7030 The Vitrea Enterprise Suite For The Chalmers P Wylie Va Ambulatory Care Center

Work Detail

The Department Of Veterans Affairs Chalmers P Wylie Va Ambulatory Care Center Columbus Intends To Negotiate A Sole Source Contract With Vital Images Inc To Purchase The Vitrea Enterprise Suite Which Offers Radiologists 3D Reconstruction Software And Applications For Cardiovascular Neurovascular Oncology And Other Radiology Imaging Integration With Pacs Allows Users To Access Its Tools Without Compromising Speed Or Quality This Purchase Will Result In A Hardware Refresh And A Software Upgrade To Our Existing System Only The Described Vitrea Enterprise Suite Will Interact With Our Existing System Vital Images Inc Is The Manufacturer The North American Industry Classification System Code Naics Is 334614 The Government Believes That Vital Images Inc Is The Only Provider That Can Satisfy The Agency Requirements Therefore The Government Intends To Proceed With A Sole Source For The Required Hardware Refresh Software Upgrade This Procurement Is Being Conducted In Accordance With Far 6 302 Only One Responsible Source And No Other Vendor Will Satisfy Agency Requirements To The Best Of Our Knowledge Vital Images Inc Is The Only Source That Provides The Above Indicated Services Supplies This Notice Of Intent Is Not A Request For Competitive Quotes No Solicitation Document Is Available However Any Firm That Believes It Can Meet These Requirements May Give Written Notification To The Contracting Officer Within Three 3 Business Days From The Date Of Publication Of This Synopsis Supporting Evidence Must Be Furnished In Sufficient Detail To Demonstrate The Ability To Comply With The Above Requirements Information Can Be Sent To The Contracting Officer Va Ambulatory Care Center 420 N James Road Columbus Ohio 43219 1834 Or Faxed To 614 388 7500 Or Emailed To Gina Crank Va Gov Responses Received Will Be Evaluated However A Determination By The Government Not To Compete The Proposed Procurement Based Upon Responses To This Notice Is Solely Within The Discretion Of The Government If No Responses Are Received The Chalmers P Wylie Va Ambulatory Care Center Columbus Will Proceed With The Sole Source Negotiation With Vital Images Inc Security Requirements Va Information And Information System Security Privacy Requirements For It Contracts General Requirements A Contractor Subcontractor Shall Request Logical Technical Or Physical Access To Va Information And Va Information Systems For Their Employees Subcontractors And Affiliates Only To The Extent Necessary To Perform The Services Specified In The Contract Agreement Or Task Order Contractors Contractor Personnel Subcontractors And Subcontractor Personnel Shall Be Subject To The Same Federal Laws Regulations Standards And Va Directives And Handbooks As Va And Va Personnel Regarding Information And Information System Security Special Requirements All Contractors Subcontractors And Third Party Servicers And Associates Working With Va Information Are Subject To The Same Investigative Requirements As Those Of Va Appointees Or Employees Who Have Access To The Same Types Of Information The Level And Process Of Background Security Investigations For Contractors Must Be In Accordance With Va Directive And Handbook 0710 Personnel Suitability And Security Program The Office For Operations Security And Preparedness Is Responsible For These Policies And Procedures Access Include Section 3 A Of The Security Language Form Here The Contractor Or Subcontractor Must Notify The Contracting Officer Immediately When An Employee Working On A Va System Or With Access To Va Information Is Reassigned Or Leaves The Contractor Or Subcontractor S Employ The Contracting Officer Must Also Be Notified Immediately By The Contractor Or Subcontractor Prior To An Unfriendly Termination The Contractor Subcontractor Shall Not Make Copies Of Va Information Except As Authorized And Necessary To Perform The Terms Of The Agreement Or To Preserve Electronic Information Stored On Contractor Subcontractor Electronic Storage Media For Restoration In Case Any Electronic Equipment Or Data Used By The Contractor Subcontractor Needs To Be Restored To An