Attachment_6_-_Quality_Assurance_Surveillance_Plan_-_HDTRA1-15-R-0022.pdf

ATTACHMENT 6

Page 1 of 5 HDTRA1-15-R-0022

QUALITY ASSURANCE SURVEILLANCE PLAN

FOR

[Name of contractor]

June 9, 2015

1. Purpose of Contract: The Contractor, [name] has a requirement to provide non-personal Counterintelligence Support to Cyberspace Services including applying incident management, problem solving, research, and producing finished products (e.g. reports, special studies, policy and procedure development, hazard and weakness vulnerability assessments, developing training programs and conducting security vulnerability assessments). The requirement is to provide these services in compliance with applicable regulatory guidance. The effective date of the contract is from March 1, 2016 for a base period of one year with four (4) consecutive one-year renewable options, thus possibly extending the period of performance to February 28, 2021.

2. Review Responsibilities: The Security and Counterintelligence Office (J0XS) will be designated as the Contracting Officer’s Representative (COR) for this contract. As COR, J0XS is responsible for interfacing with the contractor in the performance of duties such as those set forth below.

3. Methods and Frequency:

3.1 Surveillance will be accomplished in several methods, random, weekly, monthly, quarterly and bi-annual reviews. The methods used for evaluation will be based upon document reviews, reports, observation, and received customer feedback.

3.2 Timely feedback to the contractor on unacceptable performance will be provided in writing by the COR.

3.3 A summary of any performance that did not meet the terms and conditions of the contract shall be prepared by the COR and forwarded to the Contracting Officer (KO).

3.4 The surveillance report and a summary of the surveillance logs will be prepared by the COR and submitted to the KO annually. The COR may submit out-of-cycle reports to the KO to support claims of unacceptable performance or when there is a significant change in performance that alters the assessment in one of more evaluations areas.

3.5 The Surveillance Delivery Summary/Performance Surveillance Checklist provided in enclosure (1) will be used by the COR in monitoring the contract. All actions will be monitored on a monthly basis except for specific actions that requires immediately attention.

4. Performance Areas:

Page 2 of 5 HDTRA1-15-R-0022

The following performance areas will be evaluated as describe, however, they are not all inclusive, and any service on this contract may be evaluated at any time; all services provided on this contract are subject to inspection and evaluation at any time.

4.1 The contractor will be evaluated on how they manage the Enterprise Information System (EIS), or follow-on tracking system, in tracking Agency level tasks within the Security and Counterintelligence Office until completion.

Contractor’s effectiveness will be rated on successfully tracking 100 percent of all assigned tasks ensuring the Security and Counterintelligence Office (J0XS) respond to all assigned tasks in a timely manner fulfilling Agency requirements.

4.2 The contractor will be evaluated on how they conduct Special Security Office (SSO) duties and responsibilities throughout the DTRA SCIFs, which includes classification-marking reviews; maintaining personnel files and records; use of Defense Courier Services (DCS); and protecting classified information in any environment.

Contractor’s effectiveness will be evaluated on how they provide day-to-day services to customers using DTRA’s Sensitive Compartmented Information Facilities (SCIFs) ensuring a secure environment to work openly with classified information in meeting mission requirements.

4.3 The contractor will be evaluated on how they draft, write, and edit foreign disclosure documents prior to signatures by DTRA leadership.

Contractor’s effectiveness will be evaluated on providing documents with less than two grammatical errors and reviewing documents for content and proper grammar prior to signatures.

4.4 The contractor will be evaluated on how they support the Antiterrorism/Force Protection (AT/FP) program in working groups, committees and training scenarios.

Contractor’s effectiveness will evaluated on how they provide relevant and current threat information and provide various papers based on the outcome of the working groups and committees, and how information is incorporated into training scenarios from lessons learned.

4.5 The contractor will be evaluated on how they support the Information Security program.

Contractor’s effectiveness will be evaluated on how they provide support to the classification/declassification program, security education and training programs, assist with the Industrial Security Program, and assist with the writing of security classification guides (SCG).

4.6 The contractor will be evaluated on how they support the Operations Security (OPSEC) program.

Contractor’s effectiveness will be evaluated on how they review DTRA publications, documents, and other information for release to ensure compliance with OPSEC requirements.

Page 3 of 5 HDTRA1-15-R-0022

Contractor’s effectiveness will be evaluated on how well they provide training during monthly Agency-provided sessions. Critiques will be reviewed and adjustments made accordingly.

4.7 The contractor will be evaluated on how they provide customer service for the front lobby.

Contractor’s effectiveness will be evaluated on conducting multiple tasks in support of access control and customer support such as aiding personnel with entry into the facility by assisting them in contacting their DTRA sponsor, answering phone calls, taking messages, and greeting customers and directing them to proper personnel or office.

4.8 The contractor will be evaluated on how they provide Technical Surveillance Countermeasures (TSCM) technical threat briefings and products to DTRA personnel.

Contractor’s effectiveness will be evaluated on how their ability to provide technical threat briefings and products with pertinent information to protect DTRA information, personnel and property following TSCM support.

4.9 The contractor’s will be evaluated on their ability to produce timely and relevant analytical products that address the technical threat posed to DTRA personnel, technology, information systems, and infrastructure.

Contractor’s effectiveness will be evaluated on their ability to meet suspense in providing relevant technical threat analytical products to internal and external customers.

4.10 The contractor will be evaluated on maintaining the Briefing and Debriefing Center (BDC) IAW DoD/DTRA Instruction 5240.06.

Contractor effectiveness will be rated on the preparation, scheduling, and updates of briefings provided to DTRA travelers.

4.11 The contractor will be evaluated on providing operations reports and Intelligence Information Reports (IIR) after each debrief, as needed.

Contractor effectiveness will be rated on reports having three admin corrections or less and being delivered on time. Time suspense for operations reports are 5 business days and 3 business days for IIRs.

4.12 The contractor will be evaluated on how they prepare, update, maintain, and present CI tailored briefings for DTRA Travelers, CI awareness briefings, and debriefings for R&D personnel.

Contractor’s effectiveness will be rated on supporting all DTRA travelers ensuring that no less than 85 percent receive some form of debriefs upon return from travel.

Page 4 of 5 HDTRA1-15-R-0022

4.13 The contractor will be evaluated on answering Requests for Information (RFI) from internal and external customers concerning a broad array of subjects related to DTRA missions and activities.

Contractor’s effectiveness will be rated on the timeliness of providing a thoroughly researched response through the Branch Chief to the customer. Contractor cannot release any information outside Security and Counterintelligence office without prior approval from the appropriate Government personnel.

Contractor’s effectiveness will be rated on the quality of the answer with input from the Requestors. Contractor will provide a response to the Branch Chief within 12 hours and provide an official response within 48 hours.

4.14 The contractor will be evaluated on ensuring the database is operational continuous and that improvements and updates are conducted at periodic intervals or as determined by the Branch Chief.

Contractor’s effectiveness will be rated on the continuous availability and accuracy of stored information of the database and maintaining a 90 percent operations rate.

5. Evaluation Criteria:

Exceptional: Indicates performance clearly exceeds contractual requirements. The area of evaluation contains minor problems for which corrective actions appears would be highly effective

Satisfactory: Indicates performance clearly meets the contractual requirements. The area of evaluation contains some minor problems for which the corrective actions appear satisfactory.

Marginal: Indicates performance meets contractual requirements. The area of evaluation contains a serious problem for which corrective actions have not yet been identified, appear only marginally effective, or have not been fully implemented.

Unsatisfactory: Indicates the contractor is in danger of not being able to satisfy contractual requirements and recovery is not likely in a timely manner. The area of evaluation contains serious problems for which the corrective actions appear ineffective.

6. Surveillance Documents: Documentation used and referenced to perform surveillances will consist of Reports, the Performance Work Statement, the Quality Control Plan, Customer feedback, and the Surveillance Delivery Summary/Performance Surveillance Checklist.

Documentation shall include the date, time, and location of the surveillance, applicable remarks to the surveillance, and signature of the COR.

Page 5 of 5 HDTRA1-15-R-0022

7. Rating: All contractor tasks will be rated as Exceptional, Satisfactory, Marginal, or Unsatisfactory in the Surveillance Delivery Summary/Performance Surveillance Checklist. At the end of the contract or contract order, the KO will collect the Surveillance Delivery Summary/Performance Surveillance Checklist and any supporting documentation and provide an overall rating for each of the performance areas using the evaluation criteria in Paragraph 5 of this plan.

8. Recording Observations: The Surveillance Delivery Summary/Performance Surveillance Checklist will be used to document observations and problems and rate the individual contractor tasks. The Performance Assess Report (PAR) Form will be used to record each observed performance issue noted, for performance areas identified in paragraph 4, or any other tasks identified in the PWS. The Surveillance Checklist and the PARs become format record for reference. The contractor is told each time a performance issue is found during the observations.

9. Potential Unacceptable Performance: The COR must identify the specific service that is unacceptable and the possible causes, and ask a number of questions that will likely identify the source of the problem. The COR shall attempt to resolve the problem with the contractor.

9.1 The COR shall forward the original Surveillance Delivery Summary/Performance Surveillance Checklist and the PAR documenting the observation and attempted solution (along with an evaluation of the results) to the KO, when a specific service becomes unsatisfactory during a surveillance period. The surveillance reports will be used to provide an overall rating for the performance areas identified in Paragraph 4 of this plan.

9.2 The contractor shall complete a response to the unacceptable evaluation if requested by the KO or by its own choice.

10 Taking Action:

10.1 The COR shall evaluate the contractor’s performance and document any non-compliance, but only the KO may take action against the contractor for an unacceptable rating.

10.2 When the contractor’s performance is unacceptable and a formal action is indicated, the COR and KO will determine what action is appropriate for the specific circumstances. The KO will determine the final action.

11. Records: During the course of the contract, the COR retains a copy of all Surveillance Delivery Summary/Performance Surveillance Checklists, and PAR Forms with performance issues noted. The Surveillance Delivery Summary/Performance Surveillance Checklist and PARs become formal record of reference. At the end of the surveillance period, the COR will forward all inspection records to the KO for inclusions in the contract file.