SOW-Syracuse VAMC RTLS Asset Management-EHRM-SPL.pdf

Syracuse VA Medical Center

Statement of Work RTLS Asset Management Tracking System

Syracuse VA Medical Center | Statement of Work (SOW) | RTLS Asset Management Tracking

Syracuse VAMC, 800 Irving Ave., Syracuse, NY 13210 1

Statement of Work (SOW)

Department of Veterans Affairs (VA) Syracuse Veteran Affairs Medical Center Nonexpendable Asset Inventory Management – RTLS Asset Management Tracking System Contract Type: Firm-Fixed-Price (FFP)

A. GENERAL INFORMATION

1. Title of Project: Syracuse VAMC RTLS Asset Management/Tracking

2. Type of Contract Contemplated: Firm Fixed

BACKGROUND:

The current manual process for tracking Nonexpendable Inventory, at the Syracuse VA Medical Center (SYVAMC), is antiquated, inefficient and ineffective. Our intent is to modernize our asset accountability and tracking procedures by contracting with a vendor to provide equipment and software, for a minimum of 15,800 equipment items, that will facilitate our equipment inventory process using real-time location system (RTLS) technology.

B. SCOPE

The use of this technology complies with VA Handbook 7002, Section 5 (Inventory in Use), paragraph B.

The vendor shall provide equipment and software that accurately reads, tracks, and stores nonexpendable asset inventory information based on manufacturer-supplied RTLS tagging, and vendor-supplied RTLS tags, as needed. The tracking system must use real-time analytics and automated reporting, with room-level accuracy for easy lookup and departmental tracking for efficient accounting of equipment. The solution shall provide real-time analytics, automated reporting, room-level accuracy, and include location-based alarms with escalation capabilities. The platform shall be customizable and scalable to meet SYVAMC needs.

The Contractor shall deliver a performance-based RTLS solution achieving measurable thresholds defined under Acceptance and Acceptance Testing (Section E.6 below), Syracuse VAMC, 800 Irving Ave., Syracuse, NY 13210 2 including accuracy, read performance, latency, reconciliation, coverage, and accessibility conformance.

Compliance Reference:

The Contractor shall comply with all EHRM (Electronic Health Record Modernization) integration constraints and SPL/SP-Lite (Special Purpose Legacy IT Environment) governance requirements as defined in Sections E.7–E.10 and shall adhere to Section J Delivery approval gates and blackout period dependencies prior to any production deployment.

C. OVERVIEW OF CONTRACTOR FURNISHINGS & SERVICES

The contractor shall provide RTLS hardware, software, documentation, and services to authorized SYVAMC users. Services include site survey, design, installation, integration, end-user acceptance testing, training, and warranty services.

C.1 Project Management & Governance

The contractor shall:

• Contractor PM & Key Personnel requirements

• Project Management Plan with RACI (Responsible, Accountable, Consulted, Informed)

• Weekly status reports & monthly rollups

• Risk/issue/change control processes

• Artifact tracker with approval checkpoints

• Required project meetings and governance cadence

D. REQUIREMENTS / SALIENT CHARACTERISTICS / SPECIFICATIONS

1. RTLS asset management tracking systems quickly and accurately identify inventory.

Syracuse VAMC, 800 Irving Ave., Syracuse, NY 13210 3

2. Automatically update nonexpendable equipment records with current location, date, Equipment Entry number, Serial number, Name of equipment item that is tagged and assigned Equipment Inventory List number.

3. RTLS tags transmit unique identification data of the individually tagged items to a reader.

4. RTLS tag can be scanned and read under heavily contaminated conditions.

5. RTLS tag does not need to be in direct line of sight to be scanned.

6. RTLS tag can be affixed to and read from diversely shaped items, made from varied surface materials.

7. RTLS tags are durable and can withstand differences in environmental temperatures, humidity, and can resist facility decontamination and cleaning procedures.

8. Multiple RTLS Tags can be read at once.

Common Nomenclature (commercial description): Radio Frequency Identification (RFID) Asset Management Tracking System

Kind of material: RTLS tags, Hardware (i.e., Reader and transmit equipment), and Software.

Dimensions, size, capacity: RTLS tags shall be of a size that will affix to nonexpendable assets, so as not to interfere with their operation in any way.

Principles of operation:

RTLS technology functions as an automated asset management tool, for tracking the location of physical personal property. An RFID tag is programmed with data that is associated with a specific piece of equipment, such as, Equipment Entry number (EE), Serial Number or Equipment Inventory List (EIL).

An RTLS reader captures the tag’s data by means of radio waves. The collected information is then compiled within an asset tracking system and used to maintain accountability of designated physical, nonexpendable inventories.

Restrictive environmental conditions:

RTLS asset management/tracking system must be resistant to facility environmental temperature variances and stand up to facility cleaning and sanitation procedures.

Syracuse VAMC, 800 Irving Ave., Syracuse, NY 13210 4

Intended use:

Provide real-time, nonexpendable inventory accountability by utilizing RFID technology to enhance inventory efficiency and accuracy while minimizing manual, physical inventory procedures.

Equipment with which the item is used:

RTLS tags will be affixed to SYVAMC nonexpendable inventories. The RTLS readers will be used to collect unique identification data from the tags and transmit that data to be used with Automated Engineering Management System/Medical Equipment (AEMS/MERS) and Nuvolo.

End item application:

The RTLS Asset Management Tracking system will be used to track and account for SYVAMC facility nonexpendable inventory.

D.9 Technical Design Constraints (EHRM & SPL)

1. No Direct EHR Interface The Contractor shall ensure that no components of the RTLS solution directly interface with the Federal Electronic Health Record (Oracle Health/Cerner) and our current program (Computerized Patient Record System-CPRS).

2. Use of Approved Enterprise Interfaces Only All data exchange shall occur exclusively through VA-approved enterprise interfaces, including:

• AEMS/MERS

• GIP/WaveMark

• Cerner

• Nuvolo

3. TRM Compliance and Submissions The Contractor shall confirm full compliance of all solution components— hardware, software, firmware, middleware—with the VA Technical Reference Model

(TRM).

Components not currently listed in the TRM must be submitted by the Contractor for TRM approval prior to deployment.

Syracuse VAMC, 800 Irving Ave., Syracuse, NY 13210 5

4. Alignment With EHRM Infrastructure Modernization The RTLS system architecture and network footprint shall fully align with EHRM modernization plans and requirements.

E. OTHER UNIQUE REQUIREMENTS (& COMPLIANCE SUMMARY)

E.1 Compatibility with Existing Equipment

Must be compatible with AEMS/MERS and Veterans Health Information Systems Technology and Architecture (VISTA).

E.2 Cyber and Information Security Requirements for VA IT Services

The Contractor shall ensure adequate LAN/Internet, data, information, and system security in accordance with VA standard operating procedures and standard Statement of Work (SOW) language, conditions, laws, and regulations. The Contractor’s firewall and web server shall meet or exceed VA minimum requirements for security. All VA data shall be protected behind an approved firewall. Any security violations or attempted violations shall be reported to the VA Program Manager and VA Information Security Officer as soon as possible. The Contractor shall follow all applicable VA policies and procedures governing information security, especially those that pertain to certification and accreditation.

Contractor supplied equipment, PCs of all types, equipment with hard drives, etc. for contract services must meet all security requirements that apply to Government Furnished Equipment (GFE) and Government Owned Equipment (GOE). Security Requirements include:

a) VA Approved Encryption Software must be installed on all laptops or mobile devices before placed into operation,

b) Bluetooth equipped devices are prohibited within VA; Bluetooth must be permanently disabled or removed from the device, unless the connection uses FIPS 140-2 (or successor) validated encryption,

c) VA approved anti-virus and firewall software,

d) Equipment must meet all VA sanitization requirements and procedures before disposal.

The COR, CO, the PM, and the Information Security Officer (ISO) must be notified and verify that all security requirements have been adhered to.

Each documented initiative under this contract incorporates VA Handbook 6500.6, “Contract Security,” March 12, 2010, by reference.

E.3 Contractor Training Requirements https://csrc.nist.gov/pubs/fips/140-2/upd2/final

Syracuse VAMC, 800 Irving Ave., Syracuse, NY 13210 6

The Contractor shall complete mandatory training courses in TMS 2.0 and be tracked therein. Contractor employees shall complete a VA Systems Access Agreement if provided access privileges.

E.4 VA Enterprise Architecture (EA) Compliance

The applications, supplies, and services furnished under this contract must comply with VA Enterprise Architecture (EA), in force at the time of issuance of this contract, including the Program Management Plan and VA's rules, standards, and guidelines in the Technical Reference Model/Standards Profile (TRMSP). VA reserves the right to assess contract deliverables for EA compliance prior to acceptance.

Contractor shall comply with VA EA in force at award; the CO/ISO will provide the current authoritative URL(s) for VA EA and TRM policy resources.

E.5 VA Internet/Intranet Standards & Section 508 (ICT)

The Contractor shall adhere to and comply with VA Directive 6102 and VA Handbook 6102, Internet/Intranet Services, including applicable amendments and changes, if the Contractor’s work includes managing, maintaining, establishing, and presenting information on VA’s Internet/Intranet Service Sites. This pertains but is not limited to creating announcements;

collecting information; databases to be accessed, graphics and links to external sites.

Accessibility Compliance (Section 508) The Contractor shall ensure all Information and Communication Technology (ICT) provided under this contract complies with Section 508 of the Rehabilitation Act and the Access Board’s ICT Accessibility Standards. At a minimum, the Contractor shall meet the requirements of Chapter 2: Scoping and applicable technical provisions, including:

• E204: Functional Performance Criteria

• E205: Electronic Content (WCAG 2.0 Level A & AA)

• E206: Hardware

• E207: Software

• E208: Support Documentation and Services

ICT must be compatible with assistive technologies (e.g., screen readers, magnifiers, speech recognition) without requiring installation of specific accessibility software or devices.

The Government reserves the right to test for Section 508 compliance before delivery;

Contractor shall demonstrate compliance upon delivery (see E.6 Acceptance).

https://www.tms.va.gov/SecureAuth35/ https://www.access-board.gov/ict/ https://www.access-board.gov/ict/ https://www.access-board.gov/ict/

Syracuse VAMC, 800 Irving Ave., Syracuse, NY 13210 7

E.6 Acceptance and Acceptance Testing (Expanded)

Hardware (Tags/Readers/Mobile):

• Durability: Tags/mounts withstand common VA cleaning agents and specified temperatures; no detachment after 30 days of routine use (witnessed test).

• Readability: ≥ 25 tags read concurrently within ≤ 3 seconds at 1–3 m, non-line-of-sight; ≥ 99% successful read rate in 3 repeated trials per location.

• Accuracy: Room-level accuracy ≥ 95% across acceptance scenarios (med/surg ward, biomed storage, SPS), measured via blind validation.

• Coverage: ≥ 95% coverage of designated spaces; documented mitigation for any gaps.

Software & Integration (AEMS/MERS / VistA):

• Data Sync Latency: Location changes propagate within ≤ 5 minutes; reconciliation report shows ≤ 1% discrepancies.

• RBAC & Audit: Role-based access; audit logs record user, asset, timestamp, action.

• Analytics/Reporting: Dashboards (inventory status, utilization, alarms) meet SOW metrics; export to CSV/PDF.

• Section 508: UI/electronic content meet WCAG 2.0 A/AA scope; Government may test prior to final acceptance.

Training Acceptance:

• Delivery to designated user groups (end users, tech maintenance, system admins).

• Post-training pass rate ≥ 80% for system admins; attendance rosters and recordings posted to VISN SharePoint; certification checklists completed.

