNER 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a.UNITED STATES OF AMERICA

0 27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1. 52.212-4. FAR 52.212-3. 52.212-5 ARE ATTACHED.

25. ACCOUNTING AND APPROPRIATION DATA

1. REQUISITION NUMBER

20.

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

0012034792

ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

. YOUR OFFER ON SOLICITATION

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

% FOR:SET ASIDE:UNRESTRICTED OR X

SMALL BUSINESSX

17a.CONTRACTOR/ CODE FACILITY

OFFEROR CODE

DHA CONTRACTING OFFICE TIDEWATER HT9406

7700 ARLINGTON BLVD

FALLS CHURCH VA 22042

18a. PAYMENT WILL BE MADE BY CODE

RATED ORDER UNDER

DPAS (15 CFR 700)

13a. THIS CONTRACT IS A

13b. RATING

CODE15. DELIVER TO CODE HT0242 16. ADMINISTERED BY

12. DISCOUNT TERMS11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

14. METHOD OF SOLICITATION

RFQ IFB RFPX

NAV MED CNT PORTSMOUTH VA - MM

NAV MED CNT PORTSMOUTH VA - MM

ATTN SUPPLY OFFICER BLDG 250

54 LEWIS MINOR STREET

PORTSMOUTH VA 23708-2297

TEL: FAX:

FAX:

TEL: SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

8(A)

HUBZONE SMALL

BUSINESS

SIZE STANDARD:

$19,000,000

NAICS:

238210

OFFER DATED

29. AWARD OF CONTRACT: REF.

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

EMAIL:

TEL:

31c. DATE SIGNED

SEE SCHEDULE

SCHEDULE OF SUPPLIES/ SERVICESITEM NO. QUANTITY UNIT UNIT PRICE AMOUNT

24.22.21.19.

WOMEN-OWNED SMALL BUSINESS (WOSB)

ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

(CONTINUED)

PAGE 2 OF37

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: ______________________________________________________

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f . TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

37. CHECK NUMBER

FINALPARTIALCOMPLETE

36. PAYMENT35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER

FINAL

33. SHIP NUMBER

PARTIAL

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 2/2012) BACK

Prescribed by GSA – FAR (48 CFR) 53.212

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

SEE SCHEDULE

20.

SCHEDULE OF SUPPLIES/ SERVICES

21.

QUANTITY UNIT

22. 23.

UNIT PRICE

24.

AMOUNT

19.

ITEM NO.

HT940624Q0007

Section A - Solicitation/Contract Form

SECTION A

VENDOR TO COMPLETE THE FOLLOWING:

Vendor Name: ___________

CAGE:

UEI:

Vendor Point of Contact:

Vendor Address: __________________________________________________

Vendor Phone:

Vendor E-Mail:

Vendor to reference Open Market Quote HT940624Q0007 on all correspondence relating to this Request For Quote (RFQ).

Defense Health Agency Contracting Agency Point of Contact:

Melissa Peregrino E-Mail: melissa.peregrino-white.civ@mail.mil (questions via e-mail only)

Payment in Arrears (Check One): ___ Monthly ___ Quarterly ___Semi-Annually ___Annually

Note: Vendor will be required to provide billing electronically via the WAWF Electronic Invoicing Method. For additional information, a review of the following websites may be required: https://wawf.eb.mil http://wawftraining Email: usn.detrick.navmedlogcomftdmd.list.nmlc-wawf@mail.mil

PROMPT PAYMENT: For Prompt Payment Act purposes, this contract is:

Subject to the 7-calendar day constructive acceptance period.

Government reserves the right to make award based on the “Best Value” proposed for this requirement.

Vendors will be evaluated based on the factors listed below (in order of importance).

1. Past Performance

2. Technical Capability

3. Pricing

Vendor MUST complete RFQ AND include information for the evaluation factors above, meet minimum requirements in Section C and proof of pricing, i.e., past invoices.

Section B - Supplies or Services and Prices

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 1 Job Category 6 Data Drops Installation

FFP

Installation of Category 6 Data Cables on an average distance of 175 feet for NMRTC Portsmouth and its outlying clinics. Pricing to include all patch cords for computer hook-ups, parts and labor. Not to exceed 448 drops. See Section C for Performance Work Statement.

FOB: Destination

PURCHASE REQUEST NUMBER: 0012034792

DA10

NET AMT

Section C - Descriptions and Specifications

SECTION C

PERFORMANCE STATEMENT OF WORK

INSTALLATION OF DATA DROPS

NMCP AND ALL OUTLYING CLINICS

1.1 SCOPE

The contractor is responsible to submit a package for installation of Category 6e Data drops (plenum rated) at Naval Medical Center Portsmouth (NMCP) and outlining clinics. This package must include a cable plan and equipment listing. This design shall include any changes/ recommendations required to interface with existing government-provided equipment. All cabling that installed must be fully tested/operational prior to government acceptance.

Government will only accept new equipment. No used or refurbished equipment will be accepted. Listings of requirements for this contract are included in this performance statement of work.

