Attachment B - Performance Metrics.pdf

Information Technology Security Support Services

HSTS03-11-R-CIO556, ATTACHMENT B

Performance Metrics

Version 2

96% of C&A activities are completed on-schedule, when within the contractor’s control.

96% of C&A activities are completed in conformance with DHS and TSA policies. DHS and TSA policies to be provided upon contract award.

96% of FISMA activities are completed on-schedule, when within the contractor’s control.

96% of FISMA activities are completed in conformance with DHS and TSA policies. DHS and TSA policies to be provided upon contract award.

100% of training is completed on-schedule, when within contractor’s control.

100% of IT Systems shall have a principal ISSO point of contact within 30 days of award.

If ISSO point of contact leaves the contract, the position is filled within 30 days.

The contractor reports IT Security events/incidents in the time prescribed by DHS MD 4300 IT

Policy, 100% of the time.

100% of IT systems will have all security controls in place and functioning properly in accordance with NIST 800-53/43A publication.

The Information Assurance Division is provided with adequate coverage 100% of the time between the hours of 7:00 am and 5:00 pm.

There will be no more than 5 customer complaints per month.

All customer complaints are resolved to the customer’s satisfaction within one contact.

100% of the time, Contractor notifies the Government (i.e., COTR and Contracting Officer, at a minimum), as soon as the Contractor becomes aware, that any of the metrics or performance requirements contained in this attachment or in the contract will not be achieved.