Attachment_1_QASP_ESS_HC102815T0169.docx

NOTE: This must be included for ALL services contracts, to include task orders issued against existing IDIQs or GSA schedules

QUALITY ASSURANCE SURVEILLANCE PLAN (QASP)

1. Contract or Task Order Title: Electronic Security system (ESS) Maintenance Repair (routine and emergency), and Modificaiton Contract for the Defense Information Systems Agency (DISA) Facility Fort Meade, MD.

2. Work Requirements:

· Task 1 - Electronic Security System Administrator (ESSA)

· Task 2 – Electronic Security System Administrator Assistant (ESSAA)

· Task 3 – Routine Repairs Services

· Task 4 – Preventative Maintenance Services

· Task 5 – Emergency Maintenance Services

· Task 6 – Modification, reconfiguration/relocation and Upgrade of the System

· Task 7 – DoD Certification and Accreditation

· Task 8 = Life-Cycle Maintenance/Replacement Plan

· Task 9 - Spare Parts Inventory

· Task 10-Campus-wide site survey of security Management Systems (SMS)

3. Primary Method of Surveillance:

3.1 A weekly random sampling of all work performed under tasks 1, 2, 3, 4, 5, and 6 will be conducted to determine the level of performance is acceptable.

3.2 100% of all documentation to acquired for task 7 will be reviewed and consider acceptable when Accreditation is granted.

3.3 A yearly review of items replaced under task 8 will be conducted under task 8.to determine the level of acceptable performance.

3.4 A 100% yearly inventor will conducted for task 9.

3.5. A 100% review will be completed of all documents of task 10.

4. Scope of Performance:

4.1 Task 1. Electronic Security System Administrator (ESSA). The Contractor shall provide an ESSA, Monday through Friday (excluding Federal holidays), 8 hours per day with a 30 minute unpaid lunch break. The ESSA shall be certified by Lenel as a Direct Support System User. This position shall serve as the Access Control/Alarm systems administrator and maintenance manager for the contractor. Serves as the Security Systems Administrator (SSA) for the Electronic Security System that includes access control and intrusion detection, The Contractor shall provide a highly trained security specialist with a demonstrated commensurate specialized experience in electronic security systems administration, with minimum/general experience of five years experience in security integration hardware and software installation, troubleshooting, configuration, administration of IP based electronic security systems, including access control, video systems, intrusion detection, and other network peripherals and knowledge of computer aided design (CAD) software; with general functional responsibilities of device configuration, programming, installation and maintenance of IP based electronic security systems, including cable, access control card readers and data gathering panels, video management software and network video recording platforms, connected desktop computers, network interface cards, and other network peripherals as well as design and initial implementation. This position shall be responsible for updating software to meet IAVA compliance, if required. This position requires certification on the operating system of the Access Control/Alarm System (Lenel Onguard) within 60 days of the start of the performance period. Throughout the life of the contract, any replacement ESS Administrators will be certified prior to being assigned to the contract. Information on applicable training (CR1000S Access Control Hardware, CR2000S Access Control Essentials, CR3000S Advanced Access Control, CR4000S Digital Video) is available on the Lenel website.

4.2 Task 2. Assistant Electronic Security System Administrator (AESSA). The Contractor shall provide an AESSA, Monday through Friday (excluding Federal holidays), 8 hours per day with a 30 minute unpaid lunch break. The AESSA shall be certified by Lenel as a Direct Support User. Additionally, the personnel provided must possess minimum/general experience of three years experience in security integration hardware and software installation, troubleshooting, configuration, administration of IP based electronic security systems, including access control, video systems, intrusion detection, and other network peripherals; with a minimum education of associate’s degree in electronics technology. With five years of experience, no degree is required. Certification as Lenel Direct Support User is required.

4.3. Task 3. Routine Repair Services. The Contractor shall provide one (1) Lenel certified technician 16 hours per week to perform routine maintenance during normal business hours. Minimum/general experience of the technician will be one year of experience in security integration hardware installation, troubleshooting, configuration, including access control, video systems, and intrusion detection; with a minimum education of an associate’s degree in electonics technology. With three years ecperience no degree is required. Functional responsibilities include assisting with or performing at the basic level, a variety of tasks with installation, troubleshooting, configuration, administration of IP based electronic security systems, including access control, video systems, intrusion detection, and other network peripherals. Work assignments would be of minimal complexity and would work under immediate supervision. Replacement items shall be pulled from on-site inventory. In the event no on-site inventory exists, with prior approval from the COR the Contractor shall be reimbursed for the equipment costs incurred at the approved rate of the equipment. f complexity of repair work exceeds the technical capabilities of the technician, the ESSA consult the COR if the need to elevate the repair status.

4.4. Task 4. The Contractor shall perform Preventative Maintenance Services at a time that is mutually acceptable between the Contractor and the Government, consistent with the Government’s operating requirements, and based on the specific needs of the hardware and software. The Contractor shall provide to the Contracting Officer’s Representative, a schedule, including each type and model of hardware, a description of the preventive maintenance service to be performed, its frequency, and its duration. Preventive maintenance will also include maintenance of all required software licenses and required software updates to the system. Reporting of required software licenses will be broken out separately from hardware. The Contractor shall provide recommendations and cost estimates for systems found to be non-operational and those recommendation shall be provided to the COR for the approved corrective actions.. All components and systems are assumed to be in operational condition upon award of this task order. The contractor shall furnish routine Maintenance Report to the COR upon each service call for remedial maintenance.

4.5 Task 5. Emergency Maintenance Services. The Contractor will provide Emergency Maintenance Service for all security equipment. Failure of any major system components on weekends, holidays, or after normal business hours shall be considered Emergency Maintenance. Routine repair issues are defined as system failures, which may cause a minor impact, but does not constitute a major lapse in system performance or coverage shall not be considered Emergency Maintenance Service. However, failure of multiple system components including those affecting SCIFs shall be considered Emergency Maintenance Service. All emergency Maintenance Service shall begin within four (4) hours after requested by the Government on a 24/7, 365 days a year basis. This does not include the time the Contractor must take to respond to DISA Headquarters. In the event that there are more requests than can be responded to within four (4) hours the Government will prioritize the Emergency Maintenance Service Request. The Contractor shall provide a point of contract and a 24 hour/7 day per week telephone number where the Government may initiate Emergency Maintenance Service Requests. The contractor shall update the Life-Cycle Replacement Plan with new equipment additions/modifications and provide a copy no later than 1 week after installation of new equipment.

4.6 Task 6. Modification, Reconfiguration/Relocation and Upgrade of the System. (A contract modification is required prior to performance of this CLIN.) The required work/cost under this task can only be roughly estimated by researching the history of the ESS repairs/work in the headquarters building since the BRAC move. The requirements may include but is not limited to; reconfiguaration or relocation of currently installed equipment, additional cameras, swipe card readers, door security devices, ESS upgrades as required to maintain system integrity and robust performance, and system reconfiguration/upgrades as dictated by Agency mission requirements. The Contractor will provide all labor categories for personnel that could be used to provide services on the contract, including all negotiated labor rates that may be required for modifications to the system. An estimated ceiling for the work of this CLIN will be assigned. The contractor will submit a proposal for all major repairs and new work requirements as defined by the government. The government will evaluate the proposal and if approved, the proposed work will be added to the contract as a FFP SUBCLIN. The contractor shall update the Life-Cycle Replacement Plan with new equipment additions/modifications and provide a copy no later than 1 week after installation of new equipment.

4.7 Task 7. DoD Certification and Accreditation (Included on the contract as an Optional CLIN to be used if required). The Contractor will be responsible for ensuring that the DISA ESS complies with the Risk Management Framework (RMF), ensuring the ESS meets the applicable DoD information assurance policies and procedures as described in DoD Instruction (DoDI) 8510.01, Risk Management Framework (RMF) for DoD Information Technology (IT).

4.8 Task 8. Life-Cycle Replacement Plan. For the components of the ESS, the contractor will provide an initial projected replacement schedule for each piece of equipment, which annotates the installation date, manufacturer’s recommended replacement timeframe, and proposed replacement schedule on the network with an emphasis on minimal disruption to the system. If no manufacturer recommendation exists, the contractor will use establish commercial standards. As equipment is added to the system the contractor will update the schedule as appropriate.

4.9 Task 9. – Spare Parts Inventory. The contractor will maintain an on-hand spare parts inventory, using the parts for routine repairs. The parts will be parts cost will be invoiced at an approved rate. The CLIN will be invoiced as parts are used, maintaining inventory to prevent disruption in services.

4.10 Site Survey of SMS. The contractor wil perform a site survey of the entire SMS facility wide. The contractor will inspect every SMS network switch along with other critical information necessary to collect and prepare a report detailing the findings and any recommended remediation plan. At a minimum, the contractor will collect the following data to determine how the network was originally configured:

· Make and model of all network switches (may need to be replaced if not at a gigabit speeds)

· How devices are being linked and the communication pathways

· Run local commands on existing switches to see what, if any, programming was done

Upon completion of the survey and analysis of the data collected, the contractor will provide a detailed drawing of the existing network and if applicable, the contractor will provide modification recommendations and justifications to improve network performance.

5. Performance Standards:

Performance Stan

6. Mandatory or regulatory compliance items: The contractor will provide initial proof of compliance with regulatory and compliance items contained in the contract. The Contracting Officer’s Representative (COR) and the contracting officer (KO) will evaluate the initial submission. The COR and KO will conduct ad hoc reviews of the contractor’s compliance throughout the remainder of the contract.

7. Acceptable Quality Level (AQL):

8. Evaluation Method: The COR will document the time of verbal notification to the contractor. The COR will document the official time and date of notification on the Maintenance Call Record. The COR will review systems maintenance logs, conduct a comparison with actual maintenance performance and otherwise verify and validate contractor performance. The contractor shall enter in the record the official time the system is restored to full operational status. The COR will confirm the date and time of problem resolution in the record.

9. Incentives (Positive and/or Negative): N/A Enclosure 6, Page 1 of 2 Pages 17Jul2013/Version 2

Enclosure 6, QASP Page 1 of 1 Pages v4/10 Feb 15