Limited Source Justification Redacted.pdf

United States Patent and Trademark Office Office of the Chief Financial Officer

FORM USPTO-OP-0l 1.v7.0 (1/2026)

LIMITED SOURCES JUSTIFICATION (LSJ)

(Sole Source)

(General Services Administration Acquisition Regulation (GSAR) 538.7104-3)

SECTION I. COMPLETED BY THE PROGRAM OFFICE

Pro2ram Office: OCIO/OCISO Pro2ram Office POC:

Title of Procurement: USPTO Cybersecurity and Acquisition Package#:

Privacy Support Services C&PSS)

Estimated Value The total value of the order will increase from (includine options) .

Contractine Officer: Contractine Officer Phone:

Vendor Name (if applicable): Saliense Contract or Order# (if applicable): 47QRAA18D00C0 / Consulting;, LLC 1333BJ25F00280014

The following LSJ has been prepared to meet the requirements of GSAR 538.7104-3.

1. Identification of the agency and contracting activity

United States Patent and Trademark Office (USPTO) Office of the Chief Financial Officer (OCFO) Office of Procurement (OP) Alexandria, VA

2. Nature and/or description of the action requiring approval

This action is a contract modification to the existing previously competed task order with Saliense Consulting, LLC under its Cybersecurity and Privacy Support Services (C&PSS) task order (#1333BJ25F00280014) to provide Automation and Governance, Risk, and Compliance (GRC) Integrator Services and Support. This modification adds approximately 13 additional contractor full time equivalents ( cFTEs) to the base year ( and fluctuating support throughout the option periods to ensure support for the C&PSS program, following the conclusion of the previous contractor's period of performance, which expired on March 5, 2026.

This modification will be executed as a firm-fixed-price action.

3. Description of the supplies or services required and the estimated value thereof

This modification is to incorporate work associated with GRC tool RegScale Integrator Services and Support into Task 14 of the existing order, and also associated with existing Tasks 10 and 15, to add additional support related to RegScale integration and automation due to the ending of the previous contractor ofRegScale integrator when USPTO did not exercise the option due to issues on the contract.

P.O. Box 1450, Alexandria, VA 22313-1450 • www.uspto.gov

United States Patent and Trademark Office Office of the Chief Financial Officer

FORM USPTO-OP-0l 1.v7.0 (1/2026)

Item Description Price Prior to Current Increase New Total No. this MOD (this MOD) Price (Not

Including CLIN000l)

Mod-Base Period, 05/22/2026

- 09/21/2026

Option Period 1, 09/22/2026 -

09/21/2027

Option Period 2, 09/22/2027 -

09/21/2028

Option Period 3, 09/22/2028 -

09/21/2029

Option Period 4, 09/22/2029 -

09/21/2030

Totals:

The existing Saliense Cybersecurity and Privacy Support Services (C&PSS) order (1333BJ25F00280014) already includes scope for governance, risk, and compliance (GRC) tool services and support. Any reasonable competitor for these services could foresee a scope change of this nature because this order's original solicitation/award clearly advised offerors of the potential for such a change. This order was previously competed and recently awarded on September 19, 2025. This modification will provide additional cFTEs to perform GRC tool integration, system migration, and Operations and Maintenance (O&M) services and support related to the original requirements.

The following scope related GRC services are added to Task 10 for additional specificity:

• Deliver Cybersecurity Training (topics as approved by government) to include role-based GRC tool training, with live sessions (workshops, office hours) and 508 compliant on demand content (e-learning, videos, job aids, guides, etc.); continuously improve materials based on feedback and release changes.

The following scope related GRC services are added to Task 14

• The contractor in collaboration with the Government and the GRC tool provider will serve as the GRC tool integrator, participating in initial tool training, setup and configuration as well as pilot migration activities.

• Upon delivery of the GRC tool and the mutually agreed commencement of the Operations and Maintenance (O&M) phase, the contractor will be required to provide for full system operations, maintenance, training, support, and provide USPTO tailored services and support to all USPTO product teams on system migration efforts to ensure the successful migration of the enterprise from the previous GRC tool to the new one.

• Upon assuming the requirements to provide full systems O&M of the new GRC Tool, the contractor will sustain alignment with USPTO security and privacy policies and federal guidance, support ATO sustainment, and maintain all required system SSPP information and documentation in the new GRC Tool as well as in the legacy system.

• Throughout all phases the contractor will proactively identify and develop any necessary user interfaces, workflows, reports, dashboards, integrations with USPTO approved enterprise tools, align GRC tool configurations with USPTO priorities and roadmaps, and plan and execute approved improvements and solutions through established governance and change control processes.

P.O. Box 1450, Alexandria, VA 22313-1450 • www.uspto.gov