EIQ_Networks_Consolidated_SecureVue_LSJ-Redacted.pdf

Tracking #: JA0049

Limited Sources Justification (Brand Name) eiqNetworks SecureVue Software Support and Software Maintenance Services

1. Agency and Contracting Activity: Defense Health Agency, Contract Operations Division- San Antonio (DHA COD-SA).

2. Nature of Action Being Approved: Approval is requested for a Limited Sources Justification for a new brand name fixed-price task order covering a 12-month base period for eiqNetworks SecureVue software support and software maintenance services. This requirement will be procured with FY14 Department Health Affairs (DHA) Operations and Maintenance (O&M) funds: FY 14 $97,083.75

3. Description of Supplies/Services: Defense Health Agency, Health Information Technology Directorate (DHA-HITD) Medical Network Operations and Security Center (MEDNOSC) operates an Enterprise Security Information and Event Management (SIEM) network monitoring capability to meet Information Assurance (IA) requirements for the Army Medical network.

DHA-HITD requires standard software support and software maintenance services as listed below (See Appendix A – SIEM Bill of Material):

• Standard software support and maintenance services for 9,292 Continuous Security Intelligence Bundle Licenses – Period of Performance from 29 Sep 2014 to 28 Sep 2015

• Standard Software Support & Maintenance for 3 Log Management/SIEM Data Processors – Period of Performance from 29 Sep 2014 to 28 Sep 2015

• Standard Software Support & Maintenance for 3 Log Management/SIEM Data Processors – High Availability (HA) – Period of Performance from 29 Sep 2014 to 28 Sep 2015

• Standard software support and maintenance services for 325 Continuous Security Intelligence Bundle Licenses – Period of Performance from 29 Sep 2014 to 28 Sep 2015.

4. Authority Cited and Supporting Rationale: FAR 8.405-6 (b), 10 USC 2304(c)(1) – An item peculiar to one manufacturer (e.g., a particular brand name, product, or a feature of a product, peculiar to one manufacturer). Supporting rationale is as follows:

• This requirement is for standard software support and software maintenance for the existing government-owned SIEM network-monitoring tool to meet Army and Defense Information Systems Agency (DISA) Information Assurance requirements listed in Appendix B – Information Assurance Guidelines.

• Software support and maintenance services from another SIEM tool vendor would not be interoperable with the current MEDNOSC Enterprise SecureVue SIEM tool as the

SOURCE SELECTION INFORMATION

(See FAR 2.101 and 3.104-4) software support and maintenance services developed by one SIEM vendor are not compatible with another vendor’s proprietary solution; therefore, this is a brand name acquisition.

• eiqNetworks is the only known vendor that possesses the standard software support and software maintenance capabilities necessary to fulfill the Government’s requirements.

5. Determination of Best Value: This requirement will be competed under the Army CHESS (Computer Hardware Enterprise Software and Solutions) to multiple contract holders. The Contracting Officer will ensure the subsequent awardee provides the greatest overall benefit in response to the requirement in accordance with FAR 8.405-2(d).

6. Market Research: Market Research (FAR Part 10) was conducted by reviewing DoD ESI agreements through the Army’s Computer Hardware Enterprise Solutions (CHESS) program.

Market research shows that the requirement can be fulfilled by the following CHESS contracts:

W91QUZ-07-D-0010 (IronBow) and W91QUZ-07-D-0011 (World Wide Technology).

7. Other Facts:

a. While SIEM tools from other manufactures can meet the technical and functional requirements to collect, collate, analyze, and forward system and event log data from network appliances and devices, they would be incompatible with the installed and operational SecureVue SIEM tool. Implementing a new Enterprise SIEM tool would require an investment of at least $850,000 to replace the existing SecureVue SIEM tool hardware and software architecture. Replacing the existing SecureVue SIEM tool with another vendor’s product would require the MEDNOSC to develop new processes, scripts, and procedures to install, configure, operate, and maintain the new SIEM tool.

b. Historical Data:

(1) Authority previously used for less than full and open competition. FAR 8.405-6 against W91QUZ-07-D-0011-ZQ85 in the amount of $41,662.00

(2) Explanation of any unusual patterns which may be revealed by the history: N/A

(3) The previous procurements were conducted using a brand name acquisition strategy. eiqNetworks is the only source available for the Army and DISA required software support and maintenance services. No changes have occurred since the previous buy.

