PWS_WAMC_Incident Management System Software.pdf

PERFORMANCE WORK STATEMENT (PWS)

Incident Management System

Part I

General Information

1.0 GENERAL: This is a non-personal services contract to provide Womack Army Center (WAMC) a Hospital Incident Command System (HICS) compliant emergency communication and record logging computer-based module. The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government. The Contractor, in turn, shall be accountable to the Government for Contractor or subcontractor personnel.

Womack Army Medical Center’s (WAMC) primary mission is to provide the highest quality care, maximize the medical deployability of the force, and sustain exceptional education and training programs. WAMC supports the Fort Bragg Army installation which is the largest military installation in the world by population and is home to nearly 10 percent of the Army’s active component forces. WAMC provides comprehensive care to prevent disease, restore health and maximize readiness of the active force and their families.

The current requirement requires a “web-based” software solution to allow for coordination of effort and manpower between multiple directorates and agencies. The Incident Management system provides a format and model to communicate with other departments in order to place logs and coordinate effort during an event. An “event” can be weather, civil, logistics, or training related activities that require some level of coordination and information logging. WAMC’s EOC and affected directorate logged events within the software system to coordinate the effort of the different departments and directorates. The Incident management system also provides a digital foot-print and historical data log of all events that occur to give command oversight and provide a source for quality control. To include providing a source of information and a means to quickly distribute communications within the hospital so that interdepartmental command can accurately address their employees and take appropriate measures to overcome present or perceived obstacles.

1.1. Description of Services / Introduction: The Contractor shall provide access to updates and 24hr customer service for the computer-based module. The Contractor shall perform in accordance with (IAW) their terms and conditions of the contract and consistently with the established standards in this PWS and contract.

1.1.1. WAMC requires a USA-made, web-based software, unlimited use with enterprise - based solution.

1.1.2. The contractor shall be well-versed in DoD security protocols. The contractor shall be U.S.

based with prior experience working on DoD facilities. The contractor shall adhere to WAMC’s specifications and may not substitute an inferior product. The contractor shall provide all necessary safeguards and protection specifications to WAMC’s Information Management Department (IMD). The service requirements shall have 24/7/365 system availability with no interruptions, except for pre-scheduled maintenance (with at least 10 days’ notice, provided it does not conflict with WAMC operations). 24/7/365 phone support for immediate service assistance. The System and Support Specifications should be a full 24/7 access to all WAMC systems, including HICS modular functions priority routing to expert engineers for accelerated case resolution. Customized account configuration and optimization support. Expedited responses and resolutions, prioritized over standard service plans. Proactive monitoring with automatic resolution of service-impacting issues. API implementation support and custom integration guidance upon request and optional customization of the Standard Service Agreement. All updates must be fully compatible with WAMC’s existing operating system. If compatibility issues arise, the contractor is responsible for providing access to a functional version at no additional cost. The contractor must maintain ongoing communication with WAMC’s IMD to ensure all hardware and software meet requirements, preventing service delays or downtime.

1.1.3. All work for this project shall be performed on WAMC campus in Fort Bragg, NC.

1.1.4. COMPATIBILITY. All equipment, software, and hardware shall remain compatible with the existing equipment and software. Any software additions or upgrades must be fully supported by the manufacturer and not proprietary to any other company.

1.2. BACKGROUND: WAMC has a mission to serve the families and soldiers of Fort Bragg and the 82nd Airborne division that makes Fort Bragg the largest Army installation on the east coast. WAMC additionally serves all local military retirees and their Tricare recipients. It is the MEDCEN’s mission to ensure the health and wellbeing of all those who come, use, or work within, or on WAMC campus, or satellite facilities. WebEOC allows for patient flow and incident logs that can be transmitted to any department. During emergencies or events, Incident Management System is used to log events and discuss happenings via a text messenger. The messages and logs serve as evidence of incidents during events and allow better post action reviews and quality improvement operations.

1.3. OBJECTIVES: The basic service objective includes the following based off the requirements as noted in Par. 1.1.1.

1.3.1. Provide: Contractor shall provide unlimited access to the Incident Management System program along with any updates during the performance period. Access shall not be interrupted unless there is a prescheduled down period with an alert no less than 10 days prior to the schedule down period. Otherwise, module access should be seven days per week, 365 days per year. Technical support shall be available 24hr hours per day seven days per week to assist if any problem with the system occurs.

1.3.2. Contractor shall supply and maintain the most recent Hospital Incident Command System (HICS) module along with forms.

1.4. SCOPE: The contract focuses solely on the Incident Management System product and services for the utilization during incidents and events.

1.5. PERIOD OF PERFORMANCE. The period of performance for this contract includes a 12-month base period of performance and four (4) 12-month option periods. During the contract period updates will be installed along with any newer versions of the current software. Trouble-shooting will be expected after installation to ensure full compatibility.

1.5.1. During period of performance, contractor will maintain the Incident Management System software application on the WAMC computer system and grant access thru routing ensuring security and coordination with IMD designated computer and systems designation. Contractor will be given access to site to ensure compatibility and functionality of service (as necessary).

Failure to maintain system accessibility, within reason, will constitute a failure of this contract and liquidation or termination of cause. Contractor must use due diligence to ensure they have all correct contact information to ensure system shall be compatible with WAMC’s computer and security protocols. Contractor shall ensure that they meet all specifications and the system produces rapid and accurate information. It must be available for utilization 24hrs per day. The system must compile, collect, and compute the data on the events and incidents the software is utilized. Service shall have 24x7 customer support and a dedicated account manager. It is the vendor’s responsibility as a salient feature, that any and all data is secured and that they can be held responsible if the data is leaked due to a hacking or computer virus.

1.5.2. Phase In/Out Period.

1.5.2.1. Phase-In Period: Not Applicable.

1.5.2.2. Phase-Out Period: Not Applicable.

1.6. Quality Control: Quality Control is the responsibility of the Contractor. The Contractor shall develop, implement, and maintain a Quality Control Program (QCP) to ensure all work described in this contract is performed at or above the standard defined in the Performance Requirements Summary (PRS). The QCP is developed by the contractor to ensure that it performs and delivers high-quality service and products. And it shall include methods of documenting and enforcing quality control operations of both prime contractor and or subcontractor work; including inspection and testing.

1.6.1. Quality Control Program. The Government is committed to a highly interactive relationship between quality control by the Contractor and quality assurance by the government recipient of services. This relationship shall be achieved through an effective Prevention Based Quality Control Program dedicated to ensuring the best possible products and services to end users. The Contractor shall provide the final written Quality Control Plan (QCP) no later than 10 days after the awarding of the contract and no later than 5 days of any proposed changes to the KO. All QCP proposals must been seen and approved by the COR and KO prior to implementation. The Quality Control Plan shall address as a minimum:

Within 24 hours of request from the COR or KO, the contractor shall provide, all reports generated as a result of the QCP. This shall include any summary information used to track quality control, including any charts/ graphs.

The Contractor’s QCP shall be incorporated into and become part of this contract after the plan has been accepted by the KO. Proposed changes made after KO acceptance shall be submitted in writing through the COR to the KO for review and acceptance prior to implementing any revision. The Contractor’s QCP shall be maintained throughout the life of the contract and shall include the Contractor’s procedures to routinely evaluate the effectiveness of the plan to ensure the Contractor is meeting the performance standards and requirements of the contract.

1.6.2. Inspection System. Not Applicable.

1.6.3. Inspection Files. The contractor shall document all inspections conducted, and the necessary corrective and preventive actions taken. This is only applicable if a technician is needed to come to MEDCEN.

1.6.4. Deficiency Identification, Prevention and Correction. Not Applicable

1.6.5. The contractor shall keep Technician notes on-site of all inspections conducted by the Contractor and necessary corrective action taken. These documents shall be available for inspection by the Government during the term of the contract. This is only applicable if a technician is called to MEDCEN.

1.6.6. The QCP at a minimum shall address process control and continuous process improvement; procedures for scheduling, conducting and documentation of inspection;

discrepancy identification; procedures for root cause analysis; corrective and preventive action procedures to include procedures for addressing Government discovered non-conformances;

procedures for trend analysis; and procedures for collecting and addressing customer feedback/complaints. The QCP shall document process control and process performance measurement procedures that shall include how the Contractor shall implement preventive corrective actions. The Contractor shall demonstrate that it has designed quality into the delivery of services thereby mitigating the risk(s) associated with delivery of deficient or nonconforming services.

In the development of and maintenance of the QCP, the contractor shall maintain at least a biyearly contact with the COR where by all performance standards can be reviewed. Any changes or delays need to be relayed to the COR and KO with a 3 to 5 day lead upon discovery of the delay. At least single initial formal meeting shall be held to insure full understanding and to uphold the expectations of service. Government holds the right to schedule additional meetings if necessary.

1.6.7. The Contractor must ensure continual quality improvements by inspecting and informing in regards to areas that will require preventive maintenance. Contractor will sustain focus throughout the QCP and report monthly via a Process Improvements Tracker (PIT), undergoing initiatives to streamline processes, improve service and detail benefits to the Government.

1.6.8. Upon request from the COR, the Contractor shall provide, all reports generated as a result of the Contractor’s quality control efforts. This shall include any summary information used to track quality control, including any charts/graphs.

1.7. Contractor Discrepancy Report (CDR): When the Contractor's performance is unsatisfactory, a CDR will be issued. The Contractor shall reply in writing within five (5) work days from the date of receipt of the CDR, giving the reasons for the unsatisfactory performance, corrective action taken, and procedures to preclude recurrence.

1.8. Quality Assurance: The COR will evaluate the Contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan is primarily focused on what the COR must do to ensure that the Contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s). When an observation indicates defective performance, the COR will require the Contractor or designated on-site representative to initial the observation to acknowledge the defective performance. The acknowledgement of the observation does not necessarily constitute Contractor concurrence with the observation, only that the Contractor has been made aware of the defective performance.

Clauses of FAR 52.246-1, Inspection of Supplies – Fixed Price and FAR 52.246-4, Inspection of Services – Fixed-Price shall be followed as an assisting means of determination for the quality of worked performed.

1.9. Property Management System: Not Applicable.

1.10. Other Property Management Requirements.

1.10.1. INSTALLATION ACCESS.

The Contractor shall fully comply with all vehicle inspections and verifications of identification at all Fort Bragg Access Control Points (ACPs). Contractors shall obtain appropriate passes to be permitted onto Fort Bragg. Fort Bragg Travel Passes may be obtained at the All-American Freeway Guardhouse after successfully passing a background check. All passes obtain shall be for a year duration unless otherwise stated. All vehicles which lack such a pass will not be allowed on post and thus turned around at the gate.

Failure to gain access onto post shall not be a legitimate reason to be late or deficient with any works. It is up to the Contractor to ensure that this pass is held and maintained during the course of the contract.

1.10.2. CONSERVATION OF UTILITIES.

In the rare occasion that the contractor must send an employee to WAMC, the contractor will ensure that all lights are turned off after use and all water systems are turned off after use. This is a software based contract where conservation of utilities is only applicable in the rare occasion that an employee must arrive due to a newer add-on service or discrepancy with the software that required a physical technician to assess the problem.

1.10.3. SAFETY REQUIREMENTS.

1.10.3.1. The Contractor shall comply with OSHA and all pertinent provisions of the publication 29 CFR 1910 and EM 385-1-1 and all local, State and Federal safety laws, rules and regulations, including environmental. Any apparent conflict with the requirements of the contract and above shall be immediately brought to the attention of the Contracting Officer or his authorized representative for final resolution. The Contractor shall be liable for all fines, penalties, and costs which result from violations of, or failure to comply with, rules and regulations. All unsafe acts or conditions fostered by the Contractor or Contractor personnel may be grounds for the Contracting Officer or his authorized representative to halt any and all Contractor performance until such unsafe conditions are corrected.

1.10.3.2. Equipment Safety. Any equipment used in performance of this contract may be inspected by the COR at any time. If the equipment is at any time deemed unsafe or unserviceable by the COR, the Contractor shall remove equipment from the area immediately.

The Government does not assume and hereby specifically disavows any duty to inspect the equipment in order to assure safe operation. The Contractor or subcontractor(s) at any tier are at all times responsible for assuring equipment is used in a safe, responsible manner. The Contractor shall in all cases ensure any equipment used in the performance of this contract is in a safe and serviceable condition.

1.10.3.3. Personnel Safety. The Contractor shall provide safety barriers or tape to show work area. The Contractor shall immediately correct all safety deficiencies upon findings or notification of the deficiencies. Contractor shall notify the COR of the corrective action to be taken. The Contractor shall not leave equipment unattended while in use or unsecured while at the work site.

1.10.3.4. Accident Protection and Emergency Medical Treatment. All work crews, office personnel and the COR shall be provided with information pertaining to the Contractor's arrangement for emergency medical treatment. This information shall include the following:

Local Hospital: Name Phone No:

Local Ambulance: Name Phone No:

Local Doctor: Name Phone No:

1.11. Recognized Federal Holidays. The Contractor is normally not required to perform services on recognized federal holidays. However, that requirement is subject to mission execution requirements. The recognized federal holidays include:

New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day Washington’s Day Veteran’s Day Memorial Day Thanksgiving Day Independence Day Christmas Day Juneteenth

When a holiday occurs on a Saturday, Federal employees are normally granted the previous Friday as the holiday observance. When a holiday occurs on a Sunday, Federal employees are normally granted the following Monday as the holiday. The contractor shall work on the days the Government is scheduled to work.

