Technical Surveillance Countermeasures (TSCM) — One-Time Survey Service

STATEMENT OF WORK (SOW) Technical Surveillance Countermeasures (TSCM) — One-Time Survey Service NASA Langley Research Center (LaRC) TABLE OF CONTENTS  1.0 INTRODUCTION  1.1 BACKGROUND  1.2 SCOPE  1.3 Organizational Conflict of Interest (OCI) Requirement  2.0 APPLICABLE DOCUMENTS  3.0 DESCRIPTION OF WORK  3.1 TSCM Survey Service Requirements  3.2 Facilities and Areas to be Examined  3.3 DELIVERABLES  4.0 GENERAL PROVISIONS  5.0 SECURITY  6.0 TRAVEL AND OTHER DIRECT COSTS (ODCs)  7.0 QUALITY CONTROL  APPENDIX A: FACILITIES SURVEY SCHEDULE  APPENDIX B: REFERENCE DOCUMENTS  APPENDIX C: ACRONYMS 1.0 INTRODUCTION The Contractor shall provide all equipment, supervision, and other items necessary to perform a one-time, non-personal Technical Surveillance Countermeasures (TSCM) survey service in support of the National Aeronautics and Space Administration (NASA) -- 1 of 18 -- Langley Research Center (LaRC), as defined in this Statement of Work (SOW), except for those items specified as Government-Furnished Property (GFP) and services. This SOW describes a non-personal services requirement. The Government shall not exercise any supervision or control over the Contractor's service personnel performing the surveys herein. Such service personnel shall be accountable solely to the Contractor, who is responsible to the Government for the quality and completeness of all survey activities. No Government-to-Contractor employer-employee relationship is created or implied by this SOW. The Contractor is engaged to provide a defined service outcome, not to supply or place personnel into NASA positions. 1.1 BACKGROUND NASA LaRC is responsible for conducting world-class scientific research. In support of these activities, LARC maintains sensitive facilities, communications systems, and areas where Controlled Unclassified Information (CUI) and classified information may be processed or discussed. The protection of these environments from technical surveillance threats is a critical element of the Center's overall security posture. The NASA LARC Security OƯice, in coordination with the NASA OƯice of Protective Services, requires periodic technical security assessments to detect, deter, and neutralize potential technical surveillance threats directed against LARC facilities and personnel. This SOW establishes the requirements for a single, one-time TSCM survey of designated facilities at LARC, Hampton, Virginia. 1.2 SCOPE Except for those items specified as Government-furnished property and services, the Contractor shall provide a complete, one-time TSCM survey service for designated NASA LARC facilities. The scope of this one-time service is limited to the following functional activities:  Routine Physical Survey: Systematic physical examination of designated spaces for the detection of concealed electronic eavesdropping devices, anomalous wiring, and unauthorized technical modifications to rooms, furniture, fixtures, and equipment. -- 2 of 18 --  Radio Frequency (RF) Signal Survey: Detection, identification, and analysis of RF signals within and in proximity to designated survey areas to identify unauthorized transmissions or signals of interest.  Acoustic/Physical Security Assessment: Evaluation of physical and acoustical security characteristics of surveyed spaces, identification of deficiencies, and development of corrective action recommendations.  Telephone and Communication Infrastructure Inspection: Inspection of telephone systems, network access points, and communication infrastructure within surveyed areas for evidence of unauthorized interception devices or tampering.  TEMPEST/Emanations Review (as applicable): Preliminary assessment of electronic processing equipment and associated cabling for potential emanation security vulnerabilities within the surveyed spaces. This SOW does not establish a recurring contract, an ongoing support relationship, or require the Contractor to hire or assign personnel to work at NASA LARC on a continuing basis. The Contractor is engaged solely to perform a defined, one-time survey service event. Building A on facility list must be completed in approximately early-December for planning purposes. Remainder of facilities may be completed at the same time or as contractor schedule permits in coordination with CO. 1.3 ORGANIZATIONAL CONFLICT OF INTEREST (OCI) REQUIREMENT Prime Contractors are informed that an actual and/or perceived Organizational Conflict of Interest (OCI) may arise in the performance of this requirement. This one-time service provides technical security survey support to NASA LARC. These eƯorts may include access to facility layout information, security system configurations, and sensitive space descriptions. Should an OCI arise under this contract, the Contractor shall notify the Contracting OƯicer (CO) immediately and provide an OCI Mitigation Plan for the CO's review and approval within 48 hours of notification to the CO. -- 3 of 18 -- 2.0 APPLICABLE DOCUMENTS The following documents are applicable to the performance of this SOW. A complete reference list is provided in Appendix B.  Intelligence Community Directive (ICD) 705, Physical and Technical Security Standards for Sensitive Compartmented Information Facilities (SCIFs)  DODI 5240.05, Technical Surveillance Countermeasures (TSCM), 03 April 2014  NASA Policy Directive (NPD) 1600.2, NASA Security Policy  NASA Procedural Requirements (NPR) 1600.1, NASA Security Program Procedural Requirements  National Industrial Security Program Operating Manual (NISPOM), 32 CFR Part 117  NIST Special Publication 800-171, Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations  Federal Acquisition Regulation (FAR) Parts 4, 31, and 52  IC Technical Specifications for Construction and Management of Sensitive Compartmented Information Facilities (IC Tech Spec for ICD/ICS 705), Version 1.5.1 3.0 DESCRIPTION OF WORK 3.1 TSCM Survey Service Requi…