A03 QASP 2026 - ATC Cyber Engineering and RMF.docx
DOCX document 30 KB Posted
- Solicitation number
- W91CRB-26-B-A006
About this file
This is a Quality Assurance Surveillance Plan (QASP) document prepared in June 2026 for monitoring contractor performance on cybersecurity engineering and DoD Risk Management Framework (RMF) support services at Aberdeen Test Center. The QASP establishes performance measurement standards and surveillance methods to ensure the contractor meets contractual obligations. The contract is structured as a Firm Fixed-Price award and requires a designated contract manager available during standard business hours (8:00 a.m. to 4:30 p.m., Monday through Friday) who possesses expertise in DoD RMF policies, security audits, risk assessment, DISA STIG compliance, NIST publications, and FISMA compliance, with preferred experience as a Server or Network Administrator.
The QASP defines four primary performance requirements with specific measurable standards: (1) Transition-In Timeliness—achieving 90% on-time execution of the transition plan within 30 days of contract award with a maximum 3-day allowance; (2) Anti-Terrorism Level 1 Training Completion—requiring 100% of contractor staff to complete training within 30 days of task order release; (3) Delivery of Quality Products or Services—maintaining 100% on-time monthly delivery of all deadlines; and (4) Program Management Financial Deliverables Accuracy—ensuring monthly funding balance statements, invoices, reconciliation reports, and spend plans maintain 99% accuracy with no more than 1% variance against database records. Surveillance methods include direct observation, 100% inspection by the Contracting Officer's Representative (COR), and customer feedback, with monthly monitoring frequencies for most performance indicators.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
ATC Cyber Engineering and RMF Support Services Quality Assurance Surveillance Plan (QASP)
Prepared By: Bonne Weakley Date Prepared: June 2026
1. DESCRIPTION OF SERVICES
1.1. Scope of Work. The contractor shall provide Cybersecurity Engineering and DoD Risk Management Framework (RMF) Support Services to the Aberdeen Test Center (ATC). The contractor will specifically provide RMF analysis, planning, execution, and maintenance of client system(s) Authority to Operate (ATO). Contractor will conduct appropriate RMF activities to establish and/or maintain ATO and RMF compliance.
1.2. Contract. The government will award a Firm Fixed-Price (FFP) contract.
2. ROLES AND RESPONSIBILITIES.
The following personnel are considered key personnel by the government: IT Sys Solutions Architect-Sr. The contractor shall provide a contract manager who shall be responsible for the performance of the work. The name of this person and an alternate who shall act for the contractor when the manager is absent shall be designated in writing to the contracting officer. The contract manager or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. The contract manager or alternate shall be available between 8:00 a.m. to 4:30p.m, Monday thru Friday except Federal holidays or when the government facility is closed for administrative reasons. Qualifications for all key personnel are listed below: The IT Sys Solutions Architect-Sr/Contract Manager must have a high degree of expertise with the following systems/protocols: DoD RMF policies and practices, security audits, risk assessment practices, DISA STIG compliance, knowledge of NIST special publications, FISMA compliance, excellent writing and communications skills, and former experience as a Server Administrator or Network Administrator is highly desirable.
3. Performance Requirements Summary Matrix By monitoring the areas identified below, the COR will determine whether the performance levels set forth in the contract have been attained. The following performance standards and AQLs will be used to measure contract performance.
| Performance Indicator |
| Performance Standard |
| AQL |
| Method of Surveillance |
PRS # 1
Transition-In Timeliness
| Execute the Transition-In Plan and be fully operational within 30 days of the effective date of contract award Inspection results availability for review. |
| 90% on-time (max 3 days late) |
| Direct Observation |
PRS # 2
Anti-Terrorism (AT) Level 1 Training Completion
| · All contractor staff must complete AT Level 1 Training within 30 days after Task Order (TO) release |
| 100% completion as required |
| Direct Observation and 100% Inspection by COR |
PRS # 3
Delivery of Quality Products or Services Timely delivery, meeting all deadlines.
100% monthly Direct Observation, 100% Inspection by COR, and customer feedback
PRS # 4
Program Management Financial Deliverables Accuracy
| Delivery of the Monthly Funding Balance Statement, Monthly Invoice, Monthly Invoice Reconciliation Report, and the Monthly Spend Plan will not report more than 1% variance when compared against the financial data in the database (baseline dollars, actual dollars spent, hours charged, and remaining dollars) |
| 99% accurate monthly |
Direct Observation and 100% Inspection by COR
Table 1: Performance Requirements Summary Matrix.
SERVICE or STANDARD: ____________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________
SURVEY PERIOD: ______________________________________
SURVEILLANCE METHOD (Check):
| _____ | Random Sampling | |
| _____ | 100% Inspection | |
| _____ | Periodic Inspection | |
| _____ | Customer Complaint |
LEVEL OF SURVEILLANCE SELECTED (Check):
| _____ | Monthly |
| _____ | Quarterly |
| _____ | As needed |
PERCENTAGE OF ITEMS SAMPLED DURING SURVEY PERIOD: ______ %
ANALYSIS OF RESULTS:
OBSERVED SERVICE PROVIDER PERFORMANCE MEASUREMENT RATE = ______%
SERVICE PROVIDER’S PERFORMANCE (Check):
| ____ | Meets Standards |
| ____ | Does Not Meet Standards |
NARRATIVE OF PERFORMANCE DURING SURVEY PERIOD: ____________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________
| PREPARED BY: | _________________________________________ | |
| DATE: | _________________________________________ |
File details come from the government source that posted it. Updated .