Section D Attachments.pdf

Quality Assurance Surveillance Plan (QASP)

Revision 05/10/2023

The contractor will be evaluated in accordance with the following:

1. PURPOSE

This Quality Assurance Surveillance Plan (QASP) provides a systematic method to evaluate performance for the stated contract. This QASP explains the following:

• What will be monitored?

• How will monitoring take place?

• Who will conduct the monitoring?

• How will monitoring efforts and results be documented?

This QASP does not detail how the contractor accomplishes the work. Rather, the QASP is created with the premise that the contractor is responsible for management and quality control actions to meet the terms of the contract. It is the Government’s responsibility to be objective, fair, and consistent in evaluating performance.

This QASP is a “living document” and the Government may review and revise it on a regular basis. However, the Government shall coordinate changes with the contractor through contract modification. Copies of the original QASP and revisions shall be provided to the contractor and Government officials implementing surveillance activities.

2. GOVERNMENT ROLES AND RESPONSIBILITIES

The following personnel shall oversee and coordinate surveillance activities.

a. Contracting Officer (CO) – The CO shall ensure performance of all necessary actions for effective contracting, ensure compliance with the contract terms, and shall safeguard the interests of the United States in the contractual relationship. The CO shall also assure that the contractor receives impartial, fair, and equitable treatment under this contract. The CO is ultimately responsible for the final determination of the adequacy of the contractor’s performance.

Assigned CO: Angela Stewart

Organization or Agency: Network Contracting Office 23

b. Contracting Officer’s Representative (COR) – The COR is responsible for technical administration of the contract and shall assure proper Government surveillance of the contractor’s performance. The COR shall keep a quality assurance file. The COR is not empowered to make any contractual commitments or to authorize any contractual changes on the Government’s behalf.

Assigned COR: Curtiss Vickery

Organization or Agency: Minneapolis VA Health Care System

3. CONTRACTOR REPRESENTATIVES

The following employee(s) of the contractor serve as the contractor’s program manager(s) for this contract.

Primary Program Manager:

Curtiss Vickery

Alternate Program Manager:

Brenda Skarda

4. PERFORMANCE STANDARDS

The contractor is responsible for performance of ALL terms and conditions of the contract. CORs will provide contract progress reports quarterly to the CO reflecting performance on this plan and all other aspects of the resultant contract. The performance standards outlined in this QASP shall be used to determine the level of contractor performance in the elements defined. Performance standards define desired services. The Government performs surveillance to determine the level of Contractor performance to these standards.

The Performance Requirements are listed below in Section 6. The Government shall use these standards to determine contractor performance and shall compare contractor performance to the standard and assign a rating. At the end of the performance period, these ratings will be used, in part, to establish the past performance of the contractor on the contract.

5. METHODS OF QA SURVEILLANCE

Various methods exist to monitor performance. The COR shall use the surveillance methods listed below in the administration of this QASP.

a. DIRECT OBSERVATION. 100% surveillance:

b. PERIODIC INSPECTION. Inspections scheduled and reported quarterly per COR delegation or as needed.

c. VALIDATED USER/CUSTOMER COMPLAINTS.

d. RANDOM SAMPLING.

e. VERIFICATION AND/OR DOCUMENTATION PROVIDED BY CONTRACTOR.

6. QASP PERFORMANCE REPORT DATE:__________________

Measures PWS

Reference

Performance

Requirement

Standard Acceptable Quality Level

Surveillance

Method

Met AQL/DID NOT MEET AQL-

CPARS RATING/ADD COMMENTS

Provider Quality Performance 4.6.4.1 All Contractor’s physician(s) shall perform in accordance with clinical standards

OPPE

documentation for all (100%) staff providing services under contract. All staff (100%) meet clinical standards of care

100% Periodic Inspection or Random Sampling – OPPE data pertinent to care performed for each provider working under this contract.

