Prior JA 23103 _ SENTRIS ELA _842368043 FINAL_Redacted Final.pdf

CUI

Controlled By: DCIO SAP IT Controlled By: SAPIT CUI Category: PROCURE Distribution/Dissemination Control: FEDCON POC: sarah.j.mosley3.civ@mail.mil

Page 1 of 8 Pages

JUSTIFICATION FOR OTHER THAN FULL AND

OPEN COMPETITION (OTFAOC)

Federal Acquisition Regulation (FAR) Part 6 Justification & Approval (J&A), Supporting Procurements under FAR Part 12, and FAR Part 15

Purchase Request Number: HQ062394351 Contract Number: To be determined (TBD) Task/Delivery Order Number: TBD Procurement Title: Sentris Software Enterprise License Agreement (ELA) Software Subscriptions and Support Renewal Estimated Value:

Statutory and Regulatory Authority: 10 United States Code (U.S.C) §3204(a)(1) and

FAR 6.302-1

Justification for OTFAOC Number: JA23-103

Upon the basis of the following justification, I, as Procuring Activity Competition Advocate (PACA), hereby approve the use of other than full and open competition of the proposed contractual action pursuant to the authority of 10 U.S.C. §3204(a)(1) and regulatory authority of FAR 6.302-1, only one responsible source and no other supplies or services will satisfy Agency requirements.

1. REQUIRING AGENCY AND CONTRACTING ACTIVITY:

Requiring Agency:

Department of Defense (DoD) Chief Information Officer (CIO) for Special Access Programs (SAP) 6000 Defense Pentagon Washington, District of Columbia 20301-6000

Contracting Activity:

Defense Information Systems Agency (DISA)/Defense Information Technology Contracting Organization (DITCO)/PL8413 2300 East Drive, Building 3600 Scott Air Force Base, Illinois 62225-5406

2. NATURE/DESCRIPTION OF ACTION(S):

a. This requirement is a new contract action to procure continuous brand name Sentris software subscriptions and support for the DoD CIO SAP. This effort will continue the solution for an enterprise system capable of exchanging secure voice, video, and data within and between the multiple SAPs within the DoD SAP community under a sole source contract to ManTech

Sentris Software ELA Software Subscriptions and Support Renewal-JA23-103

Page 2 of 8 Pages

International Corporation (ManTech), the original equipment manufacturer (OEM) of the Sentris Software.

b. The period of performance (PoP) for this contract will consist of a 6-month base period, September 26, 2023 – March 25, 2024, and one, 1-year option period, for total contract life of one and a half years.

Period PoP Estimated Price Base Period September 26, 2023 – March 25, 2024 Option Year 1 March 26, 2024 – March 25, 2025 Lifecycle

The total estimated value for this requirement is estimated at . Fiscal year 2023 Operations & Maintenance funds will be used in the base period of this effort and have been provided on Military Interdepartmental Purchase Request HQ062394351. The applicable North American Industry Classification System code is 513210, Software Publishers, with a size standard of $47M.

3. DESCRIPTION OF SUPPLIES/SERVICES:

The DoD CIO SAP needs to continue to provide classification labeling, marking and access control through a subscription that understands the contents of information, classify it according to a particular DoD program’s security classification guide, and then label the information according to classification, caveats, and other dissemination control marking requirements. The solution must support umbrella programs, sub-compartments, acknowledged and unacknowledged programs, users supported at multiple sites; centralized management and monitoring; continuity of operations; Microsoft Office applications including Outlook mail office automation applications; reutilization of existing IT resources and expertise where possible; Defense Intelligence Agency certification up to Top Secret/Sensitive Compartmented Information Special Access Required; Sensitive Compartmented Information Facility (SCIF) and non-SCIF facilities; and, multi-level Security (MLS) and cross-domain transfers in the future.

The application requirements in the multi-SAP Protection Level (PL3) environment include Microsoft Outlook, the Microsoft suite of office automation products, web browsers, document management, Adobe Acrobat Reader; WinZip and desktop collaboration applications including chat, desktop video teleconferencing, and white boarding that the software subscription must execute with. The subscription should work and coordinate within an Enterprise environment across multiple organizations’ Active Directory domains. In a multiple organization environment, DoD CIO must still be able to account for the integrity of the information and the extent of its distribution. The system should be deployable and already developed against open standards but also compliant with standards developed by the DoD, National Security Agency and National Institute of Standards and Technology for the protection and dissemination of information. The solution must be able to make real-time decisions about the classification level of the information and an individual’s ability to access, change, delete, receive, or forward the

Page 3 of 8 Pages information based on the credentials of the sending and/or receiving individual, facility, and system.

Specifically, the software subscription shall include the following technical characteristics:

- A single commercial off the shelf (COTS) subscription (not a managed service) that will support up to 20,000 concurrent users through an unlimited subscription model.

- Scope includes all of the DoD to include contractor support.

- Operate on current supported versions of MS Server, SQL, NetApp Storage, MS

Office, MS Exchange, MS SharePoint, and Skype for Business.

- Controls access to information based on information, user, facility, and system classification labels/level, handling caveats, and control markings.

- Based on a program’s security classification guide, automatically suggest DoD compliant content classification labels, handling caveats, and control markings.

- Provide users a tool to properly mark information following classification and special handling requirements.

- Establishes trusted connections with other organizations to allow for the sharing of classified information across organizational boundaries.

- Monitor and log:

Who is accessing the information?

From where is the information being accessed?

From what system the information is being accessed?

Changes made to the information.

- Automatic redaction of data elements and content.

- Automatically control distribution (allow, block, delete, redact) of information to individuals, facilities, or systems.

- Highly scalable with easy synchronization of new information and/or additional users.

- Role-based system (administrator, privileged user, etc).

- TRL6 or greater refer to definition at:

https://en.wikipedia.org/wiki/Technology_readiness_level#U.S._Department _of_Defense_(DoD)_definitions.

- Intuitive User Interface with modern design standards.

- Open architecture to ensure future enhancements.

4. IDENTIFICATION OF STATUTORY AUTHORITY:

This acquisition is conducted under the authority of 10 U.S.C. 3204(a)(1) and the regulatory authority of FAR 6.302-1/Defense FAR Supplement 206.302-1, only one responsible source and no other supplies or services will satisfy Agency requirements. The software subscriptions and support are peculiar to a specific brand name, Sentris Software solution.

5. DEMONSTRATION OF CONTRACTOR’S UNIQUE QUALIFICATIONS:

(a) Description of events.

Page 4 of 8 Pages

The Sentris software tool has been supporting the SAP community for more than a decade through individual contract/task orders to ManTech. In 2018, for SAP established an enterprise level agreement for security marking and access control. The enterprise agreement consolidated the licenses and Tier I/II to support up to 20,000 users across the SAP community. Current day, the software has grown to supporting the more than 100,000 licenses across three networks for SAP.

The Government, specifically the DoD SAP community, has a requirement for the continuation of the solution provided by the Sentris software for an enterprise system capable of exchanging secure voice, video, and data within and between multiple SAPs.

Additionally, the requirement includes upgraded premium Tier III level support across the enterprise with the option for DoD Mission Partners to purchase additional individual Tier III option for onsite support. This addition will reduce the individual task orders that are contracted to ManTech for this premium level service.

(b) Justification.

(1) Minimum Government requirements.

See paragraph 3 above.

(2) Proposed sole source contractor.

The proposed sole source contractor is ManTech. ManTech is the sole source provider of the Sentris software platform product line that make up the DoD CIO SAP’s Enterprise environment. The software is proprietary, and ManTech is the only source from which they can be obtained, licensed, or supported. Based upon market research, there are no other commercially available product lines with similar functionality which would fit within the DoD CIO SAP’s established network infrastructure.

(3) Discussion regarding cause of the sole source situation.

In 2018, the original Sentris Enterprise Software Agreement was awarded to ManTech through full and open competition via open market. Under that contract, the DoD CIO SAP deployed the Sentris software subscriptions and support throughout the DoD CIO SAP community establishing the Sentris Enterprise Software Agreement. The Sentris software subscriptions and support that makes up the DoD CIO SAP’s environment is part of the Sentris Software Platform product line. ManTech, the OEM for this COTS software, is the only entity that can provide this proprietary software. No other reseller or dealer can offer the Sentris Software Platform product line; therefore, no other reseller or dealer can meet the DoD CIO SAP Sentris software subscriptions and support specific requirements.

Page 5 of 8 Pages

(4) Impact.

This contract will allow for the continued operational support of the DoD CIO SAP community already utilizing the Sentris solution. If the Government does not procure the Sentris software subscriptions and support, users will lose the capability to access their workstations as the function for classification controls will require the SAP community to manually ensure that every user has the proper security clearance. The inability to properly authenticate users to SAP data puts great risk to our most critical classified information and increases the risk of unauthorized disclosures of classified information.

6. CONTRACT OPPORTUNITIES ANNOUNCEMENT/POTENTIAL SOURCES:

A notice of the proposed contract action, along with a redacted justification for OTFAOC, will be published on SAM.gov website, as required by FAR 5.2, with the intention to award a sole source contract to ManTech Advanced Systems International, Inc., a subsidiary to ManTech International Corporation.

7. DETERMINATION OF FAIR AND REASONABLE COST:

A determination will be made by the contracting officer that the order represents the best value to the Government, as defined in FAR 2.101, and results in the lowest overall cost alternative (considering price, special features, and administrative costs) to meet the Government's needs.

The contracting officer will also determine the pricing information valid for comparative purposes. Certified cost and price data is not required for this commercial item acquisition, in accordance with FAR 15.403-1(b)(3). The contracting officer will determine whether the price is fair and reasonable based on:

a. Comparison of the proposed prices to historical and existing prices paid, whether by the Government or other than the Government, for the same or similar items.

b. Comparison with competitive published price list and published market prices of the same commodities.

c. Comparison of proposed prices with the independent Government cost estimate.

8. MARKET RESEARCH

a. Market research was conducted August through September 2023. Market research included reviewing results of recent market research for similar or identical supplies/services, contact with knowledgeable persons in Government and industry, the commercial listed product catalog published in June 2023, Government-wide Acquisition contracts, direct communication with ManTech, and previous contract awards to ManTech. ManTech provided a letter dated August 29, 2023 stating that “ManTech International Corporation is the sole-source provider of the Sentris platform. ManTech does not currently use any third-party distributors or resellers.

Further, ManTech is the sole-source provider of Sentris Engineer Training and does not currently

Page 6 of 8 Pages maintain any partnerships with, nor recognize training certification from third-party providers.”

The results of the market research revealed and validated the current solution is proprietary to ManTech and cannot be supported by any other contractor.

b. The first step taken in conducting market research, was to determine if another brand name solution could meet the Government’s need. There are no other competing products that meet DoD’s minimum requirement. The next step in conducting market research was to determine a method of procurement. Market research revealed ManTech’s solution is not available through the DoD Enterprise Software Initiative or via a General Services Administration contract vehicle.

ManTech does not authorize any resellers to provide the required product or support, therefore a sole source procurement shall be sent directly to ManTech. Market research supports that this requirement meets the definition of a commercial item in accordance with FAR 2.101.

c. Based on current market research dates and data listed in paragraph a., it was determined that only the aforementioned brand name product and/or product support, Sentris, can fully support the Government’s need. No competitor functional replacement products exist in the market at this time to meet the Government’s need. The Government will continue to conduct market research to determine if there are changes in the marketplace that would enable future competitive actions, e.g., there are similar products and/or support in the marketplace that provides the same functionality, the OEM releases ownership rights of the product, or it is economically feasible to procure a new system.

9. ANY OTHER SUPPORTING FACTS: None

10. LISTING OF INTERESTED SOURCES: None. When market research was conducted, no other sources expressed interest in this requirement. As stated in Para. 6 above, a synopsis will be published prior to issuance of solicitation or contract award.

11. ACTIONS THE AGENCY MAY TAKE TO REMOVE OR OVERCOME BARRIERS

THAT LED TO THE EXCEPTION TO FULL AND OPEN COMPETITION:

a. During the market research conducted, only ManTech was found to have capabilities to provide this requirement. Furthermore, no other sources have expressed interest in this requirement. If ManTech elects to surrender their legal ownership, copyright, and/or intellectual property software rights and move toward a complete open-source solution, then DoD CIO SAP will seek a competitive acquisition approach. While the network infrastructure utilizing Sentris will be the solution for the foreseeable future, as it is the only solution that meets the DoD CIO SAP’s requirement, every effort will be made to compete them to the maximum extent practical should ManTech allow other resellers to quote or if the requirements can be met on other contract vehicles. Regardless, the Government will continue to search the marketplace. If the Government should determine that the Sentris products are no longer required, the Government will seek competition for the required functionality.

Page 7 of 8 Pages

b. Procurement History.

Contract Number: HC1084-18-C-0005 Brief Description: Sentris Software Subscriptions and Support Contractor: ManTech Advanced Systems International Business Type: Large Business Life Cycle Contract Value:

Period of Performance (including all options): September 26, 2018 through September 25, 2023 Basis of Award: Firm Fixed Price/Brand name Sentris or equal, full and open competition Previous protests/Congressional inquiries: None

Page 8 of 8 Pages

CONTRACTING OFFICER CERTIFICATION: I certify that this justification is accurate and complete to the best of my knowledge and belief.

NAME: Carmelyn Anne L.G. Bryan SIGNATURE/DATE: See separate signature page

TITLE/ORGANIZATION: Contracting Officer, DISA/DITCO/PL8413

PACA APPROVAL: I have reviewed this justification and find it to be accurate and complete to the best of my knowledge and belief. Since this justification does not exceed $15M, this review serves as approval and my written determination that the aforementioned FAR circumstances apply.

NAME: Gay D. Arnold SIGNATURE/DATE: See separate signature page

TITLE/ORGANIZATION: PACA/DISA

ALL QUESTIONS REGARDING THIS JUSTIFICATION ARE TO BE REFERRED TO

Carmelyn Anne L.G. Bryan, carmelynanne.bryan.civ@mail.mil.