Inactive

Purpose and Objectives: The intent of this Sources Sought Notice is to identify potential offerors capable of providing Document Storage System Software Interface Support Carefusion/Pyxis. These are f... Purpose and Objectives: The intent of this Sources Sought Notice is to identify potential offerors capable of providing Document Storage System Software Interface Support Carefusion/Pyxis. These are for the Erie VA Medical Center in Erie, PA 16504. Responses to this Sources Sought Notice should demonstrate the firm's ability, capability, and responsibility to provide the principal components of supplies listed in the attached document. Responses should include the following information: Verify that the business is under 541519of the North American Industry Classification System (NAICS), V1erification of Size Standard under the NAICS, Business name, address, Point-of-Contact, if in possession of a Federal Supply Schedule contract, and if the business has verification as a Service Disabled Veteran Owned Small Business or Veteran Owned Small Business. All information is to be submitted via e-mail at Daniel.Johnson44@va.gov. Information provided will not be returned. All responses shall be in the English Language. Responses are due by 12:00 P.M. (EST) on Tuesday, April 23, 2019. No submissions will be accepted after this date and time. Questions can be submitted electronically to Daniel.Johnson44@va.gov. This is a Sources Sought Notice and submissions will be used for informational and planning purposes only. This notice does not constitute a formal Request for Quote (RFQ), nor is the government obligated to issue an RFQ. In addition, the Government does not intend to pay for any information provided under this notice. The Government is not obligated to notify respondents of the results of this survey. STATEMENT OF WORK Erie VA Medical Center 135 East 38th Street Erie, PA. 16504 SCOPE OF WORK: The vendor shall provide all resources necessary to accomplish the deliverables described in this Statement of Work (SOW), except as may otherwise be specified and deliver to the desired location within the timeframe specified. GENERAL: The Erie VA Medical Center intends to issue a service contract for Inpatient VistA interface software subscription. Period of Performance: Period of Performance within 30 days after receipt of order (ARO) unless otherwise coordinated with the Contracting Officer Representative (COR). Base Year and Four (4) Option Years: Base: 05/16/2019 05/15/2020 Option Year One (1): 05/16/2020 05/15/2021 Option Year Two (2): 05/16/2021 05/15/2022 Option Year Three (3): 05/16/2022 05/15/2023 Option Year Four (4): 05/16/2023 05/15/2027 LOCTIAON OF SERVICES TO BE PROVIDED: The required service shall be conducted at [INSERT ADDRESS], Erie VA Medical Center. QUALIFICATION OF CONTRACTOR: Contractor must be authorized by Document Storage Systems (DSS) to provide support services on the software listed in this Scope of Work. The Contracting Officer reserves the right to refuse a contractor who does not satisfactorily demonstrate this requirement. REQUIRED SOFTWARE: Software Interface Manufacturer: Document Storage Systems, Inc (DSS) Model Number: DSS-RX-HL7 interface Interface: Carefusion/Pyxis interface to VISTA SERVICE: License fee: This contract will fund the licensing fee for each contract year. The vendor will authorize the use of this software and will provide the service support to maintain the functionality of the software for the duration of this contract. Service shall consist of, software support thru VPN access to provide software corrections/patches/fixes, minor release upgrades and telephone support. Additionally, support shall be provided to on-site Office of Information Technology (OIT) staff with hardware failures. Vendor will also provide summary reports upon request. Services will be performed between the hours of 8:00am and 7:00pm, Monday through Friday, unless otherwise approved by the Biomedical Engineering COR. INFORMATION SYSTEMS SECURITY REQUIREMENTS: ACCESS TO VA INFORMATION AND VA INFORMATION SYSTEMS Contractor will protect VA information by abiding by the rules and regulations of this contract and Document Storage Systems, Inc. s Business Associate Agreement. INFORMATION SYSTEM HOSTING, OPERATION, MAINTENANCE, OR USE: VA prohibits the installation and use of personally-owned or contractor/subcontractor owned equipment or software on VA s network. If non-VA owned equipment must be used to fulfill the requirements of a contract, it must be stated in the service agreement, SOW or contract. All the security controls required for government furnished equipment (GFE) must be utilized in approved other equipment (OE) and must be funded by the owner of the equipment. All remote systems must be equipped with, and use, a VA-approved antivirus (AV) software and a personal (host-based or enclave based) firewall that is configured with a VA-approved configuration. Software must be kept current, including all critical updates and patches. Owners of approved OE are responsible for providing and maintaining the anti-viral software and the firewall on the non-VA owned OE. Bio-Medical devices and other equipment or systems containing media (hard drives, optical disks, etc.) with VA sensitive information must not be returned to the vendor at the end of lease, for trade-in, or other purposes. The options are: Vendor must accept the system without the drive; VA s initial medical device purchase includes a spare drive which must be installed in place of the original drive at time of turn-in; or VA must reimburse the company for media at a reasonable open market replacement cost at time of purchase. SECURITY INCIDENT INVESTIGATION: Upon discovery of any known or suspected security/privacy incidents or any unauthorized disclosure of sensitive information, including that contained in system(s) to which the contractor/subcontractor has access, the Contractor/subcontractor shall immediately and simultaneously notify the COR, the designed ISO, and Privacy Officer for the contract. The term security incident means an event that has, or could have, resulted in unauthorized access to, loss or damage to VA assets, or sensitive information, or an action that breaches VA security procedures. LIQUIDATED DAMAGES FOR DATA BREACH: Consistent with the requirements of 38 U.S.C. § 5725, a contract may require access to sensitive personal information. If so, the contractor is liable to VA for liquidated damages in the event of a data breach or privacy incident involving any SPI the contractor/subcontractor processes or maintains under this contract. However, it is the policy of VA to forgo collection of liquidated damages in the event the contractor provides payment of actual damages in an amount determined to be adequate by the agency. TRAINING: Contractor will be on station to provide service and therefore required to take the generalized privacy training by self-enrolling in TMS and take the following training(s): Privacy Training for Personnel Without Access to VA Computer Systems; or Direct Access to or the Use of VA Sensitive Information. Training is required upon hire and annually thereafter if the contract remains in place. A copy of the required certificate(s) must be sent to the Contracting Officer Representative (COR) before the date of Period of Performance (see Period of Performance section). Contractor shall self-enroll in TMS, take training course # VA20939. Contractor may read the text version to receive credit. If text version is reviewed, the COR will enter training as completed in TMS. The contractor/subcontractor shall provide notice to VA of a security incident as set forth in the Security Incident Investigation section above. Upon such notification, VA must secure from a non-Department entity or the VA Office of Inspector General an independent risk analysis of the data breach to determine the level of risk associated with the data breach for the potential misuse of any sensitive personal information involved in the data breach. The term 'data breach' means the loss, theft, or other unauthorized access, or any access other than that incidental to the scope of employment, to data containing sensitive personal information, in electronic or printed form, that results in the potential compromise of the confidentiality or integrity of the data. Contractor shall fully cooperate with the entity performing the risk analysis. Failure to cooperate may be deemed a material breach and grounds for contract termination. Contractor will be on station to provide service and therefore required to take the generalized privacy training: Privacy Training for Personnel Without Access to VA Computer Systems or Direct Access to or the Use of VA Sensitive Information. Training is required upon hire and annually thereafter as long as the contract is in place. Contractor can self-enroll in TMS, take training course # VA20939, and provide a copy of the completed training certificate to the COR or, contractor can read the text version and provide a copy of the completed training certificate to the COR. If text version is reviewed, the COR will enter training as completed in TMS. CONTACT: Contracting Officer Representative (COR): TBD Phone Number: TBD Email: TBD