P02 - Attachment A - SOW HbA1c.docx

VISN22 Pathology and Laboratory Medicine Services Sebia Bridge Contract

1. Introduction

The purpose of this Statement of Work (SOW) is to outline the tasks and responsibilities of the successful offeror in relation to the VISN 22 Pathology and Laboratory Department for a bridge contract to maintain HbA1c testing for Sebia Capillarys 2 flex systems.

1.1 Background

VISN 22 would like to establish a bridge contact to continue HbA1c testing for Sebia Capillarys 2 flex systems. The VISN has submitted for a new long-term contract requirement for this service; however, it still requires a one-year bridge contract to maintain testing while a new system is awarded, installed and validated.

2. Scope

A. Reference tests will be utilized by the following sites within VISN 22:

SD VAMC

3350 La Jolla Village Dr San Diego, CA 92161

LL VAMC

11201 Benton Street Loma Linda, CA 92357

LB VAMC

5901 E. 7th St Long Beach, CA, 90822

PVAHCS

Lab 113 650 East Indian School Road. Phoenix, AZ 85012

Northern AZ VAHCS 500 N. State Route 89 Prescott, AZ 86313 West LA VAMC 11301 Wilshire Blvd Los Angeles, CA 90073

B. EXISTING INSTRUMENT/SERVICE:

3. Hours of Operation

· Normal tour-of-duty hours at all sites are 7:30 am to 5:00 pm, Monday through Friday, excluding Federal holidays. However, the service is operating 24/7 and as such there may be instances in which the vendor’s workday may be outside of this period. The vendor is required to coordinate these times with the designated Program Manager.

· In accordance with 5 U.S.C. 6103, Executive Order 11582 and Public Law 94-97 the following national holidays are observed and for the purpose of this contract are defined as “Legal Federal official holidays”.

When a holiday falls on a Sunday, the following Monday will be observed as a National Holiday. When a holiday falls on a Saturday, the preceding Friday is observed as a National Holiday by U.S. Government Agencies.

4. Security

4.1 Information Security

· The vendor shall ensure adequate LAN/Internet, data, information, and system security in accordance with VA standard operating procedures and standard contract language, conditions laws, and regulations. The vendor’s firewall and web server shall meet or exceed the government minimum requirements for security. All government data shall be protected behind an approved firewall. Any security violations or attempted violations shall be reported to the VA Project Manager and the VBA Headquarters Information Security Officer as soon as possible. The vendor shall follow all applicable VA policies and procedures governing information security, especially those that pertain to certification accreditation.

· The contractor shall follow The Veterans Affair Acquisition Regulation (VAAR) security clause VAAR- 852.273-75 “SECURITY REQUIREMENTS FOR UNCLASSIFIED INFORMATION TECHNOLOGY RESOURCES” sited in the contract clauses.

(a) The contractor and their personnel shall be subject to the same Federal laws, regulations, standards and VA policies as VA personnel, regarding information and information system security. These include but are not limited to Federal Information Security Management Act (FISMA), Appendix III of OMB Circular A-130, and guidance and standards, available from the Department of Commerce's National Institute of Standards and Technology (NIST). This also includes the use of common security configurations available from NIST's Web site at: http://checklists.nist.gov.

(b) To ensure that appropriate security controls are in place, Contractors must follow the procedures set forth in "VA Information and Information System Security/Privacy Requirements for IT Contracts" located at the following Web site: http://www.iprm.oit.va.gov.

(c) The C&A requirements do not apply. A Security Accreditation Package is not required.

4.2 Contract Personnel Security

All contractor employees who require access to the Department of Veterans Affairs' computer systems shall be the subject of a background investigation and must receive a favorable adjudication from the VA Security and Investigations Center (07C). The level of background security investigation will be in accordance with VA Directive 0710 dated September 10, 2004 and is available at: http://www.va.gov/pubs/asp/edsdirec.asp (VA Handbook 0710, Appendix A, Tables 1 - 3). Appropriate Background Investigation (BI) forms will be provided upon contract (or task order) award and are to be completed and returned to the VA Security and Investigations Center (07C) within 30 days for processing. Contractors will be notified by 07C when the BI has been completed and adjudicated. These requirements are applicable to all subcontractor personnel requiring the same access. If the security clearance investigation is not completed prior to the start date of the contract, the employee may work on the contract while the security clearance is being processed, but the contractor will be responsible for the actions of those individuals they provide to perform work for the VA. In the event that damage arises from work performed by contractor personnel, under the auspices of the contract, the contractor will be responsible for resources necessary to remedy the incident.