DJA-24-ASEP-PR-0383 - JOFOC Below SAT - Redacted.pdf

Version 20220201

�(2) Full and open competition need not be provided for when the disclosure of the agency�s needs would compromise the national security unless the agency is permitted to limit the number of sources from which it solicits bids or proposals.�

Execution of the Houston project requires critical details of PSPB intrusion countermeasures and access to floorplans, surveillance techniques, and equipment. Although the components used for this project are publicly available, the equipment list itself is sensitive in nature because it provides adversaries with information which could be used to engineer methods to bypass physical security systems. Furthermore, this system requires specific installation practices that must be clearly defined and understood by the integrator so they can provide an accurate quote. The methodology used to install the components is also sensitive, as understanding the wiring and engineering behind the installation can also provide a means of bypassing the system. Finally, floorplans detailing the locations of physical security components, in conjunction with sensitive details of the office layout are critical for an integrator to calculate the installation cost. Floorplans could be used by an adversary for a variety of nefarious purposes ranging from engineering a method of intrusion, to designing potential attacks on ATF personnel and facilities. Therefore, publication of these details on a public forum compromises the security of PSPB facilities and personnel constituting a violation of ATF OPSEC policy. Therefore, PSPB is required to limit the number of integrators who have access to this information and provide disclaimers for the release of said information.

Although many companies can procure and install FIPS 201-2 equipment, it is complex work that frequently requires follow-up visits. Integrators must be authorized value-added resellers and cannot use unqualified subcontractors. LENEL, the manufacturer of the FIPS equipment used by ATF, has an internal certification process for vendors who install FIPS 201-2 equipment for Federal clients. To prevent unnecessary follow-up costs, downtime, and maintenance costs PSPB needs to solicit bids from Lenel certified integrators with local personnel.

This project interfaces with a much larger customized system. PSPB�s access control system is a nationwide customized system connecting all ATF facilities. The complexity of this system requires consistency in the methodology and procedures used to integrate new offices. For the sake of consistency in a complex system, it is important to limit the number of integrators working on the system. Soliciting bids to known 8E integrators whenever reasonable is critical to maintaining consistency in a highly complex system.

In conclusion, PSPB has determined Securitas, Convergint Technologies, NextGen Security and Transnet. are uniquely qualified and have met the vendor requirements.

PSPB recommends limiting the disclosure of the required information to these 4 sources to mitigate the subsequent security risks inherent to disclosure, while still providing an acceptable level of competition.