JEFO CPP Extension of Services Final Redacted.pdf

Justification for Exception to Fair Opportunity Pursuant to FAR 16.505(b)(2)(i)(C)

Date: December 17, 2025 Prepared By:

Purchase Request: NB773050-26-00218 Requirement Description: Cybersecurity and Privacy Platform (CPP) Development – Extension of Services for Task Order 1333ND24DNB770002 / 1333ND24FNB770125

I. Identification of Agency and Contracting Activity.

National Institute of Standards and Technology (NIST) Office of Acquisition and Agreement Management (OAAM) Acquisition Management Division (AMD)

II. Nature / Description of the Action being Approved.

The NIST intends to extend existing cybersecurity and privacy platform development services provided by Analygence, Inc. under Indefinite-Delivery Indefinite-Quantity (IDIQ) Contract 1333ND24DNB770002, Task Order 1333ND24FNB770125. Support currently ends on January 15, 2026 and NIST intends to extend the task order through May 2, 2026 without considering other contract holders. The purpose of this non-competitive services extension is to allow NIST to continue to receive these critical services and allow time for a follow-on task order to be competitively sourced without a lapse in service. The follow-on competition was unavoidably delayed due to the lapse in federal funding in fiscal year 2026. It is expected that a competition for a new task order will be completed in advance of May 2026.

III. Description of Required Supplies/Services.

The contractor shall continue to provide software development, integration, and testing to the National Vulnerability Database (NVD), the National Checklist Program (NCP), and the Cybersecurity and Privacy Reference Tool (CPRT) as described in Task Order 1333ND24FNB770125. These programs share a codebase and back-end systems known collectively as the Cybersecurity and Privacy Platform (CPP). NIST requires uninterrupted support of the CPP because this repository is mission critical for both U.S. and global cybersecurity. The extension of services shall be through May 2, 2026, approximately three and a half months. The estimated value for this extension of services is $435,897.00. The total value of the existing task order, all options included, is $2,036,097.00. Therefore, this modification is estimated to increase the total value of the task order from $2,036,097.00 by $435,897.00 to $2,471,994.00.

IV. Identification of the Exception to Fair Opportunity.

In accordance with FAR 16.505(b)(2)(i)(C), this requirement must be awarded on a sole-source basis in the interest of economy and efficiency because it is a logical follow-on to an order already issued under the contract and all contract awardees were given fair opportunity to be considered for the original order.

The focus of task order 1333ND24FNB770125 is making changes and improvements to a collection of government databases that support cybersecurity and privacy work for organizations worldwide, including all US Executive Branch federal agencies. This work requires current technical knowledge of the codebase making up these databases, the already established automated tests, and the websites and API services that enable the world to interact with these databases.

Prior to the lapse in federal appropriations in October and November 2025, NIST was preparing to solicit a new competitive task order for the required services and expected to be able to issue an award prior to the current contract expiring. Due to the lapse in appropriations, however, this new acquisition process could not begin and it is no longer possible to complete a new acquisition prior to expiration of the current award. A lapse in services would create unacceptable cybersecurity risks and NIST must ensure that services continue until a new award can be issued.

Analygence, Inc. is currently performing the required work. To ensure continuity of services and standardization of code development for the limited amount of time required for a new task order to be competitively sourced, a follow-on extension of services with Analygence, Inc. is the most logical acquisition method in the interest of economy and efficiency. It is not possible to compete the requirements or shift them to a new contractor without an unacceptable lapse in service due to administrative lead times for acquisitions and contractor security clearances. Further, an attempt to do so would create unnecessary labor costs and cybersecurity risks.

V. Determination by the Contracting Officer that the Anticipated Cost to the Government will be Fair and Reasonable.

The Government intends to negotiate a firm fixed price task order modification with Analygence, Inc. for this requirement using the rates established in the IDIQ contract. Consideration of historical pricing and comparison of the labor mix and level of effort with the Independent Government Cost Estimate (IGCE) will also be taken. Using these methods, the Contracting Officer anticipates a fair and reasonable price will be achieved.

VI. Any other Facts Supporting the Justification.

None.

VIII. Statement of the Actions, if any, the Agency may take to remove or overcome any barriers to competition before any subsequent acquisition for the supplies or services required.

NIST fully expects a competition using the multiple award cybersecurity and privacy support services IDIQ contract for subsequent requirements. An exception to fair opportunity is necessary at this time because the recent lapse in federal appropriations resulted in inability to compete the requirement in time to avoid an unacceptable lapse in services. NIST intends to post this requirement on www.sam.gov pursuant to FAR 16.505(b)(2)(ii)(D) after modification award.

XII. Contracting Officer Certification that the Justification is accurate and complete to the best of the contracting officer’s knowledge and belief.

Prepared by:

er Contract Specialist, NIST AMD

Approved by:

ar Contracting Officer, NIST AMD