Shredding PWS.pdf

WORK STATEMENT FOR

SHREDDING OF PRIVACY ACT DOCUMENTATION

At Tripler Army Medical Center, HI

TABLE OF CONTENTS

SECTION TITLE

1.0 INTRODUCTION

2.0 BACKGROUND

3.0 SCOPE OF WORK

4.0 QUALITY ASSURANCE SURVEILLANCE PLAN

5.0 APPLICABLE TECHNICAL ORDERS, SPECS, REGULATIONS, AND

MANUALS

6.0 ACRONYMS AND DEFINITIONS

1.0 INTRODUCTION.

1.1. The contractor shall provide non-personal services for all necessary labor, management, supervision, tools, materials, supplies, manhandling equipment, transportation and other incidental services to provide for the Shredding of PHI and PII documentation on-site at Tripler Army Medical Center (TAMC), Hawaii and the Desmond Doss Health Clinic, Schofield Barracks, Logistics Division, Bldg. 679. The contractor shall comply with all terms, conditions, special requirements, and specifications contained in the contract or incorporated by reference. The contractor will be responsible for complying with federal, state, or local environmental regulations, laws and or policies, whichever is the most stringent. Purpose of contract is to provide Shredding of Privacy Act documentation services and pick-up for the optimization of environmental compliance.

Environmental compliance shall be consistent with federal, state, and local regulations for handling, transporting, and disposing of Privacy Act documentation.

1.1.1. Privacy Act documentation may be defined as:

The Privacy Act of 1974 (Public Law 93–579, 88 Stat. 1896, enacted December 31, 1974, 5 U.S.C. § 552a), a United States federal law, establishes a Code of Fair Information Practice that governs the collection, maintenance, use, and dissemination of personally identifiable information about individuals that is maintained in systems of records by federal agencies. A system of records is a group of records under the control of an agency from which information is retrieved by the name of the individual or by some identifier assigned to the individual. The Privacy Act requires that agencies give the public notice of their systems of records by publication in the Federal Register. The Privacy Act prohibits the disclosure of information from a system of records absent of the written consent of the subject individual, unless the disclosure is pursuant to one of twelve statutory exceptions. The Act also provides individuals with a means by which to seek access to and amendment of their records and sets forth various agency record-keeping requirements. Additionally, with people granted the right to review what was documented with their name, they are also able to find out if the "records have been disclosed" and are also given the rights to make corrections.[1].

1.2. All services shall be provided in accordance with established standards, principles and ethics of the profession and applicable professional specialty organizations, the Privacy Act of 1974, the Resource Conservation and Recovery Act (RCRA), the Gramm-Leach-Bliley Act of 1999, the Fair and Accurate Credit Transaction Act (FACTA) of 2003, the Health Insurance Portability and Accountability Act (HIPAA) of 1996, the Family Educational Rights and Privacy Act (FERPA), applicable Department of Defense (DoD), and Army specific regulations, directives, and policies, and military treatment facility (MTF) specific policies, procedures, and job descriptions.

1.3. RESERVED

1.4. This contract is a non-personal services contract under which the personnel rendering the services are not subject, either by the contract’s terms or by the manner of its administration, to the supervision and control usually prevailing in relationships between the government and its employees. The period of performance for this contract is 1 October 2023 through 30 September 2024 with a four (4) year option.

2.0 BACKGROUND.

2.1. The mission of the military healthcare system (MHS) is to ensure the nation always has available a healthy military force supported by a combat ready healthcare system. Health care services for eligible MHS beneficiaries are provided at military treatment facilities (MTFs) located on or near military installations or posts. The military treatment facility may be a clinic, Hospital, or Medical Center. Clinics are outpatient facilities offering primary care or simple specialty care (routine exams, tests, treatments). The Clinic may be a stand-alone site or a satellite of a larger Clinic, Hospital, or Medical Center. Army Community Hospitals (ACH) offer more complex, resource-intensive secondary care (e.g., inpatient care, surgery under anesthesia) and primary care at outpatient clinics inside and outside the hospital. Army Medical Centers (MEDCENs) offer tertiary (sophisticated diagnosis/treatment of any ailment), secondary, and primary care, hospital services, preventive services, blood bank, and other services. In addition, all MEDCENs offer graduate medical education programs for physicians.

2.2. Tripler Army Medical Center (TAMC) is the headquarters of the Pacific Regional Medical Command of the armed forces administered by the United States Army in the State of Hawaii. It is the largest military hospital in the Asian and Pacific Rim region and serves a military sphere of jurisdiction. During a single day of operations at Tripler Army Medical Center, personnel serve an average of 1,728 meals, tend to 2,045 clinic visits and 140 emergency room visits, fill 2,730 prescriptions, complete 4,057 pathology procedures and deliver six (6) infants. On a typical day, 32 new patients are admitted as 100 beds are occupied. Of those patients, 20 go through ambulatory surgery.

3.0 SCOPE OF WORK.

3.1. This contract is a non-personal services contract under which the personnel rendering the services are not subject, either by the contract’s terms or by the manner of its administration, to the supervision and control usually prevailing in relationships between the government and its employees. The Contractor shall provide the non-personal services for all necessary labor, management, supervision, tools, materials, supplies, manhandling equipment, transportation and other incidental services to provide services for the shredding, pick-up, transport and disposal of Privacy Act documentation and any other documentation/media that requires shredding from TAMC and the Desmond Doss Health Clinic, Schofield Barracks, Logistics Division, Bldg. 679.

3.2 Administrative.

3.2.1. Contractor Representative. The Contractor shall designate, in writing, a primary point of contact for contract coordination and implementation not later than five business days after receiving notice of contract award. Changes in the primary point of contact (POC), at any time, shall require the Contractor to notify the Contracting Officer (KO) of the new representative at least five working days prior to the change. This notification shall be in writing and shall state the name and contact information for the new point of contact.

3.2.2. The Contracting Officer’s Representative (COR) will be the KO’s authorized representative in administering the contract at the MTF level. The Contractor’s representative shall be available to discuss any problems that the Contractor’s personnel may be experiencing during the performance of this contract. Problems experienced by the Government with the Contractor’s performance will be discussed and resolved. Unresolved problems will be referred to the KO for resolution.

3.2.3. Contractor shall not include or use non-compete provisions with respect to the performance of Government service contracts in its employment, consultant, or third-party contract agreements (hereafter agreements) with its contract personnel which are effective beyond the period of contract performance. Non-compete provisions shall not prevent contract personnel from being interviewed, employed, or accepting offers of employment or making other arrangements with potential competitors for follow-on contracts. Additionally, noncompete provisions shall not prevent contract personnel from accepting offers of employment or making other arrangements with any contractors who provide services to the Government, or from accepting offers of employment with the US Government, following the period of contract performance. Inclusion of such non-compete or similar conditions in agreements with contract personnel will result in an offeror’s proposal being determined unacceptable and may be grounds for termination of any awarded contract or task order.

Preventing contract personnel from accepting these offers will hinder the Government’s ability to accomplish the mission of providing medical care to its beneficiaries.

3.2.4. The Contractor and contract personnel shall abide by all MTF standards, rules, and procedures including requirements for any licensure, credentialing and quality assurance requirements. Such regulations include, but are not limited to, general safety, fire prevention, waste disposal, and personnel safety initiatives.

3.2.5. Media and Other Inquiries. The Contractor shall not respond to any media inquiries. Any inquiries from the media, third parties, or public agencies shall be immediately relayed to the COR, who will relay them to the MTF Public Affairs Officer or, after duty hours, to the Administrative Officer of the Day (AOD). There shall be no interviews, comments, or any other response without the knowledge and approval of the MTF Commander.

Other than routine inquiries from external agencies, all other inquiries and complaints shall be brought to the attention of the COR.

3.2.6. Emergency health care for contract personnel. The MTF will provide emergency healthcare for injuries or life-threatening medical emergencies occurring while on duty at the MTF. The Contractor shall reimburse the Government for such services as billed by the MTF.

3.3. Conflict of Interest.

3.3.1. Contractor will abide by federal employment statutes and the Federal ethics regulations in the selection and hiring of contractor personnel.

3.3.2. The Contractor or contract personnel shall not use Government facilities, supplies, or equipment in private practice or for any purpose other than providing the healthcare services required under this contract.

3.3.3. The Contractor shall not employ any person whose employment will violate the requirements of DOD Directive 5500-7 Joint Ethics Regulation, and Office of Government Ethics Regulations governing Standards of Conflict.

3.4. Security.

3.4.1. Security Identification Badges. The Contractor and contract personnel shall comply with the local installation and MTF personnel identification and access requirements while on site.

3.4.1.1. While on site, each contract personnel shall wear visible security badge identification, provided by the military installation or the MTF, on the front of his/her outer clothing. The badge must show the full name, title and if required by the Military the word “Contractor” in front. The COR will provide the paperwork to request identification badges.

3.4.1.2. The Contractor is responsible for absences of contract personnel due to expired identification and access documents. Such absences shall not relieve the Contractor of its obligation to perform the services required under this contract.

3.4.1.3. The contract personnel shall immediately report any lost or stolen badges to the COR.

3.4.1.4. The contract personnel shall turn in all identification badges to the COR, or his/her designated representative upon termination of their services under this contract.

3.4.2. Vehicle Registration. The MTFs are located on restricted access military installations.

The Contractor/contract personnel shall comply with the local installation requirements for vehicle registration and operation on the military installation. A valid driver’s license, Government-furnished civilian identification, proof of insurance and current registration must be presented to the entry gate guard upon request.

3.4.2.1. All vehicles are subject to search. Contract personnel may encounter long delays for vehicle inspection and identification checks upon entering and exiting the installation. The Government will not reimburse the Contractor for time spent at installation checkpoints. Contract personnel must plan accordingly and report to work at their scheduled duty time, at their appointed place of duty within the MTF.

3.5. Orientation and Training.

3.5.1. The contractor shall comply with OTSG/MEDCOM Policy Memo 21-040, Policy for Reporting Incidents of Sexual Assault and Sexual Harassment under the Sexual Assault Prevention and Response Program (SHARP), Oct 07, 2021. The SHARP reporting requirements apply only to knowledge obtained by contract personnel while performing services under this contract.

3.5.2. The contractor shall require all contract personnel with knowledge of an incident of sexual assault occurring on a Government facility, to include a Government leased facility, where the contractor is providing services under this contract, to report the incident to the contractor who shall immediately (within 24 hours) report the incident in writing to the government's COR. All incidents shall be reported whether they involve contract personnel or Government personnel, or other individuals.

3.6. AT/OPSEC REQUIREMENTS

3.6.1. Access and general protection/security policy and procedures. Contractor and all associated sub-contractor’s employees shall provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements (FAR Clause 52.204-9, Personal Identity Verification of Contract or Personnel) as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

3.6.2. For contractors that do not require CAC, but require access to a DOD facility or installation. Contractor and all associated sub-contractors employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorists Screening Database (TSDB) (Army Directive 2014-05/AR 190-13), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations.

3.7. MTF HOURS OF OPERATION

3.7.1. ACH’s and MEDCEN’s provide services 24 hours a day, 365 days a year (366 days during leap years) including holiday. Clinics have designated operating hours.

3.7.1.1. GENERAL OPERATING HOURS:

SCHOFIELD BARRACKS 0700 hrs. to 1500 hrs.

TAMC 24 hrs.

3.7.2. Holidays. The following is a list of legal federal holidays. Any of the federal holidays falling on a Saturday will be observed on the preceding Friday, holidays falling on a Sunday will be observed on the following Monday. Contract personnel may be required to work on legal holidays as determined by the COR.

New year’s Day, January 1st Martin Luther King’s Birthday, 3rd Monday in January

Washington’s Birthday, 3rd Monday in February Juneteenth, June 19th Memorial Day, Last Monday in May Independence Day, July 4th Labor Day, 1st Monday in September Columbus Day, 2nd Monday in October Veteran’s Day, November 11th Thanksgiving Day, 4th Thursday in November Christmas Day, December 25th

NOTE 1: Any holidays that are declared by Presidential Executive Order shall be observed in the same manner as the holidays listed above. If the area in which a contract employee is scheduled to work is closed due to the holiday and the employee is not required to report in, payment will not be made for those hours. Closures of the installation due to inclement weather or other such acts of God shall be handled in the same manner.

3.6.3. Closures. During anticipated closure of the facility due to Command declared training holidays or during unplanned closure of the facility due to natural disasters, military emergencies, severe weather, or otherwise, the contractor shall not invoice the Government for services not performed and the Government will not be liable to the contractors for any such closures.

3.8. SHREDDING/SCHEDULING PROCESS.

3.8.1. ROUTINE SHREDDING AND PICK-UP.

3.8.1.1. The Contractor shall shred/pick-up privacy act documentation at TAMC and Schofield Desmond Doss Clinic between hours annotated below excluding Federal Holidays. Shredding/pick-up of privacy Act documentation will be on a set weekly basis / every other week (day/time) or as requested by the Contracting Officer Representative (COR).

