Single_Source_Justification_AWS_MRA_signed_(redacted)-2.pdf

Single Source Justification (Simplified Acquisition)

SAF/AQCP Template | 1 May 2014 Page 1 of 2

Section A: General Contract Information

Contracting Activity:

AFLCMC/WWU

Purchase Request/ TBD Identification Number:

Project/Program Name: Migration Readiness Assessment Estimated Contract Cost

(including Options): $90,000.00

Section B: Description of the Supplies/Services Required

The contractor shall provide professional services for a Migration Readiness Assessment (MRA) to determine the current state of readiness for a specific scope of migration to Amazon Web Services (AWS) cloud solution. The outcome will be a data driven readiness assessment and proposed outline of work to use in the F-22 System Program Office (SPO) large scale migration to

AWS.

Section C: Justification for Soliciting from a Single Source

The F-22 SPO cloud solution will require certain specialized infrastructure to continue the current software portfolio, security configuration, and Authority To Operate (ATO). Based on the Department of Defense (DoD) Cloud Computing Security Requirements Guide (CCSRG), the F-22 SPO requires a cloud solution that can process data at the classified level. The DoD CCSRG defines this data sensitivity as information Impact Level 6.

Per the DoD Cloud Computing Security Requirements Guide, Information Impact Level 6 is defined as:

"Level 6 accommodates information that has been determined: “(i) pursuant to EO 12958, Classified National Security

Information (April 17, 1995) as amended by EO 1329223, or any predecessor Order, to be classified national security information; or (ii) pursuant to the Atomic Energy Act of 1954, as amended, (P.L. 83-703)24 to be Restricted Data (RD).” At this time, only information classified as SECRET or below, in accordance with the applicable EOs, is permitted to be hosted at this level. This level accommodates classified information categorizations up to moderate confidentiality and moderate integrity (M-M-x)."

The DoD Cloud Computing Security Requirements Guide is provided under the authority of DoD Instruction 8500.01-8510.01.

The requirement states that if you are using Secret level data, the Cloud Service Provider needs to be able to provide an Impact Level 6 (Secret) environment. Since the F-22 Program Office operates at the Secret level, a Cloud Service Provider operating at an Impact Level 6 environment, Amazon Web Services, is required.

Section D: Efforts to Obtain Competition

Market Research was conducted in the form of extensive internet searches, discussions and research with Government contacts, such as SMEs and other program offices acquiring the same type of support. The F-22 Program Office reviewed and utilized the market research of another government agency that recently acquired the same professional services.

Section E: Steps to Preclude Future Single Source Awards

In the future, to prevent single source requirements , the F-22 Program Office will continue to perform market research to determine alternate and/ or multiple possible sources.

Single Source Justification (Simplified Acquisition)

SAF/AQCP Template | 1 May 2014 Page 2 of 2

Section F: Contracting Officer's Determination

I have determined, in accordance with FAR 13.106-1(b)(1), that the circumstances of this contract action deem only a single source is reasonably available.

Date

27-Sep-2017

Typed Name and Rank/Grade of Contracting Officer

Rebecca A. Johnson, GS-13