IHS 1519122 CSS.pdf

COMBINED SYNOPSIS/SOLICITATION # IHS1519122 1

DEPARTMENT OF HEALTH AND HUMAN SERVICES · INDIAN

HEALTH SERVICE

Clinton Indian Health Center — 10321 N 2274 Rd, Clinton, OK 73601

COMBINED SYNOPSIS /

SOLICITATION

Commercial services · FAR Part 12 (Revolutionary FAR Overhaul)

Indian Small Business Economic Enterprise (ISBEE) Set-Aside

Issuing office Clinton Indian Health Center

Solicitation No. IHS1519122

Title CSU Non-Emergency Medical Transportation Services

Issue date July 18th, 2026

NAICS / size standard 485999 — All Other Transit and Ground Passenger Transportation (size standard $19.0 million)

Product/Service Code V222

Set-aside authority Indian Small Business Economic Enterprise (ISBEE) Set-Aside (HHSAR 326.603-1(c); 326.604-2)

Place(s) of performance 3 locations (see Section 4)

Period / delivery One Year Blanket Purchase Agreement

Quotes due July 31st, 2026 at 2:30 PM CT

Submit to krishna.harriman@ihs.gov

1. INTRODUCTION

This is a combined synopsis/solicitation for commercial services prepared in accordance with FAR part 12, using the combined synopsis/solicitation format at FAR 12.202(b), as revised under the Revolutionary FAR Overhaul (Executive Order 14275) and the implementing HHS/IHS class deviation, and the simplified procedures for commercial products and commercial services at FAR 12.201-1. This announcement constitutes the only solicitation; quotations are requested and a separate written solicitation will not be issued. Solicitation number IHS1519122 is issued as a Request for Quotation (RFQ) for CSU Non-Emergency Medical Transportation Services. This acquisition is conducted under the Buy

COMBINED SYNOPSIS/SOLICITATION # IHS1519122 2

Indian Act (25 U.S.C. 47) and HHSAR Subpart 326.6. The associated NAICS code is 485999 — All Other Transit and Ground Passenger Transportation (size standard $19.0 million).

2. SET-ASIDE DETERMINATION

This requirement is a Indian Small Business Economic Enterprise (ISBEE) Set-Aside under HHSAR 326.603-1(c); 326.604-2. The offeror must qualify under the notice provision (352.226-4) below.

3. DESCRIPTION OF REQUIREMENT

The purpose of this contract is to provide non-emergency medical transportation services for the Clinton Service Unit (CSU), which is comprised of the Clinton Indian Health Center (CIHC), El Reno Indian Health Center (EIHC) and Watonga Indian Health Center (WIHC). The CSU facilities are outpatient federal facilities that provide ambulatory care for eligible Native American patients that are registered for services. To meet the IHS mission, CSU requires contractor support to provide non-emergency medical transportation services to increase access to care for eligible Native American patients at CSU Service Unit locations and referred care service providers.

4. DELIVERY, PLACE(S) OF PERFORMANCE, AND PERIOD

Place(s) of performance / delivery: The primary place of performance is the Clinton Service Unit (CSU) contract health delivery area, comprised of eighteen (18) Oklahoma counties, with additional referred-care transport into thirteen (13) surrounding counties including the Oklahoma City metro and Tulsa areas. Full county listing and applicable Service Contract Act wage determinations are set forth in the table at Attachment 3 (Wage Determination Coverage Table) and Attachments 4–12 (individual Wage Determinations).

Facility locations for contractor coordination and administration:

• Clinton Indian Health Center — 10321 N 2274 Rd, Clinton, OK 73601

• El Reno Indian Health Center — 1801 Parkview Dr., El Reno, OK 73036

• Watonga Indian Health Center — 204 W Main St., Watonga, OK 73772

Inspection and acceptance: as provided in the clause at FAR 52.212-4, Contract Terms and Conditions—Commercial Products and Commercial Services.

5. EVALUATION METHODS

The Government will evaluate quotations and make award using the method below. This language constitutes the tailored fill-in for FAR 52.212-2, Evaluation—Commercial Products and Commercial Services (RFO 12.205(a)(2)), and includes all evaluation factors and criteria for award.

Evaluation. The Government will compare quotations directly against one another under each factor to determine which provides the greatest benefit to the Government; quotations will not be assigned numerical scores or adjectival ratings, and no competitive range will be established.

The non-price factors, when combined, are approximately equal to price. The Government may

COMBINED SYNOPSIS/SOLICITATION # IHS1519122 3

make award without communication or may communicate with one or more quoters and request revised quotations. Award will represent the best value to the Government, price and other factors considered. (RFO 12.203(c)(2))

The Government will award a blanket purchase agreement to the responsible quoter whose conforming quotation is most advantageous to the Government, based on a comparative evaluation of quotations against the following factor(s):

Factor 1 - Technical Capabilities, Subfactor 1 - Fleet/Equipment (the equipment’s minimum requirements are for a 5 year old or newer model vehicle with four doors and operating heat and air conditioning and accessories consummate to the vehicle. Driver Readiness – Driver should have at minimum a driver’s education course completed and valid driver license.

Subfactor 2 - Scheduling, Dispatch, and Service Delivery – contractor should have a scheduling system or drivers log that dispatches the government requirements and notifies the government of the pick-up and delivery confirmation.

Subfactor 3 - Security, Privacy, and Program Management - should address Vehicle & Physical Security: Robust fleet maintenance, model year requirements (e.g., 5 years old or newer), real-time vehicle tracking, and on-board camera systems. Driver Vetting: Stringent hiring practices including frequent background checks, Motor Vehicle Record (MVR) reviews, and regular drug testing protocols

Factor 2 - Past Performance - The Government will evaluate the quoter's recent and relevant past performance as an indicator of its ability to perform this requirement. “Recent” means performed within 3 years of the date of this RFQ; “relevant” means similar in size, scope, and complexity. The Government may consider information from any source, including CPARS, references, and the quoter's experience as a subcontractor. A quoter without a record of relevant past performance will not be evaluated favorably or unfavorably on this factor.

Factor 3 – price. The Government will determine price to be fair and reasonable, based whenever possible on adequate price competition. Price will be evaluated inclusive of transportation charges to destination and by adding the prices for all services with estimated usage to the base requirement. Prompt payment discounts will not be considered in the price evaluation.

Quotation is not an offer. A quotation is not an offer and cannot be accepted by the Government to form a binding contract. Any resulting purchase order is the Government's offer to the quoter; a binding contract is formed only when the quoter accepts the purchase order, either by written acceptance or by commencing performance. (RFO 12.201-1(b))

Late quotations. The Government will consider all quotations received by the date and time specified above and may, consistent with good business judgment, consider a quotation received after the due date and time. (RFO 12.203(c)(1))

Brief explanation to unsuccessful quoters. Upon request received within 3 days after a quoter receives notification of award, the Government will provide that unsuccessful quoter a brief explanation of the basis for the award decision. (RFO 13.301 / 12.301(b))

COMBINED SYNOPSIS/SOLICITATION # IHS1519122 4

6. INSTRUCTIONS TO OFFERORS

Quotations are due no later than July 31st, 2026 at 2:30 PM CT. Email is the only acceptable method of submission. Submit quotations by email to krishna.harriman@ihs.gov. Quotations submitted by any other method will not be considered.

Each quotation shall include, at a minimum, the following:

• Vendor name

• Unique Entity Identifier (UEI)

• Prompt payment terms

• Delivery time

• GSA contract number (if applicable)

• Date the quote expires

• Warranty

• Pricing for all line items, and documentation addressing the evaluation factors stated in Section 5

Representations and certifications are made through the offeror’s active SAM.gov registration (FAR 52.212-1; 52.204-7). Failure to provide sufficient technical detail may result in rejection of your quote.

In accordance with HHSAR 352.226-7(b), each offeror shall submit a completed IHS Indian Economic Enterprise Representation form (www.IHS.gov/DAP) with its quotation. Offers from enterprises not qualifying under the Buy Indian (ISBEE) set-aside will be rejected.

Point of contact: Krishna Harriman, 580-331-3487.

7. PROVISIONS AND CLAUSES

Provisions and clauses are grouped below — FAR and HHSAR, provisions and clauses separately, in numerical order. Provisions apply to this solicitation only; at award the contract incorporates the clause lists (not the provisions). Items marked “By reference” are incorporated under FAR 52.252-1 (provisions) and 52.252-2 (clauses), with the same force and effect as if printed in full (full text at https://www.acquisition.gov). Items marked “Full text” are printed below; highlighted fill-ins must be completed. Clauses marked “(DEVIATION)” carry the date of the FAR class deviation adopted by your IHS Area.

7.1 FAR Provisions (solicitation only)

Number Title Incorporation

FAR 52.204-

System for Award Management—Registration (DEVIATION) By reference

FAR 52.212-

Instructions to Offerors—Commercial Products and Commercial Services (DEVIATION)

By reference (addenda)

COMBINED SYNOPSIS/SOLICITATION # IHS1519122 5

FAR 52.212-

Evaluation—Commercial Products and Commercial Services

(DEVIATION)

Full text — Section 5

7.2 FAR Clauses (incorporated into any resulting contract)

Number Title Incorporation

FAR

52.203-6

Restrictions on Subcontractor Sales to the Government (Alternate I) (JUN 2020)

By reference

FAR

52.203-17

Contractor Employee Whistleblower Rights (NOV 2023) By reference

FAR

52.203-19

Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (JAN 2017)

By reference

FAR

52.204-13

System for Award Management—Maintenance (DEVIATION) By reference

FAR

52.204-91

Contractor Identification (DEVIATION) By reference

FAR

52.209-6

Protecting the Government’s Interest When Subcontracting with Contractors Debarred, Suspended, or Proposed for Debarment (DEVIATION)

By reference

FAR

52.209-10

Prohibition on Contracting with Inverted Domestic Corporations (DEVIATION) By reference

FAR

52.212-4

Terms and Conditions—Commercial Products and Commercial Services

(DEVIATION)

By reference

FAR

52.219-8

Utilization of Small Business Concerns (DEVIATION) By reference

FAR

52.219-14

Limitations on Subcontracting (DEVIATION) By reference

FAR

52.222-3

Convict Labor (DEVIATION) By reference

FAR

52.222-35

Equal Opportunity for Veterans (DEVIATION) By reference

FAR

52.222-36

Equal Opportunity for Workers with Disabilities (DEVIATION) By reference

COMBINED SYNOPSIS/SOLICITATION # IHS1519122 6

FAR

52.222-37

Employment Reports on Veterans (DEVIATION) By reference

FAR

52.222-40

Notification of Employee Rights Under the National Labor Relations Act

(DEVIATION)

By reference

FAR

52.222-41

Service Contract Labor Standards (DEVIATION) By reference

FAR

52.222-42

Statement of Equivalent Rates for Federal Hires (MAY 2014) Full text

FAR

52.222-44

Fair Labor Standards Act and Service Contract Labor Standards—Price Adjustment (DEVIATION)

By reference

FAR

52.222-50

Combating Trafficking in Persons (DEVIATION) By reference

FAR

52.222-54

Employment Eligibility Verification (DEVIATION) By reference

FAR

52.222-62

Paid Sick Leave Under Executive Order 13706 (DEVIATION) By reference

FAR

52.222-90

Addressing DEI Discrimination by Federal Contractors (DEVIATION) By reference

FAR

52.226-8

Encouraging Contractor Policies to Ban Text Messaging While Driving (MAY 2024)

By reference

FAR

52.232-33

Payment by Electronic Funds Transfer—System for Award Management (OCT 2018)

By reference

FAR

52.232-40

Providing Accelerated Payments to Small Business Subcontractors (MAR 2023)

By reference

FAR

52.233-3

Protest After Award (DEVIATION) By reference

FAR

52.233-4

Applicable Law for Breach of Contract Claim (DEVIATION) By reference

FAR

52.240-91

Security Prohibitions and Exclusions (DEVIATION) By reference

COMBINED SYNOPSIS/SOLICITATION # IHS1519122 7

FAR

52.244-6

Subcontracts for Commercial Products and Commercial Services

(DEVIATION)

By reference

7.3 HHSAR Provisions (solicitation only)

Number Title Incorporation

HHSAR 352.226-

Notice of Indian Small Business Economic Enterprise Set-Aside (JAN 2022)

Full text

HHSAR 352.226-

Indian Economic Enterprise Representation (JAN 2022) Full text

7.4 HHSAR Clauses (incorporated into any resulting contract)

Number Title Incorporation

HHSAR 352.226-6 Indian Economic Enterprise Subcontracting Limitations (JAN 2022) Full text

Full-text provisions and clauses (fill-ins highlighted)

FAR 52.222-42 — Statement of Equivalent Rates for Federal Hires (MAY 2014) FAR 52.222-42 (clause) — full text required (fill-ins)

In compliance with the Service Contract Labor Standards statute and the regulations of the Secretary of Labor (29 CFR part 4), this clause identifies the classes of service employees expected to be employed under the contract and states the wages and fringe benefits payable to each if they were employed by the contracting agency subject to 5 U.S.C. 5341 or 5332. This statement is for information only: it is not a wage determination.

Employee class — Transportation Assistant Monetary wage—fringe benefits — Equivalent Federal Salary is a GS-5 or GS-6 for Rest of US with equivalent benefits.

(End of provision/clause)

HHSAR 352.226-4 — Notice of Indian Small Business Economic Enterprise Set-Aside

(JAN 2022)

HHSAR 352.226-4 (provision) — HHSAR 326.604-2(e)

Under the Buy Indian Act, 25 U.S.C. 47, offers are solicited only from Indian Economic Enterprises (HHSAR 326.606) that are also small business concerns. Any acquisition resulting from this solicitation will be from such a concern. As required by HHSAR 352.226-7(b), offerors shall include a completed Indian Economic Enterprise Representation form (available at www.IHS.gov/DAP) with the offer. Offers received from enterprises that are not both Indian Economic Enterprises and small business concerns will not be considered and will be rejected.

(End of provision/clause)

HHSAR 352.226-6 — Indian Economic Enterprise Subcontracting Limitations (JAN 2022)

COMBINED SYNOPSIS/SOLICITATION # IHS1519122 8

HHSAR 352.226-6 (clause) — HHSAR 326.604-2(e)(3) / 326.605-1(b)

(a) Definitions apply as in HHSAR 326.601.

(b) The contractor must comply with FAR 52.219-14, Limitations on Subcontracting, in allocating subcontracted work, and shall not subcontract work exceeding the 52.219-14 limitations to any concern other than a responsible Indian Economic Enterprise.

(c) Work an IEE subcontractor does not perform with its own employees is treated as subcontracted work under 52.219-14.

(d) The contractor must cooperate in any compliance study or survey by the CO or IHS.

(e) The contractor must incorporate the substance of this clause, including this paragraph (e), in all covered subcontracts.

(End of provision/clause)

HHSAR 352.226-7 — Indian Economic Enterprise Representation (JAN 2022) HHSAR 352.226-7 (provision) — HHSAR 326.604-2(e)(4) / 326.606-1

(a) The offeror must represent as part of its offer that it meets the IEE definition in HHSAR

326.601 and intends to meet it throughout performance, and must notify the CO immediately via email of any ownership change affecting this representation.

(b) The representation must be made on the designated IHS Indian Economic Enterprise Representation form (or successor).

(c) False or misleading information is punishable under 18 U.S.C. 1001; false claims are subject to 31 U.S.C. 3729-3731 and 18 U.S.C. 287.

(End of provision/clause)

8. ATTACHMENTS

• Attachment 1 — Statement of Work

• Attachment 2 — Price Schedule / Quotation form (provides the line-item number(s), items, quantities, and units of measure, including options)

• Attachment 3 — Wage Determination Coverage Table (county-to-WD cross-reference)

• Attachment 4 – WD 2015-5321 Rev 30 Dated 5/13/2026

• Attachment 5 – WD 2015-5315 Rev 29 Dated 5/13/2026

• Attachment 6 – WD 2015-5327 Rev 30 Dated 5/13/2026

• Attachment 7 – WD 2015-5325 Rev 30 Dated 5/13/2026

• Attachment 8 – WD 2015-5329 Rev 30 Dated 5/13/2026

• Attachment 9 – WD 2015-5331 Rev 31 Dated 5/13/2026

• Attachment 10 – WD 2015-5333 Rev 30 Dated 5/13/2026

• Attachment 11 – WD 2015-6013 Rev 4 Dated 5/13/2026

• Attachment 12 – WD 2015-5317 Rev 29 Dated 5/13/2026

• Attachment 13 — IHS Indian Economic Enterprise Representation form

Department of Health and Human Services Indian Health Service

Clinton Indian Health Center

Statement of Work (SOW) CSU Non-Emergency Medical Transportation Services

1. PURPOSE OF THE PROJECT

The purpose of this contract is to provide non-emergency medical transportation services for the Clinton Service Unit (CSU), which is comprised of the Clinton Indian Health Center (CIHC), El Reno Indian Health Center (EIHC) and Watonga Indian Health Center (WIHC). The CSU facilities are outpatient federal facilities that provide ambulatory care for eligible Native American patients that are registered for services. To meet the IHS mission, CSU requires contractor support to provide non-emergency medical transportation services in order to increase access to care for eligible Native American patients at CSU Service Unit locations and referred care service providers.

2. DETAILED DESCRIPTION OF THE TECHNICAL REQUIREMENTS

The contractor shall provide non-emergency medical transportation services to and from eligible Native American patient homes, the Clinton, El Reno, and Watonga Indian Health Centers, and referred care service providers located in Oklahoma City and the surrounding service area. These contracted services are intended to supplement existing Tribal Transit transportation services.

Services shall include but not limited to the following:

2.1. The contractor shall provide ambulette and livery services utilizing equipment appropriate for the safety and comfort of the ridership. All equipment shall meet safety and transport standards of the Americans with Disabilities Act and/or the Oklahoma State Department of Motor Vehicles.

2.2. The contractor shall provide equipment that accommodates the patient’s level of ability.

2.3. When needed, wheelchair accessible vehicles will be provided.

2.4. For patients not using a wheelchair, assisting devices shall be provided such as handles, grips and steps.

2.5. Safety equipment such as seat belts, wheelchair locks, etc., shall be provided as appropriate for the safety and comfort of passengers.

2.6. The contractor shall provide or ensure the provision of vehicle maintenance in accordance with the Oklahoma State Department of Motor Vehicles regulations. All vehicles will be appropriately licensed and inspected.

2.7. The contractor shall maintain annual vehicle inspection as required by the Oklahoma

State Department of Transportation. Inspection stickers shall be appropriately displayed and records of inspection available to the CSU COR at any time.

2.8. The Contractor shall maintain, throughout the period of performance, at minimum:

2.8.1. Commercial automobile liability insurance with limits of not less than $1,000,000 per occurrence; and

2.8.2. Umbrella/excess liability coverage with limits of not less than $3,000,000 aggregate, providing coverage in excess of the automobile liability policy required under 2.8.1;or coverage at the minimum levels required by the State of Oklahoma for commercial passenger transportation, whichever is greater. Proof of coverage meeting these requirements shall be provided to the COR prior to contract performance and upon each policy renewal, and shall be available for CO/COR inspection at any time upon request.

2.9. The contractor shall ensure the safe and efficient transportation of patients by providing qualified, screened Vehicle Operators.

2.10. The contractor shall ensure that vehicle operators are appropriately licensed in the State of Oklahoma. Licensing includes driver certification, driver training and continuing education where appropriate.

2.11. The contractor shall make available to the COR, driver’s licenses and driving records at least annually and upon the occasion of any incident involving a Clinton Service Unit passenger.

2.12. The contractor shall maintain vehicle operator records including training and competency to operate vehicles and safely transport patients, including but not limited to: driver advanced certifications, Basic Life Support or specialized training to assist and secure patients, etc.

2.13. The contractor shall arrive at the designated pickup location allowing enough time to then transit and arrive at destination before designated medical appointment time.

2.14. The contractor shall maintain a vehicle log for each pick-up including passenger name, pick up location, destination location, and time.

2.15. The contractor shall utilize standard address locations to identify pickup locations.

Alternative pick up locations may include eligible Native American patient residences, nursing homes, treatment centers or other health care locations.

2.16. Vehicle Operator Background Checks and Drug Screening: In addition to the licensing, training, and PIV/network-access investigation requirements described elsewhere in this SOW (see Sections 2.9–2.12 and 8.1), the following requirements apply to all individuals serving as vehicle operators under this contract, regardless of whether such individuals require facility or network access:

2.16.1. Criminal Background Check. Prior to assignment, the Contractor shall obtain a criminal history background check (state and national, e.g., via the Oklahoma State Bureau of Investigation or equivalent) for each vehicle operator. No individual with a disqualifying criminal history may be assigned to transport CSU patients. Disqualifying offenses include, at a minimum: crimes against persons (including but not limited to assault, abuse, or offenses involving vulnerable individuals), sexual offenses of any kind, and a pattern of offenses involving driving under the influence or reckless operation of a motor vehicle. The Contractor shall maintain documentation of completed background checks and make it available to the COR upon request.

2.16.2. Drug and Alcohol Screening. The Contractor shall implement and maintain a drug-free workplace program for all vehicle operators, including, at a minimum: pre-assignment drug screening prior to an operator's first transport of a CSU patient; and reasonable-suspicion testing consistent with the Contractor's drug-free workplace policy. The Contractor shall maintain records of compliance with this section and make them available to the COR upon request.

