Brand Name Justification.pdf

SINGLE SOURCE JUSTIFICATION NOT EXCEEDING THE SIMPLIFIED ACQUISTION

THRESHOLD

SECTION 1: IDENTIFICATION OF THE AGENCY AND THE CONTRACTING ACTIVITY

Department of State

Contracting Activity IZI Overseas Post - Kyiv, Ukraine (INL KYIV)

Requiring Activity Bureau of International Narcotics and Law Enforcement Affairs (INL), U.S. Embassy in Ukraine

SECTION 2: NATURE AND/OR DESCRIPTION OF THE ACTION BEING APPROVED

Approval is requested to solicit and award, on a competitive basis, to an Apple Business Manager (ABM)-linked

Apple Authorized Reseller for the procurement of Apple iPhone 17 mobile devices and associated warranty, enrollment readiness, and technical support services described in Section 3, on behalf of a key host-government law enforcement partner agency.

SECTION 3: DESCRIPTION OF SUPPLIES/SERVICES REQUIRED TO MEET THE AGENCY'S NEEDS

The requirement is to provide 100 factory-new Apple iPhone 17 devices (256 GB storage, 8 GB RAM, Apple A19 chip), Mobile Device Management (MDM) licensing, and 12-month warranty and technical support services, for delivery to the

U.S. Embassy in Ukraine, 4 lhor Sikorsky St., Kyiv, 04112, Ukraine.

The estimated value for the supply commodity mentioned is ____ which falls under the Simplified

Acquisition Threshold. This requirement stems directly from the Stage 1 mobile device assessment conducted under RFP-UA-08-2026, which found that the partner agency currently has no Mobile Device

Management infrastructure and that personnel rely on unmanaged personal devices for professional and operational communications. This creates a material risk to the confidentiality of investigative data and sensitive operational activity.

As an active law enforcement agency operating in a high-threat environment, the partner agency faces elevated risks including:

• Remote exploitation of mobile devices

• Malicious links or applications

• Network-level attacks

• Physical seizure of devices

• Faraday cage isolation scenarios designed to defeat remote wipe capability

These conditions require enforceable technical controls, not policy guidance alone. The devices shall enable centralized enrollment, security policy enforcement, application management, managed network access, compliance monitoring, device lock, remote wipe, and local wipe after failed authentication attempts -transitioning the partner agency from unmanaged use to a controlled enterprise mobile environment.

All devices must be new, unlocked, certified for use in Ukraine, and never previously assigned to any Apple

Business Manager account, MOM system, Apple ID, or carrier account. The awarded vendor must procure devices through an ABM-linked Apple Authorized Reseller capable of assigning devices directly to the partner agency's ABM account for zero-touch Automated Device Enrollment (ADE}, and must complete delivery, ABM assignment, and enrollment readiness confirmation within 90 calendar days of Purchase Order receipt. This acquisition supports the establishment of a secure technical foundation for the partner agency's mobile operations and directly advances U.S. Government assistance objectives to a critical host-government partner.

SECTION 4: IDENTIFICATION OF THE STATUTORY AUTHORITY PERMITTING OTHER THAN

FULL AND OPEN COMPETITION

In accordance with Federal Acquisition Regulation (FAR} 13.106-l(b}(l}, the Contracting Officer has deemed only one source reasonably available based on the following:

IZI Brand-name

SECTION 5: DEMONSTRATION THAT THE PROPOSED CONTRACTOR'S UNIQUE

QUALIFICATIONS OR THE NATURE OF THE ACQUISITION REQUIRES USE OF THE AUTHORITY

CITED

The Apple iPhone 17 is required as the specified brand-name platform because the partner agency's operational requirements cannot be satisfied through generic mobile device procurement. The Stage 1 assessment identified specific, high-consequence threat scenarios - remote exploitation, physical seizure, and Faraday cage isolation defeating network-based remote wipe - that demand a platform combining hardware-backed protection, OS-level security enforcement, supervised enterprise management, and zero-touch MDM enrollment.

The iPhone 17 uniquely provides the full combination of security capabilities required for the partner agency's threat profile, including:

• Lockdown Mode

• Secure Enclave-based key protection

• Face ID and strong passcode enforcement

• Hardware-backed encryption

• USB Restricted Mode

• Automatic reboot after inactivity

• Local wipe after failed authentication attempts

SECTION 6. DETERMINATION BY THE CONTRACTING OFFICER THAT THE ANTICIPATED COST

TO THE GOVERNMENT IS FAIR AND REASONABLE

• MDM-enforced controls over applications, notifications, data transfer, and network access Android-based alternatives were reviewed and rejected because no evaluated Android platform offers the same integrated combination of Lockdown Mode, platform-enforced side-loading restriction, Secure Enclave-based key protection, ABM/ADE supervised enrollment, mature MDM compatibility, and consistent policy enforcement necessary for this deployment. The brand-name requirement is therefore based strictly on documented security and enrollment-architecture necessity - not brand preference.

Apple's status as a U.S.-based technology provider, with a mature enterprise device management ecosystem, long-term OS support, and an established Apple Business Manager/authorized reseller framework, further supports a trusted, scalable, and supportable mobile security architecture for this key law enforcement partner.

INL Kyiv conducted market research using GSAAdvantage and historical purchase data. This research confirmed that no comparable alternative platform meets the combined security and enrollment requirements identified in the Stage 1 assessment. Multiple ABM-linked Apple Authorized Resellers exist in the marketplace and are expected to be capable of competing for this requirement.

The awarded vendor must be an Apple Business Manager-linked Apple Authorized Reseller (or Apple-approved Reseller channel) capable of assigning devices directly into the partner agency's ABM account for zero-touch Automated Device Enrollment. Devices that cannot be assigned to the partner agency's ABM account or enrolled via ADE will be considered non-compliant and must be replaced by the vendor at no additional cost -underscoring that only a reseller channel with direct Apple-authorized ABM assignment capability can fulfill this requirement.

By signing the justification, the Contracting Officer makes a determination that the price to the Government is anticipated to be fair and reasonable.

Page3 of 4

SECTION 7. CERTIFICATIONS

All reviews and approvals should be completed in the order listed unless otherwise authorized or required.

REQUIREMENTS CERTIFICATION

I certify that the facts and representations under my cognizance which are included in this Justification and its supporting acquisition planning documents, except as noted herein, are complete and accurate to the best of my knowledge and belief.

Requirements Cognizance:

SIGNATURE:

INL Management Officer

INL Kyiv

CONTRACTING OFFICER CERTIFICATION

7/31/2026

Date

I certify that this submission is accurate to the best of my knowledge, and that it contains complete information necessary to enable other officials to make an informed recommendation for approval or disapproval.

Alan Eaton

Contracting Officer

Kyiv, Ukraine

Date