Operating State If Copies Are Made For Restoration Purposes After The Restoration Is Complete The Copies Must Be Appropriately Destroyed If Va Determines That The Contractor Has Violated Any Of The Information Confidentiality Privacy And Security Provisions Of The Contract It Shall Be Sufficient Grounds For Va To Withhold Payment To The Contractor Or Third Party Or Terminate The Contract For Default Or Terminate For Cause Under Federal Acquisition Regulation Far Part 12 If A Vha Contract Is Terminated For Cause The Associated Baa Must Also Be Terminated And Appropriate Actions Taken In Accordance With Vha Handbook 1600 01 Business Associate Agreements Absent An Agreement To Use Or Disclose Protected Health Information There Is No Business Associate Relationship Media Protection Sanitization Bio Medical Devices And Other Equipment Or Systems Containing Media Hard Drives Optical Disks Etc With Va Sensitive Information Must Not Be Returned To The Vendor At The End Of Lease For Trade In Or Other Purposes The Options Are 1 Vendor Must Accept The System Without The Drive 2 Va S Initial Medical Device Purchase Includes A Spare Drive Which Must Be Installed In Place Of The Original Drive At Time Of Turn In Or 3 Va Must Reimburse The Company For Media At A Reasonable Open Market Replacement Cost At Time Of Purchase 4 Due To The Highly Specialized And Sometimes Proprietary Hardware And Software Associated With Medical Equipment Systems If It Is Not Possible For The Va To Retain The Hard Drive Then A The Equipment Vendor Must Have An Existing Baa If The Device Being Traded In Has Sensitive Information Stored On It And Hard Drive S From The System Are Being Returned Physically Intact And B Any Fixed Hard Drive On The Device Must Be Non Destructively Sanitized To The Greatest Extent Possible Without Negatively Impacting System Operation Selective Clearing Down To Patient Data Folder Level Is Recommended Using Va Approved And Validated Overwriting Technologies Methods Tools Applicable Media Sanitization Specifications Need To Be Preapproved And Described In The Purchase Order Or Contract C A Statement Needs To Be Signed By The Director System Owner That States That The Drive Could Not Be Removed And That A And B Controls Above Are In Place And Completed The Iso Needs To Maintain The Documentation Security Privacy Incident Reporting A The Term Security Incident Means An Event That Has Or Could Have Resulted In Unauthorized Access To Loss Or Damage To Va Assets Or Sensitive Information Or An Action That Breaches Va Security Procedures The Contractor Subcontractor Shall Immediately Notify The Cor And Simultaneously The Designated Iso And Privacy Officer For The Contract Of Any Known Or Suspected Security Privacy Incidents Or Any Unauthorized Disclosure Of Sensitive Information Including That Contained In System S To Which The Contractor Subcontractor Has Access Consistent With The Requirements Of 38 U S C 5725 A Contract May Require Access To Sensitive Personal Information If So The Contractor Is Liable To Va For Liquidated Damages In The Event Of A Data Breach Or Privacy Incident Involving Any Spi The Contractor Subcontractor Processes Or Maintains Under This Contract D Based On The Determinations Of The Independent Risk Analysis The Contractor Shall Be Responsible For Paying To The Va Liquidated Damages In The Amount Of 37 50 Per Affected Individual To Cover The Cost Of Providing Credit Protection Services To Affected Individuals Consisting Of The Following 1 Notification 2 One Year Of Credit Monitoring Services Consisting Of Automatic Daily Monitoring Of At Least 3 Relevant Credit Bureau Reports 3 Data Breach Analysis 4 Fraud Resolution Services Including Writing Dispute Letters Initiating Fraud Alerts And Credit Freezes To Assist Affected Individuals To Bring Matters To Resolution 5 One Year Of Identity Theft Insurance With 20 000 00 Coverage At 0 Deductible And 6 Necessary Legal Expenses The Subjects May Incur To Repair Falsified Or Damaged Credit Records Histories Or Financial Affairs Training Contractor Rules Of Behavior A All Contractor Employees And Subcontractor Employees Requiring Access To Va Information And Va Information Systems Shall Complete The Following Before Being Granted Access To Va Information And Its Systems 1 Sign And Acknowledge Either Manually Or Electronically Understanding Of And Responsibilities For Compliance With The Contractor Rules Of Behavior See Appendix A Relating To Access To Va Information And Information Systems 2 Successfully Complete The Va Privacy And Information Security Awareness And Rules Of Behavior Training And Annually Complete Required Security Training Instructions Provided At End Of Document 3 Successfully Complete The Appropriate Va Privacy And Hipaa Training And Annually Complete Required Privacy Training Instructions Provided At End Of Document And B The Contractor Shall Provide To The Contracting Officer And Or The Cor A Copy Of The Training Certificates And Certification Of Signing The Contractor Rules Of Behavior For Each Applicable Employee Within 1 Week Of The Initiation Of The Contract And Annually Thereafter As Required C Failure To Complete The Mandatory Annual Training And Sign The Rules Of Behavior Annually Within The Timeframe Required Is Grounds For Suspension Or Termination Of All Physical Or Electronic Access Privileges And Removal From Work On The Contract Until Such Time As The Training And Documents Are Complete Appendix A Contractor Rules Of Behavior Contractor Rules Of Behavior This User Agreement Contains Rights And Authorizations Regarding My Access To And Use Of Any Information Assets Or Resources Associated With My Performance Of Services Under The Contract Terms With The Department Of Veterans Affairs Va This User Agreement Covers My Access To All Va Data Whether Electronic Or Hard Copy Data Va Information Systems And Resources Systems And Va Sites Sites This User Agreement Incorporates Rules Of Behavior For Using Va And Other Information Systems And Resources Under The Contract 1 General Terms And Conditions For All Actions And Activities Under The Contract A I Understand And Agree That I Have No Reasonable Expectation Of Privacy In Accessing Or Using Any Va Or Other Federal Government Information Systems B I Consent To Reviews And Actions By The Office Of Information Amp Technology Oi Amp T Staff Designated And Authorized By The Va Chief Information Officer Cio And To The Va Oig Regarding My Access To And Use Of Any Information Assets Or Resources Associated With My Performance Of Services Under The Contract Terms With The Va These Actions May Include Monitoring Recording Copying Inspecting Restricting Access Blocking Tracking And Disclosing To All Authorized Oi Amp T Va And Law Enforcement Personnel As Directed By The Va Cio Without My Prior Consent Or Notification C I Consent To Reviews And Actions By Authorized Va Systems Administrators And Information Security Officers Solely For Protection Of The Va Infrastructure Including But Not Limited To Monitoring Recording Auditing Inspecting Investigating Restricting Access Blocking Tracking Disclosing To Authorized Personnel Or Any Other Authorized Actions By All Authorized Oi Amp T Va And Law Enforcement Personnel D I Understand And Accept That Unauthorized Attempts Or Acts To Access Upload Change Or Delete Information On Federal Government Systems Modify Federal Government Systems Deny Access To Federal Government Systems Accrue Resources For Unauthorized Use On Federal Government Systems Or Otherwise Misuse Federal Government Systems Or Resources Are Prohibited E I Understand That Such Unauthorized Attempts Or Acts Are Subject To Action That May Result In Criminal Civil Or Administrative Penalties This Includes Penalties For Violations Of Federal Laws Including But Not Limited To 18 U S C 1030 Fraud And Related Activity In Connection With Computers And 18 U S C 2701 Unlawful Access To Stored Communications F I Agree That Oi Amp T Staff In The Course Of Obtaining Access To Information Or Systems On My Behalf For Performance Under The Contract May Provide Information About Me Including But Not Limited To Appropriate Unique Personal Identifiers Such As Date Of Birth And Social Security Number To Other System Administrators Information Security Officers Isos Or Other Authorized Staff Without Further Notifying Me Or Obtaining Additional Written Or Verbal Permission From Me G I Understand I Must Comply With Va S Security And Data Privacy Directives And Handbooks I Understand That Copies Of Those Directives And Handbooks Can Be Obtained From The Contracting Officer s Representative Cor If The Contractor Believes The Policies And Guidance Provided By The Cor Is A Material Unilateral Change To The Contract The Contractor Must Elevate Such Concerns To The Contracting Officer For Resolution H I Will Report Suspected Or Identified Information Security Privacy Incidents To The Cor And To The Local Iso Or Privacy Officer As Appropriate 2 General Rules Of Behavior A Rules Of Behavior Are Part Of A Comprehensive Program To Provide Complete Information Security These Rules Establish Standards Of Behavior In Recognition Of The Fact That Knowledgeable Users Are The Foundation Of A Successful Security Program Users Must Understand That Taking Personal Responsibility For The Security Of Their Computer And The Information It Contains Is An Essential Part Of Their Job B The Following Rules Apply To All Va Contractors I Agree To 1 Follow Established Procedures For Requesting Accessing And Closing User Accounts And Access I Will Not Request Or Obtain Access Beyond What Is Normally Granted To Users Or By What Is Outlined In The Contract 2 Use Only Systems Software Databases And Data Which I Am Authorized To Use Including Any Copyright Restrictions 3 I Will Not Use Other Equipment Oe Non Contractor Owned For The Storage Transfer Or Processing Of Va Sensitive Information Without A Va Cio Approved Waiver Unless It Has Been Reviewed And Approved By Local Management And Is Included In The Language Of The Contract If Authorized To Use Oe It Equipment I Must Ensure That The System Meets All Applicable 6500 Handbook Requirements For Oe 4 Not Use My Position Of Trust And Access Rights To Exploit System Controls Or Access Information For Any Reason Other Than In The Performance Of The Contract 5 Not Attempt To Override Or Disable Security Technical Or Management Controls Unless Expressly Permitted To Do So As An Explicit Requirement Under The Contract Or At The Direction Of The Cor Or Iso If I Am Allowed Or Required To Have A Local Administrator Account On A Government Owned Computer That Local Administrative Account Does Not Confer Me Unrestricted Access Or Use Nor The Authority To Bypass Security Or Other Controls Except As Expressly Permitted By The Va Cio Or Cio s Designee 6 Contractors Use Of Systems Information Or Sites Is Strictly Limited To Fulfill The Terms Of The Contract I Understand No Personal Use Is Authorized I Will Only Use Other Federal Government Information Systems As Expressly Authorized By The Terms Of Those Systems I Accept That The Restrictions Under Ethics Regulations And Criminal Law Still Apply 7 Grant Access To Systems And Information Only To Those Who Have An Official Need To Know 8 Protect Passwords From Access By Other Individuals 9 Create And Change Passwords In Accordance With Va Handbook 6500 On Systems And Any Devices Protecting Va Information As Well As The Rules Of Behavior And Security Settings For The Particular System In Question 10 Protect Information And Systems From Unauthorized Disclosure Use Modification Or Destruction I Will Only Use Encryption That Is Fips 140 2 Validated To Safeguard Va Sensitive Information Both Safeguarding Va Sensitive Information In Storage And In Transit Regarding My Access To And Use Of Any Information Assets Or Resources Associated With My Performance Of Services Under The Contract Terms With The Va 11 Follow Va Handbook 6500 1 Electronic Media Sanitization To Protect Va Information I Will Contact The Cor For Policies And Guidance On Complying With This Requirement And Will Follow The Cor s Orders 12 Ensure That The Cor Has Previously Approved Va Information For Public Dissemination Including E Mail Communications Outside Of The Va As Appropriate I Will Not Make Any Unauthorized Disclosure Of Any Va Sensitive Information Through The Use Of Any Means Of Communication Including But Not Limited To E Mail Instant Messaging Online Chat And Web Bulletin Boards Or Logs 13 Not Host Set Up Administer Or Run An Internet Server Related To My Access To And Use Of Any Information Assets Or Resources Associated With My Performance Of Services Under The Contract Terms With The Va Unless Explicitly Authorized Under The Contract Or In Writing By The Cor 14 Protect Government Property From Theft Destruction Or Misuse I Will Follow Va Directives And Handbooks On Handling Federal Government It Equipment Information And Systems I Will Not Take Va Sensitive Information From The Workplace Without Authorization From The Cor 15 Only Use Anti Virus Software Antispyware And Firewall Intrusion Detection Software Authorized By Va I Will Contact The Cor For Policies And Guidance On Complying With This Requirement And Will Follow The Cor s Orders Regarding My Access To And Use Of Any Information Assets Or Resources Associated With My Performance Of Services Under The Contract Terms With Va 16 Not Disable Or Degrade The Standard Anti Virus Software Antispyware And Or Firewall Intrusion Detection Software On The Computer I Use To Access And Use Information Assets Or Resources Associated With My Performance Of Services Under The Contract Terms With Va I Will Report Anti Virus Antispyware Firewall Or Intrusion Detection Software Errors Or Significant Alert Messages To The Cor 17 Understand That Restoration Of Service Of Any Va System Is A Concern Of All Users Of The System 18 Complete Required Information Security And Privacy Training And Complete Required Training For The Particular Systems To Which I Require Access 3 Additional Conditions For Use Of Non Va Information Technologyresources A When Required To Complete Work Under The Contract I Will Directly Connect To The Va Network Whenever Possible If A Direct Connection To The Va Network Is Not Possible Then I Will Use Va Approved Remote Access Software And Services B Remote Access To Non Public Va Information Technology Resources Is Prohibited From Publicly Available It Computers Such As Remotely Connecting To The Internal Va Network From Computers In A Public Library C I Will Not Have Both A Va Network Line And Any Kind Of Non Va Network Line Including A Wireless Network Card Modem With Phone Line Or Other Network Device Physically Connected To My Computer At The Same Time Unless The Dual Connection Is Explicitly Authorized By The Cor D I Understand That I May Not Obviate Or Evade My Responsibility To Adhere To Va Security Requirements By Subcontracting Any Work Under Any Given Contract Or Agreement With Va And That Any Subcontractor S I Engage Shall Likewise Be Bound By The Same Security Requirements And Penalties For Violating The Same 4 Statement On Litigation This User Agreement Does Not And Should Not Be Relied Upon To Create Any Other Right Or Benefit Substantive Or Procedural Enforceable By Law By A Party To Litigation With The United States Government 5 Acknowledgement And Acceptance I Acknowledge Receipt Of This User Agreement I Understand And Accept All Terms And Conditions Of This User Agreement And I Will Comply With The Terms And Conditions Of This Agreement And Any Additional Va Warning Banners Directives Handbooks Notices Or Directions Regarding Access To Or Use Of Information Systems Or Information The Terms And Conditions Of This Document Do Not Supersede The Terms And Conditions Of The Signatory S Employer And Va Print Or Type Your Full Name Signature Date Office Phone Position Title Contractor S Company Name Please Complete And Return The Original Signed Document To The Co Within The Timeframe Stated In The Terms Of The Contract The Co Will Forward A Copy To The Cor Government Furnished Equipment Gfe Government Furnished Information Gfi Not Required Other Pertinent Information Or Special Considerations A Identification Of Possible Follow On Work B Identification Of Potential Conflicts Of Interest Coi C Identification Of Non Disclosure Requirements D Packaging Packing And Shipping Instructions E Inspection And Acceptance Criteria The Product Will Be Inspected By A Physicist To Ensure Safety And Proper Working Condition Of The Product Before Final Payment Risk Control Not Required Place Of Performance All Work Will Be Performed At The Chalmers P Wylie Va Ambulatory Care Center Columbus

Contact Information

Other Detail