Loren Data's SAM Daily™

SAMDAILY.US - ISSUE OF JANUARY 12, 2023 SAM #7716
SOURCES SOUGHT

J -- Reverse Osmosis Water Treatment Service STL 657-23-2-1110-0039, (VA-23-00031122)

Notice Date

1/10/2023 11:53:59 AM
 

Notice Type

Sources Sought
 

NAICS

811310 — Commercial and Industrial Machinery and Equipment (except Automotive and Electronic) Repair and Maintenance
 

Contracting Office

255-NETWORK CONTRACT OFFICE 15 (36C255) LEAVENWORTH KS 66048 USA
 

ZIP Code

66048
 

Solicitation Number

36C25523Q0117
 

Response Due

1/17/2023 10:00:00 AM
 

Archive Date

03/18/2023
 

Point of Contact

Albert (Al) Cheeks, Contract Specialist, Phone: 913-946-1990
 

E-Mail Address

Albert.CheeksJr@va.gov
(Albert.CheeksJr@va.gov)
 

Awardee

null
 

Description

THIS REQUEST FOR INFORMATION (RFI)/SOURCES SOUGHT DISCLAIMER This RFI is issued solely for information and planning purposes only and does not constitute a solicitation. All information received in response to this RFI that is marked as proprietary will be handled accordingly. Responses to this notice are not offers and cannot be accepted by the Government to form a binding contract. Responders are solely responsible for all expenses associated with responding to this RFI. The submission of pricing, capabilities for planning purposes, and other market information is highly encouraged and allowed under this RFI In Accordance With (IAW) FAR Part 15.201(e). SOURCES SOUGHT DESCRIPTION This is NOT a solicitation announcement. This is a RFI/sources sought only. The purpose of this sources sought/RFI is to gain knowledge of potential qualified sources and their size classification relative to NAICS 811310. Responses to this sources sought will be used by the Government to make appropriate acquisition decisions. After review of the responses to this sources sought, a solicitation announcement may be published. Responses to this sources sought synopsis are not considered adequate responses for a solicitation announcement. The Department of Veterans Affairs (VA), VISN 15 Network Contracting Office, is seeking sources that can provide the following: MUST BE AN AUTHORIZED DEALER and PROVIDE LETTER from MFR. Performance Work Statement: Service Agreement for RO Water Treatment System General Information Service Agreement: The St. Louis VA Medical Center is requesting to establish a service contract for maintenance and repair on the RO water treatment system used in the out-patient dialysis clinic. The facility is located at: VA St. Louis Healthcare System John Cochran Division 915 N. Grand Blvd. St. Louis, MO 63106 Scope of Work: The Contractor shall supply all labor, travel, materials, equipment, tools, supervision, and all incidentals required to complete on-site full service planned maintenance and corrective maintenance (repair) of the equipment identified in Section II, in accordance with Manufacturer s recommendations, Joint Commission standards, AAMI standards, design specifications, and the specifications, terms, and conditions of this contract. Background: This contract is issued to ensure the continuous reliability of the RO water treatment system and ancillary equipment identified in the statement of work. The equipment is critical in the treatment of dialysis patients at the VA Medical Center and the reliable and accurate operation of the equipment at all times is considered critical to the health of patients. Performance Period: The Contractor shall begin the work required under this SOW commencing with the effective date of award, unless otherwise directed by the CO, and shall provide continuous service until the date of contract expiration. The contract would be for 1 year starting February 7, 2023, through February 6, 2024, with renewal options for an additional 4 years, or until end of life of the equipment. Type of Contract: IDIQ 36C10G22D0010 Equipment to be Serviced Each of the following items is to be serviced in accordance with the specifications, terms and conditions of this contract. Mar Cor CWP 104, 33155-WS01, Serial Number: 1362005 Reverse osmosis water treatment system and all ancillary equipment, components, and accessories Mar Cor WRO 300H Portable RO, 33155WH01WH07 to WH09, Serial Numbers: 1321557, 1321554, 1321553 Mar Cor MHX, 33155WH01WH01 to MH09, Serial Numbers: 1371996, 1371998, 1371999, 1372034, 1372036, 1372038, 1372040, 1372041, 1372043 Services to be Provided The contractor shall provide preventative and corrective maintenance, including emergencies, on the RO water treatment system. Scheduled (Preventative) Maintenance The Contractor shall perform preventive maintenance (PM) service to ensure that equipment listed in Section II performs in accordance with Section B.4 (g) Conformance Standards. The Contractor shall provide checklists and utilize procedures with worksheet originals indicating work performed and actual performance values obtained (as applicable). The contractor shall provide written description of Preventive Maintenance Inspections (PMI). This description shall include an itemized list of the procedures performed, including electrical safety. This documentation shall be provided to the COR at the completion of the PM. PM services shall include, but are not limited to, the following: Cleaning and disinfection of all system components, including membranes and the loop Replacement of exhausted carbon tanks, including primary and secondary tanks, and DI tanks Replacement of filters, pre-filter cartridges, endotoxin/pyrogen filters and seal, vent filters Water testing, including chlorine levels after replacement of tanks, LAL test, and AAMI test of RO system product Supplying sterilant, test strips, low pH solution, high pH solution, and any other chemicals or solutions required for maintenance Performing remedial maintenance of non-emergent nature. Testing and replacing faulty and worn parts and/or parts likely to become faulty, fail, or worn. Returning the equipment to the full operating condition as defined in Section B.4 (g) Conformance Standards. Providing documentation of all services performed. PM services shall be provided based on the following schedule: QTY Description CLINS Part # Frequency 1 System Performance Review Included SI0002 Monthly 2 Rebuild Tank Head (2850,NHWBP) SRV1001 Annually 2 Carbon Filter Rebed, 7 cu.ft. 1005 I SRV1010 Annually 1 Clean Membranes 1005 L 4000-0136 Semi-Annually 1 CWP Annual Preventative Maintenance Kit 1005 P 4000-0092 Annually 2 Inspect & Replace System Filter 1005 C SI5000 Monthly 2 FILTER,DEPTH,SW,PP,5M,4-1/2""X20,DOE Included ME42008 Monthly 2 Inspect & Replace RO Pre Filter 1005 C SI5000 Monthly 2 FILTER,1 MIC,20"",BIG BLUE,SPUN POLY Included 1233955 Monthly 1 Inspect & Replace Post Filter 1005 D SI5120 Semi-Annually 1 FILTER, POSICLEAR, 20"" 222, FLAT Included WT7002502A020SPD Semi-Annually 2 Rental DI Tanks, 14x47, 3.6 cu.ft. 1005 G 930-01-047 Semi-Annually 1 AAMI Test RO Product 1011 C AAMI TEST Semi-Annually 1 CHEM,LIQ,MINNCARE HD,4X1QT 3029765 Monthly 1 TEST,STRIP,MINNCARE HD,INDIC,100CT 1005 B 3029796 Monthly 1 CWP Extended Coverage 1005 W 4000-1092 Annually 9 AAMI 1011 F AAMI TEST Semi-Annually 1 Unscheduled Emergency Service & Parts 1025Q Any exceptions to the PM schedule shall be arranged and approved in advance with the COR and provided in writing to the Contracting Officer. Any charges for parts, services, manuals, tools, or software required to successfully complete scheduled PM shall be included within this contract and it s agreed upon price, unless otherwise specifically excluded. Any Fuel surcharges will not be authorized. The Contractor shall notify the Dialysis Nurse Manager and the COR at least 48 hours in advance of the date of contemplated preventative maintenance inspection. A designated staff member will accompany the Contractor as an observer during the inspection. The inspection shall be thorough and shall conform to manufacturer and Industry Standards for the equipment. Sufficient time shall be allowed to permit a thorough inspection and test of each device comprising the overall system. Maintenance work and inspections may be combined at the approval of the COR or alternate COR if down time is not considered significant. The Contractor shall immediately, but no later than 24 (twenty-four) consecutive hours after discovery, notify the CO and COR (in writing) of the existence or the development of any defects in or repairs required to the scheduled equipment which the Contractor considers he/she is not responsible for under the terms of the contract. The Contractor shall furnish the CO and COR with a written estimate of the cost to make necessary repairs. Unscheduled Maintenance (Emergency Repair Service) The Contractor, Pipe Shop, and Dialysis staff shall maintain the equipment in accordance with Section B.4 (g) Conformance Standards. Contractor shall provide unlimited telephone technical support and all required parts. Only the CO, COR, or designated alternate has the authority to approve/request an unscheduled service call to the Contractor. CO or COR authorization for any work must be received prior to performance of work or payment will not be authorized. Contractor s FSE or Technical Support shall respond with a phone call to the COR or designee within 30 minutes after receipt of telephoned notification. A qualified technician must respond on-site (with necessary replacement parts) within a maximum of 4 hours, unless otherwise specified by the COR or Alt