This is a non-personal services contract for enterprise dose
monitoring system SWHW maintenance. The contractor will provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and nonpersonal services necessary to perform maintenance and updates for government-owned equipment. The contract has a base period of performance from **** to ****, with four option periods. The work will be performed at various DHA MTFS. The contractor must develop and maintain a quality control program, and the government will evaluate performance. The contractor must provide a contract manager and alternate. All contractor personnel with access to proprietary, classified, or confidential information must execute a non-disclosure agreement. The contracting officer's representative (COR) monitors technical aspects of the contract. The contractor must be an OEM-certified service provider, and field service engineers must have appropriate OEM certification and experience. The contractor must provide documentation of installation and mandatory updates for equipment recalls. Monthly management reports on maintenance and repair activity are required. Additional documents, such as the quality control plan (QCP), are required within 30 days of contract award. There are specific requirements for access to DHA networks, including background investigations. The contract covers maintenance of hardware, firmware, and
software. The contractor must comply with various DoD and DHA regulations, including cybersecurity requirements (NIST SP ****, FedRAMP, CMMI). The contractor must comply with HIPAA privacy rules. The contractor must provide test equipment calibration traceable to NIST. No equipment shall be removed without approval. Offsite repairs are not allowed. The contractor must provide a detailed description of removed items. The contractor must return all government-owned equipment upon completion of maintenance. There are specific requirements for service vendor qualification, including experience and training. The contractor must ensure that 95% or more of all application and technical support is responded to within 24 hours of a support call, and that 100% is performed within 48 hours. 95% or more of all periodic maintenance must be performed within 30 days of the due date, and 100% within 60 days. The contractor must notify the COR of any issues beyond their control that prevent maintenance within these timeframes. The contractor must provide a completed questionnaire to the contracting officer or COR within 10 calendar days after new requirements have been provided. The contractor must provide information specific to their connectivity requirements, proposed path for the connection, and last-mile diagram. The contractor must maintain a valid maintenance contract and pertinent licenses for all devices connecting to the MHS b2b gateway. The contractor must submit the most current version of DD Form ****, System Authorization Access Request (SAAR), for all contractor employees who will access any system and/or application on a DoD network. The primary communication links shall be via encrypted tunnels (IPsec, getVPN, or SSL). The contractor must place the VPN appliance device outside the contractor's firewalls and allow full management access to this device. The contractor must procure and configure an auxiliary VPN device for backup purposes. The contractor shall send devices to the MHS VPN management authority (e. g. , DHA) via postage paid and include prepaid return shipping arrangements for the devices. The MHS VPN management authority (e. g. , DHA) will remotely configure and manage the VPN appliance once installed by the contractor. The contractor is responsible for the maintenance and repair of contractor-procured VPN equipment. The government will be responsible for the troubleshooting of VPN equipment. Telecommunications shall be established with the MHS through coordination with DHA.