BOP RFQ Ultrasound Services Proposal Compliance Gap Analysis

Contract type and pricing basis

Indefinite delivery/requirements type; firm-fixed unit prices per session; estimated quantities not guaranteed

Acknowledges requirements-type and firm-fixed unit per session; notes quantities estimated/not guaranteed (Cover Letter; Section 9)

Aligned

None

Award timing / EDOA / clearance completion before EDOA

Award anticipated May 2026; EDOA June 1, 2026; full performance begins EDOA; clearances completed prior

Acknowledges anticipated award/EDOA and commits clearances completed in advance (Cover Letter)

Aligned

None

Options evaluated; Gov unilateral right to exercise

Evaluate base + all option years; FAR 52.217-9; optional extension 61–66 months (tailoring)

Acknowledges options evaluated and unilateral exercise under 52.217-9 (Sections 2, 12)

Partially Aligned

Does not mention FAR 52.217-8 optional 6-month extension; add acknowledgement to avoid surprise pricing/availability issues.

Ordering methods

Orders can be oral, fax, mail, electronic commerce; ordering officials limited

Not addressed

Gap

Low/Medium — operational; add acknowledgement that orders may be oral/electronic and only authorized officials can order.

Invoices/payment method (EFT/SAM)

Payment by EFT via SAM (52.232-33); invoices to address in SF1449 block 18a

Not addressed beyond pricing and SAM maintenance

Gap

Low/Medium — may affect readiness; add statement that invoicing will comply with SF1449 and EFT/SAM.

Third Party Liability (42 U.S.C. 2651)

US can recover costs from liable third parties; policy statement

Not addressed

Gap

Low — informational; acknowledgement optional.

Service Contract Labor Standards applicability

Includes SCLS clauses and wage determination; Radiologic Technologist rate provided; EO paid sick leave clause present

Not addressed (no labor compliance statement)

Gap

Medium — add statement acknowledging SCLS/Wage Determination compliance and that pricing accounts for required wages/fringes where applicable.

DOJ-02 Privacy training (annual) + records training + ROB/NDA expectations

Ensure privacy training at outset and annually; maintain certificates; annual email to COR; sign Privacy ROB and NDA before accessing DOJ info

Commits to privacy/cyber training; mentions ROB/NDA may be required; breach reporting within 1 hour (Section 7)

Partially Covered

Does not explicitly commit to annual email verification to COR or to providing signed NDAs to CO before start (as clause suggests). Add explicit procedural commitments.

DOJ-02 prohibition on contractor IT/network unless authorized; remote work limits

Perform tasks on authorized Gov networks/facilities unless specifically authorized; SCOP approval for contractor IT handling DOJ info

States will not store DOJ info on removable media or contractor-owned systems unless authorized in writing by CO/COR and SCOP where applicable (Section 7)

Covered

Add explicit statement that all work is performed on-site (consistent with SOW) and no remote processing/storage will occur absent written authorization.

DOJ-02 breach of PII reporting

Report actual/suspected breach of PII within 1 hour; provide written report within 24 hours (per clause text)

Commits to reporting any actual or suspected breach of PII within 1 hour (Section 7)

Partially Covered

Does not mention the 24-hour written report content requirements; add explicit commitment to the 24-hour written report to DOJ SOC and cooperation.

DOJ-02 separation checklist

Complete separation checklist before employee terminates; verify return/disposition of PII; terminate access; notify CO within 24 hours for adverse separations

Not addressed

Gap

Medium — personnel offboarding control may be reviewed for compliance (especially if any IT access/PII handling occurs).

DOJ-05 incident reporting (security incident) & JSOC escalation

Report confirmed security incident within 1 hour to CO/COR; if unreachable call JSOC; potential incident reporting if not resolved within 24 hours; weekly updates during investigation

Commits to 1-hour breach reporting to security ops contacts and contracting officials (Section 7)

Partially Covered

Does not name JSOC, phone/email, weekly updates, or 24-hour potential-incident determination requirement. Add explicit alignment language.