OPPE data will review the following elements:

A.Patient Care Performance

B.Medical/Clinical knowledge

C. Updated Licensing, registration and certification

D. Practiced Based Learning and Improvement

E. Interpersonal & Communication Skills

F.Professionalism

G. System Based Practice

Qualifications of Key Personnel 4.6.4.2 All Contractor’s physician(s) shall Board Certified Anesthesiologists in accordance with American Board of Anesthesiology Standards

All (100%) Contractor’s physician(s) are Board Certified Anesthesiologists

100% Random Sampling of qualification documents

Scope of Practice/Privileging 4.6.4.3 Contractor’s physician(s) perform within their individual scopes of practice/privileging

All (100%) Contractor’s physician(s) perform within their scope of practice/privileges 100% of the time.

100% Contractor’s physician(s) perform within their scope of practice/privileges 100% of the time.

Random Sampling of records.

Patient Access 4.6.4.4 The Contractor shall provide Contractor’s physician(s) in accordance with the operating hours and VA clinical schedule outlined in this PWS

All (100%) Contractor’s physician(s) are on time and available to perform services.

Contractor’s physician(s) are on-time and available to perform services 100% of the time

Inspection of Time and Attendance Sheets

Monthly

Patient Safety 4.6.4.5 Patient safety incidents shall be reported using Patient Safety Reporting System. All incidents reported immediately (within 24 hours.)

All (100%) of patient safety incidents are reported using VA Patient Safety Reporting System within 24 hours of incident.

100% of patient safety incidents are reported using VA Patient Safety Reporting System within 24 hours of incident.

Periodic Inspection or Random Sampling

Maintains licensing, registration, and certification

4.6.4.6 Updated Licensing, registration and certification shall be provided as they are renewed. Licensing and registration information kept current.

All (100%) licensing, registration(s) and certification(s) for Contractor’s physician(s) shall be provided as they are renewed.

Licensing and registration information kept current.

100% licensing, registration(s) and certification(s) for Contractor’s physician(s) shall be provided as they are renewed. Licensing and registration information kept current. No acceptable deviation.

Sampling

Mandatory Training 4.6.4.7 Contractor shall complete all required training on time per facility policy

All (100%) of required training is complete on time by Contractor’s physician(s)

90% completions

Periodic Inspection

Reviewed every three (3) months

Privacy, Confidentiality and

HIPAA

4.6.4.8 Contractor is aware of

all laws, regulations, policies and procedures relating to Privacy, Confidentiality and HIPAA and complies with all standards Zero breaches of privacy or confidentiality

All (100%) Contractor’s physician(s) comply with all laws, regulations, policies and procedures relating to Privacy, Confidentiality and

HIPAA

100% compliance

Sampling.

Contractor shall provide evidence of annual training required by facility, reports violations per VA Handbook 6500.6.

7. CPARS RATINGS ASSIGNED TO QASP ITEMS:

Metrics and methods are designed to determine rating for a given standard and acceptable quality level. The following ratings shall be used (Reference: CPARS User Manual:

https://www.cpars.gov/cparsweb/assets/documents/CPARS_User_Manual.pdf

EXCEPTIONAL: Performance meets contractual requirements and exceeds many to the Government’s benefit.

The contractual performance of the element or sub-element being assessed was accomplished with few minor problems for which corrective actions taken by the contractor were highly effective.

Note: To justify an Exceptional rating, you should identify multiple significant events in each category and state how it was a benefit to the GOVERNMENT. However, a singular event could be of such magnitude that it alone constitutes an Exceptional rating. Also, there should have been NO significant weaknesses identified.

VERY GOOD:

Performance meets contractual requirements and exceeds some to the Government’s benefit.

The contractual performance of the element or sub-element being assessed was accomplished with some minor problems for which corrective actions taken by the contractor were effective.

Note: To justify a Very Good rating, you should identify a significant event in each category and state how it was a benefit to the GOVERNMENT. Also, there should have been NO significant weaknesses identified.

SATISFACTORY:

Performance meets contractual requirements. The contractual performance of the element or sub-element contains some minor problems for which corrective actions taken by the contractor appear or were satisfactory.

Note: To justify a Satisfactory rating, there should have been only minor problems, or major problems the contractor recovered from without impact to the contract. Also, there should have been NO significant weaknesses identified.

MARGINAL:

Performance does not meet some contractual requirements. The contractual performance of the element or sub-element being assessed reflects a serious problem for which the contractor has not yet identified corrective actions. The contractor’s proposed actions appear only marginally effective or were not fully implemented.

Note: To justify Marginal performance, you should identify a significant event in each category that the contractor had trouble overcoming and state how it impacted the GOVERNMENT. A Marginal rating should be supported by referencing the management tool that notified the contractor of the contractual deficiency (e.g. Management, Quality, Safety or Environmental Deficiency Report or letter).

UNSATISFACTORY:

Performance does not meet most contractual requirements and recovery is not likely in a timely manner. The contractual performance of the element or sub-element being assessed contains serious problem(s) for which the contractor’s corrective actions appear or were ineffective.

Note: To justify an Unsatisfactory rating, you should identify multiple significant events in each category that the contractor had trouble overcoming and state how it impacted the GOVERNMENT. However, a singular problem could be of such serious magnitude that it alone constitutes an unsatisfactory rating. An Unsatisfactory rating should be supported by referencing the management tools used to notify the contractor of the contractual deficiencies (e.g. Management, Quality, Safety or Environmental Deficiency Reports, or letters).

https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.cpars.gov%2Fcparsweb%2Fassets%2Fdocuments%2FCPARS_User_Manual.pdf&data=05%7C02%7C%7C1299a8a1556647c9c9b208dd897915ec%7Ce95f1b23abaf45ee821db7ab251ab3bf%7C0%7C0%7C638817875334440754%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=6A9MQEEm9YUvO1cWqDUn1sC8wYUJvuCVqG%2F2AhW8s1E%3D&reserved=0

8. DOCUMENTING PERFORMANCE

a. The VA shall document positive and/or negative performance. Any report may become a part of the supporting documentation for any contractual action and preparing annual past performance using CONTRACTOR

PERFORMANCE ASSESSMENT REPORTING SYSTEM (CPARS).

b. If contractor performance does not meet the Acceptable Quality level, the CO shall inform the contractor. This shall normally be in writing unless circumstances necessitate verbal communication. In any case the CO shall document the discussion and place it in the contract file. When the COR and the CO determines formal written communication is required, the COR shall prepare a Contract Discrepancy Report (CDR), and present it to CO.

The CO shall in turn review and shall present to the contractor's program manager for corrective action.

The contractor shall acknowledge receipt of the CDR in writing. The CDR shall specify if the contractor is required to prepare a corrective action plan to document how the contractor shall correct the unacceptable performance and avoid a recurrence. The CDR shall also state how long after receipt the contractor has to present this corrective action plan to the CO. The VA shall review the contractor's corrective action plan to determine acceptability. The CO shall also assure that the contractor receives impartial, fair, and equitable treatment. The CO is ultimately responsible for the final determination of the adequacy of the contractor’s performance and the acceptability of the Contractor’s corrective action plan.

Any CDRs may become a part of the supporting documentation for any contractual action deemed necessary by the CO.

See Sample on following page.

9. COR AND CONTRACTOR ACKNOWLEDGEMENT OF QASP

SIGNED:

COR NAME/TITLE DATE

SIGNED:

CONTRACTOR NAME/TITLE DATE

CONTRACT DISCREPANCY REPORT

1. CONTRACT NUMBER 2. REPORT NUMBER FOR THIS DISCREPANCY

3. TO: (Contracting Officer) 4. FROM: (Name of COR)

5. DATES

a. CDR PREPARED

b. RETURNED BY

CONTRACTOR:

c. ACTION COMPLETE

6. DISCREPANCY OR PROBLEM (Describe in detail. Include reference to PWS Directive; attach continuation sheet if necessary.)

7. SIGNATURE OF COR Date:

8. SIGNATURE OF CONTRACTING OFFICER Date:

9a. TO (Contracting Officer) 9a. FROM (Contractor)

10. CONTRACTOR RESPONSE AS TO CAUSE, CORRECTIVE ACTION AND ACTIONS TO

PREVENT RECURRENCE. (Cite applicable quality control program procedures or new procedures.

