Attachment_1_QASP_HC102817R0078_final.docx

DOCX document 45 KB Posted

Attached to
Enterprise-Wide Integrated Security System Operations and Maintenance (O&M) Services Federal contract opportunity
Solicitation number
HC102817R0078
Issued by
Defense Information Systems Agency

About this file

Attachment 1 QASP

View the file

Other files for this federal contract opportunity

Other files attached to Enterprise-Wide Integrated Security System Operations and Maintenance (O&M) Services, newest first.
File Type Posted
Attachment_2_Pricing_Sheet_HC102817R0078_882017.xls XLS spreadsheet
HC102817R0078_AMD04.docx DOCX document
Additional_questions_responses_HC102817R0078_Aug_1_17.docx DOCX document
Attachment_2_Pricing_Sheet_HC102817R0078_7272017.xls XLS spreadsheet
Additional_questions_responses_HC102817R0078_27_Jul_17.docx DOCX document
HC102817R0078_Questions-Govt_Responses_AMD03_.docx DOCX document
HC102817R0078_AMD03.docx DOCX document
Atch_4_Evaluation_Tables_HC102817R0078.docx DOCX document
Attachment_10_Revised_7182017.docx DOCX document
HC102817R0078_Amendment_02.docx DOCX document
HC102817R0078_Questions_with_Govt_Responses_Final_7_18.docx DOCX document
Attachement_6_QA_Form_HC102817R0078.docx DOCX document
Attachment_7_Visitor_Authorization.docx DOCX document
Attachment_5_HC102817R0078_Scenario_Rqmt_rev_june27.docx DOCX document
Atch_4_Evaluation_Tables_HC102817R0078.docx DOCX document
Attachment_2_Pricing_Sheet__HC102817R0078.xls XLS spreadsheet
HC102817R0078.docx DOCX document
Atch_3_Past_Performance_HC102817R0078.doc DOC document
HC102817R0078_amd01.docx DOCX document
Attachment_9_Recommend_-_Config_Management.docx DOCX document
Attachment_8_Div_28_Security_Requirement_Excerpt.docx DOCX document
Attachment_10_Current_ISS_Installation_Equipment.docx DOCX document
Show all 22

On GovTribe

Work with this file on GovTribe

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Attachment 1 HC102817R0078

QUALITY ASSURANCE SURVEILLANCE PLAN (QASP)

1. Contract or Task Order Title : Enterprise-Wide Integrated Security Systems (ISS) Operations and Maintenance Services.

2. Purpose:

This QASP provides a systematic method to evaluate performance for the stated contract. This QASP explains the following:

· What will be monitored?

· How monitoring will take place.

· Who will conduct the monitoring?

· How monitoring efforts and results will be documented.

This QASP does not detail how the contractor accomplishes the work. Rather, the QASP is created with the premise that the contractor is responsible for management and quality control actions to meet the terms of the contract. It is the Government’s responsibility to be objective, fair, and consistent in evaluating performance. In addition, the QASP should recognize that unforeseen and uncontrollable situations may occur.

This QASP is a “living document” and the Government may review and revise it on a regular basis. Updates shall ensure that the QASP remains a valid, useful, and enforceable document. Copies of the original QASP and revisions shall be provided to the contractor and Government officials implementing surveillance activities.

3. Roles and Responsibilities:

The following personnel shall oversee and coordinate surveillance activities.

Program/Project Manager (PM) – The PM provides program oversight and supports the COR’s performance assessment activities.

Contracting Officer (KO) – The KO shall ensure performance of all necessary actions for effective contracting, ensure compliance with the contract terms, and shall safeguard the interests of the United States in the contractual relationship. The KO shall also ensure that the contractor receives impartial, fair, and equitable treatment under this contract. Determine the final assessment of the contractor’s performance.

Contracting Officer’s Representative (COR) – The COR is responsible for providing continuous technical oversight of the contractor’s performance. The COR uses the QASP to conduct the oversight/surveillance process. The COR shall keep a Quality Assurance file that accurately documents the contractor’s actual performance. The purpose is to ensure that the contractor meets the performance standards contained in the contract. The COR is responsible for reporting early identification of performance problems to the KO. The COR is required to provide an annual performance assessment to the KO which will be used in documenting past performance. The QASP is the primary tool for documenting contractor performance. The COR is not empowered to make any contractual commitments or to authorize any contractual change on the Government’s behalf.

4. Primary Method of Surveillance:

Random sampling is scheduled for Tasks 1 and 2 (routine service calls). There will be 100% inspection for Tasks 2 (emergency service calls) and Task 4.

Acceptable surveillance methods include:

· 100 Percent Inspection. This is usually only the most appropriate method for infrequent tasks or tasks with stringent performance requirements, e.g., where safety or health is a concern. With this method, performance is inspected/evaluated at each occurrence. One hundred percent inspection is too expensive to be used in most cases.

· Random Sampling. This is usually the most appropriate method for recurring tasks. With random sampling, services are sampled to determine if the level of performance is acceptable. Random sampling works best when the number of instances of the services being performed is very large and a statistically valid sample can be obtained. Computer programs may be available to assist in establishing sampling procedures.

· Periodic Inspection: These services are monitored weekly, monthly, quarterly, semiannually, annually, etc. Periodic types of activities are perfect for periodic inspection because not only are they infrequent, but there is normally a predetermined, specified time frame within which the tasks must be accomplished. Therefore, you know exactly when to conduct the evaluations. Periodic inspections automatically become 100 percent evaluations or "100 percent checks." Inspections should be divided and scheduled by frequency: annual, semiannual, quarterly, monthly, weekly and as required. Sometimes services are required for which the time or frequency cannot be predicted, such as accident investigations, one-time special tasking by higher headquarters, etc. These would be labeled "as required inspections." Others are known and predictable such as the quarterly status report or the monthly travel report currently included in some DISA service contracts.

· Customer Input. Although usually not a primary method, this is a valuable supplement to more systematic methods. For example, in a case where random sampling indicates unsatisfactory service, customer complaints can be used as substantiating evidence. In certain situations where customers can be relied upon to complain consistently when the quality of performance is poor, e.g., dining facilities, building services, customer surveys and customer complaints may be a primary surveillance method, and customer satisfaction an appropriate performance standard. In all cases, complaints should be documented, preferably on a standard form.

Surveillance Matrix

The Surveillance Matrix (Appendix 1) is the list of performance objectives and standards that must be performed by the contractor. This matrix details the method of surveillance the COR will use to validate and inspect these performance elements. Inspection of each element will be documented in the COR file.

Performance objectives define the desired outcomes. Performance Standards define the level of service required under the contract to successfully meet the performance objective. The inspection methodology defines how, when, and what will be assessed in measuring performance. The Government performance surveillance, using this QASP, to determine the quality of the contractor’s performance as it relates to the performance element standards. The AQL performance Standard Table should be used to form the foundation of the COR’s inspection checklist.

5. Performance Standards:

General Performance Items: 6.1, 6.2, 6.8, and 6.9.

Task 1 and 2 -Preventive Maintenance Services and Configuration Management (6.16 and 6.17)

Performance Standard
Acceptable Quality Level (AQL)
Method of Surveillance
Subtask 6.2. Quality Assurance (QA) Surveillance Form shall be used to record observations and certify that all onsite services are completed as required at every onsite service.
QA form is signed and provided to the site Technical Rep 95% of the time indicating completion and acceptance of services rendered. Provided to the site security manager not more than 15 calendar days after the completion of PM services in electronic format.
100 percent inspection of deliverable products and services.
Subtask 6. 8. Training is provided to Security Managers when software has been updated during preventive maintenance services.
Training is provided 95% of the time with no deficiencies at the time of the upgraded software installation.
Periodic inspection of deliverable products and services.
Subtask 6.9 Contractor shall notify the Government of necessary repairs and improvements to the security system.
Notification within 120 calendar days of findings 95% of the time.
100 Percent inspection of deliverable products and services.
Subtask 6.16 Preventive maintenance service shall be completed within 120 days of contract award and again approximately every six months, as scheduled and coordinated with the site Security Manager.
PM completed within 120 calendar days of contract award and every six months, as scheduled and coordinated with the site Security Manager.
Random sampling inspection of deliverable products and services.
Subtask 6.16. Security Technical Implementation Guide (STIG) requirements are updated during preventive maintenance services.
STIG update services are performed with no deficiencies at the time of the PM services.
Periodic inspection of deliverable products and services.
Subtask 6.16 Premium Software Support Agreement with the integrated security system software manufacturer.
All necessary licenses are provided along with software authorizations and training certificates to operate and maintain that system.
Periodic inspection of deliverable products and services.
Subtask 6.16.1 Provide two hundred (200) proximity cards and four (4) printer ribbons during each performance at each location
Materials provided with no deficiencies within 30 calendar days of the OY Notice to Proceed.
100 percent inspection of deliverable products and services.
Subtask 6.16.2 Provide a minimum of semi-annual scheduled PM for the ACS, IDS, CCTV, and PA systems.
Security system equipment is properly working at least 98% of time.
Random sampling inspection of deliverable products and services.
Subtask 6.16.3 Perform quarterly alarm testing and troubleshoot and resolve any issues that arise.
98 % of system equipment is properly working.
Random sampling inspection of deliverable products and services.
Subtask 6.16.3 Databases shall be backed up and stored in a secure offsite location at least quarterly.
100% of database backed up and stored offsite quarterly.
Periodic inspection of deliverable products and services.
Subtask 6.16.3 Databases shall be cleaned and optimized semi-annually by the contractor.
Databases shall be cleaned and optimized semi-annually.
Periodic inspection of deliverable products and services.
Subtask 6.16.3 Software/Firmware patches and releases shall be installed on all security system IT equipment.
Software and firmware are updated when upgrades, updates, patches, and similar are available 95% of the times within 30 calendar days of release.
Periodic inspection of deliverable products and services.
Subtask 6.16.3 Operating systems (OS), anti-virus programs, and all installed applications are kept up-to-date.
Anti-virus programs updates are available 95% of the time.
Periodic inspection of deliverable products and services.
Subtask 6.16.3. Compatibility of current and future upgrades of security system software with server and workstation operating system(s). Necessary workstation/server OS software and/or hardware upgrades are within the scope of this contract.
All necessary OS and security system software, firmware, hardware, licenses, etc. are provided to operate and maintain the system
100 percent inspection of deliverable products and services.
Subtask 6.16.4. Service report on tasks performed, software and firmware releases (to include STIGs) installed, any findings relating to equipment condition, and/or recommendations to improve the condition of the system.
Report of services performed is provided to the Contracting Office Representative (COR) and site Security Manager concurrently not more than 15 calendar days after completion of PM services in electronic format.
100 percent inspection of deliverable products and services.
Subtask 6.17.1. Configuration Management Equipment List: The CM system shall be supported by an electronic organization tool (spreadsheet is acceptable)
CM equipment lists are 95% accurate and shall be provided at the completion of any work which alters the inventory, not more than 15 calendar days after the completion of the service.
100 percent inspection of deliverable products and services.
Subtask 6.17.2. Configuration Management Drawings: The contractor shall maintain a Record Drawing of the security system fully compliant with the Record Drawing CM in AutoCAD 2010 or more recent .dwg format only
CM drawings are 95% accurate and shall be provided at the completion of any system upgrade, and again at the conclusion of any work which alters the inventory, not more than 15 calendar days after the completion of the service.
100 Percent inspection of deliverable products and services.

Task 3 -Emergency Calls

Performance Standard
Acceptable Quality Level (AQL)
Method of Surveillance
Subtask 6.2. Quality Assurance (QA) Surveillance Form shall be used to record observations and certify that all onsite services are completed as required at every onsite service.
QA form is signed and provided to the site technical rep 95% of the time indicating completion and acceptance of services rendered, Provide to the COR not more than 15 calendar days after the completion of emergency services in electronic format.
100 percent inspection of deliverable products and services.
Subtask 6.18.1. Emergency calls shall be worked continuously “around the clock” until completed. Estimated completion date/times and progress reports shall be provided to the Security Manager at least three times per workday.
Emergency response is within 2-hours of call by trained, proficient operations and repair contractor personnel (report to site or as directed by site representative). Response to and completion of corrective work is timely with required updates provided 90% of the time.
100 Percent inspection of deliverable products and services.
Subtask 6.18.2. Critical parts for the security system shall be obtained within a reasonable timeframe of 72 hours.
Response to and completion of corrective work is timely with updates on material parts status provided within 72 hours of initial call.
Random sampling inspection of deliverable products and services.
Subtask 6.18.3. Service report on tasks performed, any findings relating to equipment condition and/or recommendations to improve the condition of the system. .
Report of services performed is provided to the Contracting Office Representative (COR) and site Security Manager concurrently not more than 15 calendar days after completion of emergency services in electronic format.
100 percent inspection of deliverable products and services.

Task 4 - Routine Service Calls.

Performance Standard
Acceptable Quality Level (AQL)
Method of Surveillance
Subtask 6.2. Quality Assurance (QA) Surveillance Form shall be used to record observations and certify that all onsite services are completed as required at every onsite service.
QA form is provided 100% of the time with cost information to the Contracting Office and site Security Manager concurrently not more than 15 calendar days after completion of services in electronic format.
100 Percent inspection of deliverable products and services.
Subtask 6.19. Service call report shall be provided on tasks performed, software and firmware repairs or installs, any findings relating to equipment condition, and/or recommendations to improve the condition of the system.
Report of services performed is provided to the Contracting Office Representative (COR) and site Security Manager concurrently not more than 15 calendar days after completion of service calls, in electronic format.
100 percent inspection of deliverable products and services.
Subtask 6.19. Cost reports of each service call shall be provided to the COR with a total of the accruing costs tracked throughout the performance period.
Accruing costs of the service calls on a monthly basis are provided 95% of the time to the COR and site technical point of contact within 5 calendar days after completion of the month which work occurred.
100 Percent inspection of deliverable products and services.

Task 5 -Realignment, Additions, and Modification of Existing Equipment

Performance Standard
Acceptable Quality Level (AQL)
Method of Surveillance
Subtask 6.20.3. Prepare Technical Requirement (TR) cost estimates of hardware/software and labor hours to complete such an installation.
Technical requirement proposals are prepared and provided to the COR within the 10 calendar days of the government request.
Periodic inspection of deliverable products and services.
Subtask 6.20.4. Technical submittal information from the Original Equipment Manufacturer (OEM) on equipment installed shall be provided.
Equipment technical information is provided 100% of the time to the COR in electronic format not more than 15 calendar days after the system change.
Periodic inspection of deliverable products and services.
Subtask 6.20.5. Drawings: The contractor shall maintain a Record Drawing of the security system fully compliant with the Record Drawing CM in AutoCAD 2010 or more recent .dwg format only
CM drawings are 95% accurate and shall be provided at the completion of any system upgrade, and again at the conclusion of any work which alters the inventory, not more than 15 calendar days after the completion of the service.
Periodic inspection of deliverable products and services.
Subtask 6.20.6. Quality Assurance (QA) Surveillance Form shall be used to record observations and certify that all onsite services are completed as required at every onsite service.
QA form is signed and provided to the site Technical Representative 95% of the time indicating completion and acceptance of services rendered shall be provided to the COR not more than 15 calendar days after the completion of TR services in electronic format.
100 percent inspection of deliverable products and services.
Subtask 6.20.7. Service report on tasks performed, software and firmware releases (to include STIGs) installed, any findings relating to equipment condition, and/or recommendations to improve the condition of the system.
Report of services performed is provided to the Contracting Office Representative (COR) and site Security Manager concurrently not more than 15 calendar days after completion of TR services in electronic format.
100 percent inspection of deliverable products and services.

6. Documenting Performance:

Acceptable Performance.

The Government shall document positive performance. A Performance Assessment Report (PAR) template is attached (Appendix 2). Any report may become part of the supporting documentation for fixed price payments, award/incentive fee payments, Contractor Performance Assessment Reporting System (CPARS) entries, or other actions. Government acceptance of services permits the contractor to invoice for the service fee.

Unacceptable performance.

Unacceptable contractor performance can be identified by customer complaints (Appendix 3) or upon schedule surveillance evaluations. When unacceptable performance occurs, the COR shall inform the contractor. This will normally be in writing unless circumstances necessitate verbal communication. The COR shall document the discussion and place it in the COR file and provide a copy to the KO.

When the COR determines formal written communication is required, the COR shall prepare a Corrective Action Report (CAR). The CAR is forwarded to the KO for dissemination to the contractor. A CAR template is attached to this QASP (Appendix 4).

The contractor shall acknowledge receipt of the CAR in writing. The CAR will specify if the contractor is required to prepare a corrective action plan to document how the contractor shall correct the unacceptable performance and avoid a recurrence. The CAR will also state how long after receipt the contractor has to present this corrective action plan to the KO and COR. The Government may withhold payment for services until corrective action is taken. The Government shall review the contractor's corrective action plan to determine acceptability. Upon Government acceptance of the corrected services the contractor will be permitted to invoice for the service fee.

Any CAR may become a part of the supporting documentation for contract payment deductions, fixed fee deductions, award fee nonpayment, CPARS or other actions deemed necessary by the KO.

7. Mandatory or regulatory compliance items:

The contractor will provide initial proof of compliance with regulatory and compliance items contained in the contract. The Contracting Officer's Representative (COR) and the Contracting Officer (KO) will evaluate the initial submission and will conduct ad hoc reviews of the contractor's compliance throughout the remainder of the contract. The contractor will monitor compliance as required by FAR 52.222-50, Combating Trafficking in Persons, and report any issues to the KO.

8. Acceptable Quality Level (AQL):

The AQL for this project is 100% due to the critical support provided to the mission operation for security services at the DISA locations listed.

9. Evaluation Method:

The COR will document the time of verbal notification to the contractor.

The COR will review self-diagnostic systems logs, conduct a comparison with actual maintenance performance and otherwise verify and validate contractor performance. The contractor shall enter in the record the official time the system is restored to full operational status. The COR will confirm the date and time of problem resolution in the record.

10. Performance Rating In evaluating the quality of contractor’s performance, the following performance ratings may be used (same as CPAR ratings).

Performance Rating Criteria

Exceptional
Performance meets contractual requirements and exceeds many to the government’s benefits. The contractual performance of the element or sub-element being assessed was accomplished with no problems and contractor actions were highly effective.
Very Good
Performance meets contractual requirements and exceeds some to the government benefits. The contractual performance was accomplished with few minor problems for which corrective actions taken by the contractor were effective.
Satisfactory
Performance meets contractual requirements. The contractual performance contains some minor problems for which corrective actions taken by the contractor were satisfactory.
Marginal
Performance does not meet some contractual requirements. The contractual performance reflects a serious problem for which the contractor has not yet identified corrective actions. The contractor’s proposed actions appear marginally effective or were not fully implemented.
Unsatisfactory
Performance does not meet most contractual requirements and recovery is not likely in a timely manner. The contractual performance contains serious problem(s) for which the contractor’s corrective actions appear or were ineffective.

Appendix 1 - Surveillance Matrix Comment by Book, Tina M CIV DISA PLD (US): Laurie, Complete the Surveillance Matrix for the requirement.

-The performance Standards are the same as listed in the standards above in paragraph 5.

-AQLs are the same as listed in the stadards above in paragraph 5.

-Complete the Methods of Calculation for this requirement.

- Recommend review and change if needed: MI and MP for this requirement. Starting with Source of Measurement Data through Reporting Frequencey – change to reflect this requirement.

-Results/ratings – recommend leaving as is.

Performance Standards Acceptable Quality Levels Methods of Calculation

Surveillance
Results/Ratings

Information Technology (IT) Service Integration and Delivery Performance Management

High level of (xyz) satisfaction with Contractor delivery management of IT Services (includes the Service Desk services and the SITEC).

Target Criteria:

90% of all survey respondents are Satisfied, More Than Satisfied, or very Satisfied

Minimum Acceptable:

> 85% of all survey respondents are Satisfied, More Than Satisfied, or Very Satisfied with Contractor delivery management of all SITEC IT Services Calculation:

The number of users who were Satisfied, More Than Satisfied, or Very Satisfied divided by the total number of completed surveys returned.

At least XX(insert number) Government personnel must complete and return surveys for the results to have at least a 90% confidence factor with a 5% error rate.

Measurement Interval – The Measurement Interval is three (3) months for the first year and then every six (6) months thereafter.

Measurement Period – The Measurement Period begins at 00:01 on the first day of the month and ends at 24:00on the last day of the month.

Source of Measurement Data – Data will be collected from management surveys containing satisfaction criteria specified by (xyz) that are either developed internally by (xyz) personnel or by a (xyz) selected impartial 3rd party.

