Brand Name Justification - SpyCloud Investigations_Redacted.pdf

DEPARTMENT OF THE NAVY

H E AD QUA RT ER S

NA VA L CR I MINA L INV E S TIG A TIV E S ER VI CE

2 713 0 TE L E GRA PH RO AD

Q UAN T IC O VA 2 213 4 - 22 53

JUSTIFICATION AND APPROVAL

FOR USE OF OTHER THAN FULL AND OPEN COMPETITION

1. Contracting Activity. Naval Criminal Investigative Service-Headquarters (NCIS-HQ), Business Operations Directorate, Acquisition Division

2. Description of the Action Being Approved.

Award of a contract on a sole source basis for supplies/services.

Award of a contract on a brand name basis for supplies/services.

3. Description of Supplies/Services.

Supplies or services to be acquired:

NCIS requires a tool that scours the dark and deep web for instances of compromised DON credentials, data stolen from the DON due to cyber breaches, and other information which could compromise the DON’s cyber infrastructure.

Qty Description Part Number

1 Spy Cloud Investigations Web Portal Access INV-SEAT

FISCAL YEAR APPROPRIATION AMOUNT

2025 OM&N

Periods of Performance (TBD by date of award):

Aug 2025 – Aug (Base) Aug 2026 – Aug 2027 (OY1) Aug 2027 – Aug 2028 (OY2)

4. Statutory Authority Permitting Other Than Full and Open Competition. (Select only one.)

10 U.S.C. 3204(a)(1), Only One responsible source and no other supplies or services will satisfy agency requirements.

10 U.S.C. 3204(a)(2), Unusual and compelling urgency.

10 U.S.C. 3204(a)(3), Industrial mobilization; engineering, developmental, or research capability; or expert services.

10 U.S.C. 3204(a)(4), International agreement.

10 U.S.C. 3204(a)(5), Authorized or required by statute.

10 U.S.C. 3204(a)(6), National Security.

10 U.S.C. 3204(a)(7), Public Interest.

5. Rationale Justifying Use of Cited Authority. The acquisition is being conducted under the procedures of FAR 13.106-1(b)(1)(i) – Soliciting from a single source. The justification rationale for restricting competition is the following: The software needed is manufactured by, and proprietary to, SpyCloud, which is the only manufacturer of the SpyCloud products and licenses.

This software is the only product that can meet the Government’s current investigative needs.

6. Specific characteristics of the supplies or services that limit the availability to this/these source(s), i.e., unique features, form-fit-function, etc. State why the requested material or service represents the minimum requirement(s) of the Government. Describe in detail why only this/these suggested source(s) can furnish the requirement(s) to the exclusion of other sources.

Spy Cloud quickly gathers relevant information pertaining to the users searches and retrieves the relevant data. Spy Cloud can assess and draw comparisons to similar cyber breaches making it easier to identify the cyber actor responsible for the breach. Spy Cloud’s user interface allows for rapid analysis of the data in one place allowing the user to draw conclusions and bring closure to cases in a timely manner. Spy Cloud provides continuous training and customer service support throughout the lifetime of the contract ensuring the users receive the proper support and training needed to properly utilize the tool.

Other tools were tested for similar capabilities, but were not comparable although all products cost approximately the same amount. SpyCloud has the easiest to navigate user interface. With SpyCloud’s amount of data provided, accuracy of the data, and timeliness of the data, it is clearly the best product to suit the NCIS mission.

7. Determination of fair and reasonable pricing.

Pricing will be reviewed prior to award based on price analysis techniques available per FAR 13.106(a).

8. Brief description of Market Research conducted and results, or why market research was not conducted.

Trials of multiple different companies which provide the same type of breach data were conducted.

Trial participants evaluated the data received from the companies against suitability of the data for the NCIS mission, reliability of the data, feasibility of use of the data and the product UI, and cost of the product. Products were analyzed for suitability, feasibility, reliability, and cost to determine the best product. All products were discovered through publicly available means and contacted via email to start initial discussions. Post-trial evaluations were discussed with the participants and a determination of the best product was made using the user’s evaluations. SpyCloud far exceeded expectations by providing the most accurate and up to date information and intelligence.

Additional market research was conducted to identify sources, both mandatory and preferred sources, and there is adequate competition from resellers. It was determined a full and open competition would be in the best interests of the Government.

9. Any other factors supporting use of other than full and open ex., National Security, etc.: N/A

10. Listing of sources (Name, Address, POC)

Manufacturer: SpyCloud Manufacturer’s POC/Phone/Email: John MacKay; 703-650-8931; John.MacKay@spycloud.com Manufacturer’s Address: 2103 S. Congress Ave Austin, TX 78704

Official Distributor: Carahsoft; 11493 Sunset Hills Rd Reston, VA; Yazan Sarraj;

Yazan.Sarraj@Carahsoft.com

Resellers: Multiple