When an unforeseen installation closure occurs on a regularly scheduled day of work, the Contractor will have the following shall not be given a day by which to take off or work around.

Due to the nature of the contract and items in question, WebEOC must be operational at all times.

1.11.1. Hours of Operation: The Contractor shall be responsible for providing services, between the hours of 07:30 AM to 04:30 PM; Monday through Friday, except federal holidays or when the government facility is closed due to local or national emergencies, administrative closings or similar government directed facility closings. The Contractor shall at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce are essential to successful performance under this contract. No overtime (OT) or compensatory time (CT) is authorized. Contractor personnel shall not exceed a 40 hour work week; flexible work schedule may be considered. Any deviation from this time period will be coordinated with the COR and a minimum of 48 hours in advance.

1.12. SECURITY REQUIREMENTS.

1.12.1. SECURITY CLEARANCE. All contractor personnel, to include assistants and technical personnel, physically working on programming/configuration of the system or requiring access into Womack Army Medical Center Local Area Network (WAMC LAN), shall have a minimum, a non-disclosure policy, maintain internal security policy, abide by WAMC security (Computer based and Physical security based protocols). Personnel must submit the following information for verification of clearance prior to the ward of contract: Full Name, SSN, Date of Birth, and Place of Birth. Contract personnel are responsible for completing any required IA training for access into the WAMC LAN.

1.12.2. Safeguarding For Official Use Only (FOUO) Information. During normal duty hours, the Contractor shall place information determined to be FOUO in an out-of-sight location, if visitors, casual traffic, and other non- Government/Non-Contractor personnel have access to the work area. During non-duty hours and at the close of business, the Contractor shall store FOUO records, so as to preclude unauthorized access. The transmission, termination of, and disposal of, FOUO documents will be consistent with Army Regulations (AR) 380-5, Protection of FOUO, Information and Installation Policy.

1.12.3. Network Access. Contractor personnel requiring access to Government-owned computer networks must obtain the proper background level of investigations, with favorable results, at the Contractor’s expense, prior to being issued a user identification and password IAW AR 380-67 and AR 380-5. Additionally, Contractor employees and associated subcontractor employees must complete the DoD IA, Information Awareness training, before issuance of network access, and annually thereafter.

1.12.4. The requirement to have all contractors to hold and use DOD issued Common Access Cards (CAC) shall be waived as no technician will physically need to work on the software at or on WAMC. If technical assistance in person is needed, than COR will arrange for the technician to get access to the system and be observing the technician throughout the duration of the visit.

1.12.5. National Industrial Security Program (NISP). This requirement shall be waived in that no personnel shall be physically arriving to WAMC. No contact with Confidential or Secret information shall be transmitted using WebEOC and any information transmitted is the sole property of the US government not to be saved or used by the contractor in any shape or form.

1.12.6. Special Qualifications.

1.12.6.1. The Contractor shall be responsible for ensuring all personnel performing work under this contract possess and maintain current certifications as indicated in PWS; security requirements during the execution of this contract.

1.12.6.2. Contractor personnel performing work under this contract shall be able to read, write, speak, and understand the English language to effectively carry out all contract requirements.

They shall have a command of both the written and spoken English language to properly clearly, and effectively communicate in person or via electronic devices (telephone or Email) with co-workers, customers, and the general public.

1.12.6.3. Contractor personnel performing work under this contract shall be U.S. citizens unless the provisions of Army Regulation 25-2, Information Assurance have been fully complete and approval has been granted by the Government for the non-U.S. citizen to perform the required support.

1.12.6.4. Contractor shall be responsible for ensuring all personnel performing work under this contract possess and maintain current Information Assurance Technician (IAT) Level I professional certification during the execution of this contract.

1.12.6.6. Access and General Protection/Security Policy and Procedures: All Contractor personnel performing work under this contract shall comply with applicable installation, facility and area commander installation/facility access, local security policies and security procedures provided by the Security Manager Government representative. Contractor personnel shall provide all information required for background checks to meet installation access requirements to be accomplished by the installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor personnel shall comply with all personal identity verification requirements as directed by Department of Defense (DoD), HQ Department of Army (DA) or local policies. Sponsoring organizations, activities, and persons will be responsible for monitoring contractor access by submitting a completed and approved DES Form 118 to the Installation All American VCC, detailing the contracted services to be performed, location of services, and duration of the contract. Contractors requesting access for less than one year may receive an AIE visitor card on a case by case basis, or a temporary vehicle pass for 90 days.

