Sol_75H70726Q00074.pdf

SEE ADDENDUMIS CHECKED

CODE 18a. PAYMENT WILL BE MADE BY

CODE

FACILITYCODE

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER

OFFEROR

203CODE 16. ADMINISTERED BYCODE

X

X

X

561621

SIZE STANDARD:

100.00 % FOR:SET ASIDE:UNRESTRICTED OR203

REQUEST FOR

PROPOSAL

(RFP)

INVITATION

FOR BID (IFB)

10. THIS ACQUISITION ISCODE

REQUEST FOR

QUOTE (RFQ)

14. METHOD OF SOLICITATION

13b. RATING

NORTH AMERICAN INDUSTRY

CLASSIFICATION STANDARD

(NAICS):

SMALL BUSINESS

07/22/2026 1700 MD

06/30/2026

505-256-6750STEPHANIE BEGAY

(No collect calls)

INFORMATION CALL:

FOR SOLICITATION 8. OFFER DUE DATE/LOCAL TIMEb. TELEPHONE NUMBER a. NAME

4. ORDER NUMBER3. AWARD/ 6. SOLICITATION

75H70726Q00074

5. SOLICITATION NUMBER

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS 1. REQUISITION NUMBER PAGE OF

1 21 OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

TELEPHONE NO.

17a. CONTRACTOR/

15. DELIVER TO

Albuquerque NM 87110

4101 Indian School Rd NE, Suite 225

9. ISSUED BY

7.

2. CONTRACT NO.

EFFECTIVE DATE

$25

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW

ISSUE DATE

DELIVERY FOR FREE ON BOARD

(FOB) DESTINATION UNLESS

BLOCK IS MARKED

11.

SEE SCHEDULE

12. DISCOUNT TERMS THIS CONTRACT IS A RATED

ORDER UNDER THE DEFENSE

PRIORITIES AND ALLOCATIONS

SYSTEM - DPAS (15 CFR 700)

13a.

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

(SDVOSB)

HUBZONE SMALL

BUSINESS

8(A)

Albuquerque Indian Health Service WOMEN-OWNED SMALL

BUSINESS (WOSB)

ECONOMICALLY DISADVANTAGED

WOMEN-OWNED SMALL

BUSINESS (EDWOSB)

Albuquerque NM 87110

4101 Indian School Rd NE, Suite 225

Albuquerque Indian Health Service

24.

AMOUNT

23.

UNIT PRICE

22.

UNIT

21.

QUANTITY

20.

SCHEDULE OF SUPPLIES/SERVICES

19.

ITEM NO.

Solicitation No. 75H70726Q00074 is hereby issued to provide installation, upgrade, configuration, testing, and support of Pharmacy Electronic Access Control Systems for the Albuquerque Area Indian Health Service (AAIHS) Pharmacy Departments.

(Use Reverse and/or Attach Additional Sheets as Necessary)

HEREIN, IS ACCEPTED AS TO ITEMS:

DATED

STEPHANIE BEGAY

. YOUR OFFER ON SOLICITATION (BLOCK 5),

INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE SET FORTH

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DELIVER

ARE

ARE

31c. DATE SIGNED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA

31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (Type or print)

ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY ADDITIONAL

SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

27a. SOLICITATION INCORPORATES BY REFERENCE (FEDERAL ACQUISITION REGULATION) FAR 52.212-1, 52.212-4. FAR 52.212-3

AND 52.212-5 ARE ATTACHED. ADDENDA

26. TOTAL AWARD AMOUNT (For Government Use Only)

OFFER

STANDARD FORM 1449 (REV. 11/2021)

Prescribed by GSA - FAR (48 CFR) 53.212

ARE NOT ATTACHED.

ARE NOT ATTACHED.

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

30b. NAME AND TITLE OF SIGNER (Type or print)

30a. SIGNATURE OF OFFEROR/CONTRACTOR

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

25. ACCOUNTING AND APPROPRIATION DATA

29. AWARD OF CONTRACT: REFERENCE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE

32c. DATE 32b. SIGNATURE OF AUTHORIZED GOVERNMENT REPRESENTATIVE

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED:

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

40. PAID BY39. S/R VOUCHER NUMBER38. S/R ACCOUNT NUMBER

37. CHECK NUMBER

FINALPARTIAL

36. PAYMENT

FINALPARTIAL

35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER33. SHIP NUMBER

COMPLETE

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

42d. TOTAL CONTAINERS42c. DATE REC'D (YY/MM/DD)

42b. RECEIVED AT (Location)

42a. RECEIVED BY (Print)

41c. DATE41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

STANDARD FORM 1449 (REV. 11/2021) BACK

24.

AMOUNT

23.

UNIT PRICE

22.

UNIT

21.

QUANTITY

20.

SCHEDULE OF SUPPLIES/SERVICES

19.

ITEM NO.

32f. TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT REPRESENTATIVE

21 2 of

Solicitation No.

75H70726Q00074

Project Title Pharmacy Electronic Access Control System- AAO

SECTION B – CONTINUATION OF SF-1449

This is a combined synopsis/solicitation for commercial services prepared in accordance with FAR Part 12. This announcement constitutes the only solicitation. Quotes are being requested and a separate written solicitation will not be issued.

Solicitation No. 75H70726Q00074 is issued as a Request for Quotation (RFQ) for Pharmacy Electronic Access Control Systems for the Albuquerque Area Indian Health Service (AAIHS) facilities.

This acquisition is set-aside for Indian Small Business Economic Enterprise (ISBEE) concerns, with a cascading set-aside.

Under the Buy Indian Act, 25 U.S.C. 47, through the transfer of authority from the Department of Interior to HHS, offers will be solicitated from Indian Small Business Economic Enterprises (see HHSAR Subpart 326.6) that are also small business concerns. If there is not enough competition and/or reasonably priced offers received from the ISBEE set-aside, then quotes will be considered for award to other small business concerns. Any acquisition resulting from this cascading set-aside will be from such a concern as follows:

1st Tier: Indian Small Business Economic Enterprises 2nd Tier: All other Small Business Concerns

The full text of provisions and clauses may be accessed electronically at FAR and Revolutionary FAR Overhaul.

The associated North American Industrial Classification System (NAICS) code for this procurement is 561621 with a small business size standard of $25M.

1. CONTRACT TYPE

The Department of Health and Human Services (DHHS), Albuquerque Area Indian Health Service (IHS), Division of Contracts and Grants Management (DCGM), anticipates awarding a single firm-fixed price with Economic Price Adjustment (FFP-EPA) contract, as a result of this opportunity.

2. PLACE OF PERFORMANCE

Services shall be provided for the following Albuquerque Area Indian Health Service (IHS) Service Units:

Albuquerque Indian Health Center 801 Vassar Drive NE Albuquerque, NM 87106

Taos Picuris Health Center 1090 Goat Springs Taos, NM 87571

Cochiti Health Center 270 Windmill Road Cochiti Lake, NM 87083

Ute Mountain Ute Health Center 232 Rustling Willow Street Towaoc, CO 81334

Jicarilla Apache Health Center 500 Mundo Road Dulce, NM 87528

Zia Health Center 155 Capital Square Drive Zia Pueblo, NM 87503

Santa Ana Health Center O2-C Dove Road Bernalillo, NM 87004

Zuni Comprehensive Health Center Route 301 North 21 B. Avenue Zuni, NM 87327

Santa Clara Health Center 400 State Road 30 – Los Alamos Hwy Espanola, NM 87532 https://www.acquisition.gov/?q=/browse/far/52 https://www.acquisition.gov/far-overhaul/far-part-deviation-guide/far-overhaul-part-10

Project Title Pharmacy Electronic Access Control System- AAO

3. PERIOD OF PERFORMANCE (POP)

The period of performance consists of a one-year base period.

Base Year: TBD/2026 – TBD/2027

4. PRICING SUMMARY

Payment will be made for services performed and accepted in accordance with the Statement of Work (SOW), based on the unit prices quoted in the Pricing Table below.

Pricing Table

Item # Contract Period Description Pricing Total Amount

CLIN 1

Base Year:

TBD/2026-

TBD/2027

Pharmacy Door Controls- Installation/upgrade/replacement of access control systems

Grand Total:

***You may use a format of your own***

• The Contractor is responsible for all applicable Federal, State, Tribal, and local taxes, including New Mexico Gross Receipts Tax, if applicable. The Government will not withhold taxes.

5. POINTS OF CONTACT (POC)

a. Contact Information

Contracting Officer (CO) Contract Specialist

Stephanie Begay Stephanie Begay

(505) 256-6750 (505) 256-6750

Stephanie.Begay3@ihs.gov Stephanie.Begay3@ihs.gov

Contracting Officer’s Representative

(COR)

Alternate COR

Jeramiah Danielson Diego Aguirre-Herreria

Phone: To be distributed at award Phone: To be distributed at award

Email: To be distributed at award Email: To be distributed at award

b. Contract Administration and Authority

• The CO is the only individual authorized to bind the Government or modify this purchase order.

• The CO designates a COR and Alternate COR to provide technical oversight.

• The COR’s authority is limited to performance monitoring and does not include authority to:

o Modify the contract or obligate funds o Authorize additional work o Direct contractor personnel o Change scope, schedule, price, or requirements

• The COR may:

o Monitor technical performance mailto:Stephanie.Begay3@ihs.gov mailto:Stephanie.Begay3@ihs.gov

Project Title Pharmacy Electronic Access Control System- AAO o Review deliverables o Conduct inspections and evaluations o Report performance issues to the CO

• The Alternate COR performs COR duties when the Primary COR is unavailable and may not exceed delegated authority.

6. PERFORMANCE WORK STATEMENT (PWS)

6.1 Purpose and Background

a. This Performance Work Statement (PWS) defines outcome-based requirements for the installation, upgrade, configuration, testing, and support of Pharmacy Electronic Access Control System serving pharmacy areas at designated Indian Health Service (IHS) facilities.

b. This requirement is driven by audit findings indicating that existing pharmacy access controls and audit capabilities do not fully meet applicable industry and federal standards. The purpose of this project is to remediate those findings by implementing Electronic Access Control System and maintaining a reliable audit trail identifying access through all pharmacy doors.

c. Electronic Access Control Systems are electronically controlled door locking systems that use digital credentials [Government-issued Personal Identity Verification (PIV) cards], to manage and control access to secured areas.

These systems provide controlled access, centralized management, and audit trails identifying access by user, date, and time.

d. Under this PWS, the Contractor shall install, upgrade, and configure Electronic Access Control System serving pharmacy areas to remediate audit findings, enable controlled access, and support auditability. Work may include upgrading existing systems, configuring software, and servers, installing additional components, and integrating with existing infrastructure. Full system replacement is not assumed unless required to achieve compliance and functionality.

e. Installed systems and components shall be current, manufacturer-supported versions compatible with HSPD-12 and FIPS 201-3 requirements.

6.2 Applicable Facilities

a. Services apply to pharmacy areas within the following IHS facilities:

1. Albuquerque Indian Health Center

2. Santa Ana Health Center

3. Zia Health Center

4. Jicarilla Apache Health Center

5. Cochiti Health Center

6. Santa Clara Health Center

7. Taos-Picuris Health Center

8. Ute Mountain Ute Health Center

9. Zuni Comprehensive Health Center

b. Points-of-Contact (POCs) will be provided at contract award.

1. POCs include: CO, COR, Project Manager, Facility Managers, Pharmacy leadership, and local

Information Technology (IT) Representatives.

c. Pharmacy Door inventories, quantities, and facility-specific details shall be captured and maintained in ‘Appendix

A – Pharmacy Door Inventory’ and Lease Information (Excel format). Appendix A is provided for planning, assessment, and documentation purposes and may be updated based on site verification and Contracting Officer’s Representative (COR) approval without requiring modification to the PWS.

6.3 Task-Based Performance Requirements Summary

a. Task 1 – Existing Conditions Verification and Upgrade Assessment

1. Objective: Determine whether compliance can be achieved through upgrades or require new installation or replacement.

2. Key Activities: Site verification; assessment of new installation of system where needed; assessment of upgrade feasibility; documentation of reuse versus replacement decisions.

Project Title Pharmacy Electronic Access Control System- AAO

3. Deliverables: The Contractor shall verify and update Appendix A to reflect actual door conditions, system capability, lease constraints, and recommended new installation, upgrade, or replacement determinations, subject to Government review and approval.

b. Task 2 – Design Finalization and Submittals

1. Objective: Produce installation- ready documentation consistent with Task 1 determinations.

2. Key Activities: Preparation of shop drawings, door schedules, software workstation server locations, equipment lists, and installation plans.

3. Deliverables: Approved shop drawings; finalized equipment schedules; installation schedules. Updated details following site assessments and submitted with the Task 1 deliverables.

c. Task 3 – Installation and System Configuration

1. Objective: Implement approved new installation, upgrades, or replacement to achieve an Electronic Access Control system and auditability.

2. Key Activities: Installation, upgrade, or replacement of system components; configuration of software and access rules; system integration.

3. Deliverables: Installed, configured, and tested access control systems by each door at each facility.

d. Task 4 – Testing, Training, and Acceptance

1. Objective: Demonstrate system compliance, functionality, and readiness for healthcare facility ownership.

2. Key Activities: Functional testing; audit log verification; training delivery; documentation completion.

3. Deliverables: Test audit reports; training materials; as-built drawings; Operation and Maintenance

Manuals.

6.4 Codes, Standards, and Compliance

a. All work performed under this PWS shall comply with applicable Federal, State, and local codes, standards, and guidance, including but not limited to:

1. Homeland Security Presidential Directive 12 (HSPD-12),

2. Federal Information Processing Standards (FIPS) 201-3,

3. Section 508 and Accessibility Requirements

4. National Fire Protection Association (NFPA) codes, as applicable,

5. Underwriters Laboratories (UL) listings,

6. Manufacturer installation requirements, and

7. Applicable IHS, HHS, and facility-specific IT security and safety policies.

b. Section 508 and Accessibility Compliance

1. This product must conform to the Revised Section 508 (https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines) and WCAG 2.1 Level AA standards as outlined below. Solicitation for supplies and services shall require the submission of a Section 508 Product Assessment Template. The template can be found at https://www.itic.org/policy/accessibility/vpat

2. All Information and Communication Technology (ICT) deliverables under this contract (e.g., websites, applications, electronic documents, and multimedia) must comply with the Revised Section 508 Standards (36 CFR Part 1194) and the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA Standards. The Contractor shall ensure accessibility of all ICT deliverables and provide conformance documentation in the form of a Voluntary Product Accessibility Template (VPAT) / Accessibility Conformance Report (ACR), or by completing the HHS Section 508 Accessibility Checklists. The current VPAT 2.5 template includes fields for reporting conformance to WCAG 2.1 and shall be used to document accessibility. The Contractor shall remediate any identified accessibility issues at no additional cost. The Contracting Officer will include the applicable Health and Human Services Acquisition Regulation (HHSAR) clauses 352.239-73 and 352.239-74 in the solicitation and resulting contract.

6.5 Government-Furnished Information and Site Verification

a. The Government will provide available drawings, device layouts, and quantity information identifying proposed access control devices and locations. These materials are provided for planning purposes only and shall be verified by the Contractor.

b. The Contractor shall review Government-furnished information and conduct site visit assessments at each pharmacy to verify existing conditions, including but not limited to:

https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines https://www.itic.org/policy/accessibility/vpat

Project Title Pharmacy Electronic Access Control System- AAO

1. Door locations, door types, and door functions

2. Existing locks, readers, controllers, and electronic access control systems

3. Hardware condition and reuse potential

4. Cable distances, pathways, and power availability

5. IT connectivity and system integration requirements

6. Software workstation server locations

c. The Contractor shall identify and document any significant differing site conditions and recommend alternate device locations or technical approaches where proposed locations are not feasible.

d. All recommendations shall be reviewed with the Government for concurrence prior to implementation.

e. Site visits and IT-related verification activities shall be coordinated with the COR, Project Manager, Facility Managers, Pharmacy leadership, and local Information Technology (IT) representatives.

6.6 System Installation and Integration Requirements

a. The Contractor shall furnish, install, upgrade, replace, configure, and integrate Electronic Access Control System components necessary to provide controlled access and auditable entry for pharmacy-controlled areas.

b. Compliance and Credentialing

1. Systems shall comply with HSPD-12 and FIPS 201-3 requirements and support authentication using Government-issued Personal Identity Verification (PIV) credentials.

