DJA-24-ASEP-PR-0203 - JOFOC Below SAT - Redacted.pdf

Version 20220201

The estimated cost for this equipment purchase is $42,488.00 with a Required Delivery Date (RDD) no later than 364 days after purchase order award.

Services:

This action is to acquire services from one of the 2 uniquely qualified integrators to include installation of the supply components to facilitate FIPS 201-2 compliance. The period of performance is for a one (1) year period starting on the award date for an estimated installation cost of $14,430.00.

Low Voltage Technician 37 HR $130 $4810

Low Voltage Technician II 37 HR $130 $4810

Low Voltage Technician III 37 HR $130 $4810

Estimated total cost for all Supply and Services included in this procurement is: $56,918.00.

4. Identify statutory authority permitting limiting sources. Cite the authority under one of the exceptions listed under FAR 6.302.

FAR 6.302-1 Only one responsible source and no other supplies or services will satisfy agency requirements.

FAR 6.302-2 Unusual and compelling urgency.

FAR 6.302-3 Industrial mobilization; engineering, developmental, or research capability;

or expert services.

FAR 6.302-4 International agreement.

FAR 6.302-5 Authorized or required by statute.

FAR 6.302-6 – National Security

FAR 6.302-7 Public Interest

5. A statement demonstrating the unique qualifications of the proposed contractor or the nature of the action requiring use of the authority.

In accordance with FAR 6.302-6 National Security:

“(2) Full and open competition need not be provided for when the disclosure of the agency’s needs would compromise the national security unless the agency is permitted to limit the number of sources from which it solicits bids or proposals.”

Execution of the Lexington project requires critical details of PSPB intrusion countermeasures and access to floorplans, surveillance techniques, and equipment. Although the components used for this project are publicly available, the equipment list itself is sensitive in nature because it provides adversaries with information which could be used to engineer methods to bypass physical security systems. Furthermore, this system requires specific installation practices that must be clearly defined and understood by the integrator so they can provide an accurate quote. The methodology used to install the components is also sensitive, as understanding the wiring and engineering behind the installation can also provide a means of bypassing the system. Finally, floorplans detailing the locations of physical security components, in conjunction with sensitive details of the office layout are critical for an integrator to calculate the installation cost. Floorplans could be used by an adversary for a variety of nefarious purposes ranging from engineering a method of intrusion, to designing potential attacks on ATF personnel and facilities. Therefore, publication of these details on a public forum compromises the security of PSPB facilities and personnel constituting a violation of ATF OPSEC policy. Therefore, PSPB is required to limit the number of integrators who have access to this information and provide disclaimers for the release of said information.

Although many companies can procure and install FIPS 201-2 equipment, it is complex work that frequently requires follow-up visits. Integrators must be authorized value-added resellers, must have a local presence, and cannot use unqualified subcontractors. LENEL, the manufacturer of the FIPS equipment used by ATF, has an internal certification process for vendors who install FIPS 201-2 equipment for Federal clients. To prevent unnecessary follow-up costs, downtime, and maintenance costs PSPB needs to solicit bids from Lenel certified integrators with local personnel.

This project interfaces with a much larger customized system. PSPB’s access control system is a nationwide customized system connecting all ATF facilities. The complexity of this system requires consistency in the methodology and procedures used to integrate new offices. For the sake of consistency in a complex system, it is important to limit the number of integrators working on the system. Soliciting bids to known 8E integrators whenever reasonable is critical to maintaining consistency in a highly complex system.

In conclusion, PSPB has determined ATS Integrated Solutions and Midwest Security Services are uniquely qualified and have met the vendor requirements. PSPB recommends limiting the disclosure of the required information to these two sources to mitigate the subsequent security risks inherent to disclosure, while still providing an acceptable level of competition.

6. Certifications.

Co-Prepared by:

As the Contracting Officer’s Representative (COR) or Government’s Technical Representative (GTR), I certify the above information is accurate to the best of my knowledge and contains complete data/information necessary to support the recommendation and the basis for this justification.

David Harjo, Program Office Physical Security Specialist – ATF PSPB

As the Contracting Officer and based on the information presented by the program office, the information is complete and accurate to the best of my knowledge, and it is in the best interest of the US Government to pursue other than full and open competition for this requirement.

Brian Palmer, Contracting Officer Office of Management - Acquisitions