Inactive

On behalf of the Memphis VA Medical Center, Network Contracting Office (NCO) 9 is issuing this sources sought notice (SSN) as a means of conducting market research to identify parties having an intere... On behalf of the Memphis VA Medical Center, Network Contracting Office (NCO) 9 is issuing this sources sought notice (SSN) as a means of conducting market research to identify parties having an interest in and the resources to support this requirement for an analog paging system. The result of this market research will contribute to determining the method of procurement. The applicable North American Industry Classification System (NAICS) code assigned to this procurement is 334290 Other Communications Equipment Manufacturing. THERE IS NO SOLICITATION AT THIS TIME. This request for capability information does not constitute a request for bids, proposals, or quotes; submission of any information in response to this market survey is purely voluntary; and the government assumes no financial responsibility for any costs incurred. If your organization has the potential capacity to perform these services, please provide the following information: Organization name, address, point of contact, email address, web site address, and telephone number. Business size: small, small disadvantaged, woman-owned, Hub Zone, serviced-disabled veteran-owned small business (SDVOSB), veteran owned small business (VOSB), large business, etc. Business type under NAICS 334290, which contains a size standard of 750 Employees, Commercial And Government Entity (CAGE) Code and Unique Entity Identification (UEI) Number. Under which NAICS code does your company usually provide the requirements described in the Statement of Work (SOW) - Please provide rationale for your answer if different from NAICS 334290. Tailored capability statements addressing the particulars of this effort, with appropriate documentation supporting claims of organizational, and staff capability. Please provide the following information as an attachment to your response: Identify any other companies owned (wholly or in-part) by the owners of this business who provide goods or services under the same or a related NAICS codes. Identify any other companies owned (wholly or in-part) by the owners of this business who provide goods or services that are registered under the same or a related NAICS code with the Center for Veterans Enterprise (CVE); Provide the certification type (SDVOSB/VOSB), Federal Identification Number, and state of incorporation for each. Do you plan on responding to a solicitation for this requirement with a Joint Venture utilizing multiple owned companies as majority or non-majority owner? Yes ___No ___ If yes, please identify which companies are considering a Joint Venture and the ownership of each company. Response to this SSN shall not exceed 10 pages and should include all of the foremost mentioned information. In addition, all submissions should be provided electronically in a Microsoft Word or Adobe Portable Document Format (PDF). The government will evaluate market information to ascertain potential market capacity to: Provide services consistent in scope and scale with those described in this notice and otherwise anticipated. Secure and apply the full range of corporate financial, human capital, and technical resources required to successfully perform similar requirements. Implement a successful plan that includes: compliance with program schedules; cost containment; meeting and tracking performance. Provide services under a firm-fixed-price contract. NOTE: Respondent claiming SDVOSB and VOSB status shall be registered, and Center for Veterans Enterprise (CVE) verified, in VetBiz Registry www.vetbiz.gov. Based on the responses to this SSN/market research, this requirement may be set-aside for SDVOSBs, VOSBs, small businesses, procured through full and open competition, or sole sourced. Submission Instructions: Interested parties who consider themselves qualified to perform the services are invited to submit a response to this SSN by 1600 CT, August 10, 2022. All responses under this SSN must be emailed to Martha.Warren1@va.gov. Telephone inquiries will not be accepted or acknowledged, and no feedback or evaluations will be provided to companies regarding their submissions. SAM: Interested parties shall be register in the System for Award Management (SAM) as prescribed in FAR Clause 52.232-33. SAM information can be obtained by accessing the internet at www.sam.gov or by calling 1-866-606-8220. Disclaimer and Important Notes. This notice does not obligate the government to award a contract or otherwise pay for the information provided in response to this SSN. The government reserves the right to use information provided by respondents for any purpose deemed necessary and legally appropriate. Any organization responding to this notice should ensure that its response is complete and sufficiently detailed to allow the government to determine the organization s qualifications to perform the work. Respondents are advised that the government is under no obligation to acknowledge receipt of the information received or provide feedback to respondents with respect to any information submitted. After a review of the responses received, a pre-solicitation synopsis and solicitation may be published in Federal Business Opportunities (FBO). However, responses to this notice shall not be considered adequate responses to a solicitation. Confidentiality. No proprietary, classified, confidential, or sensitive information should be included in your response. The government reserves the right to use any non-proprietary technical information in any resultant solicitation(s). STATEMENT OF WORK for Paging System Memphis VA Medical Center, Memphis, TN 38104 SCOPE OF WORK This requirement is to have contractor furnish a New Analog Paging System that works with Memphis VA Medical Center s existing pagers. Deliver to Memphis Veteran