Attach continuation sheet(s) if necessary.)

11. SIGNATURE OF CONTRACTOR REPRESENTATIVE Date:

12. GOVERNMENT EVALUATION. (Acceptance, partial acceptance, reflection. Attach continuation sheet(s) if necessary.)

13. GOVERNMENT ACTIONS (Acceptance, partial acceptance, reflection. Attach continuation sheet(s) if necessary.)

14. CLOSE OUT

NAME TITLE SIGNATURE DATE

a. CONTRACTOR

NOTIFIED

b. COR c.

CONTRACTING

OFFICER

D.2 ORGANIZATIONAL CONFLICTS OF INTEREST

36C26326Q0063

852.209-70. ORGANIZATIONAL CONFLICTS OF INTEREST (OCT 2020)

All healthcare contracts require response to the following provision as prescribed in VAAR 809.507-1(b). Please use the form in APPENDIX A to provide response.

ORGANIZATIONAL CONFLICTS OF INTEREST (OCT 2020)

(a) It is in the best interest of the Government to avoid situations which might create an organizational conflict of interest or where the Offeror's performance of work under the contract may provide the Contractor with an unfair competitive advantage. The term 'organizational conflict of interest' means that because of other activities or relationships with other persons, a person is unable to render impartial assistance or advice to the Government, or the person's objectivity in performing the contract work is or might be otherwise impaired, or the person has an unfair competitive advantage.

(b) The Offeror shall provide a statement with its offer which describes, in a concise manner, all relevant facts concerning any past, present, or currently planned interest (financial, contractual, organizational, or otherwise) or actual or potential organizational conflicts of interest relating to the services to be provided under this solicitation. The Offeror shall also provide statements with its offer containing the same information for any consultants and subcontractors identified in its proposal and which will provide services under the solicitation. The Offeror may also provide relevant facts that show how its organizational and/or management system or other actions would avoid or mitigate any actual or potential organizational conflicts of interest.

(c) Based on this information and any other information solicited or obtained by the Contracting Officer, the Contracting Officer may determine that an organizational conflict of interest exists which would warrant disqualifying the Contractor for award of the contract unless the organizational conflict of interest can be mitigated to the Contracting Officer's satisfaction by negotiating terms and conditions of the contract to that effect. If the conflict of interest cannot be mitigated and if the Contracting Officer finds that it is in the best interest of the United States to award the contract, the Contracting Officer shall request a waiver in accordance with FAR 9.503.

(d) Nondisclosure or misrepresentation of actual or potential organizational conflicts of interest at the time of the offer or arising as a result of a modification to the contract, may result in the termination of the contract at no expense to the Government.

(End of provision)

D.2 ORGANIZATIONAL CONFLICTS OF INTEREST

APPENDIX A

[CONTRACTOR NAME]

[ADDRESS]

SOLICITATION # 36C26326Q0063

CONTRACTOR CONFLICT OF INTEREST CERTIFICATION STATEMENT

[ ] ____[CONTRACTOR NAME]________________ represents that the individuals listed in the Key Personnel and Temporary Emergency Substitutions section of the solicitation 36C26326Q0063 anesthesiologist physician on-call servicess have no present, or currently planned interest (financial, contractual, organizational, or otherwise) or actual or organizational conflicts of interest relating to the services to be provided to the Minneapolis VA Health Care System Veterans Administration under the referenced solicitation.

None of the employees listed in the solicitation have a past interest (financial, contractual, organizational, or otherwise) or actual or organizational conflicts of interest relating to the services to be provided to the Minneapolis VA Health Care System Veterans Administration under the referenced solicitation.

OR

[ ] Statement attached describing, in a concise manner, all relevant facts concerning any past, present, or currently planned interest (financial, contractual, organizational, or otherwise) or actual or potential organizational conflicts of interest relating to the services to be provided under this solicitation. The offeror shall also provide statements with its offer containing the same information for any consultants and subcontractors identified in its proposal and which will provide services under the solicitation. The offeror may also provide relevant facts that show how its organizational and/or management system or other actions would avoid or mitigate any actual or potential organizational conflicts of interest.

NAME OF CERTIFYING OFFICIAL

TITLE

SIGNATURE DATE

D.3 CONTRACTOR CERTIFICATION: IMMIGRATION AND NATIONALITY ACT OF 1952, AS

AMENDED

The Contractor certifies that the Contractor shall comply with any and all legal provisions contained in the Immigration and Nationality Act of 1952, As Amended; its related laws and regulations that are enforced by Homeland Security, Immigration and Customs Enforcement and the U.S Department of Labor as these may relate to non-immigrant foreign nationals working under contract or subcontract for the Contractor while providing services to Department of Veterans Affairs patient referrals;

While performing services for the Department of Veterans Affairs, the Contractor shall not knowingly employ, contract or subcontract with an illegal alien; foreign national non-immigrant who is in violation their status, as a result of their failure to maintain or comply with the terms and conditions of their admission into the United States. Additionally, the Contractor is required to comply with all “E-Verify” requirements consistent with “Executive Order 12989” and any related pertinent Amendments, as well as applicable Federal Acquisition Regulations.

If the Contractor fails to comply with any requirements outlined in the preceding paragraphs or its Agency regulations, the Department of Veterans Affairs may, at its discretion, require that the foreign national who failed to maintain their legal status in the United States or otherwise failed to comply with the requirements of the laws administered by Homeland Security, Immigration and Customs Enforcement and the U.S Department of Labor, shall be prohibited from working at the Contractor’s place of business that services Department of Veterans Affairs patient referrals; or other place where the Contractor provides services to veterans who have been referred by the Department of Veterans Affairs; and shall form the basis for termination of this contract for breach.

The Contractor agrees to obtain a similar certification from its subcontractors.

Signature: ____________________________________________

Date: ____________________________________________

Typed Name and Title: ___________________________________

Company Name: ______________________________________

This certification concerns a matter within the jurisdiction of an agency of the United States and the making of a false, fictitious, or fraudulent certification may render the maker subject to prosecution under 18 U.S.C. 1001.

VA HANDBOOK 6500.6

APPENDIX D

36C26326Q0063

D.4 CONTRACTOR RULES OF BEHAVIOR

This User Agreement contains rights and authorizations regarding my access to and use of any information assets or resources associated with my performance of services under the contract terms with the Department of Veterans Affairs (VA). This User Agreement covers my access to all VA data whether electronic or hard copy ("Data"), VA information systems and resources ("Systems"), and VA sites ("Sites"). This User Agreement incorporates Rules of Behavior for using VA, and other information systems and resources under the contract.

1. GENERAL TERMS AND CONDITIONS FOR ALL ACTIONS AND ACTIVITIES UNDER

THE CONTRACT:

a. I understand and agree that I have no reasonable expectation of privacy in accessing or using any VA, or other Federal Government information systems.

b. I consent to reviews and actions by the Office of Information & Technology (OI&T) staff designated and authorized by the VA Chief Information Officer (CIO) and to the VA OIG regarding my access to and use of any information assets or resources associated with my performance of services under the contract terms with the VA. These actions may include monitoring, recording, copying, inspecting, restricting access, blocking, tracking, and disclosing to all authorized OI&T, VA, and law enforcement personnel as directed by the VA CIO without my prior consent or notification.

c. I consent to reviews and actions by authorized VA systems administrators and Information Security Officers solely for protection of the VA infrastructure, including, but not limited to monitoring, recording, auditing, inspecting, investigating, restricting access, blocking, tracking, disclosing to authorized personnel, or any other authorized actions by all authorized OI&T, VA, and law enforcement personnel.

d. I understand and accept that unauthorized attempts or acts to access, upload, change, or delete information on Federal Government systems; modify Federal government systems; deny access to Federal government systems; accrue resources for unauthorized use on Federal government systems; or otherwise misuse Federal government systems or resources are prohibited.

e. I understand that such unauthorized attempts or acts are subject to action that may result in criminal, civil, or administrative penalties. This includes penalties for violations of Federal laws including, but not limited to, 18 U.S.C. §1030 (fraud and related activity in connection with computers) and 18 U.S.C. §2701 (unlawful access to stored communications).

