Inactive

COMBINED SYNOPSIS/SOLICITATION FOR COMMERCIAL ITEMS General Information Document Type: Combined Solicitation/Synopsis Solicitation Number: 36C25019Q0346_3 Posted Date: 02-07-2019 Original Response Dat... COMBINED SYNOPSIS/SOLICITATION FOR COMMERCIAL ITEMS General Information Document Type: Combined Solicitation/Synopsis Solicitation Number: 36C25019Q0346_3 Posted Date: 02-07-2019 Original Response Date: 02-15-2019 Current Response Date: 02-20-2019 Product or Service Code: 6515 Set Aside (SDVOSB/VOSB): n/a NAICS Code: 339113 Contracting Office Address Department of Veterans Affairs Chalmers P. Wylie Ambulatory Care Center 2780 Airport Dr., Suite 340 Columbus OH 43219 Description This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in Federal Acquisition Regulation (FAR) subpart 12.6, Streamlined Procedures for Evaluation and Solicitation for Commercial Items, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; quotes are being requested, and a written solicitation document will not be issued. This solicitation is a request for quotations (RFQ). The solicitation document and incorporated provisions and clauses are those in effect through Federal Acquisition Circular 2005-101. The associated North American Industrial Classification System (NAICS) code for this procurement is 339113, with a small business size standard of 750 employees. The Chalmers P. Wylie Ambulatory Care Center, 420 N. James Rd, Columbus OH 43219 is seeking to purchase 1 MRI Flex Coil, Training and Extended Warranty. All interested companies shall provide quotes for the following: Supplies Line Item Description Quantity Unit Price Total Price 001 DUEFLEX 1.5T MRI COIL SUITE, GEN2, GE WITH $1,000.00 VA DISCOUNT. LOCAL STOCK NUMBER: DUOFLEX MRI COIL SUITE 1 002 DUOFLEX APPLICATIONS TRAINING LOCAL STOCK NUMBER: TRAINING 1 003 DUOFLEX APPLICATIONS TRAINING LOCAL STOCK NUMBER: TRAINING 1 STATEMENT OF WORK (SOW) Contract Title. MR Instruments Duoflex MRI Flex Coils. Background. The Chalmers P. Wylie ACC GE MRI unit has limited ability to perform specific studies due to the fact it has no Flex Coils. The purchase of the Duoflex Flex Coils would enable the Columbus VA Radiology department to perform certain studies that it is currently unable to and/or would provide much better image quality for hard to image areas. It would also save money in purchasing anatomy specific coils that may not fit, due to being a multipurpose, flexible coil, it can fit a variety of areas. Specific Tasks. Each DuoFLEX suite includes: (1) set of two 24cm coil paddles (1) set of two 10cm coil paddles (1) pre-amp box, positioning aids, and 1-year warranty DuoFLEX Applications Training 8 hours of on-site applications training to optimize MRI system software, DuoFLEX positioning, and areas of clinical utility (includes travel and lodging expenses for MR Instruments clinical specialist). Extended Warranty Program: $5,000/yr. annual fee, includes repair or replacement at no charge, no charge, unlimited telephone support Task 1 - Subtask 1 - Integration Management Control Planning. Provide the technical and functional activities at the required level for integration of all tasks specified within this SOW. Include productivity and management methods such as quality assurance, progress/status reporting and program reviews. Provide the centralized administrative, clerical, documentation and related functions. Subtask 2 - Contract Management. Prepare a Contract Management Plan describing the technical approach, organizational resources and management controls to be employed to meet the cost, performance and schedule requirements throughout Contract execution. Provide a monthly status report monitoring the quality assurance, progress/status reporting and program reviews applied to this contract. VA Information and Information System Security/Privacy Requirements for IT Contracts GENERAL REQUIREMENTS A contractor/subcontractor shall request logical (technical) or physical access to VA information and VA information systems for their employees, subcontractors, and affiliates only to the extent necessary to perform the services specified in the contract, agreement, or task order. Contractors, contractor personnel, subcontractors, and subcontractor personnel shall be subject to the same Federal laws, regulations, standards, and VA Directives and Handbooks as VA and VA personnel regarding information and information system security. Special REQUIREMENTS All contractors, subcontractors, and third-party servicers and associates working with VA information are subject to the same investigative requirements as those of VA appointees or employees who have access to the same types of information. The level and process of background security investigations for contractors must be in accordance with VA Directive and Handbook 0710, Personnel Suitability and Security Program. The Office for Operations, Security, and Preparedness is responsible for these policies and procedures. Access Include Section 3 A of the security language form here: The contractor or subcontractor must notify the Contracting Officer immediately when an employee working on a VA system or with access to VA information is reassigned or leaves the contractor or subcontractor s employ. The Contracting Officer must also be notified immediately by the contractor or subcontractor prior to an unfriendly termination. The contractor/subcontractor shall not make copies of VA information except as authorized and necessary to perform the terms of the agreement or to preserve electronic information stored on contractor/subcontractor electronic storage media for restoration in case any electronic equipment or data used by the contractor/subcontractor needs to be restored to an operating state. If copies are made for restoration purposes, after the restoration is complete, the copies must be appropriately destroyed. If VA determines that the contractor has violated any of the information confidentiality, privacy, and security provisions of the contract, it shall be sufficient grounds for VA to withhold payment to the contractor or third party or terminate the contract for default or terminate for cause under Federal Acquisition Regulation (FAR) part 12. If a VHA contract is terminated for cause, the associated BAA must also be terminated and appropriate actions taken in accordance with VHA Handbook 1600.01, Business Associate Agreements. Absent an agreement to use or disclose protected health information, there is no business associate relationship. Media protection/sanitization Bio-Medical devices and other equipment or systems containing media (hard drives, optical disks, etc.) with VA sensitive information must not be returned to the vendor at the end of lease, for trade-in, or other purposes. The options are: (1) Vendor must accept the system without the drive; (2) VA s initial medical device purchase includes a spare drive which must be installed in place of the original drive at time of turn-in; or (3) VA must reimburse the company for media at a reasonable open market replacement cost at time of purchase. (4) Due to the highly specialized and sometimes proprietary hardware and software associated with medical equipment/systems, if it is not possible for the VA to retain the hard drive, then; (a) The equipment vendor must have an existing BAA if the device being traded in has sensitive information stored on it and hard drive(s) from the system are being returned physically intact; and (b) Any fixed hard drive on the device must be non-destructively sanitized to the greatest extent possible without negatively impacting system operation. Selective clearing down to patient data folder level is recommended using VA approved and validated overwriting technologies/methods/tools. Applicable media sanitization specifications need to be preapproved and described in the purchase order or contract. (c) A statement needs to be signed by the Director (System Owner) that states that the drive could not be removed and that (a) and (b) controls above are in place and completed. The ISO needs to maintain the documentation. Security/privacy incident reporting a. The term security incident means an event that has, or could have, resulted in unauthorized access to, loss or damage to VA assets, or sensitive information, or an action that breaches VA security procedures. The contractor/subcontractor shall immediately notify the COR and simultaneously, the designated ISO and Privacy Officer for the contract of any known or suspected security/privacy incidents, or any unauthorized disclosure of sensitive information, including that contained in system(s) to which the contractor/subcontractor has access. Consistent with the requirements of 38 U.S.C. §5725, a contract may require access to sensitive personal information. If so, the contractor is liable to VA for liquidated damages in the event of a data breach or privacy incident involving any SPI the contractor/subcontractor processes or maintains under this contract. d. Based on the determinations of the independent risk analysis, the contractor shall be responsible for paying to the VA liquidated damages in the amount of $37.50 per affected individual to cover the cost of providing credit protection services to affected individuals consisting of the following: (1) Notification; (2) One year of credit monitoring services consisting of automatic daily monitoring of at least 3 relevant credit bureau reports; (3) Data breach analysis; (4) Fraud resolution services, including writing dispute letters, initiating fraud alerts and credit freezes, to assist affected individuals to bring matters to resolution; (5) One year of identity theft insurance with $20,000.00 coverage at $0 deductible; and (6) Necessary legal expenses the subjects may incur to repair falsified or damaged credit records, histories, or financial affairs. Training/Contractor Rules of Behavior a. All contractor employees and subcontractor employees requiring access to VA information and VA information systems shall complete the following before being granted access to VA information and its systems: (1) Sign and acknowledge (either manually or electronically) understanding of and responsibilities for compliance with the Contractor Rules of Behavior, see appendix A, relating to access to VA information and information systems; (2) Successfully complete the VA Privacy and Information Security Awareness and Rules of Behavior training and annually complete required security training (instructions provided at end of document); (3) Successfully complete the appropriate VA Privacy and HIPAA training and annually complete required privacy training (instructions provided at end of document); and b. The contractor shall provide to the contracting officer and/or the COR a copy of the training certificates and certification of signing the Contractor Rules of Behavior for each applicable employee within 1 week of the initiation of the contract and annually thereafter, as required. c. Failure to complete the mandatory annual training and sign the Rules of Behavior annually, within the timeframe required, is grounds for suspension or termination of all physical or electronic access privileges and removal from work on the contract until such time as the training and documents are complete. CONTRACTOR RULES OF BEHAVIOR This User Agreement contains rights and authorizations regarding my access to and use of any information assets or resources associated with my performance of services under the contract terms with the Department of Veterans Affairs (VA). This User Agreement covers my access to all VA data whether electronic or hard copy ("Data"), VA information systems and resources ("Systems"), and VA sites ("Sites"). This User Agreement incorporates Rules of Behavior for using VA, and other information systems and resources under the contract. 1. GENERAL TERMS AND CONDITIONS FOR ALL ACTIONS AND ACTIVITIES UNDER THE CONTRACT: a. I understand and agree that I have no reasonable expectation of privacy in accessing or using any VA, or other Federal Government information systems. b. I consent to reviews and actions by the Office of Information & Technology (OI&T) staff designated and authorized by the VA Chief Information Officer (CIO) and to the VA OIG regarding my access to and use of any information assets or resources associated with my performance of services under the contract terms with the VA. These actions may include monitoring, recording, copying, inspecting, restricting access, blocking, tracking, and disclosing to all authorized OI&T, VA, and law enforcement personnel as directed by the VA CIO without my prior consent or notification. c. I consent to reviews and actions by authorized VA systems administrators and Information Security Officers solely for protection of the VA infrastructure, including, but not limited to monitoring, recording, auditing, inspecting, investigating, restricting access, blocking, tracking, disclosing to authorized personnel, or any other authorized actions by all authorized OI&T, VA, and law enforcement personnel. d. I understand and accept that unauthorized attempts or acts to access, upload, change, or delete information on Federal Government systems; modify Federal government systems; deny access to Federal government systems; accrue resources for unauthorized use on Federal government systems; or otherwise misuse Federal government systems or resources are prohibited. e. I understand that such unauthorized attempts or acts are subject to action that may result in criminal, civil, or administrative penalties. This includes penalties for violations of Federal laws including, but not limited to, 18 U.S.C. §1030 (fraud and related activity in connection with computers) and 18 U.S.C. §2701 (unlawful access to stored communications). f. I agree that OI&T staff, in the course of obtaining access to information or systems on my behalf for performance under the contract, may provide information about me including, but not limited to, appropriate unique personal identifiers such as date of birth and social security number to other system administrators, Information Security Officers (ISOs), or other authorized staff without further notifying me or obtaining additional written or verbal permission from me. g. I understand I must comply with VA s security and data privacy directives and handbooks. I understand that copies of those directives and handbooks can be obtained from the Contracting Officer's Representative (COR). If the contractor believes the policies and guidance provided by the COR is a material unilateral change to the contract, the contractor must elevate such concerns to the Contracting Officer for resolution. h. I will report suspected or identified information security/privacy incidents to the COR and to the local ISO or Privacy Officer as appropriate. 2. GENERAL RULES OF BEHAVIOR a. Rules of Behavior are part of a comprehensive program to provide complete information security. These rules establish standards of behavior in recognition of the fact that knowledgeable users are the foundation of a successful security program. Users must understand that taking personal responsibility for the security of their computer and the information it contains is an essential part of their job. b. The following rules apply to all VA contractors. I agree to: (1) Follow established procedures for requesting, accessing, and closing user accounts and access. I will not request or obtain access beyond what is normally granted to users or by what is outlined in the contract. (2) Use only systems, software, databases, and data which I am authorized to use, including any copyright restrictions. (3) I will not use other equipment (OE) (non-contractor owned) for the storage, transfer, or processing of VA sensitive information without a VA CIO approved waiver, unless it has been reviewed and approved by local management and is included in the language of the contract. If authorized to use OE IT equipment, I must ensure that the system meets all applicable 6500 Handbook requirements for OE. (4) Not use my position of trust and access rights to exploit system controls or access information for any reason other than in the performance of the contract. (5) Not attempt to override or disable security, technical, or management controls unless expressly permitted to do so as an explicit requirement under the contract or at the direction of the COR or ISO. If I am allowed or required to have a local administrator account on a government-owned computer, that local administrative account does not confer me unrestricted access or use, nor the authority to bypass security or other controls except as expressly permitted by the VA CIO or CIO's designee. (6) Contractors use of systems, information, or sites is strictly limited to fulfill the terms of the contract. I understand no personal use is authorized. I will only use other Federal government information systems as expressly authorized by the terms of those systems. I accept that the restrictions under ethics regulations and criminal law still apply. (7) Grant access to systems and information only to those who have an official need to know. (8) Protect passwords from access by other individuals. (9) Create and change passwords in accordance with VA Handbook 6500 on systems and any devices protecting VA information as well as the rules of behavior and security settings for the particular system in question. (10) Protect information and systems from unauthorized disclosure, use, modification, or destruction. I will only use encryption that is FIPS 140-2 validated to safeguard VA sensitive information, both safeguarding VA sensitive information in storage and in transit regarding my access to and use of any information assets or resources associated with my performance of services under the contract terms with the VA. (11) Follow VA Handbook 6500.1, Electronic Media Sanitization to protect VA information. I will contact the COR for policies and guidance on complying with this requirement and will follow the COR's orders. (12) Ensure that the COR has previously approved VA information for public dissemination, including e-mail communications outside of the VA as appropriate. I will not make any unauthorized disclosure of any VA sensitive information through the use of any means of communication including but not limited to e-mail, instant messaging, online chat, and web bulletin boards or logs. (13) Not host, set up, administer, or run an Internet server related to my access to and use of any information assets or resources associated with my performance of services under the contract terms with the VA unless explicitly authorized under the contract or in writing by the COR. (14) Protect government property from theft, destruction, or misuse. I will follow VA directives and handbooks on handling Federal government IT equipment, information, and systems. I will not take VA sensitive information from the workplace without authorization from the COR. (15) Only use anti-virus software, antispyware, and firewall/intrusion detection software authorized by VA. I will contact the COR for policies and guidance on complying with this requirement and will follow the COR's orders regarding my access to and use of any information assets or resources associated with my performance of services under the contract terms with VA. (16) Not disable or degrade the standard anti-virus software, antispyware, and/or firewall/intrusion detection software on the computer I use to access and use information assets or resources associated with my performance of services under the contract terms with VA. I will report anti-virus, antispyware, firewall or intrusion detection software errors, or significant alert messages to the COR. (17) Understand that restoration of service of any VA system is a concern of all users of the system. (18) Complete required information security and privacy training, and complete required training for the particular systems to which I require access. 3. ADDITIONAL CONDITIONS FOR USE OF NON- VA INFORMATION TECHNOLOGYRESOURCES a. When required to complete work under the contract, I will directly connect to the VA network whenever possible. If a direct connection to the VA network is not possible, then I will use VA approved remote access software and services. b. Remote access to non-public VA information technology resources is prohibited from publicly-available IT computers, such as remotely connecting to the internal VA network from computers in a public library. c. I will not have both a VA network line and any kind of non-VA network line including a wireless network card, modem with phone line, or other network device physically connected to my computer at the same time, unless the dual connection is explicitly authorized by the COR. d. I understand that I may not obviate or evade my responsibility to adhere to VA security requirements by subcontracting any work under any given contract or agreement with VA, and that any subcontractor(s) I engage shall likewise be bound by the same security requirements and penalties for violating the same. 4. STATEMENT ON LITIGATION This User Agreement does not and should not be relied upon to create any other right or benefit, substantive or procedural, enforceable by law, by a party to litigation with the United States Government. Place of Performance Address: 420 N. James Rd Columbus OH Postal Code: 43219 Country: UNITED STATES The delivery period of performance is March 2019 Delivery shall be provided no later than 30 days after receipt of award of contract. FOB: destination The contractor shall deliver all items to: Chalmers P. Wylie Ambulatory Care Center 420 N. James Rd Columbus OH 43219 Award shall be made to the offeror whose quote offers the best value to the government, considering technical capability, past performance, and price. The government will evaluate information based on the following evaluation criteria: Lowest Price Technically Acceptable Applicable Provision and Clauses: The following clauses apply to this acquisition: 52.204-18 Commercial and Government Entity Code Maintenance (JUL 2016) 52.212-4 Contract Terms and Conditions 52.212-5 Contract Terms and Conditions Required to Implement Statutes or Executive Orders-Commercial Items (OCT 2018) 52.232-40 Providing Accelerated Payments to Small Business Subcontractors (DEC 2013) 852.203-70 Commercial Advertising (MAY 2008) 852.232-72 Electronic Submission of Payment Requests (NOV 2018) 852.246-71 Rejected Goods (OCT 2018) 852.247-73 Packing for Domestic Shipment (OCT 2018) The following provisions apply to this acquisition: 52.212-3 Offeror Representations and Certifications-Commercial Items (OCT 2018) Quote Evaluation and Award: This is a competitive Request for Quotations (RFQ) that will be evaluated under FAR Part 12 and 13. The Government will issue a Firm-Fixed Price Purchase Order resulting from this solicitation to the responsible contractors whose quote conforms to the requirements within this solicitation and will be the most advantageous to the Government. Lowest Price Technically Acceptable (LPTA) will be how the quotes are evaluated. A contractor s initial quote shall contain the best terms from a price and technical standpoint. Contractors are reminded that representatives from your company SHALL NOT contact any Cleveland VAMC personnel to discuss this RFQ during the solicitation and evaluation process. Procedure for submitting documents to the Department of Veterans Affairs: DOCUMENTS THAT ARE TO BE PROVIDED TO THE CONTRACTING OFFICER WILL BE SUBMITTED USING THE APPROPRIATE VEHICLE BELOW. email: percy.johnson2@va.gov Submission of Quote: All information shall be submitted in the manner described below and contractors who do not submit all information may not be considered for award. Contractor shall provide an authorized distribution letter. The Contractor shall be an Original Equipment Manufacturer (OEM) authorized dealer, authorized distributor, or authorized Contractor reseller for the proposed equipment/system such that the OEM warranty and service are provided and maintained by the OEM. All warranty and service associated with the equipment/system shall be in accordance with the OEM terms and conditions. The Contractor shall provide new items ONLY; no remanufactured or "gray market" items. All items must be covered by the manufacturer's warranty. This requirement will be awarded on all-or-none basis. This solicitation requires registration with the System for Award Management (SAM) prior to award, pursuant to applicable regulations and guidelines. Registration information can be found at www.sam.gov. CONTRACTORS MUST STATE THEIR BUSINESS SIZE when submitting their quote AND if the item is on a FSS/GSA schedule awarded to the Contractor include the schedule information on your quote. RESPONSES ARE DUE: February 20, 2019 at 1PM EST. Quotes will only be accepted electronically via e-mail to percy.johnson2@va.gov. Enter RFQ 36C25019Q0346 MRI Coils in the email subject line.