W81XWH-16-T-0078_Amendment_1.pdf

W81XWH-16-T-0078

COMBINED SYNOPSIS/SOLICITATION

This is a combined synopsis/solicitation for commercial items prepared in accordance with FAR 12.6, Streamlined Procedures for Commercial Items, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; Proposals are being requested and a written solicitation will not be issued. The solicitation number is W81XWH-16-T-0078. This solicitation is issued as a Request for Proposals (RFP). Provisions and clauses in effect through Federal Acquisition Circular 2005-83 are incorporated. It is the contractor’s responsibility to be familiar with the applicable clauses and provisions. The clauses may be accessed in full text at these addresses https://acquisition.gov/far/index.html and http://www.acq.osd.mil/dpap/sitemap.html. The NAICS code is 517110, with a small business size of 1500 employees. This is a Full and Open Competition requirement; all qualified vendors are encouraged to submit a quote.

The United States Army Medical Research Acquisition Activity (USAMRAA) in support of the Walter Reed Army Institute of Research (WRAIR) located at the U.S. Army Forrest Glenn Annex in Silver Spring, MD with branch offices in Thailand, Republic of Georgia, and Kenya have a need for SMART CARD installation and support services in accordance with the PWS and MECs below.

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 1 Lot

AFRIMS

FFP

Acquistion, installation, and support services for SMART CARD services at

AFRIMS

FOB: Destination

NET AMT

https://acquisition.gov/far/index.html http://www.acq.osd.mil/dpap/sitemap.html

0002 1 Lot USAMRD-K, Nairobi Kenya

FFP

Acquisition of hardware and software, provide telephone/remote support services for the installation of SMART CARD services system for USAMRD-K, Nairobi Kenya

0003 1 Lot USAMRD-G, Tbilisi in Replubic of Georgia

FFP

Acquisition of hardware and software, provide telephone/remote support services for the installation of SMART CARD services system for USAMRD-G, Tbilisi in Replubic of Georgia

0004 Lot Travel

COST

Travel shall be reimbursed in accordance with the DoD Joint Travel Regulations and FAR 31.

ESTIMATED COST

Smart card

CMRA

FFP

MINIMUM ESSENTIAL CHARACTERISTICS

Smart card implementation Minimum Essential Characteristics

1. SMART CARD Printing and Encoding device The contractor shall provide three SMART CARD printing devices that meet the following specification:

- FIPS-201- compliant

- Printer speed: up to 24 seconds per card / 150 cards per hour (YMC with transfer)

- Up to 29 seconds per card / 124 cards per hour (YMCK with transfer)

- Up to 40 seconds per card / 90 cards per hour (YMCKK with transfer)

- Up to 35 seconds per card / 102 cards per hour (YMCK with transfer and dual-sided, simultaneous lamination)

- Up to 48 seconds per card / 75 cards per hour (YMCKK with transfer and dual-sided, simultaneous lamination

- Resolution: 300 dpi (11.8 dots/mm)

- Color: Up to 16.7 million / 256 shades per pixel

- Print method: HDP Dye-Sublimation / Resin Thermal Transfer

- Accepted Standard Card Sizes: R-80 (3.370˝ L x 2.125˝ W / 85.6 mm L x 54 mm W)

- Accepted Card Thickness: .030˝ (30 mil) to .050˝ (50 mil) / .762 mm to 1.27 mm

- Input Card Cartridge Capacity: 100 cards (.030˝ / .762 mm)

- Output Hopper Card Capacity: 200 cards (.030˝ / .762 mm)

- Software Drivers:Windows 8/ 7/ Vista (32bit & 64 bit) / Server 2008 & 2003/ XP; Mac OS X v10.6 / v10.5 & Linux

- Print Area: Over-the-edge on CR-80 cards

- Warranty Printer - Three years including one year of free printer loaner support (U.S. only);

optional Extended Warranty Program (U.S. only) Print head - Lifetime; unlimited pass

- Dual card input hopper

- Card lamination module – single-sided or dual-sided (simultaneous) • Smart card encoding (contact/contactless)

- Dual-sided printing• Door and cartridge locks

- Magnetic stripe encoding

- 200-card input hopper

- Secure Proprietary Consumables System

- Custom Secure Holographic HDP Film and Over laminate

2. SMART CARD PIV

The contractor shall provide 1150 Smart card/personal identity verification card that meets the following specification:

EEPROM size: Up-to 115KB for PIV data and keys.

Certifications:

NIST PIV program validation: SP-800-73-3 (#25, 26) FIPS 140-2 Certification: Level 2 overall (# 1414, 1416) Common Criteria: EAL 5+ (Ref# ANSSI-CC-2009/46)

GSA APL: SP-800 73-3 (#587, 594, 595, 596, 597, 598)

Cryptographic algorithms Supports all PIV cryptographic algorithms (as specified in SP800-78-3 ) ECDSA: Curve P-224, P-256, P-384 ECDH: Curve P-224, P-256, P-384 RSA: 1024, 2048 bit modulus AES: 128, 192, 256 bit Keys (CBC, ECB) 3DES: 2 key, 3 Key (CBC, ECB)

Retired keys: Supports 8 or more on-card retired private key management keys (aka Encryption keys) with their associated X509 certificates

Public Key Infrastructure (PKI) •The contractor shall setup an internal Certificate Authority (CA) at AFRIMS that will be managed by WRAIR, •The cards shall have the ability to be encoded with public managed certificates

OT-SMART

Shall supports OT-SMART protocol that enables the use of secure reader technology in the legacy PAC environments.

Secure channel AES based secure messaging (OT-SCP03).

Data model Shall supports all mandatory and optional data objects specified in SP-800-73-3.

Custom extensions Shall supports additional data objects with custom access conditions as needed.

MIFARE® support Shall supports MIFARE® Classic 1K emulation.

Card body

- shall have long life composite PET-F/PVC plastic meeting the new physical and durability requirements specified in the

- shall be FIPS 201 standard and Supports variety of security features up to level 3 (forensic) and laser engraving options.

Communication protocols Shall have T=1 (ISO/IEC 7816-3) and T=CL (ISO/IEC 14 443 Type A or Type B) and Supports extended length APDU for faster data exchange

Communication speed

Shall have up to 625,000 bps over the contact interface with a 5MHz clock and up to 424,000 bps over the contactless interface

Operating voltage Shall have Class A (5V) and class B (3V)

CMS compatibility Shall have out-of-the-box support for the following commercial CMS products:

Intercede™ MyID® v9 XTec - AuthentX™ IDMS/CMS Module 4.4 and have ActivIdentity (HID) ActivID™ CMS for PIV version 4.2 and BellID® - ID Token manager version 6.0

FIPS 201-2”ready” Shall already supports the new features listed in the second draft of FIPS 201-2:

Biometric On-Card-Comparison (OCC) Secure messaging

3. Security storage

The contractor shall provide Security storage device that meets the following specifications that meets the following specification:

The device shall have the following Functionalities:

• Onboard secure key and application storage/processing and cryptographic

• offloading/acceleration

• Authenticated multi-level access control and strong separation of duties (administrator and operator)

• nToken option that provides unmatched client authentication

• Secure key wrapping, backup, replication and recovery

• Unlimited protected key storage

• Clustering, load-balancing and “k of n” multifactor authentication

• Unlimited logical/cryptographic separation of application keys

• Shall support up to 1000 clients

The following operating systems shall be supported:

• Physical: Windows, Linux, Solaris, Apple computers

• Virtual: supports numerous VM software vendors including VMware, Hyper-V and AIX LPARs

The device shall support the following cryptography:

• A symmetric public key algorithms: RSA (1024, 2048, 4096),

• Diffie-Hellman, DSA, El-Gamal, KCDSA, ECDSA, ECDH

• Symmetric algorithms: AES, ARIA, Camellia, CAST, DES, RIPEMD160 HMAC, SEED, Triple DES

• Hash/message digest: SHA-1, SHA-2 (224, 256, 384, 512 bit)

• Full Suite B implementation with fully licensed Elliptic Curve

• Cryptography (ECC) including Brain pool and custom curves

Safety, security and environmental compliance

• UL, CE, FCC

• RoHS, WEEE

• FIPS 140-2 Level 2 and Level 3, NIST SP 800-131A

Shall have following management and monitoring capabilities:

• Remote unattended operator/multi-user access control

• Syslog diagnostics support

• Windows performance monitoring

• Command line interface (CLI)/graphical user interface (GUI)

• SNMPv3 compatible monitoring

Shall have the following physical characteristics:

• Standard 1U 19in. rack mount with integrated Smart Card Reader

• Dimensions: 43.4 x 430 x 705mm (1.7 x 16.9 x 27.8in)

• Weight: 11.5kg (25.4lb)

• Input voltage: 100-240v AC auto switching 50-60Hz (nominal) IEC 320 mains socket and rocker switch

• Power consumption: up to 1.2A at 110v AC 60Hz or 0.6A at 220v AC 50Hz with European plugs

• Heat dissipation: 327.6 to 362.0 BTU/hr (full load)

• Temperature: operating 5 to 40°C (41 to 104°F), storage -20 to 70°C (-4 to 158°F)

• Humidity: operating 10 to 90% (relative, non-condensing at 35%), storage 0 to 85% (relative, non-condensing at 35%)

PWS

PERFORMANCE WORK STATEMENT

Walter Reed Army Institute of Research

Performance Work Statement For

Smart card implementation

PART 1 - GENERAL INFORMATION

1.1. Introduction: This performance work statement (PWS) specifies the Information Technology (IT) Services and supplies required of a contractor to acquire and implement a SMART CARD solution for Walter Reed Army Institute of Research (WRAIR) OCONUS laboratories.

1.2 Background: The WRAIR is a research facility in Silver Spring, MD with branch offices in Thailand, Republic of Georgia, and Kenya. The contractor shall acquire, configure and implement full scope of SMART CARD solution at Armed Forces Research Institute of Medicine (AFRIMS) in Bangkok, Thailnad a WRAIR OCONUS branch offices. The contract shall also provide telephone, email, and remote configuration support assistance for the installation and configuration of the same system in United State Medical research Director (USAMRD)- in Kenya and Republic of Georgia

1.3 Scope of Work:

1.3.1 This is not a personal services contract. The services rendered by the contractor are rendered in the capacity of an independent contractor. The Government will perform surveillance of the contractor in the evaluation of the quality of services for purposes of contract inspection and acceptance but will not supervise the contractor’s employees. The Government retains no direct control over the services provided by the contractor. The contractor shall be solely responsible for all liability caused by the acts or omissions of its agents or employees. The contractor shall not in any manner represent or infer that it is an instrumentality of the United States Government.

1.3.1.1 Acquisition, installation and support services for SMART CARD services for AFRIMS in

Bangkok, Thailand, The contractor shall ensure the SMART CARD system is installed, configured, secured and provide authentication, non-repudiation, authorization and accountabilities required by two factor authentication. The primary goals of the contractor shall be to ensure the acquired and deployed SMART CARD solution for the three OCONUS labs deliver a consistently high level of performance, reliability, secured and operate seamlessly on that network infrastructure.

1.3.1.2 Acquisition of hardware and software, provide telephone/remote support services for the installation of SMART CARD services system for USAMRD-K, Nairobi Kenya and USAMRD- G, Tbilisi in Replubic of Georgia . The vendor will not be required to install the SMART CARD services at USAMRD-K and USAMRD-G.

1.3.2 Anticipated Performance Locations for Services:

The contractors provided services would be used in the following WRAIR OCONUS location Thailand, Kenya, Republic of Georgia.

1.3.3 The contractor shall comply with all regulations, policies and directives of the Dept. of Defense, the Dept. of Army, WRAIR, and their respective commands, including but not limited to areas of information technology, information security, e-mail administration, network management, system administration, software, hardware, equipment, and responses to requests for information. The following are some of the regulations, policies and directives:

- Subchapter III of Chapter 35 of title 44, United States Code, “Federal Information Security Management Act (FISMA) of 2002”

- DoD 8570.01-M, Information Assurance Workforce Improvement Program May 15, 2008

- DoD Directive 8500.1, "Information Assurance," October 24, 2002

- DoDI 8510.01, DoD Information Assurance Certification and Accreditation Process (DIACAP)

- DoD Instruction 8500.2, “Information Assurance (IA) Implementation,” February 6, 2003

- DoD Directive 8500.01E, “Information Assurance (IA),” October 24, 2002

- AR 25-2, Information Assurance, 23 March 2009

- AR 25-1 Army Knowledge Management and Information Technology, 4 December 2008

Contractors may obtain these regulations, policies and directives at one of the following Websites:

US Code: http://uscode.house.gov/ DoD Documents: http://www.dtic.mil/whs/directives/index.html Army Regulations: http://www.apd.army.mil/

PART 2 - TASKS TO BE ACCOMPLISHED

2.1 Task 1. Acquisition of SMART CARD Printing and Encoding hardware and software

2.1.1 The contractor shall provide the hardware devices for the production and implementation of a SMART CARD system at WRAIR’s three OCONUS labs. This shall include but is not limited to three http://www.apd.army.mil/%20p high definition SMART CARD printers with Reverse-Transfer Dual-Sided, 13.56 MHz Contactless and Contact Smart Card Encoder, Dual-Sided Simultaneous Lamination, 1150 SMART CARD with 3 track Hi-Co magnetic stripes and contact PKI chip, 6 or more ribbon for the printer with 500 or more print capabilities, 1500 or more image capable High Definition printer films, Printer, Cleaning Kit, Includes Four Print head Cleaning Swabs, 10 Gauze Cleaning Pads, 10 Cleaning Cards, Three Alcohol Cards, General-purpose hardware security module (HSM) that protects up to 1000 clients by safeguarding their encryption and digital signing keys and processing sensitive data on the trusted appliance with FIPS level 3., 6 or more Printer over laminated clear kits, and 1150 convertible USB SMART CARD reader.

2.1.2 The contractor shall be responsible for the provision of the SMART CARD software. This includes but is not limited to Activeclient or compatible SMART CARD middleware, PKI certificates, SMART CARD desktop and server software, Activeclient management system software, and all the required software for the acquired hardware.

2.1.3 The contractor shall install an internal Certificate Authority (CA) in AFRIMS that will manage the certificates encode into the cards

2.2 Task 2. Installation

The contractor shall install and configure all the acquired hardware or provide detailed installation and configuration guide. This hardware includes but is not limited to three high definition SMART CARD printers with Reverse-Transfer Dual-Sided, General-purpose hardware security module server/device, Certificate authority (CA) server, SQL server, and the contract shall install and configure all the software components required for the deliverables.

2.3 Task 3. Comply with all required Army directives and standards

The contractor shall comply with all Army regulations and standards during the contract installation, implementation and maintenance period of the contract. The contractor shall assist in the provision of security and patch update to the system as required by the Army Computer Emergency Response Team (ACERT), the Army, or DOD cyber command that are concerned with information technology,security during and after implementation within the service layer agreement period

2.4 Task 4. Project Management and Update

The contractor shall manage and update their assigned projects using Microsoft Project or other WRAIR approved project software..

2.5 Task 5. Meetings

. The contractor shall have a project meeting with the project lead and other WRAIR representatives at the beginning and closeout of the project .

2.8 Task 6. User Training

The contractor shall develop training aids or tips and distribute to users thru e-mail or informal meetings to inform the users of procedures, security issues, problem resolutions, software installation and any items that would benefit the user and their SMART CARD usage.

2.9 Task 7 Maintenance

The contracort shall continue to provide maintenance for the installed hardware and software during the service agreement period. The vendor/contractor shall provide support Telephone, email and remote configuration support to the IT staff of the different OCONUS labs as required during the maintenance period.

2.10 Non-Disclosure Agreement

The contractor shall agree to sign a non-disclosure agreement in reference to classified, sensitive but unclassified and non-classified data as defined by the WRAIR IMD director or his designator.

2.11 SMART CARD System Objectives

Objective 2.11.1 End users shall be able to logon to domain workstations and laptops running Windows 7 and 8.x using a Smart Card and a PIN

Objective 2.11.2 System Administrators shall be able to access remotely domain servers running Windows 2008, and 2012 using a Smart Card and PIN

Objective 2.11.3 Remote users shall be able to authenticate to the Virtual Private Network gateway using a Smart Card and PIN and securely gain access to the organization internal resources

Objective 2.11.4 End users shall be able to unlock their PIN, update and renew their Smart Cards using a Self-

Service Web Portal

Objective 2.11.5

If applicable, the end users shall be able to use their Smart Card for Physical Access Objective 2.11.6

Operators shall be able to centrally manage the solution and the Smart Card lifecycle using a Web Interface

Objective 2.11.7 The solution shall include one Hardware Security Modules. HSMs are high security electronic safes for cryptographic keys that shall protect these using Hardware protection certified FIPS 140- 2 Level 2 or 3.

Objective 2.11.8 Employees shall be able to digitally sign emails and documents

Objective 2.11.9 Employees shall be able to digitally encrypt emails, files and documents

Objective 2.11.10 Operators shall be able to print and encode the smart cards in one step

Objective 2.11.11

Domain workstations and laptops shall authenticate to Wireless networks using a digital Certificate

Objective 2.11.12 End users shall be able to logon to domain joined MACs using a Smart Card and a PIN

PART 3 - DELIVERABLES

All deliverables in this performance work statement shall be prepared using a version of the Microsoft Office suite of applications compatible with WRAIR workstation software. Documentation shall be grammatically correct. Reports and plans shall be submitted in hard copy and in electronic formats (original editable and/or PDF).

Following are the general deliverables required in this performance work statement and the timeframes when due.

3.1 Documentation of plan of hardware and software acquisition.

Due: After contract award.

3.2 Implementation and maintenance plan.

Due: At time of proposal submission

3.3 Delivery of hardware and software.

Due: Within two of weeks of contract award

3.4 Detail implementation plan and deployment

Due: Four to six week of contract award

3.5 Documentations

Deliverable 3.5.1: hardware documentations Due: beginning of contract

Deliverable 3.5.2 Design documentation Due: beginning of contract

Deliverable 3.5.3 configuration documentation Due: to be submitted with proposal

3.6 Project Management and Update

Deliverable 3.6.1 project completion report Due: at the end of project.

3.7 Service level agreement Support

Deliverable 3.7.1 Telephone support Due: 24x7

Deliverable 3.7.2 Equipment Warranty Replacement Due: Within 5 days of when the problem is diagnosed and repair parts are needed.

PART 4 - GOVERNMENT PROVIDED EQUIPMENT AND SERVICES

4.1 The Government will provide the following facilities, equipment, materials and services:

- At contract start date, on-site, work areas with desks, and chairs if required

- Fire and safety protection.

- Building access and vehicle permits.

4.2 The Government will not provide routine medical services to contractor personnel.

5.0 Points of Contact.

5.1.1 Project Lead

TBD

5.1.2 NETOP Chief, TBD

6.0 Travel and security requirements

All necessary travel for installation shall be included in the vendors quote.

The contarct shall acquire their own passport and visas The contract shall provide the following to AFRIMS admin office upon award of contract

a) Biographies of the individual travelers

b) The purpose of the visit

c) Duration of stay

d) POC while on ground (Stephen Nnam)

e) Trip agenda

7.0 Additional Contract Requirements

CONTRACTOR MANPOWER REPORTING (CMR) - (ACCOUNTING FOR CONTRACT

SERVICES) (APR 2011) (USAMRAA)

The Office of the Assistant Secretary of the Army (Manpower & Reserve Affairs) operates and maintains a secure Army data collection site where the contractor will report ALL contractor manpower (including sub-contractor manpower) required for performance of this contract. The contractor is required to completely fill in all the information in the format using the following web address:

https://cmra.army.mil. The required information includes: (l) Contract Number; (2) Delivery Order Number (If applicable); (3) Task Order Number (If applicable); (4) Requiring Activity Unit Identification Code (UIC); (5) Command; (6) Contractor Contact Information; (7) Federal Service Code (FSC); (8) Direct Labor Hours; (9) Direct Labor Dollars; and, (10) Location. In the event the Contracting Officer's Representative (COR)/Contracting Officer's Technical Representative (COTR) has not entered their data requirements first, the contractor must also enter the COR/COTR required data with the exception of fund cite, obligations, and disbursement data. The CMRA help desk can be reach at 703-695-5103 or 703-695- 5058 for any technical questions. The help desk can also be contacted via email:

contractormanpower@hqda.army.mil. As part of its quote or offer, the contractor will also provide the estimated total cost (if any) incurred to comply with this reporting requirement. The reporting period will be the period of performance not to exceed 12 months ending 30 September of each government fiscal year and must be reported by 31 October of each calendar year.

PROTECTION OF GOVERNMENT-PROVIDED COMMUNICATIONS SYSTEMS AND OTHER

RESOURCES (DEC 2006)(USAMRAA)

The Contractor acknowledges its obligation to protect Government-provided communications systems, and other Government-provided resources, from misuse by its employees. Contractor employees shall not use Government communications systems, or other resources, for unauthorized purposes, such as, but not limited to, those discussed in the Joint Ethics Regulation, DoD 5500.7-R, Paragraphs 2-301a and 2-301b.

Upon discovery of such misuses, the Government shall have the sole contractual right to have any such offending Contractor employee removed from the Government contract without any reduction of, or delay in, the Contractor's performance or delivery obligations.

TRAVEL (JULY 2005) (USAMRAA)

a. Approval of Foreign Travel. The cost of foreign travel is allowable only when the specific written approval of the Contracting Officer is obtained prior to commencing the trip. Approval shall be requested at least 60 days calendar days before the scheduled departure date in order that all necessary clearances may be processed. Each individual trip must be approved separately, even though it may have been included in a previously approved budget. Foreign travel under this contract is defined as any travel outside of the United States and its territories and possessions.

b. Costs incurred by contractor personnel on official company business, whether foreign travel and/or domestic/local travel, are allowable, subject to the limitations contained in the Federal Acquisition Regulation (FAR) clause at 52.216-7, Allowable Cost and Payment, incorporated into this contract.

Travel shall be reimbursed in accordance with the DoD Joint Travel Regulations and FAR 31.

Quality Assurance Surveillance Program for SMART CARD implementation

Performance Objective

Performance Targets

Method of S u r v e i l l a n c e

Method of Inspection

1. Install three

SMART CARD

production printer and machine

Full compliance With DOA SMART

CARD

implementation.

Visual surveillance by an assigned WRAIR technical representative

Visual inspection of produced SMART

CARD

2. Installation of the HMS server/devices

Satisfy the high security electronic safes for cryptographic keys

Logical unsuccessful access to the Software FIPS 140-2 level 2, 3.

Logical inspection of the cryptology key vault

3. Two forms of authentication

Ability to use what you have and what you know to sign into computer and devices

Successful Login and authentication into computers with the produced SMART

CARD

Physical SMART CARD login to network and non-network devices

4. Ability to unlock SMART CARD using a self signed web portal

User must be able to access the website and self unlock

SMART

CARD

WRAIR technical representative shall ensure successful access to the web portal

Visual successful logon and

SMART CARD

unlock

4. Ability to print and encode the smart card in one step

One step production of functional

SMART CARD

Visual inspection Login to configured network and non network devices

5. Ability to digitally sign emails and documents

Signed emails and documents

Sending and receiving signed email.

Sign MS office and non MS office documents

Users shall digitally sign, send and receive emails.

Users shall digitally sign different documents

PROPOSAL CONTENT & INSTRUCTION

PROPOSAL CONTENT AND INSTRUCTIONS FOR PREPARATION OF PROPOSALS

Introduction and Purpose - This section specifies the format and content that offerors shall use in this Request for Proposal (RFP). The intent is not to restrict the offeror’s in the manner in which they will perform their work but rather to ensure a certain degree of uniformity in the format of the responses for evaluation purposes. Offerors shall submit a proposal that is legible and comprehensive enough to provide the basis for a sound evaluation by the Government. Information provided should be precise, factual, and complete. Legibility, clarity, completeness, and responsiveness are of the utmost importance.

Proposals shall be in the form prescribed by, and shall contain a response to, each of the areas identified in this section. Any proposal which does not provide, as a minimum, that which is required in this solicitation may be determined to be substantially incomplete and not warrant any further consideration.

The proposal shall be submitted in three separate volumes:

Volume I Technical Approach Volume II Past Performance Volume III Price

Volume I: Technical Approach (Design Quality and Capability and Management Approach).

In accordance with file submission requirements given in this section, the offeror shall submit the following:

Technical Approach

• Design Quality and Capability of the Solution – The contractor shall submit sufficient documentation to allow for an evaluation of the design quality and capabilities of the proposed SMART CARD system to determine how well that system meets the functional capabilities of the SMART CARD solution. The Offerors shall clearly demonstrate how they confirm to the requirement as outlined in the PWS and meet the Minmum Essential Characterisitcs.

• Management Approach for Support Services – The offeror shall address how its proposed management approach will be beneficial to the Government and how it reduces the risk of unsuccessful contract performance. The offeror shall describe its ability to effectively and efficiently manage the requirements of the contract to include a discussion on the support services to be performed OCONUS. The offeror shall describe the procedures that are in place to ensure overall contract performance is achieved at an acceptable quality level. The offeror shall describe its ability to meet the challenges of managing this requirement.

Volume II: Past Performance. In accordance with file submission requirements given in this section, the offeror shall submit the following:

The offeror shall describe its past performance on up to five (5) similar contracts it has held within the last three (3) years that are for the same or similar equipment to that which is detailed in this solicitation or affirmatively state the offeror possesses no relevant past performance directly related to or similar past performance. Offerors who present similar contracts shall provide a detailed explanation demonstrating the relevance of the contracts to the requirements of the solicitation. Offerors shall demonstrate (1) the Contractor’s relevant experience identical to, similar to or related to performaing services contained within the PWS demonstrating what the Contracotr has done and how well it was accomplished and (2) the functional performance of the proposed or similar SMART CARD Solutions that the offeror has delivered to previous customers, The Government reserves the right to contact any references. The government reserves the right to consider other past performance information at its disposal, in addition to any information obtained from the references provided above. The contractor shall provide the following information for the points of contact to whom they will provide the Past Performance Questionnaires (Attachment 2) for direct submittal to the Government.

The offeror shall provide the following information regarding its past performance:

• Contract number(s), award date and dates of performance.

• Name, phone number, and e-mail address of a validated point of contact at the federal, state, local government or commercial entity for which the contract was performed. Contractor shall verify the validity of the contact information provided.

• Dollar value of the contract.

Description of the equipment provided under the contract.

• The number, type and severity of any quality or delivery problems in performing the contract, the corrective action taken and the effectiveness of the corrective action (if applicable).

• Any other relevant information.

• Answer “Has the POC agreed to be to be contacted as a reference?”

• Offerors shall describe the oldest system that is still installed and operational and the oldest system still installed in a healthcare or medical environment.

Volume III: Price. Adequate price competition is expected for this acquisition. Offerors shall price all CLINS. Price will be evaluated with consideration to the following factors:

REASONABLENESS. The offeror’s Price proposal will be examined to determine the degree to which the proposed prices compare to the prices a reasonable prudent person would expect to incur for the same or similar systems and services. Since awards will be made on a best value basis, the Contracting Officer reserves the right to award a premium providing the total prices are determined to be reasonable.

COMPLETENESS. All CLINS shall be priced.

Electronic copy of the Offeror’s Commercial Published Price (including any additional discounts off of its current pricing);

The Offeror shall submit their proposed price as a Firm Fixed Price proposal. The Offeror’s price proposal shall include proposal price assumptions, if any. The Government anticipates the Offeror provide their preferred customer pricing (to include any discounts) and pricing commensurate with prices paid for on other Government contracts.

If your proposal includes subcontractor support, rate information from the subcontractor will also be required.

Price proposals shall include the following:

All other prices and the reductions or rebates offered to include shipping.

Offerors’ proposals shall remain open for a minimum of 90 days from the date of submission.

PROPOSAL SUBMISSION INSTRUCTIONS.

POINT OF CONTACT (POC): Due to the difficulties in receipt of mail through normal postal services, questions and proposals shall be sent via E-mail to the POCs for this RFQ:

Contract Speciliast – kasey.l.carroll.civ@mail.mil

The Offeror is responsible for ensuring receipt by the POC.

PROPOSAL QUESTIONS: Questions may be submitted to the POC via email No Later Than 26 April 2016 at 3:00 PM Eastern Time. Follow-up/additional questions will not be accepted after this date.

Answers to Contractor submitted questions will be provided to all prospective contractors via RFP amendment.

PROPOSAL DUE DATE: No Later Than (NLT): 16 May 2016 at 1:00 PM Eastern Time.

ELECTRONIC SUBMISSION: Quotes shall be electronically submitted to the POC above. Your submission should include two separate parts: a Cost Quote and a Technical proposal. The Technical proposal shall be submitted in MS Word or searchable PDF format. The Cost proposal shall be submitted mailto:kasey.l.carroll.civ@mail.mil in MS Word or MS Excel 2000 or higher, but not greater than MS Word or MS Excel 2003 format. The firewall utilized by the Government contracting office does not authorize or accept zip files.

Other Administrative Instructions:

System for Award Management (SAM). Contractor s must be registered in the SAM database to be considered for award. Registration is free and can be completed on-line at http://www.sam.gov; provide DUNS number; Cage Code and TIN.

Offerors are reminded to include a completed copy of 52.212-3 ALT I with RFP response. All clauses shall be incorporated by reference in the order.

Offerors shall complete DFARS 252.209-7991, Representation by Corporations Regarding an Unpaid Delinquent Tax Liability or a Felony Under Any Federal Law-Fiscal Year 2016 Appropriations (Deviation 2016-OO0002) (October 2015).

TECHNICAL APPROACH

TECHNICAL APPROACH: (Factors are of Equal Importance)

• Design Quality and Capability – The government will evaluate the capabilities of the proposed system to determine how well that proposed system meets the functional capabilities of the SMART CARD solution. In addition, the government will evaluate the the design, quality and capabilities of the proposed systems to acquire, configure and implement full scope of SMART CARD solution and also provide telephone, email, and remote configuration support assistance for the installation and configuration of the same system in United State Medical research Director (USAMRD)- in Kenya and Republic of Georgia.

• Management Approach for Support Services – The offeror shall address how its proposed management approach will be beneficial to the Government and how it reduces the risk of unsuccessful contract performance. The offeror shall describe its ability to effectively and efficiently manage the requirements of the contract to include a discussion on the support services to be performed OCONUS. The offeror shall describe the procedures that are in place to ensure overall contract performance is achieved at an acceptable quality level. The offeror shall describe its ability to meet the challenges of managing this requirement.

PAST PERFORMANCE

• The Government will evaluate the offeror's past performance information to determine whether it is relevant or non-relevant. This determination will be made for each past performance. A relevancy determination may be made based solely on the information provided on the past performance. After obtaining additional information from the past performance reference, it may be determined not relevant at that time.

In doing so the Government will examine the offeror’s past performance on up to five (5) similar contracts it has held within the last three (3) years. The Government will then evaluate (1) the functional performance, and (2) the quality and timeliness of the technical assistance, hardware and software updates/upgrades that the vendor has supplied to its customers following the initial fielding of those systems. The government reserves the right to consider other past performance http://www.sam.gov/ information at its disposal, in addition to any information obtained from the references provided above.

PRICE: The offeror will be evaluated for reasonableness and completeness.

• Reasonableness: The offeror’s Proposed Price will be evaluated separately to determine the degree to which the proposed prices compare to the prices a reasonable prudent person would expect to incur for the same or similar equipment. The offeror’s total price will be used to evaluate price reasonableness.

• Completeness: The offeror's Price proposal will be examined to ensure that all items required in the CLIN Structure. All CLINS shall be priced.

RATING SCALE

Past Performance Relevancy Rating for the Non Cost/Price Proposal

Rating Definition and Criteria

Very Relevant (VR) Present/past performance effort involved essentially the same scope and magnitude of effort and complexities this solicitation requires.

Relevant (R) Present/past performance effort involved similar scope and magnitude of effort and complexities this solicitation requires.

Somewhat Relevant (SR) Present/past performance effort involved some of the scope and magnitude of effort and complexities this solicitation requires.

Not Relevant (NR) Present/past performance effort involved little or none of the scope and magnitude of effort and complexities this solicitation requires.

Past Performance Rating Standards for the Non Cost/Price Proposal

Performance Confidence Assessments

Rating Description Substantial Confidence Based on the offeror’s recent/relevant performance record, the Government has a high expectation that the offeror will successfully perform the required effort.

Satisfactory Confidence Based on the offeror’s recent/relevant performance record, the Government has a reasonable expectation that the offeror will successfully perform the required effort.

Limited Confidence Based on the offeror’s recent/relevant performance record, the Government has a low expectation that the offeror will successfully perform the required effort.

No Confidence Based on the offeror’s recent/relevant performance record, the Government has no expectation that the offeror will successfully perform the required effort.

Unknown Confidence (Neutral) No recent/relevant performance record is available or the offeror’s performance record is so sparse that no meaningful confidence assessment rating can be reasonably assigned.

Rating Standards for the Non Cost/Price Proposal (Excluding Past Performance)

Rating Definition and Criteria

Exceptional (E) The proposal has exceptional merit and reflects an excellent approach which should clearly result in the superior attainment of all requirements and objectives. The proposed approach includes numerous substantial advantages, and essentially no disadvantages, and can be expected to result in outstanding performance. The solutions proposed are considered very low risk in that they are exceptionally clear and precise, fully supported, and demonstrate a complete understanding of the requirements.

Risk Level: Very Low

Good (G) The proposal demonstrates a sound approach which is expected to meet all requirements and objectives. This approach includes substantial advantages, and few relatively minor disadvantages, which collectively can be expected to result in better than satisfactory performance. The solutions proposed are considered to reflect low risk in that they are clear and precise, supported, and demonstrate a clear understanding of the requirements.

Risk Level: Low

Acceptable (A) The proposal demonstrates an approach which is capable of meeting all requirements and objectives. The approach may have both advantages and disadvantages, however any disadvantages do not outweigh the advantages and the approach can be expected to result in satisfactory performance. The solutions proposed are considered to reflect moderate risk in that they are for the most part clear, precise, and supported, and demonstrate a general understanding of all the requirements.

Risk Level: Moderate

Marginal (M) The proposal does not demonstrate a full understanding of all the requirements and may pose a risk that the Offeror might fail to perform satisfactorily without significant Government oversight or participation. Any advantages that may exist in the approach are outweighed by existing disadvantages. The solutions proposed are considered to reflect high risk in that they lack clarity and precision, or are unsupported.

Risk Level: High

Unacceptable (U) The proposal demonstrates an approach which will very likely not be capable of meeting all requirements and objectives. This approach has one or more substantial disadvantages or contains a deficiency. Collectively, the advantages and disadvantages are not likely to result in satisfactory performance. The solutions proposed are considered to reflect very high risk in that they lack any clarity or precision, are unsupported, or indicate a lack of understanding of the requirement.

Risk Level: Very High.

(5) Best Value Tradeoff Evaluation Standard Definitions

Rating The evaluators’ conclusions (supported by narrative write-ups) identifying the strengths, weaknesses, and deficiencies of an evaluation factor or subfactor. The ratings for each Non-Cost/Price Factor and each of its Subfactors will be expressed as an adjective.

Strength Any aspect of a proposal that, when judged against a stated evaluation criterion enhances the merit of the proposal or increases the probability of successful performance of the contract.

Significant Strength A significant strength appreciably enhances the merit of a proposal or appreciably increases the probability of successful contract performance.

Weakness A flaw in the proposal that increases the risk of unsuccessful contract performance.

Significant Weakness A flaw that appreciably increases the risk of unsuccessful contract performance.

Deficiency A material failure of a proposal to meet a Government requirement or a combination of significant weaknesses in a proposal that increases the risk of unsuccessful contract performance to an unacceptable level.

Proposal Risk Proposal risks are those risks associated with the likelihood that an offeror's proposed approach will meet the requirements of the solicitation.

Performance Risk Performance risks are those risks associated with an offeror's likelihood of success in performing the solicitation's requirements as indicated by that offeror's record of current or past performance.

Advantage Any state, circumstance, opportunity, or means especially favorable to successful contract performance or the Government's overall interest.

Disadvantage Any state, circumstance, opportunity, or means especially unfavorable to successful contract performance or the Government's overall interest.

INSPECTION AND ACCEPTANCE TERMS

Supplies/services will be inspected/accepted at:

CLIN INSPECT AT INSPECT BY ACCEPT AT ACCEPT BY

0001 Destination Government Destination Government 0002 Destination Government Destination Government 0003 Destination Government Destination Government 0004 Destination Government Destination Government 0005 Destination Government Destination Government

DELIVERY INFORMATION

CLIN DELIVERY DATE QUANTITY SHIP TO ADDRESS DODAAC

0001 POP 15-JUN-2016 TO

14-JUN-2017

N/A WRAIR

WRAIR

503 ROBERT GRANT AVNUE

SILVER SPRING, MD DC 20910

W74MYF

0002 POP 15-JUN-2016 TO

14-JUN-2017

N/A (SAME AS PREVIOUS LOCATION)

0003 POP 15-JUN-2016 TO

N/A (SAME AS PREVIOUS LOCATION)

0004 POP 15-JUN-2016 TO

N/A (SAME AS PREVIOUS LOCATION)

0005 POP 15-JUN-2016 TO

N/A (SAME AS PREVIOUS LOCATION)

CLAUSES INCORPORATED BY FULL TEXT

252.209-7991 REPRESENTATION BY CORPORATIONS REGARDING AN UNPAID DELINQUENT TAX

LIABILITY OR A FELONY CONVICTION UNDER ANY FEDERAL LAW—FISCAL YEAR 2016

APPROPRIATIONS (DEVIATION 2016-O0002) (OCT 2015)

(a) In accordance with section 101(a) of the Continuing Appropriations Act, 2016 (Pub. L. 114-53) and any subsequent FY 2016 appropriations act that extends to FY 2016 funds the same restrictions as are contained in sections 744 and 745 of division E, title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L. 113-235), none of the funds made available by this or any other Act may be used to enter into a contract with any corporation that—

(1) Has any unpaid Federal tax liability that has been assessed, for which all judicial and administrative remedies have been exhausted or have lapsed, and that is not being paid in a timely manner pursuant to an agreement with the authority responsible for collecting the tax liability, where the awarding agency is aware of the unpaid tax liability, unless the agency has considered suspension or debarment of the corporation and made a determination that this further action is not necessary to protect the interests of the Government; or

(2) Was convicted of a felony criminal violation under any Federal law within the preceding 24 months, where the awarding agency is aware of the conviction, unless the agency has considered suspension or debarment of the corporation and made a determination that this action is not necessary to protect the interests of the Government.

(b) The Offeror represents that—

(1) It is [ ___ ] is not [ ___ ] a corporation that has any unpaid Federal tax liability that has been assessed, for which all judicial and administrative remedies have been exhausted or have lapsed, and that is not being paid in a timely manner pursuant to an agreement with the authority responsible for collecting the tax liability,

(2) It is [ ___ ] is not [ ___ ] a corporation that was convicted of a felony criminal violation under a Federal law within the preceding 24 months.

(End of provision)

CLAUSES INCORPORATED BY REFERENCE

252.232-7006 Wide Area WorkFlow Payment Instructions MAY 2013

CLAUSES INCORPORATED BY FULL TEXT

252.211-7003 ITEM UNIQUE IDENTIFICATION AND VALUATION (DEC 2013)

(a) Definitions. As used in this clause'

Automatic identification device means a device, such as a reader or interrogator, used to retrieve data encoded on machine-readable media.

Concatenated unique item identifier means--

(1) For items that are serialized within the enterprise identifier, the linking together of the unique identifier data elements in order of the issuing agency code, enterprise identifier, and unique serial number within the enterprise identifier; or

(2) For items that are serialized within the original part, lot, or batch number, the linking together of the unique identifier data elements in order of the issuing agency code; enterprise identifier; original part, lot, or batch number;

and serial number within the original part, lot, or batch number.

Data Matrix means a two-dimensional matrix symbology, which is made up of square or, in some cases, round modules arranged within a perimeter finder pattern and uses the Error Checking and Correction 200 (ECC200) specification found within International Standards Organization (ISO)/International Electrotechnical Commission (IEC) 16022.

Data qualifier means a specified character (or string of characters) that immediately precedes a data field that defines the general category or intended use of the data that follows.

DoD recognized unique identification equivalent means a unique identification method that is in commercial use and has been recognized by DoD. All DoD recognized unique identification equivalents are listed at http://www.acq.osd.mil/dpap/pdi/uid/iuid_equivalents.html.

DoD item unique identification means a system of marking items delivered to DoD with unique item identifiers that have machine-readable data elements to distinguish an item from all other like and unlike items. For items that are serialized within the enterprise identifier, the unique item identifier shall include the data elements of the enterprise identifier and a unique serial number. For items that are serialized within the part, lot, or batch number within the enterprise identifier, the unique item identifier shall include the data elements of the enterprise identifier; the original part, lot, or batch number; and the serial number.

Enterprise means the entity (e.g., a manufacturer or vendor) responsible for assigning unique item identifiers to items.

Enterprise identifier means a code that is uniquely assigned to an enterprise by an issuing agency.

Government's unit acquisition cost means--

(1) For fixed-price type line, subline, or exhibit line items, the unit price identified in the contract at the time of delivery;

(2) For cost-type or undefinitized line, subline, or exhibit line items, the Contractor's estimated fully burdened unit cost to the Government at the time of delivery; and

(3) For items produced under a time-and-materials contract, the Contractor's estimated fully burdened unit cost to the Government at the time of delivery.

Issuing agency means an organization responsible for assigning a globally unique identifier to an enterprise (e.g., Dun & Bradstreet's Data Universal Numbering System (DUNS) Number, GS1 Company Prefix, Allied Committee 135 NATO Commercial and Government Entity (NCAGE)/Commercial and Government Entity (CAGE) Code, or the Coded Representation of the North American Telecommunications Industry Manufacturers, Suppliers, and Related Service Companies (ATIS-0322000) Number), European Health Industry Business Communication Council (EHIBCC) and Health Industry Business Communication Council (HIBCC)), as indicated in the Register of Issuing Agency Codes for ISO/IEC 15459, located at http://www.nen.nl/Normontwikkeling/Certificatieschemas-en-keurmerken/Schemabeheer/ISOIEC-15459.htm.

Issuing agency code means a code that designates the registration (or controlling) authority for the enterprise identifier.

Item means a single hardware article or a single unit formed by a grouping of subassemblies, components, or constituent parts.

Lot or batch number means an identifying number assigned by the enterprise to a designated group of items, usually referred to as either a lot or a batch, all of which were manufactured under identical conditions.

Machine-readable means an automatic identification technology media, such as bar codes, contact memory buttons, radio frequency identification, or optical memory cards.

Original part number means a combination of numbers or letters assigned by the enterprise at item creation to a class of items with the same form, fit, function, and interface.

Parent item means the item assembly,…