PERFORMANCE WORK STATEMENT DEPARTMENT OF VETERANS AFFAIRS (VA) Veterans Health Administration VA Boston Healthcare System Spinal Cord Injury Program Environmental Control Units, Installation and Configuration, and Training Solution BACKGROUND The VA Boston Healthcare System (VABHS), located at (1400 VFW Parkway, West Roxbury MA 02132 and 940 Belmont Street, Brockton, MA is a medical facility with both tertiary and long-term care patients. The Spinal Cord Injury (SCI) program at this facility is CARF (formerly, the Commission for the Accreditation of Rehabilitation Facilities) accredited due to the high quality and focus on the rehabilitative program for Veterans with SCI. This program accommodates 34 acute (West Roxbury) and 30 long term care (Brockton) beds. The continuum of care of these respective patient populations involves acute rehabilitation, specifically within its SCI population. Patients receive both inpatient and outpatient rehabilitative services, whether in response to a new SCI injury, or due to deconditioning for a variety of medical reasons. The therapies and modalities available to maximize rehabilitation and skill maintenance are of utmost importance in preserving the health and welfare of a patient. Patients with limited functionality do not have the capability to control their surroundings. The ECU s will provide an increased quality of patient care as well as patient safety. In 2014, ECU s were installed in the VABHS acute patient rooms and Long-Term Care Unit. Since 2014, the units have become outdated and there are additional features that will provide greater usability for the end users, our Veterans. For instance, the tablet screens are now larger, the sip and puff technology is improved, and the cord that reaches from the wall unit to the bed is longer and less vulnerable to pinching/breaking. There is an identified need to provide Environmental Control Units (ECUs) throughout the entire SCI program at the VABHS in order to successfully and effectively provide consistent quality care. APPLICABLE DOCUMENTS In the performance of the tasks associated with this Performance Work Statement, the Contractor shall comply with the following: 44 U.S.C. § 3541-3549,  Federal Information Security Management Act (FISMA) of 2002 Federal Information Security Modernization Act of 2014 Federal Information Processing Standards (FIPS) Publication 140-2, Security Requirements For Cryptographic Modules FIPS Pub 199. Standards for Security Categorization of Federal Information and Information Systems, February 2004 FIPS Pub 200, Minimum Security Requirements for Federal Information and Information Systems, March 2016 FIPS Pub 201-2, Personal Identity Verification of Federal Employees and Contractors, August 2013 10 U.S.C. § 2224, "Defense Information Assurance Program" Carnegie Mellon Software Engineering Institute, Capability Maturity Model® Integration for Development (CMMI-DEV), Version 1.3 November 2010; and Carnegie Mellon Software Engineering Institute, Capability Maturity Model® Integration for Acquisition (CMMI-ACQ), Version 1.3 November 2010 5 U.S.C. § 552a, as amended, The Privacy Act of 1974 Public Law 109-461, Veterans Benefits, Health Care, and Information Technology Act of 2006, Title IX, Information Security Matters 42 U.S.C. § 2000d Title VI of the Civil Rights Act of 1964 VA Directive 0710, Personnel Security and Suitability Program, June 4, 2010, http://www.va.gov/vapubs/ VA Handbook 0710, Personnel Security and Suitability Security Program, May 2, 2016, http://www.va.gov/vapubs VA Directive and Handbook 6102, Internet/Intranet Services, July 15, 2008 36 C.F.R. Part 1194 Electronic and Information Technology Accessibility Standards, July 1, 2003 Office of Management and Budget (OMB) Circular A-130, Managing Federal Information as a Strategic Resource, July 28, 2016 32 C.F.R. Part 199, Civilian Health and Medical Program of the Uniformed Services (CHAMPUS) An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule, October 2008 Sections 504 and 508 of the Rehabilitation Act (29 U.S.C. § 794d), as amended by the Workforce Investment Act of 1998 (P.L. 105-220), August 7, 1998 Homeland Security Presidential Directive (12) (HSPD-12), August 27, 2004 VA Directive 6500, Managing Information Security Risk: VA Information Security Program, September 20, 2012 VA Handbook 6500, Risk Management Framework for VA Information Systems Tier 3: VA Information Security Program, March 10, 2015 VA Handbook 6500.1, Electronic Media Sanitization, November 03, 2008 VA Handbook 6500.2, Management of Breaches Involving Sensitive Personal Information (SPI) , July 28, 2016 VA Handbook 6500.3, Assessment, Authorization, And Continuous Monitoring Of VA Information Systems, February 3, 2014 VA Handbook 6500.5, Incorporating Security and Privacy in System Development Lifecycle , March 22, 2010 VA Handbook 6500.6, Contract Security, March 12, 2010 VA Handbook 6500.8, Information System Contingency Planning , April 6, 2011 OI&T Process Asset Library (PAL), https://www.va.gov/process/ . Reference Process Maps at https://www.va.gov/process/maps.asp and Artifact templates at https://www.va.gov/process/artifacts.asp One-VA Technical Reference Model (TRM) (reference at https://www.va.gov/trm/TRMHomePage.aspx) VA Directive 6508, Implementation of Privacy Threshold Analysis and Privacy Impact Assessment, October 15, 2014 VA Handbook 6508.1, Procedures for Privacy Threshold Analysis and Privacy Impact Assessment, July 30, 2015 VA Handbook 6510, VA Identity and Access Management , January 15, 2016 VA Directive 6300, Records and Information Management, February 26, 2009 VA Handbook, 6300.1, Records Management Procedures, March 24, 2010 NIST SP 800-37, Guide for Applying the Risk Management Framework to Federal Information Systems: a Security Life Cycle Approach, June 10, 2014 NIST SP 800-53 Rev. 4, Security and Privacy Controls for Federal Information Systems and Organizations, January 22, 2015 OMB Memorandum, Transition to IPv6 , September 28, 2010 VA Directive 0735, Homeland Security Presidential Directive 12 (HSPD-12) Program, October 26, 2015 VA Handbook 0735, Homeland Security Presidential Directive 12 (HSPD-12) Program, March 24, 2014 OMB Memorandum M-06-18, Acquisition of Products and Services for Implementation of HSPD-12, June 30, 2006 OMB Memorandum 04-04, E-Authentication Guidance for Federal Agencies, December 16, 2003 OMB Memorandum 05-24, Implementation of Homeland Security Presidential Directive (HSPD) 12 Policy for a Common Identification Standard for Federal Employees and Contractors, August 5, 2005 OMB memorandum M-11-11, Continued Implementation of Homeland Security Presidential Directive (HSPD) 12 Policy for a Common Identification Standard for Federal Employees and Contractors, February 3, 2011 OMB Memorandum, Guidance for Homeland Security Presidential Directive (HSPD) 12 Implementation, May 23, 2008 Federal Identity, Credential, and Access Management (FICAM) Roadmap and Implementation Guidance, December 2, 2011 NIST SP 800-116, A Recommendation for the Use of Personal Identity Verification (PIV) Credentials in Physical Access Control Systems, November 20, 2008 OMB Memorandum M-07-16, Safeguarding Against and Responding to the Breach of Personally Identifiable Information, May 22, 2007 NIST SP 800-63-3, 800-63A, 800-63B, 800-63C, Digital Identity Guidelines, June 2017 NIST SP 800-157, Guidelines for Derived PIV Credentials, December 2014 NIST SP 800-164, Guidelines on Hardware-Rooted Security in Mobile Devices (Draft), October 2012 Draft National Institute of Standards and Technology Interagency Report (NISTIR) 7981 Mobile, PIV, and Authentication, March 2014 VA Memorandum, VAIQ #7100147, Continued Implementation of Homeland Security Presidential Directive 12 (HSPD-12), April 29, 2011 (reference https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514) IAM Identity Management Business Requirements Guidance document, May 2013, (reference Enterprise Architecture Section, PIV/IAM (reference https://www.voa.va.gov/documentlistpublic.aspx?NodeID=514) VA Memorandum Mandate to meet PIV Requirements for New and Existing Systems (VAIQ# 7712300), June 30, 2015, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4846 Trusted Internet Connections (TIC) Reference Architecture Document, Version 2.0, Federal Interagency Technical Reference Architectures, Department of Homeland Security, October 1, 2013, https://s3.amazonaws.com/sitesusa/wp-content/uploads/sites/482/2015/04/TIC_Ref_Arch_v2-0_2013.pdf OMB Memorandum M-08-05, Implementation of Trusted Internet Connections (TIC), November 20, 2007 OMB Memorandum M-08-23, Securing the Federal Government s Domain Name System Infrastructure, August 22, 2008 VA Memorandum, VAIQ #7497987, Compliance Electronic Product Environmental Assessment Tool (EPEAT) IT Electronic Equipment, August 11, 2014 (reference Document Libraries, EPEAT/Green Purchasing Section, https://www.voa.va.gov/documentlistpublic.aspx?NodeID=552) Sections 524 and 525 of the Energy Independence and Security Act of 2007, (Public Law 110 140), December 19, 2007 Section 104 of the Energy Policy Act of 2005, (Public Law 109 58), August 8, 2005 Executive Order 