7B20--PLOTTER- CANON COLORWAVE T60 MFP

Statement of Work (SOW) / Performance Work Statement (PWS)

To acquire a new colored printer/plotter for the Alexandria VA Campus-Pineville, LA, to replace a current unit that has reached its end of useful life and is experiencing frequent operational issues. The new plotter will be used for printing, scanning, and plotting engineering documents such as construction blueprints and architectural floor plans.

• Furnish and install one (1) new colored plotter.

• Capabilities required: Print up to 4 D’s/min B/W & 2 D’s/Min Color; Copy, Print, Scan; Print in 600x1200dpi/Scan in 600x600dpi; 8 x 11” Intuitive Touchscreen System Controller; 2 Roll Capacity for Unattended Printing.

• Service to include all Maintenance, Parts, and Labor under an Active Service Agreement.

• Delivery and installation during business hours (7:00 am - 4:30 pm, Monday-Friday).

• Contractor to provide all necessary tools, labor, equipment, and materials.

• Contractor shall provide a one (1) year standard warranty with one (1) renewable option year.

• All personnel must have certified or proper training.

• Contractor must inform the Project Engineer or COR in writing of anticipated delivery/setup dates, delays, potential change orders, and provide a written plan for corrective action for any work exceeding contract time.

• All completed contract work requires approval and acceptance by the Project Engineer or COR prior to payment.

• Place of Performance: Alexandria VA Health Care Facility, Pineville, Louisiana, or immediate vicinity.

• Period of Performance: All contractually required work and tests must be successfully completed within One (1) day at the time of plotter delivery.

• Security and General Requirements:

  • On-site work hours: 8 am - 4:30 pm CST, Monday-Friday (excluding holidays), unless otherwise approved.
  • Compliance with Alexandria VA Health Care System fire, safety, and traffic regulations.
  • Contractor to field verify existing conditions.
  • No blocking of roadways, drainage ditches, pedestrian walkways, or services without prior approval.
  • All work, materials, storage, and unforeseen problems to be coordinated with the Project Engineer.
  • Work shall not begin until authorized by the Contracting Officer.

• Information Security and Privacy:

  • Contractors and personnel are subject to the same federal laws, regulations, standards, VA directives, and handbooks as VA personnel regarding information and information system security and privacy.
  • Government receives unlimited rights to data/intellectual property first produced and delivered.
  • VA information is to be used only for contract performance and protected according to VA Directive 6500 and IAM Security processes.
  • Contractor must ensure compliance with Federal and VA requirements for data protection, encryption, physical/logical segregation, classification, and media sanitization.
  • VA reserves the right to audit contractor IT resources.
  • Contractor shall store and transmit VA sensitive information using VA-approved encryption tools (FIPS 140-2 validated) and TLS configurations (NIST 800-52).
  • Contractor's firewall and web services security controls must meet or exceed VA minimum requirements.
  • Use and disclosure of VA information is restricted; all requests must be referred to the VA CO.
  • Specific clauses regarding medical records (38 U.S.C. § 5705, § 7332) apply.
  • Data destruction must comply with NARA requirements (VA Directive 6300, VA Handbook 6300.1).
  • Contractor must provide a data destruction plan prior to contract termination.
  • Media containing VA information that cannot be destroyed must be returned to VA securely.

• Access to VA Information and Systems:

  • Access is granted only to the extent necessary for contract performance.
  • Contractors must sign the VA Information Security Rule of Behavior (ROB) before access is granted.
  • Subject to the same security investigative and clearance requirements as VA appointees (VA Directive and Handbook 0710).
  • Operations required to be in the United States (VAAR 852.204-71(d)).
  • Immediate written notification to COR/CO required for personnel separation or changes in access needs/security status.
  • Access revocation and return of VA-issued property (badges, laptops, keys, etc.) upon contract fulfillment or termination.

• Training:

  • Mandatory completion of VA Privacy and Information Security Awareness and Rules of Behavior course (TMS #10176) initially and annually.
  • Signing and acknowledgment of Organizational Rules of Behavior.
  • Additional role-based cybersecurity/privacy training may be required.
  • Training certificates must be provided within five days of contract initiation and annually thereafter.

• Security Incident Investigation:

  • Immediate reporting (within one hour) of suspected security/privacy incidents to VA OIT’s Enterprise Service Desk (ESD) and COR/CO.
  • Detailed incident reporting and ongoing written updates required.
  • Full cooperation with VA or third-party investigations.
  • Concurrent reporting to appropriate law enforcement entities for theft, break-in, or criminal activity.
  • Compliance with VA Handbook 6500.2 for breach management.
  • Liquidated damages may apply for data breaches (clause 852.211-76).

• Product Integrity, Authenticity, Provenance, Anti-Counterfeit and Anti-Tampering:

  • Compliance with CFR Title 15 Part 7 regarding securing the Information and Communications Technology (ICT) Supply Chain.
  • Equipment must be purchased from an Original Equipment Manufacturer (OEM) or authorized reseller.
  • Risk management practices for supply chain delivery, including chain of custody, inventory management, and information protection.
  • Hash conforming to FIPS Security Requirements for Cryptographic Modules (FIPS 140-2 or successor) required for software/patches.
  • Software Bill of Materials (SBOM) required.
  • Use of trusted channels and tamper-evident packaging for deliveries.
  • Capability for detecting unauthorized access (tampering) must be demonstrated.

• Viruses, Firmware and Malware:

  • Due diligence to ensure provided software and patches are free of viruses/malware.
  • Warranty against insertion of malicious code.
  • Justification required for "false positive" antivirus hits.
  • Prohibition of uploading viruses or malicious content onto VA systems.

• Cryptographic Requirement:

  • Documentation of cryptographic system protection for confidentiality, integrity, authentication, and non-repudiation.
  • Use of approved cryptographic methods (FIPS 140-2 or successor, NIST 800-52).
  • Provision of automated remote key-establishment and emergency re-keying capabilities.

• Patching Governance:

  • Documentation detailing patch management, vulnerability management, and update processes.
  • Verification and documentation of appropriate updates/patches installed prior to delivery.
  • Timely provision of software/firmware updates to remediate vulnerabilities (30 days for standard, 7 days for critical).

• Specialized Devices/Systems:

  • Compliance with applicable Federal law, regulations, and VA policies for medical devices, SPS-OT, and Research Scientific Computing Devices.
  • Integration of applicable VA Handbook 6500 and Information Security Knowledge Service specifications.
  • Certification of devices/systems after VA Enterprise Risk Analysis (ERA) process.
  • Compliance with FDA cybersecurity management practices.
  • Devices must be capable of accepting security patches; contractor must commit resources for patching if required.
  • Devices must support VA-approved antivirus capabilities or whitelisting applications.
  • Verification that embedded software is free of known viruses or malware.
  • Return of media containing VA sensitive information with media removed, or sanitization/replacement as specified.

Sources Sought Synopsis

This document is a Sources Sought Synopsis, not a solicitation, to determine the availability of potential sources capable of providing a "PLOTTER, CANON COLORWAVE T60 MFP" for the Alexandria VAMC, Pineville, LA. The Department of Veterans Affairs, Overton Brooks VA Medical Center, is conducting market research for this requirement.

Interested vendors must submit the following information via email to veronica.maskell@va.gov by April 15, 2026, 10:00 AM CST:

1. Statement of Capability: A brief (5 pages or less) statement detailing your firm's ability to provide the specified plotter. Include an authorized letter to perform the services and requested supplies.
2. Business Size and Socio-Economic Status: Indicate your firm's classification (SDVOSB, VOSB, Hubzone, 8(a), small, small disadvantaged, woman-owned, large business) relative to NAICS code 334118 (size standard 1000 employees). Include your UEI number and SAM.gov/VetCert registration status.
3. GSA Contract Number: If applicable.

• Product: PLOTTER, CANON COLORWAVE T60 MFP.

• Location: Alexandria VAMC, Pineville, LA.

• NAICS Code: 334118 (Computer Terminal and Other Computer Peripheral Equipment Manufacturing).

• Size Standard: 1000 employees.

• This is not a solicitation. Do not request a copy of a solicitation as none currently exists.

• A future solicitation may be published on GSA eBUY or Contract Opportunities.

• Responses to this synopsis are separate from any future solicitation response.

• Contractors must be registered in SAM.gov to receive an award.

• For SDVOSB or VOSB status, contractors must be VetCert registered/certified by the SBA.

• The detailed requirements are in the attached SOW (SOW Plotter Revised).