PACAF GPMS Quality Assurance Surveillance Plan (QASP) Draft (30 Apr 2020.pdf

Contract Number: FA489019A004

HQ ACC ACQUISITION MANAGEMENT AND INTEGRATION CENTER (AMIC)

30 April 2020

PACAF Global Prepositioned Materiel Services (GPMS) Quality Assurance Surveillance Plan (QASP)

NOTICE: This Publication is available in digital format via the AMIC DRQ SharePoint.

*All attachments will added later*

*Final will be signed *Final will be signed OPR/Reviewed by: Mr. Stephen D. Decker Reviewed by: Mr. Steven F. Peters

ACC AMIC/DRQM (QM) ACC AMIC/PMCS (PM)

*Final will be signed Received by: Mrs. Anissa S. Ross

HQ ACC AMIC/PKFB (PCO)

Revision: 0 Pages: 12 Distribution: F https://cs2.eis.af.mil/sites/12149/DRQM1/Forms/AllItems.aspx?RootFolder=%2Fsites%2F12149%2FDRQM1%2FGPMS&FolderCTID=0x01200029A6AED7C3A1504D96F0F0F8F0386FFD&View=%7BB0DB6DCD%2D9BA7%2D4966%2D8F6D%2DA42FEF2819C2%7D

1.0 Introduction.

This QASP has been developed to provide simplistic instructions to aid you (the COR) in performing oversight and surveillance activities of contractor performance. For additional guidance in performing your duties, see the Defense Contingency COR Handbook given to you at training or at the following website: Defense Contingency COR Handbook and Additional COR Guidance. One other resource with a plethora of information is the MFT Resources Guide.

1.1 Authority.

The Federal Acquisition Regulation (FAR) Clause 52.246 and your COR Designation Letter signed by the CO gives you the authority to inspect and test all supplies and services called out in the contract, to the extent practicable.

This includes all places and times, including the period of manufacture (if applicable), and in any event before acceptance or during the term of the contract.

1.2 AMIC Guidance & Direction.

CORs get all guidance and direction from the ACC AMIC/DRQM Quality Manager.

2.0 Auditing.

2.1 Audit Preparation.

CORs base the intensity and frequency of audits on risk and trend analysis results, contract requirements, and other directed (mandatory) surveillance. Audits directed by AFIs, regulations, law, and/or mandatory surveillance take precedence; however, it will be necessary to increase or decrease Government surveillance based on the contract/program. Any adjustments to routine and mandatory surveillance will need to be documented and approved by the QM.

2.2 Audit Execution Process.

The goal of all CORs is to ensure surveillance and measurement of Contractor services is performed IAW contract requirements. The COR contribution is comprised of professional, non-adversarial relationships, which include positive and open communication with our requirements owners and the Contractor. The foundation of this relationship is built upon objective, fair, and consistent COR evaluations of Contractor performance against contract requirements, the ability to discuss inspection results, trends, and items of mutual interest with the contract. Audits will be performed using process/risk-based auditing techniques. Most people are familiar with using a checklist to perform some sort of inspection/audit. Using a checklist as a guide is acceptable but overall on the GPMS contract we will use process and risk-based auditing to ensure we capture the most significant problems and highest risk to the program. By doing this, we eliminate unnecessary COR trips and place a greater emphasis and focus on the contract requirements that will have the largest impact to the contract.

2.3 Risk Management.

Risk Management consists of Risk Planning, Identification, Analysis, Mitigation Planning, Mitigation Plan Implementation, Tracking and Documentation. Through risk management, the focus of Government surveillance is to direct resources toward high and moderate risks with minimal resources directed toward low risks. When focusing on risk it is extremely important to remember “complexity” and “criticality” of the requirement.

2.4 Risk Training.

It is required that each COR receive risk management training prior to performing risk analysis in order that each individual performing risk analysis is knowledgeable of the risk assessment process. Training is provided during QAPC and Contract Specific Training.

2.5 Planning Surveillance.

Use the Risk Management Analysis Assessment Chart (5x5) and Typical Likelihood with Probability of Occurrence Criteria (right) to assist in determining risk.

For further information, refer to the DoD Risk, Issue, and https://www.acq.osd.mil/dpap/ccap/cc/corhb/ https://www.acq.osd.mil/dpap/ccap/cc/corhb/ https://cs2.eis.af.mil/sites/10263/projects/Services/MFT/MFT.aspx https://cs2.eis.af.mil/sites/10263/projects/Services/MFT/MFT.aspx http://acqnotes.com/wp-content/uploads/2017/07/DoD-Risk-Issue-and-Opportunity-Management-Guide-Jan-2017.pdf

Opportunity Guide and DoDI 5000.02. If more information is needed contact the QM.

2.6 Risk Based Surveillance.

When determining Government surveillance based on risk, it is recommended to use the RIO Tool located in the Acquisition Management System (AMS). It is here the MFT has determined risk on the contract. This is a good starting point. As time goes on, the risk should change based on mitigation strategies used. See below for the RIO Tool located in AMS.

2.7 COR Limitations.

CORs are the "eyes and ears" of the QM, PM, and CO relative to actual contract quality performance. Remember:

CORs WILL NOT DIRECT WORK, CHANGE THE CONTRACT, OR FORMALLY INTERPRET THE CONTRACT. If there is an interpretation issue, let the QM know. Refer to your designation letter for more detailed information.

2.7.1 COR Audits.

It is essential that CORs accomplish sufficient in-depth audits in all areas to measure the quality of Contractor performance and ensure the Contractor is meeting contract requirements. This is where the Risk Management Plan, your previous audit results to include trends, recent contract changes, Contractor manpower turnover, etc. come into play. This information (along with discussions with the QM and Functional’s) should be used to determine what will be audited and to what depth. Is there really a need to audit Technical Orders (TOs) every single time if you have not found any problems in the last year? Probably not. Consider a sample of TOs semi-annually. This should be ample and allow you to focus your audits on critical elements. Proper planning will ensure you audit the right requirements. As a minimum, all Services Summary (SS) items will be audited monthly. See Attachment 1 below for information related to the SS items and your instructions to audit each. Remember, part of our audit preparation will be to review the Contractor’s documentation for trends and ensure the Contractor is providing proper corrective and preventive actions. Additionally, compliance with Contractor developed plans and regulations will be part of the surveillance, as they are deliverables or part of their Quality Management System (QMS).

2.7.1.1 Types of Audits.

CORs will be performing three types of audits. Initial Performance Assessment, desktop audits, and on-site audits.

2.7.1.1.1 Initial Performance Assessment (IPA).

The initial evaluation of Contractor performance is a joint determination by the MFT that the Contractor has http://acqnotes.com/wp-content/uploads/2017/07/DoD-Risk-Issue-and-Opportunity-Management-Guide-Jan-2017.pdf successfully started performance, completed transition, is fully-operational, is within the estimated cost, schedule, and performance parameters of the contract, have met the intent of their proposal, staffing of employees has been completed, and they are in compliance with Combating Trafficking in Persons (CTIP). The IPA shall take place within 30-60 days after the Contractor assumes full performance responsibility (for your purposes – after contract start). For all contracts that are highly technical or complex, the IPA report shall include an assessment of schedule, management, technical, and cost performance. Additionally, include negative variations in cost, schedule, staffing, and performance. How the contractor is meeting the intent of their proposal should be included with an assessment of the root causes and corrective action plan. What does this mean to you? Your responsibility is to ensure the Contractor is complying with the requirements of the contract. Has the Contractor started performance? (There are usually deliverables due to the Government within the first 30-days, e.g., financial report). How did the Contractor meet their Transition Plan? Where do they stand in regards to their QMS? Have all personnel been hired (if not, are operations impeded?) These questions need to be asked and reported. Use the IPA template to capture/report all discovered during the IPA. The template is located on the ACC AMIC DRQ SharePoint (attached). Report contract performance assessment values in the following method:

• Green (Low Risk) -- No issues.

• Yellow (Moderate Risk) -- Issue(s) but Contractor has an adequate mitigation or corrective action plan in place.

• Red (High Risk) -- Issue(s) with inadequate or no Contractor mitigation or corrective action plan. Any “red” assessment shall include the Government proposed actions for the failing Contractor.

**Additionally, any significant modification(s) to the contract made since contract award shall be included in the initial performance report as special interest items**.

2.7.1.1.2 Desktop Audits.

When performing desktop audits, CORs rely on information and data filed on the Contractor’s Data Management or other system and validation of deliverables and other reports, procedures, and plans. Do as much as you can from your desktop prior to starting the actual audit. Most contractors now have websites that contain a wealth of information. Typically, you can review all PCO & PMO letters, work orders, purchase orders, PMI schedules, etc.

You will be much better prepared and can focus your audit accordingly. Deliverables are always a concern as to who should audit them. Before the contract started, the QM, PM, PCO, and Functionals determined who is responsible for each deliverable. This information is found in Attachment 2 below. As CORs, you look at all deliverables because it is a contract requirement; however, we must coordinate with the appropriate functional to ensure the data is accurate, complete, and timely to their satisfaction. If you are performing a multiple-day audit, document as you go; waiting until you have completed the audit to start your documentation typically results in missed information and rushed/poor quality products. A good rule of thumb, “carry a notebook with you and document what you see”.

2.7.1.1.3 On-site Audits.

CORs will travel to numerous locations to ensure the Contractor is performing IAW contract requirements. A schedule is required to ensure at least quarterly site audits are performed. This will ensure all contractor-operated sites are audited at least four times within the annual award fee period. The QM will assist with this.

2.8 Assess Performance.

Assess performance as a whole instead of individual findings and observations. Seldom do we pay for, nor can we afford perfection, so we should expect minor problems. From an auditing standpoint, we expect the problems to be isolated and not recurring (we expect corrective/preventive action). If we are finding a multitude of problems in the Logistics arena for example, it may indicate a systemic problem. How does it affect the overall performance of the contract? What is the risk? Maybe these individual failures when looked at as a whole have caused a moderate or high risk. If this is the case, a CAR may be warranted. Remain objective, compare performance to contract requirements, look at only the objective evidence (not “hear say” unless you can corroborate it), and make solid decisions based on these facts.

2.8.1 Nonconformance.

Audit results that are below standards will result in a nonconformance. Findings that generate a nonconformance shall be further classified using the following definitions/guidance:

Major Nonconformance: A nonconformance that adversely impacts (or has the potential to) mission, safety of personnel and/or equipment, environment, performance (quality), schedule (delivery), and/or cost. This type of

**Remember to consider Risk, before making any decision ** nonconformance has a risk assessment rating of moderate or high. Before deciding if it is a major, run the Risk Matrix embedded in the Nonconformance Form (attached) and also consider the complexity and criticality of the requirement. We communicate this nonconformance to the Contractor via a CO Letter and a single type of notification called a Corrective Action Request (CAR).

Minor Nonconformance: A nonconformance that does not necessarily adversely impact mission, safety of personnel and/or equipment, environment, performance (quality), schedule (delivery), and/or cost. It is communicated to the Contractor using two types of notification:

• First Notice

• Second Notice (Issued when the same nonconformance is identified again or the Contractor fails to correct a first notice in a timely manner – usually within 60-days).

2.8.1.1 CAR – Major Nonconformance.

When applicable, the COR shall prepare a CAR. The CAR will be controlled using the (2-digit) Year/ (2-digit) Month / (3-digit) sequential number / (3- digit) Location / (1-digit) Identifier of “C” to identify it is a CAR. (e.g., 2020001RAM-C). The same applies as above for 1st and 2nd notices with the exception of the last digit identifier (1st Notice = -1, and 2nd Notice = -2). In addition to the CAR, prepare a draft CO Letter. Ask your QM for the most current version of a CO letter. First notices can be issued directly by you, however, Second Notices will need to be reviewed by the QM prior to issuing. A CAR will be formally sent by the CO to the Contractor via a CO letter. We can notify the Contractor that a potential CAR is pending; however, it is not a CAR until the CO issues it as such.

