JEFO Cyber Security HRSA Bridge redacted_Redacted.pdf

This is a Justification for an Exception to Fair Opportunity document filed by the Health and Human Services Administration (HRSA) for a follow-on order under a GSA multiple award schedule contract (HHSN316201200126W).

The acquisition covers Information Systems Cyber Security and Privacy Services – Bridge with an estimated value of $4,766,232, including all options. The services are critical to support HRSA's mission and cover over 60 IT systems, including High Value Assets. The specific services include Incident Response, Security Information and Event Management (SIEM), Cloud Monitoring, Assessors, Analysts, Information System Security Officer (ISSO) services, Zero Trust (ZT) Architecture implementations, Revision 5 control implementations, Continuous Monitoring, and Vulnerability Management. The current vendor is Cyberdata Technologies Inc., and the bridge contract period is three months base with a 52.217-8 Option to Extend Services for up to six months. The contract is firm-fixed price and was established through a NITAAC competition. HRSA justified sole-source award under FAR 16.505(b)(2)(i)(C) as a logical follow-on to the expired contract (HHSN316201200126W/HHSH250201900008W) to ensure service continuity while the new solicitation under 75R60226Q00036 completes evaluation. The justification emphasizes the criticality of uninterrupted cyber security services to protect HRSA's systems serving vulnerable populations and notes that transition to a new vendor without proper knowledge transfer would create significant operational and security risks. The Contracting Officer determined pricing is fair and reasonable based on NITAAC labor rates and submitted pricing data.