2.16.3. Renewal. The Contractor shall re-verify criminal background check status at least once every 12 months for each active vehicle operator, consistent with the annual driving record requirement at SOW 2.11.

2.16.4. This section is independent of, and does not replace, the PIV credentialing and background investigation requirements described in SOW Section 8.1, which apply based on facility/network access needs rather than direct patient transport responsibilities

3. PERIOD OF PERFORMANCE

5 year BPA.

4. PLACE OF PERFORMANCE

4.1. The primary place of performance is within the Clinton Service Unit (CSU) contract health delivery area, which is comprised of eighteen (18) counties within the state of Oklahoma.

When access to specialty care or limited care, transportation may be provided from the CSU contract health delivery area to health care destinations within the Oklahoma City metro and surrounding areas.

4.2. The CSU contract health delivery area is comprised of the following counties: Cimarron, Texas, Beaver, Harper, Woods, Alfalfa, Major, Woodward, Ellis, Roger Mills, Dewey, Blaine, Kingfisher, Canadian, Custer, Washita, Beckham, and Greer.

4.3. Transportation for referred services may include the following counties: Kiowa, Caddo, Grady, McClain, Cleveland, Oklahoma, Logan, Payne, Garvin, LeFlore, Pittsburg, Pottawatomie, and Tulsa.

5. LEVEL OF EFFORT

5.1. The contractor shall provide transportation services Monday through Friday between 7:00 AM and 7:00 PM. Some pickups may exceed these hours. Saturday transport may be requested on a case-by-case basis with sufficient advanced scheduling and concurrent approval from both IHS and the vendor.

5.2. No services or deliverables shall be required from or between CSU facilities on Sundays, OPM designated Federal Government Holidays, or any other day as set forth by Presidential Executive Order, or any other Federal Government Closures.

5.2.1. Occasionally, transportation services may be required on holidays not widely observed in the private sector with sufficient advanced scheduling. I.e., (Birthday of Martin Luther King, Jr. (Third Monday in January), Washington's Birthday (Third Monday in February), Juneteenth National Independence Day (June 19), Columbus Day (Second Monday in October), Veterans Day (November 11), Inauguration Day.

5.3. The contractor shall adhere to CDC regulations as it pertains to communicable diseases for medical transport.

5.4. The contractor shall operate, park, store, and lock vehicle as appropriate to prevent theft or damage.

5.5. The contractor shall obey all State and local traffic laws.

5.6. The contractor shall use all safety devices including seat belts.

5.7. The contractor shall record the date, time and physical location for passenger pick-up, the destination address and time of the patient’s appointment. This information will be recorded and entered into a log. Utilizing the Secure Data Transfer Service (SDTS), this log shall be transmitted daily to the COR or designated CSU employee for review and approval.

5.8. The contractor shall notify the COR and immediately report all vehicle accidents using

Standard Form (SF) 91 Motor Vehicle Accident Report at the time and scene of the crash, if possible, even if damage to the motor vehicle is not noticeable, to include SF 94;

Statement of Witness should there be any witness to the accident, if applicable.

5.9. The contractor shall ensure all contractor personnel performing work under this contract complete “IHS Privacy Training” annually. This training covers HIPAA topics, Privacy Act, and Confidentiality requirements. Completion certificates shall be provided to the CO and/or COR within 30 days after contract award and annually thereafter or upon request.

5.10. The contractor shall ensure all contractor personnel performing work under this contract complete “IHS Protecting Children from Sexual Abuse by Healthcare Providers” annually. Completion certificates shall be provided to the CO and/or COR within 30 days after contract award and annually thereafter or upon request.

5.11. The contractor shall ensure all contractor personnel performing work under this contract maintain active and current driver’s licensure and Basic Life Support certification.

5.12. The contractor shall provide the CO and/or COR any rules and regulations passengers are required to obey while utilizing contractor transportation services.

6. TRANSPORTATION SERVICES COORDINATION

6.1. The contractor shall coordinate with the Contracting Officer Representative (COR) or designated CSU employee via telephone and by Secure Data Transfer Service (SDTS) email as necessary on a daily basis.

6.2. The contractor shall provide a Dispatcher or Transportation Coordinator who will receive telephone calls from patients with requests for non-emergency medical transportation services.

6.3. The contractor shall record the date, time and physical location for passenger pick-up, the destination address and time of the patient’s appointment. This information will be recorded and entered into a log. Utilizing the Secure Data Transfer Service (SDTS), this log shall be transmitted daily to the COR or designated CSU employee for review and approval.

6.4. The contractor shall, at the request of patients who have already scheduled services, make changes, cancellations and adjustments as necessary to transportation scheduling.

6.5. The contractor’s driver shall wait for the patient at the destination. At the completion of the patient’s medical appointment, the driver will return the patient to the final authorized destination or residence.

6.6. This coordination procedure is for planning purposes only and the anticipated transportation services discussed are not guaranteed until a confirmation notification is sent to the contractor prior to the actual need. The contractor may then confirm the transportation service to the rider.

7. PATIENT TRANSPORTATION REQUESTS

7.1. The contractor shall receive and record patient requests for transportation via telephone. A designated telephone line and number will be provided for individual patients to call to arrange services with the contractor’s Dispatcher or Transportation Coordinator. The line shall be covered at minimum by a voicemail messaging service during off-duty hours. Messages received should be responded to within one hour of the start of business on the next business day.

7.2. The contractor shall ensure that transportation services are readily available within two days (48 hours) of patients’ requests. For next day transportation requests, calls received from patients before 12:00 PM Mondays through Fridays should be accommodated. Requests received after 12:00 PM for service on the next business day will be accommodated as resources allow.

