I_04 SF 1012 - Limited Sources Justification SOC Bridge 3-SAM Posting.pdf

DEPARTMENT OF THE TREASURY

LIMITED-SOURCES JUSTIFICATION

This acquisition is conducted under the authority of the Multiple Award Schedule Program (see FAR 8.401)

Treasury Standard Form – 1012 (Rev 9/23)

Prescribed by Treasury: DTAP 1008.405-6

Tracking No.

1. Identification of the agency and the contracting activity:

The requiring activity is the Internal Revenue Service (IRS) Information Technology (IT), Cyber Security Operations, Technical Operations, Cyber Threat Fusion Center (CTFC) Security Operation Center (SOC) Support. The contracting activity is the IRS, Office of the Chief Procurement Officer (OCPO), IT Strategy & Modernization, Strategy Planning and Cyber Branch.

2.a Nature and/or description of the action being approved:

The purpose for this Limited-Sources Justification is to obtain approval to award a hybrid (Firm-Fixed Price (FFP)/Labor Hour (LH)) bridge Order to General Dynamics Information Technology (GDIT) utilizing the General Services Administration (GSA) Multiple Award Schedule (MAS) 54151S and 54151HACS to provide uninterrupted services until the Treasury PROTECTS 1 Blanket Purchase Agreement (BPA) is awarded and a subsequent IRS task order is executed to secure services with a new service provider to support cybersecurity mission execution. The period of performance for this bridge is one (1) six (6) month base period and two (2) three (3) month options. If the base and all options are exercised, the total period of performance for this requirement is December 9, 2024-December 8, 2025. This Order will not exceed one (1) year. This bridge is an extension of a Task Order against an IDIQ Advisory & Assistance Services (A&AS) contract, not an extension of the period of ordering under the IDIQ contract; as a result, this bridge is not subject to the restriction on extending A&AS IDIQ contracts.

2.b Name of the vendor: General Dynamics Information Technology (GDIT) 2.c Requisition No.: 5000199751 2.d Bridge contract: Yes No 2.e Brand name: Yes No 3.a A description of the supplies or services required to meet the agency’s needs:

IT services required to satisfy the minimum guarantee of 24x7x365 mission critical security services for the Computer Security Incident Response Center (CSIRC), Advanced Threats Analysis Cell (ATAC), and Vulnerability Analysis Cell (VAC). The CTFC services support the infrastructure for both the Fraud Analytics and User Behavior Analytics programs which provide essential Cybersecurity Services for the Security Operations Center (SOC) to protect IRS infrastructure systems, applications, and data.

The proposed acquisition is to provide uninterrupted contractor services providing support to the SOC, which includes threat monitoring and analysis, incident response, vulnerability management, and other various activities across on-premises and cloud-based infrastructure systems, applications, and data.

3.b Includes IT: Yes No NAICS: 541519, PSC: DJ01 3.c IGCE/Estimated dollar value:

The IGCE is $13,507,125.88 for one (1) six (6) month base period and two (2) three (3) month option periods.

The total cost broken up by base and option periods are:

Base Period: 12/9/2024-6/8/2025, $6,753,562.94 Option Period 1: 6/9/2025-9/8/2025, $3,376,781.47 Option Period 2: 9/9/2025-12/8/2025, $3,376,781.47 4.a Identification of the authority being used (Check the appropriate box that applies).

FAR 8.405-6(a)(1)(i)(A) – An urgent and compelling need exists, and following the procedures would result in unacceptable delays.

Melanie R. Krause Digitally signed by Melanie R. Krause Date: 2024.11.20 07:13:50 -05'00'

SIGNATURE APPLIES TO ACTION FOR CYBERSECURITY SERVICES FOR IRS SOC

11/22/24