Inactive Total Small Business Set-Aside (FAR 19.5)

This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in FAR Subpart 12.6, in conjunction with FAR 13, as applicable, and as supplemented with additional... This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in FAR Subpart 12.6, in conjunction with FAR 13, as applicable, and as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; quotations are being requested and a written solicitation will not be issued. Solicitation number NIH-CC-20-007615 is being issued as a Request for Quotation (RFQ). This solicitation document and incorporated provisions and clauses are those in effect through Federal Acquisitions Circular FAC 2020-05. This acquisition will be processed under Simplified Acquisition Procedures (SAP) and is set aside for small business. Only responsible small business sources may submit an offer that will be considered by this agency. Instructions: Contractors shall include separate technical and price proposals. The deadline for questions is May 6, 2020 @ 4:00PM Eastern Time. Questions must be submitted via email to Christopher Lauver, Contract Specialist at the following email address: christopher.lauver@nih.gov All offers must be received by the response deadline; May 21, 2020 at 6:00 p.m. Eastern Standard Time. Offers must be submitted via email to Christopher Lauver, Contract Specialist at the following email address: christopher.lauver@nih.gov Background: The NIH Clinical Center (NIHCC) is the nation’s clinical research hospital. It is one of 27 institutes and centers that comprise the National Institutes of Health (NIH). The NIHCC is a cornerstone of the Intramural Research Program of the NIH and the location where 24 institutes daily conduct around 1,500 clinical research studies. Through clinical research, clinician-investigators translate laboratory discoveries into better treatments, therapies and interventions to improve the nation's health. The Clinical Center Office of Communications and Media Relations (OCMR) seeks a Contractor to develop a multi-platform application to create a fun, informative and interactive introduction to the hospital for pediatric visitors. Purpose: The purpose of this solicitation is to procure the development of a cross platform (iOS, web, Android) application for pediatric patients at the Clinical Center to assist in the familiarization of the onboarding process for pediatric patients at the Clinical Center. The application is intended to improve enrollment, treatment completion, and trial efficacy. Statement of Work: NIH Clinical Center Pediatric Onboarding App APPLICATION REQUIREMENTS The NIHCC application will be a multi-platform (iOS, Android, PC, tablet) game that familiarizes pediatric patients and family members with the NIH Clinical Center. The NIHCC application will include information on: The layout and facilities of the NIHCC. The programs and services offered by the NIHCC (for example, pediatric clinic (1SE), hospitality, pharmacy, library, social work, school, playroom, gift shop. Also, the Children’s Inn). The procedures and tests patients might undergo at the NIHCC as a part of their treatment (for example: MRI, blood, allergy, surgery, among others). The NIHCC application will be aimed at pediatric patients from the ages of 6 to 18 and will also be available to older patients and the family members of pediatric patients. No PII will be included. The application will include several interactive features including: Avatar/character builders that allow the user to customize their appearance including gender, body, clothing, footwear, other accessories and allow them to save and reset their settings. Navigation of the NIHCC, information about important locations users may encounter and what they will discover when they are there. Information about the places that the user visits in the hospital. Ten key locations would be set up in the launch of the application with additional locations added in subsequent updates. Incorporation game play that involves traveling between destinations in the hospital, age appropriate challenges and puzzles and other interactive activities. Production and management of in and out-of-game rewards while using the NIHCC application. (Out-of-game rewards will be gift items TBD provided by NIHCC for achieving points). Integral to the functioning and evolution of the application will be the ability to: Make incremental improvements and additions once the initial version of the application has launched and strong security protections for any user information/personally identifiable information. Establish and capture metrics on user engagement, Clinical Center pre and post attitudes, and clinical study completion. CONTRACTOR REQUIREMENTS The Contractor shall develop and support all aspects of the development of the NIHCC application. The Contractor shall have extensive experience in application design, organization, usability and management best-practices, as well as providing all technical specs to allow subsequent updates and development of the application. If uitilizing cloud service providers (CSP) to host content, the CSP must be FedRamp-certified (https://marketplace.fedramp.gov). Any websites hosted on behalf of NIH must also meet HTTPS Requirements in accordance with OMB M-15-13 (https://https.cio.gov/guide/). The Contractor is responsible for maintenance, patching, and vulnerability assessment of the system. The Contractor shall design the deliverables in accordance with Section 508 accessability requirements. The Contractor shall document compliance with the NIST SP 800-53 revision 4 Security Controls for systems with a security categorization of Low. The deliverables should be configured to allow for the display of a security/privacy warning banner before the user begins the game. SECURITY, PRIVACY AND COMPLIANCE The Application Must: Comply with the Children's Online Privacy Protection Act (COPPA). http://www.coppa.org/coppa.htm See addendum Facilitate and demonstrate parental consent in advance of minor access. Demonstrate HHS 508 Compliance and Accessibility. Comply with the HHS Privacy Act https://www.hhs.gov/foia/privacy/index.html Display NIH security/privacy warning banner before the user begins the game. Display application privacy notice upon login and collect user’s acknowledgment DEVELOPMENT PROCESS Use Agile Development Process (ADP). Define process for IOS, web and android development. Confirm (weekly or bi-weekly) stages and timing for testing, client collaboration, project reports, and testing. Create wireframe and storyboard of full APP as outlined Validate with user testing Finalize wireframe and storyboard Start with Minimum Viable Product: 1 avatar w/ 2 clothing and hair changes, 2 treatment rooms; 2 challenges, 2 navigation options. Validate & refine with testing for usability, functionality and consistency Use pediatric and parental users to validate fundamental hypotheses ID behaviors and needs e.g. :Should parents and children play together Continue to develop and refine design, functions and features using above ADP Outline and demonstrate successful milestone achievement of APP at pre-specified stages with user, alpha, and beta testing. PREFERRED EXPERIENCE Health care, research and Federal Government settings. User-friendly application development. Creating/using mobile platform Application Programming Interfaces (APIs) for Apple iOS, Android and Windows Mobile. A track record of maintaining up to date security for applications/programs and protecting PII Database management. Implementation of memory allocation. Implementation of cross-platform mobile suites. Experience with commonly used programming languages (like C# and Java) and web development languages (like HTML 5 and CSS). Creating applications that operate and load quickly. Developing help features for mobile applications. Developing applications with COPPA compliance. Previous experience in developing applications/programs with samples provided. Previous experience in developing applications/programs with gamification. PERIOD OF PERFORMANCE The period of performance will be 8 months beginning on or around 5/30/2020. ADDENDUM: The Children's Online Privacy Protection Act of 1998 (COPPA) COPPA (15 U.S.C. §§ 6501 - 6505) regulates websites that obtain personal information from U.S. children under the age of 13. Definitions are at 16 CFR § 312.2and personal information is defined in relevant part as individually identifiable information about an individual collected online, including “A first and last name” and “A persistent identifier that can be used to recognize a user over time and across different Web sites or online services [such as ...] a customer number held in a cookie...” (Note that you can ask for a first name only but there is no input screen that’s going to prevent someone from concatenating their name like “fredvorck” as opposed to just “fred.” If my kids do that everywhere, other kids surely do too). The option to supply a name should ideally be skippable -- COPPA includes a prohibition against conditioning a child's participation on collection of personal information. Nothing wrong with “Guest.” An operator must make reasonable efforts to obtain verifiable parental consent, taking into consideration available technology. Any method to obtain verifiable parental consent must be reasonably calculated, in light of available technology, to ensure that the person providing consent is the child's parent. More information is at §312.5. Examples of COPPA compliant policies. Nickelodeon, very dense, with a lot of legalese: https://www.nick.com/legal/83acmp/privacy-policy ABC Smart Cookies, a Girl Scout Cookie baker, with accessible language and a much friendlier reading experience:https://sit.abcsmartcookies.com/coppastatement/ ATTACHMENTS: STATEMENT OF WORK (3 PAGES). EVALUATION CRITERIA (1 PAGE). FAR 52.212-5 CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT STATUTES OR EXECUTIVE ORDERS - COMMERCIAL ITEMS (JAN 2020) (10 PAGES). INVOICING AND PAYMENT INSTRUCTIONS (3 PAGES).