7.3. The contractor shall daily, transmit the request log for the next business day’s services to be provided to the CSU. The IHS Secure Data Transfer Service (SDTS) shall be used by the contractor to transmit the log to the COR or designated CSU employee for review and approval. The CSU will respond with approval and/or requests for further information, etc.

7.4. The contractor shall, upon CSU approval, telephone each

patient on the business day prior to the requested service date and confirm each individual transportation arrangement with the patient.

7.5. Patients may be accompanied by one caregiver or family member.

7.6. Minors under the age of 18 years utilizing patient transportation services must be accompanied by an adult parent or guardian.

8. SPECIAL REQUIREMENTS

8.1. The supervising official will determine if the contractor will be subject to PIV credentialing requirements for physical and logical access, in line with the below requirements.

8.1.1. Long-term contractors are defined as working in excess of four months (or 120 days, consecutively) for the purpose of background investigations. All long-term contractors must have, at minimum, a favorably adjudicated Tier 1 background investigation. Some positions may require a higher-tiered investigation, in accordance with the OMB M-05- 24 Sections, 7.F “Applying guidance to temporary employees and contractors.”

8.1.2. Short-term contractors are defined as working for less than six months or 1040 hours in a one-year period of service for the purpose of HSPD-12, in accordance with 5 CFR Part

316. Short-term contractors are not issued a PIV card, except when required for routine facility or network access. Short-term contractors are subject to an investigation conducted in accordance with the risk/sensitivity of the position.

8.1.3. Temporary hires and volunteers are defined as working for 120 days or less. The supervising official will determine whether a temporary hire working 121 days or more will be subject to PIV credentialing requirements based on the need for network and facility access. Temporary hires are subject to all personnel security requirements.

8.1.4. If onsite service employee does not require 5.1.1 through 5.1.3, then a visitor’s pass must be requested upon arrival with either the front desk or facilities and worn at all times while on the premises.

8.2. The US PHS Clinton Service Unit (CSU) is a tobacco/smoke free environment (buildings and grounds). No tobacco/smoking use will be tolerated during service.

8.3. Security Requirements: Contractor personnel will be required to contact the government designated point of contact upon arrival when reporting for service calls or delivery supplies. The contractor shall be responsible for the security of all organizational information. Current rules and regulations applicable to the premises, where the work shall be performed shall apply to the contractor and its employees while working on the premises. These regulations include but are not limited to, escort by CSU official, presenting valid identification, smoking restriction and any safety procedures.

8.3.1. The contractor shall not disclose or cause to disseminate any information concerning operations of Clinton Service Unit. Such action(s) could result in violation of the contract and possible legal actions.

8.3.2. All inquiries, comments, or complaints arising from any matter observed, experienced or learned of as a result of or in connection with the performance of the contract, the resolution of which may require the dissemination of official information, shall be directed to the government’s designated representative.

8.4. SAFEGUARDING INFORMATION AND INFORMATION SYSTEMS.

In accordance with the Federal Information Processing Standards Publication (FIPS)199, Standards for Security Categorization of Federal Information and Information Systems, the Contractor (and/or any subcontractor) shall:

8.4.1. Protect government information and information systems in order to ensure:

8.4.1.1. Confidentiality, which means preserving authorized restrictions on access and disclosure, based on the security terms found in this contract, including means for protecting personal privacy and proprietary information;

8.4.1.2. Integrity, which means guarding against improper information modification or destruction, and ensuring information non-repudiation and authenticity; and

8.4.1.3. Availability, which means ensuring timely and reliable access to and use of information.

8.4.2. Provide security for any Contractor systems, and information contained therein, connected to an HHS network or operated by the Contractor on behalf of HHS regardless of location. In addition, if new or unanticipated threats or hazards are discovered by either the agency or contractor, or if existing safeguards have ceased to function, the discoverer shall immediately, within one (1) hour or less, bring the situation to the attention of the other party.

8.4.3. Adopt and implement the policies, procedures, controls, and standards required by the HHS Information Security Program to ensure the confidentiality, integrity, and availability of government information and government information systems for which the Contractor is responsible under this contract or to which the Contractor may otherwise have access under this contract. Obtain the HHS Information Security Program security requirements, outlined in the HHS Information Security and Privacy Policy (IS2P), by contacting the CO/COR or emailing fisma@hhs.gov.

8.4.4. Comply with the Privacy Act requirements and tailor FAR clauses as needed.

8.4.5. Protection of Sensitive Information. For security purposes, information is or may be sensitive because it requires security to protect its confidentiality, integrity, and/or availability. The Contractor (and/or any subcontractor) shall protect all government information that is or may be sensitive in accordance with OMB Memorandum M-06-16, Protection of Sensitive Agency Information by securing it with a FIPS 140-2 validated solution.

8.4.6. Confidentiality and Nondisclosure of Information. Any information provided to the contractor (and/or any subcontractor) by HHS or collected by the contractor on behalf of HHS shall be used only for the purpose of carrying out the provisions of this contract and shall not be disclosed or made known in any manner to any persons except as may be necessary in the performance of the contract. The Contractor assumes responsibility for protection of the confidentiality of Government records and shall ensure that all work performed by its employees and subcontractors shall be under the supervision of the Contractor. Each Contractor officer or employee or any of its subcontractors to whom any HHS records may be made available or disclosed shall be notified in writing by the Contractor that information disclosed to such officer or employee can be used only for that purpose and to the extent authorized herein. The confidentiality, integrity, and availability of such information shall be protected in accordance with HHS and IHS policies. Unauthorized disclosure of information will be subject to the HHS/IHS sanction policies and/or governed by the following laws and regulations:

18 U.S.C. 641 (Criminal Code: Public Money, Property or Records);

18 U.S.C. 1905 (Criminal Code: Disclosure of Confidential Information); and 44 U.S.C. Chapter 35, Subchapter I (Paperwork Reduction Act).