Contractor cards will be issued for periods of one to three years depending on the terms of their contract. AIE card expirations may be updated to reflect a new contract period by submitting an approved DES Form 118 to the All American VCC. Renewed short term passes must be re-processed at the All American VCC. In addition to the changes otherwise authorized by this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in Contractor and subcontractor security matters or processes.

1.12.7. Information Security Plan.

1.12.7.1. The Contractor shall develop and implement an Information Security Plan IAW AR 380-5 AR 380-67, Fort Bragg regulation 380-5, FB 380-67, and FORSCOM supplement 1) to AR 380-5 for the control of classified information. The contractor’s information. The Contractor information security program shall include applicable provisions of AR 380-series regulations.

1.12.7.2. Information assurance (IA)/information technology (IT training: The Contractor employees working IA/IT functions shall comply with DoD and Army training requirements in DoDD8570.01, DoDD 8570.01 and AR 25-2 within 180 days of employment.

1.12.8. Access and General Protection / Security Policy and Procedures:

1.12.8.1. All Contractor personnel performing work under this contract shall comply with applicable installation, facility, and area commander installation/facility access, local security policies and security procedures, and security procedures provided by the Security Manager Government representative. Contractor personnel shall provide all information required for installations Provost Marshal Office, Director of Emergency Services or Security Office.

Contractor personnel shall comply with all personal identification verification requirements as directed by Department of Defense (DoD), HQ Department of the Army (DA) or local policies.

Sponsoring organizations, activities, and persons will be responsible for monitoring contractor access by submitting a complete and approved DES Form 118 to the Installation All American VCC 5 detailing the contracted services to be performed, location of services, and duration of the contract.

1.12.8.2. Contractors requesting access for less than one year may receive an AIE visitor card on a case by case basis, or a temporary vehicle pass for less than 90 days. Contractor cards will be issued for periods of one to three years depending on the terms of their contract. AIE cards expirations may be updated to reflect a new contract period by submitting an approved DES Form 118 to the All American VCC 5 guard post. Renewed short term passes must be reprocessed at the All American VCC. In addition to the changes otherwise authorized by this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in Contractor and subcontractor security matters or processes.

1.13. Anti-Terrorism Program.

1.13.1. Anti-Terrorism Program In accordance with IAW PARC Policy Alert 14-33, Homeland Security Presidential Directive 12 (HSPD-12) issued 31 Dec 13, all contractor employees, to include subcontractor employees, requiring access to Army installations, facilities and controlled access areas shall complete Anti-Terrorism (AT) Level 1 awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR or to the contracting officer, if a COR is not assigned, within 15 days after completion of training by all employee and subcontractor personnel. AT Level 1 awareness training is available at the following website:

https://jkodirect.jten.mil/Atlas2/page/login/Login.jsf

1.13.2. iWATCH TRAINING. This standard language is for contractor employees with an area of performance within an Army controlled installation, facility or area. The contractor and all associated sub-contractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 calendar days of contract award and reported to the COR NLT 45 calendar days after contract award. New employees shall complete the training within 10 calendar days of commencing performance with the results reported to the COR NLT 15 calendar days after contract award.

1.13.2.1. iWatch is simply common awareness. Contract employees can be good sources of information. iWatch training would include organization instructions on “things to look for” and a phone number to call in case the contract employees have information regarding possible terrorist or criminal activities. Providing contractors with awareness materials such as the iWatch brochure or wallet card is a cost effective alternative to training. The card describes suspicious activity and can be modified to include the COR in reporting procedures. Samples of the iWatch brochure and posters are available on the Antiterrorism Enterprise Portal (ATEP) at https://army.deps.mil/army/sites/PMG/prog/ATEP/iWATCH%20Army/Forms/AllItems.aspx and https://www.army.mil/e2/c/downloads/287489.pdf

1.13.3. Contractor Employees Requiring Access to Government Information Systems:

Contractor shall have access to Government-controlled information systems during performance of work under this contract. All contractor employees and associated subcontractors who require access to a government information system shall be registered in the ATCTS (Army Training Certification Tracking System) at commencement of support services, and must successfully complete the DoD Information Assurance Awareness prior to access to the information systems.

Training shall be required annually after the initial training. Completion certificates shall be submitted to the COR within fifteen (15) calendar days from date of commencing performance under this contract.

1.14. Safety:

1.14.1. The contractor shall perform work in a safe manner as required by OSHA Safety and Health Requirements. Provide a verbal notification to the KO as soon as possible of each occurrence of damage to Government property or an accident resulting in death, injury, https://www.us.army.mil/suite/doc/41924024 https://www.us.army.mil/suite/doc/41924024 https://jkodirect.jten.mil/Atlas2/page/login/Login.jsf https://army.deps.mil/army/sites/PMG/prog/ATEP/iWATCH%20Army/Forms/AllItems.aspx https://www.army.mil/e2/c/downloads/287489.pdf occupational disease, or adverse environmental impact. Provide a completed copy of required Accident Investigation Reports to the KO within five calendar days of each occurrence.

