RFQ75N98020R0001.pdf

SOLICITATION/CONTRACT/ORDER AL ITEMS 1. REQUISITION NUMBER PAGE 1 OF 95

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

2. CONTRACT NO. 3. AWARD/EFFECTIVE 4. ORDER NUMBER 5. SOLICITATION NUMBER 6. SOLICIATION ISSUE

DATE

RFQ # 75N98020R0001 DATE

February 10, 2020

a. NAME b. TELEPHONE NUMBER (No collect 8. OFFER DUE DATE/

7. FOR SOLICITATION calls) LOCAL TIME

INFORMATION CALL:

Terita Stevenson Stevenst@od.nih.gov (301) 402-3727 March 11, 2020 @ 2:00 PM, EST

9. ISSUED BY CODE ….. 10. THIS ACQUISITON IS

National Institutes of Health UNRESTRICTED OR SET ASIDE: 100 % FOR

Office of Logistics and Acquisition Operations SMALL BUSINESS

EMERGING SMALL

BUSINESS

Stations Support, Blue Team

6011 Executive Blvd., Rm. 539 C

HUBZONE SMALL

BUSINESS

Rockville, MD 20852 NAICS: 562910 SERVICE-DISABLED VETERAN- 8(A)

SIZE STANDARD: $22M OWNED SMALL BUSINESS

11. DELIVERY FOR FOB

DESTINATION UNLESS BLOCK

IS MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

13a. THIS CONTRACT IS A RATED

ORDER UNDER DPAS (15 CFR 700)

13b. RATING

14. METHOD OF SOLICITATION

RFQ IFB RFP

15. DELIVER TO CODE …..

stevenst@od.nih.gov

16. ADMINISTERED BY CODE …

Same as Block 9

17a. CONTRACTOR/ CODE ….. FACILITY

OFFEROR CODE

18a. PAYMENT WILL BE MADE BY CODE

TELEPHONE N0. e-mail:

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS

IN

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK

BELOW

OFFER IS CHECKED

SEE ADDENDUM

19. 20. 21. 22. 23. 24.

ITEM

N0.

SCHEDULE OF SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

The contractor shall provide industrial hygiene, environmental health, and safety support services to the

NIH, ORS, DOHS. In accordance with the specifications set forth herein. See Attachment

25. ACCOUNTING AND APPROPRIATION DATA

26. TOTAL AWARD AMOUNT (For Govt. Use Only)

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA ARE ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.2124. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN 29. AWARD OF CONTRACT: REF. OFFER

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DATED .. YOUR OFFER ON SOLICITATION

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY (BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30b. NAME AND TITLE OF SIGNER (Type or print) 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (Type or print)

31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION STANDARD FORM 1449 (REV.3/2005)

PREVIOUS EDITION IS NOT USABLE Prescribed by GSA - FAR (48 CFR) 53.212

SOLICITATION

SECTION A - SOLICITATION/CONTRACT FORM

1.Requisition or other Purchase Authority:

2. Request for Proposal (RFP) Number:

RFQ 75N98020R0001

3. Issue Date:

February 10, 2020

4. Set Aside:

[ ] No

[ X] Yes See “II” of RFQ

5. Title : Industrial hygiene, environmental health, and safety support services

ISSUED BY:

Terita Stevenson, Contract Specialist

Office of Acquisitions

Office of The Director

National Institutes of Health

OD OLAO

6011 Executive Boulevard, MSC 7663,Room 539C, Rockville, MD 20852-7663

7. SUBMIT OFFERS TO:

stevenst@od.nih.gov.

8. Proposals for furnishing the supplies and/or services in THE SCHEDULE will be received at the place specified in, and in the number of copies specified in Attachment

1, "Packaging and Delivery of the Proposal," until 2:00 pm EST local time on March

11, 2020. Offers will be valid for 90 days unless a different period is specified by the offeror on the Attachment entitled, "Proposal Summary and Data Record, NIH 2043.

9. This solicitation requires delivery of proposals as stated in ATTACHMENT 1, "PACKAGING AND DELIVERY OF THE PROPOSAL." If proposals are required to be delivered to two different locations, the OFFICIAL POINT OF RECEIPT for determining TIMELY DELIVERY is the address provided for the OFFICE OF

ACQUISITIONS.

IF YOUR PROPOSAL IS NOT RECEIVED BY THE CONTRACTING OFFICER

OR HIS DESIGNEE AT THE PLACE AND TIME SPECIFIED FOR THE OFFICE

OF ACQUISITIONS, THEN IT WILL BE CONSIDERED LATE AND HANDLED

IN ACCORDANCE WITH [subparagraph (c)(3) of FAR Clause 52.215-1, Instructions to Offerors--Competitive Acquisition,"/HHSAR Clause 352.215-70, "Late

Proposals and Revisions"] LOCATED IN SECTION L.1. OF THIS SOLICITATION.

10. Offeror must be registered in the Central Contractor Registry (CCR) prior to award of a contract. Offerors must access the CCR through The System for Award

Management (SAM) at http://www.sam.gov

11. FOR INFORMATION CALL: Terita Stevenson

PHONE: 301-402-3727

e-MAIL: stevenst@od.nih.gov

COLLECT CALLS WILL NOT BE ACCEPTED.

http://www.sam.gov/

I.: This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in

FAR Subpart 12.6, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; quotations are being requested and a written solicitation will not be issued.

Offerors shall submit all questions concerning this solicitation in writing to the Contract Specialist

(stevenst@od.nih.gov). Questions shall be received no later than February 14, 2020.

II.: The solicitation number is RFQ-75N98020R0001 and solicitation is issued as a Request for Quotation

(RFQ).

III.: The solicitation document and incorporated provisions and clauses are those in effect through FAR FAC

2019-06 thru October 10, 2019.

IV.: The North American Industry Classification (NAICS) is 562910 and the Standard Size is $22.0 million.

V.: A list of contract line item number(s) and items, quantities and units of measure, (including option(s), option years).

SCHEDULE OF CHARGES FOR THE BASIC AWARD PERIOD

Section B - Supplies or Services and Prices/Cost

Independently and not as an agent of the Government, the Contractor shall be required to furnish all the necessary services, qualified personnel, material, equipment, and facilities, not otherwise provided by the

Government, as needed to perform the Statement of Work.

Base Year: Base Contract period: 6/01/2020 through 5/31/2021

Estimated Unit Estimated

Quantity Price Amount

1. Program Manager 600 hrs $ $

2. Certified Industrial Hygienist 3,840 hrs $ $

3. Industrial Hygienist 4000 hrs $ $

4. Industrial Hygienist Technician 8000 hrs $ $

5. Safety Professional 600 hrs $ $

6. Safety Trainer 600 hrs $ $

7. Senior Scientific Advisor 600 hrs $ $

8. Environmental Health Specialist 300 hrs $ $

9. Statistician 400 hrs $ $

10. Miscellaneous Laboratory

Analysis (Vendor to put their cost plus % mark up) 10%

11. Travel $ 1,000.00

Estimated Total $

Option Prices

Unless the Government exercises its option pursuant to the option clause referenced in Article I.3. Additional

Contract Clauses, this contract consists only of the Base Period specified in the Statement of Work as defined in Sections C and F, for the price set forth in Article B.2. of this contract. Pursuant to FAR Clause 52.217-

8/Option to Extend Services/FAR Clause 52.217-9/Option to Extend set forth in Article I.3. Additional

Contract Clauses of this contract, the Government may, by unilateral contract modification, require the

Contractor to perform the Option Period(s) specified in the Statement of Work as defined in Sections C and F of this contract. If the Government exercises these option(s), notice must be given before the expiration date of the contract. Specific information regarding the time frame for this notice is set forth in the Option

Provision Article in Section H of this contract. The fixed price of this contract will be increased as set forth in paragraph c., below.

Upon the delivery and acceptance of the Option Services described in Section C of the contract and identified in the schedule of charges below, the Government shall pay the Contractor the unit price(s) set forth below:

Option Period One

From 6/01/2021 through 5/31/2022

4. Industrial Hygienist Technician 6000 hrs $ $

10. Miscellaneous Laboratory Analysis (Vendor to put their cost plus % mark up) 10%

11. Travel $1,000.00

Option Period Two

From 6/01/2022 through 5/31/2023

11. Travel $1,000.00

Option Period Three

From 6/01/2023 through 5/31/2024

11. Travel $1,000.00

Option Period Four

From 6/01/2024 through 5/31/2025

11. Travel $1,000.00

Estimated Total Base + All Option Years $

INSTRUCTIONS, CONDITIONS, AND NOTICES TO QUOTERS

A. GENERAL INFORMATION

1. PURPOSE

This Request for Quotations (RFQ) solicits proposals to furnish all necessary labor, materials, supplies, equipment, analytical support, transportation and supervision, not otherwise provided by the Government, necessary to provide industrial hygiene, environmental health, and safety support services to the NIH, ORS, DOHS. At the Government’s discretion, Government space and office equipment (computer, printer, desk, etc.) may be provided.

2. BACKGROUND

As the largest biomedical research institution in the world, the National Institutes of Health (NIH) has an extensive occupational health and safety program that supports the complex needs of the intramural research program, NIH patients, visitors, and contractors. In addition to providing direct occupational health and safety technical support to the research programs, many other clients are supported as well, including the

Office of Research Facilities Development and Operations, Office of Animal Care and Use, the Office of

Intramural Research and Institutes and Centers (IC) Scientific Directors, to name a few. The occupational health and safety program must be able to meet the challenge of rapidly increasing and changing program demands. The Division of Occupational Health and Safety (DOHS), Office of Research Services (ORS), is the lead organization for NIH’s occupational safety and health program and is purchasing contractor support for industrial hygiene and safety services. This support shall include the full spectrum of services specified in the statement of work. Some examples are: conducting thorough plan reviews of contractor’s abatement plans of hazardous materials; evaluation and monitoring of indoor air for chemical, biological, and physical stressors; conducting general and complex industrial hygiene and environmental health surveys and studies;

overseeing asbestos abatement projects; overseeing remediation of hazardous materials; and conducting surveys for hazardous materials.

3. METHOD OF ACQUISITION

The Government intends to acquire the necessary supplies by awarding a contract in accordance with FAR

Part 12, Simplified Acquisition Procedures through beta.sam (beta.sam.gov).

This requirement is being processed under open market ordering procedures for laboratory animal feed and bedding established in accordance with Federal Acquisition Regulation (FAR) 13 for the acquisition of commercial items (Ref. FAR Part 12).

4. NUMBER OF AWARDS

It is anticipated that multiple awards may occur due to this solicitation and that the awards will be made on/about June 1, 2020 will be made from this solicitation as an indefinite delivery indefinite quantity fixed price type contract.

5. DATE OF AWARD

A. It is anticipated that the awards will be made on/about June 1, 2020.

6. Statement of Work

Part I - The Schedule

VI.: Section C - Description/Specifications/Work Statement

a. Independently and not as an agent of the Government, the Contractor shall be required to furnish all the necessary services, qualified personnel, material, equipment, and facilities, not otherwise provided by the Government, as needed to perform the Statement of Work.

1.1 Background

As the largest biomedical research institution in the world, the National Institutes of Health

(NIH) has an extensive occupational health and safety program that supports the complex needs of the intramural research program, NIH patients, visitors, and contractors. In addition to providing direct occupational health and safety technical support to the research programs, many other clients are supported as well, including the Office of Research Facilities

Development and Operations, Office of Animal Care and Use, the Office of Intramural

Research and Institutes and Centers (IC) Scientific Directors, to name a few. The occupational health and safety program must be able to meet the challenge of rapidly increasing and changing program demands. The Division of Occupational Health and Safety

(DOHS), Office of Research Services (ORS), is the lead organization for NIH’s occupational safety and health program and is purchasing contractor support for industrial hygiene and safety services. This support shall include the full spectrum of services specified in the statement of work. Some examples are: conducting thorough plan reviews of contractor’s abatement plans of hazardous materials; evaluation and monitoring of indoor air for chemical, biological, and physical stressors; conducting general and complex industrial hygiene and environmental health surveys and studies; overseeing asbestos abatement projects; overseeing remediation of hazardous materials; and conducting surveys for hazardous materials.

Independently, and not as an agent of the Government, the contractor shall furnish all necessary labor, materials, supplies, equipment, analytical support, transportation and supervision, not otherwise provided by the Government, necessary to provide engineering and owner advocacy support services to the NIH, ORS, DOHS. Any equipment or materials purchased under this contract and charged to the government shall be kept in good repair and returned to the government as government property upon completion of the project. At the

Government’s discretion, Government space and office equipment (computer, printer, desk, etc.) may be provided. Contractor is expected to maintain an accurate and up to date inventory of all government supplied equipment in its possession. The contractor shall be responsible for equipment that are lost, stolen or damaged while the equipment is in the possession of Contractor personnel.

1.2 Location of Services

Work shall primarily be performed on the NIH campus in Bethesda, Maryland. Other facilities that may be covered include: the NIH Animal Center, Poolesville, Maryland;

DOHS-Baltimore, Maryland operations; and other NIH owned and leased facilities located in the suburban Maryland metropolitan area. Work may be performed at the Rocky Mountain

Laboratory in Hamilton, Montana, and the NIAID Integrated Research Facility, in Frederick, Maryland.

1.3 General Requirements

The contractor shall provide industrial hygiene and safety services critical to supporting the mission of the DOHS, the NIH and the Department of Health and Human Services as defined by this SOW. Examples of those types of services include:

• Review of contractor’s asbestos abatement plans for compliance with NIH policies, environmental and safety regulations

• Evaluate and monitor indoor air for chemical, biological, and physical stressors;

• Conduct general and complex industrial hygiene and environmental health studies;

• Collect environmental and industrial hygiene samples for analysis;

• Oversee contractor performance during abatement and remediation of hazardous materials;

• Conduct surveys for waste anesthetic gas exposure;

• Collect and analyze water samples and survey food service operations;

• Provide technical personnel for day to day support of DOHS activities; and

• Conduct surveys for the presence of hazardous materials.

These projects range in duration from one day to months until completion.

The contractor shall be licensed and regularly engaged in the professional practice of industrial hygiene services. Demonstrated past experience providing the same type of services as specified in this SOW in clinical and biomedical research facilities is required.

The contractor shall perform the following industrial hygiene support services on an as-needed basis as directed by the NIH Contracting Officer Representative. The contractor shall be an industrial hygiene firm regularly engaged in the professional practice of industrial hygiene.

A. Hazardous Material Abatement and Remediation Project Monitoring

These services shall include the following industrial hygiene services on an as-needed basis as directed by the NIH Contracting Officer Representative:

1) The monitoring to be performed under this contract shall be aimed at protecting NIH employees, visitors, patients, and property and shall be conducted by personnel appropriately certified for the hazard being abated or remediated (e.g. lead-based paint, PCB’s, asbestos). Environmental and personal monitoring under this contract shall not replace compliance monitoring to comply with OSHA’s permissible exposure limits.

2) Abatement and remediation projects at NIH range in duration from one day to several weeks. Abatement activities are usually performed during non-business hours and weekends. NIH estimates that monitoring of ten projects will be required each month.

3) Monitor the abatement or remediation project from conception to completion.

Monitoring shall include the following typical sub-tasks as directed by the NIH

Contracting Officer Representative:

a. Review, comment upon, and approve in writing proposed project specifications, procedures, methods, contractor qualifications, submittals and abatement or remediation plans.

b. Monitor the overall execution of abatement and remediation projects to assure compliance with the project specifications and protection of NIH building occupants. Determine the adequacy of control measures and regulatory compliance with State of Maryland, EPA, and OSHA requirements.

c. Inspect and approve project equipment and materials, including respiratory protection, glove bags, enclosures, and negative air filtration machines.

d. Conduct environmental and clearance air monitoring and visual inspections of the work and adjacent areas. Project inspections and oversight of contractor work practices shall be made before, during (at a frequency and duration as determined by the Government), and following completion of all abatement and remediation projects. Assure that asbestos is contained during work and completely eliminated before the area is occupied. Issue clearances for occupancy following completion of abatement and remediation work.

e. Coordinate and submit environmental and personal samples for analysis.

Make available and upon request provide written documentation of sample results within 24-hours. Maintain documentation of air sampling results.

f. Immediately initiate action to stop work if the project is in noncompliance with regulatory requirements or presents health or safety risk to NIH employees or contract personnel.

g. Ensure that all hazardous material planned to be removed as stated in the scope of work, is actually removed, that the hazardous waste is properly packaged for disposal, and that the waste manifest is prepared and processed.

h. Verify abatement or remediation contractor claims and quantity regarding additional hazardous materials that may require removal, but were not identified in the scope of work.

B. Asbestos Assessment Surveys

1) Asbestos assessments surveys shall typically be conducted in accordance with the US EPA’s Guidance for Controlling Asbestos-Containing Materials in

Buildings (EPA 560/5-85-024, June 1985) document, COMAR 26.11.21

“Control of Asbestos”, and COMAR 26.11.23 “Asbestos Accreditation of

Individuals, and Approval of Training Courses”. The surveys shall be performed by AHERA certified asbestos inspectors. Surveys shall determine the following information: location, type of material, quantity, condition, friability, damage potential, EPA categorization and hazard ranking, recommended response action(s) and cost estimates for recommended response action(s). Experience with AutoCAD to revise documents and drawings to reflect results from asbestos assessment survey is required.

2) NIH estimates that approximately four asbestos assessment surveys will be required each month.

3) The contractor shall perform assessment surveys for asbestos-containing materials located in NIH spaces as identified by the NIH Contracting Officer

Representative. Surveys shall include some or all of the following sub-tasks as directed by the NIH Contracting Officer Representative.

a. Locate all potential asbestos-containing materials within the space.

b. Sample suspected materials and analyze samples to determine the asbestos types(s) and percentage of asbestos content. Use existing

NIH sampling data (when furnished by NIH).

c. Mark engineering drawings to indicate the locations of asbestos. Label sampled material at the sampling site to indicate if asbestos is present or not.

d. Through consultation with NIH Facility Manger determine the likelihood of fiber release and exposure potential for each area found to contain asbestos.

e. Estimate the quantity of asbestos and cost of abatement (clean-up, repair, encapsulation, and/or removal).

f. Survey results shall be documented into a report and submitted to

NIH. The report shall include, at a minimum, sampling methods, the samples results, laboratory data sheet when PLM or TEM, confirmation that samples were taken by AHERA certified asbestos inspector accredited by the State of Maryland, chain of custody form when PLM or TEM, and confirmation that the testing laboratory was

NVLAP accredited when PLM or TEM.

C. Hazardous Material Assessment Surveys

The contractor shall perform assessment surveys for hazardous materials located in

NIH spaces as identified by the NIH Contracting Officer Representative.

D. Indoor Air Quality Studies

General and complex assessments of indoor air quality and thermal comfort parameters can include some or all of the following sub-tasks as directed by the NIH Contracting

Officer Representative:

1) Measurements of temperature, relative humidity, carbon monoxide, volatile organic compounds, particulates, and/or bioaerosols and other contaminants.

2) Evaluation of HVAC system(s) operation, to include a comparison of design specifications vs. performance.

3) Review and assessment of the indoor air quality complaint history.

4) Interview building occupants to analyze and summarize results.

5) NIH estimates that approximately one indoor air quality study will be required every month.

E. General Industrial Hygiene Surveys (emphasis on clinical settings and biomedical research laboratories)

General and complex industrial hygiene surveys involve evaluations of NIH employee exposures to chemical, physical, radiological, and/or biological agents typically found in clinical settings and biomedical research laboratories.

Typical NIH surveys may include:

Anesthetic gases

Confined spaces

Drinking water quality

Ethylene oxide

Formaldehyde, glutaraldehyde, xylene

Laboratory safety inspections

Particulate air filter efficiency and effectiveness (HEPA)

Volatile Organic Chemicals

Inorganic Chemicals

Particulate matter

NIH estimates that approximately five general industrial hygiene surveys will be required each month.

F. Industrial Hygiene Special Projects

Special industrial hygiene projects may include the following:

1) Development and presentation of seminars, training or instructional programs in occupational safety and health topics.

2) Development of databases to manage industrial hygiene survey.

3) Other complex surveys and investigations of potential contaminants found in the working environment.

G. Safety Training

Develop curriculum and provide training on various topics related to occupational health and safety programs. Topics will be related to construction, hazardous materials management, biomedical research, laboratory, clinical, and industrial operations.

H. Technical Services Support

Provide competent and qualified personnel to support day to day health and safety services. Personnel may be required to provide daily support for long term assignments.

I. Environmental Health Support

Provide environmental health services related to food service, pest management, and potable water consumption.

J. General Model Construction

Provide competent personnel able to construct models of typical building structures and fixtures made of wood and dry wall, such as building shell with frameworks, partitions, joists, studding and rafters, windows and door frames, and floors. Construction materials would be the same as commonly available in the construction industry.

Knowledge and ability to install and repair plumbing, and electrical wiring, equipment and fixtures in the model structures is required.

1.4 Technical Requirements

A. Technical Personnel Requirements

1) The offeror shall provide only fully qualified professionals and technicians who are employees of the offeror and who have verifiable education, training, certifications, and experience. Personnel experience in performing industrial hygiene evaluations in clinical settings and biomedical research laboratories is required. The NIH Contracting Officer Representative will review the credentials (C.V., resume of experience and references) and approve all personnel assigned to projects by the contractor.

2) Substitute or replacement personnel for those cited in the offeror’s proposal will be approved by the NIH Contracting Officer Representative prior to being assigned to work at NIH. NIH reserves the right to reject personnel whom the NH Contracting Officer Representative does not consider fully qualified. The substitution of personnel on ongoing or proposed projects must be requested in writing 30 days in advance, and be approved by the NIH

Contracting Officer Representative prior to any changes being implemented.

3) All contract work shall be conducted by, or under the direction of, industrial hygienists certified by the American Board of Industrial Hygiene. The certified industrial hygienist (CIH) shall be responsible for the quality of the work performed under the contract.

4) Industrial hygienists shall possess at least three years of full-time industrial hygiene experience. Industrial hygienists performing under the contract shall meet the basic education requirements for entry level into the federal industrial hygiene series (GS-690-05) which are as follows:

Degree: industrial hygiene; or a branch of engineering, physical science, or life science that included 12 semester hours in chemistry, including organic chemistry, and 18 additional semester hours of courses in any combination of chemistry, physics, engineering, health physics, environmental health, biostatistics, biology, physiology, toxicology, epidemiology, or industrial hygiene. Courses in the history or teaching of chemistry are not acceptable.

5) Industrial hygiene technicians shall be used on the contract to perform work such as conducting inspections and surveys, collecting samples, calibrating instruments, under the direction of the CIH or industrial hygienist.

Industrial hygiene technicians shall possess at least one year of full-time industrial hygiene technician experience. Personnel with less experience may assist on performing contract work but must be directly supervised by an industrial hygienist or industrial hygienist technician meeting the experience requirements stated above.

6) Senior Scientific Advisor shall be used on the contract for specialized analysis and technical review of complex or special project.

The Senior Scientific Advisor shall possess at least five years of full-time industrial hygiene or related experience and have a doctorate degree in public health, industrial hygiene, or closely related profession.

7) Statistician shall be used on the contract for specialized analysis and technical review of complex or special project.

The Statistician shall possess at least five years of full-time experience in the field of statistic and have a doctorate degree in epidemiology or a similar discipline of statistics.

8) Safety trainer shall be used on the contract for developing and delivering safety and health related courses.

The safety trainer shall possess at least three years of full-time experience conducting training classes and possess a bachelor’s degree.

9) Safety professional shall possess at least three years of full-time experience in the field of safety or industrial hygiene and have a bachelor’s degree.

Certified Safety Professional is preferred. Safety professionals performing under the contract shall meet the basic education requirements for entry level into the federal Safety and Occupational Health Management series (GS-

0018) which are as follows:

Major study- safety or occupational health fields (safety, occupational health, industrial hygiene), or degree in other related fields that included or was supplemented by at least 24 semester hours of study from among the following (or closely related) disciplines: safety, occupational health, industrial hygiene, occupational medicine, toxicology, public health, mathematics, physics, chemistry, biological sciences, engineering, and industrial psychology.

10) Environmental Health Specialist shall be used on the contract to perform work such as conducting inspections and surveys, collecting samples to support the agency’s potable water, food, and pest management programs.

Environmental Health Specialists shall possess at least three years of full-time environmental health experience and be certified as a Registered

Environmental Health Specialist with the National Environmental Health

Association.

11) General Construction Modeler to construct models of typical building structures, including with installed electrical fixtures, for testing of various safety and industrial hygiene control methods on building materials. Modeler shall have at least a high school degree and at least a year of experience constructing similar types of structures and fixtures.

12) At the contractor’s expense, all personnel must receive appropriate vaccinations and medical test in accordance with various NIH policies.

13) The job titles and the estimated number of hours of effort per year for each are shown below:

Project Manager/Supervisor 600 hrs

Certified Industrial Hygienist 3,840 hrs

Industrial Hygienist 4,000 hrs

Industrial Hygiene Technician 9,600 hrs

Safety Professional 600 hrs

Senior Scientific Advisor 1920 hrs

Safety Trainer 600 hrs

Statistician 400 hrs

Environmental Health Specialist 300 hrs

General Construction Modeler 1,000 hrs

B. Laboratory Support

Industrial Hygiene and Environmental Samples

Sampling shall be conducted and analyzed in accordance with the procedures contained in the NIOSH Manual of Analytical Methods, current edition, by a laboratory which is currently accredited for the specific analysis by the American

Industrial Hygiene Association. In the absence of a NIOSH analytical method, the offeror shall consult with the NIH Contracting Officer Representative in determining the appropriate analytical technique for the subject constituent.

