ATCH 3 PWS POU Automated Med Dispensing Sys_Amend 2 rev1.pdf

PERFORMANCE WORK STATEMENT

SECTION B – PERFORMANCE WORK STATEMENT (PWS)

1. Background:

Tripler Army Medical Center (TAMC) has a requirement for a Point-of-Use (POU) Medical Supply Dispensing System for its main hospital. This includes the equipment, software, cyber security, network, training, related items, and turnkey installation; to include any deinstallation and disposition of existing Omnicell and installation of any additional power or data drops required (to be verified by vendor). A site visit at no cost or obligation to the government is highly recommended as this project is requested to be fully turn-key including any site modifications. If interested in attending a site visit, send an email to Mr. Andre Wills (Customer Support Supervisor), Ms. Elizabeth Maldonado (Chief, Supply Chain Management Branch) and SFC Kyung N.

Lee (NCOIC, Supply Chain Management Branch); provide the individual’s name, company name, title, and contact information.

Mr. Andre Wills andre.l.wills.civ@health.mil

Ms. Elizabeth Maldonado elizabeth.maldonado.civ@health.mil

SFC Kyung N. Lee kyung.n.lee4.mil@health.mil

A site visit will be scheduled during the open solicitation phase, date to be determined. Site visit will be at Tripler Army Medical Center, 1 Jarrett White Road, Honolulu, Hawaii. Contact Mr. Wills and SFC Lee no later than 7 February 2025 to be included on the notification list. Due to space limitations, vendors shall be limited to no more than two (2) key personnel per vendor. We request interested vendors to drive their own vehicle and only one (1) vehicle per firm. The site visit will allow the Government to explain the Government’s needs that are required in each location in the CLINs. In the interest of orderly procedures and impartiality to all offerors, the site will be accessible at the specified time only. Prospective offerors are hereby notified that additional inspection opportunities will not be permitted.

2. Scope of Work:

The scope of work includes deinstallation and disposition of Government equipment (existing Omnicell). The Omnicell shall be traded-in for disposition. The Government equipment items slated for disposition shall be deinstalled by the contractor prior to installation of new equipment and removed from the hospital. The hospital will remove the equipment from their property book at that time. The room shall be left broom clean by the contractor after deinstallation. Transfer of title shall occur when the Vendor or its designee begins to deinstall the equipment being disposition. The vendor or its designee, shall remove from the equipment any data that has inadvertently not been removed by the Government, in accordance with VA Sanitization of Sensitive Data Instructions. The contractor providing a complete system of Medical Integrated Automated Dispensing system for Hospital Supply Chain Materials and Management of Materials to include role based authority and recording and reporting capability (i.e., Stock Re-Order Point; Stock Zero Balance; Dead Stock List; Personnel Non-Compliance; Stock Critical Item; Stock Total Usage; Stock Transaction History; Stock Unused Items;

Stock Monthly Item Usage; Stock Summary; Items on Order; Picklist Par; Request Items; Picklist Zero Balance), of what was dispensed and utilization. The POU shall be able to store data in the central repository that can be aggregated to help make supply distribution and purchasing decision during inventory shut down.

The POU shall be able to provide a Procedure Management Option if needed for Surgical Services. The POU Software application shall be at a minimum Windows 1011 or higher. The contractor shall design, develop, integrate, test, deliver, and install with Government acceptance the Automated Dispensing System which includes the equipment, software, cyber security, network, training, related items, and turnkey installation. The equipment will be installed in TAMC. The contractor shall (or within six months after contract award) satisfy and maintain satisfaction with the Authority to Operate/Risk Management Framework (ATO/RMF) requirements for the proposed equipment that accesses the DoD informational technology system. The contractor shall use the Department of Defense's Risk Management Framework certification and accreditation process to ensure that the contractor's system will achieve and maintain an ATO. See Defense Health Agency

(DHA) Cyber Logistics (Cyber LOG) Cybersecurity/RMF Requirements (dated January 5, 2022) and Department of Defense Instruction 8400.01 (dated March 2, 2020). The vendor must agree to comply with the DHA Information Assurance (IA) requirements as identified as “DHA PI 8400.01 Enclosure 3, Para 3.c.

https://tamc-sp.med.ds.osd.mil/MCHK-IM/im-ia/Public%20Folder/SIGNED%20DHA PI%208400.01%20CyberLOG%20COE%20MDE%20Risk%20Management.pdf and link to DHA CyberLOG RMF contract language: https://tamc-sp.med.ds.osd.mil/MCHK-IM/im-ia/Public%20Folder/DHA%20Cybersecurity-RMF%20Requirements%201-11-22%20FINAL.pdf)”. The contractor shall be required to coordinate with the Government’s POC and respective POU Administrators weekly, on the status of the installation should there be any issues needing to be addressed.

Require a minimum of one contractor Project Manager for this purchase to coordinate on behalf of the contractor the deinstallation and disposition of existing Omnicell, receiving, installation, programming, training of all dispensing equipment. Project Manager is to be on site during installation for product acceptance.

Services shall include but are not limited to: Coordination with Government representatives and POU Administrator. Review, evaluate and problem-solve usage levels issues. Reconfigure storage space and assist with determination of Par levels. Identify operational problems and provide operational solutions. Coordinate any necessary up-grades or enhancements. Manage the generation of all necessary reports and tracking systems.

Assist with creating and deleting all operator user accounts, conduct quality assurance for units every other week, provide product usage reports; provide operator and end user issue reports. Create and customize reports as requested by the Government representative and or POU Administrator.

CONTRACT TRANSITION PERIOD: If at the time of contract award the contractor does not satisfy the ATO/RMF requirements for the equipment to be used to perform under this contract, then within six (6) months after the date of contract award, the contractor shall satisfy the ATO/RMF requirements and begin full performance. During the Contract Transition period, the contractor shall become familiar with DoD ATO/RMF test requirements and make all necessary preparations to begin full performance within six months after contract award. The Contracting Officer and/or the Contracting Officer Representative shall be authorized to visit the testing facility and assess the contractor's ability to meet contractual requirements. The contractor shall provide a monthly status report, due the 5th calendar day of each month, on its efforts to satisfy the ATO/RMF requirements. The contractor shall work with Government personnel to meet DoD System Security Requirements and DoD ATO/RMF approval. The contractor shall comply with the ATO/RMF process, which is the process by which the contractor's information systems are certified for compliance with DoD cyber security requirements and accredited for operation by a designated DoD official. If the contractor successfully completes all required contractor actions in a timely manner, but the Government causes unreasonable delays, the contractor would be given additional time corresponding to the amount of the unreasonable Government delay to satisfy the ATO/RMF requirements and to begin full performance.

CONTRACTOR COORDINATION REQUIREMENTS: As part of this PWS the contractor will be responsible for the following states of this requirement:

Contractor shall provide the Government POC and POU Administrators a Schedule, project plan and execution plan, weekly meetings, POU Administrator training, system operational date, End-User Training schedule and training, and final out brief and contract close out.

Kickoff Phase: The contractor shall create and present detailed project plan including schedule. The contractor shall present project plan to the Government POC and POU Administrators for review and approval before the on-site work can start.

Deinstallation/Installation Phase: The contractor shall provide written status reports at weekly meetings.

Testing Phase/Implementation: The contractor shall provide testing results, implementation progress, and any issues concerning operational functionality status at weekly meetings. The contractor shall develop and implement at no additional charge, additional reports and/or additional financial tracking information in addition to default reports available as identified by the government.

Project Close Out: The contractor shall provide the Government POC with all documentation concerning the project plan.

3. Supplies/Services:

All items shall be completely new, and shall not be used, refurbished, recycled, or in any other form, including substitutions. The contractor shall not add or substitute any item(s) or component(s) without prior approval from the contracting officer. No government furnished property (GFP) or government furnished equipment (GFE) will be provided by the Government. The contractor, and any sub-contractors, shall be fully licensed to perform the work. A formal on-site survey may be conducted, if needed, to finalize system requirements prior to beginning any installation activities. New equipment and software shall provide seamless communications with existing systems, equipment, and software. **Operating system shall be at least Windows 1011 with upgrades for the life of the system and shall be in compliance with the latest DOD ATO and RMF documentation by full performance date and shall remain in compliance.** Operating system shall interface into the hospital’s current DoD Defense Medical Logistics’ Standard Support (DMLSS). If there is no HL7 interface solution readily available, the contractor shall coordinate with the DHA and/or the Department of Logistics (LOG) IT Specialist to develop the interface and ensure operational prior to the installation completion date. Contractor shall be available in the future to help facilitate transition of the dispensing system to interface with new DoD Defense Medical Logistics systems (i.e., DML-ES and LOGICOLE). These systems may be web-based applications supporting all medical logistics functions in the Military Health System.

Salient Characteristics (Sections 4 through 9):

4. Cabinets and Equipment

4.1 21 Each for Main Cabinet 1 Door (Tower/Frame/Cell/Column or reasonable equivalent) with

Computer (Operating System)

4.1.1 Configuration of best solution to be determined by vendor.

4.1.2 Configuration of individualized, modular sections per shelf shall be flexible and shall be configurable by the user.

4.1.3 Dispensing shall be profile driven.

4.1.4 Shall have a large touch screen, flat panel monitor, sealed keyboard.

4.1.5 Shall utilize a standard alternating current (AC) outlet (110 volts).

4.1.6 Shall be fully compatible/integrate with existing Supply Management System (DMLSS).

4.1.7 Shall be able to connect to more than one (1) auxiliary cabinet at once.

4.1.8 Operating system at least Windows 1011 with upgrades for lifetime of system and be in compliance with latest DOD ATO and RMF documentation.

4.1.9 Shall be designed for industrial use in a hospital.

4.1.10 Shall have an approximate and not-to-exceed a Height: 80.0", Width: 3135.0", Depth: 28.0", Weight:

400 lbs.

4.1.11 Shall provide a remote open shortage option for items that are either too large or do not need to be housed within an enclosed cabinet.

4.2 39 Each for Main Cabinet 2 Doors (Tower/Frame/Cell/Column or reasonable equivalent) with

Computer (Operating System)

4.2.1 Configuration of best solution to be determined by vendor.

4.2.2 Configuration of individualized, modular sections per shelf shall be flexible and shall be configurable by the user.

4.2.3 Dispensing shall be profile driven.

4.2.4 Shall have a large touch screen, flat panel monitor, sealed keyboard.

4.2.5 Shall utilize a standard alternating current (AC) outlet (110 volts).

4.2.6 Shall be fully compatible/integrate with existing Supply Management System (DMLSS).

4.2.7 Shall be able to connect to more than one (1) auxiliary cabinet at once.

4.2.8 Operating system at least Windows 1011 with upgrades for lifetime of system and be in compliance with latest DOD ATO and RMF documentation.

4.2.9 Shall be designed for industrial use in a hospital.

4.2.10 Shall have an approximate and not-to-exceed a Height: 80.0", Width: 5256.0", Depth: 28.0", Weight:

800 lbs.

4.2.11 Shall provide a remote open shortage option for items that are either too large or do not need to be housed within an enclosed cabinet.

4.3 30 Each for Main Cabinet 3 Doors (Tower/Frame/Cell/Column or reasonable equivalent) with

Computer (Operating System)

4.3.1 Configuration of best solution to be determined by vendor.

4.3.2 Configuration of individualized, modular sections per shelf shall be flexible and shall be configurable by the user.

4.3.3 Dispensing shall be profile driven.

4.3.4 Shall have a large touch screen, flat panel monitor, sealed keyboard.

4.3.5 Shall utilize a standard alternating current (AC) outlet (110 volts).

4.3.6 Shall be fully compatible/integrate with existing Supply Management System (DMLSS).

4.3.7 Shall be able to connect to more than one (1) auxiliary cabinet at once.

4.3.8 Operating system at least Windows 1011 with upgrades for lifetime of system and be in compliance with latest DOD ATO and RMF documentation.

4.3.9 Shall be designed for industrial use in a hospital.

4.3.10 Shall have an approximate and not-to-exceed a Height: 80.0", Width: 7781.0", Depth: 28.0", Weight:

1,200 lbs.

4.3.11 Shall provide a remote open shortage option for items that are either too large or do not need to be housed within an enclosed cabinet.

4.4 7 Each for Auxiliary Cabinet 1 Door (Tower/Frame/Cell/Column or reasonable equivalent)

4.4.1 Configuration of best solution to be determined by vendor.

4.4.2 Configuration of individualized, modular sections per shelf shall be flexible and shall be configurable by the user.

4.4.3 Dispensing shall be profile driven.

4.4.4 Shall have a large touch screen, flat panel monitor, sealed keyboard.

4.4.5 Shall utilize a standard alternating current (AC) outlet (110 volts).

4.4.6 Shall be fully compatible/integrate with existing Supply Management System (DMLSS).

4.4.7 Shall be able to connect to more than one (1) auxiliary cabinet at once.

4.4.8 Operating system at least Windows 1011 with upgrades for lifetime of system and be in compliance with latest DOD ATO and RMF documentation.

4.4.9 Shall be designed for industrial use in a hospital.

4.4.10 Shall have an approximate and not-to-exceed a Height: 80.0", Width: 3135.0", Depth: 28.0", Weight:

400 lbs.

4.4.11 Shall provide a remote open shortage option for items that are either too large or do not need to be housed within an enclosed cabinet.

4.5 61 Each for Auxiliary Cabinet 2 Doors (Tower/Frame/Cell/Column or reasonable equivalent)

4.5.1 Configuration of best solution to be determined by vendor.

4.5.2 Configuration of individualized, modular sections per shelf shall be flexible and shall be configurable by the user.

4.5.3 Dispensing shall be profile driven.

4.5.4 Shall have a large touch screen, flat panel monitor, sealed keyboard.

4.5.5 Shall utilize a standard alternating current (AC) outlet (110 volts).

4.5.6 Shall be fully compatible/integrate with existing Supply Management System (DMLSS).

4.5.7 Shall be able to connect to more than one (1) auxiliary cabinet at once.

4.5.8 Operating system at least Windows 1011 with upgrades for lifetime of system and be in compliance with latest DOD ATO and RMF documentation.

4.5.9 Shall be designed for industrial use in a hospital.

4.5.10 Shall have an approximate and not-to-exceed a Height: 80.0", Width: 5256.0", Depth: 28.0", Weight:

800 lbs.

4.5.11 Shall provide a remote open shortage option for items that are either too large or do not need to be housed within an enclosed cabinet.

4.6 71 Each for Auxiliary Cabinet 3 Doors (Tower/Frame/Cell/Column or reasonable equivalent)

4.6.1 Configuration of best solution to be determined by vendor.

4.6.2 Configuration of individualized, modular sections per shelf shall be flexible and shall be configurable by the user.

4.6.3 Dispensing shall be profile driven.

4.6.4 Shall have a large touch screen, flat panel monitor, sealed keyboard.

4.6.5 Shall utilize a standard alternating current (AC) outlet (110 volts).

4.6.6 Shall be fully compatible/integrate with existing Supply Management System (DMLSS).

4.6.7 Shall be able to connect to more than one (1) auxiliary cabinet at once.

4.6.8 Operating system at least Windows 1011 with upgrades for lifetime of system and be in compliance with latest DOD ATO and RMF documentation.

4.6.9 Shall be designed for industrial use in a hospital.

4.6.10 Shall have an approximate and not-to-exceed a Height: 80.0", Width: 7781.0", Depth: 28.0", Weight:

1,200 lbs.

4.6.11 Shall provide a remote open shortage option for items that are either too large or do not need to be housed within an enclosed cabinet.

4.7 1620 Each for the Racks/and 120 for Drawers

4.8 16 Each for Shelves

5. IT Datacenter:

5.1.1 Server and associated requirements to connect to the network shall be provided and shall be in compliance with latest DOD ATO and RMF documentation.

5.1.2 Client Software shall be provided and shall be in compliance with latest DOD ATO and RMF documentation.

5.1.3 Connectivity shall be completed and validated by the TAMC POC prior to approval.

5.1.4 All annual software licenses or fees shall be included in the original purchase.

6. Deinstallation, Disposition and Installation:

6.1 All work includes deinstallation, disposition and installation will be coordinated with Property Book

Office, Facilities Management, Information Management Division (IMD) and Supply Chain Management Branch (SCMB) and Healthcare Technology Management Branch (HTMB).

6.2 A detailed deinstallation, disposition and installation schedule will be provided during the project implementation kick-off meeting.

6.3 The contractor shall coordinate the phasing schedule with the project POC and shall submit a phasing schedule in writing to the project POC for approval no later than two (2) weeks prior to the start of any work.

6.4 The contractor will confine operations (including storage of materials) on the Government’s premises to areas authorized and approved by the Property Book Officer. Workspace(s) and/or any other space(s) available shall be as determined by the project POC.

6.5 Storage for equipment is limited. It shall be the responsibility of the contractor for perfect timing of the delivery. Equipment listed in attached Bill of Materials (BOM) (or the approved BOM provided in the contractor’s solution) shall be delivered to the address(es) coordinated by the Government POC and POU Administrators.

6.6 The contractor shall verify that the automated medical supply dispensing cabinet system is turnkey ready and meets all the requirements in the contract through demonstration and validation prior to any sign off and/or acceptance of the system.

6.7 The TAMC POC may sign off and/or accept the system after the system has been verified to be turnkey ready, and it has been verified that all the requirements of the contract have been met.

6.8 SAFETY: Contract personnel shall comply with all TAMC site access and safety requirements.

Contractor personnel shall comply with the general contractor’s site access and safety requirements.

This requires each person on site to attend a safety briefing to obtain a badge and access to the site.

Personnel will not be permitted on the job site without a badge issued by the general contractor.

Contractor personnel must wear appropriate safety clothing as outline by the general contractor while on-site. To negate the risk of fire sprinklers being restricted or obstructed by the automated dispensing system deinstallation and installation must be greater than 18 inches from the sprinkler heads. These units cannot restrict or affect the ability of the present sprinkler heads to effectively control a fire if activated. Deinstallation and installation of the POU automated dispensing system must ensure that the egress and aisle spacing around the equipment and visibility of fire alarm strobes are maintained per National Fire Protection association, NFPA 101. The contractor shall provide three (3) copies of each Safety Data Sheet (SDS) for every product, chemical, etcetera used on this project that has an SDS.

SDS sheets shall be provided on the same day that the applicable items arrive on TAMC property. At no time shall the contractor have, or permit subcontractors to have, any applicable product(s), chemical(s), and etcetera on TAMC property without an SDS sheet. All instructions for use on SDS sheets shall be followed. Product(s), chemical(s), etcetera will not be used until SDS sheets have been submitted to the TAMC POC. TAMC Safety Office will be provided copies of the analysis and site preparation work for review prior to deinstallation and installation. Inadequate site preparation and attention to life safety requirement may result in delays or halt the installation of equipment. The contractor will be responsible for all refuse and dunnage disposal.

7. System Support MAINTENANCE:

7.1 Contractor will provide a call back response for any needed repair(s) of the system within four (4) hours of a call from TAMC during the normal working hours of 6 a.m. – 4 p.m. Hawaii Standard Time, Monday through Friday, for two (2) years following the date of acceptance of the system.

7.2 Contractor will provide repair in an unlimited basis, to include emergency, on-site service calls as deemed necessary by the Government. Contractor will be available for any repair(s) of the system and provide repair(s) of the system on site twenty-four hours per day and three-hundred and sixty-five

(365) days per year for two (2) years following the date of acceptance of the system within 24 hours.

The two (2) year period is to begin the date of acceptance of the system.

7.3 Contractor will conduct one (1) preventive maintenance visit for each unit during the two (2) year period following acceptance of the system.

7.4 Service reports, along with quarterly aggregate reports, shall be emailed or mailed or faxed to TAMC’s Chief of Healthcare Technology Management Branch (HTM) or designee.

7.5 TAMC shall have full access to the hardware and software of the entire system, including, but not limited to, any diagnostic software features and general administration rights. The contractor shall brief the TAMC IMD POC on any software upgrades and/or changes prior to making any upgrades and/or changes, and the TAMC IMD POC shall agree to any software upgrades and/or changes prior to any upgrade or installation. The contractor shall provide and install manufacturer recommended software upgrades and changes at no additional charge during the warranty and/or contract time period.

7.6 For any repairs or services that will be performed during normal working hours, the contractor’s service representative will report to Healthcare Technology Management Branch (HTM) or designee upon arrival. Upon completion of the work, the vendor’s service representative shall report in person and shall present a copy of his/her field service report signed by the service using the equipment. This report shall reflect date and time of service, name of company, and the name of the vendor’s service representative. At a minimum, this report shall contain a detailed description of any services or repairs performed and identification of the units serviced. It shall include a listing of replacement parts, when applicable. The report will also include the vendor’s recommendations necessary to maintain the equipment in best operating condition. Preventive maintenance procedures followed should be thoroughly documented (step-by-step) on the service report.

8. Training: The contractor shall conduct and manage the in-service training process which includes but is not limited to analysis of training needs, creation of effective presentations and evaluation of re-training needs. This training will be done in formal and informal settings to one or more persons.

8.1 On-site training shall be provided for (1) System Supervisor (Supply), (1) System Supervisor (IMD), and up to (10) System Administrator (Supply).

8.2 Training shall be provided for (3) Bio Med Technicians.

8.3 Training will be provided for (estimated 100) End-Users.

9. User and Service Manuals:

9.1 Two (2) complete and unabridged printed copies of operator manuals shall be provided to TAMC, and two (2) complete and unabridged printed copies of service manuals shall be provided to Supply Chain

Management Branch (SCMB) and Healthcare Technology Management Branch (HTM) at the time of installation of the equipment.

9.2 One (1) electronic version of the unabridged operator manual and service manual shall be provided to TAMC at the time of installation of the equipment.

9.3 Upgrades to the manuals shall be provided to TAMC by the contractor free of charge.

10. Delivery:

The equipment, related parts, and other deliverables shall be delivered to address below:

Tripler Army Medical Center ATTN: PBO - Property Management 161 Krukowski Road, Upper Level Honolulu, HI 96859-5000.

Storage for equipment is limited. Storage space at all locations is limited; it shall be the responsibility of the contractor to store equipment prior to installation. Equipment listed in attached Bill of Materials (BOM) (or the approved BOM provided in the contractor’s solution) shall be delivered to the aforementioned addresses with coordination from the Government POC and POU Administrators.

11. Packaging:

11.1 All items shall be marked clearly with the order number, obligation number, and delivery location within the hospital.

11.2 All items shall be adequately packaged to prevent damage during shipping, handling, and storage. Bags or boxes or containers shall be whole, intact, and not otherwise torn or damaged.

11.3 Upon delivery, the Government shall examine all packages. The contractor shall be required to replace damaged and/or missing products at the contractor’s expense.

12. Administrative Data:

12.1 Contractor Point of Contact: The contractor shall designate one (1) employee as the point of contact (POC) responsible for administrative matters in the performance of services under this contract. The POC shall have full authority to act for the contractor on all matters relating to the daily performance of this contract. An alternate may be designated, but the contractor shall notify the contracting officer and TAMC POC, in writing for those times when the alternate shall act as the POC.

12.1.1 The contractor shall provide the name and telephone number of the person designated as POC and alternate POC on the space below:

POC

Name:

Telephone Number:

Alternate POC Name:

Telephone Number:

13. Hours of Work:

13.1 Deinstallation and Installation will be conducted Monday(s) through Friday(s) during normal working hours from 7:30 a.m. to 4:30 p.m. Hawaii Standard Time. Working after hours or on weekends or on holidays is not authorized unless the TAMC POC has provided written authorization.

13.2 Any request(s) to work during weekend(s), holiday(s) or after hours shall be submitted in writing to the TAMC POC at least two (2) weeks prior to the requested date(s). The request(s) shall include the extent of the work, workers involved, the affected areas, and the estimated times of the work.

13.3 Work will be executed to interfere as little as possible with the normal operations and/or functioning of

TAMC.

14. Identification (ID) Badges SECURITY:

14.1 All contractor personnel are required to wear short term visitor, TAMC ID badges at all times while at any of the TAMC owned facilities. The contractor’s employees shall have a valid state driver’s license or state identification card to obtain a TAMC ID badge. Contractor shall be responsible for safeguarding all government equipment, information, and property provided for Contractor use.

At the close of each work period, government facilities, equipment, and materials shall be secured.

14.2 Identification badges shall be obtained from the TAMC Security department located in Aloha Center.

15. Clean-up and Storage:

15.1 The contractor shall clean-up the work, storage, and staging areas daily, and areas shall be kept clean and neat. The contractor shall provide sufficient trash containers so that debris is not left unattended.

The containers shall be emptied at least weekly and more frequently, if needed.

15.2 Materials and/or equipment shall be stored in designated contractor storage areas.

15.3 The contractor will be responsible for all refuse and dunnage disposal.

16. Parking:

16.1 All vehicles shall be parked at the contractor’s staging area which will be designated by the TAMC

POC.

17. Antiterrorism and Operations Security (ATOPSEC):

17.1 AT Level I Training. This standard language is for contractor employees with an area of performance within a DHA-controlled installation, facility, or area. All contractor employees, including subcontractor employees, requiring access to DHHQ, Direct Reporting Markets (MTFs), Small Markets and Stand Alone (SSO) facilities and controlled access areas, shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable and annually thereafter. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR or to the contracting officer, if a COR is not assigned, within 5 calendar days after completion of training by all employees and subcontractor personnel. AT level I awareness training is available at the following website: http://jko.jten.mil.

17.2 Access and general protection policy and procedures. This standard language is for contractor employees with an area of performance within an Army-controlled installation, facility, or area.

Contractor and all associated subcontractor employees shall provide all information required for background checks to meet installation access requirements to be accomplished by the installation Provost Marshal Office, Director of Emergency Service, or Security Office. Contractor workforce must comply with all personal identity verification requirements (CFR clause 52.204-9, Persona Identity Verification of Contract Personnel) as directed by DoD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

17.2.1 For Contractor requiring Common Access Card (CAC). Before CAC issuance, the contractor employee requires, at a minimum, a favorably adjudicated National Agency Check with Inquiries (NACI) or an equivalent or higher investigation in accordance with Army Directive 2014-05. The contractor employee will be issued a CAC only if duties involve one of the following: (1) both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely; (2) remote access, via logon, to a DoD network using DoD-approved remote access procedures; or (3) physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of 6 months or more. At the discretion of the sponsoring activity, an initial CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled NACI at the Office of Personnel Management.

17.3 iWATCH/Suspicious Activity Reporting Training. This standard language is for contractor employees with an area of performance within a DHA-controlled installation, facility, or area. The contractor and all associated subcontractors shall brief all employees on the local Suspicious Activity Training program (training standards provided by the requiring activity ATO). This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 calendar days of contract award and within 5 calendar days of new employees commencing performance, with the results reported to the COR NLT 30 calendar days after contract award.

17.4 Service Training Certification Tracking System (STCTS) registration for contractor employees who require access to government information systems. All contractor employees with access to a government information system must be registered in the STCTS at commencement of services and must successfully complete the DOD Information Assurance Awareness prior to access to the IS and then annually thereafter.

17.5 For contracts that require OPSEC Training. Per DHA-AI 5200.03, Operations Security, the contractor employees must complete Level I OPSEC Awareness training. New employees must be trained within 30 calendar days of their reporting for duty and annually thereafter.

17.6 For Cyber Awareness (Information Assurance (IA)/information Technology (IT) training. All contractor employees and associated subcontractor employees must complete the DoD Cyber Awareness training before issuance of network access and annually thereafter. All contractor employees working IA/IT functions must comply with DoD requirements DoD 8570.01 and DoD 8570.01-M within six months of appointment to IA/IT functions. DoD Cyber Awareness Challenge Training is available at the following website:

https://jkodirect.jten.mil/Atlas2/page/login/Login.jsf?ORG=NAVSEA , DOD Course US1364-22 DOD Cyber Awareness Challenge 2022.

17.7 For Cyber (Information assurance (IA)/information technology (IT) certification. Per DoD 8570.01-M, DFARS 252.239.7001, the contractor employees supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award.

17.8 Controlled Unclassified Information (CUI). Include DFARS clause 252.204-7012, which requires the contractor to comply with NIST 800-171. Also include DFARS provision 252.204-2019 into solicitations. Acquisition officials should follow procedures outlined in DFARS 204.73 and verify vendors have an adequate NIST SP 800-171 summary assessment score within the Supplier Performance Risk System (within PIEE). If the score doesn't show a medium- or high-level assessment with a score of 110 or better (as described in the "NIST SP 800-171 DoD Assessment Methodology"), include clause 252.204-7020 and obtain the vendor's "system security plan" and "plan of action" for NIST SP 800-171 verification and assurance by Army security officials.

17.9 Threat Awareness Reporting Program (TARP). For all contractors with security clearance. Per AR 381-12 Threat Awareness and Reporting Program (TARP), contractor employees must receive annual TARP training by a CI agent or other trainer as specified in 2-4b.

MINIMUM REQUIREMENTS FOR POINT OF USE (POU)

FOR SUPPLY CABINETS SYSTEM WITH SOFTWARE APPLICATION

1. MINIMUM REQUIREMENTS

The POU cabinets will be connected to the TAMC network infrastructure behind fire wall if possible.

The POU shall be able to interface with DMLSS or LOGICOLE new supply application.

The POU shall be able to interface with DMLSS or LOGICOLE new supply application for billing purposes.

The POU shall be able to provide supply inventory management system.

The POU shall be able to provide supply inventory and data management system.

The POU shall be able to provide at a minimum the following standard reports: i.e., Stock Re-Order Point;

Stock Zero Balance; Dead Stock List; Personnel Non-Compliance; Stock Critical Item; Stock Total Usage;

Stock Transaction History; Stock Unused Items; Stock Monthly Item Usage; Stock Summary; Items on Order; Picklist Par; Request Items; Picklist Zero Balance.

The POU shall be able to store data in the central repository that can be aggregated to help make supply distribution and purchasing decision during inventory shut down.

The POU shall be able to provide a Procedure Management Option if needed for Surgical Services.

The POU Software application shall be at a minimum Windows 1011 or higher.

The vendor shall agree to comply with the DHA Information Assurance (IA) requirements as identified as

“ATTACHMENT 4 - Defense Health Agency (DHA) Cyber Logistics (CyberLOG) Cybersecurity/Risk Management Framework (RMF) Requirements (dated 01-05-2022)” included in this requirement.

Remote inventory management with Systems Administrators remote access.

The POU shall provide a multi variations of storage sizes and styles to accommodate current requirements with locking mechanisms.

The POU shall be able to interface with MHS Genesis application if needed.

The POU shall be able to provide wireless open-access inventory management system capability for large items/open shelving to track supply usage and automate reordering.

The POU shall have printing capabilities.

The POU shall have touchscreen, station lights, rapid access drawer, hideaway keyboard, flex drawers, slide-out shelves configuration as needed.

The POU shall be capable to configure to any configuration required for the customer needs.

The POU shall be able to replace existing system one for one and move supplies with labels.

The POU shall provide warranty information and assurance that cabinets and software will last at a minimum of five years or more.

The POU cabinets electrical power requirements cannot exceed the hospital voltage capacity of 120 VAC and shall have at least battery back-up time of a minimum 60 minutes or more in case of a power outage.

All POUs are to be mounted to the floor/wall to avoid / prevent accidents.

Vendor shall provide two manuals either digital or hard copy.

Vendor shall provide Training for Users, Super Users and System Administrator.

Vendor shall replace and set up the POUs existing Server prior to replacing new system.

Vendor will complete a Turnkey Installation (installed completely and is ready to operate as intended) including hauling away/disposal of existing system.

The vendor shall furnish design plans, labor, materials, and equipment necessary to provide for installation, in accordance with the “Pre-Installation Site Survey” to accommodate the above POU system. Extended Installation shall include, as a minimum, connecting with adequate utilities, furnishing, and installing support structures for above system. In addition to the above, the Extended Installation shall include all work identified in Extended Installation Proposal.

This order shall include disposition of Government equipment. The Omnicell shall be traded-in for disposition. The Government equipment items slated for disposition shall be deinstalled by the contractor prior to initiation of installation of new equipment and removed from the hospital. The hospital will remove the equipment from their property book at that time. The room shall be left broom clean by the contractor after de-installation. Transfer of title shall occur when the Vendor or its designee begins to de-install the equipment being disposition. The vendor or its designee, shall remove from the equipment any data that has inadvertently not been removed by the Government, in accordance with VA Sanitization of Sensitive Data Instructions.

2. SOURCE CONSIDERATIONS:

Power source: line operation (All units must be within six feet of an electrical outlet) Voltage requirements: 85-264 AR, 90250 AR, 2 A at 115 VAC - 230 VAC Network: LAN or WAN with 100 Mbps or higher is preferred, 10 Mbps is the minimum requirement, Category 5 or higher cabling from the switch to the jack for applicable units, One network port for each cabinet and at least one for every Operating System or Interface Server (NIC bridging or teaming are options on current server lines), One static IP address, subnet mask, and gateway address for each cabinet and at least one for each server.

END OF STATEMENT OF WORK