P03 JA-Tenable Security Ren_FINAL 7-3.pdf

Tenable Security Maintenance Renewal compatibility with resource or load capabilities of currently deployed infrastructure, compatibility with current personnel resources, etc.). The required software maintenance and support of the VA owned Tenable Network Security Center software in use by VA CSOC’s VSS is critical to effectively carry out its network vulnerability scanning. Tenable Security Center software performs the discovery, configuration auditing, asset profiling, sensitive data discovery and vulnerability analysis of VA’s enterprise network environment and provides an assessment of the agency’s IT security state. Failure to procure Tenable software maintenance and support would result in ineffective security management. With the global trending increase of IT security threats, any gap in security management efforts due to a failure to maintain the software VA will be unable to scan the enterprise for vulnerabilities therefore, presenting an unacceptable risk to VA’s IT security posture and VA’s Mission. This would also have a significant adverse effect on VA’s ability to protect Veterans personal information and the security of Veteran/public facing applications.

6. Efforts to Obtain Competition: Market research was conducted, details of which are in Section 8 of this justification. Currently no vendor, other than Tenable, or an authorized Tenable reseller can provide the required software maintenance and support to Tenable’s proprietary software. This effort did not yield any additional sources that can meet the Government’s requirements. It was determined, however, that limited competition is anticipated among resellers of the Tenable brand name software maintenance and support. In accordance with FAR 16.505(a)(4)(iii)(A)(1), this justification will be provided with the solicitation to all appropriate and applicable NASA SEWP V GWAC holders along with the Request for Quotation in order to fully notify all interested parties on the NASA SEWP V GWAC. Furthermore, in accordance with FAR 5.301, 16.505(b)(2(ii)(D), and 16.505(a)(4)(ii), notice of award for this action will be synopsized at award on the Contract Opportunities website and the justification will be made publicly available within 14 days of award.

7. Actions to Increase Competition: The Government will continue to conduct market research to ascertain if there are changes in the marketplace that would enable future actions to be competed.

8. Market Research: Tenable software maintenance and support is a commercially available off the shelf maintenance package currently in use in VA. The Government’s technical experts conducted web-based market research in November 2023 by researching other similar solutions from alternative vendors, including those from Rapid7, Qualys and Quay. After review, it was determined that no alternative vendor software and maintenance can meet VA’s interoperability requirements or avoid the duplication of time and cost as outlined in Section 5 of this justification. Additionally, based on the market research conducted by the Government’s technical experts, it has been determined that no other software maintenance and support providers can meet the Government’s requirements and be compatible with VA’s existing Tenable Security Center software proprietary source code to perform the needed maintenance and support services. Only Tenable or its resellers have access to the source code and can provide the necessary support.