MSSP-Sole Source Justification_Redacted.pdf

This document is a Sole Source Justification for Acquisitions within the Simplified Acquisition Threshold ($250K) for Managed Security Services. Swish Data Corp, located in McLean, VA, is the sole source provider for Mad Security SOC as a Service and Vulnerability Management as a Service. The company will serve as the Managed Security Services Provider (MSSP) monitoring networks, endpoints, servers, and services, and assisting with issues or breaches, including quarterly training and phishing testing.

The justification highlights that Swish Data and Mad Security have extensive knowledge of the existing systems and have completed similar cybersecurity framework work. Switching to another vendor would require significant time and potentially more funding to bring a new vendor up to speed with the organization's systems and processes. The document is digitally signed by James Donnen (IT Specialist) and approved by Erika LeTourneau (Senior Contracting Officer) on 8/20/2025, with a certification that full and open competition is precluded due to the specific circumstances of this acquisition.