Attachment 3 - SOW.pdf

RFQ SOW

HQ TSCM Services

SECURITIES AND EXCHANGE COMMISSION

TECHNICAL SURVEILLANCE COUNTERMEASURES SERVICES

STATEMENT OF WORK

WASHINGTON, DC HEADQUARTERS

OBJECTIVE: The SEC intends to award a time and materials contract to facilitate baseline assessment, analysis, and mitigation of technical surveillance threats and implement regularly recurring inspections to ensure ongoing prevention of espionage for the SEC’s Headquarters (HQ) complex.

GENERAL SCOPE OF EFFORT: The SEC has a requirement to implement and perform Technical Surveillance Countermeasures (TSCM) operations in the Washington, DC Headquarters facility located at 100 F Street, NE Washington, DC 20549. The intent is to secure communications and information technology to prevent espionage in, at minimum, the Chairman’s office suite and Closed Commission meeting room.

The requirements for this contract include but are not limited to the following:

1. The Contractor shall provide services listed below.

Description Frequency

Full Spectrum Analysis at every key point within scope, demodulate each RF signal.

Initial baseline & quarterly

2 RF Mapping and download signal lists for future reference.

Initial baseline

& quarterly

3 Physical inspection of the whole scope, floor to ceiling, wall to wall.

Initial baseline

& quarterly

Non-Linear junction detection in each “physical” room (walls, floor, ceilings, objects) for current or past eavesdropping electronic devices.

Initial baseline & quarterly

Inspect electrical infrastructure for carrier current indicating eavesdropping devices. Mark screw positions with ultra-violet to detect tampering after inspection.

Initial baseline & quarterly

Inspect and test all telecommunication devices. Tamper seal units to detect future tampering if client requests.

Initial baseline & quarterly

Evaluate Wi-Fi for unauthorized devices, detect rogue access points and Bluetooth®.

Initial baseline & quarterly

8 Thermal imaging to detect “hot spots” indicative of electronics.

Initial baseline

& quarterly

9 Infrared inspection for invisible signals.

Initial baseline

& quarterly

10 Telecommunication Analysis for threats.

Initial baseline

& quarterly

11 Wi-Fi and Bluetooth analysis to detect rogue access points.

Initial baseline

& quarterly

12 Electrical and Telecommunication Port Validation.

Initial baseline

& quarterly

Attachment 3

2. The Contractor shall submit an electronic copy of the final bill of services in order for the proposal to be funded.

3. The Contractor shall identify solutions for items specified that have not been specifically identified or fully optioned as to what services and/or products should be included in the final order and shall provide recommendations to the Contracting Officer’s Representative (COR) in writing prior to the final quote.

4. The Contractor shall provide punch list resolution for all services.

APPLICABLE CONDITIONS

1. Item Preparation. The Contractor shall ensure that the items are secured and protected during transport and delivery. The Contractor shall pad, pack, and move the items to ensure safe transportation and shall at all times protect from loss, damage, or harm, all materials, supplies, and equipment of every description. Items that must be handled multiple times shall be properly protected during transport. The Contractor shall protect all items against inclement weather during loading and unloading operations.

2. Transportation of Items to Delivery Site. The Contractor shall furnish the appropriate size and number of enclosed vehicles required to accommodate the delivery of items. The size of the vehicles used must be able to be accommodated by the loading dock of the delivery location. The transport vehicles shall be locked during transit. The Contractor shall perform all shoring, blocking, and bracing, and provide the necessary materials to protect or support the items being moved on the vehicles. The Contractor shall load the items at the origin location and transport all items in a controlled environment to prevent loss or theft.

3. Loading dock restrictions. The Contractor shall review site limitations with the COR prior to planning and scheduling deliveries. The SEC loading dock for the Headquarters building in Washington, DC can only accommodate delivery vehicles that are not larger than 13’ high, 36-38’ long.

4. Security Requirements of the Federal Government and the SEC. The Contractor shall comply with all security requirements of the SEC and the Federal Government regarding authorizing personnel to be on-site and the proper storage and transport of items to and between the point of origin and the SEC’s facilities. The Contractor shall comply with any additional requirements of the security agency in charge of securing the building and the building’s perimeter. Extra time may need to be planned for the scanning of all items entering into the building.

5. Transport Security. The Contractor shall provide transport vehicles that are locked during transit and guarded at all times during loading. The Contractor shall be responsible for theft or loss due to negligence.

Detailed formal report with processes and methods, recommendations, and findings.

Initial baseline & quarterly

PROGRAM SCHEDULE AND DELIVERABLES

1. Format of Deliverables: The Contractor shall deliver to the COR a soft copy (electronic media) of deliverables. Unless otherwise indicated herein deliverables shall be provided in a Microsoft and AutoCAD compatible format as appropriate.

2. Schedule of Deliverables: All dates are listed as “As Soon as Feasible” but “Not Later Than” dates.

a. Initial Inspection – Week of August 3, 2020 through August 7, 2020.

b. Follow-on Regular Inspections – Quarterly, beginning week of August 10 through August 15, 2020.

3. SEC Authorized Delay in Delivery. The SEC may, at its sole discretion, delay deliveries of required products from the specified schedule. The SEC’s authorization for delay will be furnished in writing by the COR.

PERIOD OF PERFORMANCE

The period of performance shall be one (1) calendar year (365 days) beginning upon the issuance of this call order, not later than August 1, 2020. The SEC may, at its sole discretion, exercise the option to extend the period of performance in increments of one

(1) calendar year, to a maximum of four (4), to conclude not later than August 1, 2025.