A03_-_LSJ_(Final).pdf

LIMITED SOURCES JUSTIFICATION (LSJ)

1. IDENTIFICATION OF AGENCY AND CONTRACTING ACTIVITY

Agency: Social Security Administration

Contracting Office: Office of the Deputy Commissioner for Budget, Finance, Quality, and Management

Office of Acquisition and Grants (OAG)

Division of IT Support Services

Contracting Officer: Hilton Thompson

(410) 965-3786

Contract Specialist: Joe Speca

(410) 965-9487

Program Office: Office of Information Security (OIS)

Division of Identity, Credential, and Access Management

Contracting Officer’s Amanda Mari

Technical Representative (410) 965-1363

(COTR):

Title: Federal Identity, Credential, and Access Management (FICAM)

Roadmap

APP#: OIS-16-544K0

Proposed Contractor: Deloitte Consulting, LLP (Deloitte)

2. NATURE AND/OR DESCRIPTION OF ACTION FOR APPROVAL

Type of Action:

_X_New award

___Modification of existing award, number ______________________

Contemplated Contract Type:

_X_Firm-fixed price

___Time and materials/labor hour

___Combination

We seek approval of a LSJ to obtain professional services from Deloitte in support of the FICAM

Roadmap project.

The period of performance for the required services includes a base period from 09/18/2016 through

03/17/2017, plus an option to extend services for up to six months from 03/18/2017 through

09/17/2017, if necessary (per Federal Acquisition Regulation (FAR) 52.217-8, Option to Extend

Services).

3. DESCRIPTION OF SUPPLIES/SERVICES REQUIRED TO MEET AGENCY NEEDS AND

ESTIMATED VALUE

Estimated Value: $2,600,064

The agency requires the services of Deloitte, who will provide continued configuration and maintenance of Computer Associates (CA) IdentityMinder (also known as Identity Manager) and

CA GovernanceMinder (also known as Role and Compliance Manager) for endpoint provisioning along with the development, updates, and maintenance of the Systems Access Manager, which is the custom user interface currently in place.

4. AUTHORITY, SUPPORTING RATIONALE, AND DEMONSTRATION OF UNIQUE

QUALIFICATIONS OF PROPOSED CONTRACTOR(S)

41 U.S.C. § 251, et seq., and 40 U.S.C. § 50 as implemented by the Multiple Award Schedule

Program, and under the procedures of the FAR Subsection 8.405-6 “Federal Supply Schedules—

Limiting Sources”. Specifically, FAR 8.405-6 provides that orders placed under the General

Services Administration (GSA) Federal Supply Schedule (FSS) are exempt from the competition requirements in Part 6 of the FAR. However, we are further restricting consideration pursuant to the following authority:

_X_ FAR 8.405-6(a)(1)(i)(A) An urgent and compelling need exists.

____ FAR 8.405-6(a)(1)(i)(B) Only one source capable of providing the supplies or services required at the level of quality required because the supplies or services are unique or highly specialized.

____ FAR 8.405-6(a)(1)(i)(C) In the interest of economy and efficiency, the new work is a logical follow-on to an original FSS order provided that the original order was placed in accordance with the applicable FSS ordering procedures.

In accordance with the FICAM Roadmap 2.0 “Goal 3: Improve Security Posture across the Federal

Enterprise” and the most recent Office of Personnel Management breach related to excessive privileges, the agency has placed increased focus on access rights. To meet compliance regarding this initiative, the agency has begun providing an automated, centralized portal for users and supervisors to request or terminate access. This portal improves the agency’s overall security posture. Automating, auditing, and streamlining previously paper forms through the new portal will improve the agency’s security posture in alignment with cybersecurity initiatives from the White

House and the Department of Homeland Security (DHS).

The continuation of these services is required in order for the agency to ensure that it meets its yearly mandated Cross Agency Priority goal and to continue strengthening its posture, in alignment with cybersecurity initiatives directed from the White House and DHS. Finally, in accordance with the

FICAM Roadmap 2.0, the agency requires the continued success and positive momentum of Identity

Credentialing and Access Management (ICAM) investments to help ensure our adherence to

Homeland Security Presidential Direction (HSPD) 12 and the Office of Management and Budget

(OMB) M-11-11 security mandates. This continuation will also assist in the alleviation of a regular source of audit findings for the agency regarding authorization of logical access requests. Without an award for these services, the agency would be non-compliant with a federal mandate and place a great risk to public and government safety if a cyber-intrusion were to occur.

5. DETERMINATION BY CONTRACTING OFFICER THAT ORDER REPRESENTS BEST

VALUE

As provided in FAR 8.404(d), GSA has already determined the prices offered for supplies and fixed-price services and rates for services offered at hourly rates, under schedule contracts, to be fair and reasonable. By placing an order against a schedule contract using the procedures in FAR 8.405, the contracting officer (CO) has concluded the order represents the best value and results in the lowest overall cost alternative to meet the agency’s needs. In addition, the CO will seek a price reduction for prices offered by Deloitte.

Additionally, before making any award, the CO will verify that all items proposed are currently available on Deloitte’s GSA FSS and offered at or below the current approved GSA prices.

6. MARKET RESEARCH

OIS has completed market research for the required services by surveying various contractor GSA

FSSs under Special Item Number 132-62 – HSPD. While multiple viable sources exist, the agency must make an award for this urgent and compelling need due to time constraints and project delays to ensure there is no gap in these critical services. We will use this market research in an upcoming, long-term procurement effort for the continuation of these services.

7. ANY OTHER SUPPORTING FACTS

GSA has already completed a determination of responsibility at the GSA FSS contract level, and maintains that ordering agencies are not required to conduct it at the order level. Even so, before making the award, in accordance with FAR 4.1102, 4.1201 and 9.401 the CO will examine the

System for Award Management to make an affirmative determination of the contractor’s responsibility. The contractor’s past performance records indicate that it has the corporate ability and the access to necessary knowledge and skilled technical resources to perform this requirement.

Deloitte has successfully demonstrated direct ICAM experience by assisting over 100,000 users with the adoption of ICAM capabilities across the agency. Their performance has been historically outstanding. Issuance of a new award to a different contractor at this time places the agency at great risk; because the agency’s positive momentum in regards to the implementation of the FICAM roadmap would be greatly impaired. Additionally, per the HSPD-12 and OMB M-11-11 security mandates, the agency requires continuation of these services, and any sort of interruption would cause harm to the agency.

8. STATEMENT OF ACTIONS, IF ANY, AGENCY MAY TAKE TO REMOVE OR

OVERCOME BARRIERS THAT LED TO RESTRICTED COMPETITION BEFORE

SUBSEQUENT ACQUISITION IS MADE

The OIS program office and OAG will continue to seek opportunities for competition on future procurements by continuing to survey the market place, and review service literature associated with this requirement. After completion of the current urgent and compelling requirement on a sole source basis, OAG will begin the process for the establishment of a single-award Blanket Purchase

Agreement (BPA) with a 12-month base period, four 12-month option periods, and a 6-month option to extend services, if necessary. OAG anticipates issuing an unrestricted solicitation in accordance with FAR 8.405-3. OAG will award this BPA and issue the initial BPA call order prior to

03/17/2017, the anticipated end date of the subject limited sources task order.

PROGRAM OFFICIALS’ RECOMMENDATION AND CERTIFICATION

The COTR and other program officials hereby certify that the information provided in support of LSJ, and which forms the basis for this justification, is accurate and complete.

CERTIFICATION BY THE CONTRACTING OFFICER AND OTHER CONTRACTING

OFFICIALS

The CO and other contracting officials hereby certify that the information provided in support of this LSJ is accurate and complete to the best of their knowledge and belief.

RECOMMEND: ______________________________ 08/02/2016

Joe Speca, Contract Specialist Date

Division of IT Support Services (DITSS)

Office of Information Technology Acquisition (OITA)

OAG

CONCUR: 08/04/2016

Hilton Thompson, Contracting Officer Date

DITSS, OITA, OAG

CONCUR: 8/09/2016

Syreeta Gay, Division Director Date

DITSS, OITA, OAG

CONCUR: 08/09/2016

Christian Hellie, Office Director Date

OITA, OAG

CONCUR: Cathy A. Bella 8/15/2016

Cathy Bella, Deputy Associate Commissioner Date

OAG

8/16/2016

CONCUR: ________

Seth Binstock, Associate Commissioner Date

OAG

APPROVE: 8/18/2016

Sean Brune Date

SSA Competition Advocate

Competition Advocate Review Board (CARB)

Project Title: Federal Identity, Credential, and Access Management (FICAM) Roadmap-Deloitte

Estimated Amount: $2,600,064

Review and discussion occurred: Electronically

For a

_X___Limited Source Justification (LSJ)

_____Justification for Other than Full and Open Competition (JOFOC)

CARB Panel Members

Deputy Commissioner, Office of Systems (or designee)

Date___8/16/2016_______

__X__I recommend signature by the approving official

_____I do not recommend signature by the approving official

General Counsel (or designee)____ Date August 17, 2016

_X __I concur that the justification is legally sufficient

_____I do not concur that the justification is legally sufficient