Redacted_J&A.pdf

DEPARTMENT OF THE NAVY

NAVAi.AiR WARFARE CENTER MAPONS DMSION I ADMIHllmATtOHCIRCU! 171f AVENUI 8UITI t CHINAl.AICE, CAllS8!MUIO POINl'MUGU. CAalMNIMI

IN Al!PLYREFER 10:

J&A Number: 18-<>216

JUSTIFICATION AND APPROVAL

FOR USE OF OTHER THAN FULL AND OPEN COMPETITION

1. Contracting Activity.

Naval Air Warfare Center Weapons Division (NA WC-WD) China Lake, CA

2. Description of the Action Being Approved.

This justification and approval authorizes and approves a Firm Fix~ Price (FFP) contract for the brand name software CheckMarx., or equal. This effort will provide software licenses in support of the Tactical Mobility and Wireless Integration Lab (TMWIL).

3. Description of SuppUes/Services.

The Naval Air Warfare Center Weapons Division (NA WCWD) intends to procure licenses for a software code wlnerability scanner, specifically targeting Android code. This software is used to analyze source code against known hacking attack vectors. Software teams utilize this information to either modify the code to mitigate against the vector or simply as a documentation acceptance of the code.

Estimated Dollar Value in Thoasgds

FY 18 FY 19 FY20 FY21 FY22 Total

Total $2SSK

4. Statutory Authority Permitting Other Than Full and Open Competition.

JO U.S.C. 2304(c) (1), Only one responsible source and no other supplies or services will satisfy agency requirements. Accordingly, pursuant to FAR 11.1 OS(a)(l) The particular brand name, product, or feature is essential to the Government's requirements, and market research indicates other companies' similar products, or products lacking the particular feature, do not meet, or C81Ulot be modified to meet, the agency's needs

S. Rationale Justifying Use of Cited Statutory Authority.

TMWIL uses the intellU Integrated Development Environment (IDE) for software development and all development is performed on computers that are unable to be connected to the internet and With machines that are unable to connect to a development server. CheckMmx is the only solution that is able to function both with a server and via a stand-alone deployment option. In

Redacted

J&A Number: 18 0216 addition, CheckMarx is the only solution that integrates specifically with the intelliJ IDE railer than a code configuration management tool. This is important, as the code configuration management tools would require the solution to be I 000.4 deployed on a server.

6. Description of Eff'orts Made to Solicit Offen from a1 Many Off'eron a1 Praetlcable.

In accordance with DFARS POI 206.302-l(d), a Sources Sought announcement was posted to the Federal Business Opportunities (FBO) website on 27 March 2018. The Government received a phone call from representatives of and CheckMarx requesting clarification regarding the purpose of the posting. and CheckMarx were unsure if the posting was a solicitation. Tlie Contracting Officer stated that the current posting is sources sought for market research purposes only. No further communications or submissions were received.

As this requirement is being fulfilled used FAR Subpart 13.S procedures a combined synopsis/solicitation will be issued via the Federal Business Opportunities (FBO) website, in accordance with FAR 13.lOS(b).

7. Determination of Fair and Reasonable Cost.

In accordance with FAR 15.402, the Contracting Officer shall ensure that all supplies and services provided under this contract are procured at a fair and reasonable price. The Contractor will submit a fonnal price proposal with sufficient information to support the accuracy and reliability of the estimate. CheckMarx's proposal will be reviewed by experienced technical analysts, cost analysts and contract specialists with the aid of necessary field pricing support. The Contracting Officer will utilize cost and price analysis as the basis for negotiating a fair and reasonable price.

8. Actions to Remove Barriers to Future Competition.

For the reasons set forth in Paragraph S, NA WCWD bas no plans at this time to compete future contracts for the types of supplieslservices covered by this documenL If another potential source emerges, NA WCWD will assess whether competition for future requirements is feasible.

.. 4 • .~