Documentation Acceptance:

• Operator’s Manual, Job Aids, System Admin Guide, Maintenance/Repair Guide, Integration ICD complete, accurate, tailored to VA configuration; COR approval required.

E.7 EHRM-Related Requirements

1. The Contractor shall coordinate all installation, configuration, testing, and cutover activities with:

Syracuse VAMC, 800 Irving Ave., Syracuse, NY 13210 8

• Local OIT

• Healthcare Technology Management (HTM)

• EHRM Infrastructure Readiness Team Coordination shall ensure RTLS activities do not interfere with EHRM deployments, change freezes, or infrastructure upgrade windows.

2. The Contractor shall provide a detailed implementation schedule that accommodates:

• EHRM change controls

• Blackout periods

• Clinical stabilization windows

• Required VA governance approvals

3. The Contractor shall provide all documentation and support necessary for the Authority to Operate (ATO) process in eMASS, including:

• Security control implementation documentation

• Vulnerability management procedures

• Privacy Impact Assessment (PIA) updates as required

4. The Contractor shall support all cybersecurity requirements outlined in:

• VAAR 839

• VA Directive 6500

• Any EHRM-related cybersecurity requirements

• Any EHRM-related integration constraints

E.8 Special Purpose List (SPL / SP-Lite) Requirements

1. SPL Registration The Contractor shall register all RTLS components—including servers, gateways, sensors, receivers, tags, and supporting software—into the VA Special Purpose – Legacy IT Environment (SP-Lite) inventory.

Syracuse VAMC, 800 Irving Ave., Syracuse, NY 13210 9

2. SPL Classification Support The Contractor shall assist VA in determining the correct SPL classification (typically Healthcare Services Support or Business Services Support).

The Contractor shall supply all technical details needed for proper SPL inclusion.

3. SPL Network Requirements Compliance The Contractor shall ensure all RTLS devices meet SPL-governed VA network requirements including:

• Network segmentation

• Documented firewall rules

• NAC posture compliance

• Device certificates

• Approved IP addressing requirements

4. Cybersecurity Documentation for SPL Reviews The Contractor shall provide all SPL-required cybersecurity documentation, including:

• Vulnerability data

• Patch schedules

• Operating system baselines

• Software versioning

• End-of-life (EOL) and end-of-support (EOS) data

5. Change Notification for SPL Inventory The Contractor shall notify VA of any hardware, software, or configuration changes affecting SPL registration and support SPL updates for the contract duration.

6. SDCD Continuous Monitoring Requirements All RTLS components must comply with SDCD cybersecurity oversight including continuous monitoring as required for SPL-governed systems.

E.9 Combined EHRM + SPL Requirements

Syracuse VAMC, 800 Irving Ave., Syracuse, NY 13210 10

1. The Contractor shall ensure the RTLS architecture, deployment plan, and system footprint simultaneously align with:

• VA EHRM infrastructure modernization plans

• SPL cyber governance policies

2. The Contractor shall provide all artifacts required for concurrent EHRM and SPL reviews prior to production authorization, including:

• Network diagrams

• System architecture diagrams

• Security configurations

• Interface specifications

• Network maps

E.10 Shared Responsibilities & Approvals

E10.1 ATO/eMASS roles (Contractor vs. ISO/OIT responsibilities)

• Contractor: Prepare ATO documentation including system security controls, SSP inputs, diagrams, configurations, and vulnerability management evidence.

• VA ISO/OIT: Submit the ATO package in eMASS, perform reviews, and issue ATO/ATO-with-conditions.

E10.2 SPL/SP-Lite registration roles (Contractor vs. SDCD responsibilities)

• Contractor: Prepare SPL inventory data and provide updates for lifecycle changes.

• SDCD/OIS: Maintain SPL inventory and perform cybersecurity oversight and continuous monitoring.

E10.3 Network/security shared responsibilities (Contractor vs. OIT Network)

• Contractor: Provide firewall rule requirements, NAC posture documentation, device certification, IP addressing, network diagrams, and interfaces.

• OIT Network: Approves firewall rules, NAC posture, VLAN segmentation, and IP schema.

E10.4 Mandatory approvals before production: COR/CO/ISO/OIT/SDCD/EHRM

Syracuse VAMC, 800 Irving Ave., Syracuse, NY 13210 11

The following VA entities must approve design, security artifacts, interfaces, and network configurations prior to pilot or production deployment:

• COR/CO

• ISO

• OIT Network

• SDCD

• EHRM Infrastructure Readiness Team

E.11 Internet Protocol Version 6 (IPv6) Requirements

The Contractor solution shall support Internet Protocol Version 6 (IPv6) based upon the memo issued by the Office of Management and Budget (OMB) on November 19,2020 (https://www.whitehouse.gov/wp-content/uploads/2020/11/M-21-07.pdf). IPv6 technology,in accordance with the USGv6 Program (https://www.nist.gov/programs-projects/usgv6-program/usgv6-revision-1),NIST Special Publication (SP) 500-267B Revision 1 “USGv6 Profile” (https://doi.org/10.6028/NIST.SP.500-267Br1),and NIST SP 800-119 “Guidelines for the Secure Deployment of IPv6” (https://doi.org/10.6028/NIST.SP.800- 119),compliance shall be included in all IT infrastructures,application designs,application development,operational systems and sub-systems,and their integration. In addition to the above requirements all devices,applications,and systems shall support all applicable functionality on native IPv6 only as well as dual stack (IPv6 / IPv4) connectivity without additional memory or other resources being provided by the Government,so that they can function in a mixed environment. All public/external facing servers and services (e.g.

web,email,DNS,ISP services,etc.) shall support native IPv6 and dual stack (IPv6 / IPv4) users and all internal infrastructure and applications shall support using native IPv6 only and dual stack (IPv6 / IPv4) for all functionality and operations.

F. WARRANTY

All new RTLS asset management tracking system equipment, hardware, and services performed under contract shall be covered under the manufacturer’s warranty and shall include all parts and labor and technical support for a minimum of one (1) year following final acceptance by VA.

The warranty shall be included in the system price and not priced separately. The Contractor shall either perform or manage all maintenance during the system warranty https://www.nist.gov/programs-projects/usgv6-program/usgv6-revision-1 https://www.nist.gov/programs-projects/usgv6-program/usgv6-revision-1 https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-119.pdf https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-119.pdf

Syracuse VAMC, 800 Irving Ave., Syracuse, NY 13210 12 period and oversee subcontractor support, maintenance, and warranties. Service Maintenance Agreements (SMA) for hardware and software are included during the warranty period.

When option periods are exercised, warranty/maintenance coverage shall continue per priced option CLINs. The Contractor shall provide Database and System Administration services during the warranty period and a Warranty Status Report (hardware/software status, specs, warranty end dates) monthly during the warranty term.

G. TRAINING

The Contractor shall identify training requirements, obtain or develop training programs, and conduct training throughout the life of the contract. Training shall enable VA personnel to operate, maintain, and train new staff on the product/process.

The Contractor shall develop and provide a Training Plan and deliver onsite or remote training, workshops, and consulting services. Certified/qualified personnel shall conduct both on-site and remote training sessions for:

1. Technical training for asset tracking

2. Inventory management training for asset tracking

3. Non-technical user and administrator training

The Training Plan shall include:

1. Training locations, dates, and times

2. Format/method (onsite, web-based)

3. Training audience (technical repair, system user, system administrator)

4. Instructor profile and content

The Contractor shall provide training material and schedules and complete events per the approved Plan. Electronic tools (VTC/CBT) shall be employed; materials shall be available to VA staff for the life of the contract at no additional cost.

Post-Training Deliverables:

1. Facility-specific attendee list

Syracuse VAMC, 800 Irving Ave., Syracuse, NY 13210 13

2. Names of Contractor trainers

3. Recording of training sessions with artifacts, posted to VISN SharePoint

4. Certification Checklist for supervisors

• All recordings/rosters/checklists delivered and approved by COR.

Deliverables:

A. Training Plan B. Training materials and schedules

H. SERVICE AND/OR MAINTENANCE

Vendor shall provide installation of the RTLS management tracking system software and installation of RTLS scanning and transmitting equipment. Vendor shall provide support and maintenance for software and scanning equipment during the life of the performance period.

I. SAFETY / ISO / IT / BIOMED / SPS & OTHER DEPARTMENTAL COMPLIANCE

Refer to the following links for mandatory compliances.

• ISO/IEC standards (e.g., 24730 series)

• VA National RTLS SharePoint

• Regulations and Procedures for Federal Radio Frequency Management

• Radio Frequency Spectrum Management Office (NTIA)

• TRM: Real Time Location Systems (RTLS)

• ISO/IEC 24730: Part 1 - ISO/IEC 24730-1:2014This link leads to the application programming interface (API) standard for RTLS.ISO (International Organization for Standardization)

• ISO/IEC 24730: Part 21 - ISO/IEC 24730-21:2012Direct Sequence Spread Spectrum (DSSS)

2.4 GHz air interface protocol standard for RTLS.ISO (International Organization for Standardization)

• ISO/IEC 24730: Part 22 - ISO/IEC 24730-22:2012Direct Sequence Spread Spectrum (DSSS)

2.4 GHz air interface protocol standard for RTLS for transmitters operating with multiple https://www.iso.org/standard/59801.html https://dvagov.sharepoint.com/sites/vacortlspmo/default.aspx?OR=Teams-HL&CT=1689076215551 https://www.oit.va.gov/Services/TRM/StandardPage.aspx?tid=5391 https://www.ntia.gov/programs-and-initiatives/spectrum-management https://www.oit.va.gov/Services/TRM/StandardPage.aspx?tid=7344 https://www.iso.org/standard/59801.html#lifecycle https://www.iso.org/standard/56530.html https://www.iso.org/standard/56531.html

Syracuse VAMC, 800 Irving Ave., Syracuse, NY 13210 14 spread codes and employing a QPSK data encoding and Walsh offset QPSK (WOQPSK) spreading scheme.ISO (International Organization for Standardization)

• ISO/IEC 24730: Part 5 - ISO/IEC 24730-5:2010Defines an air interface protocol standard for RTLS which utilizes chirp spread spectrum (CSS) at frequencies from 2.4 GHz to 2.483 GHz.ISO (International Organization for Standardization)

• ISO/IEC 24730: Part 61 - ISO/IEC 24730-61:2013Low rate pulse repetition frequency Ultra-Wide Band (UWB) air interface standard for RTLS that defines the physical layer (PHY) and tag management layer (TML) of an ultra-wide band (UWB) air interface protocol that supports one directional simplex communication readers and tags.ISO (International Organization for Standardization)

• ISO/IEC 24730: Part 62 - ISO/IEC 24730-62:2013High-rate pulse repetition frequency Ultra-Wide Band (UWB) air interface standard for RTLS that defines the air interface protocol using a physical layer Ultra-Wide Band (UWB) signaling mechanism (based on IEEE 802.15.4a UWB).

• RF Code Centerscape RFID Management Software

• Energy-Efficient IT (ENERGY STAR, FEMP, FEMPLOW, EPEAT)

Where references list multiple RTLS air interfaces (e.g., DSSS, UWB, CSS), the Contractor may propose any interface meeting the performance/acceptance criteria and VA TRM approvals.

J. DELIVERY

The Contractor shall install and make fully operational the RTLS Nonexpendable Asset Management/Tracking system, including all accessories as ordered. The Contractor shall be responsible for costs associated with relocating or re-shipping any misdelivered components. At contract expiration/termination, the Contractor shall remove and pick up equipment from the Government facility at no cost.

Contractor shall perform the following:

Multi-Site Schedule

1. Kickoff & Site Survey: ≤ 10 days after award

2. Design Approval: ≤ 20 days after survey

3. Pilot Install & Test (Main Campus Unit): ≤ 40 days after award https://www.iso.org/standard/46534.html https://www.iso.org/standard/60378.html https://www.iso.org/standard/60379.html https://www.oit.va.gov/Services/TRM/ToolPage.aspx?tid=14667 https://www.energystar.gov/products https://www.energy.gov/femp/federal-energy-management-laws-and-requirements https://www.energy.gov/femp/low-standby-power-product-list https://www.epeat.net/

Syracuse VAMC, 800 Irving Ave., Syracuse, NY 13210 15

4. Full Deployment (Main + designated CBOCs): ≤ 90 days after award (Milestones may be adjusted by mutual written agreement with COR/CO based on site conditions.)

5. Contact the receiving site COR to schedule delivery and installation.

6. Install and make the RTLS system fully operational, including all accessories.

7. Work with OIT to establish connectivity; fully test/troubleshoot to ensure operational readiness.

8. Design Approval Gate:

Requires approval of diagrams, configurations, firewall rules, NAC posture, and interface specifications by COR/CO/ISO/EHRM/SDCD.

9. Pilot Install & Test Restrictions:

Pilot activities shall not occur during EHRM blackout or clinical stabilization periods.

10. Readiness Review and Go-Live Authorization:

Requires concurrent approvals from EHRM Infra Readiness, SDCD SPL oversight, ISO, OIT Network, COR, and CO.

11. Post-Deployment Stabilization:

Contractor shall support a 30-day stabilization period after go-live.

12. Status Reporting:

Weekly status reporting is required throughout deployment and stabilization.

13. EHRM Stabilization Dependencies:

Deployment progression must align with EHRM stabilization periods and change control windows.

14. Deliverable:

Operator’s Manual and Job Aid(s)

K. GOVERNMENT-FURNISHED PROPERTY (GFP/GFM/GFE/GFI)

Government remote access solutions (CAG, Site-to-Site VPN, RESCUE VPN) may be available. Government may furnish up to 3 laptops where direct network access is required. Contractor shall supply peripherals/accessories as needed. Use Government SharePoint for document storage. VA personnel will configure GFE laptops.

Include Monthly Status Report entries for reportable GFE (fields retained as listed in original SOW).

Syracuse VAMC, 800 Irving Ave., Syracuse, NY 13210 16

L. SECURITY

Physical Security & Safety Requirements:

• Badges visible at all times; parking, smoking, weapons rules per VA policy.

• Licenses/permits required to perform work (except software licenses procured from Contractor per requirements).

• Protect persons/property during performance.

Confidentiality and Non-Disclosure:

• Follow VA rules/regulations; CO is sole authority to release information.

• Limit sensitive information access to minimum personnel; train employees;

safeguard proprietary data.

• No removable media for sensitive info; access controls; password/privilege management; immediate access termination on employee departure; mark acquisition-sensitive info as FOUO.

• No classified data access required.

• VA Form 0752 shall be completed by all Contractor employees and provided to the CO before any work.

M. SPECIAL MATERIAL REQUIREMENT

The RTLS asset management tracking system is composed of RTLS tags, RTLS scanners, and VA TRM-approved software that must interface with VistA AEMS/MERS.

N. PLACE OF PERFORMANCE

The RTLS system shall be integrated into the SYVAMC main campus (800 Irving Ave., Syracuse NY) and designated CBOCs. Each location will be fitted with appropriate components to facilitate tracking and data collection of RTLS-tagged assets.

O. PERIOD OF PERFORMANCE

The base period of performance shall be 12 months beginning at final acceptance of the RTLS system (see Section E.6). Up to four (4) 12-month option periods may be exercised

Syracuse VAMC, 800 Irving Ave., Syracuse, NY 13210 17

(total potential period of performance of five (5) years).