H12. FAR Subpart 16.5 Justification - Brand Name - ProV Software - Redacted.pdf

UNITED STATES MARINE CORPS

MARINE CORPS INSTALLATIONS NATIONAL CAPITAL REGION

MARINE CORPS BASE QUANTICO

3250 CATLIN AVENUE

QUANTICO VIRGINIA 22134 5001

V 1.2 (28 April 2023)

M00264-25-JA-001

JUSTIFICATION FOR USE OF ITEMS PECULIAR TO ONE MANUFACTURER

UNDER THE NASA SEWP GWAC

1. Identification of the agency and the contracting activity.

This acquisition is being conducted by the Department of the Navy, under the Headquarters Marine Corps, Installation and Logistics (HQMC, I&L) Head of the Contracting Activity (HCA). The executing contracting office is the Marine Corps Installations National Capital Region – Regional Contracting Office (MCINCR-RCO), Quantico, VA

2. Nature and/or description of the action being approved.

Brand name solicitation to procure Tangible Security ProV 1.7 software license renewal via the NASA SEWP (Solutions for Enterprise-Wide Procurement) GWAC (Government-Wide Acquisition Contract) for the customer, Training and Education Command (TECOM) Formal School Technical Refresh (FSTR). In accordance with FAR 19.203(c) and (d) including results of market research and agency small business goals, and by recommendation of the Deputy Director of the Office of Small Business Programs for the MCINCR, this procurement will be a 100% set-aside to NASA SEWP authorized reseller for Tangible Security software, HUBZone BahFed Corp. BahFed Corp is the only current SBA-certified HUBZone small business NASA SEWP contract holder that is also an approved reseller for this brand.

3. Description of the supplies or services required to meet the agency’s needs (including the estimated value).

Description: TECOM FSTR program requires ProV 1.7 Software License Renewal, formerly Department of Defense (DoD) Visitor, yearly domain controller licenses (includes unlimited users): 173.

Intended use: DoD Visitor through ProV software was a contracted service that was formally provided through the Defense Information Systems Agency (DISA). The capability required by TECOM is equivalent and synonymous with that provided by the DoD Visitor capability. Due to the decommissioning of DoD Visitor, TECOM sought an equivalent service to provide network connectivity and access for students in entry-level training and for 39 Learning Resource Centers across the Service. ProV software is what TECOM currently uses and has been installed throughout Marine Corps formal learning centers (FLCs). ProV is a software capability that allows DoD users with a Common Access Card (CAC) and valid DoD Public Key Infrastructure (PKI) certificates to have access to Non-classified Internet Protocol (IP) Router Network (NIPRNet) resources via any end user device that uses a Windows Domain Controller and CAC / PKI logon for access control, regardless of trust relationships between domains. This software creates a visitor account for any CAC login request. This visitor account still enables the use of a least privilege environment, providing NIPRNet web access, access to limited local applications, and the ability to temporally use local storage during the user’s session. Upon log off, all ProV enabled DoD visitor local files are deleted, so the users must rely on a DoD approved web or enterprise resources for persistent storage. The visitor account is automatically deleted 12 hours after initial creation.

Total estimated value: (includes base period plus three option periods).

License coverage period: December 19, 2024 – December 18, 2028 Base period: December 19, 2024 – December 18, 2025 Option Period 1: December 19, 2025 – December 18, 2026 Option Period 2: December 19, 2026 – December 18, 2027 Option Period 3: December 19, 2027 – December 18, 2028

FAR Subpart 16.5 Justification for Exception to Fair Opportunity exclusive to this brand of software include:

1) ProV allows students with a CAC and valid DoD PKI certificates to have access to NIPRNet resources via any end user device that uses a Windows Domain Controller and CAC / PKI logon for access control, regardless of trust relationships between domains.

2) This software creates a visitor account for any CAC login request.

3) This visitor account still enables the use of a least privilege environment, providing NIPRNet web access, access to limited local applications, and the ability to temporally use local storage during the user’s session.

4) Upon log off, all ProV enabled DoD visitor local files are deleted, so the users must rely on a DoD approved web or enterprise resources for persistent storage. The visitor account is automatically deleted 12 hours after initial creation.

This software is unique in not only the function that it serves but also that it has already been approved for use on the MCEN through a formal Authorization to Operate (ATO). The ATO process is rigorous, and the procurement of the ProV software will not only provide the needed capability but will also ensure a seamless transition and minimize impact on the FLCs Service-wide and prevent a lapse in coverage.

TECOM FSTR program has included the Tangible Security ProV software at its FLCs since 2010, and as such, TECOM’s workforce is experienced and trained in using these applications. TECOM has Marines and USMC Civilians co-located within regions to provide subject matter expertise on these ProV applications.

Furthermore, ProV software is hosted not only on every domain controller that is currently integrated to the MCEN, but those administered under the auspices of Marine Corps University / Education Command (EDCOM) as well.

Since ProV is already authorized for use on the MCEN through a formal ATO issued by HQMC, procurement of the same software is required for several reasons. Marine Corps Cyberspace Operations Group (MCCOG), which exercises responsibility for operation and defense of the MCEN, has configured the domain controllers for compatibility with ProV; thus, introduction of a new and unknown analogue will result in extensive delays that will push back the operationalization of the procured software past the point of relevance.

Furthermore, if software is procured that is not identical to the Tangible Security’s distribution of the previously approved software, TECOM will be required to submit a completely new ATO through Headquarters Marine Corps. This process routinely takes 6-9 months, which will cause a lapse in coverage.

If the Government does not procure ProV brand software, students will be forced to revert back to hard covered books and paper testing which goes against the stipulations that are set forth in the Marine Corps Force Design 2030 under the Training and Education 2030 where it states that the Marine Corps must commit to the modernization of our training and education system and how it must evolve into a robust learning environment.

For these reasons, it is in the Government’s best interest to pursue a brand name procurement.

5. A determination by the contracting officer that the anticipated cost to the Government will be fair and reasonable.

Per FAR 16.505(b)(3), fair and reasonable pricing will be determined at the time of award of the anticipated NASA SEWP order using the price analysis techniques at FAR 15.404-1(b).

6. Any other facts supporting the justification.

See Section 4.

7. A statement of the actions, if any, the agency may take to remove or overcome any barriers that led to the exception to fair opportunity before any subsequent acquisition for the supplies or services is made.

Continuous market research will be performed by the Government for future requirements for this software to continue to maximize opportunities for competition and small business socioeconomic category participation.

CERTIFICATIONS AND APPROVAL

TECHNICAL/REQUIREMENTS CERTIFICATION

I certify that the facts and representations under my cognizance which are included in this Justification are accurate and complete to the best of my knowledge and belief.

LEGAL SUFFICIENCY REVIEW

I have determined that this Justification is legally sufficient.

CONTRACTING OFFICER CERTIFICATION

I certify that this Justification is accurate and complete to the best of my knowledge and belief.

COMPETITION ADVOCATE OF THE PROCURING ACTIVITY APPROVAL

Upon the basis of the above, I hereby determine, as Competition Advocate of the Procuring Activity, that this justification adequately supports the use of items peculiar to one manufacturer as required in FAR 16.505.