Justification and Approval_Redacted.pdf

Source Selection Information � See FAR 2.101 and 3.104

Document Number: FY22-084

SOLE SOURCE JUSTIFICATION

1. Identification of Agency and Contracting Activity.

Requiring Activity: Navy Cyber Defense Operations Command (NCDOC) 112 Lake View Parkway Suffolk, VA, 23435

Contracting Activity: NAVSUP Fleet Logistics Center (FLC) Norfolk Contracting Dept, Code 200 1968 Gilbert Street, Suite 600 Norfolk, Virginia 23511-3392

Requisition Number: N0018917DUMMYP1338

2. Description of the Action Being Approved.

This requirement is for the provision of specific SysAdmin, Audit, Network, and Security (SANS) branded training services, Security and Exchange Commission (SEC) 504: Hacker Tools, Techniques, and Incident Handling and SEC 503: Intrusion Detection In-Depth, to support the NCDOC Cyber Network Defense (CND) Continuous Learning Program (CLP). These support services are currently performed under contract N0018917P1338. Contract N0018917P1338 was awarded 30 September 2017 on a sole source basis as a firm fixed-price contract to Escal Institute of Advanced Technologies, doing business as (dba) SANS Institute, a large business; the existing contract expires on 29 September 2022.

This is a sole source action to be awarded as a follow on to a non-competitive requirement.

3. Description of Supplies/Services.

NCDOC requires that all NCDOC personnel meet or exceed the DoD Information Workforce (IAWF) requirements outlined in the DoD 8140.01m. All commercial certifications under the DoD 8140.01m require attaining and reporting Continuing Professional Education (CPE) credits; this is accomplished by attending a minimum of 20 CPEs annually in the cyber field according to the mandate of the SECNAV M-5239.2. Under the DoD 8140.01m, there are five Cyber Network Defense Incident Responder certifications, the Global Information Assurance Certification (GIAC), Systems and Network Auditor (GSNA), GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Forensic Examiner (GCFE), and Certified Ethical Hacker (CEH). The GCIH, the GCIA and certification courses are to be offered and available through a training account for on-line and classroom training. The required courses to fulfill all DoD mandated requirements are SEC504: Hacker Tools, Techniques and Incident Handling and SEC503: Intrusion Detection In-Depth with the accompanying exam/certification attempts for the GCIH and GCIA.

The Independent Government Estimate (IGE) for this requirement, including base and three (3) 12-month option periods is The following chart provides a summary of the IGE:

Estimated Dollar Value

Period Dates Value Base Year 30 September 2022 - 29 September 2023

Option Year I 30 September 2023 - 29 September 2024 Option Year II 30 September 2024 - 29 September 2025 Option Year III 30 September 2025 - 29 September 2026

Total

The resultant contract will be funded with FY22 Navy Operations & Maintenance (O&MN) funds.

These funds are currently not available, award will not be made until the funds are provided.

Options will be funded utilizing Operations and Maintenance (O&MN) appropriations of the fiscal year in which the option year is exercised.

4. Statutory Authority Permitting Sole Source.

The statutory authority permitting other than full and open competition is 41 U.S.C. 1901 (e)(2), as implemented by FAR 13.501. SANS is currently the only responsible source and no other services will satisfy agency requirements.

5. Rationale Justifying Use of Cited Statutory Authority.

All NCDOC personnel are required to maintain levels of training to include the requested GIAC training. The SANS training and GIAC are brand name products, manufactured and distributed exclusively by SANS. No other company makes a similar or competing product. SANS requires the GIAC training to be purchased directly from SANS Institute. No other company offers products and services that serve the same purpose or function. Additionally, completion is precluded from producing or reselling SANS products and services. SANS has the exclusive and copyright protection to produce, sell, and deliver SANS products and services. Only SANS courses can offer the official SANS curriculum and SANS Certified Instructors to deliver training on any SANS class, including all GIAC training and courses.

6. Description of Efforts Made to Solicit Offers from as Many Offerors as Practicable, including a Description of Market Research, if applicable, and a List of Interested Sources, if any.

Market research included reviewing the results of recent market research of similar requirements, searching the internet for potential sources and querying the Government-wide database of contracts and other procurement instruments for use by multiple agencies.

Additionally, a sources sought notice was posted to the Government-wide Point of Entry (GPE) on 04 April 2022 under posting N0018922Q0035. Six (6) firms responded to the sources sought notice.

NCDOC reviewed all provided information to ascertain whether any of the respondents were capable of meeting the Government�s minimum need for this procurement. Based on that review, a determination was made that only one of the respondents possessed the technical capability to perform the required tasks and meet the Government�s minimum need. The contracting officer reviewed and concurred with these findings. Market research indicates Escal Institute of Advanced Technologies, (dba) SANS Institute, as the only source capable of satisfying the requirement due to the need for brand name SANS courses.

7. Determination of Fair and Reasonable Cost.

The Contracting Officer has determined that the anticipated cost to the Government of the supplies/services covered by this Justification will be fair and reasonable.

8. Actions to Remove Barriers to Future Competition.

In accordance with DFARS 206.303-2(b)(i) and PGI 206.304(a)(S-70)), a sources sought notice was issues on 04 April 2022. Six (6) responses were received in response to the sources sought notice from the following firms:

Vendor Cage Code Business Size

The Requiring Activity reviewed the information provided by each firm that responded to the sources sought notice to ascertain whether any of the responders were capable of meeting the Government�s minimum needs. Based on this review, the Requiring Activity determined that only one of the responders, SANS Institute, possess the technical capability to perform the required tasks.

Additionally, per IAW DFARS 213.501(a)(i), a copy of the previous justification was included in the review package to assist the approval authority in determining whether the planned actions to remove any barriers to competition cited on the previous justification were completed.

9. Contracting Point of Contact. The point of contact at NAVSUP Fleet Logistics Center Norfolk is Kendall Mulherin, Code 240.2, who may be contacted at (757)-443-2369 or by email and kendall.l.mulherin.civ@us.navy.mil

Document Number: F22-084

CERTIFICATIONS AND APPROVAL

TECHNICAL/REQUIREMENTS CERTIFICATION

I certify that the facts and representations under my cognizance which are included in this Justification and its supporting acquisition planning documents, except as noted herein, are complete and accurate to the best of my knowledge and belief.

Technical Cognizance:

Requirements Cognizance:

LEGAL SUFFICIENCY REVIEW

I have determined this Justification is legally sufficient.

CONTRACTING OFFICER CERTIFICATION

I certify that this Justification is accurate and complete to the best of my knowledge and belief. To the extent that the Justification value is >$250K and <$750K, the Contracting Officer�s signature below also represents approval of the document.

Signature Name (Printed) Date Phone No.

CONTRACTING ACTIVITY COMPETITION ADVOCATE REVIEW

To the extent that the Justification value is greater than $750K and <$15M, the Competition Advocate�s signature below also represents approval of the document.

Elizabeth A. Phelps 05/31/2022 (757) 433-1326