Justification_Data_Security_Inc_FBO.pdf

Limited Sources Justification and Approval (J&A)

March 2018 Page 1 of 4

Contracting Activity: 21 CONS/PKB

Purchase Request / Local ID Number: F3L2BB8159AC03

Program / Project (and PE, if applicable): Media Destruction for Comm Squadron

Program Type (PEO or Other Contracting): Other Contracting

Authority: Multiple Award Schedule Program (FAR 8.405-6)

Estimated Contract Cost (including options):

Is this a Bridge Action as defined in the AF Bridge Action Reduction Plan? Yes No

Description of Limitation:

Data Security Inc is the only manufacturer who can supply all three (3) required machines on the National Security Agency (NSA) approved product list.

COORDINATION (AFFARS 5306.304(a) )

Date

20 Aug 2018

Project Lead / Program Mgr / Requiring Activity

Christopher O'Dell

21CS / 719-556-4253

Signature

Date

09 Aug 2018

Contracting Officer

Brent Bertrand

21 CONS/ 719-556-4124

Signature

Date

05 Sep 2018

Competition Advocate

Kylie Hager

21 CONS/ 719-556-4835

Signature

APPROVAL (AFFARS 5306.304(a) )

Date

05 Sep 2018

Contracting Officer

MSgt Jeremy Boggs

21 CONS/ 719-556-4124

Signature

BERTRAND.BRENT.NMI.12

43107365

Digitally signed by

BERTRAND.BRENT.NMI.1243107365

Date: 2018.08.09 13:36:59 -06'00'

O'DELL.CHRISTOPHER.H.1

056653763

Digitally signed by

O'DELL.CHRISTOPHER.H.1056653763

Date: 2018.08.20 08:11:26 -06'00'

HAGER.KYLIE.J.12414520

Digitally signed by

HAGER.KYLIE.J.1241452006

Date: 2018.09.05 14:33:48 -06'00'

BOGGS.JEREMY.O.124507

Digitally signed by

BOGGS.JEREMY.O.1245076890

Date: 2018.09.05 14:43:50 -06'00'

March 2018 Page 2 of 4

I. Contracting Activity.

Limited Sources Justification

21 CONS/PKB

Requirement for media destruction equipment for the 21st Communications Squadron.

Contracting Officer - MSgt Jeremy Boggs - 719-556-4124 Purchase Request #: F3L2BB81559AC03

II. Nature and/or description of the action being processed.

New order for Media Destruction Tools for Comm Squadron. Under GSA Schedule 70 (Data Security Contract:

GS-35F-0535T) items to be purchased are as follows:

Hard Drive Degausser - Qty 1 Hard Drive Destructor - Qty 1 Solid State Media Disintegrator - Qty 1

III. Description of supplies/services required to meet agency needs.

In accordance with (IAW) AFMAN 17-1301 "Only products listed on the NSA Evaluated Products List (EPL) or received approval from NSA may be used to destroy classified information (to include media and devices) per National Security Agency/ Central Security Service (NSA/CSS) Policy Manual 9-12."

IAW National Institute of Standards and Technology (NIST) Special Publication 800-88 for unclassified information references using "an NSA/CSS- approved degausser."

Requirement is for turn-key installation of Data Security Inc's complete DX-8 magnetic hard drive destructor (Qty -1) and the SSMD-2mm solid state media destruction solutions (Qty -1) with add-on high speed LM-1 degausser (Qty-1). This solution fulfills a significant gap in capability for media destruction affecting all units on Peterson AFB. Delivery scheduled within 90 days after date of contract to 175 East Stewart Avenue Peterson, AFB, CO 80914 (Bldg 1038).

IV. Identification of the justification/rationale for limiting sources and demonstration of the contractor's unique qualifications to provide the required supply/service.

FAR 8.405-6 requires an ordering activity to justify its actions when restricting consideration of schedule contractors to fewer than required in FAR 8.405-1 or FAR 8.405-2. FAR 8.405-6(b)(1), The item is peculiar to one manufacturer. A brand name item, whether available on one or more schedule contracts, is an item peculiar to one manufacturer.

1 EA - Automatic Hard Drive Degausser ∗ SHALL be NSA certified for Media Destruction ∗ Accept media up to 1.0" x 4.3" x 6" without disassembly ∗ Have a footprint no greater than 16" W x 40" D x 17" H for space considerations

1 EA - Hard Drive Destruction Device ∗ SHALL be NSA certified for up to Top Secret media destruction ∗ Accept media up to 1.03" x 4.3" without disassembly ∗ Have a footprint no greater than 22" W x 40" D x 37" H for space considerations ∗ Device SHALL have safety features such as:

> Safety rated tamper resistance interlocks > In-feed and out-feed distances at a length making it impossible to reach, keeping operator's extremities from the destruction process > Industrial emergency stop control

1 EA - Solid State Destruction Device

* SHALL be NSA certified for up to Top Secret media destruction

March 2018 Page 3 of 4

* SHALL be a shredder and SHALL destroy to no larger than 2mm

* Accept media up to 0.85" x 8"

* Have a footprint no greater than 30" W x 45"D and no taller than 48" for space considerations

Degausser and Hard Drive Destruction Device SHALL be able to process AT LEAST 88 units weekly.

Degausser and Hard Drive Destruction Device SHALL pair together to create a closed loop system.

The solid state media shredder from Data Security Inc sets them apart from others that are NSA certified and will be suitable for the space available. The space requires a compact machine to satisfy the requirement. Data Security Inc offers the only compact solid state media disintegrator that can process bigger media (cell phones, tablets, solid state drives) as required.

Other compact options can only process small media such as SD Cards. Other approved products are only offered by the company Gigabiter, that can process larger media are larger in size which require much more energy and space to operate.

Gigabiter is only listed on the solid state media approved list and not on the degausser or hard drive destruction list which makes them unable to satisfy the requirement. The coupling of the magnetic media degausser, mangler, and solid state shredder by Data Security Inc. provides a one-stop shop for the continuous sanitization and destruction of unused, sensitive media for all Peterson AFB customers both on base and those housed in facilities within town. No other company can offer all three (3) products to the Government from the NSA approved list. Data Security Inc. is the only manufacturer capable of providing all the necessary products from the NSA evaluated products list.

A Request for Information was sent to all the manufacturers on the NSA approved product lists to confirm that Data Security Inc. was in fact the only vendor capable of satisfying the requirement. Vendors that responded confirmed that they were unable to provide all three machines and that due to the Air Force mandating the use of NSA approved products that Data Security Inc was the only company that could satisfy this requirement. With a solid state media disintegrator it appears that the NSA stopped testing media destruction devices after Data Security's was approved and has yet to resume which provides insight into why there is only one company currently capable of satisfying the requirement for all three machines.

V. Determination by the ordering activity Contracting Officer that the order represents the best value consistent with

FAR 8.404(d).

IAW FAR 8.404(d)(DEVIATION) and FAR 15.404-1(b)(2) GSA has determined pricing of supplies and services to be fair and reasonable for the purpose of establishing the schedule contract. The contracting officer will determine best value of the order for GSA and open market items will be determined through comparison with published price lists for similar products not listed on the NSA approved product list in addition to comparison of proposed prices with the Independent Government Cost Estimate.

VI. Description of the market research conducted and the results, or explain why market research was not conducted.

Market Research was conducted to search for alternate products capable of satisfying the requirement. Three (3) machines are needed for a total integrated system: a degausser, a hard drive destruction device, and a solid state destruction device.

Devices must be on approved NSA product list to be used for DoD purposes. Some vendors could provide one or two of the machines but not all for a complete package. Data Security Inc. was identified as the only capable vendor due to their offering of the only Solid State Media Destruction Device on the approved product list that was capable of processing larger devices such as solid state drives and phones where the other products were only capable of destructing smaller devices such as SD cards. Therefore, Data Security Inc is the only contractor capable of providing all three machines. A Request for Information was sent out to confirm all this information among the vendors; it was confirmed by multiple sources that for our requirement Data Security Inc is the only manufacture capable of satisfying the requirement.

VII. Other facts supporting the justification.

See the following to reference most recent edition of NSA approved product lists of manufactures capable of providing machines.

Reference:

https://www.nsa.gov/resources/everyone/media-destruction/ "Degausser Evaluated Products List"

March 2018 Page 4 of 4

"NSA/CSS Evaluated Products List for Hard Drive Destruction Devices" "NSA/CSS Evaluated Products List for High Security Solid State Destruction Devices"

VIII. Actions the agency may take to remove or overcome any barriers that led to the restricted consideration before any subsequent acquisition for the supplies or services.

Conducted Market Research using NSA's approved product list to search for comparable products. No other manufacturers with NSA approval provided solid state media destruction solutions that met NSA requirements of 2mm or smaller particle size. Any other devices would not integrate into Peterson AFB's facilities. Other solutions for solid state destruction can not destruct necessary materials; alternative machines that can process necessary materials do not suit

IX. Certification by the Contracting Officer.

As evidenced by my signature above, I have determined this document to be both accurate and complete to the best of my knowledge and belief.

X. Certification by the technical/requirements personnel.

As evidenced by my (our) signature(s) above, I (we) certify that any supporting data contained herein, which is my (our) responsibility, is both accurate and complete.