8. QASP (updated).pdf

(Attachment # 8)

REQUEST FOR QUOTE

CRYPTOCURRENCY MANAGEMENT AND DISPOSAL SERVICES

SOLICITATION NO.: 15M50020QA4400006

1.0 PURPOSE

This Quality Assurance Surveillance Plan (QASP) is pursuant to the requirements listed in the performance-based Performance Work Statement (PWS) for Management and Disposal of Virtual Currency. This performance-based plan sets forth the procedures and guidelines the United States Marshals Service (USMS) will use in evaluating the performance of the Contractor and will notify the contractor of each instance of unsatisfactory performance. In the event the contractor’s performance is found to be unsatisfactory, the contractor will be responsible for making required changes to ensure performance is brought up to the satisfactory level.

Additionally, this QASP is based on the premise that the contractor, not the USMS, is responsible for quality assurance while performing under the terms of this contract. The Contracting Officer’s Representative (COR) is responsible for performance measurement and effective evaluation of the contractor’s compliance.

2.0 USMS ROLES AND RESPONSIBILITIES

The following personnel shall oversee and coordinate surveillance activities.

Contracting Officer (CO) - The CO shall ensure performance of all necessary actions for effective contracting, ensure compliance with the contract terms, and shall safeguard the interests of the United States in the contractual relationship. The CO shall also assure that the contractor receives impartial, fair, and equitable treatment under this contract. The CO is ultimately responsible for the final determination of the adequacy of the contractor’s performance. Any changes the Contractor feels may affect contract price, terms, or conditions shall be referred to the CO for action.

Contracting Officer’s Representative (COR) - The COR is responsible for technical administration of the contract and shall assure proper USMS surveillance of the contractor’s performance. The COR will monitor performance and review performance reports furnished by the contractor based upon its own internal quality control system. The COR will measure timeliness, responsiveness, customer satisfaction, and other performance requirements to determine how the contractor is performing against established performance objectives. The COR is not empowered to make any contractual commitments or to authorize any contractual changes on the USMS’s behalf.

3.0 METHODS OF QUALITY ASSURANCE SURVEILLANCE.

There are several surveillance methods that can be used to evaluate and monitor contractor performance.

Examples include: Management Information Systems, Planned Sampling Inspection, 100% Inspection, Periodic Sampling Inspections, Customer Complaints, Unscheduled Inspections, Direct Observation, and Random Sampling Inspections.

The USMS reserves the right to use any of the above-defined surveillance inspection methods as it deems appropriate.

Regardless of the surveillance method, the COR will inform the contractor when a defect is identified and inform the manager of the specifics of the problem. The COR, with assistance from the CO, if needed, is responsible for monitoring the contractor’s performance in meeting a specific performance standard/AQL.

CRYPTOCURRENCY MANAGEMENT AND DISPOSAL SERVICES

SOLICITATION NO.: 15M50020QA4400006

4.0 PERFORMANCE STANDARDS

Performance standards define the expected level of service to be provided by the contractor. The contractor shall provide services to the USMS in accordance with the PWS. The USMS performs surveillance to determine if the contractor meets or fails to meet the performance standards are established in section 5.0 of the PWS that covers the specific category of work. The acceptable level of performance is set in the acceptable quality level related to that task.

5.0 QUALITY ASSURANCE SURVEILLANCE MATRIX

Required Service Performance Standards

Incentive (Negative)

Method of Surveillance

2.1.1 Custody

Takes custody immediately upon request if virtual currency is supported by the contractor or within five (5) days if it is not.

Invoice deduction of $500 for each instance.

Confirmation email from Vendor

2.1.2 Storage Accurate and segregated

inventory.

Invoice deduction of $500 for each instance.

Random Sampling

4.6.2.1 Project Manager

(or designee)

Available within 2 hours of request between 8 AM EST – 6 PM EST, Monday through Friday. Federal holidays and weekends excluded, using agreed upon contact methods.

Invoice deduction of $500 for each missed window.

Review of availability from prior requests (quarterly)

2.2.1 Standard Disposals Completed within 5 business

days

Invoice deduction of $500 for each disposal completed late.

Review of availability from prior requests (quarterly)

2.2.2 Large Disposals Completed within 45 calendar

days

Invoice deduction of $500 for each disposal completed late.