f. I agree that OI&T staff, in the course of obtaining access to information or systems on my behalf for performance under the contract, may provide information about me including, but not limited to, appropriate unique personal identifiers such as date of birth and social security number to other system administrators, Information Security Officers (ISOs), or other authorized staff without further notifying me or obtaining additional written or verbal permission from me.

g. I understand I must comply with VA’s security and data privacy directives and handbooks. I understand that copies of those directives and handbooks can be obtained from the Contracting Officer's Representative (COR). If the contractor believes the policies and guidance provided by the COR is a material unilateral change to the contract, the contractor must elevate such concerns to the Contracting Officer for resolution.

h. I will report suspected or identified information security/privacy incidents to the COR and to the local ISO or Privacy Officer as appropriate.

2. GENERAL RULES OF BEHAVIOR

a. Rules of Behavior are part of a comprehensive program to provide complete information security. These rules establish standards of behavior in recognition of the fact that knowledgeable users are the foundation of a successful security program. Users must understand that taking personal responsibility for the security of their computer and the information it contains is an essential part of their job.

b. The following rules apply to all VA contractors. I agree to:

(1) Follow established procedures for requesting, accessing, and closing user accounts and access. I will not request or obtain access beyond what is normally granted to users or by what is outlined in the contract.

(2) Use only systems, software, databases, and data which I am authorized to use, including any copyright restrictions.

(3) I will not use other equipment (OE) (non-contractor owned) for the storage, transfer, or processing of VA sensitive information without a VA CIO approved waiver, unless it has been reviewed and approved by local management and is included in the language of the contract. If authorized to use OE IT equipment, I must ensure that the system meets all applicable 6500 Handbook requirements for OE.

(4) Not use my position of trust and access rights to exploit system controls or access information for any reason other than in the performance of the contract.

(5) Not attempt to override or disable security, technical, or management controls unless expressly permitted to do so as an explicit requirement under the contract or at the direction of the COR or ISO. If I am allowed or required to have a local administrator account on a government-owned computer, that local administrative account does not confer me unrestricted access or use, nor the authority to bypass security or other controls except as expressly permitted by the VA CIO or CIO's designee.

(6) Contractors’ use of systems, information, or sites is strictly limited to fulfill the terms of the contract. I understand no personal use is authorized. I will only use other Federal government information systems as expressly authorized by the terms of those systems. I accept that the restrictions under ethics regulations and criminal law still apply.

(7) Grant access to systems and information only to those who have an official need to know.

(8) Protect passwords from access by other individuals.

(9) Create and change passwords in accordance with VA Handbook 6500 on systems and any devices protecting VA information as well as the rules of behavior and security settings for the particular system in question.

(10) Protect information and systems from unauthorized disclosure, use, modification, or destruction. I will only use encryption that is FIPS 140-2 validated to safeguard VA sensitive information, both safeguarding VA sensitive information in storage and in transit regarding my access to and use of any information assets or resources associated with my performance of services under the contract terms with the VA.

(11) Follow VA Handbook 6500.1, Electronic Media Sanitization to protect VA information. I will contact the COR for policies and guidance on complying with this requirement and will follow the COR's orders.

(12) Ensure that the COR has previously approved VA information for public dissemination, including e-mail communications outside of the VA as appropriate. I will not make any unauthorized disclosure of any VA sensitive information through the use of any means of communication including but not limited to e-mail, instant messaging, online chat, and web bulletin boards or logs.

(13) Not host, set up, administer, or run an Internet server related to my access to and use of any information assets or resources associated with my performance of services under the contract terms with the VA unless explicitly authorized under the contract or in writing by the COR.

(14) Protect government property from theft, destruction, or misuse. I will follow VA directives and handbooks on handling Federal government IT equipment, information, and systems. I will not take VA sensitive information from the workplace without authorization from the COR.

(15) Only use anti-virus software, antispyware, and firewall/intrusion detection software authorized by VA. I will contact the COR for policies and guidance on complying with this requirement and will follow the COR's orders regarding my access to and use of any information assets or resources associated with my performance of services under the contract terms with

VA.

(16) Not disable or degrade the standard anti-virus software, antispyware, and/or firewall/intrusion detection software on the computer I use to access and use information assets or resources associated with my performance of services under the contract terms with VA. I will report anti-virus, antispyware, firewall or intrusion detection software errors, or significant alert messages to the COR.

(17) Understand that restoration of service of any VA system is a concern of all users of the system.

(18) Complete required information security and privacy training, and complete required training for the particular systems to which I require access.

3. ADDITIONAL CONDITIONS FOR USE OF NON- VA INFORMATION TECHNOLOGY

RESOURCES

a. When required to complete work under the contract, I will directly connect to the VA network whenever possible. If a direct connection to the VA network is not possible, then I will use VA approved remote access software and services.

b. Remote access to non-public VA information technology resources is prohibited from publicly-available IT computers, such as remotely connecting to the internal VA network from computers in a public library.

c. I will not have both a VA network line and any kind of non-VA network line including a wireless network card, modem with phone line, or other network device physically connected to my computer at the same time, unless the dual connection is explicitly authorized by the COR.

d. I understand that I may not obviate or evade my responsibility to adhere to VA security requirements by subcontracting any work under any given contract or agreement with VA, and that any subcontractor(s) I engage shall likewise be bound by the same security requirements and penalties for violating the same.

4. STATEMENT ON LITIGATION

This User Agreement does not and should not be relied upon to create any other right or benefit, substantive or procedural, enforceable by law, by a party to litigation with the United States Government.

5. ACKNOWLEDGEMENT AND ACCEPTANCE

I acknowledge receipt of this User Agreement. I understand and accept all terms and conditions of this User Agreement, and I will comply with the terms and conditions of this agreement and any additional VA warning banners, directives, handbooks, notices, or directions regarding access to or use of information systems or information. The terms and conditions of this document do not supersede the terms and conditions of the signatory’s employer and VA.

Print or type your full name Signature

Last 4 digits of SSN Date

Office Phone Position Title

Contractor’s Company Name

Please complete and return the original signed document to the COR within the timeframe stated in the terms of the contract.

NARA LANGUAGE

Records Management Language for Contracts

When Federal agencies acquire goods or services, they need to determine what Federal records management requirements should be included in the contract. Federal contractors often create, send, or receive Federal records. Federal contracts should provide clear legal obligations describing how the contract employees must handle Federal records.

Agency records officers, procurement counsel, and acquisitions officers must discuss how to integrate records management obligations into their existing procurement processes. NARA has developed the following language to be included as an agency-specific term and condition in Federal contracts for a variety of services and products. The majority of contracts should include language on records management obligations, but each contract should be evaluated individually. For example, the data-rights paragraph (Paragraph 10 below) may not be appropriate for all contracts. Instead, agencies may be better served by one of the established data-rights clauses in the Federal Acquisition Regulations.

This language should not replace specific records management requirements included within Federal information system contracts.

RECORDS MANAGEMENT OBLIGATIONS

A. Applicability

This clause applies to all Contractors whose employees create, work with, or otherwise handle Federal records, as defined in Section B, regardless of the medium in which the record exists.

B. Definitions

“Federal record” as defined in 44 U.S.C. § 3301, includes all recorded information, regardless of form or characteristics, made or received by a Federal agency under Federal law or in connection with the transaction of public business and preserved or appropriate for preservation by that agency or its legitimate successor as evidence of the organization, functions, policies, decisions, procedures, operations, or other activities of the United States Government or because of the informational value of data in them.

The term Federal record:

1. includes VA records.

2. does not include personal materials.

3. applies to records created, received, or maintained by Contractors pursuant to their VA contract.

4. may include deliverables and documentation associated with deliverables.

C. Requirements

Contractor shall comply with all applicable records management laws and regulations, as well as National Archives and Records Administration (NARA) records policies, including but not limited to the Federal Records Act (44 U.S.C. chs. 21, 29, 31, 33), NARA regulations at 36 CFR Chapter XII Subchapter B, and those policies associated with the safeguarding of records covered by the Privacy Act of 1974 (5 U.S.C. 552a). These policies include the preservation of all records, regardless of form or characteristics, mode of transmission, or state of completion.

In accordance with 36 CFR 1222.32, all data created for Government use and delivered to, or falling under the legal control of, the Government are Federal records subject to the provisions of 44 U.S.C.

chapters 21, 29, 31, and 33, the Freedom of Information Act (FOIA) (5 U.S.C. 552), as amended, and the Privacy Act of 1974 (5 U.S.C. 552a), as amended and must be managed and scheduled for disposition only as permitted by statute or regulation.

In accordance with 36 CFR 1222.32, Contractor shall maintain all records created for Government use or created in the course of performing the contract and/or delivered to, or under the legal control of the Government and must be managed in accordance with Federal law. Electronic records and associated metadata must be accompanied by sufficient technical documentation to permit understanding and use of the records and data.

VA and its contractors are responsible for preventing the alienation or unauthorized destruction of records, including all forms of mutilation. Records may not be removed from the legal custody of VA or destroyed except for in accordance with the provisions of the agency records schedules and with the written concurrence of the Head of the Contracting Activity. Willful and unlawful destruction, damage or alienation of Federal records is subject to the fines and penalties imposed by 18 U.S.C. 2701. In the event of any unlawful or accidental removal, defacing, alteration, or destruction of records, Contractor must report to VA. The agency must report promptly to NARA in accordance with 36 CFR 1230.

The Contractor shall immediately notify the appropriate Contracting Officer upon discovery of any inadvertent or unauthorized disclosures of information, data, documentary materials, records or equipment. Disclosure of non-public information is limited to authorized personnel with a need-to-know as described in the [contract vehicle]. The Contractor shall ensure that the appropriate personnel, administrative, technical, and physical safeguards are established to ensure the security and confidentiality of this information, data, documentary material, records and/or equipment is properly protected. The Contractor shall not remove material from Government facilities or systems, or facilities or systems operated or maintained on the Government’s behalf, without the express written permission of the Head of the Contracting Activity. When information, data, documentary material, records and/or equipment is no longer required, it shall be returned to VA control or the Contractor must hold it until otherwise directed. Items returned to the Government shall be hand carried, mailed, emailed, or securely electronically transmitted to the Contracting Officer or address prescribed in the [contract vehicle]. Destruction of records is EXPRESSLY PROHIBITED unless in accordance with Paragraph (4).

The Contractor is required to obtain the Contracting Officer's approval prior to engaging in any contractual relationship (sub-contractor) in support of this contract requiring the disclosure of information, documentary material and/or records generated under, or relating to, contracts. The Contractor (and any sub-contractor) is required to abide by Government and VA guidance for protecting sensitive, proprietary information, classified, and controlled unclassified information.

The Contractor shall only use Government IT equipment for purposes specifically tied to or authorized by the contract and in accordance with VA policy.

The Contractor shall not create or maintain any records containing any non-public VA information that are not specifically tied to or authorized by the contract.

The Contractor shall not retain, use, sell, or disseminate copies of any deliverable that contains information covered by the Privacy Act of 1974 or that which is generally protected from public disclosure by an exemption to the Freedom of Information Act.

The VA owns the rights to all data and records produced as part of this contract. All deliverables under the contract are the property of the U.S. Government for which VA shall have unlimited rights to use, dispose of, or disclose such data contained therein as it determines to be in the public interest. Any Contractor rights in the data or deliverables must be identified as required by FAR 52.227-11 through

FAR 52.227-20.

Training. All Contractor employees assigned to this contract who create, work with, or otherwise handle records are required to take VA-provided records management training. The Contractor is responsible for confirming training has been completed according to agency policies, including initial training and any annual or refresher training.

D. Flow-down of requirements to subcontractors

The Contractor shall incorporate the substance of this clause, its terms and requirements including this paragraph, in all subcontracts under this [contract vehicle], and require written subcontractor acknowledgment of same.

Violation by a subcontractor of any provision set forth in this clause will be attributed to the Contractor.