Inactive

The Department of Veterans Affairs, VA Medical Center, Puerto Rico intends to negotiate a sole source contract with Olympus Latin America, Inc., 6100 Blue Lagoon Dr. #390, Miami, Florida 33126 under t... The Department of Veterans Affairs, VA Medical Center, Puerto Rico intends to negotiate a sole source contract with Olympus Latin America, Inc., 6100 Blue Lagoon Dr. #390, Miami, Florida 33126 under the authority of FAR 6.302-1 (Only one responsible source and no other supplies or services will satisfy agency requirements). A justification for other than full and open competition has been prepared in support of this acquisition. This action is to procure preventive maintenance and corrective maintenance for Olympus Fiber Optical GI Instruments at VA Caribbean Healthcare, San Juan, Puerto Rico 0092.THIS NOTICE IS NOT A REQUEST FOR COMPETITIVE PROPOSALS. No solicitation package is available. Interested persons may identify their capability to respond to these requirements by 1:00PM America/Puerto Rico, 10 June 2019. A determination by the Government not to compete this proposed contract action based on responses to this notice is solely within the discretion of the Government. Information received will be considered solely for determining whether to conduct a competitive procurement. Inquiries will only be accepted in writing by e-mail at Mary.Gugliano@med.va.gov. or by facsimile at 787-781-8721. See statement of work below. Statement of Work Preventive & Corrective Maintenance to Olympus Endoscopes Systems Statement of Work: Provide all labor, equipment and materials for the preventive & corrective maintenance of the Olympus Endoscopes and Bronchoscopes Systems hardware and software included under schedule A (item 1.2) herein located in San Juan VA Caribbean Healthcare System. in accordance with the following conditions: 1.1.1 . Perform preventive and corrective maintenance services in accordance to manufacturer's service manual instructions and procedures. 1.1-2. Thorough inspection of equipment's to detect defective components capable of adversely affecting system performance. 1.1.3. Report and Replace of parts found defective during inspections. Contractor will repair or replace the system component with equal or superior functioning equipment or software with respect to any part of the system that is not properly functioning 1.1.4. Cleaning, calibration and adjustment of components to maintain equipment within manufacturer's specifications, level of performance and accuracy. 1.1.5. Operational tests after preventive maintenance service to assure level of performance is within specifications. 1.1.6. Contractor shall perform preventive & corrective maintenance in accordance with manufacturer's recommendations and procedures. If updates to manufacturer's requirements and/or recommendations have occurred, contractor must assure compliance with these requirements. 1.1.7. Contractor will provide and install any software update, patches and enhancement intended to update system software version or correct software errors and deficiencies. 1.1.8. Contractor must supply all labor, parts, test instruments, tools, hardware and service software keys provided by Olympus Uptime Center required to perform alt the preventive maintenance required. 1.1.9. On-site service will be offered between 7AM and end by 3PM, except when a change in hours is requested by the VACHS. If service is to be continued after 3PM, prior notification needs to be done to Biomedical staff. 1.1.10. Service personnel shall report to the Biomedical Engineering when reporting on-site for preventive & corrective maintenance. 1.1.1 1. A copy of each service report with a checklist of all tasks performed will be provided to Biomedical staff at the end of the service call. Equipment Olympus Endoscopes Systems 1.3. Safety Requirements 1.3.1. The contractor shall take all safety precautions and safety measurement necessary to protect the fives and health of occupants of the building. 1.4. The C&A requirements do not apply, and that a Security Accreditation Package is not required. 2. Quality Assurance Service Plan 2.1. Competency Requirements 2.1.1. The contractor shall comply with requirements of The Joint Commission Accreditation of Health Care Organizations (TJC). To comply with TJC requirements the contractor shall provide written confirmation that employees are competent to perform the task as described in the statement of work assigned on this contract. This written confirmation shall specify in which areas each contract employees are competent. Also, evidence of factory training of these employees shall be supplied. With No Sensitive Data but Requires Training VA INFORMATION AND INFORMATION SYSTEM SECURITY/PRIVACY LANGUAGE VA INFORMATION CUSTODIAL LANGUAGE: Contractors, contractor personnel, subcontractors, and subcontractor personnel shall be subject to the same Federal laws, regulations, standards, and VA Directives and Handbooks as VA and VA personnel regarding information and information system security. If VA determines that the contractor has violated any of the information confidentiality, privacy, and security provisions of the contract, it shall be enough grounds for VA to withhold payment to the contractor or third party or terminate the contract for default or terminate for cause under Federal Acquisition Regulation (FAR) part 12. A contractor/subcontractor shall request logical (technical) or physical access to VA information and VA information systems for their employees, subcontractors, and affiliates only to the extent necessary to perform the services specified in the contract, agreement, or task order. All contractors, subcontractors, and third-party servicers and associates working with VA information are subject to the same investigative requirements as those of VA appointees or employees who have access to the same types of information. The level and process of background security investigations for contractors must be in accordance with VA Directive and Handbook 0710, Personnel Suitability and Security Program. The Office for Operations, Security, and Preparedness is responsible for these policies and procedure. SECURITY INCIDENT INVESTIGATION: The security incident" means an event that has, or could have, resulted in unauthorized access to, loss or damage to VA assets, or sensitive information, or an action that breaches VA security procedures. The contractor/subcontractor shall immediately notify the COR and simultaneously, the designated ISO and Privacy Officer for the contract of any known or suspected security/pnvacy incidents, or any unauthorized disclosure of sensitive information, including that contained in system(s) to which the contractor/subcontractor has access. To the extent known by the contractor/subcontractor, the contractor/subcontractor's notice to VA shall identify the information involved, the circumstances surrounding the incident (including to whom, how, when, and where the VA information or assets were placed at risk or compromised), and any other information that the contractor/subcontractor considers relevant. With respect to unsecured protected health information, the business associate is deemed to have discovered a data breach when the business associate knew or should have known of a breach of such information. Upon discovery, the business associate must notify the covered entity of the breach. Notifications need to be made in accordance with the executed business associate agreement. In instances of theft or break-in or other criminal activity, the contractor/subcontractor must concurrently report the incident to the appropriate law enforcement entity (or entities) of jurisdiction, including the VA OIG and Security and Law Enforcement. The contractor, its employees, and its subcontractors and their employees shall cooperate with VA and any law enforcement authority responsible for the investigation and prosecution of any possible criminal law violation(s) associated with any incident. The contractor/subcontractor shall cooperate with VA in any civil litigation to recover VA information, obtain monetary or other compensation from a third party for damages arising from any incident, or obtain injunctive relief against any third party arising from, or related to, the incident. LIQUIDATED DAMAGES FOR DATA BREACH: Consistent with the requirements of 38 U.S.C. *5725, a contract may require access to sensitive personal information. If so, the contractor is liable to VA for liquidated damages in the event of a data breach or privacy incident involving any SPI the contractor/subcontractor processes or maintains under this contract. The contractor/subcontractor shall provide notice to VA of a "security incident" as set forth in the Security Incident Investigation section above. Upon such notification, VA must secure from a non-Department entity or the VA Office of Inspector General an independent risk analysis of the data breach to determine the level of risk associated with the data breach for the potential misuse of any sensitive personal information involved in the data breach. The term 'data breach' means the loss, theft, or other unauthorized access, or any access other than that incidental to the scope of employment, to data containing sensitive personal information, in electronic or printed form, that results in the potential compromise of the confidentiality or integrity of the data. Contractor shall fully cooperate with the entity performing the risk analysis. Failure to cooperate may be deemed a material breach and grounds for contract termination. SECURITY CONTROLS COMPLIANCE TESTING: On a periodic basis, VA, including the Office of Inspector General, reserves the right to evaluate any or all the security controls and privacy practices implemented by the contractor under the clauses contained within the contract. With 10 working-days notice, at the request of the government, the contractor must fully cooperate and assist in a government-sponsored security controls assessment at each location wherein VA information is processed or stored, or information systems are developed, operated, maintained, or used on behalf of VA, including those initiated by the Office of Inspector General. The government may conduct a security control assessment on shorter notice (to include unannounced assessments) as determined by VA in the event of a security incident or at any other time. TRAINING: All contractor employees and subcontractor employees requiring access to VA information and VA information systems shall complete VA Privacy and Information Security Awareness and Rules of Behavior Training before being granted access to VA information and its systems. ( I) Sign and acknowledge (either manually or electronically) understanding of and responsibilities for compliance with the Rules of Behavior before being granted access to VA information and its systems. The contractor shall provide to the contracting officer and/or the COR a copy of the training certificates and certification of signing the Rules of Behavior for each applicable employee within I week of the initiation of the contract and annually thereafter, as required. Failure to complete the mandatory annual training and sign the Rules of Behavior annually, within the timeframe required, is grounds for suspension or termination of all physical or electronic access privileges and removal from work on the contract until the training and documents are complete. The Certification and Accreditation (C&A) requirements do not apply and a Security Accreditation Package is not required for this SOW.