NESSUS BRAND NAME REDACTED_Redacted.pdf

Treasury Standard Form – 1014 (Rev 5/18)

Prescribed by Treasury: DTAP 1016.505 transmit or receive FTI. This compliance tool ensures that external agencies that are in possession of FTI are adhering to the security requirements of the IRS and industry standards.

A function that is unique to the Tenable Nessus product and contract is the ability to “loan a license” to any external agency or their agent that may not have the Nessus tool installed in their environment.

This ensures that all compliance reports done during security evaluations is in a compatible format that meets program needs and is in compliance with IRS requirements.

Any change in compliance tools would come at great expense to the IRS, the Office of Safeguards and to our partner agencies that receive FTI. A change in assessment tools would incur additional cost by requiring the IRS to develop new methodology standards for determining compliance to FTI security requirements. The Office of Safeguards would need to train its staff and contractors on the use of a new compliance tool. Additionally, any agency that receives FTI would be required to train their staff on the use of a different tool. Partnering agencies may also incur the cost of purchasing, installing and maintaining a different assessment tool to ensure compatibility with IRS reporting, methodologies, and security requirements.

A change to a different compliance assessment software package would cause significant programs delays and inefficiencies. The Office of Safeguards would require at least 18 months of planning, testing, communication, and training prior to implementation of a new compliance program. The Office of Safeguards would also need to develop new testing matrixes and methodologies for a new program. The Office of Safeguards does not have the staffing, time or budget to undertake these changes currently. Additionally, this change in software would also require coordination with our partnering agencies. Many of whom have purchased the same Tenable Nessus product to perform their own compliance testing to ensure they have parity with IRS FTI security requirements.

5. A determination that the anticipated cost to the Government will be fair and reasonable:

The Contracting Officer will determine the prices to be fair and reasonable based on applicable price analysis techniques; competitive offers received, comparison of prices with the government estimate, or a comparison with NASA SEWP V competitive published price lists.

6.a Any other facts supporting this justification:

There are authorized resellers of these products on the NASA SEWP V contract.

Competition is anticipated for the required brand name item and service. The Contracting Officer will solicit small businesses to the maximum extent practicable by posting the RFQ in Group B, Set-Aside for Service Disabled Veteran Owned Small Businesses (SDVOSB) and Group C for Small Business to include: Woman-Owned Small Businesses (WOSB);

HUBZone Small Businesses; and/or Veteran-Owned Small Businesses (VOSB). All contractors responding to the notice of fair opportunity can submit an offer and have it fairly considered.

6.b Attachments: Yes No

Treasury Standard Form – 1014 (Rev 5/18)

Prescribed by Treasury: DTAP 1016.505 exception to fair opportunity and find it to be accurate and complete to the best of my knowledge and belief. Therefore, unless additional approvals are required as prescribed below, as the head of the procuring activity or authorized designee, I hereby approve this justification based on the authority specified in 4.a above.

Name: Date:

Signature:

9.d Treasury Chief Information Officer (for IT requirements that are over $68 million). I have reviewed this justification and find it to be accurate and complete to the best of my knowledge and belief, and representative of the Government’s need. Therefore, I hereby consent to the approval of this justification.

Name: Date:

Signature:

9.e Senior Procurement Executive (if over $68 million) (Contracting Activity). I have reviewed this justification for an exception to fair opportunity and find it to be accurate and complete to the best of my knowledge and belief. Therefore, as the senior procurement executive, I hereby approve this justification based on the authority specified in 4.a above.

Name: Date:

Signature: