DMCC_CellCrypt_Redacted_JA_HC101315T0002.pdf

CellCrypt Licenses Department of Defense (DoD) Mobility Classified Capability (DMCC)-

Secret Devices

Page 1 of 5 Pages

JUSTIFICATION FOR OTHER THAN FULL AND

OPEN COMPETITION (OTFAOC)

Federal Acquisition Regulation (FAR) Part 6 Justification & Approval (J&A), Supporting

Procurements under FAR Part 12, FAR Subpart 13.501, and FAR Part 15

Purchase Request Number: To Be Determined (TBD)

Contract Number: TBD

Task/Delivery Order Number: NA

Procurement Title: CellCrypt Licenses DoD DMCC-S Devices

Contracting Office: Defense Information Technology Contracting Organization

(DITCO)-Scott Systems Section PL8223

Estimated Value:

Statutory Authority: FAR 6.302-1/DFARS 206.302-1

JUSTIFICATION FOR OTFAOC

Upon the basis of the following justification, I, as Contracting Officer, hereby approve the use of

OTFAOC of the proposed contractual action pursuant to the authority of FAR 6.302-1/DFARS

206.302-1.

JUSTIFICATION

1. REQUIRING AGENCY AND CONTRACTING OFFICE:

a. Requiring Activity:

Defense Information Systems Agency (DISA), ID/ID7

Mobility Program Management Office (PMO)

6910 Cooper Avenue

Fort Meade, MD 20755-7088

b. Contracting Agency:

DISA/DITCO/PL8223

2300 East Drive

Scott AFB, IL 62225-5406

2. NATURE/DESCRIPTION OF ACTION(S):

The DoD Mobility PMO has a sole source requirement for CellCrypt to provide licenses for

1,000.00 DMCC-S devices. DMCC devices require the CellCrypt license for registration to the call manager; the call manager secures the device’s calls. Current licenses expire on 31 October

2015. This will result in one-time license renewal procurement to CellCrypt. Total estimated cost of this procurement is with a period of performance 1 November 2015 through

31 October 2016.

Page 2 of 5 Pages

The DoD Commercial Mobile Device Implementation Plan dated 15 February 2013, which states, “A key objective is for DISA to establish a Program Office for procurement and operation of enterprise Mobile Device Management (MDM) capabilities and Mobility Services by Fiscal

Year 2014,” mandates the program. In addition, the highest levels of DoD and Federal leadership are anticipating access to DMCC. To satisfy these requirements, the Continental United States configuration of the DMCC utilizes a private network to provide one of several layers of protection for its data in transit. If the Government is not able to obtain a contract from

CellCrypt, the Mobility PMO effort will fail to meet Information Assurance (IA) requirements in the DMCC architecture. This represents a high risk to mission readiness, creates gaps in mobile security, communications, and fails to fulfill the mandated DoD and DMCC operational requirements mentioned above.

3. DESCRIPTION OF SUPPLIES/SERVICES:

The Mobility PMO requires 1,000.00 CellCrypt licenses to support DMCC-S secure calls.

4. IDENTIFICATION OF STATUTORY AUTHORITY:

Only one responsible source and no other supplies or services will satisfy agency requirements, 10 U.S.C.2304(c) (1). (FAR 6.302-1/DFARS 206.302-1)

5. DEMONSTRATION OF CONTRACTOR’S UNIQUE QUALIFICATIONS:

These licenses must be purchased through Cellcrypt due to the secure baseline configuration of the classified capability on the device. The DMCC ICS device baseline configurations ensure interoperability amongst the DMCC components providing the following capabilities; device integrity, secure browsing, secure email, secure voice, internet protocol security, virtual private network connectivity, firmware over the air, policy enforcement and MDM. The license required to meet the DMCC secure voice capability is specific to the CellCrypt application, enabling the DMCC-S device to register with a secure call manager. This application requires a

CellCrypt-specific license to function. CellCrypt is an approved Voice over Internet Protocol

(VoIP) application on the Commercial Solutions for Classified Program (CfSC) list and has completed the National Information Assurance Partnership (NIAP) validation in accordance with the Mobile Access Capability Package (MACP). There are no alternative VoIP licenses that will communicate and support this device configuration currently approved on the CfSC list.

Description of Events:

The DMCC is a joint effort between the DISA and the NSA. In June 2014, NSA competitively awarded integration contract, H98230-14-C-0596, to meet the DMCC

Program needs. In addition to providing DISA with secure DMCC-S devices, this contract provided for the CellCrypt application, associated licensing for 1-year, extended helpdesk and warranty support. Currently, the helpdesk, patching and warranty support is covered under the NSA contract through 26 February 2016. However, these licenses expire 31 October 2015 and must be renewed to prevent IA security gaps on the device.

Page 3 of 5 Pages

Justification:

The Government requires continued license support to 1,000.00 existing DMCC-S devices that were provided for on NSA contract H98230-14-C-0596. The license is specific to the CellCrypt application enabling the DMCC-S device to register with the secure call manager. This application requires a CellCrypt-specific license to function.

There are no alternative security licenses that will communicate and support this device configuration listed on the CSfC component list. In accordance with the current IA standards, the MACP, CellCrypt is the only NIAP certified VoIP mobile application with the ability to communicate to the call manager. This application provides for secure communications on the device and ensures interoperability within the DMCC ICS baseline configuration.

6. FEDBIZOPPS ANNOUNCEMENT/POTENTIAL SOURCES:

A notice has been published to FedBizOpps IAW FAR 5.101

7. DETERMINATION OF FAIR AND REASONABLE COST:

The contracting officer will determine whether CellCypt’s proposed price is fair and reasonable before award. Other than certified cost and pricing data will be requested from the contractor at the time of solicitation. Evaluation of the supporting price documentation will be analyzed.

Additionally, contractor-proposed pricing will be compared to an Independent Government Cost

Estimate and other contracts for similar services. Based on this analysis, the contracting officer will determine whether the proposed price is fair and reasonable.

8. MARKET RESEARCH:

Market Research consisted of reviewing the current contract H98230-14-C-0596, posting and analyzing of sources sought notice on 29 Sep 2015 to FedBizOps, and collaborating with mobility engineers, DISA leadership, DISA and NSA subject matter experts regarding the proprietary nature of the CellCrypt application and license. CellCrypt was contacted to confirm the absence of authorized resellers for this proprietary software. All information received supported a sole source approach for the current period of performance to fulfill the subject requirement.

9. ANY OTHER SUPPORTING FACTS: None.

10. LISTING OF INTERESTED SOURCES: None.

11. ACTIONS THE AGENCY MAY TAKE TO REMOVE OR OVERCOME BARRIERS

THAT LED TO THE EXCEPTION TO FULL AND OPEN COMPETITION:

(a) Procurement History.

(1) H98230-14-C-0596 awarded to General Dynamics C4 Systems Inc. as full and open competition.

Page 4 of 5 Pages

The current support needed by the DoD PMO is tied to the DMCC-S device and the approved DMCC device baseline with the CellCrypt application and license. The licenses in use currently will expire on 31 Oct 2015. Follow-on procurement of these 1-year licenses will be executed via a separate contracting action. The Mobility PMO is currently developing a next generation device contract. This contract will be a full and open competition.

12. REFERENCE TO THE APPROVED ACQUISITION PLAN (AP):

An AP is not required.

Page 5 of 5 Pages

TECHNICAL CERTIFICATION: I certify that the supporting data under my cognizance, which are included in the J&A, are accurate and complete to the best of my knowledge and belief.

NAME: Salvatore Scaglione SIGNATURE:

TITLE/ORGANIZATION: DMCC Lead/DISA/ID73

PHONE: 301-225-2443 DATE: 24 Sep 15

REQUIREMENTS CERTIFICATION: I certify that the supporting data under my cognizance, which are included in the J&A, are accurate and complete to the best of my knowledge and belief.

NAME: Salvatore Scaglione SIGNATURE:

TITLE/ORGANIZATION: DMCC Lead/DISA/ID73

PHONE: 301-225-2443 DATE:

CONTRACTING OFFICER CERTIFICATION: I certify that this justification is accurate and complete to the best of my knowledge and belief.

NAME: Angela K. Zang SIGNATURE:

TITLE/ORGANIZATION:

PHONE: 618-229-9435 DATE:

ALL QUESTIONS REGARDING THIS JUSTIFICATION ARE TO BE REFERRED TO

Angela K. Zang, Contract Specialist, angela.k.zang.civ@mail.mil, telephone 618-229-9435.

mailto:angela.k.zang.civ@mail.mil