QASP_-_Counterintelligence_Support_Service.pdf

Enclosure 6, QASP

Page 1 of 3 Pages v4/10 Feb 15

QUALITY ASSURANCE SURVEILLANCE PLAN (QASP)

1. Contract or Task Order Title: Counterintelligence Service Support

2. Work Requirements:

Task 1 - Counterintelligence Support Specialists

Task 2 - Counterintelligence Security Representative (CISR)

Task 3 - Counterintelligence IT Analyst

Task 4 - Travel

3. Primary Method of Surveillance:

As Periodic sampling is scheduled for Item 1, deliverable 6.1.1 (a). There will be 100% inspection for delivera-bles: Item 1, 6.1.1 (b); Item 1, 6.1.2; Item 1, 6.1.3; Item 2; Item 3, 6.3.4; and Item 4.

4. Scope of Performance:

6.1 Task 1 – Counterintelligence Support Specialist. Per the guidance and instructions of the government, the con-tractor shall provide two qualified personnel to assist with ensuring agency Research, Development and Acquisition

(RDA) programs are in compliance with agency and other governmental CI policies, directives, and procedures.

6.1.1 Subtask 1. Review RDA programs and projects and Coordinates identification of Critical Pro-gram Information (CPI) with Program Managers (PMs) and prepares a Program Protection Plan (PPP) for all agency

RDA programs and projects with CPI.

6.1.4 Subtask 4. Serve as the DISA CI Team point of contact for advance notifications of foreign trav-el and contact with foreign nationals for personnel with access to CPI and report these notifications to the DISA CI

Team according to DoD Instruction 5240.6.

6.1.5 Subtask 5. Assist the DISA CI Team Lead in conducting assessments to ensure that contractual agreements are in place that implement and validate appropriate IA requirements as identified by the DISA CIO, for all contractor and sub-contractor information systems and networks storing, processing, or transmitting CPI.

6.1.6 Subtask 6. Report incidents of loss, compromise, or theft of CPI and AT breaches in accordance with procedures in DoD Directive O-5240.02 to the DISA CI Team Lead.

6.1.7 Subtask 7. Assist the DISA CI Team Lead with the preparation of Counterintelligence Support

Plans (CISP) for DISA research and development facilities when CPI is identified in DISA RDA programs, and at cleared Defense contractor facilities with CPI.

6.2 Task 2 – Counterintelligence Security Representative (CISR). Per the guidance and instructions of the govern-ment, the contractor shall provide a qualified CISR as foreign travel POC to provide foreign travel threat briefings and debriefings, and security presentation in accordance with DOD Instruction 5240.06.

6.2.1 Subtask 1. Responsible for identifying and reporting potential Foreign Intelligence Entity (FIE) threats, elicitation, eavesdropping, electronic interception, spotting, assessment, and recruitment.

6.2.2 Subtask 2. Responsible for conducting analysis of foreign travel to identify counterintelligence concerns.

marty.bost Typewritten Text

ATTACHMENT 1

Page 2 of 3 Pages

6.2.3 Subtask 3. Responsible maintaining and operating security databases used to report foreign trav-el and Foreign Visitor activities.

6.2.4 Subtask 4. Assists with conducting Counterintelligence inquiries for reported incidents to deter-mine potential Foreign Intelligence, International Terrorism and Associated Cyberspace Contacts, Activities, Indica-tors and Behaviors.

6.2.5 Subtask 5. Receives, processes, and records Foreign Visits to DISA facilities. Conducts Foreign

Visitor Escort Responsibility briefings and debriefs for all foreign visits. Maintains Foreign Visit database.

6.2.6 Subtask 6. Assists in the development of vulnerability and threat assessments designed to support agency mis-sions, plans, goals and objectives.

6.2.7 Subtask 7. Assists with reviewing and analyzing of foreign contact reporting.

6.3 Task 3 – Counterintelligence Cyber Security Analyst. Performs cyber security (monitor, audit, analyze) Enter-prise information systems for events to include, but are not limited to: unauthorized access, insider threat, hacking or penetration attempts from known threats, identifying presence of unauthorized software or malicious code on both classified and unclassified networks, such as Active Directory, firewalls, intrusion detection systems, log files, and remote access servers. Individual has the skills and experience to take necessary actions to proactively address issues and guide support personnel to preclude system failures or disruptions; identifies vulnerable computers that may be used in exploitation, data infiltration, and data compromise.

6.3.1 Subtask 1. Coordinate and manage response actions for network assurance and information as-surance anomalous activities on DISA accredited networks as part of the Insider Threat Program.

6.3.2 Subtask 2. Coordinate response actions with network information assurance managers (IAM) throughout the enterprise to ensure counterintelligence reportable behavior is identified and properly reviewed and vetted.

6.3.3 Subtask 3. Develop tactics, techniques and procedures to respond to anomalous activities as well as assist IAMs with cyber response protocols.

6.3.4 Subtask 4. As needed, prepare technical briefings and reports for senior leadership.

6.4 Task 4. Travel. Travel may be required under this requirement. A detailed/itemized travel voucher will be sub-mitted to the Government Contracting Officer's Representative (COR), in writing, no less than 5 working days prior to travel start date and will be paid in accordance with FAR 31.205-46 and the Joint Federal Travel Regulations. All final travel invoices, to include a detailed itemized breakout of expenses with receipts, will be provided to the COR for review/certification no more than 5 working days after completion of travel and prior to submission for payment.

The contractor will not charge G&A against travel reimbursement. The travel budget will not exceed $10,000 per year.

5. Performance Standards:

Performance Standard Acceptable Quality Level (AQL) Method of Surveillance

Subtask 6.1.1 (a) – Review RDA programs and projects and Coor-dinates identification of Critical

Program Information (CPI) with

Program Managers (PMs) and prepares a Program Protection

Plan (PPP) for all agency RDA programs and projects with CPI.

Performance occurs with no required re-performance or re-work at least 90% of the time. Problems that occur are minor and are resolved in a satisfactory manner.

Routine/periodic inspection of de-liverable products and services.

Page 3 of 3 Pages

Subtask 6.1.1 (b) – RDA Pro-gram/Project Review Status Up-date

90% of reports are submitted on time with no errors. Problems that occur are minor and are resolved in a satisfactory manner.

100% inspection upon delivery of monthly report

Subtask 6.1.2 – Monthly status update of training

90% of reports are submitted on time with no errors. Problems that occur are minor and are resolved in a satisfactory manner.

100% inspection upon delivery of monthly report

Subtask 6.1.3 - Conduct periodic inspections of RDA programs

90% of inspections are conducted per the published inspection schedule

100% inspection upon delivery of monthly report

Task 6.2 – Monthly report of

Foreign Travel Briefings.

90% of reports are submitted on time with no errors. Problems that occur are minor and are resolved in a satisfactory manner.

100% inspection upon delivery of monthly report

Subtask 6.3.4 – Technical Re-port/Briefing Requirements

90% compliance with established sub-mission time frames and regulations.

Errors that occur are minor and are resolved in a satisfactory manner.

100% inspection upon receipt

Subtask 6.4 Task 4 – Travel 90% compliance with established sub-mission time frames and regulations.

Errors that occur are minor and are resolved in a satisfactory manner.

100% inspection upon receipt

6. Mandatory or regulatory compliance items: The contractor will provide initial proof of compliance with reg-ulatory and compliance items contained in the contract. The Contracting Officer's Representative (COR) and the

Contracting Officer (KO) will evaluate the initial submission and will conduct ad hoc reviews of the contractor's compliance throughout the remainder of the contract. The contractor will monitor compliance as required by FAR

52.222-50, Combating Trafficking in Persons, and report any issues to the KO.

7. Acceptable Quality Level (AQL): The AQL for this project is 90% to ensure counterintelligence services keep

DISA records current and program information is secure.

8. Evaluation Method: The COR will document the time of verbal notification to the contractor for technical re-ports/briefing requirements. The COR will document the official time and date periodic reports are received, docu-ment error rate, manner/timeliness of required corrections by the contractor and confirm resolution results in the record. COR will document the timeliness of travel request submissions, error rate, and will confirm resolution re-sults in the record.

9. Incentives (Positive and/or Negative): N/A