(P01) T4NG TO PWS EMACAO RFI draft.pdf

TRANSFORMATION TWENTY-ONE TOTAL TECHNOLOGY

NEXT GENERATION (T4NG)

PERFORMANCE WORK STATEMENT (PWS)

DEPARTMENT OF VETERANS AFFAIRS

Office of Information & Technology (OIT) Solutions Delivery (SD)

Enterprise Messaging, Collaboration, Authentication and Office 365 (EMCAO)

Services Support

Date: 05/26/2021

VA-21-00044625

Task Order PWS Version Number: 1.2

Enterprise Messaging, Collaboration, Authentication and Office 365 (EMCAO) Services Support

Contents

1.0 BACKGROUND

2.0 APPLICABLE DOCUMENTS

3.0 SCOPE OF WORK

3.1 APPLICABILITY

3.2 ORDER TYPE

4.0 PERFORMANCE DETAILS

4.1 PERFORMANCE PERIOD

4.2 PLACE OF PERFORMANCE

4.3 TRAVEL OR SPECIAL REQUIREMENTS

4.4 CONTRACT MANAGEMENT

4.5 GOVERNMENT FURNISHED PROPERTY

4.6 SECURITY AND PRIVACY

4.6.1 POSITION/TASK RISK DESIGNATION LEVEL(S)

5.0 SPECIFIC TASKS AND DELIVERABLES

5.1 PROJECT MANAGEMENT

5.1.1 CONTRACTOR PROJECT MANAGEMENT PLAN

5.1.2 REPORTING REQUIREMENTS

5.1.3 TECHNICAL KICKOFF MEETING

5.1.4 PRIVACY/HIPAA TRAINING

5.2 PROGRAM ADMINISTRATION SUPPORT

5.2. PHASE-IN / PHASE-OUT TRANSITION PLAN

5.3 OPTION PERIOD ONE

5.4 OPTION PERIOD TWO

5.5 OPTION PERIOD THREE

5.6 OPTION PERIOD FOUR

6.0 GENERAL REQUIREMENTS

6.1 PERFORMANCE METRICS

6.2 SECTION 508 – INFORMATION AND COMMUNICATION TECHNOLOGY

(ICT) STANDARDS

6.2.1 COMPATIBILITY WITH ASSISTIVE TECHNOLOGY

6.2.2 ACCEPTANCE AND ACCEPTANCE TESTING

6.3 ENTERPRISE AND IT FRAMEWORK

APPENDIX A

1.0 BACKGROUND

The mission of the Department of Veterans Affairs (VA), Office of Information & Technology (OIT), Solutions Delivery (SD), Endpoint Engineering (EE) is to provide benefits and services to Veterans of the United States. In meeting these goals, OIT strives to provide high quality, effective, and efficient Information Technology (IT) services to those responsible for providing care to the Veterans at the point-of-care, as well as throughout all the points of the Veterans’ healthcare in an effective, timely and compassionate manner. VA depends on Information Management/Information Technology (IM/IT) systems to meet mission goals.

SD, with support from Microsoft, currently manages all Microsoft 365 applications. This includes, but is not limited to: Exchange, Azure Rights Management Services (RMS), Azure Information Protection (AIP), Teams, OneDrive, and SharePoint under the Microsoft 365 tenant.

Additional applications include, but are not limited to, Active Directory (AD), System Center Configuration Manger (SCCM), Intune, Public Key Infrastructure (PKI), and the on-premises systems \ applications that are needed to support these environments.

EMCAO management relies on the Admin Support contractor position to assist with the on-boarding \ off-boarding of staff, management of calendars, scheduling of calls, preparation of minutes, ensuring that all staff training is current, and performing other administrative and clerical functions as needed in support of the enterprise applications listed above.

2.0 APPLICABLE DOCUMENTS

The Contractor shall comply with the latest approved version of the documents in Paragraph 2.0 in the Transformation Twenty-one Total Technology Next Generation (T4NG) Basic Contract Performance Work Statement (PWS) in the performance of this effort.

A. VA Directive 6004 (Configuration, Change, and Release Management Programs), September 28, 2009 (http://www1.va.gov/vapubs/viewPublication.asp?Pub_ID=458&FType=2)

3.0 SCOPE OF WORK

The Contractor shall provide administrative and clerical support for Enterprise Messaging, Collaboration, Authentication and Office 365 Services (EMCAO).

3.1 APPLICABILITY

This Task Order (TO) effort PWS is within the scope of the following paragraph(s) of the T4NG Basic PWS:

4.1 Program Management, Strategy, Enterprise Architecture and Planning Support http://www1.va.gov/vapubs/viewPublication.asp?Pub_ID=458&FType=2

4.1.6 Program Management Support

3.2 ORDER TYPE

The effort shall be proposed on Firm Fixed Price (FFP) basis.

4.0 PERFORMANCE DETAILS

4.1 PERFORMANCE PERIOD

The Period of Performance (PoP) shall be one 12-month base period with four 12-month option periods. The overall Period of Performance shall not exceed 60 months.

4.2 PLACE OF PERFORMANCE

Efforts under this TO shall be performed in VA facilities located in:

• Hines Information Technology Center (HITC), Building 215, 1st Ave and Cermak Road, Hines, IL 60141

Work may be performed at remote locations with prior approval of the Contracting Officer’s Representative. The Contractor shall maintain an online presence eight hours per day, Monday through Friday, during normal business hours.

4.3 TRAVEL OR SPECIAL REQUIREMENTS

The Government does not anticipate travel to perform the tasks associated with the effort.

4.4 CONTRACT MANAGEMENT

All requirements of Sections 7.0 and 8.0 of the T4NG Basic PWS apply to this effort.

This TO shall be addressed in the Contractor’s Progress, Status and Management Report as set forth in the T4NG Basic contract.

4.5 GOVERNMENT FURNISHED PROPERTY

The Government has multiple remote access solutions available to include Citrix Access Gateway (CAG), Site-to-Site Virtual Private Network (VPN), and RESCUE VPN.

The Government’s issuance of Government Furnished Equipment (GFE) is limited to Contractor personnel requiring direct access to the network to: development environments; install, configure and run Technical Reference Model (TRM) approved software and tools (e.g., Oracle, Fortify, Eclipse, SoapUI, WebLogic, LoadRunner);

upload/download/ manipulate code, run scripts, and apply patches; configure and change system settings; check logs, troubleshoot/debug, and test/QA.

When necessary, the Government will furnish desktops or laptops, for use by the Contractor to access VA networks, systems, or applications to meet the requirements of this PWS. The overarching goal is to determine the most cost-effective approach to providing needed access to the VA environment coupled with the need to ensure proper Change Management principles are followed. Contractor personnel shall adhere to all VA system access requirements for on-site and remote users in accordance with VA standards, local security regulations, policies and rules of behavior. GFE shall be approved by the COR and Program Manager on a case-by-case basis prior to issuance.

Based upon the Government assessment of remote access solutions and requirements of this TO, the Government estimates that the following GFE will be required by this TO:

1. One (1) laptop

The Government will not provide IT accessories including but not limited to Mobile Wi-Fi hotspots/wireless access points, additional or specialized keyboards or mice, laptop bags, extra charging cables, extra Personal Identity Verification card readers, peripheral devices, or additional Random Access Memory (RAM). The Contractor is responsible for providing these types of IT accessories in support of the TO as necessary and any VA installation required for these IT accessories shall be coordinated with the COR.

The Status of Government Furnished Equipment Report under the T4NG Basic Contract requirements is applicable to this TO and shall be delivered to the COR/VA PM as required.

4.6 SECURITY AND PRIVACY

All requirements in Section 6.0 of the T4NG Basic PWS apply to this effort. Specific TO requirements relating to Addendum B, Section B4.0 paragraphs j and k supersede the corresponding T4NG Basic PWS paragraphs, and are as follows, The vendor shall notify VA within 24 hours of the discovery or disclosure of successful exploits of the vulnerability which can compromise the security of the Systems (including the confidentiality or integrity of its data and operations, or the availability of the system). Such issues shall be remediated as quickly as is practical, based upon the severity of the incident.

When the Security Fixes involve installing third party patches (such as Microsoft OS patches or Adobe Acrobat), the vendor will provide written notice to VA that the patch has been validated as not affecting the Systems within 10 working days. When the vendor is responsible for operations or maintenance of the Systems, they shall apply the Security Fixes based upon the requirements identified within the TO.

It has been determined that protected health information may be disclosed or accessed and a signed Business Associate Agreement (BAA) shall be required. The Contractor shall adhere to the requirements set forth within the BAA, referenced in Section D of the Request for Task Execution Plan (RTEP) and shall comply with VA Directive 6066.

4.6.1 POSITION/TASK RISK DESIGNATION LEVEL(S)

In accordance with VA Handbook 0710, Personnel Security and Suitability Program, the position sensitivity and the level of background investigation commensurate with the required level of access for the following tasks within the PWS are:

Position Sensitivity and Background Investigation Requirements by Task

Task Number Tier1 / Low Risk Tier 2 / Moderate Risk

Tier 4 / High Risk

5.1 5.2 5.3 5.4 5.5 5.6

The Tasks identified above and the resulting Position Sensitivity and Background Investigation requirements identify, in effect, the Background Investigation requirements for Contractor individuals, based upon the tasks the particular Contractor individual will be working. The submitted Contractor Staff Roster must indicate the required Background Investigation Level for each Contractor individual based upon the tasks the Contractor individual will be working, in accordance with their submitted proposal.

5.0 SPECIFIC TASKS AND DELIVERABLES

The Contractor shall provide one FTE to perform the following:

5.1 PROJECT MANAGEMENT

5.1.1 CONTRACTOR PROJECT MANAGEMENT PLAN

The Contractor shall deliver a Contractor Project Management Plan (CPMP) that lays out the Contractor’s approach, timeline and tools to be used in execution of this TO effort. The CPMP should take the form of both a narrative and graphic format that displays the schedule, milestones, risks and resource support. The CPMP shall also include how the Contractor shall coordinate and execute planned, routine, and ad hoc data collection reporting requests as identified within the PWS. The initial baseline CPMP shall be concurred upon and updated in accordance with Section B of the TO.

The Contractor shall update and maintain the VA Program Manager (PM) approved CPMP throughout the PoP.

Deliverable:

A. Contractor Project Management Plan

5.1.2 REPORTING REQUIREMENTS

The contractor shall provide a weekly status report in electronic format to the VA program manager listing the weeks activities.

Deliverable:

A. Weekly Status Report

5.1.3 TECHNICAL KICKOFF MEETING

A technical kickoff meeting shall be held within 10 days after TO award. The Contractor shall coordinate the date, time, and location (can be virtual) with the Contracting Officer (CO), as the Post-Award Conference Chairperson, the VA PM, as the Co-Chairperson, the Contract Specialist (CS), and the COR. The Contractor shall provide a draft agenda to the CO and VA PM at least five (5) calendar days prior to the meeting. Upon Government approval of a final agenda, the Contractor shall distribute to all meeting attendees. During the kickoff-meeting, the Contractor shall present, for review and approval by the Government, the details of the intended approach, work plan, and project schedule for each effort via a Microsoft Office PowerPoint presentation. At the conclusion of the meeting, the Contractor shall update the presentation with a final slide entitled “Summary Report” which shall include notes on any major issues, agreements, or disagreements discussed during the kickoff meeting and the following statement “As the Post-Award Conference Chairperson, I have reviewed the entirety of this presentation and assert that it is an accurate representation and summary of the discussions held during the Technical Kickoff Meeting for the EMCAO 365 Services Support Contract 24x7.” The Contractor shall submit the final updated presentation to the CO for review and signature within three (3) calendar days after the meeting. The Contractor shall also work with the CS, the Government’s designated note taker, to prepare and distribute the meeting minutes of the kickoff meeting to the CO, COR and all attendees within three (3) calendar days after the meeting. The Contractor shall obtain concurrence from the CS on the content of the meeting minutes prior to distribution of the document.

5.1.4 PRIVACY/HIPAA TRAINING

The Contractor shall submit TMS training certificates of completion for VA Privacy and Information Security Awareness and Rules of Behavior and Health Insurance Portability and Accountability Act (HIPAA) training, and provide signed copies of the Contractor Rules of Behavior in accordance with Section 9, Training, from Appendix C of the VA Handbook 6500.6, “Contract Security”.

VA Privacy and Information Security Awareness and Rules of Behavior Training Certificate / Signed Contractor Rules of Behavior / VA HIPAA Certificate of Completion

Deliverable:

A. VA Privacy and Information Security Awareness and Rules of Behavior Training Certificate / Signed Contractor Rules of Behavior / VA HIPAA Certificate of Completion

5.2 PROGRAM ADMINISTRATION SUPPORT

The Contractor shall provide program support services to the Enterprise Messaging, Collaboration, Authentication and Office 365 Services group in the areas of both clerical and administrative support.

This support shall entail:

1. Completing and maintaining spreadsheets, presentations, and other documents using various Microsoft applications (i.e., Excel, Power Point, Word, etc.)

ensuring correct English grammar, spelling, and punctuation in all written communications.

2. Maintaining of EMCAO Outlook Global Address Listing, new employee processing, and development of all materials for maintenance of on-call rosters.

3. On-boarding / Off-boarding procedures and support.

i. The vendor shall assist with onboarding of new SD Contractor staff. The vendor shall:

a. Collect signed rules of behavior documents, signed non-disclosure agreements, training certificates, applications for access to VA information systems, Personal Identity Verification (PIV) card requests and other related information, and provide secure storage for the documents and files, in accordance with VA guidance;

b. Provide the documents, files and information to the VA PM, COR or IT staff for review / approval / signature, when requested, to support VA’s on-boarding process for granting access to VA systems;

c. Prepare and submit access requests, including TMS applications, PIV card applications, and current VA approved contractor request forms.

After receipt of a favorable Special Agreement Check (SAC) determination, and COR approval, the Contractor shall create Helpdesk tickets to request VA user accounts (for e-mail and remote access);

d. Monitor the submission of the artifacts and follow up to assure that all artifacts submitted are complete and correct. The Contractor shall track

VA system access requests, for assigned Product Teams to completion.

ii. The Vendor shall manage the off-boarding process for VA access and to individual system/environment access for all Contractor SD staff. The Contractor shall prepare all forms necessary for termination of access to VA information systems, in accordance with VA guidance. The Contractor shall assist in confirming whether the GFE equipment, associated documentation, and PIV card has been returned to the proper receiving authorities in accordance with VA policy. All findings shall be documented.

4. Phase-in/Phase-out Transition Plan. The Contractor shall develop and deliver a

Transition Plan 30 days prior to the end date of the contract and of each option year. The following list is a Transition Checklist. The Contractor shall address each of the Transition Checklist items in the Transition Plan:

i. Inventory, review, evaluation, and transition of VA-furnished information and other items such as:

a. Hardware/Software

b. Laptop

ii. Inventory and transition of historical data (specifically memos, letters, correspondence, regulations, reports, documents, transition agreement documents, software licensing agreements, hardware maintenance agreement, memorandums of agreement/ understanding, and inter-service agreements, and system administration passwords, system logs, database logs);

iii. Any Service Level Agreements (SLA)’s and Standard Operating Procedures (SOP)’s used in day-to-day operations;

iv. An orientation phase to introduce the Contractor personnel, programs, and users to the incoming team, explaining tools, methodologies, and business processes;

v. Procedures to introduce VA personnel, programs, and users to the Contractor's team, tools, methodologies, and business processes;

vi. The Contractor strategy regarding personnel staffing and training during the transition period;

vii. Process for transfer of existing on-hand inventory;

viii. Signed turnover agreements.