COR. Vendor will allocate $10,000 towards unscheduled emergency services and parts. Unscheduled service calls for other than normal working hours may be charged at the contractor s standard commercial rates for labor and travel and will be invoiced separately from this contract. Invoices are to be provided to the COR or Alt COR. Any Fuel surcharges will not be authorized. Technicians responding for unscheduled emergency service must report to the COR, Dialysis Nurse Manager, or designee (after hours). Upon completion of service/repair, the technician shall again report to that person. Parts The Contractor shall have ready access to all parts, including unique and/or high mortality replacement parts. All parts supplied shall be compatible with existing equipment. The contract shall include all parts except -if applicable - those parts specifically listed as being EXCLUDED. The contractor shall use only new Original Equipment Manufacturer (OEM) or OEM-approved parts. All parts shall be of current manufacture and have complete versatility with the presently installed equipment. All parts shall perform identically to the original equipment specifications. Parts removed from another system, rebuilt and/or used, shall not be installed without specific approval by the CO and the COR. All defective parts replaced become the property of the Contractor, unless otherwise specified by the CO, COR or Alt COR. No EXCLUDED parts are listed. Service Manuals/Tools/Equipment The VA shall not provide tools, test equipment, service manuals, or service diagnostic software to the contractor. Contractor shall obtain, have on file, and make available to its FSE all operational and technical documentation (such as operational and service manuals, schematics, and parts list) which are necessary to meet the performance requirements of this contract. The location and listing of the service manuals, by name and/or the manuals themselves shall be provided to the CO upon request. The Contractor shall provide the COR and Dialysis Nurse Manager copies of all documentation that pertains to any hardware, software, or firmware upgrade or repair. Copies of the latest version(s) of all documentation and licensing agreements, which shall include operation, service, and diagnostic software. The COR shall have access to the same operation, service, diagnostic software, and documentation as the OEM's FSE. Contractor shall provide to the COR OEM Service Bulletins for the equipment covered under this contract. All documentation and service bulletins, etc. shall be provided within 30 days of award in either hard copy or electronic format. Any future service bulletins generated during the contract period shall be provided to the COR within 30 days of receipt in either hard copy or electronic format. Removal of Equipment Approval from the CO must be obtained before removing any equipment from the VA Medical Facility. No transportation charges will be allowed for either the repairperson or equipment to or from the Contractors facility. The Contractor will be responsible for all damage or loss of equipment. A loaner of the same type and functionality of the equipment removed, if required, shall be furnished, installed and made fully operational by the contractor without additional cost. Condition of Equipment All equipment is currently under a full service maintenance contract and is fully operational per required standards. The Contractor has been provided an opportunity to visit the VA Medical Centers, examine the equipment, and note in writing to the CO any condition which may affect the Contractors performance of this contract. With the exception of any conditions so noted the Contractor accepts responsibility for the equipment described in Section II in ""as is"" condition. Failure to inspect the equipment prior to contract award will not relieve the Contractor from performance of the requirements of this contract. Definitions/Acronyms CO Contracting Officer, Network Contracting Office (NCO) 15. COR Contracting Officer s Representative appointed under the contract. ESR - Engineering Service Report - Documentation provided by the vendor of the services rendered for each incidence of work performance under the terms and conditions of the contract. FSE - Field Service Engineer - A person who is authorized by the contractor to perform maintenance (corrective and/or preventive) services on the AVAHCS premises. NFPA - National Fire Protection Association. OEM Original Equipment Manufacturer. OSHA Occupational Safety and Health Administration. PM - Preventive Maintenance Inspection. Services which are periodic in nature and are required to maintain the equipment in such condition that it may be operated in accordance with its intended design and functional capacity with minimal incidence of malfunction or inoperative conditions. Unscheduled repairs emergency services required to restore equipment to working condition outside normal hours of coverage. UL Underwriter s Laboratories Conformance Standards Contractor shall ensure that the equipment functions in conformance with the latest published edition of the applicable standards; including but not limited to NFPA-99, UL, OSHA, VA, CDRH, etc. and the Manufacturer's Performance standards/ specifications as used when the equipment was originally procured and that any upgrades/updates will meet the stated standards/specifications. Hours of Coverage The contractor will provide all required services within the normal business hours (8:00 AM to 5:00 PM (CST) M-F). All services shall be performed during these normal hours of coverage unless one of the following conditions exists: The contractor wishes to furnish services at a time that is outside of the normal hours of coverage, at no additional cost to the Government, the contractor submits a request to the COR prior to the proposed start of the work, and the request is approved in writing by the COR before work is begun. The COR directs that the services be furnished at a time that is outside the normal hours of coverage and the additional cost is recommended by the COR and authorized by the CO. The contractor shall provide coverage 24 hours/day, 7 days/week and all holidays. Work performed outside the normal hours of coverage must be preapproved by the CO, COR or Alt COR. The Contractor will provide a written estimate of the charges prior to approval of the work. Work performed outside the normal hours of coverage at the request of FSE/contractor shall be considered service performed during normal hours of coverage. There will be no additional charge for time spent waiting at the site during or after the normal hours of coverage for delivery of parts. Note: Hardware/software update/upgrade installations shall be scheduled and performed during normal hours of coverage at no additional charge to the government. Federal Holidays Observed by the VA Medical Center New Year s Day, Martin Luther King, Jr. Day, President s Day (Washington s birthday), Memorial Day , Independence Day, Juneteenth Independence Day, Labor Day, Columbus Day, Veterans Day, Thanksgiving Day, Christmas Day, and any other day specifically designated by the President of the United States. Documentation/Reports No later than seven (7) business days after the conclusion of any maintenance or repair the Contractor will provide to the COR or AltCOR a signed detailed service/inspection report listing all devices, all repairs for each device, parts used to maintain or repair the devices, and operating efficiency of the devices. The service/inspection report shall contain, at a minimum, the following information: Date and time of the technician s arrival on station. Type, model, and serial number(s) of all equipment on which maintenance was performed. Total time spent performing maintenance (exclusive of any travel time). Detailed narrative description of work performed. Complete list of parts replaced. Comments as to the cause of the malfunction when applicable Date and time the repair/preventive maintenance was completed. Security Requirements Upon arrival at the VA Medical Center, all Contractor personnel shall be required to report to the VA Medical Center Police for a temporary ID and then to the COR for check-in. This check-in process is mandatory. When the service is completed, the personnel shall be required to check out with the COR or Dialysis Nurse Manager. Competency of Contractor Personnel The Contractor must have an established business, with an office and full time staff. The staff includes a ""fully qualified"" FSE and a ""fully qualified"" FSE who will serve as the backup. Fully Qualified"" is based upon training and experience in the field. For training, the FSE(s) must have successfully completed a formal OEM Certified (or equivalent) training program for all equipment to be maintained and all equipment to be utilized in the performance of the contract. For field experience, the FSE(s) must have a minimum of two years of experience in the installation, calibration, maintenance and repair of the specific equipment identified in Section II. All work shall be performed by ""Fully Qualified"" competent FSEs. The Contractor shall provide written assurance of the competency of their personnel and a list of credentials of approved FSEs. The CO may authenticate the training requirements by request training certificates or credentials from the Contractor at any time for any personnel who are providing services. The CO and/or the COR or Alt COR specifically reserve the right to reject any of the Contractor's personnel and refuse them permission to work on equipment. If subcontractor(s) are used, they must meet the same competency standards as Contractor personnel and be preapproved by the CO. The Contractor shall submit any proposed change in subcontractor(s) to the CO for approval or disapproval. Exposure to Blood Borne or Infectious Material There is a potential for exposure to blood borne or other infectious material with equipment throughout the medical centers. All maintenance persons must use the Universal Precautions (i.e. decontamination of medical equipment, wearing protective gloves, aprons, and goggles) during cleaning and maintenance/repair procedures. Test Equipment The Contractor shall provide the COR or Alt COR with a copy of the current calibration certification of all test equipment which is to be used by the Contractor in the performance of this contract. Test equipment calibration shall be traceable to a national standard. Identification, Parking, Smoking, and VA Regulations Contractor s personnel shall wear visible identification at all times while on the premises of the VA. Identification shall include, as a minimum, the employee s name, position, and the contractor s trade name. It is the responsibility of the contractor to park in the appropriate designated parking areas. Information on parking is available from VA Police Service. VA will not invalidate or make reimbursement for parking violations of the contractor under any conditions. Possession of weapons is prohibited. Enclosed containers, including tool kits, shall be subject to search. Violations of VA regulations may result in citation answerable in the United States (Federal) District Court, not local district, state, or municipal court. Smoking is prohibited inside all VA buildings. Possession of weapons is prohibited. Enclosed containers, including tool kits, shall be subject to search. Violations of VA regulations may result in citation answerable in the United States (Federal) District Court, not a local district, state or municipal court. IT Security Requirements VA information technology certification and accreditation requirements do not apply to this contract and a security accreditation package is not required. VA INFORMATION AND INFORMATION SYSTEM SECURITY/PRIVACY LANGUAGE FOR INCLUSION INTO CONTRACTS GENERAL Contractors, contractor personnel, subcontractors, and subcontractor personnel shall be subject to the same Federal laws, regulations, standards, and VA Directives and Handbooks as VA and VA personnel regarding information and information system security. ACCESS TO VA INFORMATION AND VA INFORMATION SYSTEMS A contractor/subcontractor shall request logical (technical) or physical access to VA information and VA information systems for their employees, subcontractors, and affiliates only to the extent necessary to perform the services specified in the contract, agreement, or task order. All contractors, subcontractors, and third-party servicers and associates working with VA information are subject to the same investigative requirements as those of VA appointees or employees who have access to the same types of information. The level and process of background security investigations for contractors must be in accordance with VA Directive and Handbook 0710, Personnel Suitability and Security Program. The Office for Operations, Security, and Preparedness is responsible for these policies and procedures. Contract personnel who require access to national security programs must have a valid security clearance. National Industrial Security Program (NISP) was established by Executive Order 12829 to ensure that cleared U.S. defense industry contract personnel safeguard the classified information in their possession while performing work on contracts, programs, bids, or research and development efforts. The Department of Veterans Affairs does not have a Memorandum of Agreement with Defense Security Service (DSS). Verification of a Security Clearance must be processed through the Special Security Officer located in the Planning and National Security Service within the Office of Operations, Security, and Preparedness. Custom software development and outsourced operations must be located in the U.S. to the maximum extent practical. If such services are proposed to be performed abroad and are not disallowed by other VA policy or mandates, the contractor/subcontractor must state where all non-U.S. services are provided and detail a security plan, deemed to be acceptable by VA, specifically to address mitigation of the resulting problems of communication, control, data protection, and so forth. Location within the U.S. may be an evaluation factor. The contractor or subcontractor must notify the Contracting Officer immediately when an employee working on a VA system or with access to VA information is reassigned or leaves the contractor or subcontractor s employ. The Contracting Officer must also be notified immediately by the contractor or subcontractor prior to an unfriendly termination. VA INFORMATION CUSTODIAL LANGUAGE Information made available to the contractor or subcontractor by VA for the performance or administration of this contract or information developed by the contractor/subcontractor in performance or administration of the contract shall be used only for those purposes and shall not be used in any other way without the prior written agreement of the VA. This clause expressly limits the contractor/subcontractor's rights to use data as described in Rights in Data - General, FAR 52.227-14(d) (1). VA information should not be co-mingled, if possible, with any other data on the contractors/subcontractor s information systems or media storage systems in order to ensure VA requirements related to data protection and media sanitization can be met. If co-mingling must be allowed to meet the requirements of the business need, the contractor must ensure that VA s information is returned to the VA or destroyed in accordance with VA s sanitization requirements. VA reserves the right to conduct on site inspections of contractor and subcontractor IT resources to ensure data security controls, separation of data and job duties, and destruction/media sanitization procedures are in compliance with VA directive requirements. Prior to termination or completion of this contract, contractor/subcontractor must not destroy information received from VA, or gathered/created by the contractor in the course of performing this contract without prior written approval by the VA. Any data destruction done on behalf of VA by a contractor/subcontractor must be done in accordance with National Archives and Records Administration (NARA) requirements as outlined in VA Directive 6300, Records and Information Management and its Handbook 6300.1 Records Management Procedures, applicable VA Records Control Schedules, and VA Handbook 6500.1, Electronic Media Sanitization. Self-certification by the contractor that the data destruction requirements above have been met must be sent to the VA Contracting Officer within 30 days of termination of the contract. The contractor/subcontractor must receive, gather, store, back up, maintain, use, disclose and dispose of VA information only in compliance with the terms of the contract and applicable Federal and VA information confidentiality and security laws, regulations and policies. If Federal or VA information confidentiality and security laws, regulations and policies become applicable to the VA information or information systems after execution of the contract, or if NIST issues or updates applicable FIPS or Special Publications (SP) after execution of this contract, the parties agree to negotiate in good faith to implement the information confidentiality and security laws, regulations and policies in this contract. The contractor/subcontractor shall not make copies of VA information except as authorized and necessary to perform the terms of the agreement or to preserve electronic information stored on contractor/subcontractor electronic storage media for restoration in case any electronic equipment or data used by the contractor/subcontractor needs to be restored to an operating state. If copies are made for restoration purposes, after the restoration is complete, the copies must be appropriately destroyed. If VA determines that the contractor has violated any of the information confidentiality, privacy, and security provisions of the contract, it shall be sufficient grounds for VA to withhold payment to the contractor or third party or terminate the contract for default or terminate for cause under Federal Acquisition Regulation (FAR) part 12. If a VHA contract is terminated for cause, the associated BAA must also be terminated and appropriate actions taken in accordance with VHA Handbook 1600.01, Business Associate Agreements. Absent an agreement to use or disclose protected health information, there is no business associate relationship. The contractor/subcontractor must store, transport, or transmit VA sensitive information in an encrypted form, using VA-approved encryption tools that are, at a minimum, FIPS 140-2 validated. The contractor/subcontractor s firewall and Web services security controls, if applicable, shall meet or exceed VA s minimum requirements. VA Configuration Guidelines are available upon request. Except