JA16-087 MOD 05 METSS II REDACTED.pdf

Reference No: METSS-II Title of Effort: J&A for METSS-II-JA16-087 MOD 05

Page 5 of 22 pages

The solutions, assistance, and consultation work will require direct and rapid access to Microsoft’s proprietary data and closed-source code for current and future enterprise applications and technical support. This access is obtained through “Microsoft Blue Badge cardholder-support” services direct from Microsoft that include access rights to Microsoft (closed-source) code, which is licensed under the exclusive legal right of the Microsoft Corporation. “Microsoft Blue-Badge contractors” have direct access to several restricted Microsoft internal websites, proprietary data, closed-source code and portals.

Additionally, DISA and DoD mission partners require access to MCS and MPS expertise to fulfill requirements listed in the DEPSECDEF memo “Implementation of the Microsoft Windows 10 (WIN10) Secure Host Baseline,” dated February 26, 2016. These services will allow DISA and DoD to align their IT infrastructure with the objectives of the DISA Strategic Plan as well as meet DoD’s efficiency initiatives of enabling a joint information environment.

Services obtained via this contract will be considered “in-scope” when requirements dictate capabilities needed for: “Microsoft Blue Badge cardholder-support” services direct from Microsoft that require access rights to Microsoft (closed-source) code, which is licensed under the exclusive legal right of the Microsoft Corporation. The following technical requirements, included in the METSS-II performance work statement (PWS), will utilize the expertise and skills of MCS and MPS. The requirements include, but are not limited to:

a. IT Strategic Architecture and Planning. Microsoft software is an integral part of DoD’s architecture within its tactical and non-tactical environments. Microsoft software is a key component in achieving the DoD’s vision and migrating to a more secure environment.

The DoD’s vision is to build a joint information enterprise-based network-centric organization that utilizes the synergy of technology and human capital to achieve decision dominance in support of network-centric warfare as described in the DISA Strategic Plan and DoD’s initiatives for enabling a joint information environment. This support includes but is not limited to collaboration design and support of the agency’s IT transformation, enterprise design and prototyping, implementation and deployment of enterprise services, facilitation of problem resolution in support of the government’s infrastructure development and architectural planning.

b. Architecting and Deploying Core Infrastructure Technologies. MCS and MPS are required to assist DISA and DoD with the architecture and troubleshooting of DoD’s enterprise services portfolio. This architecture includes, but is not limited to, the service infrastructure, security architecture, as well as maintenance and troubleshooting during deployment and operation. Failure to have MCS and MPS available would significantly and adversely impact DISA’s ability to field quality service to the warfighter in a timely and cost-conscious manner. Deployment of these services requires access to closed-source code changes, and MPS is the only means of obtaining the required modification of Microsoft products after release. MCS and MPS are essential for all implementation of enterprise services for DISA and are required by all of DoD for this purpose.

c. Application Development Project Services. This includes, but is not limited to, collaboration design and deployment services as well as enterprise design and

Page 6 of 22 pages deployment services. DISA has invested in a joint enterprise license agreement (JELA) with Microsoft for their software products, which extends through October 31, 2016, and covers all Army, Air Force, and DISA elements. A follow-on Microsoft JELA may be issued in the future. DISA’s requirement is to enhance security by migrating to the Microsoft software product version that is most secure, migrating away from non-supported products such as Microsoft NT4 and Exchange 5.5 and moving to an enterprise model in order to meet DISA Strategic Plan Goal 1, Provide joint command and control (C2) and leadership support and Goal 3, operate and assure the enterprise. MCS and MPS services are required to complete the migration and fine-tune the secure architecture. In addition, multiple DoD agencies have requirements for direct access to Microsoft source code and expressed interest in obtaining MCS and MPS services under this contract.

d. Cyber Security Services and Cyber Security Incident Response Services. The DISA network operations procedures were established to manage, protect, and defend a Microsoft-centric network infrastructure and Microsoft-centric cyber vulnerabilities.

