Temperature Monitoring System: Naval Hospital Jacksonville, FL

Statement of Work (SOW) / Performance Work Statement (PWS)

To provide maintenance and corrective services for the government-owned REES Temperature Monitoring System at Naval Hospital Jacksonville, Florida, ensuring continuous operation and proper monitoring of temperature and humidity in critical areas.

• Provide preventive and corrective maintenance on the REES Temperature Monitoring System, covering at least 140 temperature and humidity sensors, associated hardware, and software.

• Maintain equipment within Original Equipment Manufacturer (OEM) specifications, adhering to US, State, Local laws, DHA regulations, and The Joint Commission (TJC) requirements.

• Perform annual maintenance, including inspection, calibration, software updates, and replacement of components.

• Provide unplanned service calls for corrective maintenance.

• Maintain networkable systems in accordance with DHA cybersecurity requirements.

• Equipment must be maintained within OEM specifications.

• Services must comply with US, State, Local laws, DHA regulations, and TJC requirements.

• Contractor must provide 24/7 technical support.

• Repair response time is 24-48 hours.

• Uptime is defined as the time equipment is available for clinical use without restrictions.

• Period of Performance: Base Period (12 months) from 15 May 2026 to 14 May 2027, with four (4) 12-month Option Periods extending to 14 May 2031.

• Place of Performance: Naval Hospital Jacksonville and its associated clinics in Jacksonville, FL; Albany, GA; Kings Bay, GA; and Key West, FL.

• Contractor personnel must wear identification badges.

• All installation personnel must be OEM-Certified Service Providers.

• Contractor must have legal access to Rees Scientific software licenses.

• Contractor must supply new hardware components/modules.

• Vendor must meet DHA and NH Jacksonville IT requirements and obtain an Authority to Operate (ATO) or ATO-C.

• Services will not be performed on Federal holidays.

• Contractor must provide onsite training during annual maintenance visits.

• Electronic certification documentation required within 5 business days of calibration.

• Detailed description of removed items required within 5 business days of item removal.

• Signed service order form required within 3 business days of maintenance completion.

Form / Attachment / Pricing Sheet

This document, Technical Exhibit 1, lists specific part numbers, descriptions, quantities, and associated items required for the opportunity. It appears to detail components for a monitoring or sensor system, likely related to environmental monitoring or facility management.

• REES Part Numbers & Descriptions: Lists specific software and hardware components such as "Rees Server Software," "ATO Modification for Server," "Hardwired MPX Panels," and "Modification for MPXs."
• TPTs (probes): Details the types and quantities of probes (TPT 2, 3, and 4) and their associated sensor modules.
• Sensor Locations & Totals: Specifies sensor quantities for different locations: Main Hospital (88), NBHC Kings Bay (7), NBHC Mayport (14), NBHC Albany (7), and NBHC Key West (8), totaling 124 sensors.
• Kits & Batteries: Includes quantities for "Validation Kit for New Systems," "Centron Battery," various battery part numbers (BATT1001, BATT1709, MICRO-BAT, V2-BATT, Z3-BATT), and their respective quantities.

This exhibit is crucial for bidders to understand the specific hardware, software, and quantities of components required for the opportunity. It directly impacts procurement, integration, and potential pricing strategies. Bidders must ensure their proposed solution includes or can accommodate these exact part numbers and quantities.

Form / Attachment / Pricing Sheet

This document outlines the Defense Health Agency (DHA) contracting requirements for Medical Device and Equipment (MDE) Cybersecurity/Risk Management Framework (RMF). It details the cybersecurity and RMF compliance obligations for vendors providing MDE and related software to the DHA.

• MDE Definition: Any system, device, or software intended for use in or direct support of medical diagnosis, treatment, or the medical mission.
• Cybersecurity Requirements: Includes establishing and maintaining a test/laboratory environment, conducting self-assessments, vulnerability scans (Nessus, SCAP), and adhering to DISA Security Technical Implementation Guides (STIGs).
• RMF Process: Outlines the steps for obtaining Authority to Operate (ATO) or RMF Approval, including documentation, testing, and submission timelines.
• Software Updates: Requirements for scheduling and notifying DHA of software patches, updates, and version changes.
• FedRAMP: Commercial cloud offerings must be FedRAMP approved.
• Personnel Requirements: Mandates specific cybersecurity certifications, training (DoD Cyber Awareness, PII, HIPAA), and background investigations for vendor personnel.
• Warranty & Maintenance: Vendors are responsible for maintaining security posture during warranty and subsequent Service Maintenance Agreements (SMAs).
• Timeline: Specifies initial draft and final due dates for various RMF-related deliverables post-award.

This document is critical for any vendor bidding on opportunities involving MDE for the DHA. It clearly defines the stringent cybersecurity and RMF compliance requirements that must be met throughout the lifecycle of the MDE. Bidders must understand these requirements to accurately price their proposals and ensure they have the capability to meet DHA's security standards. Key areas include the need for a test environment, regular scanning, specific certifications for personnel, and adherence to a defined RMF process with strict timelines.