for uses and disclosures of VA information authorized by this contract for performance of the contract, the contractor/subcontractor may use and disclose VA information only in two other situations: (i) in response to a qualifying order of a court of competent jurisdiction, or (ii) with VA s prior written approval. The contractor/subcontractor must refer all requests for, demands for production of, or inquiries about, VA information and information systems to the VA contracting officer for response. Notwithstanding the provision above, the contractor/subcontractor shall not release VA records protected by Title 38 U.S.C. 5705, confidentiality of medical quality assurance records and/or Title 38 U.S.C. 7332, confidentiality of certain health records pertaining to drug addiction, sickle cell anemia, alcoholism or alcohol abuse, or infection with human immunodeficiency virus. If the contractor/subcontractor is in receipt of a court order or other requests for the above mentioned information, that contractor/subcontractor shall immediately refer such court orders or other requests to the VA contracting officer for response. For service that involves the storage, generating, transmitting, or exchanging of VA sensitive information but does not require C&A or an MOU-ISA for system interconnection, the contractor/subcontractor must complete a Contractor Security Control Assessment (CSCA) on a yearly basis and provide it to the COTR. INFORMATION SYSTEM DESIGN AND DEVELOPMENT Information systems that are designed or developed for or on behalf of VA at non-VA facilities shall comply with all VA directives developed in accordance with FISMA, HIPAA, NIST, and related VA security and privacy control requirements for Federal information systems. This includes standards for the protection of electronic PHI, outlined in 45 C.F.R. Part 164, Subpart C, information and system security categorization level designations in accordance with FIPS 199 and FIPS 200 with implementation of all baseline security controls commensurate with the FIPS 199 system security categorization (reference Appendix D of VA Handbook 6500, VA Information Security Program). During the development cycle a Privacy Impact Assessment (PIA) must be completed, provided to the COTR, and approved by the VA Privacy Service in accordance with Directive 6507, VA Privacy Impact Assessment. The contractor/subcontractor shall certify to the COTR that applications are fully functional and operate correctly as intended on systems using the VA Federal Desktop Core Configuration (FDCC), and the common security configuration guidelines provided by NIST or the VA. This includes Internet Explorer 7 configured to operate on Windows XP and Vista (in Protected Mode on Vista) and future versions, as required. The standard installation, operation, maintenance, updating, and patching of software shall not alter the configuration settings from the VA approved and FDCC configuration. Information technology staff must also use the Windows Installer Service for installation to the default program files directory and silently install and uninstall. Applications designed for normal end users shall run in the standard user context without elevated system administration privileges. The security controls must be designed, developed, approved by VA, and implemented in accordance with the provisions of VA security system development life cycle as outlined in NIST Special Publication 800-37, Guide for Applying the Risk Management Framework to Federal Information Systems, VA Handbook 6500, Information Security Program and VA Handbook 6500.5, Incorporating Security and Privacy in System Development Lifecycle. The contractor/subcontractor is required to design, develop, or operate a System of Records Notice (SOR) on individuals to accomplish an agency function subject to the Privacy Act of 1974, (as amended), Public Law 93-579, December 31, 1974 (5 U.S.C. 552a) and applicable agency regulations. Violation of the Privacy Act may involve the imposition of criminal and civil penalties. g. The contractor/subcontractor agrees to: (1) Comply with the Privacy Act of 1974 (the Act) and the agency rules and regulations issued under the Act in the design, development, or operation of any syste...
 

Web Link

SAM.gov Permalink
(https://sam.gov/opp/be91c4a7c14c40938f14ac869c9e8815/view)
 

Place of Performance

Address: St. Louis VA Medical Center John C. Cochran Division 915 North Grand Blvd., St. Louis 63106, USA

Zip Code: 63106

Country: USA
 

Record

SN06560991-F 20230112/230110230112 (samdaily.us)
 

Source

SAM.gov Link to This Notice
(may not be valid after Archive Date)

---

| FSG Index  |  This Issue's Index  |  Today's SAM Daily Index Page |