2.8.1.2 First and Second Notices - Minor Nonconformance(s).

As discussed previously, minor nonconformance’s will be issued as either first or second notices. Remember, you must issue a first notice before a second notice is issued. Additionally, we do not require a formal response back from the contractor on a first notice.

2.9 Audit Reporting.

CORs will use an audit report to formally record audit results. The template is found on the AMIC DRQ SharePoint (also attached). Please check periodically to ensure the most current form is being used. Additionally, a Monthly Activity Report is required to show COR activity for the month. Template is attached.

3.0 Combating Trafficking in Persons (CTIP).

As CORs, one of the more important tasks is monitoring and reporting human trafficking compliance IAW FAR

22.17 and 52.222-50/56, DFARS 222.17 and 252.222-7007, and PGI 222.17. If a CTIP compliance issue is suspected, ensure you report this to the QM, PM, or PCO immediately or to any member in the member’s reporting chain. If for some reason, no one is available the DoD IG has a hotline and may be reached at (800) 424-9098, the DoD IG Hotline or the National Human Trafficking Hotline at (888) 373-7888. Please remember Chain of Command. If additional information is required, the Department of State has a website/office dedicated to monitoring CTIP, https://www.state.gov/j/tip/.

During quarterly validation of CTIP compliance, CORs will ensure at a minimum that the contractor provides a certified CTIP Compliance Plan which contains the following:

• An awareness program to inform contractor employees about the Governments CTIP policy.

• A recruitment and wage plan that only permits the use of recruitment companies with trained employees, prohibits charging recruitment fees to the employee, and ensures that wages meet applicable host-country legal requirements or explains any variance.

• A housing plan, if the Contractor or subcontractor intends to provide or arrange housing that ensures the housing meets host-country housing and safety standards.

• Procedures to prevent agents and subcontractors at any tier and at any dollar value from engaging CTIP violations.

During quarterly validation of CTIP compliance, CORs will also ensure at a minimum that contractors are not;

• Engaging in trafficking in persons during the period of performance of the contract;

• Procuring commercial sex acts during the period of performance of the contract;

https://cs2.eis.af.mil/sites/12149/DRQ/Forms/AllItems.aspx?RootFolder=%2Fsites%2F12149%2FDRQ%2F01%2E%20Quality%20Management%20System%2FTemplates%20and%20Forms&FolderCTID=0x0120001F90473724A6154E96ED0B08BB8C97A5&View=%7BDD6FD88C%2D6F1E%2D4FDD%2DA27F%2D9F41B154509B%7D http://www.dodig.mil/hotline http://www.state.gov/j/tip/

• Using forced labor in the performance of the contract;

• Destroying, concealing, confiscating, or otherwise denying access by an employee to the employee’s identity or immigration documents, such as passports or drivers’ licenses, regardless of issuing authority;

• Using misleading or fraudulent practices during the recruitment of employees or offering of employment.

Using recruiters that do not comply with local labor laws of the country in which the recruiting takes place;

• Charging employees recruitment fees;

• Failing to provide return transportation or pay for the cost of return transportation upon the end of employment or failing to provide return transportation or pay for the cost of return transportation upon the end of employment

• Providing or arranging housing that fails to meet the host country housing and safety standards; or

• Failing to provide an employment contract, recruitment agreement, or other required work document in writing, if required by country labor laws.

4.0 Cyber Security.

The contractor is required to comply with Executive Order 13556, Controlled Unclassified Information (CUI) and DFARS 252.204-7012.

4.1 System Security Plan (SSP) - Controlled Unclassified Information (CUI).

The contractor shall develop, document, and periodically update system security plans IAW NIST SPs 800- 171r1. The SSP-CUI will describe how the specified security requirements are met and/or how organizations plan to meet the requirements. The contractor will submit the SSP-CUI to the Government at contract award and within 10 business days of any changes or revisions (Deliverable TBD).

4.2 Security Assessment Plan.

The contractor will develop a security assessment plan and periodically assess organizational systems IAW NIST SPs 800-171r1, para 3.12.1 to ensure security safeguards or countermeasures are in place and operating as intended. The contractor will submit the Security Assessment Plan to the Government at contract start and within 10 business days of any changes or revisions (Deliverable TBD).

4.3 Security Action Plan.

The contractor will develop a Security Action Plan designed to correct deficiencies identified in periodic assessments in order to reduce or eliminate vulnerabilities in organizational systems. The contractor will submit the Security Action Plan to the Government annually (Deliverable TBD).

5.0 Award Fee.

See the Award Fee Plan in Appendix F of the PWS. Prior to the end of the Award Fee Period, the QM will reach out to you to provide an assessment of the contractors performance. This is communicated to the PM and CO via an Executive Summary (template attached). If a briefing is required, the QM and/or C-COR will be required to provide a briefing to the Award Fee Review Board members. When required, the QM will forward the briefing template to the C-COR.

6.0 Contractor Performance Assessment Report (CPAR).

This is a critical document giving the CO, PM, and QM performance oversight on all services and ensures all products during the year were provided to the Government in accordance with all contract requirements. When notified to provide information on the Contractor’s performance, the PM will suspense the QM. The PM will determine when the CPAR is due. An example of a CPAR questionnaire is attached. One similar to this will be sent to the C-COR annually.

6.1 CPAR Evaluation.

See the CPAR Policy Guide located on the DRQ Share Point or can be found at https://www.cpars.gov/pdfs/CPARS-Guidance.pdf http://www.cpars.gov/pdfs/CPARS-Guidance.pdf http://www.cpars.gov/pdfs/CPARS-Guidance.pdf

ATTACHMENT - Service Summary

INSPECTION GUIDES FOR SERVICE SUMMARY ITEMS

CORs will use the table depicted below to determine sample size for random sampling. How to use example:

If you are using the Normal sample size and have 220 PMI work orders on your spreadsheet, you will select a sample size of 32. Using the random number generator, select the PMI work orders that will be audited. If you find three or less PMI work orders out of tolerance, the contractor is OK as we accept on three or less errors. If you find four or more out of tolerance conditions perform a risk assessment and determine what level of nonconformance should be issued. Typically, if the condition may result in a moderate or high risk then a CAR may be warranted.

Random Number Generator link is: https://www.random.org/integer-sets/

See below random sampling levels (taken from Z1.4) that will assist in determining how many items should be randomly selected under Normal, Tightened, or Reduced sample sizes.

Table from Z1.4

Lot Size

NORMAL

Sample Size

Accept/Reject

TIGHTENED

REDUCED

02 to 08 2 0/1 2 0/1 2 0/1

09 to 15 3 0/1 3 0/1 2 0/1

16 to 25 5 0/1 5 0/1 2 0/1

26 to 50 8 1/2 8 1/2 3 1/2

51 to 90 13 1/2 13 1/2 5 1/2

91 to 150 20 2/3 20 1/2 8 2/3

151 to 280 32 3/4 32 2/3 13 3/4

281to 500 50 5/6 50 3/4 20 4/5

501 to 1200 80 7/8 80 5/6 32 5/6

1201 to 3200 12

10/11 125 8/9 50 7/8

3201 to 10000 20

14/15 200 12/13 80 9/10 http://www.random.org/integer-sets/ http://www.random.org/integer-sets/

SS Item #1 – Program Management

PERFORMANCE OBJECTIVE:

Provide and maintain comprehensive, pro-active, integrated program management that focuses on meeting or exceeding customer requirements and ensures compliance to all mandatory, statutory, and regulatory requirements.

Reference: PWS, Section A, Para 2.0.

PERFORMANCE STANDARD:

Meet or exceed customer requirements; manage program by identifying interrelated processes, perform management reviews, and take action from those reviews, and create organizational value by fostering a mutual beneficial relationship with the Government.

PERFORMANCE THRESHOLD: Any failure under program management will be considered noncompliant.

Criticality, complexity, and risk of any noncompliance will be validated to determine severity of the non-conformance that will be issued (Minor versus Major).

Audit Frequency/Method of Surveillance: Monthly/100% Inspection

COR Instructions: The PM team will validate the Contractor is meeting or exceeding customer requirements and the contractor is in compliance with all contract requirements related to a comprehensive, pro-active, integrated program management. Any noncompliance will be reported to the QM and CORs for issue of a nonconformance.

Objective Evidence (Audit Report): Compliance and findings will be documented in the Monthly Activity Report, audit reports, and annual CPAR and Award Fee Executive Summary.

SS Item #2 – Quality Management System (QMS)

Implement, maintain, comply, and continuously improve a comprehensive QMS.

Reference: PWS, Section A, Para 2.3. and Appendix D

PERFORMANCE STANDARD:

The contractor shall be in compliance IAW with most current version of ANSI/ISO/ASQ 9001 and the PWS.

PERFORMANCE THRESHOLD: Any failure under QMS will be considered noncompliant. Criticality, complexity, and risk will be validated.

COR Instructions: The QM and CORs will validate the contractor’s QMS is implemented, maintained, compliant and is continuously improving. If the CORs are unsure, ask the QM for assistance. This is overarching, so any failure may be a failure in the contractor’s entire QMS.

Objective Evidence (Audit Report): Compliance and findings will be documented in the Monthly Activity Report, audit reports, and annual CPAR and Award Fee Executive Summary.

SS Item #3 – Deliverables

The contractor shall submit all deliverables on time and accurately.

Reference: Will be updated with release of final RFP

PERFORMANCE STANDARD:

Comply with all contract requirements.

PERFORMANCE THRESHOLD: Performance is acceptable when each deliverable is met and content is technically accurate (excludes minor errors such as spelling, grammar, and punctuation). Criticality, complexity, and risk will be validated.

COR Instructions: The CORs validation of deliverables is to ensure all functional activities received their deliverable on time and accurately (See Appendix B). Functionals will contact the CORs if all deliverables are not submitted on time or with accurate information.

Objective Evidence (Audit Report): Compliance and findings will be documented in the Monthly Activity Report, audit

SS Item #4 – Staffing

The contractor shall maintain and staff a qualified and motivated workforce.

Reference: PWS, Section A, Paras 2.1.1.1, 2.1.1.3, Deliverables 5 & 6, and App. M & N (will be updated with release of final RFP)

PERFORMANCE STANDARD:

Comply with all contract requirements (Also see Appendices M - Certifications & N – Key Personnel).

PERFORMANCE THRESHOLD: No vacancies in key positions greater than 60 days unless waived by Government. Criticality, complexity, and risk will be validated. Site manning at each location not less than 75% of all positions identified in the Final Proposal Revision (FPR) or subsequent modification(s).

COR Instructions: Discuss with PM as to whether Deliverables 5 and 6 show all personnel are currently staffed.

Over-the-shoulder validation must occur periodically to ensure all those employed are qualified.

Objective Evidence (Audit Report): Compliance and findings will be documented in the Monthly Activity Report, audit

SS Item #5 – 5. Occupational Safety, & Health (OS&H) and Environment, Safety &Health (ES&H)

PERFORMANCE OBJECTIVE:

Implement and maintain an effective OS&H and ES&H programs for all employees.

Reference: PWS, Section A, Paras 2.1.2, 6.3 and several deliverables (see Attachment 2) – will be updated with release of final RFP

PERFORMANCE STANDARD:

Comply with all contract requirements.

PERFORMANCE THRESHOLD: Any failure under OS&H or ES&H will be considered noncompliant. Criticality, COR Instructions: CORs will stay in contact with ACC AMIC/PCE functionals to ensure the contractor remains in compliance with all OS&H and ES&H requirements. During site audits ensure the contractor follows and adheres to all contract, OSHA, and mandatory statutory and regulatory requirements.

Objective Evidence (Audit Report): Compliance and findings will be documented in the Monthly Activity Report, audit

SS Item #6 – Materiel Management

Maintain control, accountability and inventory of GFE/P and properly handle, store, package, preserve, and deliver freight and materials to include certification and packaging of HAZMAT.

Reference: PWS, Section A, Para (will be updated with release of final RFP)

PERFORMANCE STANDARD:

Comply with all contract requirements.

PERFORMANCE THRESHOLD: Performance is acceptable when all contract rates meet contract requirements and property is handled properly from origin to Port of Destination without loss, damage, or delay. Criticality, Audit Frequency/Method of Surveillance: 100%/Periodic Inspection/Random Sample (Frequency is subject to change based on historical data and trend analysis; coordination with QM is required before changes are made)

COR Instructions: The CORs will validate all accuracy rates and timelines identified in the contract. Through 100% and Periodic Inspection of physical on site inventories and validation of reports, listings, and deliverables, etc.

Validation of inventory accuracy rates can only be performed through actual physical inventory (“touching each asset”).

Objective Evidence (Audit Report): Compliance and findings will be documented in the Monthly Activity Report, audit

SS Item #7 – Storage Serviceability

The contractor shall store and maintain all commodities in a serviceable condition.

Reference: PWS, Section A, Para (will be updated with release of final RFP)

PERFORMANCE STANDARD:

Comply with all contract requirements Comply with all contract requirements (Also see Appendix G – Level of Effort).

PERFORMANCE THRESHOLD: All storage serviceability rates (PWS, Appendix G) met within required timeframes unless deferral is approved by Government. Criticality, complexity, and risk will be validated. Unless specified otherwise for a specific commodity or site, the serviceability rate for each functional area, by site, should not be less than 95% of on-hand assets (excluding assets in reconstitution).

COR Instructions: The CORs will validate serviceability rates each month. Serviceability rates were met IAW Appendix G. If timeframes are not met, validate there is an approved Government waiver.

Objective Evidence (Audit Report): Compliance and findings will be documented in the Monthly Activity Report, audit

SS Item #8 – Security

Document, implement, maintain, and adhere to an effective security program.

Reference: PWS, (will be updated with release of final RFP)

PERFORMANCE STANDARD:

Comply with all contract requirements.

PERFORMANCE THRESHOLD: Performance is acceptable when there are no security incidents or violations.

Report any incident within 24-hours and violations within 2-hours to Government. Criticality, complexity, and risk will be validated.

COR Instructions: The CORs will validate the contractor complies with all security requirements of the contract and statutory and regulatory mandates.

Objective Evidence (Audit Report): Compliance and findings will be documented in the Monthly Activity Report, audit

SS Item #9 – Management Information System (MIS)

Provide accurate and current (within two business days of occurrence) data within Computer Aided-DMS.

Reference: PWS, Section A, (will be updated with release of final RFP)

PERFORMANCE STANDARD:

Comply with all contract requirements.

PERFORMANCE THRESHOLD: Performance is acceptable when data specified in contract is available on DMS, is technically accurate (excluding minor errors such as spelling, grammatical, and punctuation) and updates made within 2-business days unless otherwise noted in contract. Criticality, complexity, and risk will be validated.

COR Instructions: The CORs will validate the contractors DMS is accurate and current within 2-business days.

Objective Evidence (Audit Report): Compliance and findings will be documented in the Monthly Activity Report, audit

SS Item #10 – Corrective and Preventive Maintenance

Provide a comprehensive, site-specific, corrective and preventive maintenance program to identify all corrective and preventive maintenance required to safeguard and extend lifespan of all GFE/GFF/GFP/GFV.

Reference: PWS, Section A, Para (will be updated with release of final RFP)

PERFORMANCE STANDARD:

Comply with all contract requirements.

PERFORMANCE THRESHOLD: Performance is acceptable when corrective and preventive maintenance is performed, deferred with satisfactory justification if delayed, and effectively managed within appropriate DMS (e.g., IMDS). Fix actions and delays will not exceed 30-days without Government approval. Criticality, complexity, and risk will be validated.

COR Instructions: The CORs will validate the UAS ISR SharePoint and email traffic to ensure the contractor submitted all deliverables within their respective timeframes. CORs will contact deliverable POCs to validate all deliverables were submitted with accurate information.

Objective Evidence (Audit Report): Compliance and findings will be documented in the Monthly Activity Report, audit