8.4.7. Contractor Non-Disclosure Agreement (NDA). Each Contractor (and/or any subcontractor) employee having access to non-public government information under this contract shall complete the IHS non-disclosure agreement. A copy of each signed and witnessed NDA shall be submitted to the Contracting Officer (CO) and/or CO Representative (COR) prior to performing any work under this acquisition.

8.4.8. Mandatory Training for All Contractor Staff. All Contractor (and/or any subcontractor) employees assigned to work on this contract shall complete the applicable HHS/IHS Contractor Information Security Awareness, Privacy, and Records Management training (provided upon contract award) before performing any work under this contract.

Thereafter, the employees shall complete HHS/IHS Information Security Awareness, Privacy, and Records Management training at least annually, during the life of this contract. All provided training shall be compliant with HHS training policies.

8.4.9. Training Records. The Contractor (and/or any subcontractor) shall maintain training records for all its employees working under this contract in accordance with HHS policy. The training records shall be provided to the CO and/or COR within 30 days after contract award and annually thereafter or upon request.

8.4.10. The Contractor (and/or any subcontractor) shall ensure that all employees performing on the contract comply with the HHS Information Technology General Rules of Behavior, the IHS Information Technology Rules of Behavior (included in the IHS Information Security and Privacy Awareness Training), and any applicable system-level rules of behavior.

8.4.11. All Contractor employees performing on the contract must read and adhere to the Rules of Behavior before accessing Department data or other information, systems, and/or networks that store/process government information, initially at the beginning of the contract and at least annually thereafter, which may be done as part of annual IHS Information Security Awareness Training. If the training is provided by the contractor, the signed ROB must be provided as a separate deliverable.

8.4.12. FISMA defines an incident as “an occurrence that (1) actually or imminently jeopardizes, without lawful authority, the integrity, confidentiality, or availability of information or an information system; or (2) constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies. The HHS Policy for IT Security and Privacy Incident Reporting and Response further defines incidents as events involving cybersecurity and privacy threats, such as viruses, malicious user activity, loss of, unauthorized disclosure or destruction of data, and so on.

A privacy breach is a type of incident and is defined by Federal Information Security Modernization Act (FISMA) as the loss of control, compromise, unauthorized disclosure, unauthorized acquisition, or any similar occurrence where

(1) a person other than an authorized user accesses or potentially accesses personally identifiable information or (2) an authorized user accesses or potentially accesses personally identifiable information for an other than authorized purpose. The HHS Policy for IT Security and Privacy Incident Reporting and Response further defines a breach as “a suspected or confirmed incident involving PII”.

8.4.12.1. In the event of a suspected or confirmed incident or breach, the Contractor (and/or any subcontractor), the Contractor (and/or any subcontractor) shall:

8.4.12.2. Protect all sensitive information, including any PII created, stored, or transmitted in the performance of this contract so as to avoid a secondary sensitive information incident with FIPS 140-2 validated encryption.

8.4.12.3. NOT notify affected individuals unless so instructed by the Contracting Officer or designated representative. If so instructed by the Contracting Officer or representative, the Contractor shall send notifications to affected individuals as expeditiously as practicable, without unreasonable delay, and in accordance with applicable law.

8.4.13. Report all suspected and confirmed information security and privacy incidents and breaches to the IHS Security Operations Center (SOC), COR, CO, IHS SOP (or his or her designee), and other stakeholders, including incidents involving PII, in any medium or form, including paper, oral, or electronic, as soon as possible and without unreasonable delay, no later than one (1) hour, and consistent with the applicable IHS and HHS policy and procedures, NIST standards and guidelines, as well as US- CERT notification guidelines. The types of information required in an incident report must include at a minimum: company and point of contact information, contract information, impact classifications/threat vector, and the type of information compromised. In addition, the Contractor shall:

8.4.13.1. Cooperate and exchange any information, as determined by the Agency, necessary to effectively manage or mitigate a suspected or confirmed breach;

8.4.13.2. Not include any sensitive information in the subject or body of any reporting e-mail; and encrypt sensitive information in attachments to email, media, etc.

8.4.14. Comply with OMB M-17-12, Preparing for and Responding to a Breach of Personally Identifiable Information, HHS, and IHS incident response policies when handling PII breaches.

8.4.15. Provide full access and cooperate on all activities as determined by the Government to ensure an effective incident response, including providing all requested images, log files, and event information to facilitate rapid resolution of sensitive information incidents. This may involve disconnecting the system processing, storing, or transmitting the sensitive information from the Internet or other networks or applying additional security controls.

8.4.16. All Contractor (and/or any subcontractor) employees must obtain a background investigation commensurate with their position sensitivity designation that complies with Parts 1400 and 731 of Title 5, Code of Federal Regulations (CFR). The following position sensitivity designation levels apply to this solicitation/contract:

8.4.16.1. The requiring activity representative, in conjunction with Personnel Security, shall use the OPM Position Sensitivity Designation automated tool (https://www.opm.gov/investigations/) to determine the sensitivity designation for background investigations. After making those determinations, include all applicable position sensitivity designations.

8.4.16.2. The Contractor (and/or any subcontractor) and its employees shall comply with Homeland Security Presidential Directive (HSPD)-12, Policy for a Common Identification Standard for Federal Employees and Contractors; OMB M-05-24;

FIPS 201, Personal Identity Verification (PIV) of Federal Employees and Contractors; HHS HSPD-12 policy; and Executive Order 13467, Part 1 §1.2.

8.4.17. Roster. The Contractor (and/or any subcontractor) shall submit a roster by name, position, e-mail address, phone number and responsibility, of all staff working under this acquisition where the Contractor will develop, have the ability to access, or host and/or maintain a government information system(s). The roster shall be submitted to the COR, with a copy to the Contracting Officer, within 14 days of the effective date of this contract. Any revisions to the roster as a result of staffing changes shall be submitted within 14 days of the change. The COR will notify the Contractor of the appropriate level of investigation required for each staff member.

If the employee is filling a new position, the Contractor shall provide a position description and the Government will determine the appropriate suitability level.

8.4.18. Business Associate Agreement (BAA). The Contractor's performance under this contract involves access to, and creation of, Protected Health Information (PHI) as defined at 45 CFR 160.103, including patient names, appointment times, and pickup/destination information recorded in the trip logs required under SOW Sections

5.7 and 6.3. Accordingly, the Contractor is a Business Associate of IHS under the HIPAA Privacy and Security Rules (45 CFR Parts 160 and 164).

8.4.18.1. Prior to performing any work under this contract, the Contractor shall execute the HHS/IHS-approved Business Associate Agreement (BAA), provided by the Contracting Officer at or before contract award.

8.4.18.2. The Contractor shall comply with all applicable requirements of the BAA, including but not limited to: permitted uses and disclosures of PHI; safeguarding requirements consistent with the HIPAA Security Rule; breach notification obligations (in addition to, and coordinated with, the incident reporting requirements at SOW 8.5.12–8.5.14);

and the return or destruction of PHI upon contract completion, consistent with SOW

8.6.2 and 8.6.4.

8.4.18.3. Any subcontractor with access to PHI in the performance of this contract shall be bound by BAA terms consistent with 45 CFR 164.504(e)(2), and the Contractor shall provide evidence of such subcontractor BAAs to the COR upon request.

8.4.18.4. The BAA requirement in this section is independent of, and does not replace, the Non-Disclosure Agreement requirement at SOW 8.5.7 or the annual IHS Privacy Training requirement at SOW 5.9.

8.5. General Security Requirements. The Contractor (and/or any subcontractor) shall comply with information security and privacy requirements, Enterprise Performance Life Cycle (EPLC) processes, HHS Enterprise Architecture requirements to ensure information is appropriately protected from initiation to expiration of the contract. All information systems development or enhancement tasks supported by the contractor shall follow the IHS EPLC framework and methodology and in accordance with the HHS Contract Closeout Guide (2012).

8.5.1. System Documentation. Contractors (and/or any subcontractors) must follow and adhere to NIST SP 800-64, Security Considerations in the System Development Life Cycle, at a minimum, for system development and provide system documentation at designated intervals (specifically, at the expiration of the contract) within the EPLC that require artifact review and approval.

8.5.2. Sanitization of Government Files and Information. As part of contract closeout and at expiration of the contract, the Contractor (and/or any subcontractor) shall provide all required documentation to the CO and/or COR to certify that, at the government’s direction, all electronic and paper records are appropriately disposed of and all devices and media are sanitized in accordance with NIST SP 800-88, Guidelines for Media Sanitization.

8.5.3. Notification. The Contractor (and/or any subcontractor) shall notify the CO and/or COR and system ISSO within 10 days before an employee stops working under this contract.

8.5.4. Contractor Responsibilities Upon Physical Completion of the Contract.

The contractor (and/or any subcontractors) shall return all government information and IT resources (i.e., government information in non-government-owned systems, media, and backup systems) acquired during the term of this contract to the CO and/or COR.

Additionally, the Contractor shall provide a certification that all government information has been properly sanitized and purged from Contractor-owned systems, including backup systems and media used during contract performance, in accordance with HHS and/or IHS policies.

8.5.5. The Contractor (and/or any subcontractor) shall perform and document the actions identified in the IHS Contractor Employee Separation Checklist when an employee terminates work under this contract within 10 days of the employee’s exit from the contract. All documentation shall be made available to the CO and/or COR upon request.

9. DELIVERABLES AND REPORTING REQUIREMENTS

9.1. Delivery: The contractor will coordinate the non-emergency medical transportation services with the designated government employee. The government will provide the contractor with building access for this sole purpose.

Driver needs a valid ID.

9.1.1. Location information as the following:

9.1.1.1. Clinton Indian Health Center: 10321 N. 2274

Rd, Clinton, OK 73601

9.1.1.2. El Reno Indian Health Center: 1801 Parkview

Dr, El Reno, OK 73036

9.1.1.3. Watonga Indian Health Center: 1305 S.

Clarence Nash Blvd, Watonga, OK 73772

9.2. Regardless of format, all digital content or communications materials produced as a deliverable under this contract, must conform to applicable Section 508 standards to allow federal employees and members of the public with disabilities to access information that is comparable to information provided to persons without disabilities. Remediation of any materials that do not comply with the applicable requirements as set forth below, shall be the responsibility of the vendor.

9.2.1. HHS guidance regarding accessibility of documents can be found at http://www.hhs.gov/web/section-…