ECC_CJA_Red.pdf

DEPARTMENT OF THE NAVY

COMMANDER

NAVAL FACILITIES ENGINEERING SYSTEMS COMMAND PACIFIC

258 MAKALAPA DRIVE SUITE 100

PEARL HARBOR HI 96860-3134

IN REPLY REFER TO:

J&A No. 25-027

CLASS JUSTIFICATION AND APPROVAL

FOR USE OF OTHER THAN FULL AND OPEN COMPETITION

1. Contracting Activity:

Department of the Navy, Naval Facilities Engineering Systems Command, Pacific (NAVFAC Pacific), Joint Base Pearl Harbor-Hickam, Hawaii.

2. Description Of The Action Being Approved:

This Class Justification and Approval (CJ&A) authorizes and approves, on a brand-name basis, the use of the following elevator control systems manufactured by Elevator Controls Corporation (ECC), a Vantage Company:

Pixel Traction Control Pixel Hydraulic Control

These elevator control systems are required for all traction and hydraulic elevators to be installed under projects in support of the Marine Corps’ Defense Policy Review Initiative (DPRI) Guam Program. Primary location of projects will be on Marine Corps Base Camp Blaz (MCBCB), Naval Base Guam (NBG), and Andersen Air Force Base (AAFB).

These elevator control systems, as specified under Paragraph 3 below, are authorized under this CJ&A regardless of method of execution or procurement strategy (i.e., contracted, in-house shop forces, base operating support contracts, or materials supply chain contractors).

This CJ&A supersedes CJ&A No. 21-0013 for the use of ECC elevator control systems for the DPRI Program, which expires on 30 September 2025. The authority to act under this CJ&A expires on 30 September 2030.

3. Description Of Supplies/Services:

The Pixel Traction Control and Pixel Hydraulic Control, both manufactured by ECC, are elevator control systems which are a type of programmable building controller that monitor and control the elevator(s) for a building. The Pixel Traction Control and Pixel Hydraulic Control:

Consist of several hardware components including, but not limited to, the Elevator Controller User Interface System and the Human Machine Interface (HMI) System.

Consist of all software necessary to operate the systems including, but not limited to, the Elevator Controller User Interface System Software and the HMI System Software.

The use of the Pixel Traction Control and Pixel Hydraulic Control for the 6 construction projects/buildings in Guam allows for a single manufacturer’s uniform elevator control systems, rather than multiple manufacturers, which will provide the lowest operation and maintenance costs associated with cybersecurity. The Government has determined that the Pixel Traction Control and Pixel Hydraulic Control are the only known elevator control systems to allow for an “intermediate” accreditation boundary since it does not need to connect to an IP network and allow all elevator controllers to have exactly the same Elevator Controller User Interface System, Elevator Controller User Interface System software, Elevator Control System HMI, and Elevator Control System HMI software in order to perform its required functions. This inherently eliminates the initial costs for establishing additional Authority to Operate (ATO) and eliminates additional annual ATO sustainment costs associated with the use of multiple elevator control systems by other manufacturers.

Due to its physical makeup and operational capabilities to perform its designed functional use, an elevator control system, including the supporting software, are considered Information Technology (IT) and falls under the auspices of DoD Instruction 8510.01, Risk Management Framework (RMF) for DoD Information Technology (IT), which requires the authorization for its use to be processed through the Risk Management Framework (RMF) process.

The RMF is the DoD process for applying cybersecurity to IT due to its vulnerability to cyberattacks posing negative impacts to the military’s operational missions. The methods used for obtaining cybersecurity through the application of the RMF process are promulgated in the Unified Facilities Criteria (UFC) 4-010-06 and is comprised of the following 6 steps:

1. Categorize the System

2. Select Security Controls

3. Implement Security Controls

4. Assess Security Controls

5. Authorize the System

6. Monitor Security Controls

Step 5 - Authorize the System grants “Authorization” of the system’s use by the Authorizing Official (AO) via issuance of an Authorization to Operate (ATO) upon successful completion of Steps 1-4. Step 6 - Monitor Security Controls is the continual monitoring in support of maintaining certification of the ATO for the system’s continual authorized use and is a required function to support ATO recertification every 3 years.

Since elevator control systems will require an ATO as a “stand alone” system (i.e. Intermediate FRCS Device that has a front end and end points at a single location), the NAVFAC Marianas (NFM) Command Information Officer (CIO) has determined that for any new system that does not have an ATO, the estimated cost is for initializing each new system (Steps 1-5) and for each additional system. The NFM CIO also estimated an annual recurring cost of approximately per year based on the standard breakdown of this system’s performance level for each system and for each additional system. These costs were derived from a blend of labor support from CIO, Public Works, and Base Operations Support Contract (BOSC) or Wage Grade (WG) labor, including Vendor Support Contracts associated with both the

Government’s requirements.

7. Determination of Fair and Reasonable Cost:

The Contracting Officer has determined the anticipated cost to the Government of the supplies/services covered by this CJ&A will be fair and reasonable. The cost associated with a complete replacement is not practicable or cost effective.

8. Actions to Remove Barriers to Future Competition:

There will be no barriers to competition to evaluate the use of full and open competition for acquiring the same or similar supplies in the future. Market research will be conducted for future projects to ascertain the availability of new technology that may provide for other sources to meet the government’s needs. The government will consider, as applicable, should any other potential sources of supply for a compatible product be submitted during the source selection process.