5. Preparation of Executive Decision Memorandum in support of operational goals and needs.

6. Arranging and participating in weekly and ad hoc program-specific calls and meetings.

i. Weekly meetings include software vendor meetings and staff meetings;

ii. Prepare minutes for meetings and conference calls;

7. Verifying correctness of expense reports and audit management for all department staff. Audit management will include reaching out to the team members that need additional information and closing out negative audit findings.

8. Maintenance of contract database and GFE inventory records including property passes.

9. Oversight of office equipment, supplies, and distribution

10. Property maintenance and maintenance of records of all office equipment, inventory, work orders and vendor maintenance contracts

11. Liaison with the local admin staff to arrange for guests, or VA staff, visiting the facility

12. Providing direct administrative support to the Director of the EMACO team, including, but not limited to:

i. Coordinating calls with vendors

ii. Coordinating calls with staff

iii. Joining calls to take minutes and provide them back to the Director

iv. Coordinating calendars with ours to find time to meet

Deliverables:

A. Transition Plan Report

5.3 OPTION PERIOD ONE

If an Option Period is exercised by VA, all tasks and deliverables in the following sections and all associated subsections shall apply: Sections 5.1 and 5.2 for a 12-month PoP.

5.4 OPTION PERIOD TWO

If an Option Period is exercised by VA, all tasks and deliverables in the following sections and all associated subsections shall apply: Sections 5.1 and 5.2 for a 12-month PoP.

5.5 OPTION PERIOD THREE

If an Option Period is exercised by VA, all tasks and deliverables in the following sections and all associated subsections shall apply: Sections 5.1 and 5.2 for a 12-month PoP.

5.6 OPTION PERIOD FOUR

If an Option Period is exercised by VA, all tasks and deliverables in the following sections and all associated subsections shall apply: Sections 5.1 and 5.2 for a 12-month PoP.

6.0 GENERAL REQUIREMENTS

6.1 PERFORMANCE METRICS

The table below defines the Performance Standards and Acceptable Levels of Performance associated with this effort.

Performance Objective

Performance Standard Acceptable Levels of Performance

A. Technical / Quality of Product or Service

1. Shows understanding of requirements

2. Efficient and effective in meeting requirements

3. Meets technical needs and mission requirements

4. Provides quality services/products

5.

Satisfactory or higher

B. Project Milestones and Schedule

1. Quick response capability

2. Products completed, reviewed, delivered in accordance with the established schedule

3. Notifies customer in advance of potential problems

Satisfactory or higher

C. Cost & Staffing 1. Currency of expertise and staffing levels appropriate

2. Personnel possess necessary knowledge, skills and abilities to perform tasks

Satisfactory or higher

Performance Objective

Performance Standard Acceptable Levels of Performance

D. Management 1. Integration and coordination of all activities to execute effort

Satisfactory or higher

The COR will utilize a Quality Assurance Surveillance Plan (QASP) throughout the life of the TO to ensure that the Contractor is performing the services required by this PWS in an acceptable level of performance. The Government reserves the right to alter or change the QASP at its own discretion. A Performance Based Service Assessment will be used by the COR in accordance with the QASP to assess Contractor performance.

6.2 SECTION 508 – INFORMATION AND COMMUNICATION TECHNOLOGY (ICT)

STANDARDS

On January 18, 2017, the Architectural and Transportation Barriers Compliance Board (Access Board) revised and updated, in a single rulemaking, standards for electronic and information technology developed, procured, maintained, or used by Federal agencies covered by Section 508 of the Rehabilitation Act of 1973, as well as our guidelines for telecommunications equipment and customer premises equipment covered by Section 255 of the Communications Act of 1934. The revisions and updates to the Section 508-based standards and Section 255-based guidelines are intended to ensure that information and communication technology (ICT) covered by the respective statutes is accessible to and usable by individuals with disabilities.

The following Section 508 Requirements supersede Addendum A, Section A3 from the T4NG Basic PWS.

The Section 508 standards established by the Access Board are incorporated into, and made part of all VA orders, solicitations and purchase orders developed to procure ICT.

These standards are found in their entirety at: https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines. A printed copy of the standards will be supplied upon request.

Federal agencies must comply with the updated Section 508 Standards beginning on January 18, 2018. The Final Rule as published in the Federal Register is available from the Access Board: https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule.

The Contractor shall comply with “508 Chapter 2: Scoping Requirements” for all electronic ICT and content delivered under this contract. Specifically, as appropriate for the technology and its functionality, the Contractor shall comply with the technical standards marked here:

https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule

E205 Electronic Content – (Accessibility Standard -WCAG 2.0 Level A and AA Guidelines)

E204 Functional Performance Criteria E206 Hardware Requirements E207 Software Requirements E208 Support Services and Documentation Requirements

6.2.1 COMPATIBILITY WITH ASSISTIVE TECHNOLOGY

The standards do not require installation of specific accessibility-related software or attachment of an assistive technology device. Section 508 requires that ICT be compatible with such software and devices so that ICT can be accessible to and usable by individuals using assistive technology, including but not limited to screen readers, screen magnifiers, and speech recognition software.

6.2.2 ACCEPTANCE AND ACCEPTANCE TESTING

Deliverables resulting from this solicitation will be accepted based in part on satisfaction of the Section 508 Chapter 2: Scoping Requirements standards identified above.

The Government reserves the right to test for Section 508 Compliance before delivery.

The Contractor shall be able to demonstrate Section 508 Compliance upon delivery.

6.3 ENTERPRISE AND IT FRAMEWORK

A signed waiver has been obtained from the VA OI&T CIO Office that the IPv6 requirement within Section 3.8.3 of the T4NG Basic Contract cannot be met, and as a result, IPv6 is not a requirement for this TO effort.

APPENDIX A

CONTRACTOR NON-DISCLOSURE AGREEMENT

This Agreement refers to Contract/Order _________________ entered into between the Department of Veterans Affairs and _________________________ (Contractor).

As an officer of <fill in name of Contractor>, authorized to bind the company, I understand that in connection with our participation in the <fill in program> acquisition under the subject Contract/Order, Contractor’s employees may acquire or have access to procurement sensitive or source selection information relating to any aspect of <fill in program> acquisition. Company <fill in name> hereby agrees that it will obtain Contractor - Employee Personal Financial Interest/Protection of Sensitive Information Agreements from any and all employees who will be tasked to perform work under the subject Contract/Order prior to their assignment to that Contract/Order. The Company shall provide a copy of each signed agreement to the Contracting Officer. Company <fill in name> acknowledges that the Contractor - Employee Personal Financial Interest/Protection of Sensitive Information Agreements require Contractor’s employee(s) to promptly notify Company management in the event that the employee releases any of the information covered by that agreement and/or whether during the course of their participation, the employee, his or her spouse, minor children or any member of the employee’s immediate family/household has/or acquires any holdings or interest whatsoever in any other private organization (e.g., contractors, offerors, their subcontractors, joint venture partners, or team members), identified to the employee during the course of the employee’s participation, which may have an interest in the matter the Company is supporting pursuant to the above stated Contract/Order. The Company agrees to educate its employees in regard to their conflict of interest responsibilities.