2. System to be installed by manufacturer’s authorized, certified partner to maintain warranties and ensure proper configuration.

c. System Infrastructure and Resiliency

1. System servers and operator workstations shall be supported by uninterruptible power supplies (UPS) capable of maintaining operation for a minimum of 30 minutes during power interruptions. Final UPS sizing and configuration shall be validated during Task 1 site assessments and submitted for Government review and approval prior to procurement to ensure alignment with verified field conditions.

2. Surge protection shall be provided as necessary to protect controllers, power supplies, and related components.

d. Servers, Workstations, and Software

1. The Contractor shall provide, install, and configure servers, operator workstations, and credential enrollment stations as required to support system operation.

2. Software and firmware shall be current, manufacturer-supported versions compatible with

HSPD-12 / FIPS 201-3 requirements.

3. Credential enrollment stations shall accept existing Government PIV cards.

4. All applicable system software, user interfaces, and administrative tools shall comply with

Section 508 requirements as specified in Section 4.b.

e. Floor Plans and Door Mapping

1. Digital floor plans shall be uploaded into the access control system software, and each pharmacy door shall be accurately mapped to its correct physical location.

2. Government-furnished drawings will be provided where available. Where such drawings are unavailable or incomplete, the Contractor may submit schematic-level digital plans sufficient to support door identification and system mapping, subject to Government review and approval.

f. Controllers, Cabling, and Power

1. Access control controllers, power supplies, cabling, raceways, J-hooks, and conduits shall be installed in accordance with manufacturer recommendations and applicable codes.

2. Device Installation and Door Hardware

3. Readers, locks (including maglocks or electric strikes with position switches), alarm contacts, exit devices, and motion sensors shall be installed or upgraded as required to support controlled access and auditability.

4. Systems shall provide monitoring for door ajar, door forced open, and other alarm or trouble conditions during contingency access-lock situation.

g. Controller Placement and Coordination

1. The Contractor shall determine appropriate controller locations and controller types based on site conditions and system requirements.

Project Title Pharmacy Electronic Access Control System- AAO

2. Proposed controller locations shall be reviewed with the Government for concurrence prior to installation. Government concurrence is required for non-standard or materially revised controller placements. Standard placements consistent with approved submittals may proceed without additional concurrence.

h. Life Safety Integration

1. The access control system shall interface with facility fire alarm systems to ensure that controlled doors release upon fire alarm activation, in accordance with applicable life-safety codes.

i. Fire-Stopping and Penetrations

1. Any wall or ceiling penetration required for cabling shall be sealed using UL-listed fire-stopping materials in accordance with manufacturer recommendations and applicable codes.

j. Reuse of Existing Systems and Components

1. Where existing electronic access control systems, wiring, or hardware are present, the

Contractor shall reuse such components when verified as compatible and in acceptable condition.

2. Replacement of existing components shall occur only where upgrades cannot achieve required compliance, functionality, or auditability.

6.7 Contract Administration, Facility Access, and Operational Coordination

a. The Government will designate a COR to oversee performance under this PWS. Facility-specific POCs will be provided at contract award.

1. Facility Access and Security

i. Contractor personnel shall complete required background investigations, fingerprinting, and IHS security forms prior to accessing facilities or systems.

ii. Contractor personnel shall comply with facility sign-in/sign-out procedures, wear identification badges while on-site, and adhere to all facility safety, security, and operational policies.

iii. Contractor personnel shall complete required facility safety training prior to commencing work.

2. IT and Network Security

i. The Contractor shall comply with all IHS computer and network security requirements.

ii. System access shall be used solely for purposes related to electronic access control operations.

3. Operational Coordination and Work Hours

i. The Contractor shall coordinate schedules with facility’s Maintenance, Pharmacy leadership, IT, Security, and other designated contacts.

ii. Work shall normally be performed during standard business hours unless after-hours or weekend work is approved in advance by the Government.

iii. Work shall be planned and executed to minimize disruption to patient care and pharmacy operations.

6.8 Pre-Installation Coordination Meetings

a. The Contractor shall attend and participate in a pre-installation coordination meeting at each facility prior to the start of on-site work.

b. The purpose of the pre-installation coordination meeting is to ensure a mutual understanding of facility procedures, safety and security requirements, proposed installation approaches, work schedules, and coordination needs.

c. At a minimum, the meeting shall address:

1. Facility access procedures and badging requirements

2. Safety and security requirements

3. Review of approved plans, drawings, and device locations

4. Work sequencing and scheduling

5. Coordination with facility’s Maintenance, Pharmacy leadership, IT, Security, and other designated contracts.

Project Title Pharmacy Electronic Access Control System- AAO

d. The Contractor shall not commence installation activities until the pre-installation coordination meeting has been conducted, unless otherwise authorized by the Government.

6.9 Warranty, Handoff, and Transition to Facility

a. The Contractor shall provide a one-year warranty covering materials and workmanship for all installed or upgraded Pharmacy Electronic Access Control System components. The warranty period shall commence upon final acceptance by the Government.

b. Each facility will manage its own follow-on service and maintenance contracts after system acceptance.

Nothing in this PWS shall be construed to obligate the Government to award follow-on service work to the installation Contractor.

1. Handoff and Transition Requirements

i. To ensure a smooth transition to facility managed service users and oversight, the

Contractor shall complete the following prior to final acceptance:

1. Provide complete and current documentation, including as-built drawings, wiring diagrams, device inventories, configuration settings, and system architecture descriptions

2. Provide administrative credentials, licenses, and access rights necessary for system operation and maintenance, as authorized by the Government

3. Identify manufacturer support contacts and warranty information for all installed components

4. Conduct a formal handoff briefing with facility’s Maintenance, Pharmacy leadership, IT, Security, and other designated contacts.

