Sources Sought Notice Unauthorized Device Team Support services.pdf

Washington Headquarters Services/Acquisition Directorate (WHS/AD)

Sources Sought Notice/Request for Information

U.S. DEPARTMENT OF DEFENSE

WASHINGTON HEADQUARTERS SERVICES

ACQUISITION DIRECTORATE

SOURCES SOUGHT NOTICE

PENTAGON FORCE PROTECTION AGENCY (PFPA)

UNAUTHORIZED DETECTION TEAM SUPPORT SERVICES

1.0 General Information

Document Type: Sources Sought Notice (SSN)

Title: Unauthorized Detection Team Support Services

Sought Post Date: July 3, 2024

Sources Sought Response Date: July 25, 2024

NAICS Code: 541512 - Computer Systems Design Services (Size Standards $34 million)

Product Service Code: DA01, IT and Telecom—Business Application/Application Development

Support Services (Labor)

2.0 Background

The Pentagon Force Protection Agency (PFPA) Counterintelligence Branch is responsible for providing technical security support to the Office of the Secretary of Defense (OSD), Washington Headquarters

Services (WHS), and other Pentagon agencies when requested. The PFPA Counterintelligence Branch is also responsible for the coordinated technical security effort of all tenants located on the Pentagon

Reservation. The PFPA Counterintelligence Branch's Technical Security Program provides technical security support in accordance with DoD TSCM Survey Program, DoDI-5240.5, to protect the OSD, WHS, and PFPA and its mission.

3.0 Objective/Scope

The Department of Defense, Washington Headquarters Services, Acquisition Directorate

(DoD/WHS/AD) is seeking information from potential sources on behalf of the PFPA, that can provide subject matter experts to perform duties of management, coordination, and operation of radio frequency monitoring equipment. The Contractor shall be responsible for the analysis of all signal data collected.

Duties shall include technical surveillance countermeasures, mobile device detection sweeps, and investigative data analysis. The Contractor shall resolve any anomalies the technical system may detect and provide progress/status reports of the systems development to the PFPA Technical Operations

Section Program Manager. The Contractor shall provide quarterly status briefings to senior Department of

Defense executives, policy, and decision-makers.

1. Site lead (1 needed): In addition to performing the duties below, the site lead would be a working site lead who would be responsible for supervising the contractors, performing human resource and administrative functions on behalf of the company, and acting as team members as needed.

The site lead would be responsible for keeping PFPA leadership aware verbally and in writing of activities and results. This would be a senior-level contractor. This is a working supervisor position.

2. Team Member (4 needed): Operation personnel conducting the daily inspections in offices and documentation of activities. This would include, at a minimum, medium, and junior-level personnel. They would be required to perform all activities documentation and conduct briefings on results for operation meetings and staff updates.

3. Operational Duties: Conduct a thorough physical sweep of the office space, including all rooms, cubicles, ceilings, floors, walls, and furniture, to visually inspect for any suspicious or unauthorized electronic devices.

4. RF Spectrum Analysis: Use specialized equipment to perform Radio Frequency (RF) spectrum analysis to detect any unauthorized RF transmissions within the office area, including signals from covert listening devices or wireless cameras.

5. Network Security Audit: Conduct a comprehensive audit of the office network infrastructure, including routers, switches, servers, and Wi-Fi access points, to identify any unauthorized or rogue devices connected to the network.

6. Electronic Device Detection: Utilize advanced electronic detection equipment to sweep for hidden electronic devices, such as GPS trackers, covert microphones, or hidden cameras, that may be concealed within office equipment or furniture.

7. Physical Intrusion Testing: Perform physical intrusion testing to assess the effectiveness of access controls and security measures in place, including door locks, alarms, and surveillance cameras, to identify potential vulnerabilities that malicious actors could exploit.

8. Data Leakage Prevention: Recommend measures to prevent unauthorized data leakage or exfiltration of sensitive information from the office environment, including monitoring outbound network traffic and implementing encryption protocols to safeguard proprietary data.

9. Employee Training and Awareness: Provide training and awareness programs for employees to educate them about the risks of unauthorized electronic surveillance and the importance of maintaining vigilance to protect intellectual property and proprietary information. Develop performance measures to determine the effectiveness of the detection program. Created and provided analytical products and briefings regarding the program to senior leadership, including members of the DoD Senior Executive Service.

4.0 Sources Sought

To facilitate market research, the Government is looking to identify qualified sources under the North

American Industry Classification System (NAICS) 54151, Computer Systems Design Services. This

Notice seeks industry comments to assist the Government; if you have any comments or find any ambiguities, please provide your information and comment in your response to this Notice.

Responses are requested from "all" sources, including those other than small businesses. Small

Businesses, 8(a) small businesses, HUBZone small businesses, Service-Disabled Veteran-Owned Small

Businesses, Women-Owned Small Businesses, and Economically Disadvantaged Women-owned Small

Businesses are encouraged to respond.

This Sources Sought (SS) Notice is for information and planning purposes only and shall NOT be construed as a solicitation or as an obligation on the part of the Government. This Notice does not obligate the Government to award a contract or otherwise pay for the information provided in the response. The Government reserves the right to use information provided by respondents for any purpose deemed necessary and legally appropriate. Any concern responding to this Notice should ensure that its response is complete and sufficiently detailed to allow the Government to determine the concern's qualifications to perform the work.

Respondents are advised that the Government is under no obligation to acknowledge receipt of the information received or provide feedback to respondents with respect to any information submitted. After a review of the responses received, a pre-solicitation synopsis and solicitation MAY be published at https://sam.gov/. However, responses to this Notice will not be considered adequate responses to a solicitation.

The Government will NOT accept requests for meetings or briefings. No phone solicitations or emails concerning the Request for Proposal (RFP) status will be accepted before its release. Information and materials submitted in response to this Notice WILL NOT be returned.

As a result of this Notice, the Government MAY issue an RFP. There is no solicitation available currently. However, should such a requirement materialize, no basis for claims against the Government will arise as a result of a response to this Sources Sought Notice, nor the Government's use of such information as either part of our evaluation process or in developing specifications for any subsequent requirement.

5.0 Service Requirement, Equipment & Task Areas

5.1 Basic Services. The Contractor will provide services for the Counterintelligence Branch.

5.1.1 The Contractor shall provide personnel that are certified subject matter experts on the operation of

Radio Frequency monitoring equipment. The Contractor shall perform work necessary to resolve system-identified anomalies by locating the origins of the signal and providing advice on how best to neutralize the threat signal. Contractor personnel shall manage a signals database for historical purposes to allow for ongoing comparison of signal threats encountered.

5.1.2 The Contractor shall provide (Technical Surveillance Countermeasures) TSCM Subject Matter

Experts Specialist that must be either a certified Department of Defense TSCM Service School or

Interagency Training Center Fundamentals Course Graduate.

5.1.3 The Contractor shall provide personnel with at least two (2) years of specialized TSCM experience.

5.1.4 The Contractor shall assist and be trained in all matters of TSCM. The Contractor shall also be charged with completing Mobile Device Sweeps as mandated by PFPA. These duties shall be determined by the Technical Operations Section Program Manager.

5.1.5 Normal work hours shall be an eight (8) hour workday. Work will be performed Monday through

Friday between the core hours of 7:00 am – 5:00 pm, excluding weekends and holidays.

5.1.6 Contractor shall perform TSCM investigations in support of the Office of the Secretary of Defense and report all findings and recommendations to the Technical Operation Section Program Manager in

PFPA report format. The primary job function of the Contractor(s) shall be scheduling, performing, and reporting unauthorized device searches (and findings) within secure/classified processing areas within the

Pentagon and other NCR locations as authorized by the DoDI 5240.05.

5.1.7 The Contractor shall ensure contract personnel have a driver's license to operate Government-owned vehicles.

5.1.8 The Contractor shall ensure contract personnel dress in appropriate casual business attire and, when appropriate, a suit and tie.

5.1.9 The contractor employees shall be capable of providing briefings to senior DoD executives from the

Office of the Secretary of Defense.

5.1.10 The PFPA Technical Operation Section Program Manager shall request removal of any contract employee committing any of the following offenses:

a. Disclosing any official information to include duties or responsibilities under this Contract or writing or distributing any news or press releases without expressed written permission of the PFPA

Technical Operation Section Program Manager/COR.

b. Except as authorized by law, engaging in audacious or demeaning discussions concerning DoD internal matters, policies, grievances, legal issues, or personalities; financial, personal, or family matters with DoD Employees, family members, the public, or any known associate of the above.

c. Disclosure of any duty assignment(s) or related issues without the expressed approval of the

Technical Operation Section Program Manager.

d. Displaying disorderly or immoral conduct (e.g., using abusive or offensive language, quarreling, intimidating others with words or actions, fighting, or participating in disruptive activities).

e. Knowingly associating with persons known to be convicted felons or persons known to be connected with criminal activities. This does not apply to immediate family members.

f. Accepting or soliciting gifts, favors, or anything of value in connection with official duties.

g. Displaying unethical or improper use of DoD identification or credentials (e.g., badges, passes, and other documents providing special access or privilege).

h. Knowingly giving false or misleading statements or concealing material facts in connection with official reports, records, investigations, or other proceedings.

i. Knowingly make a false statement(s) about other contract employees/officials, DoD employees, or incidents.

j. Involvement in any form of discrimination or sexual harassment of other contract employees, DoD employees, or members of the public as prescribed by Federal, state, and local laws.

k. Eating, smoking, drinking at the duty station, or taking breaks in any location except those designated as authorized break areas.

l. Engaging in outside employment: Outside employment is defined as employment, with or without compensation, with any foreign Government, firm, corporation, or individual that is either controlled or managed by any foreign Government. Also prohibited is employment as a government or contract employee of the DoD or any other position, which would constitute a real or apparent conflict of interest with the mission of the Agency served under this Contract.

m. The contractor employees must adhere to and abide by all United States Government and Department of Defense Instructions, which provide guidance on office operations and conducting TSCM investigations—reference: DoD 5240.5, IA-30, and PFPA Policies governing the workplace.

n. The Contractor will perform basic TSCM equipment maintenance as well as TEMPEST, technical security education, unauthorized device sweeps, and physical security advice and assistance.

Equipment:

Item Part Number Quantity Extended Description

REI MESA 2.0

Deluxe

8-00147 4 MESA® 2.0 Deluxe - includes Fixed Dipole, Whip, 12 GHz Down Converter, Flag

Directional, VLF Loop, Locator, MCP, Visible Light/IR, Ultrasonic, Audio

Transformer, Acoustic Leakage, GPS

Dongle, 2 batteries, and external battery charger, new Wi-Fi features, QMA Quick

Disconnect, I/Q Record

6.0 Submission Requirements

Interested firms should submit their response via email to whs.mc-alex.ad.mbx.essd-security-solicitation@mail.mil , the Contracting Officer Yolnie.t.merriweather.civ@mail.mil and the Contract

Specialist at michellemabel.g.reaves.civ@mail.mil.

The email subject line should be titled "Unauthorized Detection Team Support Services for PFPA

HQ003424R0317"

Include a capabilities statement covering Experience, staffing, and technical capabilities.

Firms are requested to provide information in their response whether they intend to submit a proposal if an RFP is issued.

The capabilities statement should provide information to address the technical areas of the services identified above. In addition, firms should provide information on their company's experience by providing information to support how the firm's recent past performance (last five years) is relevant to the technical areas listed, including the dollar value, period of performance, size, and scope of the firm's prior contracts. Firms need to include their business address, point of contact, CAGE code, SAM Unique Entity

ID number, and small business status.

7.0 Response Format

Firms should respond using the format requested in this Notice to facilitate a timely and comprehensive review of all submitted responses. Any deviation from this format may lead to the rejection of the response.

All interested firms with the Experience, skills, and capabilities necessary to perform the stated requirements are requested to provide a maximum capability statement of no more than eight pages. All responses should be single-spaced using 12-inch Times New Roman font within an 8.5 by 11-inch page size. A 10-inch font will be accepted for graphics ONLY (i.e., charts, graphs, etc.). Capability response must include the following information:

mailto:whs.mc-alex.ad.mbx.essd-security-solicitation@mail.mil mailto:whs.mc-alex.ad.mbx.essd-security-solicitation@mail.mil mailto:Yolnie.t.merriweather.civ@mail.mil mailto:michellemabel.g.reaves.civ@mail.mil

• Company name, address, point of contact name, telephone, and email address.

• CAGE Code and SAM Unique Entity ID number.

• Business size status (business size/socioeconomic category must be submitted for use).

• Contractor personnel performing work under this Contract shall have, at minimum, a fully adjudicated final DoD Top Secret/Secret Compartmented Information (TS/SCI) Clearance at the time of the proposal submission and shall maintain the level of security required for the life of the Contract. The security requirements are in accordance with the attached DD 254.

Contractor personnel will also be required to execute and return an NDA within five business days of contract award. The PFPA will not sponsor contractor companies for a facility security clearance in support of this Contract.

• Identify contracts your company has been awarded under NAICS 54151 Computer Systems

Design Services. Additional information on NAICS codes can be found at www.sba.gov.

• Recommended/suggested NAICS codes for this effort.

• Recommended/suggested contract type.

• Number of contracts currently held with the Government to include any Federal Supply

Schedules listed under GSA Advantage.

• Documentation that addresses each task areas listed above.

• A description of corporate Experience for similar contracts and/or projects accomplished within the last five years. The description must include where, when, and for whom each similar Contract and/or project was performed and a brief description of each Contract and/or project, including the size, scope, dollar value, and period of performance.

• Firms are asked to provide their response with their GSA Schedules appropriate for this requirement.

In addition, firms need to complete Attachment 1, and provide this with their submission. Attachment 1 is not included in the overall page count; however, it should not contain any additional information other than what is to be checked off or answered.

Do not include proprietary, classified, confidential, or sensitive information in your response to this

Sources Sought Notice. The Government reserves the right to use any information provided by respondents for any purpose deemed necessary and legally appropriate, including using technical information provided by respondents in any resultant solicitation. Responses to this Notice will not be returned.

No hard copy or facsimile submissions will be accepted. Cover letters and extraneous materials

(brochures, etc.) will not be considered.

This Source Sought Notice is for market research purposes only.

Questions concerning the Sources Sought should be submitted via email by 1:00 pm Eastern Time on

July 10, 2024, to yolnie.t.merriweather.civ@mail.mil. Telephone calls will not be accepted.

http://www.sba.gov/ mailto:yolnie.t.merriweather.civ@mail.mil

Questions concerning small businesses should be directed to the WHS Office of Small Business Programs at WHS.OSBP@mail.mil.

8.0 Due Date for Submission of Responses

Vendor's Capability Statements are requested to be submitted via email (no hard copies) no later than

1:00 pm Eastern Time on July 25, 2024. Submissions after this date will not be considered.

Responses sent to any person or email address other than the email address specified above will not be considered.

mailto:WHS.OSBP@mail.mil.

ATTACHMENT 1

CONTRACTOR CAPABILITY INFORMATION

Part I. Business Information

Please provide the following business information for your company/institution and for any teaming or joint venture partners:

Company/Institute Name:

Address:

Point of Contact:

CAGE Code:

Phone Number:

Email Address:

Web Page URL:

Size business pursuant to the North American Industry Classification System (NAICS). Based on the above

NAICS Code, state whether your company is:

Small Business (Yes/No)

Woman-Owned Small Business (Yes/No)

Small Disadvantaged Business (Yes/No)

8(a) Certified (Yes/No)

HUBZone Certified (Yes/No)

Veteran-Owned Small Business (Yes/No)

Service-Disabled Veteran Small Business (Yes/No)

Central Contractor Registration (CCR) (Yes/No)

A statement as to whether your company is domestically or foreign-owned (if foreign, please indicate the country ownership).

List of any applicable Federal Supply Schedules and expiration dates: