FBO_Sole_Source_Justification.pdf

Office of the Chief Information Officer General Services Administration Building

1275 First Street, NE Washington, DC 20417

Justification and Approval (J&A) For Other than Full and Open Competition

General Services Administration Office of the Chief Information Officer

Office of Enterprise Solutions

April 19, 2013

1. Identification and Description of Action Being Approved

The intent of this sole source justification is to purchase CheckMarx Code Scanning Tool licenses and software maintenance for use in the GSA OCIO. CheckMarx allows OCIO development to scan Force.com application code for errors and provide real time results to correct any issues and satisfy security reviews.

2. Description of Supplies and/or Services

GSA requires the ability to easily and quickly scan Force.com code for errors in support of GSA Cloud commitment. CheckMarx provides the easy to use Force.com code scanning with immediate results to be used by the development team and the GSA IT Security Officer.

3. Identification of Statutory Authority

The basis for this justification is set forth at FAR 6.302-1, only one source is capable of responding based on the unique requirement of providing source code scanning licenses and maintenance to a brand name product.

GSA requires technology that provides a real-time Force.com code scanning and results. GSA needs a tool that is responsive and will not delay development, security reviews and launch of enterprise applications for GSA. Only CheckMarx is able to scan Force.com code. Force.com is a proprietary platform and uses unique Apex language. Since this is a non-compiled code, CheckMarx is the only product that can support scanning for this product.

CheckMarx unique capabilities are:

� Scans the non-compiled or fragmented code early in Systems Development Life Cycle

� Flexible architecture enables easy query customization and accuracy

� Scans beyond security returning results for quality and performance

� User friendly with graphical presentation of all vulnerabilities and indication for best fix locations

� Easy setup and quick scan

Sole Source Justification Page 1

Market research has found no other product that offers all of these required capabilities. SalesForce.com is the developer of the Force.com software. They have partnered with CheckMarx to provide the source scanning capabilities to the software.

4. Demonstration that the Acquisition Requires Use of the Authority Cited

GSA OCIO requires technology that provides a real-time Force.com code scanning. CheckMarx is the only supplier that satisfies this requirement. No other open market products have been identified that could satisfy this requirement.

5. Description of Efforts to Solicit As Many Offers Practicable.

CheckMarx is the sole source provider for their source code scanning software. Carahsoft Technology is the only designated authorized reseller for CheckMarx’ source code scanning software.

6. Demonstration that the Anticipated Cost will be Fair and Reasonable.

Pricing will be determined fair and reasonable by comparing the offered price to the publicly available Commercial Price List. Pricing may be compared to past orders and comparable market items.

7. Description of Market Survey Conducted.

Market research was conducted. No other product is available that will perform the required code scanning function for Force.com .

8. List of Sources that expressed an interest in the Acquisition.

None.

9. Technical and Requirements Certification.

I hereby certify that the supporting data upon which this justification is based is my responsibility and is complete and accurate tq the best of my knowledge and belief.

4/19/2013 Susie E. Kampah Date Program Manager

10. Contracting Officer Certifications

I hereby certify that the information contained in this ustification and Approval for Other than Full and Open competition, for the purchase of Force.com code scanning tool, is accurate and complete to the best of my lcnowledqe and belief�

Date Officer

GSA

Sole Source Justification Page 2 j

Carolyn Turner