A03_JA_for_DCO_Services_Huachuca_REDACTED.pdf

Control No: JA-18-Hua-474 Contractor: Booz Allen Hamilton

Program: Defensive Cyberspace Operations (DCO) support for Army Cyber Command (ARCYBER) and four DCO Divisions

Version - March 2018 FOR OFFICIAL USE ONLY

JUSTIFICATION REVIEW DOCUMENT

FAR PART 6 JUSTIFICATION AND APPROVAL FOR OTHER THAN

FULL AND OPEN COMPETITION

Program/Equipment: Defensive Cyberspace Operations (DCO) support for Army Cyber Command (ARCYBER) and four Defensive Cyberspace Operations Divisions

Authority: 10 U.S.C. 2304(c)(2) as implemented by FAR Part 6.302-2 -- Unusual and Compelling Urgency.

Amount: $ 29,130,704.54

Prepared by:

Contracting Officer:

Technical:

Requirements:

Deborah Wyatt Contracting Officer's Representative Email: deborah.l.wyatt6.civ@mail.mil

Michael Winslow Contracting Officer Email: michael.j.winslow6.civ@mail.mil

Deborah Wyatt Contracting Officer's Representative Email: deborah.l.wyatt6.civ@mail.mil

Deborah Wyatt Contracting Officer's Representative Emaii: deborah.I.wyatt6.civ@mail.mil

DSN: 879-6046

Date: 6 July 2018

DSN: 821-2361

Reviews: I have reviewed this justification and find it adequate to support other than full and open competition.

Program Manager:

Typed Name: Sally A. Gann, Deputy G4, NETCOM

DSN: 879-6933

Signature:

mailto:deborah.l.wyatt6.civ@mail.mil mailto:michael.j.winslow6.civ@mail.mil mailto:deborah.l.wyatt6.civ@mail.mil mailto:deborah.I.wyatt6.civ@mail.mil mailto:civ@mail.mil

Program: Defensive Cyberspace Operations (DCO) support for Army Cyber Command

Legal Counsel: ACC-APG Huachuca Division:

Typed Name: Todd J. Liebman

DSN: 821-0340

Command Advocate for Competition, ACC-APG:

Typed Name: Dennis P. Longo

DSN: 433-861-508

Signature

Chief of Contracting Office, ACC-APG Huachuca Division:

Typed Name: Debra Parra

DSN: 879-8248

Program: Defensive Cyberspace Operations (DCO) support for Army Cyber Command

Justification and Approval for Other than Full and Open Competition

FAR 6.302-2(b)(1) and (2) - - Unusual and Compelling Urgency

1. Contracting Activity: U.S. Army Contracting Command, Aberdeen Proving Ground (ACC-APG), Huachuca Division, 2133 Cushing Street, Building 61801, Room 3410, Fort Huachuca, AZ 85613-7070.

2. Description of Action: This requirement is for a Sole Source, Cost Plus Fixed Fee (CPFF) contract to Booz Allen Hamilton (BAH) for non-commercial, cybersecurity support services for the Army Cyber Command (ARCYBER) and the Network Enterprise Technology Command (NETCOM). These services support the Defense Cyberspace Operations Division (DCOD) locations (CONUS, Europe, Korea, and Pacific). The projected award date for this effort is no later than 14 August 2018.

This will be a new stand-alone contract to 'bridge' the gap between the completion of task order (TO) HC1028-08-D-2015-E102, expiring 02 September 2018, and the award of the new Regional Cyber Center (RCC) standardization contract. The strategic RCC Standardization contract will combine Defense Cyberspace Operations and Department of Defense Information Network Operations (DODIN) under one (1) combined umbrella contract. The estimated amount of $29,130,704.54.

This will be an incrementally funded, non-commercial, cybersecurity services contract with a base period of six (6) months. This contract will include FAR 52.217-8-Option to Extend Services clause to allow for up to an additional six (6) month period of performance if needed. This potential extension of this contract under FAR 52.217-8 will be evaluated at the time of contract award. This contract will be funded using fiscal year 2018 Operations and Maintenance Army (OMA) funds.

3. Description of Services: The Government has an ongoing need for cybersecurity support services for ARCYBER and the DCODs within each Regional Cyber Center (RCC) (except for Southwest Asia (SWA)). The Defensive Cyberspace Operations support for SWA is anticipated to be incorporated into the Operations, Maintenance, and Defense of Army Communications - Southwest Asia and Central Asia (OMDAC- SWACA) contract prior to 2 September 2018.

Army Cyber Command conducts and synchronizes operations across the Cyberspace Operations spectrum in support of the Army to ensure the availability, integrity, and confidentiality of the information and information systems used by commanders worldwide. DCODs provide services for the protection, monitoring, analysis, detection, and responses to unauthorized activity within the DODIN Systems, which include Non-secure Internet Protocol Router Network (NIPRNet), Secure Internet Protocol Router Network (SIPRNet), Joint Worldwide Intelligence Communicat ions Systems (JWICS), Combined Enterprise Regional Information Exchange System (CENTRIXS), and coalition networks.

Program: Defensive Cyberspace Operations (DCO) support for Army Cyber Command

The Contractor provides support for Defense Application Development and Support;

Defensive Cyber Assessments; Network Assistance Visits; Persistent Penetration Testing; Network, System and Web Assessments; Defensive Cyber Infrastructure and Development; Exercises; Reporting; Cyber Threat and Data Analysis; Network Security Monitoring , Detection , and Analysis; Incident Response and Mitigation; Live Incident Handling Analysis; Incident Response and Coordination; Attack, Sensing and Warning;

Cyber Response Team Support ; Forensic and Malware Analysis; and Intelligence Support.

BASE PERIOD

PoP: 03 Sep 18 - 02 Mar 19

CLINS:

Total Estimated Value: $14,565,352.27

- ARCYBER

- DCOD CONUS

- DCOD Pacific

- DCOD Korea

- DCOD Europe

FAR CLAUSE 52.217-8 OPTION*

PoP: 03 Mar 19 - 02 Sep

CLINS:

Total Estimated Value: $14,565,352.27

- ARCYBER

- DCOD CONUS

- DCOD Pacific

- DCOD Korea

- DCOD Europe

Total Estimated Value*: $29,130,704.54 ·Each DCOD locations will be exercised separately under FAR 52.217-8 dependent upon need. Total Estimated Value will change depending on number of locations exercised.

4. Authority Cited: 10 U.S.C. 2304(c)(2), as implemented by FAR 6.302-2, Unusual and Compelling Urgency.

5. Reason for Authority Cited: FAR 6.302-2 - - Unusual and Compelling Urgency.

6.302-2 - - Unusual and Compelling Urgency

(a) Authority.

(1) Citations: 10 U.S.C. 2304(c)(2) or41 U.S.C. 3304(a()2).

(2) When the agency's need for the supplies or services is of such an unusual and compelling urgency that the Government would be seriously injured unless the agency is permitted to limit the number of sources from which it solicits bids or proposals, full and open competition need not be provided.

(b) Application. This authority applies in those situations where

(1) An unusual and compelling urgency precludes full and open competition, and

Program: Defensive Cyberspace Operations (DCO) support for Army Cyber Command

(2) Delay in award if a contract would result in serious injury, financial or other, to the Government.

Army Cyber Command and the DCODs are responsible for conducting Cyber Defense Operations to detect, deter, disrupt, and deny adversary activities. Defensive Cyberspace Operations services are required to defend against unauthorized activity on the supported networks. This includes activities from external hackers who may attempt to gain unauthorized access, insider threat attempts, and policy violations that may impact network security and operations. The supported networks have users in every theater worldwide. Any disruption and/or degradation of our networks jeopardize communications, which is necessary for daily Army operations as well as contingencies and exercises.

Communications are critical to ensure the safety of our forces and any disruption or degradation will result in serious injury to the Government. The inability of Army Cyber Command to provide these support services for the war fighter would have a direct impact on the network support of over 660,000 customers throughout the four DCOD locations and may cause vulnerabilities in the security of the LandWarNet.

The DCOD mission is critical to the U.S. Army. Any gap in service could result in complete mission failure. This interim contract will need to be put in place no later than 03 September 2018 in order to ensure that protection of Army networks are seamlessly secured.

Pursuant to FAR Part 6.302-2(b)(1) and (2)

The Government's need for continued services is of such an unusual and compelling urgency that the Government would be seriously injured unless the agency is permitted to limit the number of sources from which to solicit proposals. The time constraints between the completion of the current TO and the anticipated umbrella contract do not allow sufficient time for successful completion, evaluation, and transition of a new contractor. Applying competitive action for this effort will introduce unacceptable and catastrophic risk and predicted failure to this program. This is a highly sensitive and critical program operating under very constrained, critical timelines associated with the follow-on contracts for ARCYBER, and the four DCODs in Continental United States (CONUS), Europe, Korea, and Pacific.

DELAYS in the RCC Standardization Contract Only the current DCO contract is a global contract supporting ARCYBER and the five DCODs in the Pacific, Europe, Korea, Southwest Asia (SWA), and CONUS. After the current contract was awarded, the DCODs merged with the Regional Cyber Centers (RCC). Because of the merger, the decision was made to combine the DCOD contract requirements with the RCC contract requirements during the RCC contract re-competes because the Army is baselining it's Enterprise Network Strategy; and ARCYBER and NETCOM are regionally standardizing RCC Department of Defense Information Network (DODIN) operations and DCO support services for each RCC location. The Regional

Contractor: Boaz Allen Hamilton

Program: Defensive Cyberspace Operations (DCO) support for Army Cyber Command

Cyber Centers' contracts expire at different times and are currently in different stages of the acquisition process. Because of these acquisition challenges, the RCC contract re-compete packages were delayed. This Justification and Approval will ensure that the services continue so the packages can be completed and new contracts can be competitively solicited and awarded, and services consolidated to enhance network protection.

The immediate need for a large number of employees with Top Secret/Sensitive Compartmented Information (TS/SCI) security clearances and DoD 8570.01-M certification qualifications for personnel supports the use of the authority of unusual and compelling urgency. It is highly improbable that there could be a transition from the incumbent contractor to a new contractor without experiencing a break in service. The current contract is supported by contractor employees possessing TS/SCI clearances and who meet the specific technical and functional certification requirements outlined in

DoD 8570.01-M, Information Assurance Workforce Improvement Program and Army Regulation (AR 25-2), Information Assurance (IA).

It is not in the Government's best interest to bring on a new contractor prior to executing competitive awarded contracts for ARCYBER, and the DCOD locations. The two main reasons are: (1) a change in contractor will likely result in the loss of essential DoD 8570.01M certified and TS/SCI cleared contract employees making it difficult for a new contractor to meet full performance by the contract start date, and (2) a new contractor would essentially duplicate the phase-in costs for the customer.

The incoming contractor must have employees who meet clearance and certification standards on contract start date. Receipt of DoD 8570.01-M and AR 25-2, IA and Information Technology (IT) certifications are a process that could take anywhere from six months to a year. In addition to IA certifications, background investigations for TS/SCI security clearances are taking anywhere from six months to an unspecified time period negatively affecting a new contractor's ability to perform this requirement and necessitating a performance phase-in period. A minimum 30-day phase-in period is needed for the transition of complex mission tasks and personnel. Phase-in costs for this requirement are estimated at approximately $1 million, based on the requiring activity's Independent Government Cost Estimate (IGCE) submitted as part of the Requirements Package for this contract.

Failure to award a sole source contract will result in duplication of the $1 million phase-in costs, since these costs will be incurred again when the competitive follow-on contracts are awarded. The Defensive Cyberspace Operations contract requires highly technical and diverse employees to possess Top Secret (TS) clearances in a highly competitive labor pool. Changing contractors for this extension would seriously disrupt mission performance and result in duplicative costs, which would not be recouped.

Background/Facts leading to need for Extension Services:

On 3 March 2015, contract HC1028-08-D-2015-2T02, was competitively awarded to Booz Allen Hamilton (BAH). The requirement was awarded as a Cost Plus Fixed Fee

Contractor: Booz Allen Hamilton contract for non-personal cybersecurity services in support of ARCYBER and the five DCODs located in Pacific, Europe, Korea, Southwest Asia, and CONUS. The current contract will expire on 02 September 2018.

A re-compete contract for ARCYBER headquarters is being worked through General Service Administration (GSA) with an anticipated award date of 1 January 2019, with full performance beginning 1 March 2019. A re-compete contract for RCC Pacific which includes the DCOD requirements is anticipated to be awarded no later than 1 June 2019 with full performance beginning 26 August 2019. A re-compete contract for RCC Europe which includes the DCOD requirements is anticipated to be awarded no later than 7 June 2019 with full performance beginning 19 July 2019. An approved package for standalone re-compete contract for DCOD Korea was submitted to contracting on 21 May 2018. A contract for DCOD Korea is anticipated to be awarded no later than 1 January 2019, with full performance 3 March 2019.

A re-compete contract for RCC CONUS, which includes the DCOD requirements, is anticipated to be awarded no later than 1 January 2019 with full performance 03 March 2019. Therefore, it is necessary to issue an interim sole source contract for the period of 03 September 2018 through 02 March 2019. This contract shall not exceed 12 months.

PREDICTED TIMELINES

CONTRACT SERVICES DATES

Current DCOD Contract DCO Services End 02 Sep 18

DCOD Contract DCO Services 03 Sep 18-02 Mar19 .(six(6)month base)

Re-compete RCC-E Contract W/DCOD requirements

DODIN and DCO Services

7 Jun 19 Est award

6. Efforts to Obtain Competition: It is not feasible at this time to obtain offers from other potential sources because of the brief performance period required and the short time in which to get the contract in place. The current services are being performed by Booz Allen Hamilton, located at 8283 Greensboro Drive, McLean, VA 22102-3830.

COMPANY LOCATION CAPABILITY/EXPERIENCE

APS Global, LLC Riverdale, MD SDVOSB. Specializes in cybersecurity, communications, and telecommunications.

Carahsoft Technology Corp

Reston, VA LB. Hardware and Software support.

Black Flag Technology Pasadena, MD

SDVOSB. Intelligence analysis, malware analysis, penetration testing and cyber related research and development services.

Contractor: Booz Allen Hamilton

Perfecta, Federal LLC. Springfield, VA

SDVOSB. Interoperable open architecture, intelligence, surveillance, reconnaissance, and cyber solutions.

7. Actions to Increase Competition: It is not feasible to compete the current acquisition because only one known source can meet the agency's need for the accelerated and abbreviated time frame. It is also not feasible to separate out any requirements for separate competitive actions. However, the follow-on action will be procured to promote full and open competition and will be competed at the maximum extent possible.

The milestone schedule for DCO services in support of ARCYBER is provided in the table below:

Milestone Event Projected date Actual Date

Receive Complete Package

29 June 2018

RFP Letter (ROM) STG 15 June 2018 15 June 2018 J&A Approval (PARC) 10 July 2018

DD 2579 10 July 2018

Acquisition Strategy 17 July 2018 Issue SRB 17 July 2018

Q&A Period 23 July 2018

Proposal Due 27 July 2018 Proposal Evaluation 27-31 July 2018 PCM/Negotiations 1 August 2018 CRB 3-7 August 2018

Congressional Notification

9 August 2018

Award 14 August 2018

8. Market Research: Due to the follow-on nature of this requirement, market research was limited to the synopsis posted to FedBizOpps. The synopsis was posted on 14 May 2018 for 15 days and five businesses expressed interest to the posting.

9. Interested Sources: The approved justification will be made publically available in accordance with FAR 6.305(b). Any interest received as a result of this publication will be considered.

10. Other Facts:

a. Procurement History:

(1) Contract numbers and dates of the last several award:

Contractor: Booz Allen Hamilton

W911W4-09-D-0002-0001, awarded (29 March 2009). Sole Source task order under competed Single Award IDIQ.

W911W4-09-D-0002-0002, awarded (02 June 2009). Sole Source task order under competed Single Award IDIQ.

HC1028-08-D-2023-2T01, awarded (27 September 2012). Competitive HC1028-08-D-2015-2T02, awarded (3 March 2015). Competitive HC1028-08-D-2015-E102, awarded (3 March 2016).

(2) The competitive status of these actions.

HC1028-08-D-2015-2T02 was awarded using full and open competition and received four offers. Army Contracting Command - Aberdeen Proving Ground (ACC-APG) Huachuca Division assumed administrative responsibility on 18 May 2015 for task order HC102-08-D-2015-2T02 from Army Contracting Command - New Jersey.

11. Technical Certification: I certify that the supporting data under my cognizance which are included in the justification are accurate and complete to the best of my knowledge and belief.

Typed Name: Deborah L. Wyatt Title: Contracting Officer's Representative

12. Requirements Certification: I certify that the supporting data under my cognizance which are included in the justification are accurate and complete to the best of my knowledge and belief.

Typed Name: Deborah L. Wyatt Title: Contracting Officer's Representative

X

Contractor: Booz Allen Hamilton

13. Fair and Reasonable Cost Determination: I hereby determine that the anticipated cost or price to the Government for this contract action will be fair and reasonable.

This determination will be made using the following: X cost analysis X price analysis

As a part of this basis, certified cost or pricing data:

X will be required.

Typed Name: Michael J. Winslow Title: Contracting Officer

14. Contracting Officer Certification: I certify that this justification is accurate and complete to the best of my knowledge and belief.

Typed Name: Michael J. Winslow Title: Contracting Officer

Contractor: Booz Allen Hamilton

Approval

Based on the foregoing justification, I hereby approve the procurement of Defensive Cyberspace Operations (DCO) support for Army Cyber Command (ARCYBER) and four Defensive Cyberspace Operations Divisions on an other than full and open competition basis pursuant to the authority of 10 U.S.C.2304(c)(2)as implemented by FAR Part 6.302-2 - Unusual and Compelling Urgency, subject to availability of funds, and provided that the services herein described have otherwise been authorized for acquisition.

TYPED NAME: Kenyata L. Wesley, SR.

Principal Assistant Responsible for Contracting (PARC)

Date: