Enclosure 1A_QASP_80TECH25Q0056.pdf

RFQ 80TECH25Q0056, ENCLOSURE 1A

GOVERNMENT QUALITY ASSURANCE SURVEILLANCE

PLAN

SUPERVISED REMOTE IDENTITY PROOFING (SRIP)

PROOF OF CONCEPT (PoC)

CONTRACT NO. TBD

MARCH 13, 2025

FOR INFORMATION PURPOSES ONLY (10/2015)

SUPERVISED REMOTE IDENTITY PROOFING (SRIP)

PROOF OF CONCEPT (PoC)QUALITY ASSURANCE SURVEILLANCE

PLAN (QASP)

1.0 INTRODUCTION

1.1 Purpose

The purpose of this Government Quality Assurance Surveillance Plan (QASP) is to define the overall approach the NASA intends to use to monitor and survey Contractor performance under the Supervised Remote Identity Proofing Proof of Concept Contract No. TBD. This Firm-Fixed-Price contract provides for a Supervised Remote Identity Proofing Identity Assurance Level (IAL) 3 solution that includes the related software, hardware, materials, training, professional services, and support.

The QASP is a Government-developed surveillance tool prepared in accordance with FAR 46.601 and NFS 1846.401. It is not part of the contract, per NFS 1846.401(a)(iii), but provided to the Contractor for informational purposes only.

1.2 Scope

This QASP has been developed to evaluate Contractor actions while implementing the Attachment A, Performance Work Statement (PWS). It is designed to provide an effective surveillance method of monitoring Contractor performance, services, processes, and products provided under this SRIP PoC contract. This QASP defines the process the Government expects to follow to obtain data, evaluate the Contractor, and determine if contract performance conforms to contract requirements. The Contractor, and not the Government, is responsible for management and quality control actions to meet the terms of the contract.

The role of the Government is quality assurance to ensure contract standards are achieved. In this contract the quality control program is the driver for product quality.

The Contractor is required to develop a comprehensive program of inspections and monitoring actions. The first major step to ensuring a “self-correcting” contract is to ensure that the quality control program approved at the beginning of the contract provides the measures needed to lead the Contractor to success. Once the quality control program is approved, careful application of the process and standards presented in the remainder of this document will ensure a robust quality assurance program.

This plan is applicable to all services performed or products provided by the SRIP PoC Contractor(s). Throughout this QASP, the term “Contractor” is used. In terms of this plan, it should be known that unless explicitly stated, the term “Contractor” is applicable to both the SRIP PoC Contractor and any and all of its subcontractors.

2.0 FORMS OF SURVEILLANCE

There exists a wide-ranging spectrum associated with surveillance, ranging from oversight to insight. The strategy and approach to surveillance by NASA for the SRIP PoC contract, as detailed in this plan, is one that concentrates primarily on insight as opposed to oversight.

However, NASA reserves the right to initiate additional surveillance activities (insight or oversight) on an ‘as-needed’ basis, based upon circumstances and data collected (adverse trends, negative data points, lack of corrective action, etc.) via the surveillance activities defined in this plan.

2.1 Surveillance Strategies

Insight

Insight is an assurance process that uses performance requirements and if definable, performance metrics to ensure process capability, product quality and end-item effectiveness. Insight relies on gathering a minimum set of product or process data that provides adequate visibility into the integrity of the product or process. The data may be acquired from Contractor records, usually in a non-intrusive parallel method.

Insight as applied to this contract will result in lower levels of Government surveillance and allow the Contractor to assume increased responsibility and accountability for the integrity of processes. Insight will rely heavily on evaluating planned contract deliverables, performance standards, and existing Contractor procedures and working documents, if available.

Oversight

Oversight as applied to this contract will result in higher levels of Government surveillance.

The Government will gather information pertaining to the Contractor's process through involvement and/or inspection in the process and will monitor the process itself. The Government's involvement in the Contractor's performance, through oversight, will be determined necessary by the Technical Monitor.

The Government may use a variety of surveillance methods to evaluate the Contractor's performance. Government surveillance will be conducted on a non-interference basis and in a manner that will not unduly delay work being performed by the Contractor.

2.2 Surveillance Team

All surveillance activities will be implemented using NASA and NASA support-contractor personnel, and/or a delegated agency (e.g., Defense Contract Management Agency (DCMA)), and/or a surveillance support). The surveillance team may be composed of:

• HQ Procurement Personnel (i.e., Contracting Officer (CO), Contract Specialist)

• NASA’s Program Personnel (i.e., Technical Monitor)

• NASA ICAM and Office of Protective Services.

The SRIP PoC CO is responsible for ensuring performance of all necessary actions for effective contracting, ensuring compliance with the terms of the contract, and safeguarding the interests of the United States in its contractual relationships. The CO will also assure that the Contractor receives impartial, fair, and equitable treatment under this contract. The CO is ultimately responsible for the final determination of the adequacy of the contractor’s performance.

The SRIP PoC Technical Monitor will monitor the technical work performed under the contract, evaluates Contractor performance, serves as the primary interface for the Contractor and the CO for all technical matters, reports on contract status to Program/Project Management, and recommends corrective action when necessary. The Technical Monitor is not empowered to make any contractual commitments, authorize any contractual changes on the Government’s behalf, or in any way direct the Contractor to operate in conflict with the contract terms and conditions. Any changes that the Contractor deems may affect the contract price, terms, or conditions shall be referred to the CO for action.

2.3 Communications

• Performance reviews

• Electronic mail

• Informal Discussions

• Other communication methods, as required

2.4 Evaluation and Reporting

• Reports

• Contractor performance metrics

• Inspection of deliverable items

2.5 Work Review and Performance Monitoring

The Government will evaluate the Contractor's accomplishment of the technical objectives through the following:

• Regular meetings with the Contractor to review progress and identify problems.

• Preparation and submission of Contractor Performance Annual Reporting System

(CPARS) report.

• Conduct inspection and acceptance of the Contractor's deliverable items.

• Review Contractor's NIST, FIPS, and Privacy Act compliance.

• Validate that Contractor is performing according to the required contractual plans (e.g. testing, integration, quality assurance, etc.) by physical inspection, review of submitted reports, and meetings with the contract manager.

2.6 Record Keeping and Documentation

The Technical Monitor is responsible for maintaining accurate and complete records of the Contractor’s performance. The Technical Monitor is responsible for collecting the performance evaluation documentation and maintaining any other material that reflects the quality of the Contractor performance. Even though the Contractor is responsible for ensuring performance compliance under their quality control requirements, the Government will give the Contractor prompt notice of defects observed by the Technical Monitor. This does not imply that the Government is obligated to carry out quality control inspections for the Contractor, but that on discovering a problem, the Government will inform the Contractor in detail of the incident. The Technical Monitor will keep CO informed of any issues brought to the attention of the Contractor by the Technical Monitor.

If performance issues arise, they will be discussed immediately between the CO, Technical Monitor, and Contractor. Action plans will be developed and resolutions tracked for closure by the Contractor and Government.

During the course of the contract, the Technical Monitor shall retain a copy of all surveillance documentation. At the end of the surveillance period, these records shall be forwarded to the Contracting Officer for inclusion in the contract file. However, when a specific service or deliverable item becomes unsatisfactory during a surveillance period, a copy of the documentation supporting the unsatisfactory performance shall be forwarded to the Contracting Officer for action between the Government (CO and Technical Monitor) and Contractor.

2.7 Contract Administration

Contractor maintains effective communication within its own organization, including subcontractors. Problems, technical issues, and programmatic changes are promptly communicated to all concerned. Prime Contractor communication with subcontractors is seamless and transparent to the customer.

3.0 CRITERIA FOR EVALUATING PERFORMANCE

The Contractor's performance in all of the areas listed above will be monitored to assure that ineffective or wasteful methods are not being used. As required by FAR 42.1502 and GPR 5100.2, Supplier Performance Evaluations, the CO, in collaboration with the Technical Monitor, will complete a Contractor Performance Assessment Reporting System (CPARS) evaluation, which will also be reviewed by the Contractor, and become a part of the Past Performance Information Retrieval System (PPIRS). In the event of a finding that will require immediate attention, the Technical Monitor will notify the CO of the situation for necessary action. The Contractor will be required to submit a written response and any corrective action steps needed.

4.0 SUMMARY

This Government Quality Assurance Surveillance Plan describes the approach NASA intends to use to monitor the SRIP PoC contract and assure that the Contractor performs in accordance with the terms and conditions of the contract. NASA anticipates using an insight surveillance approach. The goal is to balance the level of Government surveillance with the perceived impacts and risks of mission failure.

TBD

Technical Monitor

Christina M. Ostronic Contracting Officer