Company <fill in name> further agrees that it will notify the Contracting Officer within 24 hours, or the next working day, whichever is later, of any employee violation. The notification will identify the business organization or other entity, or individual person, to whom the information in question was divulged and the content of that information.

Company <fill in name> agrees, in the event of such notification, that, unless authorized otherwise by the Contracting Officer, it will immediately withdraw that employee from further participation in the acquisition until the Organizational Conflict of Interest issue is resolved.

This agreement shall be interpreted under and in conformance with the laws of the United States.

Signature and Date Company

Printed Name Phone Number

CONTRACTOR EMPLOYEE

PERSONAL FINANCIAL INTEREST/PROTECTION OF SENSITIVE INFORMATION

AGREEMENT

This Agreement refers to Contract/Order _____________________ entered into between the Department of Veterans Affairs and ____________________ (Contractor).

As an employee of the aforementioned Contractor, I understand that in connection with my involvement in the support of the above-referenced Contract/Order, I may receive or have access to certain “sensitive information” relating to said Contract/Order, and/or may be called upon to perform services which could have a potential impact on the financial interests of other companies, businesses or corporate entities. I hereby agree that I will not discuss or otherwise disclose (except as may be legally or contractually required) any such “sensitive information” maintained by the Department of Veterans Affairs or by others on behalf of the Department of Veterans Affairs, to any person, including personnel in my own organization, not authorized to receive such information.

“Sensitive information” includes:

(a) Information provided to the Contractor or the Government that would be competitively useful on current or future related procurements; or

(b) Is considered source selection information or bid and proposal information as defined in FAR 2.101, and FAR 3.104-4; or

(c) Contains (1) information about a Contractor’s pricing, rates, costs, schedule, or contract performance; or (2) the Government’s analysis of that information;

or

(d) Program information relating to current or estimated budgets, schedules or other financial information relating to the program office; or

(e) Is properly marked as source selection information or any similar markings.

Should “sensitive information” be provided to me under this Contract/Order, I agree not to discuss or disclose such information with/to any individual not authorized to receive such information. If there is any uncertainty as to whether the disclosed information comprises “sensitive information”, I will request my employer to request a determination in writing from the Department of Veterans Affairs Contracting Officer as to the need to protect this information from disclosure.

I will promptly notify my employer if, during my participation in the subject Contract/Order, I am assigned any duties that could affect the interests of a company, business or corporate entity in which either I, my spouse or minor children, or any member of my immediate family/household has a personal financial interest. “Financial interest” is defined as compensation for employment in the form of wages, salaries, commissions, professional fees, or fees for business referrals, or any financial investments in the business in the form of direct stocks or bond ownership, or partnership interest (excluding non-directed retirement or other mutual fund investments). In the event that, at a later date, I acquire actual knowledge of such an interest or my employer becomes involved in proposing for a solicitation resulting from the work under this Contract/Order, as either an offeror, an advisor to an offeror, or as a Subcontractor to an offeror, I will promptly notify my employer. I understand this may disqualify me from any further involvement with this Contract/Order, as agreed upon between the Department of Veterans Affairs and my company.

Among the possible consequences, I understand that violation of any of the above conditions/requirements may result in my immediate disqualification or termination from working on this Contract/Order pending legal and contractual review.

I further understand and agree that all Confidential, Proprietary and/or Sensitive Information shall be retained, disseminated, released, and destroyed in accordance with the requirements of law and applicable Federal or Department of Veterans Affairs directives, regulations, instructions, policies and guidance.

This Agreement shall be interpreted under and in conformance with the laws of the United States.

I agree to the Terms of this Agreement and certify that I have read and understand the above Agreement. I further certify that the statements made herein are true and correct.

Signature and Date Company

Printed Name Phone Number

6.3 ENTERPRISE AND IT FRAMEWORK

APPENDIX A