QUALYS_BNJ_090518.pdf

BRAND NAME JUSTIFICATION

DEPARTMENT OF EDUCATION – FEDERAL STUDENT AID

QUALYS SOFTWARE LICENSE & MAINTENANCE ANDSUBSCRIPTION SERVICE

This acquisition is being conducted in accordance with FAR subpart 13, Simplified Acquisition Procedures.

1. Agency & Contracting Activity: United States Department of Education, Federal Student Aid

(FSA)

2. Purpose of Acquisition: The purpose of this acquisition is to acquire Qualys software license & maintenance and subscription services required to enhance Federal Student Aid’s (FSA) enterprise cyber security.

3. Software License & Maintenance and Subscription Services: The following software license & maintenance and subscription services are being acquired:

Qualys Enterprise--WAS—Public Sector

Qualys WAS MODULE Fee (VM): Encryption Keys; Account Creation, and Additional Service Fee

Item QG-API Months 3 Description Qualys XML API Interface for automated scripting and integrations

4. Estimated Price and Period of Performance: Federal Student Aid intents to award a four-year purchase order (base plus three one-year options). The total estimated price is approximately $211,000.00.

5. Basis for Name Brand:

The application and subscription is used to scan FSA web applications for vulnerabilities and to ensure FSA is in compliance with NIST standards. The software also is capable of discovering IT assets and possesses the ability to fine-tune settings for vulnerability scanning and vulnerability assessment for network attached systems. These systems include network devices, windows operating systems, Unix/Linux operating minimum requirements, as well as reporting of IT assets, vulnerabilities and related CVEs for each vulnerability finding.

There are other vendors that offer similar software and subscription services. However, Qualys offers an enhanced Application Program Interface that allow better integration with other products making the scanning more efficient and effective. Qualys has been fully integrated into FSA’s Next Generation Data Center and possesses the extensive capabilities required to secure FSA enterprise environment. In addition, the potential cost savings achieved in conducting a competitive would be negated by the necessity to purchase and the cost of new licenses, the time and expense of integrating the new software into the FSA environment, and the cost of training users on the new software. FSA will use historical prices to determine the price reasonableness of the software licenses & maintenance and the subscription services being procured. It is more cost effective at this time to continue with Qualys. FSA will continue to scan the marketplace for this type of software.

Brand Name Justification Qualys Software License & Maintenance and Subscription

6. Technical Requirements Personnel Certification

I certify this requirement meets the Government’s minimum need and that the support data, which forms a basis for this justification, is complete and accurate. The requiring FSA program office has provided written supporting data, which is contained in the contract file, that verifies the technical requirements and support the government ongoing need to use the aforementioned brand name commercial items.

Anthony Booker Contracting Officer’s Representative FSA Technology Office

7. Certification

I certify that the data supporting this Brand Name Justification is accurate and complete.

Therefore, the Contracting Officer hereby determines that it is in the best interest of Federal Student Aid to move forward with this Brand Name acquisition.

Andrew Jernell Contracting Officer Federal Student Aid