Pr_1300576886_Brand_Name.doc

BRAND NAME JUSTIFICATION FORMAT FOR SIMPLIFIED ACQUISITIONS

1. DESCRIPTION OF REQUIRED SUPPLIES/SERVICES, ESTIMATED VALUE, AND DELIVERY REQUIREMENTS

The Subject requirement provides for the acquisition of AssuredScanDKV Prototype with licensing good for 60 days and project management support, training services, and analysis/prioritization support and questions/answers. With the AssuredScanDKV Prototype we will be able to scan software code of locally developed applications as well as 3rd party COTS software. AssuredScanDKV Prototype will assign criticality values to known vulnerabilities that are discovered so that NSWCCD can prioritize fix actions.

SUPPORTING DOCUMENTATION FOR SOLE SOURCE BASED ON CONTRACTOR' S UNIQUE QUALIFICATIONS OR NATURE OF THE ACQUISITION

With many different software pieces in the environment it is hard to know what underlying vulnerabilities exist from the start when they are developed. AssuredScanDKV Prototype scans these software's at their core, binary level: their source code. This gives NSWCCD a tremendous advantage in combatting our cyber enemies in that we will be able to prioritize risk and address vulnerabilities. By scanning the source code our local developers will be able to go back and remediate or mitigate these vulnerabilities giving more value to any potential customer and reducing risk across the command.

The subject requirement provides for the acquisition of the acquisition of AssuredScanDKV Prototype with licensing good for 60 days and project management support, training services, and analysis/prioritization support and questions/answers at NSWCCD in W. Bethesda and detachments. This software is crucial to finding what vulnerabilities lay in our locally developed software as well as all COTS software we utilize. By reducing our attack vector and layering our Defense in Depth strategies we can continue to ensure that NSWCCD does not become the next government agency on the nightly news for a hack and exfiltration of data.

MARKET SURVEY

Software must be approved in DADMS to be allowed on our RDT&E network. Without DADMS approval, the network could potentially lose its Authority to Operate (ATO) status.

AssuredScanDKV Prototype is DADMS approved. Due to the proprietary nature ofthis software, only the AssuredScanDKV Prototype manufacturer and its resellers have been considered.

ADDITIONAL FACTS

None.