Attachment_J-10_OTD.D18.1.pdf

UNCLASSIFIED//FOUO

SUBJECT MATTER EXPERT SERVICES

TASK ORDER STATEMENT OF WORK (TOSOW)

Operational Technology Division (OTD) – D18

National Domestic Assistance Center (NDCAC) Industry

Relations Program

Version 1.0

Task Order OTD/D18-1

Authored by:

Alice Bardney-Boose

Federal Bureau of Investigation

COR CONTACT INFORMATION

Task Lead Name Alice Bardney-Boose

Work Phone Number 540-361-2330

Branch/Division/Section/Unit OTD/TCB/NDCAC

Mobile Phone Number 571-289-2352

Fax Number 540-361-7082

E-mail Alice.Bardney-Boose@ic.fbi.gov

Address

ERF

Building 27958-A

NDCAC

Quantico, VA 22135

SOW CHANGE HISTORY

Date Version Change Description

12/23/2014 1.0 Initial Release

Table of Contents

1.0 BACKGROUND

2.0 OBJECTIVES

3.0 SCOPE

4.0 TASKS

5.0 PERIOD OF PERFORMANCE

6.0 CONTRACT TYPE

7.0 PLACE OF PERFORMANCE

8.0 SME LABOR CATEGORY AND HOURS

9.0 SECURITY

10.0 DELIVERY/DELIVERABLES

11.0 GOVERNMENT FURNISHED PROPERTY

12.0 TRAVEL

13.0 SPECIAL REQUIREMENTS

14.0 QUALIFICATIONS

15.0 PERFORMANCE METRICS

APPENDIX A: ACRONYMS

1.0 BACKGROUND

The FBI, in its role of managing the National Domestic Communications Assistance Center

(NDCAC), has a requirement for specialized Subject Matter Expert (SME) support to develop a formalized, comprehensive industry relations strategy that will allow it to establish and maintain cooperative working relationships with members of the nationwide community of service providers.

The FBI is specifically in need of expertise and experience in the exploitation of communications technology in criminal investigations at the State and local level. The NDCAC is focused on developing unified industry-facing positions that represent the entire law enforcement community.

The FBI recognizes that State and local law enforcement agencies confront challenges different from the challenges facing Federal law enforcement.

The NDCAC’s Industry Relations Program is dependent on proactive and robust liaison with communications service providers of all types (e.g., telephone companies, broadband services providers, Internet Service Providers [ISP], as well as equipment manufacturers). As such, the establishment and maintenance of cooperative working relationships with service providers is critically important to law enforcement’s continued reliance on lawfully-authorized electronic surveillance.

State and local law enforcement agencies and prosecutorial organizations are not well equipped to address many of the challenges brought upon by the evolving communications landscape. The sheer number of providers and the innovations introduced into the marketplace can often overwhelm individual agencies. The majority of State and local law enforcement agencies are a fraction of the size of Federal agencies and simply do not have the breadth of expertise and resources. State and local prosecutors often have little or no opportunities to receive training on emerging issues related to communications services and providers.

2.0 OBJECTIVES

The NDCAC has a requirement for support to develop a formalized, comprehensive effort to establish and maintain cooperative working relationships with members of the nationwide community of communication service providers. Based on experience of the FBI and other law enforcement agencies, the establishment and maintenance of cooperative working relationships with communications service providers is critically important to the attainment of electronic surveillance objectives.

The electronic surveillance support required of telephone companies, Internet Service Providers

(ISPs), and other providers of communications services is always conducted in response to formal judicial authorization. However, the success of such operations is often affected by regular attention to the technical and procedural issues that are raised at the juncture of law enforcement and communications service provider interests.

3.0 SCOPE

The contractor shall provide one subject matter expert with expertise and experience in the exploitation of communications technology in criminal investigations at the State and local level.

The expertise and experience will be utilized to assist the NDCAC in the development of a formalized, comprehensive industry relations strategy that will allow the NDCAC to establish and maintain cooperative working relationships with members of the nationwide community of service providers.

4.0 TASKS

The SME shall provide the following support services:

Develop a strategic plan that is easily translatable into specific action plans that address high level NDCAC initiatives and overarching goals and articulates day-to-day projects and tasks required to achieve the plan. The strategic plan shall take into account how best the NDCAC can identify industry participants and provide rationale for their respective consideration by the NDCAC.

Develop a comprehensive model depicting today’s variety of communication offerings:

communications providers, their business models, and the products that they provide. The model must take into account the role of providers at all levels of the communications marketplace and their interrelationships. The model shall include technical capabilities available from service providers and document service providers’ infrastructure for establishing interconnection with law enforcement for electronic surveillance (i.e., circuits, network, and equipment).

Develop a current and comprehensive model for the compliance policies and procedures of communications providers (e.g., telephone companies, broadband service providers, and

ISPs). The model must recognize that different providers have their own set of requirements/restrictions to obtain the communications/data that either resides or traverses their respective networks.

Develop a current model of the growing capacity of smart phones based on communications moving from a central provider to the communication device through software applications

(“apps”). App providers may be well-established email and social networks or emerging small app developers. The model must include how best to identify the newest app developers and determine to what communications/data they may have access.

Conduct comprehensive review of actual investigative cases provided by NDCAC staff that identifies critical support elements provided by communications service providers and the value of such assistance for incorporation into studies/brief/whitepapers to be shared with the law enforcement and prosecutorial communities. Additionally, the SME shall identify levels of support and resistance within industry that will emerge in response to changes proposed by

NDCAC.

Provide documented insight into industry stakeholders and develop communications tools to be used to educate members of industry with respect to the needs of law enforcement and support provided by the NDCAC.

Identify electronic surveillance training suitable for service provider representatives, law enforcement agencies, and prosecutorial organizations. Training must recognize the limitations associated with the acquisition of communications/data by State and local law enforcement.

Identify Department of Justice and other Federal, State, and local sponsored programs designed to assist law enforcement in addressing the complexities of computer and Internet based crimes (e.g., Bureau of Justice Assistance, National Cybercrime Training Partnership).

Provide weekly and monthly reports detailing Industry Relations Strategy Development activities during the time period and report on future planned activities for the upcoming week and month respectively.

5.0 PERIOD OF PERFORMANCE

Task Order Period of Performance

From: Date of Award To: 12-months commencing upon Task Order execution and includes four 12-month option periods thereafter.

6.0 CONTRACT TYPE

This task order shall be priced as Time and Materials.

7.0 PLACE OF PERFORMANCE

Place of Performance Date

1. NDCAC, Solomon Drive, Fredericksburg VA 22405 Award Date

2. OTD, Engineering Research Facility, Quantico VA 22135 Award Date

8.0 SME LABOR CATEGORY AND HOURS

SME Labor Category Number of Positions Annual Hours Core Operating Hours

SME II 1 1920/SME 8:00 am – 5:30 pm

9.0 SECURITY

All personnel working directly on this contract will require a TOP SECRET clearance. Contractor personnel must already possess the requisite clearances.

The work to be performed hereunder and data released to the Contractor will be treated as confidential, privileged, or sensitive in nature and will not be discussed with or released to anyone except as authorized by the CO or COR.

10.0 DELIVERY/DELIVERABLES

Weekly and monthly status reports detailing Industry Relations Strategy Development activities during the time period and report on future planned activities for the upcoming week and month respectively.

11.0 GOVERNMENT FURNISHED PROPERTY

The following items will be furnished by the Government:

Government Item Quantity

1. OTD office space 1

2. OTD Desktop Computer, Software, Supplies 1

3. Desktop Telephone and Telephone Service 1

4. Access to Fax Machine & Copier Yes

12.0 TRAVEL

Under 50 mile trips are required Over 50 mile trips are required

N/A 6

13.0 SPECIAL REQUIREMENTS

13.1 Key Personnel / Continuity of Operations (COOP)

The SME is considered Key Personnel. Only key personnel are required to submit resumes with the

Contractor’s cost proposal, and the Government may conduct interviews of key personnel to verify resume representations. The Contractor may not replace key personnel without prior Government approval.

13.2 Performance Required Beyond Standard Workday

To the extent that work hours are dependent upon task deadlines, limited access to work space or government furnished information, and need to have government employee oversight or availability

– the Government may require variances in work hours or limit access to space only when government employees are available/present to direct performance.

13.3 Special Clauses

Where the FBI and NDCAC Information Systems (IS) access will be provided to the Contractor as part of the Government Furnished Property, the Contractor will abide by the FBI and OTD IS security policy and procedures, particularly in the area of obtaining access and systems usage.

Contractor employees that fail to adhere to the FBI and OTD IS security policy and procedures can result in the denial of IS access, removal from the network and system access, and removal from the

Contract.

The OTD Security Office will document violations of local IS security policy, such as, password sharing, performing personal work, file access violations or browsing files outside the scope of the contract. (The OTD Security Office will give each documented letter of noncompliance to the

COTR.) After two letters of noncompliance, the Contractor will remove the documented Contractor employee(s) from the Contract. Egregious violations will result in immediate removal.

14.0 QUALIFICATIONS

14.1 Educational Requirements

Bachelor Degree

14.2 Experience Requirements

The subject matter expert must have ten to twelve years of experience in electronic communications and electronic surveillance (ELSUR), law, communication providers, and State and local law enforcement agencies.

15.0 PERFORMANCE METRICS

The contractor shall develop and submit a Quality Assurance Surveillance Plan (QASP) for this task order which outlines the performance standards, surveillance methods, metrics and penalties/rewards.

The following shall be included in the QASP.

The following four criteria will be used to assess the quality of tasks performed and deliverables submitted in this task order:

The contractor’s overall performance on this task order as well as staffing and replacing personnel.

The Contractor response to urgent communications within 1 hour 90% of the time.

The Contractor response to routine communications within 8 hours 90% of the time.

The Contractor’s submission of deliverables in a timely manner and corrections required by the government on written documents within 10 working days or as specified by the FBI.

APPENDIX A: ACRONYMS

Acronym Description

TO Task Order

NDCAC National Domestic Communications Assistance Center

CSP Communication Service Providers

ELSUR Electronic Surveillance