1.2 ASSUMPTIONS

The following assumptions are understood between NMCP Communications and the contractor in the preparation of the estimate contained in this PSOW:

The contractor is responsible to provide the Government with the necessary environmental requirements for equipment supplied as part of this PSOW.

Contractor is to provide all equipment, material handling equipment (i.e., pallet jacks); labor, communications, and anything else required to fulfill this contract in a turn-key manner.

Installer shall guarantee to repair or replace defective products free of charge for two (2) years from the date of installation.

All cables will be run in existing cable trays if available. Any deviation from this must be approved by the NMCP Communications Manager before installation. Contractor will make use of the existing junction boxes and existing conduit when available. All call junction boxes must be properly drilled and sleeved to be properly closed and secured after installation.

All cables, when penetrating a firewall, will be sleeved, and sealed with fire stopping and will not exceed the 80% fill rate in accordance with the National Electric Code (NEC). In addition, cabling will be run in accordance with ANSI/EIA/TIA standards to ensure cabling is not run over top of lighting or violating any other industry standard.

All fiber will be 100% tested to ANSI/TIA/EIA standards upon completion of installation.

Once installation and testing are complete, the contractor shall contact the Communications Contract Officer (Laura J. Williams) at 757-953-5993 for inspection.

Requests for building reports and/or other facility-related questions may be directed to Telecommunication Department Head (Bobby Washington) at 757-953-3003.

The contractor shall have a service location on site within a 50-mile radius of NMCP to be able to respond on-site within 4 hours of an initial service call if needed.

1.2 RESPONSIBILITIES

To successfully complete this project, close teamwork between the Government (Communications and Networking Office) and the contractor’s team is essential. Government agrees to a timely assignment of personnel to positions designated as governmental in this PSOW and to acceptance of activities and responsibilities associated with them.

a. Contractor’s Project Manager

The contractor will designate an onsite Project Manager and alternate in writing and include work history with the bidding documents.

The contractor’s project manager is responsible for:

Directing all project activities Preparation of a project schedule Scheduling and project controls Preparing status reports Other activities as specified in this PSOW.

b. Government Project Manager

The Government will designate a project manager for this task. The Project Manager (Network Manger) will have full authority to act on behalf of the Communications and Networking Office, with respect to:

Management of and schedule for the project.

Accepting project deliverables.

Arranging interviews, facility and base access and escorts, if required.

Working with the Communications and Networking to insure there is an efficient exchange of information and that important and timely decisions are made.

Provide signature of approval and acceptance.

Other activities as specified in this PSOW.

The Project Manager cannot authorize any additional obligations of funds.

1.3 PROJECT CONTROLS

The project schedule will identify and describe the tasks and activities required to produce the deliverables specified herein. The contractor will provide an initial implementation plan for the project. The contractor will provide necessary detail to the schedule to further identify task requirements in support of the PSOW. The project schedule shall be reviewed and updated on a weekly basis. Any changes shall be documented in a status report.

1.4 TASKS

DATA DROPS: Provide all materials, labor and equipment to complete the required task. To include but not limited to: cable, connectors, wall plate / outlet (modular jack) and 2 patch cables (15’ patch cord for modular jack – computer / printer and a 5’ cable for installation within the communication closet). All cable to be rated as a minimum Category 6e plenum rated, twisted 4-pair, UTP, 100 Ohm, 24 AWG, 500 MHz (minimum) cable. Additionally, vendor is to provide any required travel and shipping.

Individual request for work will be provided by the NMCP Communications Department to include Network team (formally MID Network Team) or from the NMCP Contracts Office. Simple request (1-2 drops) may be requested via a verbal request. A complex request (3 or more drops) will be issued via a written request. An email to the contractor project manager will be the preferred method of notification.

The contractor shall not accept request for service from any others.

Selected vendor shall have a minimum of 5 years’ experience in the installation and testing of data cabling with a minimum of 2 years of current (within past 3 years) experience. The contractor shall have the legal right to perform work in the state of Virginia (to include local requirements for performance of work within clinics located in commercial buildings). Experience shall be significant to the contractor’s business model (ie: min 25% of contractor’s workload). The Government reserves the right to consider a contractor technically unacceptable if data support work is a minor component to the contractor’s business model / structure. The Government reserves the right to verify work experience prior to award and at any time after award.

All contractor personnel shall be neat and presentable while on site at NMCP. All personnel shall be clearly identified as contractor personnel via the display of a photo ID and a wearable contractor identifier to include but not limited with a shirt printed with contractor information or a visible “name tag” with company information.

Protect Government facilities / building providing “touch-up” repairs of any damaged walls, ceilings floors etc. Touch up repairs include but not limited to patching and painting as required (work area only).

Additionally, vendor shall be required to repair / replace ceiling tiles as required. If there is facility damage in the proposed work area, vendor is to note this to the Government in writing 24-hours in advance of work. The contractor will be required to provide a daily clean-up of all work areas to include the removal off-site of any generated debris.

All cabling is to be installed in existing cable trays where available. Cabling will not be allowed to be strapped, wrapped, or otherwise attached to plumbing piping (to include fire sprinkler) and meets NFPA 101, 25 and 13 requirements. Cabling must be segregated from high voltage electrical cabling. Exposed cabling will not be allowed (outside mechanical spaces) unless approved in advance in writing by the Government. In the event that cable is required in a public area, vendor shall as a minimum run cable in EMT (electrical metallic tubing). Contractor will make use of the interstitial, existing conduits and adding to the current data jacks where possible. Cabling shall be installed in walls, ceiling, and floor cavities to include mechanical spaces / rooms. Cabling that penetrates a fire wall / barrier shall be installed in a properly drilled and installed sleeve. Penetrations and cabling shall be sealed with fire stopping materials and shall not exceed 80% fill rate in accordance with the National Electric Code (NEC). All cabling must in addition be installed per ANSI/EIA/ TIA standards.

No cables will be run closer than 3 feet to any electrical cabling and will not cohabitate with electrical runs in modular furniture or conduits leading from the overhead. The generally accepted color of all jacks and exposed equipment shall be “ivory”. Vendor shall maintain/match this colors scheme (ie: all jacks are to be “ivory”).

Unless otherwise approved in writing from the NMCP Communications Department: Installed cabling shall not exceed 90 meters (295 feet) and total length to include 18” concealed courtesy loop and 10’ service loop shall not exceed 95 meters (327 feet). UTP cable jacketing will be stripped IAW ANSI/EIA/TIA 568B standards. In addition, the cabling will be run IAW ANSI/EIA/TIA standards to ensure cabling is not run over top of lighting or violating any other set standards. The cable backbone will be secured to the building structure every ten feet with proper fasteners.

Installed cables shall not bend beyond the specifications of the manufacturer nor bend beyond the Commercial Building Telecommunications Cabling Standard (TIA/EIA-568-B.1 Chap 10.2.1 and TIA/EIA B.1-1 Addmum).

Data cables shall be terminated on a government provided Cat 6 patch panel (with blue modular jacks). If panel is not available, contractor must have the ability to provide a modular Panduit or Leviton with Cat 6 jacks. The use of a contractor provided patch panel will be negotiated as a separate order on an as needed basis.

Horizontal cable runs (“home runs” between the user wall plate and communications closet) will terminate at the user end with blue RJ-45 angled modular jacks (Panduit, Leviton or Ortronics when required). The outlets are required to be flush or surface mounted boxes with single, dual, triple, or quad face plates.

Surface mounted boxes will be used only where flush mounted boxes are not feasible.

All cabling fittings and installed items (outlets / modular jacks) shall be compatible with currently installed equipment at NMCP and be considered as typical, commercially available equipment.

All installed cables / circuits shall be 100% tested to EIA/TIA standards upon completion of installation.

Drops will be labeled in accordance with site labeling standards. The standard used at Naval Medical Center Portsmouth is… Communications Closet name and Drop number. For example, 2A01-005, would be a properly labeled drop. All drops will have the room, outlet, and drop number on both ends of each cable. The same labeling will be found on the wall plate as well as the patch panel in the communication closet. When testing, the cabling, the drops and the patch panel in the communications closet will be checked for correct labeling and accuracy.

Prior to start of work and at the completion of work, contractor is to notify the NMCP Telecommunications Department @ 757-953-0195. The Government reserves the right to inspect work at any time during the install process. Contractor shall expect the Government to be on site for a minimum of 10% of all drop testing. Additionally, the contractor shall provide the Government with a schedule of work a minimum of 2-days in advance of work (exception = priority request).

For the replacement of existing cables, contractor shall remove old cabling 100% and document the removed drop number on the contractor work report. Contractor required to fill any voids caused by the removal of old cabling including the installation of fire stop materials.

Contractor to provide installation of cabling as soon as possible after notification of work request but no later than 10 days after notice. The Government reserves the right to request next day service for priority request. The contractor shall expect app 10% of all request to be considered as priority.

Contractor shall provide a single point of contact (POC) for work performance. POC shall have the right to direct contractor work and to answer technical questions from the Government.

All work shall be accepted by the NMCP Communications Department. Work shall be 100% complete before payment will be released.

1.5 DELIVERABLES

This paragraph describes the content of and sets the schedule for delivery of various documents throughout the project. Listed documents shall be delivered to the designated Government Project Manager for approval during the performance of this project.

Project Schedule/Implementation Plan Status report Design drawings

The contractor shall provide a project schedule/implementation plan immediately after award. The contractor shall provide the necessary labor and manpower to successfully follow the intended plan. Contractor will provide site complete test documentation as well as a cable running list. The cable running list will include building number, floor number, room number, drop number and drop location. Final system drawings will be provided before vendor turn-over.

1.6 ACCEPTANCE

Satisfactory completion of all items in the Implementation Plan and acceptance by the Government Project Manager will designate satisfactory completion of the project.

The contractor will demonstrate to the government project manager that all components and features are fully functional and operational before the system is accepted.

The government will accept the room upon completion, no phasing. All design drawings and source code shall become property of NMCP upon completion of the project.

There shall be no provision for additional charges.

1.7 DEPENDENCIES

a. Equipment – All on-site work for this project will be performed in the above-mentioned areas. The Government Project Manager is responsible for coordinating all network-related procurement and scheduling of the room for this project. The contractor will ensure timely delivery of all equipment ordered through this contract.

b. Facilities – The Communications and Networking Office is responsible for providing the contractor with facilities and system access. Govt will be responsible for handling all security-related issues pertained to this project, including providing escorted or unescorted access to the base/building where the team will be working. The contractor is responsible for removing all contractor generated trash and debris from the installation. Trash and debris is defined as boxes, packing, etc., from all new equipment purchased and installed under this PSOW.

c. Project Personnel – Networking personnel will be the Project Manager and primary point of contact for the contractor’s personnel. They will work to coordinate issues as necessary to include:

Communications, issue resolution and general project decision making.

Designated Networking staff will support deployment and training phases.

d. Character of Work and Workforce – The work must conform in all respects with the requirements of the contract.

A strictly first-class operation will be insisted upon. No incompetence or carelessness, no drugs and/or use of alcohol will be tolerated.

The contractor’s workforce shall be identifiable by picture identification badges which shall be always worn and visible on the upper body while on site and will be required to fill out a Criminal History Record Request supplied by the Communications Office for each employee. These must be submitted five business days prior to employees reporting on site. After five business days the Government will issue a temporary security badge and car sticker for the period of employment on site. The Navy reserves the right to approve employees working on site. Reasons for disapproval are: Any felony conviction within the last 10 years, any larceny misdemeanor in the last 10 years or any other reasons at the Governments sole discretion.

Care of Government Facilities and Property – The contractor shall be responsible for the care of the premises. The contractor shall not damage Government property or facilities during the performance of this contract. The contractor shall furnish padding and other protective materials as necessary to preclude damage to hallways, doors, door frames, elevators and building fixtures. The Government may reject any moving equipment at its sole discretion.

Cleaning Up – At the completion of work and before acceptance and final payment, the contractor shall remove all related rubbish and equipment including available cartons, packing materials, tools, etc. All Government property shall remain as it was prior to installation beginning. If damage occurs, the contractor is responsible to restore and/or replace in a suitable manner any property both public and private that has been damaged or removed in the performance of this contract.

NMCP and Clinic Command Regulations – All Contractor personnel must abide by the rules and regulations while in the above-mentioned areas. These rules include no firearms, no smoking or tobacco chewing in any government building, no food or beverages except in authorized areas, minimal noise levels and allowing corridor access to non-move involved patient/personnel/carts.

(End of PWS)

Contractor Unclassified Access to Federally Controlled Facilities, Sensitive Information, Information Technology (IT) Systems or Protected Health Information (Jan 2017)

Homeland Security Presidential Directive (HSPD)-12, requires government agencies to develop and implement Federal security standards for Federal employees and contractors. The Deputy Secretary of Defense Directive-Type Memorandum (DTM) 08-006 – “DoD Implementation of Homeland Security Presidential Directive – 12 (HSPD- 12)” dated November 26, 2008 (or its subsequent DoD instruction) directs implementation of HSPD-12. This clause is in accordance with HSPD-12 and its implementing directives.

APPLICABILITY

This text applies to contractor employees requiring physical access to any area of a federally controlled base, facility or activity and/or requiring access to a DoN or DoD computer/network/system to perform certain unclassified sensitive duties. This clause also applies to contractor employees who access Privacy Act and Protected Health Information, provide support associated with fiduciary duties, or perform duties that have been identified as National Security Position, as advised by the command security manager. It is the responsibility of the responsible security officer of the command/facility where the work is performed to ensure compliance.

Each contractor employee providing services at a Navy Command under this contract is required to obtain a Department of Defense Common Access Card (DoD CAC). Additionally, depending on the level of computer/network access, the contract employee will require a successful investigation as detailed below.

ACCESS TO FEDERAL FACILITIES

Per HSPD-12 and implementing guidance, all contractor employees working at a federally controlled base, facility or activity under this clause will require a DoD CAC. When access to a base, facility or activity is required contractor employees shall in-process with the Command’s Security Manager upon arrival to the Command and shall out-process prior to their departure at the completion of the individual’s performance under the contract.

ACCESS TO DOD IT SYSTEMS

In accordance with SECNAV M-5510.30, contractor employees who require access to DoN or DoD networks are categorized as IT-I, IT-II, or IT-III. The IT-II level, defined in detail in SECNAV M-5510.30, includes positions which require access to information protected under the Privacy Act, to include Protected Health Information (PHI).

All contractor employees under this contract who require access to Privacy Act protected information are therefore categorized no lower than IT-II. IT Levels are determined by the requiring activity’s Command Information Assurance Manager.

Contractor employees requiring privileged or IT-I level access, (when specified by the terms of the contract) require a Single Scope Background Investigation (SSBI) or T5 or T5R equivalent investigation , which is a higher level investigation than the National Agency Check with Law and Credit (NACLC)/T3/T3R described below. Due to the privileged system access, an investigation suitable for High Risk national security positions is required. Individuals who have access to system control, monitoring, or administration functions (e.g. system administrator, database administrator) require training and certification to Information Assurance Technical Level 1, and must be trained and certified on the Operating System or Computing Environment they are required to maintain.

Access to sensitive IT systems is contingent upon a favorably adjudicated background investigation. When access to IT systems is required for performance of the contractor employee’s duties, such employees shall in-process with the Navy Command’s Security Manager and Information Assurance Manager upon arrival to the Navy command and shall out-process prior to their departure at the completion of the individual’s performance under the contract.

Completion and approval of a System Authorization Access Request Navy (SAAR-N) form is required for all individuals accessing Navy Information Technology resources. The decision to authorize access to a government IT system/network is inherently governmental. The contractor supervisor is not authorized to sign the SAAR-N;

therefore, the government employee with knowledge of the system/network access required or the COR shall sign the SAAR-N as the “supervisor”.

The SAAR-N shall be forwarded to the Command’s Security Manager at least 30 days prior to the individual’s start date. Failure to provide the required documentation at least 30 days prior to the individual’s start date may result in delaying the individual’s start date.

When required to maintain access to required IT systems or networks, the contractor shall ensure that all employees requiring access complete annual Information Assurance (IA) training, and maintain a current requisite background investigation. The Contractor’s Security Representative shall contact the Command Security Manager for guidance when reinvestigations are required.

INTERIM ACCESS

The Command's Security Manager may authorize issuance of a DoD CAC and interim access to a DoN or DoD unclassified computer/network upon a favorable review of the investigative questionnaire and advance favorable fingerprint results. When the results of the investigation are received and a favorable determination is not made, the contractor employee working on the contract under interim access will be denied access to the computer network and this denial will not relieve the contractor of his/her responsibility to perform.

DENIAL OR TERMINATION OF ACCESS

The potential consequences of any requirement under this clause including denial or termination of physical or system access in no way relieves the contractor from the requirement to execute performance under the contract within the timeframes specified in the contract. Contractors shall plan ahead in processing their employees and subcontractor employees. The contractor shall insert this clause in all subcontracts when the subcontractor is permitted to have unclassified access to a federally controlled facility, federally-controlled information system/network and/or to government information, meaning information not authorized for public release.

CONTRACTOR’S SECURITY REPRESENTATIVE

The contractor shall designate an employee to serve as the Contractor’s Security Representative. Within three work days after contract award, the contractor shall provide to the requiring activity’s Security Manager and the Contracting Officer, in writing, the name, title, address and phone number for the Contractor’s Security Representative. The Contractor’s Security Representative shall be the primary point of contact on any security matter. The Contractor’s Security Representative shall not be replaced or removed without prior notice to the Contracting Officer and Command Security Manager.

BACKGROUND INVESTIGATION REQUIREMENTS AND SECURITY APPROVAL PROCESS FOR

CONTRACTORS ASSIGNED TO NATIONAL SECURITY POSITIONS OR PERFORMING SENSITIVE

DUTIES

Navy security policy requires that all positions be given a sensitivity value based on level of risk factors to ensure appropriate protective measures are applied. Contractor employees under this contract are recognized as Non- Critical Sensitive [ADP/IT-II] positions when the contract scope of work require physical access to a federally controlled base, facility or activity and/or requiring access to a DoD computer/network, to perform unclassified sensitive duties. This designation is also applied to contractor employees who access Privacy Act and Protected Health Information (PHI), provide support associated with fiduciary duties, or perform duties that have been identified as National Security Positions. At a minimum, each contractor employee must be a US citizen and have a favorably completed NACLC or T3 or T3R equivalent investigation to obtain a favorable determination for assignment to a non-critical sensitive or IT-II position. The investigation consists of a standard NAC and a FBI fingerprint check plus law enforcement checks and credit check. Each contractor employee filling a non-critical sensitive or IT-II position is required to complete:

SF-86 Questionnaire for National Security Positions (or equivalent OPM investigative product) Two FD-258 Applicant Fingerprint Cards (or an electronic fingerprint submission) Original Signed Release Statements

Failure to provide the required documentation at least 30 days prior to the individual’s start date shall result in delaying the individual’s start date. Background investigations shall be reinitiated as required to ensure investigations remain current (not older than 10 years) throughout the contract performance period. The Contractor’s Security Representative shall contact the Command Security Manager for guidance when reinvestigations are required.

Regardless of their duties or IT access requirements ALL contractor employees shall in-process with the Command’s Security Manager upon arrival to the command and shall out-process prior to their departure at the completion of the individual’s performance under the contract. Employees requiring IT access shall also check-in and check-out with the Navy Command’s Information Assurance Manager. Completion and approval of a System Authorization Access Request Navy (SAAR-N) form is required for all individuals accessing Navy Information Technology resources. The SAAR-N shall be forwarded to the Navy Command’s Security Manager at least 30 days prior to the individual’s start date. Failure to provide the required documentation at least 30 days prior to the individual’s start date shall result in delaying the individual’s start date.

The contractor shall ensure that each contract employee requiring access to IT systems or networks complete annual Information Assurance (IA) training, and maintain a current requisite background investigation. Contractor employees shall accurately complete the required investigative forms prior to submission to the Command Security Manager. The Command’s Security Manager will review the submitted documentation for completeness prior to submitting it to the Office of Personnel Management (OPM); Potential suitability or security issues identified may render the contractor employee ineligible for the assignment. An unfavorable determination is final (subject to SF- 86 appeal procedures) and such a determination does not relieve the contractor from meeting any contractual obligation under the contract. The Command’s Security Manager will forward the required forms to OPM for processing. Once the investigation is complete, the results will be forwarded by OPM to the DoD Central Adjudication Facility (CAF) for a determination.

If the contractor employee already possesses a current favorably adjudicated investigation, the contractor shall submit a Visit Authorization Request (VAR) via the Joint Personnel Adjudication System (JPAS) or a hard copy VAR directly from the contractor’s Security Representative. Although the contractor will take JPAS “Owning” role over the contractor employee, the Command will take JPAS "Servicing" role over the contractor employee during the hiring process and for the duration of assignment under that contract. The contractor shall include the IT Position Category per SECNAV M-5510.30 for each employee designated on a VAR. The VAR requires annual renewal for the duration of the employee’s performance under the contract.

(End of clause)

Section E - Inspection and Acceptance

INSPECTION AND ACCEPTANCE TERMS

Supplies/services will be inspected/accepted at:

CLIN INSPECT AT INSPECT BY ACCEPT AT ACCEPT BY

0001 Destination Government Destination Government

Section F - Deliveries or Performance

DELIVERY INFORMATION

CLIN DELIVERY DATE QUANTITY SHIP TO ADDRESS DODAAC /

CAGE

0001 POP 01-DEC-2023 TO

30-NOV-2024

N/A NAV MED CNT PORTSMOUTH VA - MM

NAV MED CNT PORTSMOUTH VA - MM

ATTN SUPPLY OFFICER BLDG 250

54 LEWIS MINOR STREET

PORTSMOUTH VA 23708-2297

FOB: Destination

HT0242

CLAUSES INCORPORATED BY REFERENCE

52.242-15 Stop-Work Order AUG 1989

Section G - Contract Administration Data

CLAUSES INCORPORATED BY FULL TEXT

252.232-7006 WIDE AREA WORKFLOW PAYMENT INSTRUCTIONS (JAN 2023)

(a) Definitions. As used in this clause—

“Department of Defense Activity Address Code (DoDAAC)” is a six position code that uniquely identifies a unit, activity, or organization.

“Document type” means the type of payment request or receiving report available for creation in Wide Area WorkFlow (WAWF).

“Local processing office (LPO)” is the office responsible for payment certification when payment certification is done external to the entitlement system.

“Payment request” and “receiving report” are defined in the clause at 252.232-7003, Electronic Submission of Payment Requests and Receiving Reports.

(b) Electronic invoicing. The WAWF system provides the method to electronically process vendor payment requests and receiving reports, as authorized by Defense Federal Acquisition Regulation Supplement (DFARS) 252.232- 7003, Electronic Submission of Payment Requests and Receiving Reports.

(c) WAWF access. To access WAWF, the Contractor shall—

(1) Have a designated electronic business point of contact in the System for Award Management at https://www.sam.gov; and

(2) Be registered to use WAWF at https://wawf.eb.mil/ following the step-by-step procedures for self-registration available at this web site.

(d) WAWF training. The Contractor should follow the training instructions of the WAWF Web-Based Training Course and use the Practice Training Site before submitting payment requests through WAWF. Both can be accessed by selecting the “Web Based Training” link on the WAWF home page at https://wawf.eb.mil/.

(e) WAWF methods of document submission. Document submissions may be via web entry, Electronic Data Interchange, or File Transfer Protocol.

(f) WAWF payment instructions. The Contractor shall use the following information when submitting payment requests and receiving reports in WAWF for this contract or task or delivery order:

(1) Document type. The Contractor shall submit payment requests using the following document type(s):

(i) For cost-type line items, including labor-hour or time-and-materials, submit a cost voucher.

(ii) For fixed price line items—

(A) That require shipment of a deliverable, submit the invoice and receiving report specified by the Contracting Officer.

(Contracting Officer: Insert applicable invoice and receiving report document type(s) for fixed price line items that require shipment of a deliverable.)

(B) For services that do not require shipment of a deliverable, submit either the Invoice 2in1, which meets the requirements for the invoice and receiving report, or the applicable invoice and receiving report, as specified by the Contracting Officer.

(Contracting Officer: Insert either “Invoice 2in1” or the applicable invoice and receiving report document type(s) for fixed price line items for services.)

(iii) For customary progress payments based on costs incurred, submit a progress payment request.

(iv) For performance based payments, submit a performance based payment request.

(v) For commercial financing, submit a commercial financing request.

(2) Fast Pay requests are only permitted when Federal Acquisition Regulation (FAR) 52.213-1 is included in the contract.

[Note: The Contractor may use a WAWF “combo” document type to create some combinations of invoice and receiving report in one step.]

(3) Document routing. The Contractor shall use the information in the Routing Data Table below only to fill in applicable fields in WAWF when creating payment requests and receiving reports in the system.

Routing Data Table*

Field Name in WAWF Data to be entered in WAWF

Pay Official DoDAAC ____

Issue By DoDAAC ____

Admin DoDAAC** ____

Inspect By DoDAAC ____

Ship To Code ____

Ship From Code ____

Mark For Code ____

Service Approver (DoDAAC) ____

Service Acceptor (DoDAAC) ____

Accept at Other DoDAAC ____

LPO DoDAAC ____

DCAA Auditor DoDAAC ____

Other DoDAAC(s) ____

(*Contracting Officer: Insert applicable DoDAAC information. If multiple ship to/acceptance locations apply, insert “See Schedule” or “Not applicable.”)

(**Contracting Officer: If the contract provides for progress payments or performance-based payments, insert the DoDAAC for the contract administration office assigned the functions under FAR 42.302(a)(13).)

(4) Payment request. The Contractor shall ensure a payment request includes documentation appropriate to the type of payment request in accordance with the payment clause, contract financing clause, or Federal Acquisition Regulation 52.216-7, Allowable Cost and Payment, as applicable.

(5) Receiving report. The Contractor shall ensure a receiving report meets the requirements of DFARS Appendix F.

(g) WAWF point of contact.

(1) The Contractor may obtain clarification regarding invoicing in WAWF from the following contracting activity’s WAWF point of contact.

(Contracting Officer: Insert applicable information or “Not applicable.”)

(2) Contact the WAWF helpdesk at 866-618-5988, if assistance is needed.

Section H - Special Contract Requirements

SECTION H

Base Access (NMCP)

Commander, Navy Installations Command (CNIC), has established the Navy Commercial Access Control System (NCACS), a standardized process for granting unescorted access privileges to vendors, contractors, suppliers and service providers not otherwise entitled to the issuance of a Common Access Card (CAC) who seek access to and can provide justification to enter Navy installations and facilities. Vendors visiting Naval Medical Center Portsmouth (NMCP) may obtain daily passes directly from Naval Station Norfolk (NSN) Pass and ID office, located at NSN (Bldg CD-9), 9040 Hampton Blvd, Norfolk, Virginia, 23505, by submitting identification credentials for verification and undergoing a criminal screening/ background check. Alternatively, if the vendor so chooses, it may voluntarily elect to obtain long-term credentials through enrollment, registration, background vetting, screening, issuance of credentials, and electronic validation of credentials at its own cost through one of the designated independent contractor NCACS service providers. Credentials will be issued every five years and access privileges will be reviewed / renewed on an annual basis. The costs incurred to obtain Navy installation access of any kind are not reimbursable, and the price(s) paid for obtaining long-term NCACS credentials will not be approved as a direct cost of this contract. Further information regarding NCACS can be found at http://cnic.navy.mil/CNIC_HQ_Site/index.htm.

BUSINESS ASSOCIATE AGREEMENT

Privacy, Access, Use, and Disclosure of Protected Health Information

1. Introduction. In accordance with 45 C.F.R. §§ 164.502(e)(2) and 164.504(e), and DoDM 6025.18, “Implementation of the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule in DoD Health Care Programs,” March 13, 2019, this document serves as a Business Associate Agreement (BAA) between the signatory Parties for purposes of the HIPAA and the “HITECH Act” amendments thereof, as implemented by the HIPAA Rules and DoD HIPAA issuances (both defined below). The Parties are (1) a DoD Military Health System (MHS) component command such as a Navy Medicine Medical Treatment Facility (MTF) (Naval Medical center or Naval hospital), or special mission command (research, public health, other), acting as a HIPAA covered entity, and

(2) another Federal or Government organization, civilian academic institution, or other civilian entity, acting as a HIPAA Business Associate (BA). The HIPAA Rules require BAAs between covered entities and BAs.

Implementing this BAA requirement, the applicable DoD HIPAA issuances (DoDM 6025.18) provides that requirements applicable to BAs must be incorporated (or incorporated by reference) into the contract or agreement between the Parties.

2. Definitions:

a. Terms. Except as provided otherwise in this BAA, the following terms used in this BAA shall have the same meaning as those terms in the DoD HIPAA Rules (DoDM6025.18-): Data aggregation, designated record set, disclosure, health care operations, individual, minimum necessary, notice of privacy practices, protected health information (PHI), required by law, secretary, security incident, subcontractor, unsecured PHI, and use.

b. Breach. means actual or possible loss of control, unauthorized disclosure of or unauthorized access to PHI or other Personally Identifiable Information (PII) (which may include, but is not limited to PHI), where persons other than authorized users gain access or potential access to such information for any purpose other than authorized purposes, where one or more individuals will be adversely affected. The foregoing definition is based on the definition of “Breach” in DoD Privacy Act issuances as defined herein.

c. BA. shall generally have the same meaning as the term “BA” in the DoD HIPAA issuances, and in reference to this BAA, shall mean the entity (another Government organization, civilian academic institution, or other civilian organization), entering into agreement with a Navy Medicine MTF or special mission command.

d. Agreement. means this BAA together with the documents or other arrangements under which the BA signatory performs services involving access to PHI on behalf of the MHS component signatory to this BAA.

e. Covered Entity. shall generally have the same meaning as the term “covered entity” in the DoD HIPAA issuances, and in reference to this BAA, shall mean a Navy Medicine MTF or special mission command under the Bureau of Medicine and Surgery.