1.14.2. Environment and OSHA:

The Contractor shall comply with all local, state, and Federal environmental and occupational safety laws, rules, and regulations. Any apparent conflict between compliance with such local, state and Federal laws, rules and regulations, and compliance with the requirements of the contract shall be immediately brought to the attention of the KO and/or the COR final resolution.

The Contractor shall notify the KO and COR in writing in addition to any verbal notification of such conflicts. The Contractor shall be liable for all fines, penalties, and costs which result from violations of, or failure to comply with, all such local state, or Federal laws, rules, and regulations. All unsafe acts or conditions fostered by the Contractor or Contractor personnel may be grounds for the KO or COR, to halt all Contractor performance with a commensurate deduction of monies due the Contractor until such unsafe conditions are corrected. The Contractor shall take due caution not to endanger personnel during performance of this contract.

Upon discovery of any hazard such as, but not limited to, fire, or large fuel spill, the Contractor shall immediately notify the KO or COR.

1.15. Special Qualifications.

1.15.1 Organizational Conflict of Interest: The contractor shall not employ any person or perform a contract in a situation where the existence of conflicting roles may bias the contractor's judgment or prevent unfair competitive advantage in accordance with Organizational Conflict of Interest Rules in FAR 9.5.

1.15.2. General.

The Contractor shall be responsible for ensuring all personnel performing work under this contract possess and maintain current certifications as indicated in this PWS during the execution of this contract. Training is only required for technician who would be performing service at WAMC otherwise training is not applicable in this contract.

1.15.2.1. Training as indicated below:

a. OPSEC Training: Per AR 530-1, Operations Security, new contract employees shall complete Level I OPSEC training within 30 calendar days of their reporting for duty and annually thereafter.

b. Information assurance (IA)/information technology (IT) training: The Contractor employees working IA/IT functions shall comply with DoD and Army training requirements in DoDD 8570.01, DoDD 8570.01-M and AR 25-2 within 180 days of employment.

c. HIPAA TRAINING: Not Applicable.

d. Network Access. Contractor personnel requiring access to Government-owned computer networks must obtain proper background level of investigations with favorable results, at the Contractor’s expense, prior to being issued a user identification and password IAW AR 380-67 and AR 380-5. Additionally, Contractor employees and associated subcontractor employees must complete the all network access programs as outlined in below in the PWS.

e. ATCTS REGSISTRATION. All contractor employees who require access to a government information system must be registered in the ATCTS (Army Training Certification Tracking System) at commencement of service, and must successfully complete the DOD Information Assurance Awareness prior to access to the information systems and then annually thereafter.

f. OPSEC SOP. For Contracts that Require an OPSEC Standing Operating Procedure/Plan. The contractor shall develop an OPSEC Standing Operating Procedure (SOP)/Plan within 90 calendar days of contract award, to be reviewed and approved by the responsible Government OPSEC officer, per AR 530-1, Operations Security. This SOP/Plan will include the government's critical information, why it needs to be protected, where it is located, who is responsible for it, and how to protect it. In addition, the contractor shall identify an individual who will be an OPSEC Coordinator. The contractor will ensure this individual becomes OPSEC Level II certified per AR 530-1.

g. OPSEC TRAINING. For Contracts that Require OPSEC Training. Per AR 530-1, Operations Security, new contractor employees must complete Level I OPSEC training within 30 calendar days of their reporting for duty. All contractor employees must complete annual OPSEC awareness training.

h. IA / IT CERTIFICATION. Information Assurance (IA)/Information Technology (IT) Certification. Per DoD 8570.01-M, DFARS 252.239.7001 and AR 25-2, the contractor employees supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award.

i. Information Assurance (IA). Contractor personnel requiring access to U.S. Government Information Systems to fulfill their duties shall possess the required favorable security investigation, security clearance, formal access approval, and need-to-know prior to being granted access to any Government computer or computer network and must be monitored at all times. Only those possessing a SECRET level clearance have free access to the network without direct supervision.

j. IT-I Level of Security Access is required for Contractor personnel in IA Position working with infrastructure devices, IDSs (Intrusion Detection System), routers, System Administration or Network Administration, with privileged-level access to control, manage, or configure Information Assurance tools or devices, individual information systems, networks, and enclaves. At a minimum, such Contractor Personnel shall require a favorably completed NAC (National Agency Check), initiation of SSBI (Single Scope

Background Investigation), completion of SF85P, SF86, and Supplemental Questionnaire.

k. IT-II Level of Security Access is required for Contractor personnel in IA positions requiring the work with operating systems administration of common applications or enclaves, or back-up operators, with limited privileged level access to control, manage, or configure information systems or devices. At a minimum, such contractor personnel shall require a favorable review of local personnel, base/military, medical and other security records as appropriate, initiation of a NACLC (National Agency Check with Law and Credit), and completion of the SF85P or SF86 and Supplemental Questionnaire.

l. IT-III Level of Security Access is required for Contractor personnel in positions as normal users, power user on individual systems for configuration with non-privileged level of access to information systems and devices. At a minimum, such contractor personnel shall require a favorable review of local personnel, base/military, medical and other security records as appropriate, initiation of a NAC, and completion of the SF85P and Supplemental Questionnaire.

1.15.3. Key Personnel: Key personnel shall not be added to or removed from the contract without express acknowledgement of the COR. Any changes to the working status of these key personnel shall be transmitted (in writing) to the KO/COR within ten (10) work days of the proposed change. If, for any reason, any of the key personnel becomes, or is expected to become, unavailable for work under this contract for a continuous period exceeding 30 work days the contractor shall promptly replace personnel the personnel who possess qualifications equal to or better than that of the original employee. The Contractor shall ensure all key personnel terminated or released from employment under this contract are replaced within ten (10) work days of the termination.

1.15.3.1. The follow are considered key personnel by the Government: the Contractor shall provide a Program Manager (PM) who shall be responsible for the performance of the work under this contract. The name of this person and an alternate PM (APM), who shall act for the Contractor when the PM is absent, shall be designated in writing to the KO at the post award conference. The PM or APM shall have full authority to act for the Contractor on all contract matters relating to daily operations of this contract. The PM or APM shall be available between the hours of 0730 AM to 4:30 PM (16:30 hours), Monday through Friday, except federal holidays or when the government facility is closed for administrative reasons.

1.15.3.2. Qualifications for all Key Personnel:

1.15.3.2.1. PROJECT MANAGER (PM).

The name of the PM, who shall act for the Contractor, shall be designated and provided in writing to the Contracting Officer at the time of award. The Contractor shall notify the Contracting Officer in writing at least one week (5 business days) prior to any change to the PM.

The PM shall be empowered with authority to make management decisions, which may arise in day-to-day operations without undue delay.

The PM or alternate shall be available for telephone consultation during normal duty hours 7:30 a.m. – 4:30 p.m. or shall be available to meet with the COR to discuss problem areas. Also, after normal duty hours the PM or designated alternate shall be available for telephone consultation or shall be available to meet with COR for emergencies.

The Contractor shall furnish phone numbers for contract manager/alternate, for normal duty hours and after normal duty hours to the Contracting Officer.

The Project Manager and alternate(s) must be able to read, write, speak and understand English.

1.15.3.2.2. EMPLOYEES.

The Government has the right to restrict the employment under the contract of any contractor employee, or prospective contractor employee, who is identified as a potential threat to the health, safety, security, general well-being or operational mission of the installation and its population.

The contractor shall not employ any person who is an employee of the United States Government if the employment of that person would create a conflict of interest if applicable.

Contractor shall comply with all safety requirements, in accordance with Army Regulation (AR) 385-10, Occupational Safety Health Administration (OSHA) and Emergency Management (EM) 385-1-1.

Any employee that shall come to WAMC to work on the software must be trained and certified in with Juvare to perform services. Person shall have at least 1 year of experience with the company and hold and excellent record of customer service. Person must be certified to work on programs and hold qualifications to be a software / computer technicians. All employees whom shall work directly with WAMC shall speak, read, and understand English. Technicians who are to arrive and come on post shall have their past history reviewed to ensure they have not outstanding warrants or bars that would prevent them from coming on to a military installation.

Technician shall be a US citizen that comes on post with a valid driver’s license and other form of identification. Those who arrive at WAMC and not appearing as a professional may be asked to leave.

1.15.4. Other Qualifications: None

1.15.5. Identification of Contractor Personnel.

All contractor personnel attending meetings, answering government telephones, and working in other situations where their Contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of their public that they are government officials.

The Contractor shall provide each employee with a clearly readable picture identification badge.

The badge shall be made of a durable material or plastic, and shall include, as a minimum, the employee’s name and current/recent picture, badge number, and Contractor’s name. These ID badges shall be consecutively numbered and made accountable by the Contractor. The Contractor shall ensure that personnel wear the badge in plain view at all times when performing work under this contract. The Contractor shall provide a list of badge numbers to the Contracting Officer at the post award conference. Additionally, all personnel working within WAMC must be issued an identification badge by the WAMC ID badge office and it must be worn at all times within the facility. The identification shall be MEDCEN specific and identify them as a contractor. Contractor shall not gain access to doors and controlled locations.

Contractor will be escorted to any secure locations WAMC specific badges shall be worn at all times, when performing work under this contract. Contractor personnel shall wear the WAMC contractor identification behind all other badges and shall wear the set of identifications on their collar so that it rest on their chest and thus visible in a conspicuous place on the front of exterior clothing and above the waist, except when safety or health reasons prohibit such placement or when being used for computer access.

1.15.6. Contractor Personnel Appearance and Performance: It is essential that all Contractor personnel meet the highest standards of professionalism and personal integrity. The Contractor shall ensure their personnel do not perform work under the influence of alcohol, illegal prescribed drugs or any other incapacitating agents. Contractor personnel shall be neatly groomed and dressed in business casual attire to present a professional appearance at all times.

As referenced in 1.15.5, Contractor employees will maintain on their persons and display an ID badge provided to them by the MEDCEN thus identifying them as contracted employees. This shall be maintained in a visible location with preference of on hooked to the collar of a collared shirt. Exception to this are only allowed for specific medical related purposes.

Conduct of Personnel: The Contracting Officer may require the Contractor to remove from the job site any employee working under this contract for reasons of misconduct, security, or found to be under the influence of alcohol, drugs, or other incapacitating agents. Contractor employees shall be subject to dismissal from the premises upon determination by the KO that such action is necessary in the interest of the Government. In accordance with (IAW) joint Ethics Regulation, DOD 550.7-4, and 18 U.S.C. 1382 (1972), the removal from the job site or dismissal from the premises shall not relieve the Contractor of the requirement of providing sufficient personnel to perform the services as required by this contract.

1.16. Contractor Travel: Not Applicable.

1.17. Other Direct Costs (ODC): Not Applicable.

1.18. Data Rights: The government has unlimited rights to all documents/material produced under this contract to the extent permitted by the data rights clauses. The parties mutually acknowledge their understanding that this is the government’s intent. All documents and materials, to include the source codes of any software, produced under this task order shall be government owned and are the property of the government with all rights and privileges of ownership/copyright belonging exclusively to the government. These documents and materials may not be used or sold by the contractor without written permission from the contracting officer. All materials supplied to the government shall be the sole property of the government and may not be used for any other purpose. This right does not abrogate any other government rights.

1.19. Post Award Conference/Periodic Progress Meetings: The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation (FAR) Subpart 42.5. The post award conference will also be utilized to ensure contractor understands all HSPD-12 requirements. The KO, COR (and other government personal) will hold a quarterly progress meet with the Contractor to review the Contractor's performance. At these meetings the KO and COR will apprise the Contractor of how the Government views the Contractor's performance and the Contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the Government.

1.20. Contracting Officer Representative (COR): The COR will be identified by separate letter of appointment. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: Assures that the Contractor performs the technical requirements of the contract; performs inspections necessary in connection with contract performance; maintains written and oral communications with the Contractor concerning technical aspects of the contract; issues written interpretations of technical requirements, including government drawings, designs, specifications; monitors Contractor's performance and notifies both the KO and Contractor of any deficiencies; coordinates availability of government furnished property, and provides site entry of Contractor personnel.

A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting contract.

1.20.1. The Contracting Officer will designate, in writing, an Alternate Contracting Officer’s Representative. The Alternate COR will have authority to take certain actions specifically provided and within the limitations prescribed in the designation. A copy of the designation will be furnished to the Contractor. In no event will the Alternate COR, by virtue only of his/her designation as such, empowered to execute or agree to any contract modification thereof. The Contracting Officer will retain the ultimate responsibility for the administration of the contract.

The Alternate COR’s authority shall only be in effect during the absence of the COR.

PART 2

DEFINITIONS & ACRONYMS

2. DEFINITIONS AND ACRONYMS:

2.1. DEFINITIONS:

2.1.1. CONTRACTOR. A supplier or vendor awarded a contract to provide specific supplies or service to the Government. The term used in this contract refers to the prime.

2.1.2. CONTRACTING OFFICER (KO). A person with authority to enter into, administer, and/or terminate contracts, and to make related determinations and findings on behalf of the Government. Note: The only individual who can legally bind the Government.

2.1.3. CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S.

Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor, as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications.