CSTS_Draft_PWS_-_01.05.16.docx

1 INTRODUCTION

The current international environment presents difficult challenges for the conduct of United States diplomacy abroad. To determine and implement the most effective measures for protecting personnel, information, and property, the Office of Security Technology (ST) requires Contractor support services to employ threat and risk analysis capabilities; state-of-the-art technical security countermeasures; security engineering services; and, mature supporting programs.

This performance work statement (PWS) presents ST’s requirements and objectives and outlines the Contractor services required to achieve them. Performance standards for mission critical activities and tasks are presented in Section 7, CSTS Performance Criteria.

2 BACKGROUND

The Bureau of Diplomatic Security (DS) is the security and law enforcement arm of the U.S. Department of State (the Department). DS is a world leader in international investigations, threat analysis, cyber security, counterterrorism, security technology, and protection of people, property, and information. Its primary mission is to provide a safe and secure environment for the conduct of U.S. foreign policy. The Office of Security Technology (ST) supports the DS mission through the application and use of appropriate technical security countermeasures.

The Countermeasures Program (CMP) and Security Technology Operations (STO) divisions are operational components within ST.

· CMP is primarily responsible for worldwide technical countermeasures policy for the Department. Countermeasures policies enforce the protection of sensitive and classified information. CMP also manages the overseas technical surveillance countermeasures (TSCM) program. In fulfilling these responsibilities, CMP integrates the operations of other federal countermeasures programs with those of the Department and serves as the Department’s principal point of contact for technical countermeasures operations within other government agencies. CMP is headquartered in Rosslyn, Virginia and is composed of four branches: Technical Surveillance Countermeasures (TSC), Emanations Countermeasures (ECB), Technology Evaluation (TEB), and Technical Analysis (TAB).

· STO provides operational technical security support for a number of programs, both overseas and domestic. STO’s Security Engineering Services Branch (SES) provides security engineering services, technical security support for the Secretary’s travelling mission, and performs all domestic TSCM inspections.

The Department maintains over 285 Posts outside the Continental US (OCONUS). The Foreign Service Act of 1980 gives the Chief of Mission (COM) (i.e., Ambassador, Minister, Minister-Counselor, Counselor, or Chargé d’Affaires) to a foreign country full responsibility for the safety and security of Government employees serving in that country and their eligible accompanying household members. Advising the COM on the execution of security and protective matters is the Regional Security Officer (RSO), DS, Diplomatic Security Service (DS/DSS). The RSO is responsible for implementing and managing the diverse portfolio of security and protective functions at the RSO’s assigned Post(s) abroad, including Contractor provided services at those locations.

3 OBJECTIVES

ST faces a number of challenges as the overseas threat environment continues to evolve. The following objectives form the guidance for this contract:

· Protect sensitive and classified information at U.S. missions overseas;

· Keep pace with new and evolving threats and changing technology;

· Support a growing technical security inventory;

· Improve the quality and uniformity of ST products; and,

· Implement quality assurance methodologies consistently to maximize efficiency in a climate of fiscal constraint.

4 SCOPE

The Contractor shall furnish the necessary personnel, management and oversight, logistics support, material, services, and facilities (except as otherwise specified) to perform the tasks, meet the requirements, produce the deliverables, and achieve the objectives presented in this PWS.

5 TASK AREAS AND REQUIREMENTS

The task areas below are organized according to the ST Programs and Branches in which they are currently performed. Each task area describes the tasks required of the Contractor, including required deliverables, and provides estimated workload figures. At a minimum, the Contractor shall execute all contracted activities and tasks in accordance with the performance criteria detailed in Section 7. During the period of performance, additional standards and associated metrics may be used to ensure that the Contractor’s performance addresses the Department’s objectives. Related surveillance methods will be included where appropriate.

All tasks shall be performed in a manner that meets the highest level of professional and technical standards and adheres to industry-leading practices. All Contractor personnel shall be proficient in the areas in which they work. All Contractor personnel are required to routinely:

· Act in a consultative manner, proactively searching for creative solutions and strategies that will ensure reliability, improve performance, provide increased value, and/or reduce cost;

· Provide deliverables that are clear, concise, technically accurate, well organized, properly referenced, and complete;

· Support the Department’s performance management process by contributing to efforts such as ST Weekly Activity Reports (WARs), Monthly Status Reports, and Quarterly Activity and Performance Reports;

· Freely provide knowledge transfer of work products and expertise associated with contracted tasks; and,

· Dress and comport themselves in a business-like and professional manner.

5.1 General Requirements

Travel: Contractor personnel shall be required to travel both domestically and internationally to include high threat areas (e.g. Iraq and Afghanistan). Some technical tasks require significant travel or TDY.

