JA - Extension 2018-VC02.pdf

Military Interdepartmental Purchase Request (MIPR) Number: TBD

JUSTIFICATION FOR OTHER THAN FULL AND OPEN COMPETITION (OTFAOC)

JUSTIFICATION FOR EXCEPTION TO FAIR OPPORTUNITY

Justification: JA12-082

Upon the basis of the following justification, I, as the Procuring Activity Competition Advocate (PACA), hereby approve the use of other than full and open competition of the proposed contractual action pursuant to the authority of 10 U.S.C. 2304c(b)(2).

JUSTIFICATION

1. REQUIRING AGENCY AND CONTRACTING OFFICE: (FAR 16.505(b) (2) (ii) (B) (1))

REQUIRING ACTIVITY: USCYBERCOM

J3/J5 Directorate 9800 Savage Road

Ft. George G. Meade, Maryland, 20755

CONTRACTING ACTIVITY: Defense Information Systems Agency (DISA) Defense Information Technology Contracting Organization

PL61

6910 Cooper Avenue Ft. George G. Meade, MD 20755

2. NATURE/DESCRIPTION OF ACTION: (FAR 16.505(b) (2) (ii) (B) (2)) The proposed contract action is to extend Hewlett Packard (HP) contract awarded via ENCORE II Firm Fixed Price (FFP) contract# HC1028-08-D-2018 task order (TO) VC02 up to six (6) months. The task order period of performance will consist of a three (3) month base period and three (3) one (1) month option periods. The total estimated value of the extension is XXXX. The total value of the task order with the extension inclusive of options is XXXX. The task order will be funded with FY12 Operations and Maintenance funding.

3. DESCRIPTION OF SUPPLIES/SERVICES: United States Cyber Command (USCYBERCOM) is a sub-unified combatant command under the United States Strategic Command (USSTRATCOM).

USCYBERCOM is in the process of utilizing full and open competition to seek a vendor to perform the functions currently provided by the incumbent contractor. Until this follow on contract is awarded, it is imperative to maintain the current contractor workforce in order to meet current mission critical requirements.

The Secretary of Defense directed the establishment of the sub-unified Combatant Command (COCOM), USCYBERCOM in June 2009. The command was activated in May 2010 when its Commander was confirmed by Congress. However there is still much work to be done with defining the commands mission and authority as well as understanding/refining relationships with COCOMs, Services, Other Government Agencies, Industry, and our Foreign Partners. With an evolving mission, unrefined authorities within the Federal Government, limited access to government workers with highly technical skills, Government Service pay limitations, (same issue applies to military personnel), and inability to determine the scope of support necessary, extension of services provided by the incumbent contractor is desired for interrupted mission support.

The objectives within the USCYBERCOM Operations and Planning mission areas are currently supported through the various tasks delineated on ENCORE II Task Order HC1028-08-D-2018-VC02.

The VC02 Task Order provides information assurance expertise in support of protection of the Global

Information Grid (GIG). The nature of cyber operations, defense and offense is unquantifiable. DOD will never be able to measure exactly how much support is required to adequately defend deliberate hackers and malcontents from exploiting networks and introducing malware that does significant damage to DOD and public infrastructures. However, having critical information assurance contractor expertise in place that enables flexibility and lower costs is possible and desirable.

The services to be received under this action include support of USCYBERCOM Operations Directorate (J3) and USCYBERCOM Planning Directorate (J5) mission critical areas as it pertains to the Information Assurance (IA) Computer Network Defense (CND) program to defend and manage the Global Information Grid (GIG) as well as established increased technical analysis support as it relates to Department of Defense (DOD) IA/CND Strategies. Additionally, the contractor will support USCYBERCOM’s established and implemented operational support for the implementation of the Host Base Security Solution (HBSS) system across the DOD as it relates to DODI 8500.2 as well as USCYBERCOM’s established and implemented refined Information Operations Condition System (INFOCON) and tailored response actions in support of Combatant Commanders, Services, and Agencies

(CC/S/A).

4a. IDENTIFICATION OF STATUTORY AUTHORITY: In accordance with Federal Acquisition Regulation (FAR) 52.217-8–The Government requires continued performance services within the limits and at the rates specified in the contract and subject to revisions to prevailing labor rates provided by the Secretary of Labor. The option provision may be exercised more than once, but the total extension of performance hereunder shall not exceed 6 months. IAW FAR 16.505(b) (2) (i) (A), USCYBERCOM’s need for services is so urgent that providing a fair opportunity would result in unacceptable delays.

Hewlett Packard (HP) is the incumbent contractor. Extension of the task order up to (6) months comprised of a three (3) month base and three (3) one (1) month option periods will provide mission integrity for critically staffed positions supporting the DOD Cyber Operations and Defense mission.

4b. DEMONSTRATION OF CONTRACTOR’S UNIQUE QUALIFICATIONS:

The existing task order will expire on 30 Mar 2012. Current tasks require personnel trained in highly technical fields, DOD specific Command and Control applications, and TS/SCI clearances with polygraphs. HP has the knowledge, situational awareness, and hands-on experience for the critical mission requirements of USCYBERCOM J3 and J5 operations. HP is uniquely qualified to provide the support necessary without disruption until USCYBERCOM’s current contracting and acquisition processes are complete.

HP is uniquely qualified in areas such as Network Operations and IA/CND activities critical to the security and survivability of CC/S/A and USCYBERCOM’s mission. HP’s combined experience and knowledge of IA/CND tools, including Vulnerability Management System (VMS), HBSS, INFOCON, User Defined Operational Picture (UDOP), incident management, and Global Information Grid Common Operational Picture (GIG-COP) is well over 30 years. Beyond the IA/CND areas, the technical analytical experience of HP is further strengthened by many years of Non-Secure Internet Protocol Router Network/ Secret Internet Protocol Router Network (NIPRNet/SIPRNet) Demilitarized Zone (DMZ) architecture and network security development and integration, as well as in-depth operational knowledge and experience with both Public Key Infrastructure (PKI) processes and procedures.

(a) This J&A is an interim solution until award of the competitive acquisition is completed.

HP is the only known source that can meet the USCYBERCOM’s urgent requirements at this time.

HP has the specialized clearances, certifications, network access, expertise, and resident knowledge to continue to support USYBERCOM without significant impact to cyber operations.

(b) The period of performance for this bridge action is a total of six (6) months; three (3) month with three (3) one (1) month option periods. This will enable sufficient time to complete ongoing discussions, receipt and evaluation of final proposals, contract award, and the potential transition time between incumbent and newly awarded contractor, without unnecessarily extending the sole-source bridge task order.

(c) All personnel supporting this task must have access and accounts on the Sensitive unclassified Internet Protocol Router Network (NIPRNET), the Secret Internet Protocol Router Network (SIPRNET), and the National Security Agency Network (NSANET), and be familiar with network operating procedures on all three networks. Furthermore, the current working knowledge and experience of HP in support of protection of the Global Information Grid (GIG) as well as established increased technical analysis support as it relates to Department of Defense (DOD) IA/CND Strategies cannot be provided by any other contractor without risk to cyberspace operations and DOD network defense. A transition time of at least 2 weeks is required for the potential new contractor to transition services from the incumbent in order to avoid unacceptable lapses in support required to prevent/protect DOD networks from exploitation or attacks by various sources potentially leading to a complete disruption of service across DOD. Therefore, continuing existing services with HP is imperative until award of the competitive acquisition is realized in late June 2012 or July of 2012.

IMPACT: The incumbent provides critical support towards maintaining computer network defense and preventing computer network exploitation on the part of deliberate hackers and malcontents across all DOD networks. Specifically, the incumbent provides operational support for the implementation of the Host Base Security Solution (HBSS) system across the DOD, and support of protection of the Global Information Grid (GIG) as well as increased technical analysis support as it relates to Department of Defense (DOD) IA/CND Strategies. Without this support, DOD networks would be subjected to constant attacks from malware, viruses, denial of service, etc. bringing the productivity of the DOD to a halt and severely jeopardizing the security of our nation.

5. COST/PRICE FAIR AND REASONABLE DETERMINATION: (FAR 16.505(b) (ii) (B) (5)) Price evaluation is required in accordance with evaluation criteria established for each requirement.

Pricing has been established as fair and reasonable under the ENCORE II base contract. The Contracting Officer will perform a price analysis to ensure the cost to the Government will be fair and reasonable.

This information will be ascertained by review of the proposed prices to HP established ENCORE II labor rates and categories as well as comparison to the Independent Government Cost Estimate.

6. MARKET RESEARCH (FAR 10.002), The market research, completed in Jan 2012 by USCYBERCOM personnel, revealed that HP was the only vendor that could satisfy the Government’s minimum essential requirements for this immediate support requirement. These essential requirements include expertise in the mission areas currently performed by the vendor and the ability for all contractor staff to obtain and retain appropriate clearance levels/polygraphs to enable immediate access to government facilities at National Security Agency (NSA) Ft. George G. Meade, MD. The research was performed to identify competitive sources that could satisfy the critically staffed, mission essential positions as well as meet the critical time line (immediately) without loss of mission operations integrity.

Potential sources were identified by consulting USCYBERCOM and NSA experts as well as leveraging search engines on market research. Market research was conducted to identify vendors, both large and small, capable of providing the required services. The market research included a research on the following search engines: govcon.com, imart.org, and industrylink.com.The following organizations were possible sources that could meet the requirements. A large business; Decision One, Inc. and a small business; Futurelink Corp.; however neither of these had the staff levels with TS/SCI clearances with polygraphs required to access the government facility which is needed for immediately . Other Encore II contractors do not have the ability to meet clearance requirements to access government facilities for this immediate requirement. In addition, other contractors do not possess the legacy knowledge HP has necessary to prevent a significant disruption to the mission. At this time continuing service support through HP is preferred in order to provide uninterrupted/critical support to the USCYBERCOM.

7. ANY OTHER SUPPORTING FACTS. (FAR 16.505(b) (2) (ii) (B) (6)). None.

8. ACTIONS TAKEN TO REMOVE BARRIERS TO COMPETITION: (FAR 16.505(b) (2) (ii) (B) (7))

(a) Procurement History.

(1) ENCORE II HC1028-08-2018/VC02, Competitively awarded to Hewlett Packard (HP), 30

March 2009; one base year and three option years. The current contract value inclusive of options is XXXX.

(2) USCYBERCOM is currently in the process of finding a new Task Order through Full and Open Competition to assume responsibility for the tasks currently performed by the subject Task Order upon expiration.

9. REFERENCE TO THE APPROVED ACQUISITION PLAN (AP) PROGRAM PLAN (PP):

(DARS 8.405-6(g) (2) (S-91)) No Acquisition Plan Required.

TECHNICAL CERTIFICATION: "I certify that the supporting data under my cognizance which are included in the J&A are accurate and complete to the best of my knowledge and belief."

NAME: RUDOLPH C. HAYNIE SIGNATURE: //SIGNED//

TITLE: Chief of Business Operation DATE: 29 March 2012

REQUIREMENTS CERTIFICATION: "I certify that the supporting data under my cognizance which are included in the J&A are accurate and complete to the best of my knowledge and belief.”

NAME: MAJ AKIN O. AKINTEWE SIGNATURE: //SIGNED//

TITLE: Task Monitor DATE: 29 March 2012

CONTRACTING OFFICER CERTIFICATION: Include the following determination:

“I certify that this justification is accurate and complete to the best of my knowledge and belief.”

NAME: SUZANNE RIPPENBAUM SIGNATURE: //SIGNED//

TITLE: Contracting Officer DATE: 29 March 2012

PROCURING ACTIVITY COMPETITION ADVOCATE APPROVAL

“I have reviewed this justification and find it to be accurate and complete to the best of my knowledge and belief. Since this justification does not exceed $12.5M, this review serves as approval.”

APPROVED BY: (FAR 16.505(b) (2) (ii) (C) (2)) Signature: //SIGNED//

ANN M. VAUGHN, Procuring Activity Competition Advocate, PLA, XXXX, 29 March 2012 Procuring Activity Competition Advocate Organization Phone Date