PCCA-26-00079_Sole Source Justification No. FY260095_Redacted.pdf

HSAM 3008.401-71

Sole Source Justification (SSJ) for

Federal Supply Schedule (FSS) Orders or Blanket Purchase Agreements (BPAs) Exceeding the Simplified Acquisition Threshold

Justification FY26-0095 Page 1

Justification No.: FY26-0095 PR Number: PCCA-26-00079

This acquisition is conducted in accordance with the Multiple-Award Schedule Program, 41 U.S.C. 152(3), Competitive Procedures, 40 U.S.C. 501, Services for Executive Agencies, and in accordance with Federal Acquisition Regulation (FAR) 8.401, FAR Class Deviation 25-20 for FAR Part 81 and the General Services Acquisition Regulation (GSAR)2.

1. Agency and Contracting Activity. Identification of the agency and the contracting activity, and specific identification of the document as a “Sole Source Justification.”

The Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA), Chief of the Contracting Office (COCO), proposes to extend the term of a contract on a sole source basis.

2. Nature of the action being approved (Contractor name, contract type and total estimated value with options).

This SSJ is prepared in accordance with RFO FAR 8.401 and GSAR 538.7104-3(b)(1)(ii). CISA COCO intends to modify task order number 47QRAA24D007W/70RCSJ25FR0000027 to Sev1Tech, LLC to extend the term of the contract for an additional four months for a total estimated value of $20,888,312.61. The extended term will provide for continued services while the follow-on competitive acquisition is conducted. The anticipated award is August 2026.

On August 25, 2025 the Head of Contracting Activity (HCA) approved LSJ No.: FY25-00227 to award task order number 47QRAA24D007W/70RCSJ25FR0000027 valued at $17,324,401.79. This SSJ to extend the term of the contract for an additional four months is prepared because option to extend Services was not included in the initial LSJ No.: FY25-00227.

3. Description of supplies or services required to meet the agency’s needs.

The Contractor will continue to provide CISA with Enterprise Engineering and Operations Support Services (CEEOSS) to support CISA’s enterprise IT capabilities for an additional four months. CISA is actively establishing a modern IT infrastructure and engaging in various initiatives to evaluate and implement emerging modern technologies, migrate to the cloud, support mobile platforms, and continually improve the performance, security, and availability of enterprise IT services.

The objective is to obtain IT support services for the following: Architecting, evaluating, designing, and securely engineering CISA enterprise IT capabilities and services to

1 FAR Class Deviation 25-20 for FAR Part 8 was issued as part of the Revolutionary FAR Overhaul (RFO), which was implemented in response to Executive Order 14275, Restoring Common Sense to Federal Procurement, signed April 15, 2025. Any subsequent citations to FAR Part 8 in this document will be cited as “RFO FAR” for brevity and are referring specifically to FAR Class Deviation 25-20 for FAR Part 8.

2 GSA Class Deviation RFO-2025-FSS-GSAR-538: General Services Administration Acquisition Regulation (GSAR) Class Deviation, Federal Supply Schedule (FSS) Program Ordering Procedures.

Federal Supply Schedule (FSS) Orders or Blanket Purchase Agreements (BPAs)

Justification FY26-0095 Page 2 include but not limited to network, identity and access management, mobility, collaboration capabilities, cloud hosting and services, and communication services.

Transition of capabilities and services architected and engineered to operational status;

management of capabilities, system and service operations, configurations, and support;

cloud and infrastructure asset management; and advanced network/infrastructure/cloud/identity and access management support.

The performance period and estimated value is shown below in the table.

Performance Period Duration Amount

May 1, 2026 – September 30, 2026 4 months

This modification (P00005) will increase the ceiling from to for continued services while the follow-on competitive procurement is conducted. RFO FAR 52.217-8 Option to Extend Services3 was previously exercised for two of six months available under the clause. CISA retains the right to exercise the remaining four months of the clause at a future date

4. The statutory exception and supporting rationale and, if applicable, a demonstration of the proposed contractor’s unique qualifications to provide the required supply or service.

The statutory exception is GSAR 538.7104-3(b)(ii). Sev1Tech LLC is the only source is capable of providing the products, services, or solution required at the level of quality required because the products, services, or solutions are unique or highly specialized;. Serve1Tech LLC is uniquely qualified as it has the critical and requisite technical knowledge and experience with the work streams, is most familiar with the issues, operational considerations and technical challenges, and can provide the services at the level of quality required to meet OCIO’s critical mission requirements and objectives. They have highly qualified personnel with the required broad base knowledge and experience with the program. Sev1Tech, LLC can make them immediately available for the time required with no transition period needed for this effort and to respond to any Office of the Chief Information Officer’s (OCIO’s) changing needs.

It is essential that the Government continue to receive services at the level of quality required for the OCIO’s immediate short-term needs. Sev1Tech LLC is currently providing a full range of services needed such as designing CISANet network services, identity credentialing, and access management (ICAM), Data Management and Visualization as a Service, establishing CISANet cloud and hybrid platforms, privacy compliance requirements, and continued migration from DHS LAN-A to CISANet. Sev1Tech is supporting and fixing any issues with the systems and

3 FAR Class Deviation 25-36 for FAR Part 17 was issued as part of the Revolutionary FAR Overhaul (RFO), which was implemented in response to Executive Order 14275, Restoring Common Sense to Federal Procurement, signed April 15, 2025. Any subsequent citations to FAR Part 17 in this document will be cited as “RFO FAR” for brevity and are referring specifically to FAR Class Deviation 25-23 for FAR Part 17.

Federal Supply Schedule (FSS) Orders or Blanket Purchase Agreements (BPAs)

Justification FY26-0095 Page 3 applications implemented and is also in the process of designing and developing essential IT infrastructure and systems to replace outdated legacy systems and applications. This requirement supports the continuous evolution efforts for developed and designing modernized IT infrastructure.

Sev1Tech LLC’s requisite expertise is necessary for ongoing support until the follow-on competitive task order is awarded in Q4 FY2026. Without Sev1Tech, LLC’s continued support, the program would assume substantial performance risk with detrimental impact to operations and severely diminish the quality of service OCIO provides to its stakeholders and partners.

Sev1Tech LLC is the only source that has the resources and experience in place necessary to provide OCIO the required services without risking interruption in critical mission capabilities.

Sev1Tech LLC’s continued support will prevent a lapse in service and disruption to daily operations during the time required to conduct a competitive procurement. If at the expiration of the current task order, a task order was awarded to a new contractor, (i) it would require substantial contractor effort to develop the base knowledge necessary to meet the operational requirements; and (ii) the Program would assume substantial performance risk of critical mission impairment with a new contractor due to CISA’s suitability and onboarding process, which takes over 100 days on average. Sev1Tech, LLC has the resources and experience in place to provide the Program with the required technical staff without risking an interruption in critical operational capabilities.

For these reasons described above, Sev1Tech LLC is uniquely qualified to meet OCIO’s requisite and immediate needs through this contract modification.

5. Determination by the ordering activity contracting officer that the order represents a fair and reasonable price consistent with GSAR 538.7102-2(d)(2) and 538.7104-2(a)(3).

The Contracting Officer determined the FSS pricing prices will be fair and reasonable based on prior acquisition history and comparison to the Independent Government Cost Estimate (IGCE).

COCO has received an approved Anti-Deficiency Act (ADA) memo to award the four-month performance period during the current lapse in funding for DHS.

6. A description of the market research conducted among schedule holders and the results, or a statement of the reason market research was not conducted.

Market research was originally conducted from December 2024 through February 2025 by issuing a Sources Sought Notice (SSN) on SAM.gov. Since time had elapsed, CISA COCO reassessed the market conditions by issuing a second SSN on SAM.gov on December 11, 2025, with responses due on December 22, 2025. The results identified six (6) capable businesses with the requisite capability to perform the services but cannot immediately provide critical cyber engineering to OCIO and its stakeholders

Sev1Tech, LLC was determined to be the only vendor capable of continuing to provide CISA