Location: TAMC Loading Dock 2A and Desmond Doss Health clinic, Schofield Barracks, Bldg. 679:

Location Days of Work Time (within the time frame)

TAMC Every Thursday 0900 to 1000 Desmond Doss Health Clinic Every Other Friday 0900 to 1430

3.8.1.2. The Contractor shall provide documentation with customer information pre-printed prior to conducting pick up services at TAMC facilities. The documentation will annotate total weight for the date of services in accordance with the Privacy Act of 1974.

3.8.2. The Contractor Manager may be required to meet with the KO or COR upon request and as often as necessary to clarify or remedy outstanding issues and or concerns. The COR or their designee will be responsible for communicating with the Contractor regarding scheduling issues. The shift supervisor may act as point of contract after normal duty hours, weekends and holidays. In such cases, the COR shall confirm all actions on the next normal working day.

3.8.2.1 Contingency. In the event the contract driver arrives at TAMC and COR cannot be reached:

3.8.2.2 Driver will attempt to contact Environmental Services Branch at 808-433-5730 or 808-433-6015.

3.9. Invoicing. The Contractor is responsible for submitting an accurate invoice.

3.9.1. The Contractor shall submit an electronic invoice on or before the end of the first week of each month for services performed in the prior month to TAMC COR. The invoice shall be forwarded according to the electronic billing clause. The Contractor will be required to process monthly invoices through the Government’s Wide Area Workflow (WAWF), Two in One payment process to the COR. The COR will review/verify electronic invoice and forward to DFAS for payment to Contractor. The invoice at a minimum will include the company information, invoice number, invoice date, CLIN number, unit price, unit of measure, quantity shipped, etc.

3.9.2. Utilizing the WAWF Two in One payment account process will account for the invoice to the generator.

No hard copy of invoice is required to be sent to the generator. The Contractor shall include the 4.166% general excise tax into the unit price.

3.10. Contractor Manpower Reporting. "ACCOUNTING FOR CONTRACT SERVICES-The Office of the Assistant Secretary of the Army (Manpower & Reserve Affairs) operates and maintains a secure Army data collection site where the contractor will report ALL contractor manpower (including subcontractor manpower) required for performance of this contract. The contractor is required to completely fill in all the information in the format using the following web address, https://cmra.army.mil. The required information includes: (1) Contracting Office, KO, KO’s Technical Representative; (2) Contract number, including task and delivery order number; (3) Beginning and ending dates covered by reporting period; (4) Contractor name, address, phone number, e-mail address, identity of contractor employee entering data; (5) Estimated direct labor hours (including sub-contractor); (6) Estimated direct labor dollars paid this reporting period (including sub-contractor); (7) Total payments (including sub-contractor); (8) Predominant Federal Service Code (FSC) reflecting services provided by contractor (and separate predominant FSC for each sub-contractor if different);

(9) Organizational title associated with the Unit Identification Code (UIC) for the Army Requiring Activity (the Army Requiring Activity is responsible for providing the contractor with its UIC for the purposes of reporting this information); (10) Locations where contractor and sub-contractors perform the work (specified by zip code in the United States and nearest City, Country, when in an overseas location, using standardized nomenclature provided on website); (11) Presence of deployment or contingency contract language, and, (12) Number of contractor and sub-contractor employees deployed in theater this reporting period (by country). (13) As part of its submission, the contractor will also provide the estimated total cost (if any) incurred to comply with this reporting requirement. Reporting period will be the period of performance not to exceed 12 months ending September 30 of each government fiscal year and must be reported by 31 October of each calendar year, unless otherwise specified in the contract line item (CLIN) description. The contractor shall notify the Contracting Officer’s Representative (COR) in writing by the 5th working day after the required CMR report is completed, but not later than the 5th working day of November. If the COR is unavailable, the contractor will notify the

KO.

4.0. Reserved.

4.1. Inspection. The inspection and acceptance point for all services rendered under this contract will be the COR. The performance by the contract personnel, the quality of services rendered, and any documentation or written material in support of same, shall be subject to continuous inspection, surveillance and review for acceptance by the KO or COR. Any services rendered by the contract personnel or interaction with military/civilian personnel deemed unprofessional, threatening, or dangerous by the KO will be grounds for immediate termination for default or cause. Quality Assurance procedures established by the MTF shall be used for continuous monitoring. Other performance evaluation factors will be monitored that are not quantified by numerical measurements which include: Contractor providing personnel not meeting the minimum qualification standards; Contractor relationship with hospital staff/Government contracting personnel; compliance with hospital healthcare policies and procedures.

5.0. SERVICE DESCRIPTION. Shredding / Pick-Up of Privacy Act documentation

5.1. RESERVED.

5.1.1. Type of Documentation. For this requirement, documents to be destroyed are documents with Personal Identification Information (PII) or Personal Health Information (PHI) information (old medical records, invoices/bills, acquisition records/ business records, old school records), Electronic media, including tapes, disks, CDs and other magnetic media.

5.1.2. All work shall be performed by a trained/certified employee. The Contractor shall ensure that employees who handle, package, transport, label, mark, placard, prepare certificate of destruction documents will be trained in accordance with federal the HIPAA – safeguards the confidentiality, integrity and availability of protected health information (PHI), FACTA – requires the secure disposal of consumer information, FERPA – protects the privacy of educational information/records that would lead to the identity of a student, Federal Privacy Act – governs the collection, maintenance and use of information maintained by federal agencies, GLBA – requires that financial institutions safeguard sensitive client data and clearly explain their information-sharing practices, etc., state, or local regulations. The contractor shall provide certificate of from the National Association for Information Destruction (AAA) prior to contract performance.

5.1.3. The Contractor shall comply with all terms, conditions, special contract requirements/conditions and specifications contained in the Contract or incorporated by reference. The Contractor will be responsible for complying with federal, state, or local environmental regulations, laws and or policies, whichever is the most stringent.

5.1.4. The Contractor shall be able to read, write, and speak English well enough to effectively communicate with all other personnel. The Contractor will report to the work site fully equipped to perform services required. At no time shall the Contractor conduct shredding/pickup of TAMC’s documentation without a U.S.

Government Representative (Military/Civilian) or Contractor Officer Representative (COR) present. A U.S.

Government Representative will be present during the time frame of the contractor shredding/pick-up of documentation.

5.1.5. Material Handling Equipment. The Contractor shall provide all necessary equipment to shred documentation on site at TAMC/Schofield Barracks facilities. The contractor shall have a back-up contingency plan in the event that their transport vehicle is unable to perform or become unavailable to meet transport requirements.

5.1.6. The Privacy Act of 1996 is defined as establishes a Code of Fair Information Practice that governs the collection, maintenance, use, and dissemination of personally identifiable information about individuals that is maintained in systems of records by federal agencies. A system of records is a group of records under the control of an agency from which information is retrieved by the name of the individual or by some identifier assigned to the individual.

5.1.7. The Contractor shall prepare a certificate of destruction to be provided to the Government Representative after every shredding/pick-up. An invoice and a monthly report with the weight of documentation destroyed will be provided to the COR NLT the 10th calendar day of the month. The report will contain weight of documentation destroyed by month with locations, certificate of destruction number, and total amount of invoice. The Contractor shall package all documentation for transport per requirements. The Contractor will provide TAMCs facilities with a shredding certificate of approved performance. The Contractor will destroy all documentation at the designated shredding/pick-up site (reference 3.8.1.)

5.1.7.1. Contractor Permit. The Contractor will provide a full copy of the permit from the State of Hawaii, at the start of the contract and for renewal of permits thereafter as verification that the Contractor is permitted to transport privacy act documentation, for the current permit year. The Contractor shall be NAID AAA certified for mobile and plant-based destruction and endorsed media destruction for paper/printed media, micro media, and PRISM Privacy+ certified. Deviation or non-compliance to permit specifications may be deemed for termination of contract.

5.1.8.2 Environmental Impairment Liability coverage.

5.1.8.2.1. The Contractor will bear the cost of any Notice of Violation (NOV), fine or penalty for non-compliance enforced by local, state and federal regulatory environmental/safety/health agencies from its conduct. The coverage applies to but is not limited to: land, air or water pollution and the different modes of transportation (i.e., air, vessel, highway, rail, etc.) associated with Contractor’s services.

5.1.8.2.2. To further and hold the United States Government harmless, the Contractor shall agree to the following: In the event of a spill or incident resulting from the Contractor’s services (i.e., picking-up, packaging, handling, storing, transporting, destructing, or disposing of the generator’s waste (i.e., PHI, PII, confidential documentation, etc.), the Contractor agrees to pay all costs and expenses to remedy that spill or incident for non-compliance.