Administration Medical Center (VAMC), 1030 Jefferson Ave, Memphis TN, 38104-2127. WORK REQUIREMENTS: CDAN High Powered Paging Transmitter Zetron 2000 Encoder Antenna System Installation /Project Management INSTRUCTIONS: Contractor shall provide supervision to ensure proper procedures are used. Contractor and their staff are not permitted to take any pictures, videos or drawings of any type. Taking of photographs/videos are prohibited while on VAMC premises. The contractor s staff will check in with the VAMC police to receive a VAMC work authorization badge. The badge shall be worn facing forward and above the waistline. The contractors staff are required to wear the VAMC issued badge at all times. The contractor must ensure each contract employee self-enrolls for a profile on the VA TMS by visiting https://www.tms.va.gov/SecureAuth35/. Once there, employees should follow the steps to create a profile, launch the mandatory training, and complete the content prior to their next day at VAMC. Upon completion by all employees, the contractor shall provide the Contracting Officer Representative (COR) with each employee s printed certificate of completion from the TMS. This certificate displays the employee s TMS User ID. The TMS training is only good for one year and the contractor is responsible to ensure their staff or persons who will be working on VAMC property are current. PROJECT DOCUMENTATION Contractor shall provide VAMC disposal documentation. This information will be compiled and organized for submission as part of the closeout package. Copies of the following: to be submitted to the Contracting Officer s Technical Representative (COTR/RE). Project Superintendent s Training Information Daily Reports Environmental Monitoring Waste Transport and Disposal Manifests SUPPORTING INFORMATION Contractor shall furnish all materials, labor, equipment to perform the job. Contractor shall, at all times, take any and all steps necessary for maintenance and preservation of all Government-furnished property. The Contractor shall comply with all reasonable requests of the Contracting Officer to enclose, or specifically protect, Government-furnished property. Contractor s employees should be knowledgeable of standards associated with this type of work. At all times during the performance, the Contractor s Superintendent (if applicable) shall be available by cellular phone. Prior to beginning any work, the Contractor shall supply the COTR with the telephone number for the Superintendent. The Contractor s Competent Person that meets OSHA training guidelines, is capable of making decisions and acting on behalf of the Contractor, shall be physically located on site at all times during performance of the contract. If the Contractor s Competent Person is absent from the job site for an extended period of time, the COTR may send all Contractor/sub-contractor employees off the job. Contractor shall identify which employees will be working under the awarded contract. Contractor personnel shall include employees, sub-contractors, subcontractor employees, suppliers and delivery personnel entering the VAMC. This does not apply to suppliers and delivery personnel making deliveries to the VAMC warehouse dock only. Those employees shall bring photo ID to obtain a VAMC Contractor identification badge that shall be worn above the belt at all times while on VAMC property. Contractor s employees shall return all I.D. badges to designated personnel at time designated in the task order. The COTR is responsible for the inspection of the work called for in this job. The COTR will be identified in the task order by name, telephone number and location. Inspections made by the COTR are for the sole benefit of the Government and do not relieve the Contractor of any quality control responsibilities. The Safety Manger is responsible for safety inspections of all contract operations. The Safety Manager will be identified in the task order by name, phone number and location. Contract drawings (if applicable) shall indicate the extent and location of work. If any departure from the contract drawings is deemed necessary by the Contractor, the details of such departure and the reasons therefore shall be submitted to the Contracting Officer for approval as soon as practical. No such departure shall be made without proper written permission of the Contracting Officer. The Contractor is responsible for all information and requirements in drawings and specifications that pertain to the task order. The Contractor shall visit the job site to thoroughly familiarize himself with all the details of the work and working conditions. The Contractor shall also verify all dimensions in the field and shall advise the Contracting Officer of any discrepancy before performing any work. The Contractor shall be specifically responsible for the coordination and proper relation of his work to the building, structure, phasing and ensure the safety of employees and workmen. The Contractor shall not allow smoking in any building. The Contractor shall ensure employees smoke only in designated outdoor areas, 50 feet away from buildings. The Contractor shall not park on grassy areas unless approved by the COTR, and the Contractor agrees to restore areas back to VAMC standards. Drivers should be particularly concerned with pedestrian traffic. Yield to pedestrians in crosswalks. Posted speed limits and all other traffic controls are to be observed by operators at all times. Seat belt use is mandatory on the VAMC grounds. VA HANDBOOK 6500.6 MARCH 12, 2010, APPENDIX C C-2 VA INFORMATION CUSTODIAL LANGUAGE a. Information made available to the contractor or subcontractor by VAMC for the performance or administration of this contract or information developed by the contractor/subcontractor in performance or administration of the contract shall be used only for those purposes and shall not be used in any other way without the prior written agreement of the VA. This clause expressly limits the contractor / subcontractor's rights to use data as described in Rights in Data - General, FAR 52.227-14(d) (1). b. VAMC information should not be co-mingled, if possible, with any other data on the contractors/subcontractor s information systems or media storage systems to ensure VAMC requirements related to data protection and media sanitization can be met. If co-mingling must be allowed to meet the requirements of the business need, the contractor must ensure that VAMC s information is returned to the VAMC or destroyed in accordance with VAMC s sanitization requirements. VAMC reserves the right to conduct onsite inspections of contractor and subcontractor IT resources to ensure data security controls, separation of data and job duties, and destruction/media sanitization procedures follow VAMC directive requirements. c. Prior to termination or completion of this contract, contractor/subcontractor must not destroy information received from VAMC or gathered/created by the contractor during performing this contract without prior written approval by the VAMC. Any data destruction done on behalf of VA by a contractor/subcontractor must be done in accordance with National Archives and Records Administration (NARA) requirements as outlined in VA Directive 6300, Records and Information Management and its Handbook 6300.1 Records Management Procedures, applicable VA Records Control Schedules, and VA Handbook 6500.1, Electronic Media Sanitization. Self-certification by the contractor that the data destruction requirements above have been met must be sent to the VA Contracting Officer within 30 days of termination of the contract. d. The contractor/subcontractor must receive, gather, store, back up, maintain, use, disclose and dispose of VA information only in compliance with the terms of the contract and applicable Federal and VAMC information confidentiality and security laws, regulations and policies. If Federal or VAMC information confidentiality and security laws, regulations and policies become applicable to the VAMC information or information systems after execution of the contract, or if NIST issues or updates applicable FIPS or Special Publications (SP) after execution of this contract, the parties agree to negotiate in good faith to implement the information confidentiality and security laws, regulations and policies in this contract. e. The contractor/subcontractor shall not make copies of VA information except as authorized and necessary to perform the terms of the agreement or to preserve electronic information stored on contractor/subcontractor electronic storage media for restoration in case any electronic equipment or data used by the contractor/subcontractor needs to be restored to an operating state. If copies are made for restoration purposes, after the restoration is complete, the copies must be appropriately destroyed. VA Records Management: Citations to pertinent laws, codes and regulations such as 44 U.S.C. Chapter 21, 29, 31 and 33; Freedom of Information Act (5 U.S.C. 552); Privacy Act (5 U.S.C. 552a); 36 CFR Part 1222 and Part 1228. Contractor shall treat all deliverables under the contract as the property of the U.S. Government for which the Government Agency shall have unlimited rights to use, dispose of, or disclose such data contained therein as it determines to be in the public interest. Contractor shall not create or maintain any records that are not specifically tied to or authorized by the contract using Government IT equipment and/or Government records. Contractor shall not retain, use, sell, or disseminate copies of any deliverable that contains information covered by the Privacy Act of 1974 or that which is generally protected by the Freedom of Information Act. Contractor shall not create or maintain any records containing any Government Agency records that are not specifically tied to or authorized by the contract. The Government Agency owns the rights to all data/records produced as part of this contract. The Government Agency owns the rights to all electronic information (electronic data, electronic information systems, electronic databases, etc.) and all supporting documentation created as part of this contract. Contractor must deliver enough technical documentation with all data deliverables to permit the agency to use the data. Contractor agrees to comply with Federal and Agency records management policies, including those policies associated with the safeguarding of records covered by the Privacy Act of 1974. These policies include the preservation of all records created or received regardless of format [paper, electronic, etc.] or mode of transmission [e-mail, fax, etc.] or state of completion [draft, final, etc.]. No disposition of documents will be allowed without the prior written consent of the Contracting Officer. The Agency and its contractors are responsible for preventing the alienation or unauthorized destruction of records, including all forms of mutilation. Willful and unlawful destruction, damage or alienation of Federal records is subject to the fines and penalties imposed by 18 U.S.C. 2701. Records may not be removed from the legal custody of the Agency or destroyed without regard to the provisions of the agency records schedules. Contractor is required to obtain the Contracting Officer's approval prior to engaging in any contractual relationship (sub-contractor) in support of this contract requiring the disclosure of information, documentary material and/or records generated under or relating to this contract. The Contractor (and any sub-contractor) is required to abide by Government and Agency guidance for protecting sensitive and proprietary information. SECURITY INCIDENT INVESTIGATION a. The term security incident means an event that has, or could have, resulted in unauthorized access to, loss or damage to VAMC assets, or sensitive information, or an action that breaches VAMC security procedures. The contractor/ subcontractor shall immediately notify the COTR and simultaneously, the designated ISO and Privacy Officer for the contract of any known or suspected security/privacy incidents, or any unauthorized disclosure of sensitive information, including that contained in system(s) to which the contractor/ subcontractor has access. b. To the extent known by the contractor/subcontractor, the contractor/ subcontractor s notice to VAMC shall identify the information involved, the circumstances surrounding the incident (including to whom, how, when, and where the VAMC information or assets were placed at risk or compromised), and any other information that the contractor/subcontractor considers relevant. With respect to unsecured protected health information, the business associate is deemed to have discovered a data breach when the business associate knew or should have known of a breach of such information. Upon discovery, the business associate must notify the covered entity of the breach. Notifications need to be made in accordance with the executed business associate agreement. In instances of theft or break-in or other criminal activity, the contractor/subcontractor must concurrently report the incident to the appropriate law enforcement entity (or entities) of jurisdiction, including the VA OIG and Security and Law Enforcement. The contractor, its employees, and its subcontractors and their employees shall cooperate with VA and any law enforcement authority responsible for the investigation and prosecution of any possible criminal law violation(s) associated with any incident. The contractor/subcontractor shall cooperate with VA in any civil litigation to recover VA information, obtain monetary or other compensation from a third party for damages arising from any incident, or obtain injunctive relief against any third party arising from, or related to, the incident. "Liquidated DAMAGES FOR DATA BREACH Consistent with the requirements of 38 U.S.C. §5725, a contract may require access to sensitive personal information. If so, the contractor is liable to VA for liquidated damages in the event of a data breach or privacy incident involving any SPI the contractor/subcontractor processes or maintains under this contract. The contractor/subcontractor shall provide notice to VA of a security incident as set forth in the Security Incident Investigation section above. Upon such notification, VA must secure from a non-Department entity or the VA Office of Inspector General an independent risk analysis of the data breach to determine the level of risk associated with the data breach for the potential misuse of any sensitive personal information involved in the data breach. The term 'data breach' means the loss, theft, or other unauthorized access, or any access other than that incidental to the scope of employment, to data containing sensitive personal information, in electronic or printed form, that results in the potential compromise of the confidentiality or integrity of the data. Contractor shall fully cooperate with the entity performing the risk analysis. Failure to cooperate may be deemed a material breach and grounds for contract termination. Each risk analysis shall address all relevant information concerning the data breach, including the following: Nature of the event (loss, theft, unauthorized access); Description of the event, including: date of occurrence; data elements involved, including any PII, such as full name, social security number, date of birth, home address, account number, disability code; Number of individuals affected or potentially affected; Names of individuals or groups affected or potentially affected; Ease of logical data access to the lost, stolen or improperly accessed data in light of the degree of protection for the data, e.g., unencrypted, plain text; Amount of time the data has been out of VA control; The likelihood that the sensitive personal information will or has been compromised (made accessible to and usable by unauthorized persons); Known misuses of data containing sensitive personal information, if any; Assessment of the potential harm to the affected individuals; Data breach analysis as outlined in 6500.2 Handbook, Management of Security and Privacy Incidents, as appropriate; and Whether credit protection services may assist record subjects in avoiding or mitigating the results of identity theft based on the sensitive personal information that may have been compromised. Based on the determinations of the independent risk analysis, the contractor shall be responsible for paying to the VA liquidated damages in the amount of $37.50 per affected individual to cover the cost of providing credit protection services to affected individuals consisting of the following: Notification; One year of credit monitoring services consisting of automatic daily monitoring of at least 3 relevant credit bureau reports; Data breach analysis; Fraud resolution services, including writing dispute letters, initiating fraud alerts and credit freezes, to assist affected individuals to bring matters to resolution; One year of identity theft insurance with $20,000.00 coverage at $0 deductible; and Necessary legal expenses the subjects may incur to repair falsified or damaged credit records, histories, or financial affairs. TRAINING In order for you to engage in your work at VA, you are required to ensure all contractors who will be working on the contract complete a mandatory training program titled VA Privacy Training for Personnel without Access to VA Computer Systems or VA Sensitive Information (VA20939). This training is offered through the VA Talent Management System (TMS), a system that offers web-based training to VA employees and its partners. Contractor employee will self-enroll for a TMS training profile on the VA TMS by visiting https://www.tms.va.gov/SecureAuth35/. e Authorization requirements do not apply, and that a Security Accreditation Package is not required.