13693, Planning for Federal Sustainability in the Next Decade , dated March 19, 2015 Executive Order 13221, Energy-Efficient Standby Power Devices, August 2, 2001 VA Directive 0058, VA Green Purchasing Program , July 19, 2013 VA Handbook 0058, VA Green Purchasing Program , July 19, 2013 Office of Information Security (OIS) VAIQ #7424808 Memorandum, Remote Access , January 15, 2014, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28 Clinger-Cohen Act of 1996, 40 U.S.C. §11101 and §11103 VA Memorandum, Implementation of Federal Personal Identity Verification (PIV) Credentials for Federal and Contractor Access to VA IT Systems , (VAIQ# 7614373) July 9, 2015, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28 VA Memorandum Mandatory Use of PIV Multifactor Authentication to VA Information System (VAIQ# 7613595), June 30, 2015, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28 VA Memorandum Mandatory Use of PIV Multifactor Authentication for Users with Elevated Privileges (VAIQ# 7613597), June 30, 2015; https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28 Veteran Focused Integration Process (VIP) Guide 2.0 , May 2017, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4371 VIP Release Process Guide , Version 1.4, May 2016, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4411 POLARIS User Guide , Version 1.2, February 2016, https://www.voa.va.gov/DocumentView.aspx?DocumentID=4412 VA Memorandum Use of Personal Email (VAIQ #7581492) , April 24, 2015, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28 VA Memorandum Updated VA Information Security Rules of Behavior (VAIQ #7823189) , September, 15, 2017, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28 SCOPE The contractor shall deliver 55 ECUs (35 in West Roxbury and 20 in Brockton) that are capable of allowing a patient with limited functionality who is living with quadriplegia, paraplegia, MS and ALS, to control their environment and have the ability to participate in a broad range of activities. The contractor shall configure, install, and demonstrate the capabilities for the ECUs. PERFORMANCE DETAILS PERFORMANCE PERIOD The Period of Performance (POP) is 3 months from the date of award to complete delivery, installation and configuration, and demonstration, with a warranty for 2 years from the date of acceptance. PLACE OF PERFORMANCE Tasks under this PWS shall be performed at the VHBHS West Roxbury and VABHS Brockton locations, at 1400 VFW Parkway, West Roxbury, MA 02132 and 940 Belmont St, Brockton MA 02301. TRAVEL The Government anticipates travel under this effort to perform the tasks associated with the effort. The contractor shall include all travel costs in your firm-fixed priced line items. Travel costs will not be directly reimbursed by the Government. SPECIFIC TASKS AND DELIVERABLES. ENVIRONMENT CONTROL UNITS. The contractor shall provide 55 ECUs capable of allowing a patient with limited functionality who is living with quadriplegia, paraplegia, MS and ALS, to control their environment and have the ability to participate in a broad range of activities. The ECUs shall have the capabilities and features necessary to provide patients the capability to control their environment from a tablet that uses the VA patient wireless system/guest wifi. The contractor shall provide an ECU that has the minimum capabilities to resemble the Autonome brand name Environmental Care Unit or equivalent device. The ECUs shall enable patients with limited functionality to control, compute, and communicate through the use of the ECU. The ECU shall allow patients to control room lighting, hospital beds, television, telephone, nurse call light, internet, and communicate within the confines of their hospital bed through the ECU. The ECUs shall be versatile and work for individuals with varying degrees of disability; the ECUs shall have the ability to be controlled by touch screen, voice, sip and puff, touch switch, eye gaze devices and alternative hand access other than touch screen. The ECU shall be able to control multiple environmental functions and provide simple set-up and easy for staff to understand and assist patients. The home screen on the tablet shall look similar to the home screen on a smart phone and have an easily identifiable icon for each of the functions (such controlling room lighting, hospital bed, television, telephone, nurse call light, and internet. The contractor shall warrant that the products delivered shall be free from defects in materials and workmanship for a period of no less than two years from date of acceptance. If any such product proves defective during the warranty period, the contractor shall repair the defective product at no additional cost to the Government for parts, labor, and shipping, or the contractor shall provide a replacement product acceptable to the Government in exchange for the defective product. ECU Salient Characteristics. The contractor shall provide 55 ECUs and all hardware necessary to install and configure the ECUs. The ECUs and installation hardware shall have the salient characteristics identified below. ECU Core Unit: AutonoME brand name Environmental Care Unit or equivalent device Can be programmed to perform no fewer than 150 functions Full on-board programming, no tools or hardware required Built-in infrared capture Macros (scenes) fully editable with up to 20 functions per macro Changeable telephone numbers and basic functions User-adjustable volume, brightness, and scan rate Custom template design functions Minimum of 20 inch screen (all in one unit) running on Windows 10- medical specifications communication aid with rugged body integrated amplification, switch and other USB access, auditory feedback.. Seamless File Backup & Management One Button Press Design for Remote Support Team Tools Remote Assistance Wi-Fi / Bluetooth capabilities 2 USB Ports (minimum 2.0) 1 Headphone/1 Microphone jack 1/8 Integrated Universal Infrared Remote Capabilities with learning window and multiple IR emitters Dual switch ports for ancillary access equipment Assistive Technology software designed for application integration and multiple access methodologies Ability to mount the device to a bed as well as a wheelchair if necessary Minimum of 120 square foot coverage range Sip and Puff Access / Microphone Device Input Speech Dual switch or single switch with scanning At least 96 unique and different words available with multiple command use Internal microphone External keys for caregiver use Output Internal Loudspeaker Auditory provide voice feedback on menu commands that will acknowledge confirmation on a patient s voice command. Additional ECU Accessories Communication At least 50 user phrases at 60 second long each. Remote activation of emergency dial number using an interface for outbound telephone calls Voice announcing caller ID Articulating arm with minimum reach of 72 from wall. Base for mounting arms shall have the ability to transfer locations ECU shall be capable of being controlled by sip n puff tubing and straws that are commercially available Dual microphone and Sip and Puff input device. ECU shall have single and dual switch scanning ECU shall be capable of being controlled by eye gaze with the following characteristics: Tracking Hybrid infrared video eye & head tracking binocular & monocular tracking Mounting bracket for Eye Tech camera 13 inch Working volume - 300x200x200mm3 (WxHxD) Accuracy, static - 0.5 degree Accuracy, over full working volume 1 degree Max. head movement velocity - 15 cm/s Recovery time 40 ms ECU shall provide access and interfaces to utilize computer games, E-books, ability to write documents, internet access and social video networking applications Privacy speaker for telephone Wall bracket that is compatible with the dual mounting for televisions ECU shall interface with nurse call systems. All cabling required to interface with the hospital equipment shall be included, including: Nurse Call cables with ¼ male jacks to 1/4 jacks, cables 20ft in length Switch Cables from ECU device to bed unit Additional bed cables will be determined by bed type. Bed type will be verified in field. Compatible with the Hill Rom, Sizewise and Umano beds located throughout the acute SCI unit, Brockton long-term care SCI unit and the SCI outpatient clinic. Mounting for the sip-n-puff straws, microphones, speakers, and other accessories must be included for the beds. Augmentative communication capabilities to include word prediction software shall be included. Ability to delete user settings and saved documents in between patients must be included. All hardware will be able to be cleaned and sanitized in accordance with hospital infection control standards. Break away cable (prefer magnetic) with a single connection for control by patient care providers (bed) Cable management to include cable coverings and protection (bed) Software interface for ECU capable of being minimized for full PC features by administrative staff. Software User Handbook for easy to understand Administrative functions Deliverable: 55 ECU units and associated installation hardware and cables. 55 Support Arms and associated installation hardware and cables. Kick-off Meeting The Contractor shall conduct a kick-off meeting with the VA Program Manager (PM), COR, Delivery Date Coordinator, Implementation Manager, and Facility CIOs (or designee) to discuss delivery schedule requirements and facilitate delivery of equipment.  This meeting may be held in conjunction with the post award conference or identified technical kickoff meeting. This meeting shall be conducted telephonically within ten days after award and shall address the delivery and installation schedule.  Deliverables: Kick-off meeting. Delivery and Installation Schedule. Shipment/Delivery of ECU Units. The Contractor shall provide multiple ECU unit deliveries as installation occurs. The Contractor shall finalize the Delivery Schedule and shall coordinate with the COR for specifics. The contractor shall provide the delivery schedule no later than 5 days after the Kick-off meeting. The contractor shall update the delivery schedule prior to and after each delivery. Inspection: Destination Acceptance: Destination Free on Board (FOB): Destination Ship To and Mark For the following Site Point of Contact: 35 Units delivered to West Roxbury Warehouse: Department of Veterans Affairs Facility Name: VA Boston Healthcare System Attention: SCI Address Line 1: 1400 VFW Parkway, bldg. 7 Address Line 2: City, State Zip code: West Roxbury, MA 02132 20 Units delivered to Brockton Warehouse: Department of Veterans Affairs Facility Name: VA Boston Healthcare System Attention: SCI Address Line 1: 940 Belmont St, bldg. 20 Address Line 2: City, State Zip code: Brockton, MA 02301 Special Shipping Instructions Prior to shipping, the Contractor shall notify Site POC, by phone followed by email to the Site POCs and the COR. The email shall include a statement which includes all line items included in the shipment so this can be reviewed for accuracy. The Contractor cannot make any changes to the delivery schedule unless at the request of Site POC. Contractors must coordinate deliveries with Contracting Officer s Representative and Site POC before shipment of any ECU units or related parts to ensure site has adequate storage space. All shipments, either single or multiple container deliveries, shall bear the VA Purchase Order number on external shipping labels and associated manifests or packing lists. In the case of multiple container deliveries, a statement readable near the VA PO number will indicate total number of containers for the complete shipment (ex. Package 1 of 2 ), clearly readable on manifests and external shipping labels. Packing Slips/Labels and Lists shall include the following: IFCAP PO # ____________ (e.g., 541-E11234. Project Description: (e.g., Tier I Lifecycle Refresh) Total number of Containers:  Package ___ of ___.  (e.g., Package 1 of 3) Shipment/Installation Progress Report The Contractor shall update the Delivery and Installation Schedule identifying the progress that has occurred on a weekly basis. The Updated Delivery and Installation Schedule shall identify the items shipped, the serial number associated with each piece of equipment/hardware; the date of each shipment; tracking information, the status of each shipment. The Updated Delivery and Installation Schedule shall identify any problems and provide a description of how the problems were resolved/addressed.  If problems have not been completely resolved, the Contractor shall provide an explanation and status of resolution. The Updated Delivery and Installation Schedule shall be submitted to the COR and include a Microsoft Excel document that clearly identifies the serial number of each piece of equipment being delivered. The Updated Delivery and Installation Schedule shall only have one (1) serial number per cell. Deliverable: Updated Delivery and Installation Schedule. ECU Installation and Configuration. Once all units have been received by the Government, the contractor shall provide the Site POCs and the COR with the updated Shipment/Installation progress report. The Site POCs shall work to update the Shipment/Installation progress report with the specific installation room/site and bed type for each ECU unit. The contractor shall install 55 ECUs at VABHS as follows: 34 units installed in the patient rooms on the Acute Ward A-2, West Roxbury MA 1 unit installed in SCI Apartment, 1st fl, West Roxbury MA Residential ECU system to include bed control, alert chime with remote receiver, light control and articulating wall mounted arm 20 Units installed in Brockton Long-Term SCI Unit, Brockton MA The contractor shall coordinate the installation schedule with the facility POC. The contractor shall coordinate installations to occur with the most minimal disruptions to patients as possible. The contractor shall work with the COR, to coordinate with Clinical Engineering, as well as SCI nursing and therapy staff, to install all the units in the directed locations. The contractor shall include the COR on all coordination activities. The Contractor shall warrant that the products the Contractor installs shall be free from defects in materials and workmanship for a period of two years from the date of acceptance. If any such product proves defective during the warranty period the vendor will repair the defective product at no charge to the Government for parts and labor, or a replacement in exchange for the defective product. The Contractor shall ensure the configuration of all units includes environmental control system units along with command center phone with privacy speaker, microphone input, , direct Infrared (IR) input and wall mount bracket; command center interface with IR relay, 6 way bed control, IR receiver, and Nurse call. The contractor shall configure the ECU to have the home screen with all required options. The Contractor shall ensure all packaging, and old equipment is removed. Demonstration of ECU functionality. The Contractor shall demonstrate the functionality of one of the installed ECU units at both West Roxbury and Brockton sites for up to 40 Government staff that include users, nursing staff, bed management staff and administrators. The demonstration shall include performance of the following: Input (Access): 1. The user can effectively operate the available input (access) method described in the Performance Work Statement. 2. The input (access) method is reliable and repeatable. 3. The input (access) method has the capability to be modified to accommodate changes in the user's condition. 4. The ECU shall control all of the devices specified by the user that he/she wants to control. Ease of Learning: 1. The memory and sequencing requirements is user friendly. 2. The system can start with a single function and expand into a full system at a later time. 3. User functions can be excluded if necessary. Feedback: 1. The user can adjust the ECU feedback to accommodate specific needs (e.g. vision or hearing problems). 2. Feedback reliable and recognizable. Menu: 1. Choices are presented in an understandable way. Accessory Accommodation: 1. The system shall accommodate the addition of accessories to control additional functions if necessary. 2. The system can be customized to meet the unique needs of a specific user. Additional functionalities to be demonstrated: ECU: Television / Menu Lights Full power bed control (up, down, head up and down, foot up and down) A nurse-call interface At least two (2) relays to interface with other automated devices such as automatic window shades. Alternate switch capability Sip and Puff Straws: Sip and Puff tubes shall contain .02 micron Gacterin Filter (bi-dractonal). The Government will accept the ECU units upon successful operation of the ECUs for 10 calendar days from the date of contractor demonstration. Deliverable: ECU demonstration. Training. The vendor will provide onsite training to update all SCI staff and Bed Management Staff on the new software and hardware upgrades. They will provide detailed training to the SCI Superusers who will be responsible for training new staff and doing initial troubleshooting of equipment. This training will be provided on multiple days at both West Roxbury and Brockton locations to include an evening session at each site to allow for all shifts/SCI disciplines to participate. Deliverable: Training and Instruction Manual for patient and super-user GENERAL REQUIREMENTS SECTION 508 NOTICE OF THE FEDERAL ACCESSIBILITY LAW AFFECTING ALL ELECTRONIC AND INFORMATION TECHNOLOGY PROCUREMENTS On August 7, 1998, Section 508 of the Rehabilitation Act of 1973 was amended to require that when Federal departments or agencies develop, procure, maintain, or use Electronic and Information Technology, that they shall ensure it allows Federal employees with disabilities to have access to and use of information and data that is comparable to the access to and use of information and data by other Federal employees. Section 508 required the Architectural and Transportation Barriers Compliance Board (Access Board) to publish standards setting forth a definition of electronic and information technology and the technical and functional criteria for such technology to comply with Section 508. These standards have been developed and published with an effective date of December 21, 2000. Federal departments and agencies shall develop all Electronic and Information Technology requirements to comply with the standards found in 36 CFR 1194. Section 508 Electronic and Information Technology (EIT) Standards: The Section 508 standards established by the Architectural and Transportation Barriers Compliance Board (Access Board) are incorporated into, and made part of all VA orders, solicitations and purchase orders developed to procure Electronic and Information Technology (EIT). These standards are found in their entirety at: http://www.section508.gov and http://www.section508.gov/acquisition-regulations. A printed copy of the standards will be supplied upon request. The Contractor shall comply with the technical standards as marked: § 1194.21 Software applications and operating systems § 1194.22 Web-based intranet and internet information and applications § 1194.23 Telecommunications products § 1194.24 Video and multimedia products § 1194.25 Self-contained, closed products § 1194.26 Desktop and portable computers § 1194.31 Functional Performance Criteria § 1194.41 Information, Documentation, and Support Equivalent Facilitation Alternatively, offerors may propose products and services that provide equivalent facilitation, pursuant to Section 508, subpart A, §1194.5. Such offerors will be considered to have provided equivalent facilitation when the proposed deliverables result in substantially equivalent or greater access to and use of information for those with disabilities. Compatibility with Assistive Technology The Section 508 standards do not require the installation of specific accessibility-related software or the attachment of an assistive technology device. Section 508 requires that the EIT be compatible with such software and devices so that EIT can be accessible to and usable by individuals using assistive technology, including but not limited to screen readers, screen magnifiers, and speech recognition software. Acceptance and Acceptance Testing Deliverables resulting from this solicitation will be accepted based in part on satisfaction of the identified Section 508 standards requirements for accessibility and must include final test results demonstrating Section 508 compliance. Deliverables should meet applicable accessibility requirements and should not adversely affect accessibility features of existing EIT technologies. The Government reserves the right to independently test for 508 Compliance before delivery. The Contractor shall be able to demonstrate 508 Compliance upon delivery. Automated test tools and manual techniques are used in the VA Section 508 compliance assessment. Additional information concerning tools and resources can be found at http://www.section508.va.gov/section508/Resources.asp. Deliverable: Final Section 508 Compliance Test Results INFORMATION TECHNOLOGY USING ENERGY-EFFICIENT PRODUCTS The Contractor shall comply with Sections 524 and Sections 525 of the Energy Independence and Security Act of 2007; Section 104 of the Energy Policy Act of 2005; Executive Order 13514, Federal Leadership in Environmental, Energy, and Economic Performance, dated October 5, 2009; Executive Order 13423, Strengthening Federal Environmental, Energy, and Transportation Management, dated January 24, 2007; Executive Order 13221, Energy-Efficient Standby Power Devices, dated August 2, 2001; and the Federal Acquisition Regulation (FAR) to provide ENERGY STAR®, FEMP designated, low standby power, and Electronic Product Environmental Assessment Tool (EPEAT) registered products in providing information technology products and/or services. The Contractor shall ensure that information technology products are procured and/or services are performed with products that meet and/or exceed ENERGY STAR, FEMP designated, low standby power, and EPEAT guidelines. The Contractor shall provide/use products that earn the ENERGY STAR label and meet the ENERGY STAR specifications for energy efficiency. Specifically, the Contractor shall: Provide/use ENERGY STAR products, as specified at www.energystar.gov/products (contains complete product specifications and updated lists of qualifying products). Provide/use the purchasing specifications listed for FEMP designated products at www.femp.energy.gov/procurement. The Contractor shall use the low standby power products specified at http://energy.gov/eere/femp/low-standby-power-products. Provide/use EPEAT registered products as specified at www.epeat.net. At a minimum, the Contractor shall acquire EPEAT® Bronze registered products. EPEAT registered products are required to