PWS Natus cameras and amplifiers.pdf

VA Boston Healthcare System Natus Electroencephalography (EEG) Camera and Amplifier purchase

Performance Work Statement

36C241-23-AP-2206

Privacy Statement:

Contractor shall adhere to all VA Privacy & Security, and Privacy Act and HIPAA requirements if exposed to protected health information (PHI) or when obtaining or reviewing information. This includes all log files, error traps, screen capture images and database query results used to aid staff with product troubleshooting or product support activities.

1.0 Introduction

VA Boston Healthcare System (VA BHS) is looking to procure Cameras and Amplifiers to add to their Electroencephalography (EEG) systems from Natus. This equipment will integrate into existing Natus environment and infrastructure such as the NeuroWorks software.

2.0 Background

This procurement allows VABHS to have newer equipment for Veteran studies and treatment. These cameras and amplifiers are part of the Natus NeuroWorks system and will be installed by Natus. The system in place provides care to patients in both the West Roxbury VA (1400 VFW Parkway, West Roxbury, MA 02132) and Jamaica Plain VA (150 South Huntington Avenue, Jamaica Plain, MA 02130). With this procurement, VA Boston will be able to better serve those sites with upgraded equipment.

3.0 Scope

The scope of this procurement is to install hardware throughout the Neurology Department’s EEG system in West Roxbury and Jamaica Plain. This includes the installation of ceiling mounted cameras which connect to the network and NeuroWorks software.

Specifically, West Roxbury will be receiving two (2) each of IP PTZ 1080p HD Color/BW Camera on ErgoJust cart, Natus Brain Monitor Amplifier, and Medical Grade UPS with Isolation - 110V ErgoJust Cart; nine (9) EMU40EX with new Natus Base and eleven (11) 1080p HD IP PTZ Camera Ceiling. At Jamaica Plain, they will be receiving two (2) each of IP PTZ 1080p HD Color/BW Camera on ErgoJust cart, Natus Brain Monitor Amplifier, and Medical Grade UPS with Isolation - 110V ErgoJust Cart; one (1) each of EMU40EX with new Natus Base and 1080p HD IP PTZ Camera Ceiling. The scope also includes all work required for installation and successful network connectivity and training for users, physicians, and nurses.

4.0 Performance Requirements

The system shall be able to do the following things:

• Interface to the current network of VA Boston

• Ability to interface with the current Natus Equipment, Servers, and Software

• Interface with current VA infrastructure in ceiling

5.0 Deliverables

The contractor shall be able to deliver and install all hardware, software, and support for the installation and proper functioning of this Neurology system.

6.0 Applicable Directives

The contractor must comply with the rules and regulations of the Veterans Affairs Administration. All contractors accessing the equipment during installation and training must be certified (i.e. proper approval shall be obtained from the VA Information System Security Officer).

The contractor, their personnel, and their subcontractors shall be subject to the Federal laws, regulations, standards, and VA Directives and Handbooks regarding information and information system security as delineated in this contract.

A contractor/subcontrator shall request logical (technical) or physical access to VA information and VA information systems for their employees, subcontractors, and affiliates only to the extent necessary to perform the services specified in the contract, agreement, or task order.

The contractor or subcontractor must notify the Contracting Officer immediately when an employee working on a VA system or with access to VA information is reassigned or leaves the contractor or subcontractor’s employ. The Contracting Officer must also be notified immediately by the contractor or subcontractor prior to an unfriendly termination.

Information made available to the contractor or subcontractor by VA for the performance or administration of this contract or information developed by the contractor/subcontractor in performance or administration of the contract shall be used only for those purposes and shall not be used in any other way without the prior written agreement of the VA. This clause expressly limits the contractor/subcontractor's rights to use data as described in Rights in Data - General, FAR 52.227-14(d) (1).

Prior to termination or completion of this contract, contractor/subcontractor must not destroy information received from VA, or gathered/created by the contractor in the course of performing this contract without prior written approval by the VA. Any data destruction done on behalf of VA by a contractor/subcontractor must be done in accordance with National Archives and Records Administration (NARA) requirements as outlined in VA Directive 6300, Records and Information Management and its Handbook 6300.1 Records Management Procedures, applicable VA Records Control Schedules, and VA Handbook 6500.1, Electronic Media Sanitization. Self-certification by the contractor that the data destruction requirements above have been met must be sent to the VA Contracting Officer within 30 days of termination of the contract

All contractor employees and subcontractor employees requiring access to VA information and VA information systems shall complete the following before being granted access to VA information and its systems:

(1) Sign and acknowledge (either manually or electronically) understanding of and responsibilities for compliance with the Contractor Rules of Behavior, Appendix E relating to access to VA information and information systems;

(2) Successfully complete the VA Cyber Security Awareness and Rules of Behavior training and annually complete required security training;

(3) Successfully complete the appropriate VA privacy training and annually complete required privacy training; and

(4) Successfully complete any additional cyber security or privacy training, as required for VA personnel with equivalent information system access [to be defined by the VA program official and provided to the contracting officer for inclusion in the solicitation document – e.g., any role-based information security training required in accordance with NIST Special Publication 800-16, Information Technology Security Training Requirements.]

b. The contractor shall provide to the contracting officer and/or the COTR a copy of the training certificates and certification of signing the Contractor Rules of Behavior for each applicable employee within 1 week of the initiation of the contract and annually thereafter, as required.

c. Failure to complete the mandatory annual training and sign the Rules of Behavior annually, within the timeframe required, is grounds for suspension or termination of all physical or electronic access privileges and removal from work on the contract until such time as the training and documents are complete.

All contractor personnel (without exception) must report to the Clinical Engineering Department, to sign in where a contractor identification badge is verified before any work is performed. Contractor personnel will be escorted by Clinical Engineering staff for the duration of work performed and return to the same location to sign out and turn-in documented service report for the service performed. If there is a need to replace any hard drive, a hard drive, and all information on it, is the property of the VA and must remain in the control of the VA Clinical Engineering department for Medical Destruction.