JOFOC Devolutions_EXTERNAL.pdf

Brand Name Justification, Devolutions, Page 1 of 4

NATIONAL TRANSPORTATION SAFETY BOARD

Justification for Other Than Full and Open Competition

“Devolutions Remote Desktop Manager”

1. Program Office / Procurement Request:

Office of Chief Information Officer, Computer Services Division (CIO-10) Purchase Request PUR240121

2. Nature of Action:

The purpose of this Justification for other Than Full and Open Competition (JOFOC) is to provide documentation that explains why this specific requirement is to be restricted to Devolutions brand name products only.

3. Description of Requirement:

The National Transportation Safety Board (NTSB) Office of the Chief Information Officer (CIO) has a requirement to support and maintain the agency’s existing Devolutions remote desktop manager (RDM) software. The NTSB requires software that can manage remote desktops efficiently and without compatibility issues with the current software in use by the NTSB. Devolutions has the tools necessary to manage multiple remote connections on a single platform including enterprise-grade password management tools, access control and virtual private networks (VPNs).

The period of performance shall extend from May 1, 2024 through April 30, 2025.

Devolutions’ technical capabilities include:

• Remote connection management

• Integrated VPN and VPN management

• Macro support and automated macro

• Password management

• Secure access to critical assets

• IT team management

The required items are as follows:

Part Number Description Quantity DVLS-GAT-R1 Devolutions Server Module Gateway - Renewal

(1 Year subscription)

SRDM-PLAT-R1 Remote Desktop Manager (Platinum Edition) - Renewal (1 Year subscription) (65 users)

DCL-S1-R1 Devolutions Launcher (Single License) - Renewal (1 Year subscription)

DVLS-PLAT-R1 Devolutions Server (Platinum Edition) – Renewal (1 Year subscription)

SUP-PRE-N1 Premium Support 1 SRDM-PLAT-R1 Remote Desktop Manager (Platinum Edition) -

Renewal (1 Year subscription) (65 users)

Brand Name Justification, Devolutions, Page 2 of 4

4. Authority Cited:

The authority permitting other than Full and Open competition for this procurement is FAR 13.106-1(b)(1)(i) for purchases not exceeding the Simplified Acquisition Threshold. The only portion being limited is the brand name.

5. Unique Qualifications / Circumstances of Requirement:

The NTSB is heavily reliant on Devolutions' suite of products, including the Remote Desktop Manager, Devolutions Server, Devolutions Gateway, and Devolutions Launcher.

These products work seamlessly with the NTSB’s existing software suite and platforms, providing a comprehensive and integrated solution for the agency’s needs.

Devolutions Server is a secure, centralized repository that plays a vital role in the existing network infrastructure. It not only houses the NTSB’s connections, credentials, and sensitive data but also streamlines the Privileged Access Management (PAM), a critical element of the agency’s security framework. As a PAM solution, Devolutions Server provides robust controls to manage, monitor, and audit the use of privileged accounts in the NTSB network. It helps prevent unauthorized access and misuse of these accounts, significantly reducing the risk of security breaches. One of the unique features of Devolutions Server is its ability to manage shared credentials. It allows NTSB staff to use credentials without exposing them to the user, thereby providing an additional layer of security. This feature is particularly crucial in an environment where multiple users need to access the same resources but should not have direct knowledge of the credentials.

Furthermore, Devolutions Server maintains comprehensive access logs, recording every action performed within the system. This provides the NTSB CIO with a clear audit trail and makes it easier to identify and investigate any suspicious activities.

Following Devolutions Server, Devolutions Remote Desktop Manager is another essential component of NTSB IT infrastructure. This versatile tool is the only remote desktop manager commercially available on all platforms, providing users with a unified solution to manage and control all remote connections and machines. Remote Desktop Manager supports a wide range of protocols such as RDP, SSH, Web GUI, FTP, UNC, and many others, allowing connection to various systems from a single application. This unique capability simplifies NTSB OCIO operations, reduces complexity, and increases efficiency. In addition to facilitating connections, the Remote Desktop Manager offers advanced features like macros/scripts, which automate repetitive tasks and enhance productivity. The check-in/check-out system prevents conflicts and errors by ensuring that only one user can edit a resource at a given time. The software also includes comprehensive documentation features, making it easier to track changes, maintain records, and ensure compliance with our internal policies and regulatory requirements.

Moreover, its asset management capabilities provide an efficient way to track and manage all IT assets. This includes hardware, software, and any other resources, giving us a clear overview of our IT environment. Additionally, the software also offers secure password management, two-factor authentication, and role-based access control, further enhancing the security of our remote connections.

Devolutions Gateway is designed to work in conjunction with Devolutions Server to provide just-in-time access to resources in segmented networks. This architecture is crucial for implementing a zero-trust security model within the NTSB. In a zero-trust model, every access request is fully authenticated, authorized, and encrypted before

Brand Name Justification, Devolutions, Page 3 of 4 granting access, regardless of a user's location or the network from which the request originates. This approach significantly reduces the potential for unauthorized access and protects NTSB assets from various threats. By providing just-in-time access, Devolutions Gateway ensures that resources are only available to authenticated users when they need them and not left exposed unnecessarily. This minimizes the potential attack surface and further strengthens our defenses. Furthermore, by segmenting the NTSB network, we can isolate systems and resources, limiting the potential impact of a breach.

Devolutions Launcher allows users to launch remote sessions and applications directly from the browser. It enhances productivity by eliminating the need to switch between different platforms and interfaces.

Together, these Devolutions products provide a comprehensive solution for the agency’s remote desktop management needs. They align perfectly with the NTSB’s zero-trust strategy and are compatible with all NTSB's existing current software and platforms.

While there are other remote desktop management products on the market, they do not guarantee compatibility with the NTSB’s specific software setup. Switching to a different product could potentially disrupt these systems, a risk too great given the critical nature of the agency’s work.

Should the NTSB opt to switch to a different remote desktop manager solution, professional services would need to be purchased again to assist with the configuration and deployment of the new solution. This could lead to additional costs and time spent on employee training. Moreover, there would be a risk of troubleshooting delays, possible compatibility issues, and downtime that would affect the entire NTSB network.

Renewing the Devolutions licenses ensures continuity of service, eliminating duplication of cost and labor, and most importantly, guarantees the continued smooth operation of our critical systems.

For these reasons, Devolutions is the only product suite that can fully satisfy the NTSB’s unique requirements for a remote desktop manager solution.

6. Efforts to Determine Only One Source:

To maximize competition, a request for quotes (RFQ) will be posted to the Federal Business Opportunities website on the System for Award Management at SAM.gov, in accordance with FAR 5.102(a)(1). A copy of this Justification will be included with the solicitation in accordance with FAR 5.102(a)(6). Market research has indicated that there are multiple resellers of this product, but the NTSB does not expect to obtain quotes from two or more responsible Small Business concerns. Therefore, this will be conducted as an unrestricted purchase.

7. Contracting Officer’s Determination:

I have reviewed the above JOFOC, and determined that based on the information provided, it is accurate and complete, the anticipated cost of any subsequent sole source award would be in the best interest and fair and reasonable to the Government.

Brand Name Justification, Devolutions, Page 4 of 4

8. Market Research:

See Section 6, “Efforts to Determine Only One Source” above.

9. Other Pertinent Information:

N/A

10. List of Interested Parties:

Other companies/organizations have not expressed an interest in this requirement.

11. Efforts to Remove Barriers to Competition:

The NTSB will continue to conduct market research to determine if there are other commercially available products that are capable of meeting the NTSB’s requirement.

12. Contracting Officer’s Certification The Contracting Officer certifies that this JOFOC is accurate and complete.