This Microsoft infrastructure serves as DISA’s foundation, enabling DISA to consistently execute its IT mission. The government requires MCS to assist in implementation of large systems including but not limited to, methodology, design approaches and architectural infrastructure and engineering considerations; assisting to implement cybersecurity strategies, technologies and implement tools and services to increase resilience; develop intelligence, warning, and operational capabilities to mitigate malicious cyber-attacks.

e. Other DoD Specialized/Emerging Projects. DISA will be fully engineering, designing, implementing, and deploying an enterprise Identity and Access Manager (IdAM), email system (DoD Enterprise Email (DEE), and a web content and documentation management collaboration solution Defense Enterprise Portal Services (DEPS), across the entire DoD Information Network infrastructure, both in the CONUS and OCONUS.

IdAM establishes a standard directory structure allowing users to access resources globally, which can be leveraged by all organizations in support of the warfighter. MCS are required to support the mission of DISA as it seeks to implement Active Directory (AD) and Exchange. MCS is also required to aid in the migration of users and applications from the multi-environment AD legacy to a single, enterprise environment.

MCS is required to support the mission of DISA as it seeks to sustain the system center in support of IdAM, DEPS and DEE capabilities, to recommend technologies, solutions and architectures that reduce the total cost of ownership of DoD-owned systems and enable DISA to manage the DISA IdAM, DEPS and DEE infrastructure as an enterprise. DISA requires access to emerging Microsoft products, source code, Microsoft factory consultants and trained support personnel (“Blue Badges”).

The government requires MCS to assist in developing, integrating, and deploying IT architectures, designs, and solutions related to AD/Exchange, or in support of other related DISA enterprise infrastructure activities. The job of DISA is to ensure that the deployed solution is integrated across the DoD enterprise and then to manage, operate, Page 8 of 22 pages anticipation of the February 2026 NIWC PAC award of the follow-on contract to the current DoD ESI MES contract. The extension to the current contract is in lieu of establishing a separate contract and allows the Government to leverage existing agreements with Microsoft, resulting in cost effective solutions.

4. IDENTIFICATION OF STATUTORY AUTHORITY: The statutory authority permitting other than full and open competition for this acquisition is 10 U.S.C. Section 2304(c)(1), MOD 03 revises to 10 U.S.C. 3204(a)(1) as implemented by FAR 6.302-1(a)(1), only one responsible source and no other supplies or services will satisfy agency requirements.

5. DEMONSTRATION OF CONTRACTOR’S UNIQUE QUALIFICATIONS:

a. Description of Events. DISA and the DoD have utilized direct and rapid access to Microsoft services to identify architecture change impacts and security risks associated with current and future product releases that could impact DISA and DoD infrastructures.

Moreover, MCS and MPS personnel (“blue badges”) have unfettered and unique access to tools and intellectual property designed to assess, defend, and recover from C2 breakdowns, denial of service, redirection to counterfeited web sites (malware), socially engineered emails (phishing attacks), key loggers, spyware, and an overall loss of network integrity that may be specific to Microsoft products.

DISA and the DoD have a strategic partnership with Microsoft regarding MCS and MPS, which allows for direct and rapid access to Microsoft’s proprietary data and closed-source code for current and future enterprise applications and technical support. The “blue badge” direct access is critical to DISA and the DoD. This direct access to both current and future products play a key role in allowing DISA to have unique enterprise services insight into the architecture of current solutions that can facilitate smooth migrations to future unreleased products/versions based on in-depth access to Microsoft internal resources. ISC/IM and the DoD requires access to Microsoft's inherent expertise with all facets of installation and configuration of their products as well as a fully/constantly trained and skilled matrixes workforce to support DISA’s enterprise services. Furthermore, DISA realized Microsoft’s ability to provide quick reaction to resolve any issues related with Microsoft products and/or expedite resolution on critical risk situations. DISA requires MCS’s direct access to Microsoft software developers to quickly address customer design and architecture issues and ultimately product bug issues (i.e., hot fixes) with MPS teams strategically linked with DISA Defense Enterprise Computing Centers and other government locations in real-time on a 24x7x365 basis.

MCS can quickly establish valuable technology feedback links between IM’s customers and the Program Management Office product services development teams to help shape the future direction, features, and functionality of forthcoming enterprise services applications.

b. Justification.

(1) Minimum Government requirements. The Government’s requirement is for MCS

Page 11 of 22 pages award for the DoD ESI MES follow-on contract is not anticipated until February 2026. As a result, a one-year extension of the ordering period is being requested for continued specialized support for MCS and MPS/Unified services and transition of requirements to the MES-II vehicle as discussed in Section 2.

(4) Demonstration of unique source. Microsoft maintains strict control over its proprietary source code and does not allow resellers access to that code, allowing them to provide MCS and MPS. Therefore, the Microsoft Corporation is the only source to provide direct and unique access to the various Microsoft product teams, software developers and source code for current and future products, enabling (a) specialized insight into the architecture of current solutions that can facilitate smooth migrations to existing and future unreleased products/versions; (b) quick and comprehensive resolution of product support, trouble-shooting and hot-fix type issues; and (c) immediate and focused technology feedback link between the DoD and the product development teams to help shape the direction, features, and functionality of future products.

(5) Procurement discussion. This requirement is for consulting and technical services that involve solutions requiring access to Microsoft proprietary information. The access to this proprietary information defines the necessity for this acquisition to be executed via a sole source. Historically, these services were procured via the original METSS IDIQ under the authority of FAR 6.302-1(a)(1); only one responsible source and no other supplies or services will satisfy agency requirements.

MOD 01: There have been 115 task orders issued against the METSS-II contract.

Of the 115 task orders awarded, nine of those orders were issued to DISA mission partners, while the remaining 106 were issued to external partners including the Armed services and individual agencies across all of DoD.

MOD 02: There have been 119 task orders issued against the METSS-II contract.

Of the 119 task orders awarded, ten of those orders were issued to DISA mission partners, while the remaining 109 were issued to external partners including the Armed services and individual agencies across all of DoD.

MOD 03: There have been 195 task orders issued against the METSS-II contract.

Of the 195 task orders awarded, 24 of those orders were issued to DISA mission partners, while the remaining 171 were issued to external partners including the Armed services and individual agencies across all of DoD. There are currently 65 active orders.

MOD 04: There have been 234 task orders issued against the METSS-II contract.

Of the 234 task orders awarded, 24 of those orders were issued to DISA mission partners, while the remaining 210 were issued to external partners including the Armed services and individual agencies across all of DoD. There are currently 77 active orders.

Page 12 of 22 pages

MOD 05: There have been 247 task orders issued against the METSS-II contract. Of the 247 task orders awarded, 27 of those orders were issued to DISA mission partners, while the remaining 220 were issued to external partners including the Armed services and individual agencies across all of DoD. There are currently 71 active orders.

(6) Impact: If the MCS and MPS services are not procured from Microsoft, DISA and

DoD would be significantly impacted with a lapse in service and would ultimately have to entertain the total replacement of the Microsoft infrastructure and software products. DISA has successfully built a defense infrastructure of its cyberspace, relying on the security standards, multi-layered defensive technologies, and training principles and technologies of Microsoft. The cyber defense infrastructure will be severely jeopardized if DISA is not permitted to procure support for the Microsoft products within their existing infrastructure. Failure to maintain and fortify cyberspace defenses will expose DISA and the DoD to significant and potentially irreparable harm.

If MCS and MPS are not procured, existing Microsoft software applications, with a historical investment by the Army, Navy, DISA and multiple other DoD agencies, will have to be replaced. The cost to do so would be unacceptable, especially with the current uncertainty regarding budgetary restrictions.

Other impacts include, but are not limited to, potentially tens of millions of dollars, based on current department expenditures, in duplication of costs and unacceptable delays in services. Additionally, an estimated cost in the millions would be required for investment in research and development to determine another operating system and application software standard that duplicates the current secure standard operating system and application configuration. Furthermore, the Government would be at a near stoppage of work and inability for DISA and other DoD organizations to operate.

MOD 01: Failure to increase the ceiling would result in a disruption of DISA and DoD mission partner operations. Also, it would restrict the DISA and DoD mission partners’ ability to meet the DEPSECDEF Windows 10 migration requirement and would reduce responsiveness to emerging requirements. The METSS-II contract offers the best available labor rate pricing for direct and rapid support for MCS and MPS expertise with “Microsoft Blue Badge” access currently on the market. To ensure continued support for DISA and Non-DISA mission partners’ ability to procure timely and cost effective MCS and MPS expertise, a ceiling increase is in the best interest to the Government.

MOD 02: At the pace of orders being placed, the current METSS-II ceiling will not be adequate for the necessary ordering capacity through December 2021. Further, MCS and MPS solutions will continue to be needed beyond the current December 2021 expiration of METSS-II and failure to provide continued support through December 2021 and beyond would result in a disruption of DISA and DoD mission partner operations. In addition, as discussed in MOD 01, concern remains that

Page 13 of 22 pages failure to provide continued support would restrict the DISA and DoD mission partners’ ability to meet the DEPSECDEF Windows 10 migration requirement and would reduce responsiveness to emerging requirements. The METSS-II contract offers the best available labor rate pricing for direct and rapid support for MCS and MPS expertise with “Microsoft Blue Badge” access currently on the market. To ensure continued support for DISA and Non-DISA mission partners’ ability to procure timely and cost effective MCS and MPS expertise, a two-year contract extension and subsequent ceiling increase is in the best interest to the Government.

MOD 03: MCS and MPS/Unified solutions will continue to be needed beyond the current December 2023 expiration of METSS-II and failure to provide continued support through December 2023 and beyond would result in a disruption of DISA and DoD mission partner operations. In addition, as discussed in MOD 01 and 02, concern remains that failure to provide continued support while NIWC PAC procures a follow-on contract would restrict the DISA and DoD mission partners’ ability to meet the DoD requirements and reduce responsiveness to emerging requirements.

The METSS-II contract offers the best available labor rate pricing for direct and rapid support for MCS and MPS/Unified expertise with “Microsoft Blue Badge” access currently on the market. To ensure continued support for DISA and Non- DISA mission partners’ ability to procure timely and cost effective MCS and MPS/Unified expertise, a one-year contract extension is in the best interest to the Government.

MOD 04: MCS and MPS/Unified solutions will continue to be needed beyond the current December 2024 expiration of METSS-II and failure to provide continued support through December 2024 and beyond would result in a disruption of DISA and DoD mission partner operations. In addition, as discussed in MODs 01, 02, and 03, concern remains that failure to provide continued support while NIWC PAC procures a follow-on contract would restrict the DISA and DoD mission partners’ ability to meet the DoD requirements and reduce responsiveness to emerging requirements. The METSS-II contract offers the best available pricing construct for direct and rapid support for MCS and MPS/Unified expertise with “Microsoft Blue Badge” access currently on the market. To ensure continued support for DISA and its external mission partners’ ability to procure timely and cost effective MCS and MPS/Unified expertise, a one-year contract extension is in the best interest to the Government.

MOD 05: MCS and MPS/Unified solutions will continue to be needed beyond the current December 2025 expiration of METSS-II and failure to provide continued support through December 2025 and beyond would result in a disruption of DISA and DoD mission partner operations. In addition, as discussed in MODs 01, 02, 03, and 04, concern remains that failure to provide continued support while NIWC PAC completes the MES-II procurement strategy would restrict the DISA and DoD mission partners’ ability to meet the DoD requirements and reduce responsiveness to emerging requirements. The METSS-II contract offers the best available pricing construct for direct and

Page 14 of 22 pages rapid support for MCS and MPS/Unified expertise with “Microsoft Blue Badge” access currently on the market. To ensure continued support for DISA and its external mission partners’ ability to procure timely and cost effective MCS and MPS/Unified expertise, a one-year contract extension is in the best interest to the Government.

6. FEDBIZOPPS ANNOUNCEMENT/POTENTIAL SOURCES. This requirement was advertised via a combined sources sought and notice of intent to award a sole source contract posted to FedBizOpps on June 1, 2016 through June 15, 2016. The combined sources sought and notice of intent to award a sole source contract meets the requirements of FAR 5.201 and DISA Acquisition Regulation Supplement 206.302-1. Three responses were received, two being after the closing date and time. On June 8, 2016, GSA provided a capabilities statement for their 8(a) Streamlined Technology Application Resource for Services (STARS) II GWAC. Although the 8(a) STARS II GWAC offers multiple Microsoft products and services, it does not offer MCS and MPS specifically. On June 15, 2016, New Tech Solutions, Inc. submitted a capabilities statement indicating they were authorized resellers of MCS and MPS. In confirming with Microsoft directly on June 24, 2016, although Microsoft has authorized resellers for many of their products and services, no company other than Microsoft can provide MCS and MPS specifically, as defined in the Government’s requirement. On June 17, 2016, TrueTandem submitted a capabilities statement. That statement indicates they are an authorized provider of “orange-badge” MCS. This requirement is specifically for “blue badge” MCS. Additionally, the statement provides TrueTandem is a Microsoft Premier Reseller, however, not an authorized reseller of MPS. The contracting office received a letter provided by Microsoft, dated May 4, 2016 and another dated June 24, 2016, stating no authorized resellers of MCS or MPS have been established. The letter further stated that Microsoft only permits its own cleared and certified personnel access to its proprietary information and source code. Microsoft has no authorized resellers for the MCS and MPS requirement.

MOD 01: A notice to synopsize the proposed sole source contract modification for this ceiling increase was published to the Federal Business Opportunities (FBO) website on September 6, 2018 with responses due September 21, 2018. A statement was included instructing responsible parties to submit a capability statement or proposal, which will be considered by the Government in determining the procurement approach for future requirements within scope of the contract and in consideration for follow-on procurement activities. A sources sought notice for the METSS program was later posted to FBO.gov on September 24, 2018 with responses due October 15, 2018. To date only one formal written capabilities statement submission was received. The submission was an overview of the company’s capabilities, which lacked specificity regarding any access to Microsoft Proprietary Closed Source Code or Blue-Badge Support with direct reach back to Microsoft engineers, product developers and product teams for swift problem resolution. Outside of the one written response, no other responses were received from potential offerors that could meet the scope of work under METSS-II.

MOD 02: A notice to synopsize the proposed sole source contract modification for this extension was published to the FBO website on April 25, 2019 with responses due May 10, 2019. A statement was included instructing responsible parties to submit a capability statement or proposal, which will be considered by the Government in determining the procurement

Page 15 of 22 pages approach for future requirements within scope of the contract and in consideration for follow-on procurement activities. A sources sought notice for the METSS program was also previously posted to FBO.gov on September 24, 2018 with responses due October 15, 2018. Similar to previous market research efforts, the only responses received provided generic capabilities statements and were unable to demonstrate the capability to meet the scope of work provided by the METSS program. In particular, no other sources have established the capability to access to Microsoft Proprietary Closed Source Code or Blue-Badge Support with direct reach back to Microsoft engineers, product developers and product teams for swift problem resolution. As such, the recent efforts to identify other potential sources through FBO.gov has confirmed that Microsoft Corporation continues to be the only source capable of meeting the scope of the METSS program.

MOD 03: A notice to synopsize the proposed sole source contract modification for this extension was published to the SAM.gov website on June 5, 2023, with responses due June 20, 2023. As in previous sources sought/synopsis noted above, a statement was included instructing responsible parties to submit a capability statement, which will be considered by the Government in determining the procurement approach for future requirements within scope of the contract and in consideration for follow-on procurement activities. Like previous market research efforts, there were no responses received. Therefore, no other sources have established the capability to access the Microsoft Proprietary Closed Source Code or Blue-Badge Support with direct reach back to Microsoft engineers, product developers and product teams for swift problem resolution.

As such, the recent efforts to identify other potential sources through SAM.gov has confirmed that Microsoft Corporation continues to be the only source capable of meeting the scope of the METSS program.

MOD 04: A notice to synopsize the proposed sole source contract modification for this extension was published to the SAM.gov website on September 30, 2024, with responses due October 14, 2024. As in previous sources sought/synopsis noted above, a statement was included instructing responsible parties to submit a capability statement, which will be considered by the Government in determining the procurement approach for future requirements within scope of the contract and in consideration for follow-on procurement activities. Like previous market research efforts, there were no responses received. Therefore, no other sources have established the capability to access the Microsoft Proprietary Closed Source Code or Blue-Badge Support with direct reach back to Microsoft engineers, product developers and product teams for swift problem resolution.

As such, the recent efforts to identify other potential sources through SAM.gov has confirmed that Microsoft Corporation continues to be the only source capable of meeting the scope of the METSS program.

MOD 05: A notice to synopsize the proposed sole source contract modification for this extension was published to the SAM.gov website on November 13, 2025, with responses due November 28, 2025. As in previous sources sought/synopsis noted above, a statement was included instructing responsible parties to submit a capability statement, which will be considered by the Government in determining the procurement approach for future requirements within scope of the contract and in consideration for follow-on procurement activities. Similar to previous market research efforts, the only response received provided a generic capabilities statement and was unable to demonstrate the capability to meet the

Page 16 of 22 pages scope of work provided by the METSS program. The MES SB suite is anticipated to provide 24x7x365 technical support (formally known as Premier-like) for Microsoft products and Microsoft cloud services. These services include support account management to enhance productivity and technology throughout the Information Technology (IT) lifecycle. When required, it includes reach back capability to Microsoft product teams (i.e., “Blue Badge” employees) for resolving technical issues with products and services that require access to proprietary code and systems. Aside from the MES-II SB suite contractors that have reach back capability, no other sources have established the capability to provide immediate access to the Microsoft Proprietary Closed Source Code or Blue-Badge Support with direct reach back to Microsoft engineers, product developers and product teams for swift problem resolution. As such, the recent efforts to identify other potential sources through SAM.gov has confirmed that Microsoft Corporation continues to be the only source capable of meeting the scope of the METSS program while requirements are transitioned to the MES-II vehicle. Despite the planned extension of METSS-II, market research for new requirements will require an assessment of the MES-II offerings as METSS-II will be primarily intended to provide gap coverage for actions that cannot yet be supported by MES-II.

7. DETERMINATION OF FAIR AND REASONABLE COST. The contracting officer will establish price reasonableness in accordance with FAR Subpart 15.404, as applicable; and in conjunction with customary commercial terms and conditions, historical prices and other than cost or pricing data may be utilized. The contracting officer will ensure contract terms, conditions, and prices are commensurate with the government’s need and best interest.

8. MARKET RESEARCH. Market research was conducted by the contracting officer’s representative (COR) and the contracting office in January 2015, August 2015 and May 2016, determining no other contractors can provide the required services. In addition, no resellers have become authorized to provide these Microsoft proprietary services. Letters provided from Microsoft, dated May 4, 2016 and June 24, 2016, confirms they are the only company able to perform the necessary MCS and MPS. Web searches further identified Microsoft is still the only source capable of providing these proprietary services. Microsoft currently has no other existing contracts for these services. Thus, the only contract vehicle that is currently active is DITCO’s METSS contract that does not expire until June 14, 2018 if all options are exercised. However, the government anticipates insufficient ceiling to last through contract expiration, thus the need for an award of METSS-II before expiration of the current METSS vehicle.

MOD 01: Market research was conducted by the COR and the Contracting Officer in August 2018. It was determined that no authorized resellers have become available, and confirmed the METSS-II pricing still provides the Government discounted rates at or below the commercial rates for Consulting Services and Premier Support. Additionally, web searches identified that Microsoft is still the only source capable of providing these services. A notice to synopsize the proposed sole source contract modification for this ceiling increase was published to the FBO website on September 6, 2018 with responses due September 21, 2018. A sources sought notice was posted to FBO.gov on September 24, 2018 with responses due October 15, 2018. As discussed above, only one contractor submitted a written response the sources sought notice.

The information provided an overview of the company’s capabilities, which lacked specificity

Page 19 of 22 pages contracted efforts directly with Microsoft Corporation for the METSS program beyond December 2026.

11. ACTIONS THE AGENCY MAY TAKE TO REMOVE OR OVERCOME BARRIERS THAT

LED TO THE EXCEPTION TO FULL AND OPEN COMPETITION.

a. Procurement History.

Contract Number: HC1028-13-D-0013 Brief Description: METSS IDIQ Contractor: Microsoft Corporation Business Type: Large Business (LB) Life Cycle Contract Value: $575 million (DISA and DoD agencies) Period of Performance (including all options):

June 15, 2013 – June 14, 2018

Contract Type: FFP Basis of Award: Sole Source with OTFAOC Justification and

Approval (J&A)

Previous protests/Congressional inquiries:

None

Task Order Number: W91QUZ-09-D-0037/KH14 Brief Description: Army Computer Hardware, Enterprise Software and Solutions IDIQ Microsoft IT Services Worldwide

Contractor: Microsoft Corporation Business Type: LB Life Cycle Contract Value: $30.7 million Period of Performance (including all options):

December 15, 2013 – June 14, 2013

Contract Type: FFP Basis of Award: Sole Source with OTFAOC J&A Previous protests/Congressional inquiries:

None

b. The government will actively research the market environment throughout the IDIQ ordering period to determine if Microsoft has opened their source code to authorized resellers. Additionally, research will be conducted to determine if alternatives exist to Microsoft offerings meeting the Government’s need.

12. REFERENCE TO THE APPROVED ACQUISITION PLAN (AP). A combined AS/AP is currently in the approval phase.

MOD 01: The combined AS/AP was approved on July 7, 2016. The AS/AP will be revised to reflect this modification.

MOD 02: The combined AS/AP was approved on July 7, 2016 and the first revision of the AS/AP, Version 1.1 dated August 2018, was approved February 25, 2019. The AS/AP will be revised to reflect this modification.

Page 20 of 22 pages

MOD 03: The combined AS/AP was approved on July 7, 2016. The first revision of the AS/AP, Version 1.1 dated August 2018, was approved February 25, 2019, and the second revision of the AS/AP, Version 1.2 dated July 2019, was approved July 17, 2019. The AS/AP will be revised to reflect this modification.

MOD 04: The combined AS/AP was approved on July 7, 2016. The first revision of the AS/AP, Version 1.1 was approved February 25, 2019. The second revision of the AS/AP, Version 1.2 was approved July 17, 2019. The third revision of the AS/AP, Version 1.3 was approved September 8, 2023. The AS/AP will be revised to reflect this modification.

MOD 05: The combined AS/AP was approved on July 7, 2016. The first revision of the AS/AP, Version 1.1 was approved February 25, 2019. The second revision of the AS/AP, Version 1.2 was approved July 17, 2019. The third revision of the AS/AP, Version 1.3 was approved September 8, 2023. The fourth revision of the AS/AP, Version 1.4 was approved November 13, 2024. The AS/AP will be revised to reflect this modification.

Page 21 of 22 pages

TECHNICAL CERTIFICATION: I certify that the supporting data under my cognizance which are included in the J&A are accurate and complete to the best of my knowledge and belief.

NAME: DeOnna S. Collins SIGNATURE:

TITLE/ORGANIZATION: METSS Program Manager, Logistics and Contracts Division

PHONE: (667) 890-4518

REQUIREMENTS CERTIFICATION: I certify that the supporting data under my cognizance which are included in the J&A are accurate and complete to the best of my knowledge and belief.

NAME: Jason G. Martin SIGNATURE:

TITLE/ORGANIZATION: Director, Acquisition and Component Acquisition Executive (CAE)

PHONE: (301) 225-7013

CONTRACTING OFFICER CERTIFICATION: I certify that this justification is accurate and complete to the best of my knowledge and belief. Since this effort exceeds the SAT but does not exceed $900K, this certification serves as APPROVAL.

NAME: Annette L. Aamodt SIGNATURE:

TITLE/ORGANIZATION: Contracting Officer, PS8311

PHONE: 667-890-1080

ALL QUESTIONS REGARDING THIS JUSTIFICATION ARE TO BE REFERRED TO

ANNETTE L. AAMODT, 667-890-1080, ANNETTE.L.AAMODT.CIV@MAIL.MIL

Page 22 of 22 pages

ACROYMNS

AD Active Directory AP Acquisition Plan ANC Alaskan Native Company AS/AP Acquisition Strategy/Acquisition Plan C2 Command and Control CHESS Computer Hardware, Enterprise Software and Solutions CONUS Continental United States COR Contracting Officer’s Representative DEE Defense Enterprise Email DEPS Defense Enterprise Portal Service DEPSECDEF Department of the Secretary of Defense DISA Defense Information Systems Agency DISANet Defense Information Systems Agency Network DoD Department of Defense DOS Denial of Service DECC Defense Enterprise Computing Centers DEE DoD Enterprise Email DEPS Defense Enterprise Portal Service DITCO Defense Information Technology Contracting Office GSA General Services Administration ES Enterprise Services FFP Firm Fixed Price IDIQ Indefinite Delivery Indefinite Quantity IdAM Identity and Access Management IGCE Independent Government Cost Estimate IM Implementation and Maintenance ISC Implementation and Sustainment Center IT Information Technology IP Intellectual Property JELA Joint Enterprise License Agreement with Microsoft JOTFAOC Justification for Other Than Full and Open Competition METSS-II Microsoft Enterprise Technical Support Services-II MCS Microsoft Consulting Services MPS Microsoft Premier Support NAICS North American Industry Classification System OCONUS Outside the Continental United States OTFAOC Other Than Full and Open Competition PMO Program Management Office PWS Performance Work Statement WIN10 Windows 10 Secure Host Baseline