JA25-090_852572613 AMD01 Final Redacted_Redacted.pdf

CVI Gateway – JA25-090

CUI

Page 2 of 6 Pages

This action is to issue a firm-fixed-price TO against the JWCC Indefinite Delivery/Indefinite Quantity Contract for a CVI Gateway. This TO will be issued directly to Microsoft Corporation.

The anticipated period of performance is for a 12-month base period, plus one 12-month option period. The total estimated value is which will be funded by Working Capital funds.

3. DESCRIPTION OF SUPPLIES/SERVICES:

The CVI Gateway, a secure Microsoft hosted solution with an Impact Level (IL)6 designation, connects Global Video Services-Classified (GVS-C) video teleconferencing (VTC) systems to Microsoft Teams.

4. SUPPORTING RATIONALE, INCLUDING A DEMONSTRATION THAT THE

PROPOSED CONTRACTOR’S UNIQUE QUALIFICATIONS OR THE NATURE OF THE

ACQUISITION REQUIRES USE OF AN EXCEPTION TO FAIR OPPORTUNITY:

(a) Exception to Fair Opportunity.

FAR 16.505(b)(2)(i)(B) - Only one awardee is capable of providing the supplies or services required at the level of quality required because the supplies or services ordered are unique or highly specialized.

(b) Description of the Justification.

Microsoft is the only Cloud Service Provider (CSP) capable of hosting the CVI Gateway, a Unified Video Teleconferencing Collaboration & Bridging Solution, as the CVI Gateway was designed specifically by the vendor, Pexip, for Microsoft Azure deployment on various network classifications. CVI vendors have a firm requirement from Microsoft to place their Software Development Kits within Microsoft Azure. As a result, deployment of CVI in any environment other than Microsoft Azure will render the capability inoperable. The cloud solution must be able to interoperate with and host the CVI Gateway which is essential to the Government’s requirement. The use of Microsoft Azure and the CVI Gateway’s Application Programing Interfaces (API), is crucial for seamless interoperability and security within the classified environment, particularly in bridging legacy VTC systems with Microsoft Teams. Furthermore, integration into Microsoft's existing Teams infrastructure aligns with the Department of Defense (DoD) Chief Information Officer’s current priorities and direction, meets capability gaps identified between GVS and Teams, and optimizes both interoperability and user experience.

Microsoft is the only CSP capable of hosting DISA SD’s CVI Gateway without significant impact to the mission.

(c) Justification.

(1) Minimum Government requirements.

Page 3 of 6 Pages

CUI

DISA SD requires a secure cloud hosting environment capable of supporting the CVI Gateway and its integration into DoD365-Secure (DoD365-Sec) Teams and other tenants.

The environment must allow for comprehensive and secure unified video teleconferencing solutions to be tightly integrated on classified networks, bridging communication with legacy VTC systems via multi-protocol support (H.323 and Session Initiated Protocol). The environment must be capable of allowing essential features such as seamless integration for user authentication, meeting scheduling, robust security compliant with federal protocols like FIPS 140-2/140-3, secure bi-directional content sharing, and advanced meeting features like chat-to-call escalation and meeting controls.

The CVI connector is what makes this interoperability possible, and Microsoft is the only CSP capable of supporting.

(2) Proposed sole source contractor.

Microsoft Corporation

(3) Discussion regarding the cause of the sole source situation.

DISA SD requires a sole-source approach for Microsoft Azure as integration between GVS and Microsoft Teams by way of the CVI Gateway can only be accomplished by placing the CVI components within Azure due to the capability being designed to work specifically within Microsoft Azure. The use of any other CSP will render the CVI features useless as the capability was designed in collaboration with Microsoft for deployment into Microsoft Azure and to connect with Microsoft Teams. CVI bridging capability enables seamless video conferencing between Microsoft Teams and GVS-C endpoints, allowing users on different systems to collaborate. It involves protocol translation, ensures interoperability, and maintains security. While not driven by emergency circumstances, the need for a deeply integrated and tailored solution makes Microsoft the only CSP capable of performing the requirement.

(4) Demonstration of unique source.

Microsoft possesses the knowledge, skills, certification, clearance, experience, and bridging capabilities required to continue the existing requirement without a break or degradation in critical mission services. Given these critical mission requirements, Microsoft is the only contractor that is capable of performing the necessary services for the DoD within the current required timeline. Only Microsoft can bridge Microsoft Teams conference with GVS-C registered endpoints. Microsoft Teams Connector is the component that makes CVI bridging possible, and Microsoft is the only CSP that can support this capability at this time. These factors, including deep integration with Microsoft Teams in a classified Microsoft environment and seamless access to Microsoft services, make them the only CSP capable of delivering a secure and operationally continuous solution.

(5) Procurement discussion.

Page 4 of 6 Pages

CUI

Based on outreach to the four CSPs in April 2025, the only CSP that is currently capable of meeting the minimum needs of the Government is Microsoft. To seamlessly integrate with the existing classified Microsoft Teams environment within Defense Enterprise Office Solution (DEOS), Microsoft requires deep compatibility with its security protocols and exclusive APIs and functionalities.

(6) Impact.

Use of another CSP other than Microsoft is not feasible based on the inability for CVI to operate in any other environment. Not hosting through Microsoft Azure would negatively impact near real-time communications and collaboration between the DoD, it’s federal and coalition partners, decision makers, and the warfighter as DoD continues transitioning services into DoD365-Sec creating further gaps between GVS users, those on other tenants, and those that have already transitioned to DoD365-Sec. This critical break in service would impact over 4,000 Secure-VTC endpoints, 140,000 users, and would delay DISA SD’s ability to deliver a unified-video VTC solution.

5. COST/PRICE FAIR AND REASONABLE DETERMINATION:

A determination that the price is fair and reasonable will be based on a comparison of the contractor’s proposal to the Independent Government Cost Estimate and the JWCC Catalog pricing, including any discounts, which were previously found to be fair and reasonable and based on the contractor’s commercial pricing.

6. MARKET RESEARCH:

Market research for the basic JWCC Contracts was conducted and resulted in a signed market research report on November 9, 2021, that was revalidated and recertified on July 29, 2024.

After a survey of the market, it was concluded that the JWCC Contract is in the Government’s best interest due to technical feasibility and cost to the Government.

Additional research was conducted in April 2025, by reviewing the specific capabilities in the JWCC Contracts and CSP catalogs and it was determined that Microsoft is the only source capable of fulfilling the Government’s minimum needs in the manner and time frame required.

Market research included direct engagement with the SD DEOS Team for expert insights, as well as a review of the JWCC CSP’s catalogs. DISA SD also requested Additional Research to Support Fair Opportunity from the four JWCC CSPs. The Government only received a response from Microsoft on April 11, 2025. Oracle declined to participate as they could not meet the requirement. Google and Amazon Web Service did not respond to the Additional Research request.

Upon conclusion of the market research techniques highlighted, it was determined that Microsoft is the only CSP that can meet DISA SD’s requirement. Due to the mission-critical nature of the IL6 CVI Gateway and its dependence on Microsoft's proprietary technologies, any deviation from a Microsoft-exclusive solution would introduce unacceptable risks to system integrity, security, and operational effectiveness.

Page 5 of 6 Pages

7. ANY OTHER SUPPORTING FACTS: None.

8. ACTIONS THE AGENCY MAY TAKE TO REMOVE OR OVERCOME BARRIERS

THAT LED TO THE EXCEPTION TO FAIR OPPORTUNITY:

(a) Procurement History:

Not Applicable

(b) The sole-source justification was based on Microsoft's unique ability to provide seamless CVI integration within IL6; to mitigate this in the future, the agency plans to expand expertise in other cloud environments, promote open CVI standards and interoperability, engage with alternative CVI providers to understand their solutions, and adopt a phased approach to modernization with early market engagement to foster a more competitive landscape and reduce reliance on sole-source justifications.

Page 6 of 6 Pages

TECHNICAL CERTIFICATION: I certify that the supporting data under my cognizance which are included in the J&A are accurate and complete to the best of my knowledge and belief.

NAME:

TITLE/AGENCY/ORGANIZATION: Project Manager (PM) , DISA/SD

PHONE:

REQUIREMENTS CERTIFICATION: I certify that the supporting data under my cognizance which are included in the J&A are accurate and complete to the best of my knowledge and belief.

NAME:

TITLE/AGENCY/ORGANIZATION: PM, DISA/SD

PHONE:

CONTRACTING OFFICER CERTIFICATION: I certify that this justification is accurate and complete to the best of my knowledge and belief.

NAME:

TITLE/AGENCY/ORGANIZATION: JWCC Contracting Officer, DISA/DITCO/PS8511

PHONE:

PROCURING ACTIVITY COMPETITION ADVOCATE APPROVAL: I have reviewed this justification and find it to be accurate and complete to the best of my knowledge and belief.

Since this justification does not exceed $15M, this review serves as approval and my written determination that the aforementioned FAR circumstances apply.

NAME:

TITLE/AGENCY/ORGANIZATION: DISA/DITCO

PHONE:

ALL QUESTIONS REGARDING THIS JUSTIFICATION ARE TO BE REFERRED TO