Review of availability from prior requests (quarterly)

2.2.3 Third Party Completed within 5 business

days

Invoice deduction of $500 for each disposal completed late.

Review of availability from prior requests (quarterly)

2.3.1 General

Compliance within 24 hours of loss or breach, two weeks for remediation plan

Per PGD-1503, Contractor is responsible for damages and costs related to loss.

Invoice deduction of $500 for each day remediation plan is late.

Site visit, audit, or self-reporting by the contractor.

(Scheduled, Sample, As Requested)

CRYPTOCURRENCY MANAGEMENT AND DISPOSAL SERVICES

SOLICITATION NO.: 15M50020QA4400006

2.3.2 General Reporting System Downtime (not including

blockchain networks)

Invoice deduction of $500 for each instance.

Random sampling

2.3.3 Monthly Progress

Reports

Reports are complete and submitted within the prescribed timeframes.

Invoice deduction of $500 for each report delivered late.

Review report (monthly)

2.3.4 Monthly Progress

Meetings

Contractor is fully prepared for meetings and they are conducted within prescribed timelines.

Invoice deduction of $500 for each late/missed meeting.

Holding meeting

4.1.1 External Audits

Audits are fully supported ensuring access to data and facilities.

Invoice deduction of $500 for each audit not properly supported.

Audit (scheduled)

4.1.2 Internal Audits

Audit is conducted fully and within the prescribed timeframes.

Invoice deduction of $500 for each incomplete or late audit.

Audit scheduled (quarterly)

4.3 Continuity of Service

Updated BCP is complete and submitted within the prescribed timeframes.

Invoice deduction of $500 for each incomplete or late BCP.

Review of availability from prior requests (quarterly)

6.0 DOCUMENTING PERFORMANCE

A “Satisfactory” (SAT), “Marginal” (MAR), or “Unsatisfactory” (UNSAT) rating will be assigned to each task inspected, based on the Performance Criteria per the PWS. The work requirement tasks reasonably unavailable for inspection will be rated “Not Measured” (NM). A brief description of observed defects or actions taken will be explained on the Inspection Report.

Documented Defects: Copies of documented performance defects will be provided to the Contractor within 24 hours and validated by the COR. Performance defects represent a loss in value to the USMS and are subject to payment deductions.

At the end of the month, the COR will summarize the results of the inspections; compare the number of satisfactory performance ratings to the AQL for each work requirement and review documented defects, determine if monitoring needs to be increased, and, calculate recommended payment deductions for documented defects in accordance with the "Payment Adjustment Clause" in Section E.

The following rating scale shall be used to determine if performance meets, or fails to meet the acceptable quality level:

SATISFACTORY: Performance meets all contractual requirements.

MARGINAL: Performance fails to meet some contractual requirements.

CRYPTOCURRENCY MANAGEMENT AND DISPOSAL SERVICES

SOLICITATION NO.: 15M50020QA4400006

UNSATISFACTORY: Performance fails to meet most/all contractual requirements.

7.0 FAILURE TO PERFORM

When the COR determines formal written communication is required, the COR will prepare a Contract Discrepancy Report (CDR), and present it to the contractor's program manager. A CDR template is attached to this solicitation as Attachment #12.

The contractor shall acknowledge receipt of the CDR in writing. The CDR will specify if the contractor is required to prepare a corrective action plan to document how the contractor shall correct the unacceptable performance and avoid a recurrence. The CDR will also state how long after receipt the contractor has to present this corrective action plan to the COR. The USMS shall review the contractor's corrective action plan to determine acceptability.

Any CDRs may become a part of the supporting documentation for contract payment deductions, fixed fee deductions, award fee nonpayment, or other contractual actions deemed necessary by the CO. The contractor may receive deductions or even termination based on failure to perform. The following criteria apply for determining appropriate action:

1. Notifications: Consistent with FAR Part 49, the CO shall notify the service provider of failure to meet standards through QA monitoring forms, cure notices, or show cause notices and shall inform the service provider project manager or designated alternate of such notices.

2. Deductions: The USMS has the right to withhold a percentage of payment of the monthly cost for performing particular services based on failure to meet performance standards. The percentage of such withholding is identified in the Required Performance Metrics (RPM) Table of Attachment I.

3. Termination: If the CO determines that the contractor has failed to perform to the extent that a termination for default is justified, the CO shall issue a notice of termination, consistent with FAR Part 49.