JA 51313 5.2.2.3.1 FSS (GSA) Limited Sources Justification_Redacted.pdf

DEPARTMENT OF THE NAVY

NAVAL SEA SYSTEMS COMMAND

1333 ISAAC HULL AVE, SE

WASHINGTON NAVY YARD, DC 20376-0001

IN REPLY TO

J&A Number: 51,313 Code: SEA 0251 P.R. Number:N00024-23-NR-41513

LIMITED SOURCE JUSTIFICATION

This acquisition is being conducted under the authority of FAR 8.405-6(b).

1. Contracting Activity.

The Naval Sea Systems Command (NAVSEA) Surface Systems Contracts Division (SEA 025)

2. Nature and/or Description of Action Being Approved.

NAVSEA, Program Executive Office Integrated Warfare Systems (PEO IWS) 80.0, Ship Self-Defense Systems (SSDS), intends to utilize other than full and open competition to obtain Software licenses and services from Forcepoint Federal LLC (Forcepoint). These items will be procured via the General Services Administration (GSA) Authorized Federal Supply Schedule GS-35F-650GA.

This effort is required to support the completion of the Site Based Security Assessment (SBSA) process for the High Speed Guards (HSGs) currently installed within the SSDS Element's Network Server Group (NSG) cabinets onboard United States Navy (USN) Large Deck Class Ships (Amphibious and Carriers). This delivery order will include procurement of the necessary licenses, labor and travel support, required to field a Cross Domain Solutions (CDS) on SSDS Large Deck Class Ships, SSDS Development sites and at Land Based Test Sites (LBTS) to satisfy emerging Information Assurance (IA) and Cyber Security requirements.

Forcepoint is currently performing the above effort under NAVSEA task order N00024-18-F-5131 through August 2023 and the continuation of this support effort is being procured via the GSA Contract GS-35F-650GA.

3. Description of the Supplies or Services Required to Meet the Agency’s Needs (including the estimated value).

PEO IWS 80.0, SSDS, is required to create, modify, and maintain a CDS that allows the classified and unclassified domains to connect aboard Aircraft Carriers and Amphibious Class Ships. The certifying technical and requirements Subject Matter Experts (SMEs) have verified that the use of Forcepoint licenses are essential to meeting the Government’s requirements. These licenses and services will enhance the SSDS Integrated Combat System (ICS) aboard the ships and provide improvements for the SBSA Process. The Contractor will provide technical services including but not limited to the following:

Develop and deliver updates to all required SBSA process artifacts to include, Security Test and Evaluations (ST&E), Procedures and Scripts, Data Validation Guides, Privileged User Guides, and Proxy Configuration Guides.

Deliver HSG Operational, Developmental and Maintenance Licenses.

Provide Engineering Support Services to ensure resolution of Problem Reports created during laboratory and ship testing.

Develop, convert, and modify filters and rule sets.

The estimated period of performance of this contract action is August 2023 through August 2028. The Government’s minimum needs have been verified by the certifying technical and requirements SMEs. The estimated dollar value of this effort is

4. Identification of the Justification Rationale (see 8.405-6(b)) and, if applicable, a Demonstration of the Proposed Contractor’s Unique Qualifications to Provide the Required Supply or Service.

Per FAR 8.405-6(b), Forcepoint is the only responsible source to provide HSG support and licenses, which are proprietary software and the sole property of Forcepoint.

There are constant high priority security patches being developed for the application and Operating Environment (OE) of the HSGs.

The installation of these patches is necessary to fix software

Due to the proprietary rights asserted by Forcepoint on their independently developed software products, there are no authorized resellers that can provide the required engineering and maintenance support for the SSDS ICS software. As the Forcepoint software is fully enveloped within the CDS environment aboard SSDS Carriers and Amphibious class ships, an alternative item would not meet the Government's requirements.

Additionally, Forcepoint develops, maintains, and updates cross-domain data flow rulesets and associated SBSA artifacts for each hull prior to the ship's SABS ST&E event. These artifacts are essential parts of the CDS Approval package; which is required to be submitted to the Navy Cross Domain Solution Management Office (NCDSMO) no later than three (3) to four (4) months prior to the ship's ST&E event. These products must be promptly delivered to ensure there is adequate time to complete the Defense Security Accreditation Working Group review and approval cycle, which occurs monthly. Completing the SBSA process and obtaining approval for the artifacts are required under the Risk Management Framework Process.

Due to the proprietary technology of the Forcepoint HSG product, reassignment of these tasks to another Contractor is currently not feasible. A new HSG solution would require an extensive amount of development and certification before it could be integrated into the combat system. This would cause, at a minimum, a three-year delay (4 months to research and develop requirements, 6 months to execute a contract, 4 months to PDR, 4 months to CDR, 12 months for production/ruleset development/integration, and 6 months to obtain cyber approval which includes permission to install/test shipboard) in the certification process and negatively impact the deployment schedule for USN ships. The services acquired from Forcepoint will ensure proper interface and functionality of the CDS aboard SSDS class ships and ensure the HSG installation schedule does not negatively affect Fleet priorities. This support is required to meet mandated Department of Defense (DoD) security requirements and Fleet deployment schedules. Any alternative solution would require a re-architecture and rebuild of the SSDS Combat System Local Area Network, which would cause significant schedule delays. Due to the development of the HSG with the current SSDS Combat Systems Engineering Agent, and the deployment schedule to meet the USN Fleet requirements, there are no other products, services or providers in the commercial marketplace that can satisfy this requirement.

5. Determination by the Ordering Activity Contracting Officer that the Order Represents the Best Value Consistent with 8.404(d).

The Contracting Officer has determined that this order will represent the best value and will result in the lowest overall cost for the Government while maintaining the ability to meet the Navy’s needs. Due to the dollar value, and quantities being procured, the Contracting Officer will seek additional discounts from the schedule holder. There is historical precedent for this as Forcepoint previously negotiated a price below their GSA schedule for this effort.

6. A description of the market research conducted among schedule holders and the results or a statement of the reason market research was not conducted.

Since this service is proprietary to the manufacturer, market research was limited to verifying the proprietary elements of Forcepoint products. Currently, Forcepoint is the only company that can complete the necessary USN Fleet requirements without a significant, damaging, lapse in service.

7. Any Other Facts Supporting The Justification.

The SSDS Program intends on replacing the obsolete HSG Servers installed on all Technology Insertion (TI) 12 and 12 Hybrid (H) Baseline 10 Aircraft Carriers, Amphibious Class ships and all Land Based Testing Sites via an approved Engineering Change Proposal (ECP). When the ECP is implemented, all current Version

3.0.4.2 Forcepoint software will become null and voided from a NCDSMO compliance perspective. Forcepoint will then need to be tasked as the sole provider to modify, convert and migrate all rules and filters from Version 3 to Version 5.X, Special Purpose.

This update will be required to be “Raise the Bar” compliant with DoD cyber security requirements and deliver those to the Combat System Engineering Agent (CSEA) for integration into the SSDS computer program software for all the TI-12 and TI-12H Baseline 10 ships. No other company can perform this action with required SMEs available to meet the SSDS delivery schedules. When the SSDS ships and LBTSs are migrated to Version 5.X Special Purpose, an upgrade cost and bulk buy tiered-pricing discount would apply using the cited GSA Schedule. No other company in industry offers a bulk buy tiered-pricing discount to the Government other than Forcepoint.

8. A Statement Of The Actions, If Any, The Agency May Take To Remove Or Overcome Any Barriers That Preclude The Agency From Meeting The Requirements Of 8.405-1 And 8.405-2 Before Any Subsequent Acquisition For The Supplies Or Services Is Made.

For the reasons set forth in Paragraph 4, competition is not a viable option at this time.

If future requirements develop, PEO IWS 80.0 will assess whether the circumstances surrounding the need to obtain the required supplies/services without full and open competition, have changed in a manner that would allow for competition.