JA-24-0167 - Blackberry Final_Redacted.pdf

OFFICE OF ACQUISITION MANAGEMENT

ICE Acquisition Manual 3016.505-90

ITEMS PARTICULAR TO ONE MANUFACTURER (BRAND-NAME)

WHEN PLACED UNDER AN INDEFINITE DELIVERY INDEFINITE QUANTITY (IDIQ) CONTRACT

FAR 16.505(a)(4) and 16.505(b)(2)(ii)

J&A-24-0167

1. Agency and Contracting Activity.

The Department of Homeland Security (DHS), U.S. Immigration and Customs Enforcement (ICE), Office of Acquisition Management (OAQ) proposes to award an IDIQ delivery order on behalf of the ICE/Office of Chief Information Officer (OCIO) Operations Enterprise Services Branch resulting from a solicitation containing a brand-name specification.

2. Nature and/or description of the action being approved.

(a) Name of the ICE, DHS, or Multiple-Agency Multiple Award Contract that the delivery/task order or modification is being placed under:

DHS First Source II IDIQ

(b) If applicable, identify the functional category, size category, or other sub-section of awardees which will be provided a fair opportunity to be considered:

This procurement will be competed between the qualified First Source II vendors that are part of the HUBZONE Socio-Economic Category.

(c) Identify contract type and whether new action or modification:

Firm Fixed Price, New Action

(d) Dollar amount for this justification:

(e) Title of the required brand-name manufacturer and product:

Manufacturer: BlackBerry Limited Products: BlackBerry Spark UEM Suite User License - Premium Support, SmartOffice for Blackberry Dynamics UBM 1 CAL per user

ITEMS PARTICULAR TO ONE MANUFACTURER (BRAND-NAME)

WHEN PLACED UNDER AN INDEFINITE DELIVERY INDEFINITE QUANTITY (IDIQ) CONTRACT

3. Description of Supplies/Services.

(a) Blackberry’s Unified Endpoint Management (UEM) solution provides Mobile Device Management (MDM) and Mobile Application Management (MAM) to secure, manage, and maintain mobile devices and mobile applications. With Derived PIV Credential and Modern Authentication support, ICE users can use their ICE GFE mobile device to access many of the same resources available on an ICE workstation - including but not limited to email, Microsoft apps, ICE apps, timekeeping, and travel management. Blackberry’s solution protects data and communication within its secure container for both iOS and Android mobile devices that meet Agency requirements.

(b) The period of performance will consist of 09/29/2024 through 09/28/2025.

(c) The total estimated value is as follows:

Period Time Price Total Base 12 mos.

4. Statutory Exception and Rationale.

Exception:

The specific exception for providing brand-name awards under multiple award contracts is Federal Acquisition Regulation (FAR) Subpart 16.505(a)(4). An item peculiar to one manufacturer can be a particular brand-name, product, or a feature of a product peculiar to one manufacturer. A brand-name item, even if available on more than one contract, is an item peculiar to one manufacturer.

Rationale:

(a) Market research was performed between May 3, 2024, through May 10, 2024, via the Internet, email, and telephone interviews. ICE requires access to ICE email, calendar events and DHS contact information on mobile products that can function on Apple iOS, Android OS, Windows Mobile, and Palm OS versions. ICE requires a single solution for device and app management. Multi-OS endpoint management tools were evaluated. The Blackberry United Endpoint Management (UEM) solution was evaluated against Quest KACE Cloud and the Microsoft Intune solution.

Features assessed were device enrollment, device configuration, device compliance, Mobile Application Management (MAM), and derived PIV credential (DPC) support.

(b) Microsoft Intune is a competing MAM provider for Microsoft Mobile applications but does not provide

Mobile Device Management (MDM) configurations that meet the DHS security requirements for device management. Microsoft Intune is also not compatible with the DHS Derived Credentials for secure authentication to meet the DHS security requirement.

Quest KACE Cloud is a comparable product which provides easy device enrollment, comprehensive inventory information and a broad set of device commands; from resetting a password to wiping a stolen device, which help minimize security risks and data breaches. Quest KACE Cloud and Blackberry UEM products protect data at rest or in transit with industry standard encryption. The limiting feature of KACE

ITEMS PARTICULAR TO ONE MANUFACTURER (BRAND-NAME)

WHEN PLACED UNDER AN INDEFINITE DELIVERY INDEFINITE QUANTITY (IDIQ) CONTRACT

Cloud is its lack of DPC support. Derived PIV Credential compatibility is required to meet DHS security requirements on identity management.

The current DHS derived PIV system is being phased out and is under a change freeze. DHS is migrating to a new DPC solution called “MyID”, provided by Intercede. Intercede and Blackberry have been actively working on integrating the MyID Software Development Kit (SDK) into the UEM application. Attempting to change MDM solutions in the middle of the DPC migration would be an inefficient use of time and funding and would likely delay migration efforts for all DHS components.

The OCIO Mobility Program team evaluates MDMs and MAMs regularly to determine if there are better options available. At this time, we cannot justify a multi-million-dollar migration of this scale. Any short-term cost savings associated with migrating to Quest KACE Cloud would be lost to labor and licensing associated with building a second MDM environment, maintaining both systems, migrating to the new system, and the unknown cost to DHS to develop a compatible DPC alternative, or to compensate Quest KACE to integrate DPC support.

5. Determination by the contracting officer that the anticipated cost to the Government will be fair and reasonable.

The contracting officer determines that the anticipated price(s) will be fair and reasonable based on adequate price competition. Multiple DHS First Source II, HUBZONE vendors provide these brand name products. The Government has a reasonable expectation that at least two quotes will be received.

6. Any other facts supporting the justification.

None

7. A statement of the actions, if any, the agency may take to remove or overcome any barriers that led to the exception to fair opportunity before any subsequent acquisition for the supplies or services is made.

It is not likely that ICE’s platform services and licensing will change before this contract ends. ICE will continuously update its market research to determine if other competitors will offer the features needed to fulfill the requirement.

8. If the total dollar value of this action exceeds $30,000, OAQ intends to provide the justification and supporting documentation along with the solicitation to all (IDIQ) contract awardees under the First Source II HUBZONE Socio- Economic Category in accordance with FAR 16.505(a)(4)(iii)(A).

ITEMS PARTICULAR TO ONE MANUFACTURER (BRAND-NAME)

WHEN PLACED UNDER AN INDEFINITE DELIVERY INDEFINITE QUANTITY (IDIQ) CONTRACT

9. Technical/Requirements Personnel Certification.

I certify that this requirement meets the Government’s minimum need and that the supporting data, which form a basis for the Brand-Name Justification, are accurate and complete.

10. Contracting Officer Certification.

I hereby certify that the Brand-Name Justification is accurate and complete to the best of my knowledge and belief.

11. Approval: