1. Justification for Other Than Full and Open Competition.docx

Justification for Other Than Full and Open Competition (JOFOC)

1. Identification of the Agency and Contracting Activity

Agency:

Department of Health and Human Services (HHS), National Institutes of Health (NIH)

Contracting Activity:

NIH Clinical Center (CC), Department of Clinical Research Informatics (DCRI)

2. Nature and/or Description of the Action Being Approved This action is to approve a procurement for the renewal of proprietary licenses, maintenance, and technical support for the Atlassian software products, specifically Jira Software and Confluence, currently deployed and utilized by the NIH Clinical Center. This renewal is necessary to ensure the continuous operation of mission-critical and federally regulated IT governance and quality management workflows.

3. Description of the Supplies or Services Required to Meet the Agency's Needs The NIH Clinical Center requires an uninterrupted continuation of the Atlassian Jira and Confluence platforms to support two (2) mission-critical, high-compliance use cases:

A. FDA Compliance and Quality Manufacturing Change Control (Jira)

Jira Software is currently the established and validated Change Management System for the CC’s Quality Management System (QMS) built around Master Control. This system is specifically used to control, document, and audit all changes related to items manufactured within the Clinical Center for Protocol and Clinical Research.

Need: Failure to use the current, validated Jira instance for this workflow would violate the established QMS and could result in non-compliance with FDA regulatory requirements for clinical manufacturing, halting essential research activities.

Requirement: The renewed license must preserve all historical audit trails, regulatory workflows, and security configurations currently tied to the existing Jira instance.

B. CRIS High-Valued Asset (HVA) Configuration and Documentation (Confluence)

Confluence serves as the official, centralized repository for all documentation, communication, and artifacts related to CC Software development and the complex CRIS (Clinical Research Information System) Build and Configuration.

Need: Maintaining comprehensive, version-controlled documentation is a foundational requirement for securing CRIS as a High-Valued Asset (HVA) under Federal Information Security Management Act (FISMA) standards. Any disruption or loss of documentation integrity directly risks the Authorization to Operate (ATO) status of the CRIS EHR.

Requirement: The renewed license must ensure uninterrupted access to all current and historical Confluence pages, templates, and permissions required for DCRI to document system changes and maintain security compliance.

In summary, the requirement is not merely for a "change management tool" but for the continuity and maintenance of the specific, validated, and integrated Atlassian instances that support critical Federal regulatory and compliance mandates.

4. Identification of the Statutory Authority and Application of the Authority A. Statutory Authority

The statutory authority permitting other than full and open competition is 41 U.S.C. 3304(a)(1) as implemented by Federal Acquisition Regulation (FAR) 6.302-1, Only One Responsible Source and No Other Supplies or Services Will Satisfy Agency Requirements.

B. Application of Authority (Standardization and Risk Avoidance)

The use of any alternative product would impose substantial, unacceptable costs and risks on the Government, justifying the limited competition:

Regulatory Duplication Costs (FDA Compliance): The Jira workflows supporting Master Control and clinical manufacturing have been rigorously developed, configured, tested, and validated to meet stringent FDA audit and compliance standards. Migrating this workflow to a different platform would require a complete re-validation of the new system, including drafting new System Security Plans (SSPs), developing new audit trails, training all affected staff (including Quality Assurance and Clinical Manufacturing personnel), and re-integrating with Master Control. The estimated cost and time associated with this re-validation and regulatory approval process would result in substantial duplication of cost and unacceptable delays to ongoing, life-saving clinical research protocols.

CRIS HVA Documentation Risk: Migrating the massive volume of mission-critical CRIS Build and Configuration documentation from Confluence to a new platform presents a high risk of data loss, integrity compromise, and lengthy downtime. This would directly jeopardize the compliance status of CRIS as an HVA. No alternative product can seamlessly integrate with the existing Jira audit trails and simultaneously preserve the complex structure and versioning history currently maintained in Confluence without significant operational disruption.

Sunk Costs and Standardization: The NIH CC has made significant investments in customizing and integrating Jira and Confluence into its existing IT ecosystem (including SSO, security monitoring, and custom workflows). Replacing these tools would render the past investment in configuration, integration, and specialized staff training obsolete.

Therefore, the continuity of the current proprietary Atlassian licensing is essential to maintain regulatory compliance, avoid unacceptable operational risks, and prevent substantial, unnecessary duplication of costs and effort.

5. Determination that the Anticipated Cost is Fair and Reasonable [This section will be completed by the Contracting Officer after market research.]

The Contracting Officer will determine the anticipated cost to be fair and reasonable by reviewing historical pricing data, utilizing comparative analysis against similar government or commercial procurements, and verifying the costs through vendor quotes and price breakdowns. The inherent cost savings realized by avoiding the substantial duplication of effort and regulatory re-validation (estimated at over [Insert dollar amount/timeframe]) associated with migrating to a new platform far outweigh any marginal pricing difference from a competitive source for generic documentation/workflow tools.

6. Certification and Approvals I certify that the facts and representations set forth in this justification are accurate and complete to the best of my knowledge and belief.

DCRI COR