Asbestos Samples

Asbestos bulk samples shall be analyzed by a laboratory accredited by the National

Institute of Standards and Technology, National Voluntary Laboratory Accreditation

Program. Capability for analysis of asbestos air and bulk samples by transmission electron microscopy shall be available.

Turn around time for asbestos samples shall be 6 hours or less.

Analytical reports of the asbestos results (regardless of analytical method) shall be available within 2 hours after collection. A complete written record of tests and results, certified by the laboratory, shall be included in the project reports.

Fiber counting analyses can be done only by individuals who have successfully completed the NIOSH 582 (Sampling and Evaluation of Airborne Asbestos Dust) or equivalent training course AND who maintain a proficient rating in AIHA’s

Proficiency Analytical Testing (PAT) program. Analysts enrolled in the

Asbestos Analysts Registry (AAR) are preferred.

C. Project Data and Reports

1) All data generated by this contract will be the sole property of NIH.

2) The contractor shall prepare and submit project reports to the NIH

Contracting Officer Representative within 10 working days of completion of the fieldwork. Additionally, the contractor shall report to the NIH Contracting

Officer Representative any case where OSHA or ACGIH occupational exposure limits have been determined exceeded, or when an abatement activity (i.e. lead or asbestos) has failed clearance levels as established by the

State of Maryland.

3) The NIH Contracting Officer Representative will determine the format, content, means of data transmission, and number of project report copies.

D. Approvals, Licensing and Certification

2) The contractor shall maintain all appropriate licenses and insurance required to provide the services specified in this statement of work. The contractor shall be able meet all current and future requirements of this contract regarding personnel, time commitments, and logistical and technical support.

3) All recommendations, assessments, evaluations shall be in accordance with the most recent approved procedures, processes, professional standards or industry standards.

4) Any changes in approved project completion schedule(s), approved personnel or quality control processes must be requested in writing, by the contractor, 30 days in advance, and receive the concurrence of the NIH Contracting

Officer Representative, prior to enacting the change(s).

5) All forms for collecting data or other information, i.e., monitoring forms, report formats, database structures and quality assurance inspection forms, shall be approved by the program area and the NIH Contracting Officer

Representative prior to use. All data, reports, recommendations, studies, etc.

produced for, or as a result, of this requirement shall remain the sole property of the DOHS, ORS and shall not be used, presented, or published without the written authorization of the NIH Contracting Officer Representative and the

Director of DOHS. All information shall be maintained on a secure server, accessible only to personnel approved by the NIH Contracting Officer

Representative.

1.5 Security Requirements

A. Baseline Security Requirements

1) Applicability. The requirements herein apply whether the entire contract or order

(hereafter “contract”), or portion thereof, includes either or both of the following:

a. Access (Physical or Logical) to Government Information: A Contractor

(and/or any subcontractor) employee will have or will be given the ability to have, routine physical (entry) or logical (electronic) access to government information.

b. Operate a Federal System Containing Information: A Contractor (and/or any subcontractor) will operate a federal system and information technology containing data that supports the HHS mission. In addition to the Federal Acquisition

Regulation (FAR) Subpart 2.1 definition of “information technology” (IT), the term as used in this section includes computers, ancillary equipment (including imaging peripherals, input, output, and storage devices necessary for security and surveillance), peripheral equipment designed to be controlled by the central processing unit of a computer, software, firmware and similar procedures, services

(including support services), and related resources.

2) Safeguarding Information and Information Systems. In accordance with the

Federal Information Processing Standards Publication (FIPS)199, Standards for

Security Categorization of Federal Information and Information Systems, the

Contractor (and/or any subcontractor) shall:

a. Protect government information and information systems in order to ensure:

• Confidentiality, which means preserving authorized restrictions on access and disclosure, based on the security terms found in this contract, including means for protecting personal privacy and proprietary information;

• Integrity, which means guarding against improper information modification or destruction, and ensuring information non-repudiation and authenticity; and

• Availability, which means ensuring timely and reliable access to and use of information.

3) Information Security Categorization. In accordance with FIPS 199 and National

Institute of Standards and Technology (NIST) Special Publication (SP) 800-60, Volume

II: Appendices to Guide for Mapping Types of Information and Information Systems to

Security Categories, Appendix C, and based on information provided by the ISSO, CISO, or other security representative, the risk level for each Security Objective and the

Overall Risk Level, which is the highest watermark of the three factors (Confidentiality, Integrity, and Availability) of the information or information system are the following:

Confidentiality: [ X] Low [ ] Moderate [ ] High Integrity: [ X] Low [ ] Moderate [ ] High Availability: [X ] Low [ ] Moderate [ ] High Overall Risk Level: [ X] Low [ ] Moderate [ ] High

Based on information provided by the ISSO, Privacy Office, system/data owner, or other security or privacy representative, it has been determined that this solicitation/contract involves:

[ X] No PII [ ] Yes PII

Personally, Identifiable Information (PII). Per the Office of Management and

Budget (OMB) Circular A-130, “PII is information that can be used to distinguish or trace an individual's identity, either alone or when combined with other information that is linked or linkable to a specific individual.” Examples of PII include, but are not limited to the following: social security number, date and place of birth, mother‘s maiden name, biometric records, etc.

PII Confidentiality Impact Level has been determined to be: [X ] Low [ ] Moderate [ ]

High http://csrc.nist.gov/publications/nistpubs/800-60-rev1/SP800-60_Vol2-Rev1.pdf

4) Protection of Sensitive Information. For security purposes, information is or may be sensitive because it requires security to protect its confidentiality, integrity, and/or availability. The Contractor (and/or any subcontractor) shall protect all government information that is or may be sensitive in accordance with OMB Memorandum M-06-

16, Protection of Sensitive Agency Information by securing it with a FIPS 140-2 validated solution.

5) Confidentiality and Non-disclosure of Information. Any information provided to the contractor (and/or any subcontractor) by HHS or collected by the contractor on behalf of HHS shall be used only for the purpose of carrying out the provisions of this contract and shall not be disclosed or made known in any manner to any persons except as may be necessary in the performance of the contract. The Contractor assumes responsibility for protection of the confidentiality of Government records and shall ensure that all work performed by its employees and subcontractors shall be under the supervision of the Contractor. Each Contractor employee or any of its subcontractors to whom any HHS records may be made available or disclosed shall be notified in writing by the Contractor that information disclosed to such employee or subcontractor can be used only for that purpose and to the extent authorized herein.

The confidentiality, integrity, and availability of such information shall be protected in accordance with HHS and NIH policies. Unauthorized disclosure of information will be subject to the HHS/NIH sanction policies and/or governed by the following laws and regulations:

a. 18 U.S.C. 641 (Criminal Code: Public Money, Property or Records);

b. 18 U.S.C. 1905 (Criminal Code: Disclosure of Confidential Information); and

c. 44 U.S.C. Chapter 35, Subchapter I (Paperwork Reduction Act).

6) Contract Documentation. The Contractor shall use provided templates, policies, forms and other agency documents to comply with contract deliverables as appropriate.

7) Standard for Encryption. The Contractor (and/or any subcontractor) shall:

a. Comply with the HHS Standard for Encryption of Computing Devices and

Information to prevent unauthorized access to government information.

b. Encrypt all sensitive federal data and information (i.e., PII, protected health information [PHI], proprietary information, etc.) in transit (i.e., email, network connections, etc.) and at rest (i.e., servers, storage devices, mobile devices, backup media, etc.) with FIPS 140-2 validated encryption solution.

c. Secure all devices (i.e.: desktops, laptops, mobile devices, etc.) that store and process government information and ensure devices meet HHS and NIH-specific encryption standard requirements. Maintain a complete and current inventory of all laptop computers, desktop computers, and other mobile devices and portable

See Appendix A for baseline deliverables.

media that store or process sensitive government information (including PII).

d. Verify that the encryption solutions in use have been validated under the

Cryptographic Module Validation Program to confirm compliance with FIPS 140-2.

The Contractor shall provide a written copy of the validation documentation to the

COR.

e. Use the Key Management system on the HHS personal identification verification

(PIV) card or establish and use a key recovery mechanism to ensure the ability for authorized personnel to encrypt/decrypt information and recover encryption keys.

Encryption keys shall be provided to the COR upon request and at the conclusion of the contract.

8) Contractor Non-Disclosure Agreement (NDA). Each Contractor (and/or any subcontractor) employee having access to non-public government information under this contract shall complete the NIH non-disclosure agreement. A copy of each signed and witnessed NDA shall be submitted to the Contracting Officer (CO) and/or CO

Representative (COR) prior to performing any work under this acquisition.

B. Training

1) Mandatory Training for All Contractor Staff. All Contractor (and/or any subcontractor) employees assigned to work on this contract shall complete the applicable HHS/NIH Contractor Information Security Awareness, Privacy, and

Records Management training (provided upon contract award) before performing any work under this contract. Thereafter, the employees shall complete NIH-specified

Information Security Awareness, Privacy, and Records Management training at least annually, during the life of this contract. All provided training shall be compliant with

HHS training policies.

2) Role-based Training. All Contractor (and/or any subcontractor) employees with significant security responsibilities (as determined by the program manager) must complete role-based training annually commensurate with their role and responsibilities in accordance with HHS policy and the HHS Role-Based Training (RBT) of Personnel with Significant Security Responsibilities Memorandum.

3) Training Records. The Contractor (and/or any subcontractor) shall maintain training records for all its employees working under this contract in accordance with HHS policy. A copy of the training records shall be provided to the CO and/or COR within 30 days after contract award and annually thereafter or upon request.

C. Rules of Behavior

1) The Contractor (and/or any subcontractor) shall ensure that all employees performing on the contract comply with the HHS Information Technology General Rules of

Behavior, and NIH-specific rules, as applicable.

http://csrc.nist.gov/publications/fips/fips140-2/fips1402.pdf

2) All Contractor employees performing on the contract must read and adhere to the Rules of Behavior before accessing Department data or other information, systems, and/or networks that store/process government information, initially at the beginning of the contract and at least annually thereafter, which may be done as part of annual NIH

Information Security Awareness Training. If the training is provided by the contractor, the signed ROB must be provided as a separate deliverable to the CO and/or COR per defined timelines above.

D. Incident Response

The Contractor (and/or any subcontractor) shall respond to all alerts/Indicators of Compromise

(IOCs) provided by HHS Computer Security Incident Response Center (CSIRC) and NIH

Incident Response (IRT) teams within 24 hours, whether the response is positive or negative.

FISMA defines an incident as “an occurrence that (1) actually or imminently jeopardizes, without lawful authority, the integrity, confidentiality, or availability of information or an information system; or (2) constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies. The HHS Policy for IT Security and Privacy

Incident Reporting and Response further defines incidents as events involving cybersecurity and privacy threats, such as viruses, malicious user activity, loss of, unauthorized disclosure or destruction of data, and so on.

A privacy breach is a type of incident and is defined by Federal Information Security

Modernization Act (FISMA) as the loss of control, compromise, unauthorized disclosure, unauthorized acquisition, or any similar occurrence where (1) a person other than an authorized user accesses or potentially accesses personally identifiable information or (2) an authorized user accesses or potentially accesses personally identifiable information for another than authorized purpose. The HHS Policy for IT Security and Privacy Incident Reporting and

Response further defines a breach as “a suspected or confirmed incident involving PII”.

In the event of a suspected or confirmed incident or breach, the Contractor (and/or any subcontractor) shall:

1) Protect all sensitive information, including any PII created, stored, or transmitted in the performance of this contract so as to avoid a secondary sensitive information incident with FIPS 140-2 validated encryption.

2) NOT notify affected individuals unless so instructed by the Contracting Officer or designated representative. If so instructed by the Contracting Officer or representative, the Contractor shall send NIH approved notifications to affected individuals. Reference the NIH HHS incident response process and guidelines found in the URL below:

https://ocio.nih.gov/InfoSecurity/IncidentResponse/Pages/ir_guidelines.aspx

3) Report all suspected and confirmed information security and privacy incidents and breaches to the NIH Incident Response Team (IRT) [NIH inserted contact information should be cited here], COR, CO, NIH SOP (or his or her designee), and other stakeholders, including incidents involving PII, in any medium or form, including paper, oral, or electronic, as soon as possible and without unreasonable delay, no later than one https://ocio.nih.gov/InfoSecurity/IncidentResponse/Pages/ir_guidelines.aspx

(1) hour, and consistent with the applicable NIH and HHS policy and procedures, NIST standards and guidelines, as well as US-CERT notification guidelines. The types of information required in an incident report must include at a minimum: company and point of contact information, contract information, impact classifications/threat vector, and the type of information compromised. In addition, the Contractor shall:

a. cooperate and exchange any information, as determined by the Agency, necessary to effectively manage or mitigate a suspected or confirmed breach;

b. not include any sensitive information in the subject or body of any reporting e-mail; and

c. encrypt sensitive information in attachments to email, media, etc.

4) Comply with OMB M-17-12, Preparing for and Responding to a Breach of Personally

Identifiable Information HHS and NIH incident response policies when handling PII breaches.

5) Provide full access and cooperate on all activities as determined by the Government to ensure an effective incident response, including providing all requested images, log files, and event information to facilitate rapid resolution of sensitive information incidents. This may involve disconnecting the system processing, storing, or transmitting the sensitive information from the Internet or other networks or applying additional security controls. This may also involve physical access to contractor facilities during a breach/incident investigation within 24 hours.

E. Position Sensitivity Designations

All Contractor (and/or any subcontractor) employees must obtain a background investigation commensurate with their position sensitivity designation that complies with Parts 1400 and 731 of Title 5, Code of Federal Regulations (CFR). The following position sensitivity designation levels apply to this solicitation/contract:

[ ] Tier 4 - Public Trust - High Risk. Contractor/subcontractor employees assigned to Tier 4 positions shall undergo a Suitability Determination and Background

Investigation (formerly BI Level).

[ ] Tier 2 - Public Trust - Moderate Risk. Contractor/subcontractor employees assigned to Tier 2 positions with no previous investigation and approval shall undergo a

Suitability Determination and a Minimum Background Investigation (formerly MBI Level 5B).

[X ] Tier 1 - Non-Sensitive Contractor/subcontractor employees assigned to Tier I, Non-Sensitive positions shall undergo a Suitability Determination and National Agency Check and Inquiry Investigation (formerly NACI Level 1).

F. Homeland Security Presidential Directive (HSPD)-12

The Contractor (and/or any subcontractor) and its employees shall comply with Homeland

Security Presidential Directive (HSPD)-12, Policy for a Common Identification Standard for

Federal Employees and Contractors; OMB M-05-24; FIPS 201, Personal Identity Verification

(PIV) of Federal Employees and Contractors; HHS HSPD-12 policy; and Executive Order

13467, Part 1 §1.2.

Roster. The Contractor (and/or any subcontractor) shall submit a roster by name, position, e-mail address, phone number and responsibility, of all staff working under this acquisition where the Contractor will develop, have the ability to access, or host and/or maintain a government information system(s). The roster shall be submitted to the COR and/or CO within three days of the effective date of this contract. Any revisions to the roster as a result of staffing changes shall be submitted within five days of the change. The COR will notify the

Contractor of the appropriate level of investigation required for each staff member.

If the employee is filling a new position, the Contractor shall provide a position description and the Government will determine…