JA_RibbonSME_Redacted 2_Redacted.pdf

REs/SMEs in support of the DISA Voice Services Support of UC, the Ribbon SS and Associated Network Components

Page 3 of 8 Pages essential and unique features of these services are not physical attributes but are inextricably linked to the OEM, Ribbon Communications. Only a SME authorized by Ribbon can possess the following essential features required to meet the Government’s need:

(1) Access to Proprietary OEM-Level Technical Data: The SME must have access to Ribbon’s proprietary engineering documentation, internal diagnostic tools, and the source code of the operating system. This information is not publicly available and is essential for advanced troubleshooting and resolving complex system failures. This is a unique characteristic as only the OEM or an agent authorized by the OEM has this level of access.

(2) Direct Escalation Channel to Ribbon Engineering: The SME must have an established, formal channel for direct escalation to Ribbon’s Tier-4 engineering support. For catastrophic system outages or novel security vulnerabilities, the ability to engage the core developers of the hardware and software is critical for timely resolution. This direct relationship is a unique feature of the OEM’s own support structure and its authorized partners/resellers.

(3) Authority to Generate and Apply Licensed Software Updates and Security Patches: The required SME must be authorized by Ribbon to receive, validate, and apply official software updates, firmware revisions, and time-sensitive security patches. Using an unauthorized provider would mean relying on unofficial or non-existent software, violating licensing agreements and creating significant security risks.

(4) Possession of Current OEM Certification: The SME is required to hold a current, valid technical certification directly from Ribbon University or an equivalent OEM training program. This certification is the sole verifiable measure to ensure the expert’s knowledge is up to date with the latest hardware revisions and software versions. This is a unique feature that cannot be replicated by third-party training.

(b) After conducting market research, as described below in Section 6, the Government has determined that no other service provider can meet the agency's needs. The "products" of other companies—in this case, general IT support services or services from network vendors not authorized by Ribbon—are not compatible with the Government’s existing proprietary infrastructure and lack the essential features required for its support.

(1) Alternative Services Lack Compatibility: An alternative service from a non-authorized vendor is fundamentally incompatible because it lacks access to Ribbon’s proprietary architecture. They do not possess the essential "features" previously described: access to the proprietary source code and diagnostic tools, authority to issue licensed software updates, or the direct escalation channel to Ribbon's core engineering team. These features cannot be independently developed or modified by a third party, as they are legally and technically controlled by the OEM.

Page 4 of 8 Pages

(2) Inability to Modify: A non-authorized vendor cannot be "modified" to meet the need. They cannot legally reverse engineer the proprietary software, nor can they establish the required trusted relationship with Ribbon for escalation and patch support. Attempting to do so would violate licensing agreements and intellectual property law.

(c) The agency's acquisition history began with the initial capital investment and procurement of the Ribbon SBC hardware and associated software licenses, as well as services to design and deploy a modernized backbone. Following the initial deployment, the agency has a need to award a firm-fixed-price contract to secure the necessary maintenance, warranty, and expert technical support required to sustain the equipment. This support needs to be provided by the OEM or a partner/reseller officially authorized by the OEM to ensure success of the capital investment of the Ribbon SBC hardware and software.

This acquisition history directly impacts the present need by establishing the technological baseline. The Government has sunk cost in proprietary, mission-critical communications system architecture and development. The present requirement is a direct continuation of the lifecycle management for this existing system. To protect the Government's initial investment and ensure the continued operational readiness of the network, it is essential to acquire services that are compatible with that specific technology. Therefore, the brand-name service is required to be compatible with previously purchased equipment. The "service" being acquired is not a standalone item;

its entire value and function are dependent on its compatibility with the proprietary hardware and software of the Ribbon SBCs already installed in the agency's network. Any service provider that is not an expert in and authorized to support the Ribbon brand would be incompatible.

(d) If the Government is unable to obtain the brand-name SME services from an authorized Ribbon source, the agency's mission would be subject to severe and unacceptable detrimental effects. The loss of these unique services would result in the inability to properly maintain, secure, or repair the existing mission-critical communications infrastructure. The anticipated consequences are not merely administrative or financial;

they are operational and pose a direct risk to mission execution. Specifically, the following detrimental effects are anticipated:

(1) Progressive System Degradation and Outage: Without access to expert-level troubleshooting and OEM-authorized maintenance, minor system errors would go unresolved, accumulating over time until they lead to significant service degradation or a complete network outage. This would directly impair the agency's ability to conduct secure voice and data communications, compromising essential Command and Control (C2) functions.

(2) Exposure to Unmitigated Security Vulnerabilities: The cybersecurity landscape is dynamic, with new threats emerging constantly. The sole source for legitimate, validated security patches and firmware updates for the Ribbon infrastructure is the OEM. Without access to the brand-name service, the Government would be

Page 5 of 8 Pages unable to patch newly discovered vulnerabilities, leaving a critical component of its communications network exposed to potential exploitation, data exfiltration, or denial-of-service attacks by adversaries.

(3) Inability to Recover from Catastrophic Failure: In the event of a major system failure, the agency would have no viable path to resolution. Lacking the proprietary diagnostic tools and the direct escalation channel to Ribbon's core engineers, a catastrophic failure could result in the indefinite or even permanent loss of the communications system's capability. This would make the Government's significant initial investment in the equipment worthless and cripple all missions that depend on it for secure communication.

In summary, the inability to obtain the brand-name service would leave a mission-critical system unsupportable, insecure, and unreliable, creating a direct and unacceptable risk to the agency's operational capacity and national security mission.

5. BEST VALUE DETERMINATION:

GSA has already determined that prices of supplies, fixed price services, and rates offered at hourly rates are fair and reasonable for the purpose of establishing the schedule contract. The Contracting Officer will make a determination of fair and reasonable pricing of the proposal received using the proposal analysis techniques at FAR 15.404-1. Discounts from GSA MAS pricing will also be sought prior to award.

6. MARKET RESEARCH:

Meaningful market research was conducted between 05 December 2025 and 20 March 2026 by the agency's technical and contracting personnel to determine if any source other than the OEM or its authorized partners/resellers could meet the Government's need for highly specialized Ribbon SME services.

The market research process involved several methods:

Database Queries: Searches were conducted on GSA eLibrary and GSA Advantage!

using relevant keywords including "Ribbon Support," "SBC Maintenance," and "Session Border Controller services."

Review of Government-Wide Acquisition Contracts (GWACs): The National

Aeronautics and Space Administration (NASA) Solutions for Enterprise-Wide Procurement (SEWP) and other relevant GWACs were reviewed for vendors offering this specific brand of support.

Open-Market Internet Searches: Broader searches were conducted to identify any third-party companies advertising support for Ribbon products.

Page 7 of 8 Pages approximately five years, aligning with standard technology refresh cycles and the total potential period of performance for this support contract. At that point, the fundamental barrier to competition—the proprietary nature of the incumbent hardware and software— will be removed. The acquisition strategy for the follow-on replacement system will be structured for full and open competition. The requirements will be defined using performance-based specifications that are brand-name agnostic, allowing any vendor whose solution meets the Government's technical and security requirements to compete.

Therefore, while this J&A is necessary to sustain the current system, full and open competition is expected and will be a central part of the acquisition strategy when this architecture is replaced in approximately five years.

(b) Actions to remove barriers. The primary barrier to competition is the proprietary nature of the currently fielded Ribbon hardware. The following specific actions will be taken to remove this barrier for future acquisitions:

i. Development of a Brand-Agnostic Performance Work Statement (PWS): Prior to the lifecycle technology replacement, the Government will develop a new, performance-based PWS for the follow-on requirement. This PWS will be intentionally brand-agnostic, defining requirements based on functional outcomes such as call handling capacity, supported interoperability standards (e.g., Session Initiation Protocol, H.323), security compliance with DoD directives, and mean time to repair, rather than specifying any particular manufacturer's features.

ii. Programmatic Budgeting for Technology Refresh: The agency will program and budget for a complete technology refresh of the SBC infrastructure to align with the conclusion of this contract's period of performance. By securing funding specifically for a new system acquisition, the agency commits to replacing the existing proprietary hardware, which is a key premise of the sole-source requirement.

Competition will be a primary and deciding factor in the source selection process for the follow-on acquisition effort. The brand-name requirement for SME services is directly tied to the lifecycle of the currently fielded hardware and is not expected to continue beyond the lifecycle of the Ribbon equipment.

(c) There have been no changes in circumstances that have reduced competition for this specific requirement. The initial acquisition of the communications system itself was competitive and brand agnostic, but once the agency selected and invested in the proprietary Ribbon solution, the circumstances for all future sustainment and deep-level support were immutably set. The need for a brand name SME services is not a change, but rather a logical succession of the initial procurement decision.