f. DHA Privacy Office. means the Defense Health Agency (DHA) Privacy and Civil Liberties

Office. The DHA Privacy Office Director is the HIPAA Privacy and Security Officer for DHA, including the National Capital Region Medical Directorate.

g. DoD HIPAA Issuances. means the DoD issuances implementing the HIPAA Rules in the DoD MHS. These issuances are DoDM 6025.18 Implementation of the HIPAA Privacy Rule in DoD Health Care Programs,” March 13, 2019; DoD Instruction 6025.18, Privacy of Individually Identifiable Health Information in DoD Health Care Programs of December 2009, and DoD Instruction 8580.02, Security of Individually Identifiable Health Information in DoD Health Care Programs of August 2015.

h. DoD Privacy Act Issuances. means the DoD issuances implementing the Privacy Act, which are DoD Directive 5400.11, DoD Privacy Program of 29 October 2014, and DoD 5400.11-R, Department of Defense Privacy Program of 8 May 2007.

i. HIPAA Rules. means, collectively, the HIPAA privacy, security, breach and enforcement rules, issued by the United States (US) Department of Health and Human Services (HHS) and codified at 45 C.F.R. §§ 160 and 164, Subpart E (Privacy), Subpart C (Security), Subpart D (Breach) and 45 C.F.R. § 160, Subparts C-D (Enforcement), as amended by the 2013 modifications to those Rules which implemented the “HITECH Act” provisions of Publication L. 111-5. See 78 Federal Regulation 5566-5702 of 25 January 2013 (with corrections at 78 Federal Regulation 32464 of 7 June 2013. Additional HIPAA rules regarding electronic transactions and code sets (45 C.F.R. § 162) are not addressed in this BAA and are not included in the term HIPAA Rules.

j. HHS Breach. means a breach that satisfies the HIPAA Breach Rule definition of “Breach” in 45 C.F.R. § 164.402.

k. Service-Level Privacy Office. means one or more offices within the military services (Army, Navy, or Air Force) with oversight authority over Privacy Act and HIPAA privacy compliance.

3. Obligations and Activities of BA:

a. The BA shall not access, use, or disclose PHI other than as permitted or required by this Agreement, the controlling Memorandum of Understanding (MOU) or training affiliation agreement, or as required by law.

b. The BA shall use appropriate safeguards and comply with the DoD HIPAA Rules with respect to electronic PHI to prevent use or disclosure of PHI other than as provided for by this Agreement, the controlling MOU, or law.

c. The BA shall report to the covered entity any Breach of which it becomes aware and shall proceed with breach response steps required by paragraph 7 (Breach Response) of this BAA. With respect to electronic PHI, the BA shall also respond to any security incident of which it becomes aware in accordance with any information assurance provisions of the Understanding. If at any point the BA becomes aware that a security incident involves a breach, the BA shall immediately initiate breach response as required by paragraph 7 (Breach Response) of this

BAA.

d. In accordance with 45 C.F.R. §§ 164.502(e)(1)(ii)) and 164.308(b)(2), respectively, as applicable, the BA shall ensure that any entities that create, receive, maintain, or transmit PHI on behalf of the BA agree to the same restrictions, conditions, and requirements that apply to the BA with respect to such PHI.

e. The BA shall make available PHI in a designated record set, to the covered entity or, as directed by the covered entity, to an Individual, as necessary to satisfy the covered entity obligations under 45 C.F.R. § 164.524.

f. The BA shall make any amendment(s) to PHI in a designated record set as directed or agreed to by the covered entity pursuant to 45 C.F.R. § 164.526, or take other measures as necessary to satisfy covered entity’s obligations under 45 C.F.R. § 164.526.

g. The BA shall maintain and make available the information required to provide an accounting of disclosures to the covered entity or an individual as necessary to satisfy the covered entity’s obligations under 45 C.F.R. § 164.528.

h. To the extent the BA is to carry out one or more of the covered entity’s obligation(s) under the HIPAA privacy rule, the BA shall comply with the requirements of HIPAA privacy rule that apply to the covered entity in the performance of such obligation(s).

i. The BA shall make its internal practices, books, and records available to the Secretary and the covered entity for purposes of audit and in determining compliance with the HIPAA Rules.

4. Permitted Uses and Disclosures by BA:

a. The BA may only use or disclose PHI as necessary to perform the services set forth in the Understanding or as required by law. The BA is not permitted to de-identify PHI under DoD HIPAA issuances or the corresponding 45 C.F.R. § 164.514(a) through (c), nor is it permitted to use or disclose de-identified PHI except as provided by the Understanding or directed by the covered entity.

b. The BA agrees to use, disclose, and request PHI only in accordance with the HIPAA privacy rule “minimum necessary” standard and corresponding DHA policies and procedures as stated in the DoD HIPAA issuances.

c. The BA shall not use or disclose PHI in a manner that would violate the DoD HIPAA issuances or HIPAA privacy rules if done by the covered entity, except uses and disclosures for the BA’s own management and administration and legal responsibilities or for data aggregation services as set forth in the following…