Method of Surveillance – Customer feedback. The Government will issue customer satisfaction surveys to designated Government SITEC management representatives from (xyz) (Contractors cannot participate), , and survey responses will be tabulated to determine overall satisfaction with Contractor delivery management of IT Services using a five (5) category scale. The scale is: Dissatisfied, Less than Satisfied, Satisfied, More than Satisfied, Very Satisfied.

Timing of Measurement – Measurements are taken within five (5) days of the end of the Measurement Period.

Reporting Frequency: - Reporting to commence upon Contract Award and continue throughout the Period of Performance.

Monthly reporting of Service Level Agreement (SLA) and / or QASP attainment to periods survey. Quarterly survey reporting from (xyz) during the first year, semi-annual thereafter.

(Exceptional Very Good Satisfactory Marginal Unsatisfactory)

(A rollup of assessment of the Surveillance Inspection Results to develop an overall rating for this objective)

PERFORMANCE ASSESSMENT REPORT (PAR)

(If more space is needed, use reverse and identify by number)

1. CONTRACT/TASK ORDER NUMBER
2. CONTRACTOR
3. TYPE OF SERVICES

4. QUALITY ASSURANCE PERSONNEL (COR) SIGNATURE AND DATE

5. COR PHONE
6. SUSPENSE DATE

I. PERFORMANCE

7. |_| DEFICIENCY (CHECK ALL BOXES THAT APPLY)

|_| NEW

|_| REPEAT

|_| NO DEFICIENCY NOTED

8. SERVICES SUMMARY or PWS PARAGRAPH ITEM REVIEWED

9. BRIEF DESCRIPTION OF DEFICIENCY (IF DEFICIENCY BOX WAS CHECKED)
10. DETAILED PERFORMANCE ASSESSMENT

II. CONTRACTOR VALIDATION

11. CONTRACTOR REPRESENTATIVE |_| CONCUR |_| NON-CONCUR

12. CORRECTIVE ACTION ESTIMATED COMPLETION DATE

13. CONTRACTOR REPRESENTATIVE CORRECTIVE ACTION AND PREVENTION OF RECURRENCE OR REASON FOR NON-CONCURRENCE OF COR CITED DEFICIENCY

III. ACTION CORRECTED

14. |_| CONCUR |_| NON-CONCUR COR SIGNATURE AND DATE

15. COR REMARKS (REQUIRED)

6. CONTRACTOR REPRESENTATIVE REMARKS

Appendix 2 – Performance Assessment Report

Appendix 3 – Customer Complaint Record

CUSTOMER COMPLAINT RECORD

DATE/TIME OF COMPLAINT

SOURCE OF COMPLAINT

ORGANIZATION

BUILDING NUMBER

INDIVIDUAL

PHONE NUMBER

NATURE OF COMPLAINT

CONTRACT REFERENCE

VALIDATION

DATE/TIME CONTRACTOR INFORMED OF COMPLAINT

ACTION TAKEN BY CONTRACTOR

RECEIVED/VALIDATED BY

Appendix 4 – Corrective Action Report

CORRECTIVE ACTION REPORT (CAR)

(If more space is needed, use reverse and identify by number)

1. CONTRACTOR

2. CONTRACT NUMBER

3. TYPE OF SERVICES

4. FUNCTIONAL AREA

5. SUSPENSE DATE

6. CONTROL NUMBER

7. DEFICIENCY |_| MAJOR |_| MINOR

FINDING:

FINDING IMPACT:

Please respond with a written corrective action plan that details the corrective action of the cited deficiency, the cause of the deficiency, and actions taken to prevent recurrence by Suspense Date in Block 5. If date was not entered in Block 5, the contractor is not required to provide a response.

8. QUALITY ASSURANCE PERSONNEL (COR)

TYPED NAME AND GRADE

SIGNATURE AND DATE

9. ISSUING AUTHORITY

TYPED NAME AND GRADE

SIGNATURE AND DATE

10. COR RESPONSE TO CONTRACTOR CORRECTIVE ACTION AND ACTION TAKEN TO PREVENT RECURRENCE

11. COR DETERMINATION

|_| ACCEPTED |_| REJECTED

12. CLOSE DATE

Enclosure 6, Page 1 of 2 Pages 17Jul2013/Version 2

Encl 4, QASP 23Jun2017/v3

File details come from the government source that posted it. Updated .