DOJ-05 prohibition on contractor-owned laptops/media unless CO approves + FIPS encryption + logs + erase within 90 days

If contractor devices used (only if approved), must meet encryption, patching, AV/firewall, extract logging/erasure, ROB annual, CSAT annual approval, etc.

States will not store DOJ info on removable media or contractor-owned systems unless expressly authorized; implies will follow institutional-approved methods (Section 7)

Partially Covered

Good default stance; add explicit statement: 'No contractor-owned devices will be used to store/process DOJ information; if exception authorized, we will comply with DOJ-05 IV.F requirements (FIPS 140-2, logging, 90-day erasure, etc.).'

DOJ-03 personnel security approvals prior to start; written authorization required

No employee may commence prior to written authorization; investigations/waivers; residency/citizenship; identity proofing/badging; favorable credit report noted in solicitation tailoring

Commits to complete clearance packets early; start only after clearances; acknowledges DOJ-07 IT access prohibition; orientation attendance (Sections 1, 4)

Partially Covered

Does not explicitly acknowledge 'favorable credit report' screening encouragement or written authorization dependency. Add explicit statement that personnel will not start without written authorization/security approval.

DOJ-07 non-U.S. citizen restriction for DOJ IT systems

Non-U.S. citizens cannot access/develop DOJ IT systems unless requirements clearly described otherwise

Acknowledges DOJ-07 prohibitions and will comply (Section 4)

Covered

Clarify whether any DOJ IT system access is needed at all; if none, explicitly state 'no DOJ IT access required'.

CPARS clause requirement (BOP 2852.242-71)

Maintain current email for CPARS registration/correspondence

Commits to maintain current email for CPARS (Section 10)

Covered

None

DOJ-01 whistleblower distribution confirmation

Distribute brochure within 30 days; confirm to CO within 45 days

Not addressed

Gap

Medium — post-award compliance obligation; omission may be viewed as lack of awareness/commitment.

Pandemic/emergency continuity (DOJ-08)

Have reasonable continuity policies, cross-training, communications; notify CO if performance at risk

Mentions qualified backup arrangements and continuity of operations interest (Section 10)

Partially Covered

Does not explicitly commit to DOJ-08 expectations (cross-training/communications/notification). Add explicit acknowledgement.

Submit SF 1449 completed/signed (Sec. L; SF1449 note blocks)

Must submit SF1449; failure may render quote unacceptable

States SF1449 is included and will be completed/signed (Section 2; 13.1)

Partially Covered

No actual completed/signed SF1449 values shown in text (UEI/CAGE blanks; offeror signature not evidenced)

High — quote may be deemed non-compliant or ineligible

Confirm ultrasound equipment provided (Sec. L item 2; SOW equipment)

Confirm on page 1 of SF1449 that equipment will be provided; contractor provides equipment every visit

Multiple explicit confirmations: provides machine every visit; acknowledges Gov provides power only (Sections 2, 3, 5, 12)

Covered

Ensure confirmation is also on SF1449 page 1 as required

Medium — administrative rejection if SF1449 not annotated

Schedule of supplies/services pricing (Sec. L item 3; Section B CLINs 0001–0005)

Provide pricing for base + option years; evaluated on aggregate total

Includes pricing table structure for 0001–0005 with placeholders and aggregate placeholder (Section 9; 13.2)

Partially Covered

Unit prices/amounts are blank placeholders; cannot be evaluated as-is

High — cannot evaluate price; likely elimination or request for clarification at CO discretion

Certificate of Liability Insurance (Sec. L item 4; insurance schedule in Section G)

Provide COI meeting workers comp/employer liability; GL $500k/occ; auto $200k/$500k/$20k

States COI included and describes coverages consistent with thresholds (Section 8; 13.3)

Partially Covered

No policy numbers, effective dates, additional insured (if required), or explicit auto property damage limits shown; reliance on attachment

Medium/High — rejection if attachment missing or limits not met

Prospective contract worker credentials: name, resume, licenses/certs (Sec. L item 5; SOW Education/Experience)

Must identify qualified individual at quote submission; provide evidence of graduation, ARRT, PA license (if applicable), CPR; certified/photostatic copy of current license accompanies packet

Identifies candidate as placeholders ([Clinician Name], [Credentials]); states credential docs included (Section 4; 13.4)

Partially Covered

Candidate not actually named in provided text; no credential numbers/expiry dates; cannot verify eligibility from narrative alone

High — solicitation states failure to submit candidate name/credential evidence may eliminate quote

Business Management Questionnaire attachment (Sec. L item 6; Attachment I)

Must submit completed questionnaire with 3 relevant contracts + bank reference; includes DUNS field

States completed questionnaire is included (Section 10; 13.5)

Partially Covered

No completed fields shown; DUNS requirement appears in solicitation text (though UEI now used) — ensure form fields completed as required by attachment

Medium — may be treated as missing required documentation

Submission method/format (email to eclarke@bop.gov; PDF only; due date/time)

Email submission; PDF only; due 04/30/2026 10:00 ET; no fax/hand delivery

Acknowledges email, PDF, due date/time correctly (Cover Letter)

Covered

None

Low

SAM registration for 'All Awards' + UEI included; NAICS 621512 (cover letter / Sec. L SAM)

Must be registered in SAM; include UEI; solicitation text also references DUNS (legacy); NAICS 621512

States small business under NAICS 621512; commits to active SAM 'All Awards'; UEI field present but blank placeholder (Cover Letter)

Partially Covered

UEI not provided in the text (placeholder); ensure SAM status verifiable and UEI populated on SF1449/quote

Medium/High — UEI omission can lead to elimination

E-Verify compliance (FAR 52.222-54)

Enroll within 30 days; begin verification within 90 days of enrollment

Explicitly commits to timelines (Cover Letter; Section 8)

Covered

None

Low

FOIA (b)(4) marking approach (Sec. L FOIA instructions)

If claiming confidentiality, mark title page and each page/item; identify pages

Includes FOIA notice section; indicates page numbers will be identified and pages marked (Section 11)

Partially Covered

Page numbers and per-item markings not provided in text; must be applied in final PDF

Low/Medium — risk of disclosure if not properly marked

Acknowledgement funds not presently available / Govt may cancel (Sec. L)

Notice only (no required response)

Not explicitly acknowledged

Gap

Not required as a submitted artifact, but acknowledgement can reduce ambiguity

Low

GR-01

Pricing fields are blank placeholders (unit price/amount/aggregate)

Section B CLINs 0001–0005; Section L pricing submission; evaluation on total price

Section 9 contains $[____] placeholders

High

High

Critical

Populate firm-fixed unit prices and extended amounts for each CLIN and aggregate total matching Section B format; ensure consistency with SF1449.

GR-02

Candidate not actually identified by name in narrative provided (placeholders), risking elimination

SOW Education/Experience: must identify qualified individual at quote submission; Section L item 5

Section 4 uses [Clinician Name] placeholder

High

High

Critical

Insert the actual clinician name and include a credentials summary table (ARRT #, PA license # if applicable, CPR issuer, graduation institution, years experience) cross-referenced to attachments.

GR-03

UEI/CAGE not populated in quote text (placeholders)

Cover letter; SF1449 page 1; SAM registration instructions

UEI/CAGE placeholders remain

Medium

High

High

Provide UEI and CAGE (or explicitly state 'no CAGE' if not assigned) in both cover letter and SF1449 blocks.

GR-04

Key DOJ-02 operational privacy requirements not fully committed (separation checklist; annual training verification; NDA submission to CO)

DOJ-02 sections A(4), B(1), B(3)

General commitment to training/ROB/NDA but not the specific procedural obligations

Medium

High

High

Add an explicit compliance subsection committing to DOJ-02 separation checklist process, annual email verification to COR, and maintaining/providing signed NDAs/ROB prior to access.

GR-05

DOJ-05 incident handling specifics not fully mirrored (JSOC escalation, weekly updates, potential incident reporting threshold)

DOJ-05 Section VI

Mentions 1-hour reporting but not JSOC/weekly updates

Medium

High

High

Expand incident response language to include JSOC contact escalation, weekly status updates during investigation, and cooperation (logs/images) as required.

GR-06

Non-discrimination requirement not explicitly stated

Tailoring: Quality of Patient Care/Non-Discrimination

No explicit equal treatment statement

Medium

Medium

Medium

Add a non-discrimination statement matching solicitation language (no distinction by race/color/creed/national origin/physical condition; equal services).

GR-07

Attire consequences not fully acknowledged (no charge for delays; tight/low-cut restriction)

SOW Attire paragraph

Mentions colors/appropriateness but not full details

Low/Medium

Medium

Medium

Add explicit acknowledgement of all attire constraints and that the Government will not be charged for delays due to improper attire.

GR-08

AIC infraction reporting/documentation not explicitly acknowledged; CEO removal discretion not acknowledged

SOW Adults in Custody (AIC) Management

General compliance statements, but not those specific items

Low/Medium

Medium

Medium

Add explicit acceptance that the contractor may be removed at CEO discretion and will document/report AIC infractions to COR/designee as required.

GR-09

SCLS / Wage Determination compliance statement missing (price realism / labor compliance risk)

52.222-41, WD 2015-4227 Rev 30; EO 13706 clause

No explicit acknowledgement that pay/fringes meet WD/EO

Medium

Medium/High

High

Add statement that compensation for covered service employees will meet or exceed applicable WD rates/fringes and EO 13706 paid sick leave where applicable, and pricing includes these costs.

GR-10

Whistleblower information distribution obligation not acknowledged

DOJ-01

Not mentioned

Medium

Medium

Medium

Add explicit acknowledgement of DOJ-01 distribution and confirmation to CO requirements.

Provide one ultrasound technician with equipment

One (1) Ultrasound Technician with equipment; contractor furnishes all equipment

Commits to provide one qualified technician + machine every visit (Sections 3, 5)

Covered

Ensure staffing continuity and replacement plan aligns with security clearance constraints

Place of performance

On-site Health Services Dept, FCI Loretto (address stated)

States on-site at FCI Loretto Health Services Dept; coordinates with HSA/CD/COR/CO (Cover Letter; Section 3)

Covered

None

Session definition and cadence

Session = 1 hour; normally 8 sessions twice/quarter; M–F excl. holidays; 7:30–4:00 with 30-min unpaid lunch; not exceed 16 hrs/quarter; HSA determines actual hours

Restates session and cadence; acknowledges hours and adjustment by HSA; scheduling flexibility (Sections 2, 3)

Covered

None

Delay/payment rule for reporting but unable to perform

If report but unable to perform due to delays, paid for one session; other sessions suspended unless requested to remain

Acknowledges and accepts session-payment provision (Section 2)

Covered

None

Make-up time / failure to provide coverage remedies

May make up time; if fails to provide coverage Gov may seek remedy

Mentions backup arrangements; replacement personnel subject to same screening (Section 10)

Partially Covered

Does not explicitly commit to make-up session process or how coverage failures avoided; add explicit staffing contingency approach

Education/experience minimums

ARRT license; PA license (should); 3+ years experience; provide certified/photostatic copy of current license; submit graduation evidence; CPR AHA/Red Cross

States ARRT, PA license as applicable, 3+ years, graduation evidence, CPR AHA/Red Cross; copies included (Section 4)

Partially Covered

Candidate identity is placeholder; no explicit certified/photostatic copy language beyond 'certified or photostatic copies provided'—OK but dependent on attachment

Drug screen + law enforcement background check elements

Must pass drug screening + checks (NCIC, DOJ name check, FD-258, NACI if applicable, urinalysis etc.)

Acknowledges drug screening, LE background, fingerprinting, DOJ name checks; commit to complete packets early (Section 4)

Covered

Does not explicitly reference all enumerated forms (OF-306, SF-85/SF-85P) in proposal narrative; may be acceptable but add explicit acceptance of full list

Supplies/equipment requirements

Contractor provides ultrasound machine every visit; maintains; HSA approval; security compliant; Gov provides power only

Commits to provide/maintain/calibrate/repair; HSA review/approval; power-only; security compatible transport/setup (Sections 2, 5)

Covered

None

Health requirements / communicable disease / TB testing evidence

Employee free of communicable disease; remove if risk; may require TB testing evidence; failure may deny access; replacement at no cost

Commits to remove immediately; agrees to TB/other testing and that failure may deny access (Section 6)

Partially Covered

Does not explicitly state replacement personnel provided at no additional cost in health context (though implied); add explicit no-cost replacement commitment

Report adverse credential actions to COR/ACO

Must inform in writing any adverse action involving certification/licensure

Explicitly acknowledges immediate written reporting obligation (Section 4)

Covered

None

Duties: perform ordered ultrasound/echo; no technical support required

Perform any/all needed procedures independently without technical support

Commits to be self-sufficient and perform all ordered studies; independently select factors/positioning; independently perform testing (Sections 3, 4)

Covered

None

Transmit studies/reports electronically; timely send results

Electronic transmission; timely delivery to institution

Commits to secure institution-approved electronic transmission and timely delivery with confirmations (Sections 3, 5, 7)

Covered

None

Equipment calibration/repairs; QA tests and daily maintenance

Evaluate equipment; QA tests; daily maintenance as needed

Commits to maintenance/calibration/repairs; QA tests; daily maintenance; logs (Section 5)

Covered

None

Emergency situations knowledge

Possess knowledge of basic emergency situations during testing

States familiarity with emergencies and coordination with staff (Section 6)

Covered

None

Scheduling exams and maintaining records

Schedule exams and maintain records; computerize logs/patient logs; repeat analysis

States integrate with requisitions/logs/labels/record management; computerization/printing; patient logs (Sections 3, 5)

Covered

Clarify who schedules (contractor vs HSA) and how schedule is coordinated

Pathological abnormalities knowledge + preliminary abnormality notification

Knowledge of abnormalities; notify referring physician of preliminary abnormalities

Explicitly commits to notify referring physician and support additional views/exams (Section 3)

Covered

None

Coordinate transfer of records / continuity of care

Coordinate transfer to ensure continuity

Commits to coordinate record transfer and continuity workflows (Sections 3, 5)

Covered

None

Work with Clinical Director on monitoring/evaluation

Work with Clinical Director to ensure monitoring/evaluation activities completed

Commits to quality review activity and cooperate with monitoring/evaluation (Section 5)

Partially Covered

Could more directly mirror requirement: “work with Clinical Director to ensure monitoring and evaluation activities are completed”

Act as liaison between radiologist and medical staff

Required liaison role

Explicitly acknowledges liaison role (Section 3)

Covered

None

Training/orientation; develop local protocols knowledge

Receive training/orientation; comply with correctional techniques; develop working knowledge of local protocols

Commits to institution familiarization orientation and compliance with facility rules; references integration with workflows (Section 4)

Partially Covered

Does not explicitly state ‘develop working knowledge of local medical protocols’; add explicit statement

Infection control / CDC universal precautions / protective clothing

Wear outer protective clothing; obey CDC universal precautions at all times

Explicit commitment (Section 6)

Covered

None

Computerization/printing tasks

Daily log, requisitions, labels; completing studies; preparing studies for shipment; assisting with supplies notifications; FDA/TJC/program review support

Commits to computerization/printing of logs/requisitions/labels; prep studies for radiologist; supply notifications; FDA/TJC/program review/inspections support (Section 5)

Covered

None

Attire restrictions

Professional clothing/scrubs allowed; not green/khaki; not tight/low-cut; if inappropriate, denied entry; FCI not charged for delay

Commits to scrubs not green/khaki and appropriate appearance (Section 3)

Partially Covered

Does not mention tight/low-cut restriction or consequence that FCI won’t be charged for delay; add explicit acknowledgement

Non-discrimination / impartial access

No distinction among patients; impartial access regardless of protected classes

States calm/respectful approach; references continuity; does not explicitly restate non-discrimination clause

Gap

Add explicit statement of non-discrimination in patient services consistent with Section G language

AIC information restriction

Contractor shall NOT provide information to AICs unless directed by CD/HSA/COR

Explicitly acknowledges restriction (Section 3, 6)

Covered

None

AIC management/security requirements

Sign in/out; badge worn at all times; comply with rules; report infractions; may be removed at CEO discretion

Acknowledges sign in/out, badge, adhere to rules; states personnel will not supervise AICs and will maintain boundaries (Section 4)

Partially Covered

Does not explicitly acknowledge ‘may be removed at CEO discretion’ or requirement to document/report AIC infractions to COR; add explicit acceptance

Contract employee restrictions list (no supervision, no supplies pickup, no policy, no recalls)

Must not perform listed restricted activities

Explicitly affirms all restrictions (Section 4)

Covered

None

Replace all bracketed placeholders with final identifiers (Offeror Legal Name, UEI, CAGE, POC details, clinician name, pricing values).

Eliminates administrative non-responsiveness; supports responsibility and evaluability (Sec. L; SF1449; SAM; pricing).

Cover letter; Sections 4 and 9; SF1449 attachment; Included Documents list.

Add a one-page 'Compliance Matrix' referencing Section L items 1–6 and SOW major duties with page/attachment references.

Makes it easy for CO to verify all mandatory items; reduces elimination risk.

Immediately after cover letter or as Section 2A.

Insert a credential summary table for the named clinician (ARRT #, expiration; PA license #/status; CPR issuer/expiration; graduation school/date; years experience).

Directly satisfies SOW credential evidence expectations and reduces ambiguity.

Section 4 (Personnel, Credentials, and Compliance).

Add explicit acceptance of DOJ-01, DOJ-02, DOJ-05 operational steps: annual training verification email to COR; signed NDA/ROB maintained and provided; separation checklist; 24-hour written breach report; JSOC escalation and weekly updates during incident investigation.

Closes major compliance wording gaps for security/privacy clauses; reduces performance risk.

Section 7 (Security, Privacy, and Information Handling) as sub-bullets.

Add explicit statement: 'No DOJ IT system access is required for performance; if any access becomes necessary, we will comply with DOJ-07 and DOJ-03 waiver requirements.' (or describe required access if it will occur).

Avoids ambiguity around DOJ-07 and personnel/citizenship constraints.

Section 4 or Section 7.

Add explicit non-discrimination commitment mirroring Tailoring language (equal services; no distinctions; impartial access).

Aligns with Quality of Patient Care/Non-Discrimination requirement.

Section 3 or new subsection under Section 6.

Add explicit acknowledgement of attire details and consequence that FCI Loretto will not be charged for delays due to improper attire.

Mirrors SOW and reduces disputes over billable delays.

Section 3 (Technical Approach) or Section 6.

Add explicit staffing continuity/coverage statement: make-up sessions, planned backup clinician (if allowed), and how replacements will be cleared; confirm replacement at no additional cost when required by health restrictions.

Addresses make-up time/remedy and health replacement language.

Section 10 (Past Performance/Management) and Section 6 (Health Requirements).

Add explicit SCLS/Wage Determination compliance statement indicating pricing includes required wages/fringes and EO 13706 paid sick leave where applicable.

Reduces labor compliance risk and supports price credibility.

Section 9 (Pricing) as a short paragraph.