5. The Contractor shall not retain exclusive control over system configuration, credentials, licenses, or documentation following acceptance.

6.10 Payment and Invoicing

a. Payment shall be based on satisfactory completion and Government acceptance of task deliverables in accordance with this PWS and the contract. Invoices shall:

1. Clearly identify the task(s) and deliverable(s) being billed

2. Reference to the applicable period of performance

3. Include sufficient documentation to support that deliverables have been completed and accepted

4. The Government will not make payment for incomplete, deficient, or unaccepted deliverables.

6.11 Quality Assurance Surveillance Plan (QASP)

a. This Quality Assurance Surveillance Plan (QASP) defines the Government’s approach to monitoring and evaluating Contractor performance under this PWS. Surveillance activities are designed to ensure that installed, upgraded, or replacement of the Pharmacy Electronic Access Control System fully remediate OIG audit findings, provide controlled access to pharmacy areas, and produce reliable audit trails.

b. The QASP is outcome-focused and is intended to verify compliance with contractual requirements without imposing unnecessary oversight or micromanagement

1. Surveillance Roles and Responsibilities

i. Contracting Officer (CO): Retains overall authority for contract administration and enforcement of contract terms.

ii. Contracting Officer’s Representative (COR): Responsible for day-to-day surveillance of

Contractor performance, review and acceptance of deliverables, coordination with stakeholders, and documentation of performance.

iii. Facility Managers / Facilities Engineering: Provide input regarding site conditions, installation quality, and operational impacts.

iv. Information Technology (IT): Verifies system integration with facility networks, cybersecurity requirements, and system access controls.

v. Security and Safety Personnel: Verify compliance with physical security and life-safety requirements.

Project Title Pharmacy Electronic Access Control System- AAO

vi. Pharmacy Leadership: Confirms that access controls meet operational and audit requirements for all pharmacy doors.

2. The COR may rely on input from the above stakeholders when assessing Contractor performance.

c. Surveillance Methods

1. The Government may employ one or more of the following surveillance methods, as appropriate to the task and phase of work:

i. Review and approval of Contractor deliverables

ii. Observation of on-site installation and configuration activities

iii. Participation in coordination, progress, and pre-installation meetings

iv. Review of site verification reports and upgrade/replacement decision documentation

v. Observation or witnessing of functional testing and demonstrations

vi. Review of audit logs, reports, and system configuration settings

vii. Verification of documentation, credentials, licenses, and handoff materials

2. Surveillance intensity may vary based on Contractor performance, complexity of work, and criticality of the task.

d. Surveillance by Task

1. Task 1 – Existing Conditions Verification and Upgrade Assessment

i. Surveillance for Task 1 shall verify that the Contractor:

1. Conducted site visits at each facility

2. Verified door locations, door types, existing hardware, wiring, and infrastructure

3. Assessed existing electronic access control systems for upgrade feasibility prior to recommending replacement

4. Documented upgrade only versus replacement determinations using the Task 1

Decision Matrix (Appendix A)

5. Identified and documented differing site conditions and associated risks

ii. Acceptance of Task 1 deliverables shall be based on completeness, accuracy, and adequacy of documentation to support subsequent installation decisions.

2. Task 2 – Design Finalization and Submittals

i. Surveillance for Task 2 shall include:

1. Review of shop drawings, door schedules, and device layouts for consistency with Task 1 determinations

2. Verification that proposed designs align with approved upgrade-first decisions and replacement justifications

3. Confirmation that submittals comply with HSPD-12 / FIPS 201-3 and applicable standards

4. The Contractor shall submit applicable Section 508 conformance documentation (VPAT/ACR or HHS checklist) for all ICT components.

5. Verification of Section 508 compliance documentation and accessibility conformance.

3. Task 3 – Installation and System Configuration

i. Surveillance for Task 3 shall include:

1. Periodic observation of installation activities to verify conformance with approved submittals

2. Verification that upgrades are implemented where approved and that replacements occur only where justified

3. Confirmation that cables, controllers, power supplies, and devices are installed in accordance with manufacturer recommendations and applicable codes

4. Verification of fire alarm interfaces and fail-safe door release functionality

4. Task 4 – Testing, Training, and Acceptance

i. Surveillance for Task 4 shall include:

1. Witnessing functional testing of each access control pharmacy door

2. Verification of Government PIV authentication and access control rules

3. Verification that audits logs accurately capture user, date, time, and door events

Project Title Pharmacy Electronic Access Control System- AAO

4. Verification of alarm announcement for door ajar and door forced open conditions

5. Confirmation that training sessions have been conducted and materials delivered to authorized personnel that will be responsible for review and support of daily operation requirements

6. Verification that all required documentation, credentials, and system information have been provided

7. Verification that all applicable ICT components meet Section 508 accessibility requirements

8. Verification of Section 508 compliance documentation and accessibility conformance

e. Deficiency Identification and Corrective Action

1. Any deficiencies identified through surveillance activities, defined as failures to meet approved submittals, contractual requirements of this PWS, or applicable codes and standards, shall be documented by the COR and communicated to the Contractor. The Contractor shall correct all deficiencies at no additional cost to the Government within timeframes established by the CO or

COR.

2. Repeated or unresolved deficiencies may be escalated to the CO for corrective action in accordance with contract terms.

f. Performance Documentation and Final Acceptance

1. The COR shall document surveillance activities, findings, corrective actions, and acceptance decisions in the official contract file. Final acceptance shall not occur until all performance requirements have been met, all deficiencies corrected, and all deliverables approved in writing by the Government.

6.12 Appendix A – Pharmacy Door Inventory and Lease Information

a. This appendix provides the required decision framework to be used by the Contractor during ‘Task 1 –

Existing Conditions Verification and Upgrade Assessment’. The purpose of this matrix is to ensure a consistent, documented, and auditable determination of whether existing electronic access control systems and components can be upgraded and reused or whether replacement is technically required to achieve compliance with this PWS.

b. The Contractor shall complete this matrix for each pharmacy access control door and associated access controller system evaluated under Task 1 and submit it as part of the Task 1 deliverables.

1. Decision Criteria

i. For each door and system evaluated, the Contractor shall assess the criteria below and document findings. Replacement shall be recommended only when upgrade or configuration is not technically feasible or would not achieve required compliance, functionality, or auditability.

2. Determination Summary

i. Based on the evaluation above, the Contractor shall make one of the following determinations for each door or system:

1. New Install – There is no existing system/components to meet the requirements.

2. Upgrade – Existing system/components can be upgraded or configured to meet all requirements.

3. Partial Replacement – Limited components must be replaced while reusing the remaining system.

4. Full Replacement – Existing system cannot be feasibly upgraded to meet requirements.

ii. The determination shall be clearly stated and supported by the documented criteria above.

3. Government Review and Approval

i. All new installations, upgrades, and replacement determinations documented in Appendix

A are subject to Government review and approval. Installation, upgrade, or replacement work shall not proceed until determinations have been reviewed and approved by the Government in accordance with Task 1 acceptance requirements.

Project Title Pharmacy Electronic Access Control System- AAO

ii. The Government will review and respond to documented new installation, upgrade, partial replacement, or full replacement determinations within fifteen (15) business days of receipt.

Determinations may be reviewed and approved on a facility-by-facility basis. Approved determinations may proceed independently without requiring completion or approval of all facilities.

c. End of Appendix A

7. INSPECTION AND ACCEPTANCE

All work performed under this contract is subject to inspection and final acceptance by the Contracting Officer (CO) or the duly authorized representative of the Government. The Contracting Officer’s Representative (COR), as a duly authorized representative of the Contracting Officer, shall be responsible for monitoring the Contractor’s performance, evaluating the quality of services provided, and performing final inspection and acceptance of all deliverables and services required under this contract.

a. Quality Assurance:

The Contractor’s performance is subject to ongoing evaluation under the Service Unit’s Quality Assurance (QA) program to ensure compliance with professional, regulatory, and organizational standards. Reviews may include assessments of work performed, patient safety considerations, documentation accuracy, and clinical quality evaluations. The Contractor shall correct any deficiencies identified. Failure to implement corrective actions may result in termination for cause, particularly where performance endangers patients, staff, or Government property

b. Contractor Performance Evaluation Report:

Throughout the contract period, the Contractor’s performance will be evaluated on both an interim and final basis pursuant to FAR Subpart 42.15, to include the Contractor Performance Assessment Reporting System (CPARS).

These evaluations become part of the official contract file and may be used as past-performance information for future procurements involving the Contractor, its affiliates, or significant subcontractors.

c. Contract Discrepancy Report (CDR):

In the event of unsatisfactory contract performance, the Contracting Officer will issue a Contract Discrepancy Report (CDR) describing the circumstances and findings regarding the incomplete or deficient service. The Contractor shall acknowledge receipt of the CDR and provide a written corrective-action plan describing how the deficiency will be resolved and prevented from recurring. The Government will review the Contractor’s response for acceptability, and any completed CDRs will become part of the overall performance evaluation record used in assessing current and future contractual obligations.

8. INVOICE SUBMISSION

The Contractor shall submit invoices, as needed. Advance payments will not be issued by Finance unless stated herein.

Upload complete invoice with all required documentation to:

https://www.ipp.gov

Please do not send any invoices or any invoice-related documents (such as deliverables, reports or balance statements) to the Contracting Officer or Finance Department. Failure to upload required documents directly to the website listed above will delay prompt payment of your invoice.

Additionally, the Contractor is required to include the Unique Entity Identifier (UEI) on each invoice. For additional information about the UEI (hhtps://www.sam.gov).

Request for Taxpayer Identification Number and Certification

A W-9 form shall be submitted to the Albuquerque Area Indian Health Service Division of Accounting Services by either of the following:

https://www.ipp.gov/

Project Title Pharmacy Electronic Access Control System- AAO

1. Encrypted Email: ALB_AOAPinvoices@ihs.gov or

2. Secure Fax: (505) 256-6851

Failure to submit the required form W-9 to the office(s) listed above will delay issuance of the IRS 1099 Form.

Credit memos will not be accepted as a form of refund. All refunds are to be submitted via a check addressed to:

Albuquerque Area Indian Health Service Division of Accounts Receivable 4101 Indian School Road NE, Suite 225 Albuquerque, NM 87110

9. SPECIAL CONTRACT REQUIREMENTS

a. Background Investigation and Start of Work Contractor personnel shall not begin performance until all required background investigations, fingerprinting, and suitability determinations have been completed and approved by the Government. An official start date will be issued by the Contracting Officer.

b. Security and System Access Contractor personnel requiring access to IHS facilities or information systems must comply with HSPD-12 and applicable HHS information security requirements. All Government-issued identification badges and credentials shall be returned upon contract completion or personnel separation.

c. Required Training Contractor personnel shall complete all required facility orientation and mandatory training, including Information System Security Awareness (ISSA), Fraud, Waste, and Abuse (FWA), Protecting Children from Sexual Abuse, and any required facility-specific clinical training.

d. Privacy and Protecting of Information Contractor personnel shall safeguard all patient and Government information in accordance with applicable federal privacy and security laws and HHSAR privacy clauses. Information shall not be used or disclosed except as authorized under this contract.

SECTION C – CONTRACT CLAUSES

FAR 52.252-2 - Clauses Incorporated by Reference (Feb 1998) This purchase order incorporates one or more Federal Acquisition Regulation (FAR) clauses by reference and/or in full text, with the same force and effect as if they were provided in full text. Upon request, the Contracting Officer will make the full text of any clause available. The full text of FAR clauses may also be accessed electronically at the following links: FAR and Revolutionary FAR Overhaul

Per FAR Class Deviation 2025-09 Amendment 2: System updates may lag policy updates. The System for Award Management (SAM) may continue to require entities to complete representations based on provisions that are not included in this solicitation. Contracting officers will rely on representations from offers based on provisions in the solicitation. Entities are not required to, nor are they able to, update their entity registration to remove these representations in SAM.

Check if applicable

FAR

Clause Title Date

☒ 52.202-1 Definitions Jun 2020 ☒ 52.203-12 Limitation on Payments to Influence Certain Federal Transactions Jun 2020 ☒ 52.203-13 Contractor Code of Business Ethics and Conduct Nov 2021

Project Title Pharmacy Electronic Access Control System- AAO

☒ 52.203-17 Contractor Employee Whistleblower Rights Nov 2023 ☒ 52.203-19 Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements Jan 2017 ☒ 52.204-9 Personal Identity Verification of Contractor Personnel Jan 2011 ☒ 52.204-13 System for Award Management - Maintenance Apr 2026 ☒ 52.209-6 Protecting the Government's Interest When Subcontracting with Contractors Debarred, Suspended, Proposed for Debarment, or Voluntarily Excluded Apr 2026

☒ 52.209-10 Prohibition on Contracting with Inverted Domestic Corporations Apr 2026 ☒ 52.212-4 Terms and Conditions—Commercial Products and Commercial Services Apr 2026 ☒ 52.216-2 Economic Price Adjustment-Standard Supplies Nov 2021 ☒ 52.216-4 Economic Price Adjustment-Labor and Material Jan 2017 ☒ 52.219-6 Notice of Total Small Business Set-Aside Apr 2026 ☒ 52.219-13 Notice of Set-Aside of Orders Mar 2020 ☒ 52.219-28 Postaward Small Business Program Representation Apr 2026 ☒ 52.222-3 Convict Labor Apr 2026 ☒ 52.222-35 Equal Opportunity for Veterans Apr 2026 ☒ 52.222-36 Equal Opportunity for Workers with Disabilities Apr 2026 ☒ 52.222-37 Employment Reports on Veterans Apr 2026 ☒ 52.222-41 Service Contract Labor Standards Apr 2026 ☒ 52.222-42 Statement of Equivalent Rates for Federal Hires May 2014 ☒ 52.222-44 Fair Labor Standards Act and Service Contract Labor Standards-Price Adjustment Apr 2026 ☒ 52.222-50 Combating Trafficking in Persons Apr 2026

Alt I Combating Trafficking in Persons, with Alternate I Apr 2026 ☒ 52.222-54 Employment Eligibility Verification Apr 2026 ☒ 52.222-55 Minimum Wages for Contractor Workers Under Executive Order 14026 Apr 2026 ☒ 52.222-62 Paid Sick Leave Under Executive Order 13706 Apr 2026 ☒ 52.222-90 Addressing DEI Discrimination by Federal Contractors Apr 2026 ☒ 52.223-5 Pollution Prevention and Right-to-Know Information May 2024 ☒ 52.223-23 Sustainable Products Apr 2026 ☒ 52.224-1 Privacy Act Notification Apr 1984 ☒ 52.224-2 Privacy Act Apr 1984 ☒ 52.224-3 Privacy Training Jan 2017 ☒ 52.226-1 Utilization of Indian Organizations and Indian-Owned Economic Enterprises Apr 2026 ☒ 52.226-8 Encouraging Contractor Policies to Ban Text Messaging While Driving May 2024 ☒ 52.232-33 Payment by Electronic Funds Transfer-System for Award Management Oct 2018 ☒ 52.232-40 Providing Accelerated Payments to Small Business Subcontractors Mar 2023 ☒ 52.233-3 Protest After Award Apr 2026 ☒ 52.233-4 Applicable Law for Breach of Contract Claim Apr 2026 ☒ 52.237-2 Protection of Government Buildings, Equipment, and Vegetation Apr 1984 ☒ 52.237-3 Continuity of Services Jan 1991 ☒ 52.240-91 Security Prohibitions and Exclusions Apr 2026 ☒ 52.240-92 Security Requirements Apr 2026 ☒ 52.240-92

Alt II Security Requirements, with Alternate II

☒ 52.240-93 Basic Safeguarding of Covered Contractor Information Systems Apr 2026 ☒ 52.242-5 Payments to Small Business Subcontractors Jan 2017 ☒ 52.252-6 Authorized Deviations in Clauses Nov 2020

FAR 52.217-8 - Option to Extend Services (Nov 1999) The Government may require continued performance of any services within the limits and at the rates specified in the

Project Title Pharmacy Electronic Access Control System- AAO contract. These rates may be adjusted only as a result of revisions to prevailing labor rates provided by the Secretary of Labor. The option provision may be exercised more than once, but the total extension of performance hereunder shall not exceed 6 months. The Contracting Officer may exercise the option by written notice to the Contractor within 30 days.

This contract incorporates the following Health and Human Services Acquisition Regulation (HHSAR) clauses by reference, with the same force and effect as if they were provided in full text. The full text of these clauses is available upon request from the Contracting Officer or may be accessed electronically at: HHSAR

Check if applicable

HHSAR

Clause No. Title Date

☒ 352.203-70 Anti-Lobbying Dec 2015 ☐ 352.208-70 Printing and Duplication Feb 2026 ☒ 352.211-3 Paperwork Reduction Act Nov 2025 ☐ 352.219-71 Mentor-Protégé Program Reporting Requirements Jan 2010 ☐ 352.223-70 Safety and Health Dec 2015 ☒ 352.224-70 Privacy Act Dec 2015 ☒ 352.224-71 Confidential Information Feb 2024 ☒ 352.226-1 Indian Preference Mar 2025 ☒ 352.226-6 Indian Economic Enterprise Subcontracting Limitations Mar 2022 ☒ 352.227-70 Publications and Publicity Dec 2015 ☐ 352.231-70 Salary Rate Limitation Feb 2026 ☒ 352.232-71 Electronic Submission of Payment Requests Apr 2026 ☐ 352.237-70 Pro-Children Act Dec 2015 ☐ 352.237-71 Crime Control Act – Reporting of Child Abuse Dec 2015 ☐ 352.237-72 Crime Control Act – Requirements for Background Checks Dec 2015 ☐ 352.237-73 Indian Child Protection and Family Violence Act Dec 2015 ☒ 352.237-75 Key Personnel Dec 2015 ☒ 352.239-74 Electronic and Information Technology Accessibility Dec 2015

The following HHSAR clauses are included in this contract in full text:

HHSAR 352.232-71 - Electronic Submission of Invoice Payment Requests (Apr 2026)

(a) Definitions. As used in this clause— Payment request means a bill, voucher, invoice, or request for contract financing payment with associated supporting documentation. The payment request must comply with the requirements identified in FAR 32.905(b), “Content of Invoices” and the applicable Payment clause included in this contract.

(b) Except as provided in paragraph (c) of this clause, the Contractor shall submit payment requests electronically using the Department of Treasury Invoice Processing Platform (IPP) or successor system. Information regarding IPP, including IPP Customer Support contact information, is available at www.ipp.gov or any successor site.

(c) The Contractor may submit payment requests using other than IPP only when the Contracting Officer authorizes alternate procedures in writing in accordance with HHS procedures. Unless otherwise agreed to by the contracting officer per HHSAR 352.232-71(c), the use of IPP shall take precedence over previously established invoicing procedures.

(d) If alternate payment procedures are authorized, the Contractor shall include a copy of the Contracting Officer's written authorization with each payment request. Unless otherwise agreed to by the contracting officer per HHSAR 352.232- 71(c), the use of IPP shall take precedence over previously established invoicing procedures.

HHSAR 352.237-75 - Key Personnel (Dec 2015) The key personnel specified in this contract are considered to be essential to work performance. At least 30 days prior to the contractor voluntarily diverting any of the specified individuals to other programs or contracts the Contractor shall notify the Contracting Officer and shall submit a justification for the diversion or replacement and a request to replace the https://www.hhs.gov/policies/hhsar/subpart352.html

Project Title Pharmacy Electronic Access Control System- AAO individual. The request must identify the proposed replacement and provide an explanation of how the replacement's skills, experience, and credentials meet or exceed the requirements of the contract (including, when applicable, Human Subjects Testing requirements). If the employee of the contractor is terminated for cause or separates from the contractor voluntarily with less than thirty days’ notice, the Contractor shall provide the maximum notice practicable under the circumstances. The Contractor shall not divert, replace, or announce any such change to key personnel without the written consent of the Contracting Officer. The contract will be modified to add or delete key personnel as necessary to reflect the agreement of the parties.

SECTION D – DOCUMENTS, EXHIBITS AND ATTACHMENTS

Attachment No. Description No. of

Pages 1 IHS IEE Representation Form 2

SECTION E – SOLICITATION PROVISIONS

FAR 52.252-1 Solicitation Provisions Incorporated by Reference (Feb 1998) This solicitation incorporates one or more solicitation provisions by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. The offeror is cautioned that the listed provisions may include blocks that must be completed by the offeror and submitted with its quotation or offer. In lieu of submitting the full text of those provisions, the offeror may identify the provision by paragraph identifier and provide the appropriate information with its quotation or offer. Also, the full text of a solicitation provision may be accessed electronically at the following links: FAR and Revolutionary FAR Overhaul (End of provision)

FAR

Clause Title Date

52.203-11 Certification and Disclosure Regarding Payments to Influence Certain Federal Transactions. Sep 2024

52.203-18 Prohibition on Contracting with Entities that Require Certain Internal Confidentiality Agreements or Statements-Representation. Jan 2017

52.204-7 System for Award Management - Registration Nov 2024 52.229-11 Tax on Certain Foreign Procurements – Notice and Representation. Jun 2020 52.212-1 Instructions to Offerors-Commercial Items Sep 2023 52.233-2 Service of Protest Sep 2006 52.240-90 Security Prohibitions and Exclusions Representations and Certifications Oct 2025 52.252-5 Authorized Deviations in Provisions Oct 2025

FAR 52.209-2 - Prohibition on Contracting with Inverted Domestic Corporations-Representation (Oct 2025)

(a) Definitions. As used in this clause— Inverted domestic corporation means a foreign incorporated entity that meets the definition of an inverted domestic corporation under 6 U.S.C. 395(b), applied in accordance with the rules and definitions of 6 U.S.C. 395(c).

Subsidiary means an entity in which more than 50 percent of the entity is owned—

(1) Directly by a parent corporation; or

(2) Through another subsidiary of a parent corporation.

(b) Government agencies are not permitted to use appropriated (or otherwise made available) funds for contracts with either an inverted domestic corporation, or a subsidiary of an inverted domestic corporation,…