Attachment_A_-_Position_Designation_Survey.pdf

POSITION DESIGNATION SURVEY

V2282011 1

Instructions and Survey Process Overview

Step 1: The contractor/vendor point of contact (vendor POC) completes a separate electronic version of the

Position Designation Survey (PDS) for each position under the immediate contract or task order (e.g., database programmer, appraiser, accountant, etc.).

Step 2: The vendor POC submits each completed PDS (by secure email) to the Personnel Security mailbox (listed below) and the Contracting Officer’s Technical Representative (COTR) (or other person designated by the Contracting Officer if no COR/COTR is to be appointed) no later than seven business days after receipt of the Risk Assessment Checklist. {1}

Step 3: Upon receipt of the PDS, the COTR should review the contents of the survey for accuracy and completeness. If the COTR has any additional questions with regards to the content of the survey, he or she should coordinate with the vendor point of contact to reconcile. Upon the COTR’s concurrence, the COTR should forward the PDS to Personnel Security by way of email (*HCO Contractor Risk Designation Mailbox) within three business days. If PS does not receive a survey from the COTR, it will be assumed that the COTR concurs with the vendor point of contact’s recommendation. {2}

1 If and when it is determined a new (previously unidentified) position is required for an existing contract/order), a PDS shall be completed and submitted as soon as the need for the position is identified.

2 The contractor is advised that risk assessment and investigative processing will not commence until all PDSs associated with the immediate contract/order have been submitted. In accordance with PS policies, contractors will not be granted access to IRS facilities, information systems, or Sensitive but Unclassified (SBU) information until the investigative process has been initiated.

For assistance in completing the PDS, contact PS at hco.contractor.risk.designations@irs.gov

Section I – Administrative Information

1. Contract and/or Task Order Number (if applicable):

2. Position Title:

Section II – Position Duties and Responsibilities (Narrative)

3. Provide a brief explanation of the key duties for the position:

mailto:hco.contractor.risk.designations@irs.gov

V2282011 2

4. Describe the type of systems access contractor personnel in this position will require (i.e., identify any known information systems for which access is needed, and/or describe the applications, software or programs that will be used by the contractor. If not applicable, enter “NA.”):

Section III – National Security Requirements of the Position (Risk Assessment) With the below items, check the box that applies. At least one box must be checked.

Special Sensitive- Positions with the potential to cause inestimable damage to National Security

Critical Sensitive- Positions with the potential to cause exceptionally grave damage to National Security

Noncritical Sensitive- Positions with the potential to cause damage to National Security, up to and including damage at the significant and serious level None of the above

Section IV – Position Duties and Responsibilities (Risk Factor Assessment) In Items 5 -9, check all duties that apply to this position. At least one box must be checked in each risk factor category.

5. Degree of Public Trust (The consensus of confident expectation for honesty, integrity, reliability, responsibility, or justice placed in a position.)

Contractor personnel in this position will be responsible for:

Providing advisory and assistance services in the areas of Government policy recommendations/development/writing, and policy or program implementation.

Criminal justice duties (including but not limited to investigators, agents, armed security guards).

Protection of the critical infrastructures (includes design, installation, maintenance or operation of telecommunications, alarms, or utilities systems).

Physical security, controlling facility or information technology access, and/or involvement with arms, ammunitions, or explosives (specify armed or unarmed security guards in the narrative.)

Providing child care services.

None of the duties specifically described above appear to apply. However, this risk factor does apply and further description of duties and responsibilities are included in the narratives in Section II).

V2282011 3

Select the degree of potential damage from misconduct (at least one box must be checked):

Limited Potential Damage- Likely to produce some harm or danger- discernable damage that is narrow in scope or effect Moderate Potential Damage- Likely to produce a fair amount of harm or danger- serious damage that is fairly wide-ranging in scope or effect.

Severe Potential Damage- Likely to produce a substantial degree of harm or danger- very serious damage that is extensive in scope or effect.

6. Fiduciary (Monetary) Responsibility (Authority or ability to obligate, control or expend public money or items of monetary (bonds, etc,) value.)

Investigation, oversight, and audits of government personnel, programs, and activities (includes access to complete investigative files) (personnel specialists, adjudicators).

Protection of government funds (fiduciary responsibilities or other duties with the potential for realizing significant personal gain, any access to financial/budgetary data.)

Access to returns and return information, or other sensitive financial records.

Control of (or access to) an automated monetary system (key access entry).

None of the duties specifically described above appear to apply. However, this risk factor does apply and further description of duties and responsibilities are included in the narratives in Section II).

Select the degree of potential damage from misconduct (at least one box must be checked):

Limited Potential Damage- Likely to produce some harm or danger- discernable damage that is narrow in scope or effect Moderate Potential Damage- Likely to produce a fair amount of harm or danger- serious damage that is fairly wide-ranging in scope or effect.

Severe Potential Damage- Likely to produce a substantial degree of harm or danger- very serious damage that is extensive in scope or effect.

7. Importance to Program (Impact the individual position has, due to status, in or influence on the program as a whole, either individually or collectively.)

Protection of government information technology systems (includes access to or processing of controlled unclassified information, supervision or control of information technology systems, authority to bypass significant technical and operational security controls for

V2282011 4 general support systems , or access to major applications – the scope of these duties exceed that of ordinary or routine computer use) (computer systems analyst, system administrator (root access), computer equipment analyst, database administrator, database storage administrator, systems security analyst). Specify if contractor does or does not have root access ( – root access) ( – no root access).

Protection of personal, private, controlled unclassified, or proprietary information (includes access to or processing of personal information such as Sensitive but Unclassified (SBU), or Personally Identifiable Information (PII) and information that is that protected by the Privacy Act (PA) of 1974, Freedom of Information Act (FOIA), financial data, government information that is for “Official Use Only,” or privileged information involving the award of contracts, contractor proprietary information, etc.).

Significant public health or public safety duties.

None of the duties specifically described above appear to apply. However, this risk factor does apply and further description of duties and responsibilities are included in the narratives in Section II).

Select the degree of potential damage from misconduct (at least one box must be checked):

Limited Potential Damage- Likely to produce some harm or danger- discernable damage that is narrow in scope or effect Moderate Potential Damage- Likely to produce a fair amount of harm or danger- serious damage that is fairly wide-ranging in scope or effect.

Severe Potential Damage- Likely to produce a substantial degree of harm or danger- very serious damage that is extensive in scope or effect.

8. Program Authority (Ability to manipulate authority or control the outcome or results of all or key portions of a program or policy.)

Mid-level (or higher) management duties/assignments, or major program. responsibilities

Non-managerial duties/assignments with authority for independent or semi-independent action.

Government service delivery, including customer service or public liaison duties (interviewers, forms data entry clerks, collectors, tax experts, valuators, nurses, couriers - specify, live checks - mail at post office.

Support positions with no responsibilities for preparation or implementation of Public Trust program policies and plans, but involving regular contact with, and ongoing knowledge of, all or most of such information (e.g., Budget Analyst).

None of the duties specifically described above appear to apply. However, this risk factor does apply and further description of duties and responsibilities are included in the narratives in Section II).

V2282011 5

Select the degree of potential damage from misconduct (at least one box must be checked):

Limited Potential Damage- Likely to produce some harm or danger- discernable damage that is narrow in scope or effect Moderate Potential Damage- Likely to produce a fair amount of harm or danger- serious damage that is fairly wide-ranging in scope or effect.

Severe Potential Damage- Likely to produce a substantial degree of harm or danger- very serious damage that is extensive in scope or effect.

9. Supervision Received Select a level of supervisory control (at least one box must be checked):

Limited - No Supervision/Project Manager (occasional review): Occasional review by a superior with little relevant expertise in the technical aspects of the duties performed but with the perspective of major policy issues.

Periodic - Supervision/Project Manager (ongoing spot review): Ongoing spot review of policy and major operational considerations of work by superior, with some knowledge of program operations, but with minimal technical program expertise.

Moderate Technical - Supervision/Project Manager (ongoing spot review): Ongoing spot review of work in conjunction with important operational issues by superior with technical program expertise.

Close Technical Supervision/Project Manager (all work reviewed by a technical expert): Continuing review of all work by a technical expert.

Select the degree of potential damage from misconduct (at least one box must be checked):

Limited Potential Damage- Likely to produce some harm or danger- discernable damage that is narrow in scope or effect Moderate Potential Damage- Likely to produce a fair amount of harm or danger- serious damage that is fairly wide-ranging in scope or effect.

Severe Potential Damage- Likely to produce a substantial degree of harm or danger- very serious damage that is extensive in scope or effect.

10. Additional Contractor Comments (optional):

Section V – Submission Information

11. Vendor Point of Contact (POC) Information

• Name of Vendor POC completing the Survey):

V2282011 6

• Title:

• Email:

• Phone No:

• Date Survey Completed and Forwarded to IRS:

12. Contracting Officer’s Representative (COR) or Contracting Officer’s Technical Representative (COTR) Contact Information

• Name of COR/COTR reviewing the Survey):

• Title:

• Email:

• Phone No:

• Date Survey Reviewed and Forwarded to PS:

The COR/COTR should check one of the following blocks, as applicable:

The COR/COTR concurs with the Vendor POCs submission and has no further recommendations for PS at this time.

The COR/COTR does not fully concur with the Vendor POCs submission and is providing further recommendations to PS at this time.