Statement of Objectives_PRDS.docx

UNCLASSIFIED

Statement of Objectives Defense Counterintelligence and Security Agency Public Record Data Services

1.0. Purpose

The overall purpose of this effort is to acquire a comprehensive data service solution to support the Defense Counterintelligence and Security Agency’s (DCSA) mission. The desired outcome is a contractor-provided solution that enables automated record checks and delivers proactive alerts to effectively identify potential risks and ensure the integrity of the trusted federal and industrial workforce, in alignment with federal mandates for PV Reform and the Trusted Workforce (TW) framework.

2.0. Scope

The government requires a comprehensive, contractor-owned and operated data service solution. The solution must be capable of providing access to extensive public records and delivering proactive alerts for a large population of individuals enrolled in DCSA’s Continuous Vetting program. The solution must be fully supported and capable of integration with the government's designated IT infrastructure. The population of coverage is expected to be ~5 million individuals.

3.0. Program Objectives

The contractor shall propose a solution that achieves the following high-level objectives:

4.0. Operating Environment and Constraints

The contractor's proposed solution must operate within the following constraints:

· Security: The contractor, its solution, and all personnel performing work under this contract must possess and maintain a SECRET clearance level. All work must be performed by U.S. persons and comply with the DD Form 254 and the National Industrial Security Program Operating Manual (NISPOM).

· Data Protection: The solution must ensure strict compliance with The Privacy Act of 1974, the Federal Information Security Management Act (FISMA), and all applicable DoD regulations for protecting Personally Identifiable Information (PII). All data must be encrypted at rest and in transit.

· Breach Reporting: Any data breach must be reported to the government within one hour of discovery.

· Accessibility: The solution must be fully compliant with Section 508 of the Rehabilitation Act.

5.0 Data fields

1. Required Demographics and Person Information for Entity Resolution

a. Full name

b. Aliases

c. Full address history

d. Date of birth

e. Social Security Number

2. Supplemental Demographics and Person Information for Entity Resolution and alert resolution

a. Driver’s Licenses

b. Relatives

c. Associates

d. Email addresses

e. Phone numbers

f. Motor vehicle registrations

g. Properties

h. Passports

3. Data Category

a. Deceased records from:

i. Social Security Administration Limited Access Death Master File (LADMF) of records less than 3 years old

ii. Social Security Administration Death Master File (DMF) of records 3 years and older

iii. Obituaries

iv. Other sources

b. Criminal records:

i. Arrests

ii. Convictions

iii. Near real-time jail bookings

iv. Sex offender registry

v. Warrants

vi. Global sanctions

vii. State and Federal sanctions

c. Suspicious Financial Activity - Ensure the credit and financial information related inquiries will not affect the credit scores of the individuals subject to the requests (soft hit)

i. Supplemental credit and financial information that is Fair Credit Reporting Act (FCRA) compliant

ii. Additional credit and financial data that is non-FCRA compliant such as:

1. Delinquent debt

d. Public Records supporting any of the above requirements including:

i. Bankruptcies

ii. Repossessions

iii. Foreclosures

iv. Federal and State tax liens

v. Judgements

6.0 Other Requirements

1. Advanced notice of a minimum of two (2) weeks for changes to the system, data sets, increase in data coverage that could result in an increase in alerts, new data providers, outages in specific data sets or providers.

a) Planned changes to the contractor system/data that result in downstream DCSA system development and modification shall be provided three (3) months in advance.

b) An increase to data/coverage that results in an increase to alerts should be provided with as much detail as possible to include the additional state/county/court, etc. that is being added, the date the data will be deployed in the production environment, and an estimate of the amount of alerts that will be sent.

2. Entity resolution requirement to match at least 99% of the enrolled population to subject profiles with a high degree of confidence.

3. Dedicated support for issue resolution and research of specific alerts and questions.

4. Dedicated support for timely development/enhancement of contractor systems and data to meet DCSA’s needs.

UNCLASSIFIED