EFO 2025-25 J62FG P4 Redacted.pdf

CUI

Controlled Unclassified Information (CUI)

Source Selection Information – SEE FAR 2.101 AND 3.104

Services (JETS) Contract number: SP4709-17-D-0045/SP4709-23-F-0090 awarded to which was competitively awarded under the JETS Indefinite

Delivery Indefinite Quantity (IDIQ) contract vehicle on September 29, 2023.

The initial requirement on the current task order was based on the need to provide support to DLA Information Operations in the areas of application development and sustainment of several identity-related programs including user provisioning Accounts Management Provisioning System (AMPS), Single Sign-On (SSO), and Separation of Duties (SoD).

DLA Information Operations J62FG has identified additional tasks that will need to be administered and sustained within the existing support scope. The awarded task order did not originally cover these new requirements and will require an increased commitment from to manage, support, and sustain the workload of the DLA Information Operations J62FG landscape. DLA Information Operations J62FG requires new tasks to support audit walkthroughs for financially relevant 110+ systems and applications, PBC (Provided by Client) requests on enterprise level, SAP PAL (privileged access) redesign initiative, Testing of Design/Testing of Effectiveness and a Governance, Risk, and compliance (GRC) Auto provisioning effort.

3. DESCRIPTION OF THE SUPPLIES OR SERVICES REQUIRED TO MEET THE

AGENCY’S NEEDS (INCLUDING AN ESTIMATED DOLLAR AMOUNT):

The DLA Information Operations J62FG Enterprise Identity Credential, and Access Management (ICAM) Program Management Office (PMO) has a requirement to expand capabilities by obtaining additional GRC and AppSec tasks under the current requirement. This change is required to provide additional Legacy AMPS task order support for GRC and Application Support (AppSec) team workload to the DLA Information Operations J62FG.

The subject modification is necessary to update the Performance Work Statement (PWS) to reflect key differences in the current needs and the future needs of the AMPS Portfolio. This requirement was not known until after the award was issued. The Task Order accounted for known variables, but DLA did not know the extent of the tasks when the AMPS Legacy Support Performance Work Statement (PWS) was written, or prior to the award of the AMPS Legacy Support Task Orders.

The new support requirements of the redesign initiative will be reflective of over five hundred privileged role access adjustments for DLA end-users and emergency users. J62FG has an aggressive timeline to close out this Notice of Finding (NFR) from DLA’s external auditor on enterprise systems and applications. This work has a major impact within the Separation of Duties (SoD) mandates and creates a vulnerability in DLA’s production environment with end-users having overly broad open system access. If the access control material weakness is not able to be addressed and significant progress made, the foundational funding for the financial relevant systems and applications are at risk.

DLA Information Operations J62FG ICAM PMO requires immediate additional support for the remainder of current Base Period and two twelve-month Option Periods.

Controlled Unclassified Information (CUI)

Source Selection Information – SEE FAR 2.101 AND 3.104

Specifically, the DLA Information Operations J62FG Governance, Risk, and Compliance (GRC) programs remain an integral part of the IT Modernization Enterprise Resource Planning (ERP) efforts and are being assessed as part of the DLA Information Operations J62 ICAM solution. The GRC/ AppSec contractor team is responsible for supporting all Enterprise IT audit functions for financially relevant DLA owned and DLA managed operations. The GRC/AppSec contractor team also performs audit sustainment functions and production support activities, which includes sustainment, integration and implementation activities, issue investigation, resolution, Segregation of Duties and provisioning activities in accordance with approved DLA policies, procedures Federal government and DoD regulations Most critical for the success of the Enterprise is the support for designing, developing, maintaining and role management of the Enterprise Business System (EBS), Enterprise Data Warehouse (EDW), Warehouse Management System (WMS) and next generation systems. The addition of the configuration management and GRC Auto Provisioning tasks will require a significant expansion to manage, support, and sustain the workload of the DLA Information Operations J62FG ICAM landscape workload without interruptions.

It would be especially difficult to manage multiple contractors at the level of effort required for the DLA Security Center of Excellence (SCoE) mandated support landscape. The work assignments of two contractors would overlap and the outcome would occur with significant complications between the two contractors’ enterprise-wide code implementation. For example, in the areas of cost analysis (CA), Access Control (AC), AppSec (AS) and configuration management (CM), both contractors would be making changes to the same set of code, with the risk that either would introduce errors in the other contractor’s part of the code - ultimately creating the potential for mission failure.

ADDENDUM 1:

In accordance with FAR 16.505(b)(2)(i)(B), only one source, , can provide the unique and highly specialized services required at the level of quality needed to meet the mission requirements of DLA Information Operations J62FG ICAM PMO.

The needed services and expertise of integrating and optimizing Oracle Cloud Infrastructure within the DLA AMPS environment is available only from BMA. BMA possesses unique and special expertise as BMA minimized the transition impact on DLA by resourcing the program with DLA AMPS seasoned talent. This provided service and support continuity that other contractors would struggle to emulate, if at all. The many months of required training another company’s personnel on the integration, interaction, and information and data flow among OCI, SAP, AWS within the DLA environment would cause substantial delays in DLA Information Operations J62FG achieving portfolio goals and timelines. The introduction of another prime contractor in this environment would create an inefficient work environment and create a program management burden on DLA J26FG personnel. As such, soliciting RFQs from other service providers is arguably moot.

Denial or deferment of this EFO will have a severe impact and jeopardize DLA Information Operations J62FG ICAM PMO’s portfolio objectives.

Controlled Unclassified Information (CUI)

Source Selection Information – SEE FAR 2.101 AND 3.104

5. DETERMINATION BY THE CONTRACTING OFFICER THAT THE ANTICIPATED

COST TO THE GOVERNMENT WILL BE FAIR AND REASONABLE:

As the Contracting Officer, I hereby determine that the anticipated cost to the Government will be fair and reasonable. The Contractor’s proposal will be analyzed in accordance with FAR 15.404- 1 procedures. It is anticipated that the Government will use various price analysis techniques including, but not limited to: (1) Comparison with competitive price lists in accordance with FAR 15.404-1(b)(2)(iv); (2) Comparison of proposed prices obtained through market research for the same or similar items in order to obtain a fair and reasonable price in accordance with FAR 15.404-1(b)(2)(vi); and (3) Comparison of proposed prices with independent Government cost estimates in accordance with FAR 15.404-1(b)(2)(v).

6. ANY OTHER FACTS SUPPORTING THE JUSTIFICATION:

N/A

7. A STATEMENT OF THE ACTIONS, IF ANY, THE AGENCY MAY TAKE TO

REMOVE OR OVERCOME ANY BARRIERS THAT LED TO THE EXCEPTION TO

FAIR OPPORTUNITY BEFORE ANY SUBSEQUENT ACQUISITION FOR THE

SUPPLIES OR SERVICES IS MADE:

Currently, the additional contractor requirements are the only option of meeting the Government’s enduring needs. DLA Information Operations has exercised and continues to exercise competition as often as possible and continues to conduct ongoing reviews to keep abreast of new technology and support options, both in industry and in the Government. DLA uses a variety of tools, vendors, manufacturers, and contracts / orders to fulfill its requirements and will continue its practice of surveying the market to ensure full and open competition to the maximum extent practicable.

Controlled Unclassified Information (CUI)

Source Selection Information – SEE FAR 2.101 AND 3.104

8. CERTIFICATIONS:

Technical Certification: I hereby certify that the supporting data provided for which I am responsible, and which form a basis for this justification are complete and accurate.

J62FG Enterprise, Contracting Officer’s Representative

CONTRACTING OFFICER CERTIFICATION:

I certify that this justification is accurate and complete to the best of my knowledge and belief.

Contracting Officer DLA Contracting Services Office - Philadelphia

PROCURING ACTIVITY COMPETITION ADVOCATE CERTIFICATION:

In accordance with FAR 16.505(b)(2)(ii)(B)(10), I have determined that FAR 16.505(b)(2)(i)(B) applies and I approve this justification.

Competition Advocate DLA Contracting Services Office