meet the technical specifications of ENERGY STAR, but are not automatically on the ENERGY STAR qualified product lists. The Contractor shall ensure that applicable products are on both the EPEAT Registry and ENERGY STAR Qualified Product Lists. The Contractor shall use these products to the maximum extent possible without jeopardizing the intended end use or detracting from the overall quality delivered to the end user. The following is a list of information technology products for which ENERGY STAR, FEMP designated, low standby power, and EPEAT registered products are available: Computer Desktops, Laptops, Notebooks, Displays, Monitors, Integrated Desktop Computers, Workstation Desktops, Thin Clients, Disk Drives Imaging Equipment (Printers Copiers, Multi-Function Devices, Scanners, Fax Machines, Digital Duplicators, Mailing Machines) Televisions, Multimedia Projectors This list is continually evolving, and as a result is not all-inclusive. CONTRACTOR PERSONNEL SECURITY REQUIREMENTS The contractor will not have access to Government computers or IT equipment. INFORMATION SECURITY CONSIDERATIONS: A prohibition on unauthorized disclosure: Information made available to the contractor or subcontractor by VA for the performance or administration of this contract or information developed by the contractor in performance or administration of the contract shall be used only for those purposes and shall not be used in any other way without the prior written agreement of the VA. See VA handbook 6500.6, Appendix C, paragraph 3.a. A requirement for data breach notification: Upon discovery of any known or suspected security/privacy incidents, or any unauthorized disclosure of sensitive information, including that contained in system(s) to which the contractor/subcontractor has access, the contractor/subcontractor shall immediately and simultaneously notify the COR, the designated ISO, and Privacy Officer for the contract. The term security incident means an event that has, or could have, resulted in unauthorized access to, loss or damage to VA assets, or sensitive information, or an action that breaches VA security procedures. See VA Handbook 6500.6, Appendix C, paragraph 6.a. A requirement to pay liquidated damages in the event of a data breach: In the event of a data breach or privacy incident involving SPI the contractor processes or maintains under this contract, the contractor shall be liable to VA for liquidated damages for a specified amount per affected individual to cover the cost of providing credit protection services to those individuals. See VA handbook 6500.6, Appendix C, paragraph 7.a., 7.d. A requirement for annual security/privacy awareness training: Before being granted access to VA information or information systems, all contractor employees and subcontractor employees requiring such access shall complete on an annual basis either: (i) the VA security/privacy awareness training (contains VA security/privacy requirements) within 1 week of the initiation of the contract, or (ii) security awareness training provided or arranged by the contractor that conforms to VA s security/privacy requirements as delineated in the hard copy of the VA security awareness training provided to the contractor. If the contractor provides their own training that conforms to VA s requirements, they will provide the COR or CO, a yearly report (due annually on the date of the contract initiation) stating that all applicable employees involved in the VA s contract have received their annual security/privacy training that meets VA s requirements and the total number of employees trained. See VA Handbook 6500.6, Appendix C, paragraph 9. A requirement to sign VA s Rules of Behavior: Before being granted access to VA information or information systems, all contractor employees and subcontractor employees requiring such access shall sign on annual basis an acknowledgement that they have read, understand, and agree to abide by VA s Contractor Rules of Behavior which is attached to this contract. See VA Handbook 6500.6, Appendix C, paragraph 9, Appendix D. Note: If a medical device vendor anticipates that the services under the contract will be performed by 10 or more individuals, the Contractor Rules of Behavior may be signed by the vendor s designated representative. The contract must reflect by signing the Rules of Behavior on behalf of the vendor that the designated representative agrees to ensure that all such individuals review and understand the Contractor Rules of Behavior when accessing VA s information and information systems.

Bid Protests Not Available