Computerized Maintenance Management System (CMMS): CMMS is ST’s enterprise asset, supply chain, and work management system. It is based on Maximo, IBM’s Enterprise Asset Management System. The Contractor shall be required to use CMMS to support, track, and report on many of its contracted activities. The Contractor shall accept CMMS work orders; enter bills of material (BOMs) into CMMS for approval and processing in accordance with DS supply chain procedures; strictly adhere to prescribed CMMS work flows, SOPs, and asset management processes; and promptly close out completed work orders with the appropriate information. The Contractor shall ensure that all CMMS data is entered, maintained, and reported accurately, completely, and in a timely manner.

Additionally, the Contractor shall record any Contractor-provided program property acquired for the Department with a value above the thresholds cited in 14 FAM 400 in the Department’s system of record, the Integrated Logistics Management System (ILMS). The Contractor shall audit and reconcile these assets on an annual basis.

The development, hosting, operation, and maintenance of the CMMS and ILMS systems are outside the scope of this contract.

Standard Operating Procedures and Document Templates: Within the first 90 days after the start of contract performance, the Contractor shall review all standard operating procedures (SOPs) and templates for each supported program and update them to reflect current ST-approved procedures and requirements. In its review of the SOPs and templates, the Contractor shall recommend and, after COR or designee approval, incorporate process improvements and industry best practices that align with ST’s objectives. Once approved, the Contractor shall ensure that all work products and documents produced under this contract adhere to the SOPs and templates. Throughout the contract period of performance, the Contractor shall maintain and update SOPs and templates as needed to ensure that they continue to reflect the latest ST-approved procedures and requirements. At a minimum, the Contractor shall review and update SOPs and templates annually.

Work Restrictions and Requirements: The Contractor shall:

1. Ensure that no Contractor personnel performing work under this contract are working (i.e. engaged in the performance of one’s assigned tasks), excluding training or travel, for more than twelve (12) consecutive hours in a typical twenty-four (24) hour period, to include work breaks. The COR or designate may authorize or require exceptions to this rule in certain threat or operational situations.

2. Although Contractor personnel performing work under this contract may be qualified to serve in multiple positions/labor categories, ensure that such personnel do not simultaneously work/fill more than one position/labor category on the same shift.

3. Ensure that Contractor personnel performing work under this contract have one (1) twenty-four (24) consecutive hour rest period after no more than six (6) consecutive workdays. During this rest period, personnel shall not engage in any type of training, administrative functions, or perform any other work assignments. The COR or designate may authorize or require exceptions to this rule in certain threat or operational situations.

Countermeasures Program The Countermeasures Program (CMP) manages the Division’s initiatives and tasks; coordinates information distribution within the Division; provides responses to Division clients, and interacts with officials and staff within the Department and the intelligence community.

CMP Policy Coordination and Technical Document Review (EX) EX represents CMP in the review of national policy on the Committee on National Security Systems (CNSS); the National Institute of Standards and Technology (NIST); interagency policy; and, the Overseas Security Policy Board (OSPB). The activity also represents CMP for the review and generation of Department policy, Foreign Affairs Manuals (FAM), and Foreign Affairs Handbooks (FAH) material that relates to the Office of Security Technology.

The Contractor shall participate in working groups and policy boards and shall review and comment on draft or modified policy documents including FAHs/FAMs, National Institute of Standards and Technology publications, Committee on National Security Systems Instructions, and other publications with potential implications for CMP. The Contractor shall ensure that reviews provide in-depth analyses of the feasibility and cost effectiveness of the proposed policies and highlight any areas of potential conflict with other Department, OSPB, or other Federal Agency policy or guidance.

In addition to policy analysis, the Contractor shall track and respond to requests for policy interpretation and exceptions to OSPB technical security standards, coordinating the activities between CMP branches in order to avoid duplication of efforts or conflicting information, and assemble the exception request information into packages to be cleared by the Deputy Assistant Secretary (DAS). For each package, the Contractor shall create a memo that succinctly and accurately summarizes the detailed information provided by the branch or branches. The Contractor shall ensure that the memo adheres to the most current CMP-approved template and conveys information and conclusions that are fully supported by the underlying analysis and attached documentation.

The Contractor shall also review and edit all CMP products including information memos, mitigation memos, TSCM reports and technical evaluation reports to improve their overall quality and uniformity and ensure that they are clear, concise, technically accurate, well organized, properly referenced, and complete.

Additionally, the Contractor shall:

· Conduct in-depth standards-related research, participate on Division working groups and configuration control boards, and prepare standard operating procedures (SOPs);

· Coordinate and clear complex correspondence packages with DS, IRM, OBO, and the geographic bureaus;

· Review technical assessments and provide guidance on technical security countermeasure issues;

· Interface with technical support personnel, drafters, technical writers, engineers, and technicians as required;

· Draft memos, cables, policies and related documents;

· Brief the EX activity manager and the Division Director on the status of projects and products and track daily/weekly/monthly work to produce quarterly metrics for reporting EX productivity at Activity Management Review meetings;

· Coordinate and prepare official responses;

· Attend conferences and produce trip reports;

· Produce Weekly Activity Reports (WARs), presentations and briefings, dashboards, and other CMP products; and,

· Proof and track Quarterly Activity and Performance Reports (QARs and QPRs) using the Department’s document management platform, currently Microsoft SharePoint 2010.

CMP EX Labor Categories, Estimated Travel Required (ETR) per FTE, and Assignment Locations

[Upon final release of the classified RFP, Labor Categories, ETR per FTE, and assignment locations will be provided.]

CMP EX Deliverables

Studies, evaluations and assessments of information technologies, cyber attack vectors and other threats, and technical security issues As tasked

Technical Surveillance Countermeasures (TSC) The Technical Surveillance Countermeasures Branch (TSC) supports the protection of classified information by providing Technical Surveillance Countermeasures (TSCM) inspections worldwide in accordance with 12 FAH-6 and the Security Policy Board Procedural Guides 1, 2, and 3. In addition, TSC supports the Department’s activities with countermeasures equipment for inspections at Department facilities, and develops and maintains a countermeasures equipment arsenal to meet new and evolving threats and technologies in the areas of telecommunications security and research technology. TSC collaborates with other bureaus and agencies in order to deal effectively with new technology and the associated threats.

TSCM Operations Program The TSCM Operations Program provides TSCM solutions and services for all of the embassies, consulates, and buildings under the Chief of Mission (COM) authority abroad. The program performs TSCM review of facilities to detect, analyze, exploit, neutralize and deter hostile technical intelligence threats. It also verifies the secure installation, maintenance, and repair of technical systems in the Controlled Access Areas (CAAs), including but not limited to telecommunications equipment. It also provides a valid, credible voice on telecommunications issues, information assurance countermeasures, and technical security hazards. The program provides policy and guidance in response to Department and tenant agencies’ requests for standards and policy information and resolves countermeasure-related issues (e.g., wireless, computer networks, network security, systems installations, telephone security, building management and Supervisory Control and Data Acquisition (SCADA) systems, and ancillary electronic equipment). In addition to overseas support, the program also provides equipment and assistance to the Security Engineering Services (SES) branch during their domestic countermeasures surveys.

The Contractor shall perform TSCM surveys and produce timely Engineering Security Service Reports (ESSRs) that not only identify technical penetrations and vulnerabilities, but also provide the appropriate personnel with options to nullify the vulnerabilities or mitigate the risk. The Contractor shall be responsible for trip preparation, logistics, pre-mission operational testing and QA of equipment, and groundwork and for conducting surveys in accordance with Security Policy Board Procedural Guidelines and the current CMP-approved SOP. The Contractor is also responsible for trip reports upon completion of the mission. The Contractor shall ensure that ESSRs adhere to the current CMP-approved template, incorporate accurate facility and technical information, provide recommendations that are fully supported by the analysis and documentation, and are completed within 30 days of survey completion.

[Upon final release of the classified RFP, additional information and/or requirements will be provided.] The Contractor shall also identify, review, evaluate, and recommend new, updated, or promising TSCM and non-destructive testing and evaluation (NDT&E) systems and instrumentation to address known issues and vulnerabilities. Where applicable, the Contractor shall develop new operational procedures and training material to promote programmatic application.

Specifically, the Contractor shall:

· Identify system vulnerabilities and provide mitigation strategies;

· Monitor and analyze electromagnetic environment for technical threats, hazards, and anomalies;

· Monitor and analyze all potential information-bearing energy channels (acoustic, electromagnetic, seismic, etc.) for sensitive data leakage or exfiltration;

· Identify potential technical surveillance activities against the Department’s computer hardware and peripherals;

· Perform sophisticated non-destructive testing and evaluation (NDT&E) of equipment and structures using both commercial and USG proprietary state-of-the-art techniques;

· Identify, review and apply new or novel detection technologies and techniques for both programmatic application and specific problems;

· Review DS sources and data for TSCM-related events and produce a weekly report of TSCM-related events worldwide - especially affecting Department assets;

· Develop training plans and materials for newly acquired or updated equipment and newly-assigned personnel;

· Ensure equipment compliance with Department requirements and policies:

· Configure software and networking hardware in accordance with Department and other USG security and operational requirements (i.e., NIST, FISMA);

· Install anti-virus software on equipment;

· Periodically update and patch software and firmware on diverse platforms, including PC-based and embedded controllers;

· Install software to protect sensitive information;

· Test and certify department voice communication equipment in accordance with DS-approved SOPs.

TSCM Logistics Program Requirements The TSCM Logistics Program provides worldwide integrated supply chain and distribution management for the Department’s TSCM activities.

Currently ST is undergoing CMMS/ILMS integration worldwide. In support of TSCM, the Contractor shall maintain strict accountability of TSCM equipment, supplies, spare parts, and related assets using CMMS/ILMS or its successor system. The Contractor shall also ensure that all paperwork is completed and signed in accordance with CMMS/ILMS SOPs and Department requirements. Specifically, the Contractor shall:

· Maintain an inventory database of all TSCM equipment held at domestic offices and posts worldwide, ensuring synchronization between CMMS and ILMS as necessary;

· Maintain sensitive and classified property and shipment transfer records in support of classified field operations, ensuring that detailed descriptions of items and locations are appropriately protected;

· Update and maintain tracking of assets in transit;

· Conduct an annual inventory reconciliation to verify that all posts are keeping accurate property records;

· Submit the proper paperwork to DS/ASD/GLS to survey items from the TSCM master inventory database and keep all offices and posts property records current;

· Coordinate with FSE/FSB personnel who physically maintain inventory of TSCM equipment at an offsite warehouse facility. Property listed as excess or for disposal shall be staged at this facility. Oversee disposal process where required;

· Obtain and evaluate equipment pricing via vendor quotes and make recommendations on equipment purchases based on market research; and,

· Deliver equipment as needed to U.S. Government (USG) classified and unclassified pouch facilities, as well as commercial carriers for overseas operations/installations.

TSCM Radio Frequency Program Requirements The TSCM Radio Frequency (RF) Monitoring Program develops, installs, and maintains highly sophisticated, cost-effective RF platforms at diplomatic facilities worldwide. These RF platforms support the TSCM mission by detecting, analyzing, exploiting, neutralizing, and deterring hostile electromagnetic and RF threats and other technical hazards. The RF Program provides technical support, installation expertise, and maintenance to installed systems overseas and domestic. In addition, the RF Program identifies new, improved or specialized detection technologies and systems. Upon the identification and evaluation of innovative equipment, the RF Program subsumes this technology to upgrade outdated platforms.

[Upon final release of the classified RFP, additional information and/or requirements will be provided.] In support of the RF Program, the Contractor shall install, maintain, troubleshoot and resolve technical issues with program-supported equipment and ST-approved technical security systems at diplomatic facilities worldwide. The Contractor shall be responsible for scheduled routine maintenance and Security Engineering Officer (SEO) training and occasional ad hoc domestic equipment testing and evaluation in accordance with the current CMP-approved SOP. The Contractor shall also be responsible for trip preparation, logistics, and pre-mission operational testing and QA of equipment. Specifically, the Contractor shall:

· Provide technical support and subject matter expertise to field offices and diplomatic facilities worldwide for RF platforms and related infrastructure;

· Install, configure, and provide lifecycle maintenance and subject matter expertise to ensure that program supported equipment and ST-approved technical security systems are operational;

· Provide training to new SEOs;

· Conduct post-installation/upgrade training of on-site personnel within 5 days of installation/upgrade completion;

· Conduct pre-departure training of posted personnel;

· Identify, review, evaluate, analyze, and configure new detection and analysis technologies;

· Provide technical support for electrical and RF infrastructure installation and upgrades at remote locations overseas, ensuring that installed infrastructure meets Department standards for material and workmanship;

· Replace and/or upgrade outdated equipment and infrastructure in accordance with ST-approved life cycle milestones.

TSC Labor Categories, Estimated Travel Required (ETR) per FTE, and Assignment Locations

[Upon final release of the classified RFP, Labor Categories, ETR per FTE, and assignment locations will be provided.]

TSC Deliverables [Upon final release of the classified RFP, additional information and/or requirements will be provided.]

Emanations Countermeasures Branch The Emanations Countermeasures Branch (ECB) supports the protection of classified information by specifying, designing, reviewing, installing, testing, and maintaining electromagnetic and acoustic countermeasures for domestic and overseas U.S. missions. ECB manages the Department’s TEMPEST program, supports field offices in the testing, maintenance, and repair of DS-owned enclosures, reviews compliance with emanation security standards, represents the Department’s needs on a variety of standards working groups and interagency committees, and provides unique technical security solutions when needed.

Design Review and Standards Compliance (DRSC) Requirements DRSC supports the Physical Security Division’s Certification, Accreditation and Transit Security (PSD/CAT) efforts, Overseas Building Operations (OBO), New Office Building (DS/NOB), and other customers through reviews of preliminary surveys, construction security plans, and designs. The program provides input and feedback related to RF and Acoustic Emanations protection for New Office Building (NOB)/Newly Acquired Building (NAB) building plans, Existing Office Building renovations, and Controlled Access Area (CAA) projects including CAA renovations, expansions, non-CAA to CAA conversions, and CAA to Core conversions. In addition, the program supports CAT and OBO with standards requests and on-site reviews including accreditation inspections.

[Upon final release of the classified RFP, additional information and/or requirements will be provided.] The Contractor shall review capital project construction documents for compliance with technical security standards and policies to identify and document discrepancies. The Contractor shall also perform on-site reviews during accreditation inspections to ensure that all discrepancies are identified and resolved before DS/PSP/CAT issues the final accreditation certificate. Specifically, the Contractor shall:

· Review construction security plans, architectural drawings, New Office Building (NOB)/ Newly Acquired Building (NAB) designs and preliminary surveys for new facilities and major renovations for compliance with technical security policies and produce memos documenting discrepancies in accordance with CMP-approved templates and SOPs;

· Perform on-site reviews of the New Embassy/Consulate Compounds during accreditation inspections to verify technical security policy compliance during the construction phase; and,

· Provide input and subject matter expertise in support of DRSC’s efforts to develop mitigation strategies and exceptions packages in response to requests from Posts.

[Upon final release of the classified RFP, additional information and/or requirements will be provided.] Conference Room Countermeasures Requirements The Conference Room Countermeasures (CRC) program provides radio frequency (RF) and acoustic countermeasure evaluation and maintenance services in overseas Department facilities where classified information is processed and discussed. These services are delineated in separate activities and through coordination with other Department and Intelligence Community entities for knowledge sharing and efficient resource scheduling. The CRC program is a unique Department entity and it supports Public Law 100-204 requirements for protection of national security information. The CRC program strategy is to work closely with overseas personnel to provide high quality services and efficient management of CRC resources. Toward these ends, CRC produces quality training aids, provides timely and effective solutions to inquiries from the field, and works with other Department and U.S. government partners to provide advanced solutions to overseas facilities.

The Contractor shall be responsible for providing full lifecycle maintenance and repair services for conference room countermeasures worldwide in order to protect national security information in accordance with Public Law 100-204. The Contractor shall fully document testing and/or repair services in accordance with the CMP-approved report template and SOP, ensuring that reports incorporate all pertinent information. Specifically, the Contractor shall:

· Inspect, evaluate, maintain, and repair conference room countermeasures to ensure that all inspected areas meet acceptable levels of effectiveness in accordance with DS risk models;

· Provide subject matter expertise to field Security Technology or Information Resource Management personnel to correct deficiencies utilizing proven troubleshooting techniques developed by the section;

· Provide DS management with documented maintenance reports and asset readiness within three (3) weeks of return of material.

Countermeasures Development and Evaluation (CDE) Requirements The Countermeasures Development and Evaluation (CDE) program enhances the Department’s Emanation Security (EM-SEC) infrastructure for the protection of classified information from electromagnetic and acoustic emanations. The CDE program researches, develops, and implements cost-effective solutions using state-of-the-art technologies to produce reliable tools, materials, and systems for Radio Frequency/Acoustic countermeasures. All investigative research, analysis, and reports are submitted to DS/C/ST management to provide authoritative technical guidance for the development of critical operational policies and guidelines. The program establishes and maintains working relationships with a wide array of organizations. These relationships ensure the Bureau’s interests are represented in the planning of major global security program initiatives.

In support of the CDE Program, the Contractor shall investigate state-of-the-art Radio Frequency/Acoustic countermeasures technologies, reporting to ECB management on promising tools, materials, and systems.

[Upon final release of the classified RFP, additional information and/or requirements will be provided.] The Contractor shall also be responsible for evaluating countermeasures abroad. The Contractor shall be responsible for trip preparation, including assembly and verification of test equipment and pouching to post, and for conducting evaluations in accordance with the current CMP-approved SOP. The Contractor shall ensure that evaluation documentation adheres to the current CMP-approved template, incorporates accurate facility and technical information, provides recommendations that are fully supported by the analysis and documentation, and is completed in accordance within the agreed upon timeframe. Additionally, the Contractor shall represent ST on advisory and multiple agency boards and committees, ensuring that ST’s interests are represented.

[Upon final release of the classified RFP, additional information and/or requirements will be provided.]

Certified TEMPEST Technical Authority (CTTA) Requirements The CTTA program determines and documents TEMPEST countermeasures requirements through the review of existing facility designs and applications, designating what mitigation requirements are needed to meet the protection required by National and Department policy for National Security Information (NSI) and information systems designated as critical to the security of the United States. CTTA determined TEMPEST countermeasures protect Department NSI from exploitation by adversaries via electromagnetic emanations. These requirements encompass and centralize physical, technical, and procedural security. The CTTA represents Diplomatic Security (DS) at Technical Research Steering Committee (TRSC) meetings, the Department at the TEMPEST Advisory Group (TAG), and other intergovernmental organizations meetings, and both at other policy and standards work groups, including multi-agency task forces working with select foreign allies.

In support of the CTTA Program, the Contractor shall perform TEMPEST technical reviews to ensure that Department NSI is protected from exploitation by adversaries via electromagnetic emanations. The Contractor shall ensure that TEMPEST Countermeasure Reviews (TCRs) and TEMPEST Countermeasure Requirements adhere to the current CMP-approved templates and SOPs, incorporate accurate facility and technical information, and provide recommendations that are fully supported by the analysis and documentation. Specifically, the Contractor shall:

· Perform TEMPEST technical inspection reviews to ascertain compliance and resolve identified issues, ensuring that 100% of requested reviews and requirements spreadsheets are completed within 30 calendar days of the initial request;

· Review TEMPEST countermeasure requirements of domestic and overseas facilities to address existing processing levels and anticipate future requirements; and,

· Respond to TEMPEST-related questions, requests for clarification, and other support issues.

ECB Labor Categories, Estimated Travel Required (ETR) per FTE, and Assignment Locations

[Upon final release of the classified RFP, Labor Categories, ETR per FTE, and assignment locations will be provided.]

ECB Deliverables

Technology Evaluation Branch The Technology Evaluation Branch (TEB) supports the protection of sensitive and classified information either processed on mobile or fixed information technologies (IT) (e.g., smartphones, tablets, laptops, personal computer workstations, printers, network switches, routers, etc.) or discussed through the identification and evaluation of new information and telecommunications technologies. TEB’s primary function is to investigate technical security vulnerabilities of emerging information technology that may be used for generating, processing, transmitting, and storing sensitive and/or classified national security information. The program’s technical investigation focus is on the identification of inherent hardware based vulnerabilities and development of available mitigation strategies to permit their secure use.

The Technology Evaluation program was created to develop in-house expertise to determine the impact of IT processing sensitive USG information on commercial-off-the shelf (COTS) IT and IT that has embedded radio frequency wireless transmitters. Another major tasking of this program includes the configuration and testing of mobile portable electronic devices (PEDs); e.g., BlackBerry, Apple iOS (iPads and iPhones), Microsoft, Android devices; as well as making recommendations on their Mobile Device Management configuration settings; e.g., BlackBerry Enterprise Server 10.X and 12.X, and Citrix XenMobile Server. These technical programs support Department employees domestically and in the world-office environment.

The program also supports the Department’s Human Resources/Disability and Reasonable Accommodation Division (HR/DRAD) 504 and 508 initiatives. DRAD is the Department’s advocate for specific assistive IT based on their client’s documented medical need. TEB analyzes the recommended IT for hardware vulnerabilities and available mitigation strategies providing approvals as well as disapprovals based on the technical security posture of the employee’s assigned work location and the classification level of the data being processed and/or discussed.

The introduction of IT is usually done through the Information Technology Configuration Control Board (IT-CCB), which manages the authorization process. Alternative routes for the introduction of new electronic devices include the Secretary’s Executive Staff for Information Resources Management (S/ES-IRM) and the Information Resources Management (IRM) staff at the Foreign Service Institute (FSI). The Technology Evaluation Branch is composed of Civil and Foreign Service, and contractor personnel available to advise the Department, based on their knowledge of physical/hardware, operating system/software applications, and their interplay in creating or negating potential pathways for the loss of sensitive information being processed or within the immediate user’s environment.

TEB Requirements In support of TEB, the Contractor shall investigate and evaluate new information and telecommunications technologies, focusing on identifying inherent hardware-based vulnerabilities, and develop mitigation strategies necessary to securely use them. The Contractor shall conceive appropriate testing procedures and protocols, draft and finalize approved test plans, and accurately and thoroughly document the results of investigations as final reports suitable for presentation to Department management. Based on the test results, the Contractor shall frame and fully document potential mitigation strategies necessary for the secure use of the evaluated hardware. The Contractor shall ensure that evaluations and responses to review requests are completed within agreed upon timeframes, maintain zero default proceeds on all IT-CCB hardware submissions, and conform to TEB templates and SOPS.

The Contractor shall employ, operate, and maintain state-of-the-art non-destructive testing and analysis equipment within TEB’s in-house radio frequency and computer network laboratories.

To ensure that the Department’s interests are represented and preclude duplication of efforts to determine vulnerabilities and testing, the Contractor shall also perform an important liaison function with other U.S. Government Agencies and Departments and International Technical Security Exchange (INTECSEC) community partners. Specifically, the Contractor shall:

· Identify and investigate new and emerging information and telecommunications technologies for their suitability in the transmitting and processing of sensitive and classified national security information;

· Develop test plans and test reports using TEB-approved templates;

· Perform technical vulnerability analyses of proposed commercial off-the-shelf (COTS) IT office and mobile workforce products such as BlackBerry Enterprise Server and Citrix XenMobile Mobile Device Management application;

· Respond to relevant technical security inquiries and OSPB and FAM policy questions generated by Department stakeholders;

· Develop documentation on hardware-focused evaluations of submitted technologies such as Wireless Intrusion Detection Systems, Mobile Device Management applications, implementation of wireless internet within domestic facilities, and Secret Voice over Internet Protocol;

· Maintain current and calibrated non-destructive test and analysis equipment such as: radio frequency receivers; spectrum analyzers; and, simulated OpenNet and ClassNet computer network environments;

· Liaise with other USG agencies and members of the INTECSEC community on IT vulnerabilities and testing performed to prevent duplication of efforts;

· Provide digital and analog RF Engineering support to Consular Affairs for the redesigned Next Generation e-Passport; and,

· Perform hardware focused vulnerability analysis for potential new assistive IT for sensitive and classified processing within posts controlled access area (CAA) abroad or domestic facilities.

TEB Labor Categories, Estimated Travel Required (ETR) per FTE, and Assignment Locations

[Upon final release of the classified RFP, Labor Categories, ETR per FTE, and assignment locations will be provided.]

TEB Deliverables

Deliverable Due Date

Technical Analysis Branch The Technical Analysis Branch (TAB) develops reports based on collection and analysis of technical security and event information; represents the Department on interagency technical surveillance threat issues; staffs the Technical Operations Group (TOG) at the DS Command Center; and, conducts risk assessments of posts/facilities to serve as the basis for rational application of technical surveillance countermeasures.

Risk Analysis Requirements The Risk Analysis (RA) activity provides DS management with a quantitative method of selecting technical countermeasures based on the calculated risk, cost-benefit, and operational impact. RA produces risk assessments based on the Analytical Risk Management (ARM) methodology, which profiles a mission’s technical threat level, asset importance (classified holdings), and technical vulnerabilities/countermeasures. These assessments recommend site-specific countermeasures to protect classified information at U.S. missions overseas. RA also develops work prioritization and decision models for DS customers, based on their needs and objectives, using analytical hierarchy software.

In support of the RA Activity, the Contractor shall perform a variety of risk analyses and assessments associated with technical threats to Department overseas facilities, security systems, and information networks. For each risk assessment, analysis or impact statement, the Contractor shall adhere to the most current DS-approved template and shall ensure that the information is current, accurate, and references all applicable sources (e.g., Technical Threat Assessments, Technical Security Assessments (TSAs), Physical Security Reports, Exceptions Request Cable). Specifically, the Contractor shall:

· Perform technical countermeasures analyses of information provided by post personnel to identify what actions to take at a given post to minimize technical security risk and to determine whether existing conditions meet National and Department security requirements to accredit classified encryption operations (Communications Security - COMSEC) and determine allowable levels of classified conversation and processing;

· Monitor changes in overseas political climate, technological advances, security and counter-intelligence activities, and other related information;

· Produce Event-driven Technical Risk Assessments of the risk to National Security Information (NSI) discussed, processed and stored in proximity to security event(s);

· Perform analyses to assess risks to NSI discussed, processed and stored at Department overseas facilities posed by excepting particular technical security standards;

· Produce Risk Impact Statements;

· Produce briefing material for DS Principal Full Briefings, DS Principal Issues Only Briefings, OIG Entrance Briefings;

· Develop work prioritization and decision models (currently Expert Choice) for DS customers; and,

· Update the Risk Assessment Model using TAB’s customized MS Excel spreadsheet.

[Upon final release of the classified RFP, additional information and/or requirements will be provided.]

Threat Analysis Requirements The Threat Analysis (TA) activity utilizes information from all sources, determines recommended technical threat levels for all U.S. diplomatic missions. TA coordinates its threat analyses with other agencies to produce collective threat level recommendations to DS for approval and implementation. TA ensures the accuracy of the technical threat information published annually in the Department’s Security Environment Threat List (SETL). TA serves as the customer service contact for DS field personnel requiring technical threat information or threat level assessment scheduling.

In support of the TA Activity, the Contractor shall perform a variety of threat analyses and produce assessments associated with technical intelligence threats, security vulnerabilities, and countermeasure at Department overseas facilities, security systems, and information networks. For each threat assessment, the Contractor shall adhere to the most current DS-approved template and shall ensure that the information is current, accurate, and references all applicable sources.

[Upon final release of the classified RFP, additional information and/or requirements will be provided.]

Collections & Analysis The Collections & Analysis (Collections) activity develops, maintains, and updates common use tools for the collection of information crucial to the branch’s Risk Analysis and Threat Analysis activities. The tools include the Technical Security Assessment (eTSA/WebTSA) and the Technical Anomaly Reporting System (TARS):

· The eTSA/WebTSA project is an ongoing effort to develop a robust application with which DS technical security personnel can complete Technical Security Assessments (TSA) required by 12 FAH-6. The eTSA/WebTSA project is currently converting a comprehensive Microsoft (MS) Excel workbook with a semi-automated workflow into an online, database driven eTSA/WebTSA application. The new application is being developed using MS Visual Studio, MS SQL Server, and Adobe Acrobat Professional.

· The objective of the TARS project is the creation of an online information gathering tool.

TAB ultimately envisions integrating eTSA/WebTSA and TARS with additional functionalities, including but not limited to the following currently independent tools:

· Physical Security Surveys – Surveys performed by the RSO to gauge the physical security posture of a post.

· SLAM – Security Logging and Maintenance system.

· ECB Shielded Enclosure database/ maintenance log.

· Alarm reporting – Receives alarms from posts and allows analyst to reach out to post to determine the cause.

The Contractor shall work closely with TAB to gather, analyze, and manage evolving tool requirements and investigate alternate program design approaches to determine the best balanced solution involving enterprise software applications and databases. The Contractor shall also maintain, administer, operate, document and continue to enhance and develop TAB’s existing set of automated tools to ensure that they continue to support critical Risk Analysis and Threat Analysis activities. The Contractor shall ensure that enhancements and additional functionalities are implemented in a manner that does not adversely affect application or database performance.

The Contractor shall support the full range of TAB’s Collections and Analysis activities. Specifically, the Contractor shall:

· Provide project management and cross-departmental coordination for the application of software and hardware to support the Technical Analysis Branch in programming efforts that improve and enhance data processing operations;

· Collect data from various sources/platforms, analyze relationships and develop intelligent, IT based tools to integrate this data into products useful to the branch’s analysis processes;

· Maintain, operate, administer, and enhance the eTSA/WebTSA and TARS applications and associated databases, including maintenance of both production and development environments, to meet evolving requirements;

· Develop and deliver fully operational software that conforms to DS/EX/CTO and specified user requirements;

· Perform configuration management, change management, and release management in accordance with DS/EX/CTO requirements and SOPs;

· Respond to requests for user assistance, track and resolve issues and problems, and provide support for user acceptance testing;

· Develop and maintain documentation related to supported systems and business application software initiatives that adheres to program and DS/EX/CTO processing and operational procedures;

· Analyze data collected from intrusion alarm and imminent danger notification systems;

· Analyze, identify and classify signals, and;

· Perform workflow analysis of TOG operations and develop operating procedures improvements.

[Upon final release of the classified RFP, additional information and/or requirements will be provided.]

Technical Operations Group Requirements The Technical Operations Group (TOG) provides a central point for remotely monitoring technical security systems at U.S. missions overseas. The TOG monitors and responds to technical security events based on agreements established with the responsible regional security officer (RSO). The TOG provides operational support to the DS Command Center, such as active video monitoring of overseas missions, retrieval of archived video footage, review of technical security activities at overseas posts, back-up coverage for overseas vehicle tracking systems, and provision of original and derived overhead imagery. The TOG coordinates with and supports the branch’s analytical staff by ensuring analysts have immediate access to events as they occur at monitored posts, and by routing post feedback directly to the branch for use in cumulative reporting.

In support of the TOG, the Contractor shall provide a 24/7/365 remote monitoring, technical analysis,…