8. Actions to Increase Competition: No other vendors have been found that can provide this service; however, this Limited Sources Justification will be posted on FedBizOpps to allow responses from vendors before award. With the transition to the Defense Health Agency (DHA), the MEDNOSC will consolidate, standardize, and collapse disparate Army, Navy, Air Force, and Military Health Systems networks into a Medical community of interest (MEDCOI) network by

FY16. If the DHA transitions to a new SIEM tool, market research will be performed at that time to find as many potential offerors as possible to compete on the replacement SIEM tool hardware, software, and support services. The notices required by FAR 5.201 shall be published, and bids or proposals received shall be considered.

Coordination:

9. Technical Certification: Include the following statement:

I certify that the supporting data under my cognizance which are included in the justification are accurate and complete to the best of my knowledge and belief.

Typed Name: __Jeffery W. Collins____ Date: ___________________

Title:____Chief, Enterprise Wireless Network______ Signature: ______________________

10. Requirements Certification: Include the following statement:

I certify that the supporting data under my cognizance which are included in the justification are accurate and complete to the best of my knowledge and belief.

Typed Name:__D. Michele Krause____ Date: ___________________

Title: _______Chief, MEDNOSC______Signature:________________________

12. Legal Review: I have reviewed this justification and approval and it is deemed to be legally sufficient.

Typed Name: __Timothy J. Haight_____________ Date: _____________________________

Title: _Information Technology Attorney________ Signature: _________________________

13. Chief, Contract Policy and Compliance Division: Based on the foregoing justification, I have reviewed the procurement of eiqNetworks standard software support and software maintenance on an other than full and open competition basis pursuant to the authority of 10 U.S.C. 2304(c) FAR 8.405-6(b), and provided that the services and property herein described have otherwise been authored for acquisition.

Typed Name: Genesta Belton Date: _____________________________

Title: Chief, CP/CD Signature: _________________________

Approval:

Contracting Officer: I certify that this justification is accurate and complete to the best of my knowledge and belief.

Typed Name: Shirley Harrison Date:

Title: Contracting Officer Signature:

Appendix A – SIEM Bill of Material

Item Description Manufacturer Part Number Qty

1 Production Environment - eiqNetworks Continuous

Security Intelligence Bundle License for Device/Server/Application (Per Node, Qty. 2501-5000)

- Standard Support & Maintenance Renewal, Period Of Performance: 9/24/2014 to 9/23/2015

EIQ

NETWORKS CSI-2501-5000-RM 4646

2 Production Environment - eiqNetworks Continuous Security Intelligence Bundle License for Device/Server/Application (Per Node, Qty. 2501-5000)

- Standard Support & Maintenance Renewal, Period Of Performance: 9/24/2014 to 9/23/2015

EIQ

NETWORKS

CSI-2501-5000-

RM. 4646

3 Production Environment - eiQNetworks Log Management/SIEM - Data Processor (Software Only) – Standard Support & Maintenance Renewal, Period Of Performance: 9/24/2014 to 9/23/2015

EIQ

NETWORKS LS-DP-SW-RM 3

4 High Availability Environment - eiQNetworks Log Management/SIEM - Data Processor (Software Only) - Standard Support & Maintenance Renewal, Period Of Performance: 9/24/2014 to 9/23/2015

EIQ

NETWORKS

LS-DP-SW-HA-

RM 3

5 Production Environment - eiqNetworks Continuous Security Intelligence Bundle License for Device/Server/Application (Per Node, Qty. 2501-5000)

– Standard Support & Maintenance Renewal, Period Of Performance: 9/13/2014 to 9/23/2015 – Align Period of Performance

EIQ

NETWORKS CSI-2501-5000-RM 325

Total Price:

Appendix B – Applicable Information Assurance Guidance

• Paragraph 4-5.a.9.f(1) of Army Regulation 25-2, Information Assurance, requires a maintenance and upgrade strategy to proactively update and manage all Information Systems with the latest security or application updates.

• Paragraph 6.6.2 Maintenance Availability of DISA Application Security and Development Checklist, Version 3, Release 5, 26 July 2013. As long as the application is in use, maintenance must be available to address any security flaws discovered in the application. New software vulnerability types are discovered on a regular basis, and it is always possible an application previously having no known exploits will have a vulnerability discovered. Software no longer under maintenance or security support will be decommissioned and removed.