IB08 CUI_Knox JEFO 2024_74_Approved_Redacted 10.9.2024.pdf

Control No: MICC 2024-74

8 930173-12 CMT ADVANTAGE MAINT, SUBSEQUENT YR1, HW -

GUARDIAN 100, GUARDIAN 200, GUARDIAN 300,

DEVICE ONLY DOMESTIC

1001 950093-12 CMT ADVANTAGE MAINT, SUBSEQUENT 1YR,

STANDARD CMT SW, ARCIDENROLLMENT CAPACITY

PACK

1002 950094-12 CMT ADVANTAGE MAINT, SUBSEQUENT 1YR,

STANDARD CMT SW, ARCIDENROLLMENT BASE

1003 950118-12 CMT ADVANTAGE MAINT, SUBSEQUENT 1YR,

STANDARD CMT SW, ARCIDENROLLMENT -

REDUNDANT SERVER

1004 950132-12 CMT ADVANTAGE MAINT, SUBSEQUENT 1YR,

STANDARD CMT SW, ANY ARCIDENROLLMENT

CONFIGURATION/SUBMISSION

1005 950092-12 CMT ADVANTAGE MAINT, SUBSEQUENT 1YR,

STANDARD CMT SW, WEBS STORE &FORWARD

1006 950120-12 CMT ADVANTAGE MAINT, SUBSEQUENT 1YR,

STANDARD CMT SW, ARCID STORE &FORWARD -

REDUNDANT SERVER

1007 950096-12 CMT ADVANTAGE MAINT, SUBSEQUENT 1YR,

STANDARD CMT SW, ANY WEBS S&FCONFIGURATION/

SUBMISSION

1008 930173-12 CMT ADVANTAGE MAINT, SUBSEQUENT YR1, HW -

GUARDIAN 100, GUARDIAN 200,GUARDIAN 300,

DEVICE ONLY DOMESTIC

2001 950093-12 CMT ADVANTAGE MAINT, SUBSEQUENT 1YR,

STANDARD CMT SW, ARCIDENROLLMENT CAPACITY

PACK

2002 950094-12 CMT ADVANTAGE MAINT, SUBSEQUENT 1YR,

STANDARD CMT SW, ARCIDENROLLMENT BASE

2003 950118-12 CMT ADVANTAGE MAINT, SUBSEQUENT 1YR,

STANDARD CMT SW, ARCIDENROLLMENT -

REDUNDANT SERVER

2004 950132-12 CMT ADVANTAGE MAINT, SUBSEQUENT 1YR,

STANDARD CMT SW, ANY ARCIDENROLLMENT

CONFIGURATION/SUBMISSION

2005 950092-12 CMT ADVANTAGE MAINT, SUBSEQUENT 1YR,

STANDARD CMT SW, WEBS STORE &FORWARD

2006 950120-12 CMT ADVANTAGE MAINT, SUBSEQUENT 1YR,

STANDARD CMT SW, ARCID STORE &FORWARD -

REDUNDANT SERVER

2007 950096-12 CMT ADVANTAGE MAINT, SUBSEQUENT 1YR,

STANDARD CMT SW, ANY WEBS S&FCONFIGURATION/

SUBMISSION

2008 930173-12 CMT ADVANTAGE MAINT, SUBSEQUENT YR1, HW -

GUARDIAN 100, GUARDIAN 200, GUARDIAN 300,

DEVICE ONLY DOMESTIC

Control No: MICC 2024-74 the risk of human errors. This also increases the chance of PII being stolen. It will also impact the cybersecurity posture of the WEBS and violate AR 25-2, Army Cybersecurity, which requires vendor provided security patches for applications to be available.

2) Procure new software and hardware for fingerprint capability: This would significantly expand the current procurement from software maintenance renewal to a complete new system. The current system uses proprietary hardware and software to provide the current fingerprint capability. Any new system would require a new hardware and software procurement. This system is expected to sunset to a current Army Enterprise System under development by Program Executive Office (PEO) Enterprise Information Systems (EIS) at the end of Fiscal Year 2024.

3) Return to a client-based scanning capability: The WEBS followed the ARMY CIO/G6 guidance to migrate systems from being legacy client server to being cloud capable. The original WEBS procurement in 2017 moved the client server system of fingerprints and other PII data being stored on the recruiter’s laptop to a cloud capable architecture. This move reduced the potential cyber security impact of spillage of PII data stored on the recruiter’s laptop. It also streamlined the fingerprinting process. Moving back to a client server architecture will increase the risk of a PII spillage and complicate the fingerprinting process currently in use.

c. Impact if not approved: Without approval of this justification, USAREC Recruiters would have to locally collect the information on their laptops and send the fingerprints for background checks on applicants. Due to the local inputs and efforts for both submitting fingerprints and uploading the results of the investigations, there is an increase in the probability of applicants who have an unacceptable background check, to be recruited into the Army. If the software was utilized without the renewal, it would negatively affect the cybersecurity posture of the WEBS and violate AR 25-2, Army Cybersecurity, which requires the availability of vendor provided security patches for installed information technology (IT) applications.

6. Actions to Increase Competition: The products to be acquired with this acquisition fit within the framework of a larger end-to-end system; therefore, no other brands are capable of functioning within the existing system. AR 25-1, Army Information Technology, directs commands to plan for a life cycle of existing IT equipment. The Army has initiated an Enterprise System called Accessions Information Environment (AIE) with the Program Executive Office for Enterprise Information Systems to replace the current HRC managed Accession systems. The AIE development process includes the procurement of a replacement for this WEB capability. The AIE is expected to reach Full Operating Capability by the end of FY24 and replace this system.