Quality Assurance Surveillance Plan 2026 - ATC Cyber Engineering and RMF

ATC Cyber Engineering and RMF Support Services
Quality Assurance Surveillance Plan (QASP)

Prepared By: Bonne Weakley
Date Prepared: June 2026

DESCRIPTION OF SERVICES

Scope of Work. The contractor shall provide Cybersecurity Engineering and DoD Risk Management Framework (RMF) Support Services to the Aberdeen Test Center (ATC). The contractor will specifically provide RMF analysis, planning, execution, and maintenance of client system(s) Authority to Operate (ATO). Contractor will conduct appropriate RMF activities to establish and/or maintain ATO and RMF compliance. Contract. The government will award a Firm Fixed-Price (FFP) contract.

ROLES AND RESPONSIBILITIES.
The following personnel are considered key personnel by the government: IT Sys Solutions Architect-Sr. The contractor shall provide a contract manager who shall be responsible for the performance of the work. The name of this person and an alternate who shall act for the contractor when the manager is absent shall be designated in writing to the contracting officer. The contract manager or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. The contract manager or alternate shall be available between 8:00 a.m. to 4:30p.m, Monday thru Friday except Federal holidays or when the government facility is closed for administrative reasons. Qualifications for all key personnel are listed below: The IT Sys Solutions Architect-Sr/Contract Manager must have a high degree of expertise with the following systems/protocols: DoD RMF policies and practices, security audits, risk assessment practices, DISA STIG compliance, knowledge of NIST special publications, FISMA compliance, excellent writing and communications skills, and former experience as a Server Administrator or Network Administrator is highly desirable.

Performance Requirements Summary Matrix
By monitoring the areas identified below, the COR will determine whether the performance levels set forth in the contract have been attained. The following performance standards and AQLs will be used to measure contract performance. Performance Indicator
Performance Standard
AQL
Method of Surveillance
PRS # 1
Transition-In Timeliness
Execute the Transition-In Plan and be fully operational within 30 days of the effective date of contract award Inspection results availability for review. 90% on-time (max 3 days late)
Direct Observation
PRS # 2
Anti-Terrorism (AT) Level 1 Training Completion