5.1.9. Subcontracted Functions.

5.1.9.1 If the Contractor is to subcontract this contract, the Contractor shall provide the KO with the name of the subcontractor and the type of work to be performed prior to commencing work.

Subcontracted functions must be approved by the KO prior to commencement of work.

5.1.9.2. It is the Contractor’s responsibility to ensure and monitor their subcontractor’s compliance with all contract requirements regarding personal certification/qualification, personnel identification, security requirements, quality control, contract specifications and conduct while performing on the military installation.

5.1.9.3. Contract Closure. All work will be deemed complete when all required performance has been finished and concluded data has been received, certification of disposal received, and acceptance by the Government/final inspection has been completed.

5.1.9.4. No smoking policy. The Contractor shall comply with AR 600-63, Army Health Promotion for controlling the no smoking policy in Government buildings and facilities. Contractor employees shall eat and smoke in designated areas only.

6.0. APPLICABLE TECHNICAL ORDERS, SPECIFICATIONS, REGULATIONS, AND MANUALS.

6.1. Following is a list of basic publications applicable to this performance-based statement of work.

Additional publications may be listed by call. The Contractor is obligated to follow these publications.

Current issues of Army publications and links to other service publications can be accessed at http://www.apd.army.mil/. Army publications not on the internet or MTF policies and procedures can be obtained from the MTF. Department of Defense publications can be found at www.defenselink.mil/pubs or www.dtic.mil/whs/directives.

6.2. The Publications have been coded as mandatory or advisory. The Contractor is obligated to follow those coded as mandatory only to the extent that they apply to this contract. Supplements, amendments, or changes to these mandatory publications may be issued during the life of the contract. Advisory publications may be used for information and guidance but are not binding for compliance.

MANDATORY PUBLICATIONS:

Public Law 91-596 29 Dec 70 Occupational Safety and Health Administration Public Law 104-191 21 Aug 96 Health Insurance Portability and Accountability Act (HIPPA) of

Public Law 108-159 4 Dec 03 Fair and Accurate Credit Transaction Act (FACTA) of 2003 Public Law Gramm-Leach-Bliley Act Public Law Resource Conservation and Recovery Act (RCRA) Public Law Family Educational Rights and Privacy Act (FEPA) Public Law 89-614 Chapter 55, 10 U.S.C. (1071-1088) AR 25-2 Army Cybersecurity AR 25-22 The Army Privacy and Civil Liberties Program AR 40-1 Composition, Mission, and Functions of the Army Medical Department

AR 40-3 Medical Services: Medical, Dental, and Veterinary Care AR 40-66 Medical Records Administration and Health Care Documentation AR 40-68 Clinical Quality Management AR 40-400 Patient Administration AR 190-13 The Army Physical Security Program AR 380-5 Army Information Security Program AR 380-53 Communications Security Monitoring AR 380-67 Personnel Security Program AR 385-40 Army Accident Investigations and Reporting AR 608-1 Army Community Service ATP 3-39.32 Physical Security DHA PM 6430.04 Healthcare Environmental Cleaning Services Management DoD Manual 5200.02 Procedures for the DoD Personnel Security Program (PSP) DoD Manual 6055.05 Occupational Medical Examinations: Medical Surveillance and Medical Qualification Title 29, CFR Chapter XVII, Occupational Safety and Health Administration, Department of Labor Current issues of many forms can be accessed at http://www.usapa.army.mil/forms

6.3 ACRONYMS AND DEFINITIONS.

AR - Army Regulation CAC - Common Access Card CFR - Code of Federal Regulations CLIN - Contract Line Item Number COR - Contracting Officer’s Representative COTR - Contracting Officer’s Technical Representative CVS - Contractor Verification System DA - Department of the Army DHA - Defense Health Agency DoD - Department of Defense DoDI - Department of Defense Instruction EFT - Electronic Funds Transfer FAR - Federal Acquisition Regulation FSO - Facility Security Officer HIPAA - Health Insurance Portability & Accountability MEDCENs - Army Medical Centers MEDCOM - Medical Command

TAMC - Tripler Army Medical Center NAID AAA - Certification program established for shredding and deconstruction services providers; qualification of companies offering data destruction solutions.

PRISM Privacy + - designed to meet a specific set of control objectives designed to preserve information privacy.