17th TRW SSJ Cybersecurity Support.pdf

Sole Source Justification (FSS/MAS Order)

Date: February 3, 2026 Requirement Title: Cybersecurity Program Execution Support (ISSM/ISSO, RMF, ATO Sustainment) – 17 TRG, Goodfellow AFB, TX Estimated Value: $1.48M Vehicle: MAS/FSS task order (or BPA—pick one) under applicable SIN(s): [SIN(s)] Contractor: Ingalls Information Security (“Ingalls”) Place of Performance: Goodfellow Air Force Base (and approved remote locations, as authorized)

1. Ordering Activity / Requiring Activity

Ordering Activity (Contracting Office): GSA FAS GSS, SCM Contracting Division

Requiring Activity/Customer: Department of the Air Force, 17 Training Group (17 TRG), Goodfellow AFB, TX

Program POC: Carlos Guzman, Air Force IT Acquisitions Manager CO: Jonathan Hankin, Section Chief, GSA SCM Contracting Division

2. Nature and Description of the Action

This justification supports award of a sole-source MAS/FSS task order to Ingalls for cybersecurity program execution support services aligned with Risk Management Framework (RMF) lifecycle support, including ISSM/ISSO execution, and ATO sustainment activities necessary to maintain authorization posture and uninterrupted mission operations for 17 TRG.

This action will be executed using FSS Ordering Procedures. Orders placed against FSS contracts are exempt from FAR Part 6; however, the ordering activity must justify award on a sole-source basis in accordance with 538.7104-3. This memo documents the justification.

3. Description of Services Required

The Government requires immediate and continuous cybersecurity support to sustain RMF compliance and maintain/renew Authority to Operate (ATO) certifications supporting critical mission systems and training operations. The scope includes, at minimum:

● ISSM/ISSO execution support aligned to Air Force RMF requirements

● Development/maintenance of RMF artifacts and supporting cybersecurity documentation

Docusign Envelope ID: C0587E80-7BE4-4A20-9814-935A5B6B0DF6

● ATO package sustainment, preparation, and submission support (including coordination through required governance pathways)

● Vulnerability identification/remediation tracking, POA&M management, and coordination with SCA/Authorizing Official stakeholders

● Support to maintain compliance posture and prevent authorization lapses impacting mission operations

Period of Performance: Base 12 months + four 12-month option periods, if exercised.

4. Statutory Exception Supporting Sole Source

This justification relies on the following statutory exception(s) in 538.7104-3(b)(1) for acquisitions exceeding the SAT:

A. Unusual and compelling urgency – The need is of such unusual urgency that following competitive procedures would result in unacceptable delays. 538.7104-3(b)(1)(i).

and

B. Only one source capable – Only one source is capable of providing the services required at the level of quality required because the services are unique and highly specialized.

538.7104-3(b)(1)(ii).

5. Demonstration of the Contractor’s Unique Qualifications and Why Alternatives Cannot Meet the Need in Time

Mission-critical timing constraint (urgency). 17 TRG has non-discretionary cybersecurity compliance and authorization milestones driven by inspection dates that threaten system shut-down if operations extend beyond date current without further support. Furthermore, internal Air Force legacy contracting support was removed before alternative acquisition support could be arranged (through GSA). Additional constraints involved in system integration (AF to GSA funding mechanisms for service acquisitions) presented additional delays in provisioning the necessary contracting support.

A gap in ISSM/ISSO execution and RMF sustainment during this period would create a material risk of authorization lapse (the 17th have already passed previously established deadlines for authorization, risking imminent shutdown), delayed accreditation actions, and interruption of operations for critical systems and missions.

Why Ingalls is uniquely positioned to perform without unacceptable delay. Ingalls is currently embedded in, and operationally familiar with, 17 TRG’s cybersecurity environment, including existing RMF workflows, system documentation baselines, and stakeholder coordination pathways. This enables immediate continuation of services without a transition period that would otherwise be required to safely assume RMF/ATO sustainment responsibilities.

Transition delay is unacceptable. Based on prior transition experience and the requirement’s reliance on ongoing RMF artifact baselines, tool access, and stakeholder coordination, replacing the incumbent during the urgent performance window would require a transition period estimated of 60 - 120 days or longer depending on factors outside of the program’s immediate ability to control, including the completion of:

● personnel onboarding and required access provisioning;

● documentation baseline and system boundary assimilation;

● validation and handoff of Plan of Action and Milestones (POA&M) / ATO sustainment responsibilities

This delay is incompatible with required mission timelines and would materially increase the risk of missed authorization milestones.

Cleared/onboarded personnel and specific domain readiness. Ingalls can provide personnel meeting required certifications and experience aligned to DoD cyber workforce requirements (e.g., DoD 8140), and personnel already meeting access and onboarding requirements necessary to perform in the required timeframe. Ingalls staff are cleared and trained in Air Force RMF procedures, ISSM/ISSO execution, Electronic Requirements Oversight Committee (eROC), IT Data Oversight and Governance (IDOG) processes, and Information Technology Investment Portfolio System (ITIPS).

Quality and performance confidence. Ingalls has demonstrated performance supporting comparable Air Force RMF/ATO sustainment in operational training environments, including demonstrated ability to deliver RMF artifacts and coordinate with SCA/AO stakeholders within required timelines. Ingalls has also demonstrated the requisite competencies in multiple cloud environments — including Palantir, AWS GovCloud, and Cloud One — and maintains POCs at each to guide the team in selecting the optimal environment.

6. Efforts to Obtain Competition / Market Research Conducted

Both the ordering activity and requiring activity conducted and documented market research to identify alternative FSS sources capable of meeting the requirement without unacceptable delay, including a review of other vendors under SIN 54151HACS, finding none with the current mission context, security clearance, and RMF support specialization matching vendor Ingalls. No alternative source was identified that could assume responsibility within the required timeframe and without unacceptable mission risk. Market research included review of HACS-qualified vendors, eBuy history, and vendor capabilities.

Based on urgency and continuity concerns, competition would not meet mission timelines.

Market research concluded that while other vendors may offer similar labor categories in general, no alternative source was identified that could assume responsibility for this requirement within the required timeframe and without introducing unacceptable mission risk during the urgent performance window.

Competition plan. The ordering activity will reassess competitive opportunities prior to exercise of each option period by validating:

● continued need,

● continued urgency/transition risk, and

● whether market conditions have changed such that competition would be feasible without unacceptable mission impact.

7. Pricing / Fair and Reasonable Determination

This action will be placed under the MAS/FSS program. Under the FSS Ordering Procedures, ordering activities are not required to make a separate fair-and-reasonable price determination for FSS products/services at the order/BPA level because FSS contract pricing has been determined fair and reasonable. However, the ordering activity reviewed the quoted labor categories/rates against the contractor’s awarded MAS pricelist and the IGCE to support best value and sought maximum order-level discounts. The ordering activity will ensure the awarded solution represents best value consistent with the RFQ/ordering documentation and the scope of the contractor’s MAS contract.

8. Posting / Public Availability

This justification will be made publicly available no later than 14 days after award.

9. Technical Certification

I certify that the supporting data are accurate and complete to the best of my knowledge and belief.

Roy Sekscinski, 17 TRSS/TSC/Program Manager Date Signed

10. Contracting Officer Determination

Based on the facts above, I have determined that award of this MAS/FSS order on a sole-source basis is supported by the cited statutory exception(s), is in the best interest of the Government, and is necessary to prevent unacceptable mission risk and delays.

4 Feb 2026

SEKSCINSKI.ROY.F.10

40247021

Digitally signed by

SEKSCINSKI.ROY.F.1040247021

Date: 2026.02.04 06:48:24 -06'00'

, Contracting Officer Date Signed Jonathan Hankin - QSCCCA

2/9/2026