Attachment 2_JOFOC_Magnet Forensics Axiom Cyber.pdf

Solicitation: 75H70426Q00047 Page 1 of 3

Rev. 11/14/2025

JUSTIFICATION FOR OTHER THAN FULL AND OPEN COMPETITION (Over SAT)

***THIS ONLY JUSTIFIES THE BRAND NAME DESCRIBED AS FOLLOWS ***

Pursuant to Revolutionary FAR Overhaul (RFO) 12.102, for acquisitions valued over the simplified acquisition threshold (SAT) using RFO 12.201-1 Simplified Procedures for commercial products and services

1. Acquisition Title: Enterprise Digital Forensics Software Subscription and Technical

Support (Brand Name: Magnet Forensics AXIOM Cyber)

Division: Indian Health Service (IHS) Office: Office of Management Services (OMS) Contracting Activity: Division of Acquisition Policy (DAP) Author: Daniel Poehling, Contacting Officer

2. Nature and/or Description of the Action being Approved: The Office of Information Technology (OIT)/Division of Information Security (DIS) is requesting a firm-fixed price purchase order to acquire brand-name, commercial off-the-shelf (COTS) Magnet Forensics Axiom Cyber platform to replace multiple legacy digital forensics platforms. The Government projects an award for September 2026 using fiscal year (FY) 2026 funds.

3. Description of Supplies/Services and Estimated Cost: IHS OIT/DIS is requesting a new, firm-fixed-price (FFP), purchase order for brand-name, commercial off-the-shelf (COTS) Magnet Forensics AXIOM Cyber software platform to support its Computer Security Incident Response Team (CSIRT) with a modern digital forensics investigation (DFI) capability across the IHS orgaization. The Magnet Forensics AXIOM Cyber software platform will provide a single integrated Digital Forensics and Incident Response (DFIR) platform by replacing the fragmented legacy forensic platforms across multiple vendors with separate licensing, inconsistent coverage across endpoint types, and limited cloud acquisition capability.

Magnet AXIOM Cyber is the only COTS solution identified by IHS OIT/DIS that can provide a single DFIR platform that will operate within the existing DFI network enclave, simplify investigative workflows and allow CSIRT to easily acquire, preserve, analyze, and report on digital evidence during IHS security incidents and to satisfy federal cybersecurity mandates.

The estimated value of covers a base period and four option periods.

Period Dates/Duration Total Estimated Cost

Base Period 2026-2027 / 12 months

Option Period One 2027-2028 / 12 months

Option Period Two 2028-2029 / 12 months

Option Period Three 2029-2030 / 12 months

Option Period Four 2030-2031 / 12 months

Total Estimated Cost

*Base period includes a one-time estimated price for the Core Training Voucher, VeraKey Device, and shipping and handling.

** Annual escalation is for each option period.

Solicitation: 75H70426Q00047 Page 2 of 3

4. Authority: This sole source acquisition is being conducted under RFO – FAR 12.201-1 simplified procedures for covered actions > SAT, ≤ $9 million pursuant to

41 U.S.C. 1901. (THIS JUSTIFICATION ONLY JUSTIFIES THE BRAND NAME)

The contracting officer has determined that only one source is reasonably available based on the following rationale: The acquisition of an other-than-requested (OTR) software platform would result in substantial duplication of cost to the Government that is not expected to be recovered through competition. IHS OIT/DIS identified Magnet Forensics AXIOM Cyber as the only COTS single DFIR platform that can be rapidly adopted to successfully replace the multiple legacy platforms while meeting the agency’s remote, cloud, and mobile forensic requirements. The organization has a significant need for the single DFIR platform to simplify investigative workflows across the organization and comply with recent federal cybersecurity mandates concerning cybersecurity modernization and Zero Trust Architecture (ZTA) advancement. Failure to continue with the standardization of the specified single DFIR platform will have significant long-term impacts to strategic goals for reducing operational costs by increased training costs to support multiple DFIR platforms, maintaining multiple licensing agreements, and increased integration costs for non-standardized software platforms. Additionally, Magnet Forensics AXIOM Cyber meets the stringent Federal requirements for IT security on federal networks. The organization has the resources to ensure Magnet Forensics AXIOM Cyber can be integrated to meet Federal security requirements and comply with federal mandates.

Alternative DFIR platforms discussed in Market Research Report have failed to meet the features and immediate needs of the organization.

5. Special Considerations for Certain Contract Extensions or Bridge Contracts:

N/A

6. Actions to Increase Competition: The Contracting Officer posted Pre-solicitation Notice IHS-26-PSN-1530164 on SAM.gov from July 17 to August 03, 2025, seeking to identify Indian Small Business Economic Enterprises (ISBEEs) to satisfy this requirement.

7. Market Research: Buy Indian Act Focused Market Research: Pursuant to 48 CFR Part 326, Subpart 326.603-3 and IHM 5.5-6, Indian Health Service must use the negotiation authority of the Buy Indian Act, 25 U.S.C. 47, to give preference to Indian Economic Enterprises (IEE) whenever the use of that authority is authorized and practicable. Two (2) ISBEEs responded to the Pre-solicitation Notice: DT-Trak Consulting, Inc. (UEI VFJ3AL7FM3K5) and FedTribe, LLC (UEI H1LMRXJG66H3). Both vendors are authorized value-added resellers (VAR) of the Magnet Forensics Axiom Cyber Software Platform.

Based on the results of the research, there are at least two ISBEE’s available to provide the Magnet Forensics Axiom Cyber software platform. Based on the market research results, this requirement will be procured under the authority of RFO Part 12 and should be competed as an ISBEE set-aside.

8. Procurement History: N/A

9. Additional Information to Support the Justification: N/A

Solicitation: 75H70426Q00047 Page 3 of 3

10. Fair and Reasonable Price/Cost Determination: As Contracting Officer, by my signature below (see item 12), I hereby determine that the anticipated price/cost to the Government for this contract action will be fair and reasonable. The Contracting Officer determines that the anticipated price(s) will be fair and reasonable based on a comparison of quoted prices to historical rates, and competitive pricing in the commercial market.

11. Contracting Officer's Approval: I hereby certify that this justification is accurate and complete to the best of my knowledge and belief.

Name

Signature