Forcepoint_UAM_Limited_Source_Justification_Redacted.pdf

Defense Threat Reduction Agency 8725 John J. Kingman Drive, MS 6201

Ft. Belvoir, VA 22060-6201

LIMITED SOURCE JUSTIFICATION

1. Nature and/or Description of Action The Defense Threat Reduction Agency (DTRA) contracting activity proposes to restrict consideration to an item peculiar to one manufacturer, Raytheon “doing business as” Forcepoint. DTRA plans to restrict procurement of required User Activity Monitoring (UAM), Forcepoint. The Security and Counterintelligence Department (IP-SC) requests to procure the UAM system to include a five year warranty for the unclassified network (UNET) and a three year warranty for the Secret Network (SNET) UAM. Forcepoint is currently providing this service under contract HDTRA1-13-P-0038.

2. Description of the supplies/services required IP-SC requires the capability to adequately protect DTRA from compromise or exploitation by insiders.

Overall, the use and deployment of a UAM will effectively and efficiently prevent, deter, detect, and mitigate insider exploitation of National Security Systems and National Security Information. The UAM is approaching its lifecycle replacement therefore this procurement is for the current model UAM, software and an engineer/analyst to provide maintenance, develop additional triggers and provide analytical assessments of its findings.

a. Type of Action: Firm Fixed Price Contract Line Item Numbers (CLINs)

b. Total Value:

c. Type of Funding: O&M

3. Statutory Authority This Acquisition is conducted under the authority of Title III of the Federal Property and Administrative Services of 1949 (41 U.S.C. 251 et seq.) and Title 40 U.S.C. 501, services for Executive Agencies.

4. Justification Rationale The acquisition of the Forcepoint solution, on NIPR, SIPR and a test lab, included a significant amount of hardware (server racks, workstation, and storage) for which DTRA has already purchased. This hardware, along with contract support for maintenance and accreditation is native only to the Forcepoint solution. A re-compete (and potential vendor change) would require a completely new hardware architecture to support a new UAM solution. Further, the accreditation process for a typical IT system can last anywhere between 12-18 months. The Direct Clarity accreditation is currently beyond the Initial Authority to test stage with an anticipated completion of August 2018 (approximately 75% complete). A new acquisition would require DTRA to restart the accreditation process as nothing from the current Forcepoint package would carry over. The accreditation process includes multiple staff offices in IP, IT, and DISA (approximately 50+ stakeholders) that review, maintain, staff, and approve network-based systems such as Direct Clarity.

5. Market Research DTRA Insider Threat program manager requested the National Insider Threat Task force (NITTF) provide information on all UAM systems that currently meet the DoD/IC standard. The NITTF stated the Digital Guardian and Veriato meet DoD/IC standards, as well as Forcepoints’ UAM. The DoD CIO is setting up a short-term Insider Threat Integrated Product Team to consolidate UAM requirements. The goal is to gain cost efficiency across the Forcepoint Insider Threat portfolio, to include hardware, software, training, administrative services, and analyst support.

6. Other Supporting Facts Documents have not been developed for multiple sources because Forcepoint is the sole manufacturer/provider and is the only authorized provider for upgrades, maintenance and repair for the system.

7. Subsequent Actions: N/A

Technical Certification

I certify that the data and information forming the basis for this justification are accurate and complete to the best of my knowledge and belief.

09 May 18 _ Date

Project Manager

Contracting Officer Certification and Determination I certify that this justification is accurate and complete to the best of my knowledge and belief.

Additionally, I determine that the order represents the best value consistent with FAR Subpart 8.404(d).

Date Contracting Officer, AL-ACB

General Counsel Coordination

This justification is legally sufficient.

Attorney, GC Date

Approval

Based on the above justification, I hereby approve accomplishment of this acquisition by means of limited sources.

Competition Advocate, AL-ACP Date