Sophos_Brand_Name_Justification_20170830.pdf

Justification for Other Than Full and Open Competition Brand Name

1. REQUIRING AGENCY AND CONTRACTING OFFICE:

Requiring Agency: USDA, AMS, Cyber Security Division 1400 Independence Ave., SW Washington, DC 20250

Contracting Activity: USDA, AMS, Cotton and Tobacco Program 100 Riverside Parkway Suite 101 Fredericksburg, VA 22406

2. NATURE/DESCRIPTION OF ACTION BEING APPROVED:

Purchase of Sophos Security Suite. After a series of Proofs of Concept, Sophos is the only solution that met the features and manageability needed by the Agricultural Marketing Service.

3. DESCRIPTION OF SUPPLIES/SERVICES:

USDA, Agricultural Marketing Service (AMS) seeks to purchase the Sophos Endpoint Security Suite. This software will replace the Malwarebytes Security Suite. The implementation of the Sophos security solution will provide advanced threat protection for endpoints in addition to signature based antimalware protection.

4. IDENTIFIATION OF THE JSUTIFICATION RATIONALE AND, IF APPLICABLE, A

DEMONSTRATION OF THE PROPOSED CONTRACTOR’S UNIQU

QUALIFICATIONS TO PROVIDE THE REQUIRED SUPPLE OR SERVICE:

A brand name specific award is in the best interest of the government based on testing conducted by AMS Cyber Security of leading competitors in the Endpoint Protection Arena. After testing Malwarebytes, SentinelOne, Cylance, Invincea, Dell, and Sophos it has been determined that Sophos is the only provider with a solution that provides the Advanced Threat Protection AMS sought while also being manageable by the small security team currently supporting AMS. The Sophos solution stood out amongst its competitors based on its ease of deployment, management, and reporting.

5. IDENTIFICATION OF THE STATUTORY AUTHORITY:

41 U.S.C. 3304(a)(1) as implemented by Federal Acquisition Regulation (FAR) 6.302- 1(c) Application for brand-name descriptions.

6. A DESCRIPTION OF EFFORTS MADE TO ENSURE THAT OFFERS ARE

SOLICITED FROM AS MANY POTENTIAL SOURCES AS IS PRACTICABLE,

INCLUDING WHETHER A NOTICE WAS OR WILL BE PUBLICIZED AS

REQUIRED BY SUBPART 5.2 AND, IF NOT, WHICH EXCEPTION UNDER 5.202

APPLIES:

AMS Cyber Security tested six endpoint protection solutions, to include: Malwarebytes, SentinelOne, Cylance, Invincea, Dell, and Sophos. Sophos is the only product that provided the features, reporting, and manageability required by AMS Cyber Security.

7. A DETERMINATION BY THE CONTRACTING OFFICER THAT THE

ANTICIPATED COST TO THE GOVERNMENT WILL BE FAIR AND

REASONABLE:

In determining a fair and reasonable price, the Contracting Officer will do a price analysis of similar products including licensing fees, support, training costs, etc.

https://www.acquisition.gov/sites/default/files/current/far/html/Subpart%205_2.html#wp1107980 https://www.acquisition.gov/sites/default/files/current/far/html/Subpart%205_2.html#wp1107990

8. TECHNICAL CERTIFICATION:

I certify that the fact and representations under my cognizance which are included in this justification are accurate and complete to the best of my knowledge and belief.

Name: Joshua M. Camiré Date: 08/30/2017 Title: Director (Acting), Cyber Security Division, USDA|AMS|ITS Signature/Date:

9. CONTRACTING OFFICER CERTIFICATION:

I certify that the justification is accurate and complete to the best of the contracting officer’s knowledge and belief.

Name: Beverly Brown Date: 08/30/2017 Title: Contracting Officer, AMS, Cotton and Tobacco Program Signature/Date: