Inactive

Page 1 Purpose and Objectives: The intent of this Sources Sought Notice is to identify potential offerors capable of providing Resident Wandering System. These are for the Pittsburgh VA Medical Center... Page 1 Purpose and Objectives: The intent of this Sources Sought Notice is to identify potential offerors capable of providing Resident Wandering System. These are for the Pittsburgh VA Medical Center in Pittsburgh, PA 15215. Responses to this Sources Sought Notice should demonstrate the firm's ability, capability, and responsibility to provide the principal components of supplies listed in the attached document. Responses should include the following information: Verify that the business is under 561621 of the North American Industry Classification System (NAICS), V1erification of Size Standard under the NAICS, Business name, address, Point-of-Contact, if in possession of a Federal Supply Schedule contract, and if the business has verification as a Service Disabled Veteran Owned Small Business or Veteran Owned Small Business. All information is to be submitted via e-mail at Daniel.Johnson44@va.gov. Information provided will not be returned. All responses shall be in the English Language. Responses are due by 12:00 P.M. (EST) on Friday, September 20, 2019. No submissions will be accepted after this date and time. Questions can be submitted electronically to Daniel.Johnson44@va.gov. This is a Sources Sought Notice and submissions will be used for informational and planning purposes only. This notice does not constitute a formal Request for Quote (RFQ), nor is the government obligated to issue an RFQ. In addition, the Government does not intend to pay for any information provided under this notice. The Government is not obligated to notify respondents of the results of this survey. STATEMENT OF WORK VA PITTSBURGH HEALTHCARE SYSTEM GENERAL The VA Pittsburgh Healthcare System (VAPHS) has a requirement for all labor, materials, support and travel to provide a Resident Wandering System at its H.J. Heinz campus in O Hara Township, at 1010 Delafield Road, Pittsburgh, PA, 15215. The Contractor shall provide labor, materials, equipment, support, and travel regarding the required services in buildings 50, 51 and 71. The Contractor shall install, test and commission the system in Base Year of the contract and shall provide technical support for the life of the contract, including all Option Years. REQUIREMENTS The wandering system shall be a stand-alone system and shall operate without connection to the VA computer network. Power for all system devices including; door controllers, exciters, gateways and antennas shall be provided from the head end of the system. VAPHS shall provide 120 VAC power receptacles for system work station computers and monitors. The Contractor shall commit to actively pursue approval of their resident wandering system to operate on the VA computer network in accordance with The Department of Veterans Affairs VA Technical Reference Model (VA-TRM). Any RF energy generated during system operation shall not affect existing Wi-Fi, computer and network systems, building control equipment, medical equipment, physical security devices and any other medical center equipment and systems. Leakage of RF energy between floors is not acceptable. The Contractor shall provide and install 73 door controllers including related hardware at locations shown in drawings included in Appendix A. Individual door installations shall include adequate Low Frequency (LF) coverage to detect a resident s tag. Door installations shall also include audible and visual alarms and a password-enabled keypad used to both by-pass door and silence alarms. Individual door controller settings such as schedules, users and event logs shall be configurable from system work stations and from a wireless tablet or other smart device. The Contractor shall provide and install exciters and gateways necessary to cover resident-accessible areas in Buildings 50, 51 and 71, as indicated in drawings included in Appendix A. Resident tags shall be locatable to within twenty-five (25) feet of its location. All building areas shall be included within assigned geo-boundaries with associated textual descriptions. These locations and descriptions shall be used to identify resident tag location at system work stations. Individual resident tags shall be minimally sized and be programmable to a unique user. Tags shall resist cutting and have a three (3)-year battery life. The system shall include a means to check battery life in tags. The contractor shall provide nine (9) system computer work stations at locations listed below. Building 50- Ground South Nurse Station Building 50- 1 North Nurse Station Building 50- 1 South Nurse Station Building 51- 1A PCC Office Building 51-1A101 VA Security Building 51- 2A Nurse Station Building 51- 2B Nurse Station Building 51- 3A Nurse Station Building 51- 3B Nurse Station The system shall provide visual and audible alarm notifications both locally and at the resident s assigned nurse station when a resident enters predefined areas or zones. The system shall integrate with the buildings elevators to restrict residents from leaving designated areas. Elevator access points shall include a password-enabled keypad to allow elevator operation while a tag is present. The system shall provide an alarm notification when a resident exits buildings 51 and 71 and travels in excess of 35 feet. The system shall be expandable to provide additional coverage. The Contractor shall provide and install all: Plenum CAT 6e cabling. All cables are to be labeled. Head end equipment power supplies, server and software Controllers, keypads, door contacts and antennas Associated hardware, mounting equipment and connectors The Contractor shall program and test each door, area and zone. The Contractor shall supply complete documentation of system infrastructure to correspond to as-built system components and cabling. The Contractor shall provide a minimum of 16 hours of system training for VAPHS nursing staff and eight hours of training for VAPHS Facilities Maintenance and Engineering staff. WORKING HOURS If Contractor is required to be onsite, it must be between the hours of 8:00 A.M. EST 4:00 P.M. EST on Monday Friday (EXCLUDING FEDERAL HOLIDAYS). If one of the planned days were to overlap onto a holiday, it is on the Contractor to reschedule another day/time with the COR, at no additional cost to the Government. INFECTION CONTROL AND SAFETY REQUIREMENTS The Contractor shall adhere to all OSHA, EPA, NFPA Life Safety Codes, and all other regulatory requirements contained in VAPHS Medical Center Requirements (MCR), Sec. 01 01 10. VAPHS MCR outlines general safety, confined space, dust control, permits, hazardous materials handling, environmental protection and other safety and health requirements. In performance of this contract, the Contractor shall follow VAPHS safety policies and standards for safe work practices and take such safety precautions as the VAPHS Safety Officer or designee may determine to be reasonably necessary to protect the lives and health of occupants of the building. The Contractor shall comply with VAPHS smoking policy, which designates all interior space as non-smoking areas. Patient, employee, visitor, and Contractor personnel safety best practices shall be adhered to at all times. The Contractor is responsible for the safety and health of his/her employees. The Contractor shall comply with all applicable OSHA safety and health standards. The Contractor shall replace all safety guards, equipment, devices, etc., removed during service or repair immediately after completion of work or when leaving a job unattended. The Contractor shall submit to the Contracting Officer, prior to the start of the contract, the Material Safety Data Sheets (MSDS) for all potentially hazardous materials (lubricants, cleaners, working fluids, etc.) to be used in the facility during performance of the contract, and will not use in the facility, any materials which have not been cleared in advance with the VAPHS. MSDS for new chemicals shall be furnished concurrently with the arrival of the chemical on site. The Contractor shall maintain a copy of all MSDS at the chemical storage site in a location accessible to VAPHS personnel to assure compliance with all laws and requirements regarding the Right to Know law. The Contractor is responsible for identifying, providing and maintaining all personal protective equipment (PPE) required to perform the duties outlined in the contract. Additionally, the Contractor is responsible for identifying and adhering to all applicable safety program guidelines (lockout/tag out, confined space entry, universal precautions, etc.) required to perform the work. Contractor is responsible for providing and documenting any and all required safety training and proper use of PPE to their employees. Training documentation will be provided to the COR upon request. The Contractor shall obtain a Hot Work Permit from the VAPHS Safety Office whenever soldering, welding, using a cutting torch, or other open flame, spark, or heat producing equipment is required. The Contractor is required to follow all requirements outlined for the issuance of the Hot Work Permit. The Contractor shall be notified of any non-compliance with the provisions of the contract. The Contractor shall, after receipt of such notice, immediately correct the condition and notify the COR/contracting officer in writing that the condition has been corrected. If, in the opinion of the VAPHS Safety Officer or designee, the compliance condition is considered to be life threatening, he/she shall instruct the Contractor to stop work until the condition has been corrected. If the Contractor fails or refuses to comply promptly, the contracting officer may issue an order halting all or any part of the work, and Contractor may be held in default. The Contractor will bear all costs associated with a stoppage of work or time spent correcting any safety hazards. VHA HEALTHCARE DIRECTIVE Flu Vaccination Program - VHA Directive 1192 requires all health care personnel (HCP) to participate in the seasonal influenza prevention program and outlines the key implementation steps. Health care personnel is defined in VHA Directive 1192 as all VA licensed and unlicensed, clinical and administrative, paid and unpaid, full- and part-time employees, intermittent employees, fee basis employees, VA contractors, students, researchers, volunteers, and trainees who work in VHA locations. HCP covered by the policy are expected to receive annual influenza vaccination. Those HCP unable or unwilling to be vaccinated are required to wear a face mask throughout the influenza season. Masks are available at entrances throughout the medical center. It is the responsibility of the contractor to ensure that all contract staff are compliant with the requirements outlined in VHA Directive 1192. The contractor shall maintain the following documentation: Documentation of vaccination, e.g., signed record of immunization from a health care provider or pharmacy, or a copy of medical records documenting the vaccination. Completed Health Care Personnel Influenza Vaccination Form (Attachment B of VHA Directive 1192) if unwilling or unable to receive the vaccine. The contractor is required to submit annual certification to the Contracting Officer s Representative (COR) that all contract staff performing services at VA facilities are in compliance with VHA Directive 1192. Standard Personnel Testing/Infection Control The Contractor shall provide proof of the following tests for their staff within five (5) calendar days after contract award and prior to the first duty shift to the COR and Contracting Officer. Tests shall be current within the past year. TUBERCULOSIS TESTING: Contractor shall provide proof of a negative reaction to PPD testing for all Contractor staff. A negative chest radiographic report for active tuberculosis shall be provided in cases of positive PPD results. The PPD test shall be repeated annually. RUBELLA TESTING: Contractor shall provide proof of immunization for all Contractors staff for measles, mumps, rubella or a rubella titer of 1.8 or greater. If the titer is less than 1.8, a rubella immunization shall be administered with follow-up documentation to the COR OSHA REGULATION CONCERNING OCCUPATIONAL EXPOSURE TO BLOODBORNE PATHOGENS; Contractors shall provide generic self-study training for all Contractors staff; provide their own Hepatitis B vaccination series at no cost to the VA if they elect to receive it; maintain an exposure determination and control plan; maintain required records; and ensure the proper follow-up evaluation is provided following and exposure incident VA Pittsburgh shall notify the Contractor of any significant communicable disease exposures as appropriate. Contractors shall adhere to current CDC/HICPAC Guidelines for Infection Control in healthcare personnel (as published in American Journal for Infection Control- AJIC 1998; 26:289-354. CONTRACTOR PERSONNEL SECURITY REQUIREMENTS: All contractor employees and subcontractor employees requiring unescorted access to VA facilities and/or access to VA Technology resources (network and/or protected data) must complete a Special Agreement Check (SAC) investigation conducted by the FBI National Criminal History Check (NCHC). The following forms are required for a SAC: Fingerprints and OF306 Declaration For Federal Employment. The employee must be fingerprinted as part of the investigation. Electronic fingerprinting can be performed at the VA Pittsburgh Medical Center and will be coordinated through the COR and Human Resources Office. The Contractor shall bear the expense of the background investigation(s), regardless of the final adjudication determination. A Bill of Collections shall be generated by the VA after final adjudication determination has been received. ACCESS TO VA INFORMATION AND VA INFORMATION SYSTEMS A contractor/subcontractor shall request logical (technical) or physical access to VA information and VA information systems for their employees, subcontractors, and affiliates only to the extent necessary to perform the services specified in the contract, agreement, or task order. All contractors, subcontractors, and third-party servicers and associates working with VA information are subject to the same investigative requirements as those of VA appointees or employees who have access to the same types of information. The level and process of background security investigations for contractors must be in accordance with VA Directive and Handbook 0710, Personnel Suitability and Security Program. The Office for Operations, Security, and Preparedness is responsible for these policies and procedures. The contractor or subcontractor must notify the Contracting Officer immediately when an employee working on a VA system or with access to VA information is reassigned or leaves the contractor or subcontractor s employ. The Contracting Officer must also be notified immediately by the contractor or subcontractor prior to an unfriendly termination. VA INFORMATION CUSTODIAL LANGUAGE Information made available to the contractor or subcontractor by VA for the performance or administration of this contract or information developed by the contractor/subcontractor in performance or administration of the contract shall be used only for those purposes and shall not be used in any other way without the prior written agreement of the VA. This clause expressly limits the contractor/subcontractor's rights to use data as described in Rights in Data - General, FAR 52.227-14(d) (1). SECURITY INCIDENT INVESTIGATION The term security incident means an event that has, or could have, resulted in unauthorized access to, loss or damage to VA assets, or sensitive information, or an action that breaches VA security procedures. The contractor/subcontractor shall immediately notify the COTR and simultaneously, the designated ISO and Privacy Officer for the contract of any known or suspected security/privacy incidents, or any unauthorized disclosure of sensitive information, including that contained in system(s) to which the contractor/subcontractor has access. LIQUIDATED DAMAGES FOR DATA BREACH Consistent with the requirements of 38 U.S.C. §5725, a contract may require access to sensitive personal information. If so, the contractor is liable to VA for liquidated damages in the event of a data breach or privacy incident involving any SPI the contractor/subcontractor processes or maintains under this contract. Based on the determinations of the independent risk analysis, the contractor shall be responsible for paying to the VA liquidated damages in the amount of $37.50 per affected individual to cover the cost of providing credit protection services to affected individuals consisting of the following: (1) Notification; (2) One year of credit monitoring services consisting of automatic daily monitoring of at least 3 relevant credit bureau reports; (3) Data breach analysis; (4) Fraud resolution services, including writing dispute letters, initiating fraud alerts and credit freezes, to assist affected individuals to bring matters to resolution; (5) One year of identity theft insurance with $20,000.00 coverage at $0 deductible; and (6) Necessary legal expenses the subjects may incur to repair falsified or damaged credit records, histories, or financial affairs. TRAINING All contractor employees and subcontractor employees requiring access to VA information and VA information systems shall complete the following before being granted access to VA information and its systems: (1) Sign and acknowledge (either manually or electronically) understanding of and responsibilities for compliance with the Contractor Rules of Behavior, Appendix E relating to access to VA information and information systems; (2) Successfully complete the VA Cyber Security Awareness and Rules of Behavior training and annually complete required security training; (3) Successfully complete the appropriate VA privacy training and annually complete required privacy training; and (4) Successfully complete any additional cyber security or privacy training, as required for VA personnel with equivalent information system access [to be defined by the VA program official and provided to the contracting officer for inclusion in the solicitation document e.g., any role-based information security training required in accordance with NIST Special Publication 800-16, Information Technology Security Training Requirements.] The contractor shall provide to the contracting officer and/or the COTR a copy of the training certificates and certification of signing the Contractor Rules of Behavior for each applicable employee within 1 week of the initiation of the contract and annually thereafter, as required. Failure to complete the mandatory annual training and sign the Rules of Behavior annually, within the timeframe required, is grounds for suspension or termination of all physical or electronic access privileges and removal from work on the contract until such time as the training and documents are complete. CONTRACTOR RULES OF BEHAVIOR: This User Agreement contains rights and authorizations regarding my access to and use of any information assets or resources associated with my performance of services under the contract terms with the Department of Veterans Affairs (VA). This User Agreement covers my access to all VA data whether electronic or hard copy ("Data"), VA information systems and resources ("Systems"), and VA sites ("Sites"). This User Agreement incorporates Rules of Behavior for using VA, and other information systems and resources under the contract. GENERAL TERMS AND CONDITIONS FOR ALL ACTIONS AND ACTIVITIES UNDER THE CONTRACT: I understand and agree that I have no reasonable expectation of privacy in accessing or using any VA, or other Federal Government information systems. I consent to reviews and actions by the Office of Information & Technology (OI&T) staff designated and authorized by the VA Chief Information Officer (CIO) and to the VA OIG regarding my access to and use of any information assets or resources associated with my performance of services under the contract terms with the VA. These actions may include monitoring, recording, copying, inspecting, restricting access, blocking, tracking, and disclosing to all authorized OI&T, VA, and law enforcement personnel as directed by the VA CIO without my prior consent or notification. I consent to reviews and actions by authorized VA systems administrators and Information Security Officers solely for protection of the VA infrastructure, including, but not limited to monitoring, recording, auditing, inspecting, investigating, restricting access, blocking, tracking, disclosing to authorized personnel, or any other authorized actions by all authorized OI&T, VA, and law enforcement personnel. I understand and accept that unauthorized attempts or acts to access, upload, change, or delete information on Federal Government systems; modify Federal government systems; deny access to Federal government systems; accrue resources for unauthorized use on Federal government systems; or otherwise misuse Federal government systems or resources are prohibited. I understand that such unauthorized attempts or acts are subject to action that may result in criminal, civil, or administrative penalties. This includes penalties for violations of Federal laws including, but not limited to, 18 U.S.C. §1030 (fraud and related activity in connection with computers) and 18 U.S.C. §2701 (unlawful access to stored communications). I agree that OI&T staff, in the course of obtaining access to information or systems on my behalf for performance under the contract, may provide information about me including, but not limited to, appropriate unique personal identifiers such as date of birth and social security number to other system administrators, Information Security Officers (ISOs), or other authorized staff without further notifying me or obtaining additional written or verbal permission from me. I understand I must comply with VA s security and data privacy directives and handbooks. I understand that copies of those directives and handbooks can be obtained from the Contracting Officer's Technical Representative (COTR). If the contractor believes the policies and guidance provided by the COTR is a material unilateral change to the contract, the contractor must elevate such concerns to the Contracting Officer for resolution. I will report suspected or identified information security/privacy incidents to the COTR and to the local ISO or Privacy Officer as appropriate. GENERAL RULES OF BEHAVIOR Rules of Behavior are part of a comprehensive program to provide complete information security. These rules establish standards of behavior in recognition of the fact that knowledgeable users are the foundation of a successful security program. Users must understand that taking personal responsibility for the security of their computer and the information it contains is an essential part of their job. The following rules apply to all VA contractors. I agree to: (1) Follow established procedures for requesting, accessing, and closing user accounts and access. I will not request or obtain access beyond what is normally granted to users or by what is outlined in the contract. (2) Use only systems, software, databases, and data which I am authorized to use, including any copyright restrictions. (3) I will not use other equipment (OE) (non-contractor owned) for the storage, transfer, or processing of VA sensitive information without a VA CIO approved waiver, unless it has been reviewed and approved by local management and is included in the language of the contract. If authorized to use OE IT equipment. I must ensure that the system meets all applicable 6500 Handbook requirements for OE. (4) Not use my position of trust and access rights to exploit system controls or access information for any reason other than in the performance of the contract. (5) Not attempt to override or disable security, technical, or management controls unless expressly permitted to do so as an explicit requirement under the contract or at the direction of the COR or ISO. If I am allowed or required to have a local administrator account on a government-owned computer, that local administrative account does not confer me unrestricted access or use, nor the authority to bypass security or other controls except as expressly permitted by the VA CIO or CIO's designee. (6) Contractors use of systems, information, or sites is strictly limited to fulfill the terms of the contract. I understand no personal use is authorized. I will only use other Federal government information systems as expressly authorized by the terms of those systems. I accept that the restrictions under ethics regulations and criminal law still apply. (7) Grant access to systems and information only to those who have an official need to know. (8) Protect passwords from access by other individuals. (9) Create and change passwords in accordance with VA Handbook 6500 on systems and any devices protecting VA information as well as the rules of behavior and security settings for the particular system in question. (10) Protect information and systems from unauthorized disclosure, use, modification, or destruction. I will only use encryption that is FIPS 140-2 validated to safeguard VA sensitive information, both safeguarding VA sensitive information in storage and in transit regarding my access to and use of any information assets or resources associated with my performance of services under the contract terms with the VA. (11) Follow VA Handbook 6500.1, Electronic Media Sanitization to protect VA information. I will contact the COR for policies and guidance on complying with this requirement and will follow the COR s orders. (12) Ensure that the COR has previously approved VA information for public dissemination, including e-mail communications outside of the VA as appropriate. I will not make any unauthorized disclosure of any VA sensitive information through the use of any means of communication including but not limited to e-mail, instant messaging, online chat, and web bulletin boards or logs. (13) Not host, set up, administer, or run an Internet server related to my access to and use of any information assets or resources associated with my performance of services under the contract terms with the VA unless explicitly authorized under the contract or in writing by the COR. (14) Protect government property from theft, destruction, or misuse. I will follow VA directives and handbooks on handling Federal government IT equipment, information, and systems. I will not take VA sensitive information from the workplace without authorization from the COR. (15) Only use anti-virus software, antispyware, and firewall/intrusion detection software authorized by VA. I will contact the COR for policies and guidance on complying with this requirement and will follow the COR's orders regarding my access to and use of any information assets or resources associated with my performance of services under the contract terms with VA. (16) Not disable or degrade the standard anti-virus software, antispyware, and/or firewall/intrusion detection software on the computer I use to access and use information assets or resources associated with my performance of services under the contract terms with VA. I will report anti-virus, antispyware, firewall or intrusion detection software errors, or significant alert messages to the COR. (17) Understand that restoration of service of any VA system is a concern of all users of the system. (18) Complete required information security and privacy training, and complete required training for the particular systems to which I require access. ADDITIONAL CONDITIONS FOR USE OF NON- VA INFORMATION TECHNOLOGY RESOURCES When required to complete work under the contract, I will directly connect to the VA network whenever possible. If a direct connection to the VA network is not possible, then I will use VA approved remote access software and services. Remote access to non-public VA information technology resources is prohibited from publicly-available IT computers, such as remotely connecting to the internal VA network from computers in a public library. I will not have both a VA network line and any kind of non-VA network line including a wireless network card, modem with phone line, or other network device physically connected to my computer at the same time, unless the dual connection is explicitly authorized by the COR. I understand that I may not obviate or evade my responsibility to adhere to VA security requirements by subcontracting any work under any given contract or agreement with VA, and that any subcontractor(s) I engage shall likewise be bound by the same security requirements and penalties for violating the same. STATEMENT ON LITIGATION This User Agreement does not and should not be relied upon to create any other right or benefit, substantive or procedural, enforceable by law, by a party to litigation with the United States Government. ***NEXT SECTION SHALL BE SIGNED AT THE TIME OF AWARD BY THE CONTRACTOR*** ACKNOWLEDGEMENT AND ACCEPTANCE I acknowledge receipt of this User Agreement. I understand and accept all terms and conditions of this User Agreement, and I will comply with the terms and conditions of this agreement and any additional VA warning banners, directives, handbooks, notices, or directions regarding access to or use of information systems or information. The terms and conditions of this document do not supersede the terms and conditions of the signatory s employer and VA. __________________________________ ________________________ Print or type your full name Signature __________________________________ ________________________ Last 4 digits of SSN Date __________________________________ _________________________ Office Phone Position Title __________________________________ Contractor s Company Name Please complete and return the original signed document to the COR within the timeframe stated in the terms of the contract. ADDITIONAL SECURITY REQUIREMENT HIPAA-Focused Training" prior to the performance of the contract and annually thereafter. Training must be completed in VA s TMS system (https://www.tms.va.gov/) or via hard copy training documents. POINT-OF-CONTACT COR: TBA Phone: TBA Email: TBA