Limited_Source_Justification_Redacted.pdf

HNC 17 8928

Justification Review Document Limited Sources Justification

Program/Equipment: Cybersecurity (CS) and Information Systems Security Engineering (ISSE) Support for the Automated Installation Entry (AIE) 2 System

Authority: FAR 8.405-6(a) (1) (i) (C), In the interest of economy and efficiency, the new work is a logical follow-on to an original Federal Supply Schedule order

Amount:

Prepared by:

Name: Megan Brantley____________________ Phone: 256-895-1184_

Title: Contract Specialist__________________ Date: 28 December 2016

E-mail: Megan.N.Brantley@usace.army.mil____

Contracting Officer:

Name: Gloria Harris______________________

Technical Representative:

Requirements Representative:

Reviews: I have reviewed this justification and find it adequate to support other than full and open competition.

Cybersecurity Program Manager:

Legal Counsel:

Government as they are already on-site and familiar with the contract requirements. During the course of the call order they have demonstrated their unique skills, knowledge, and qualifications to provide specialized support of the AIE system and Cybersecurity (CS).

CEHNC is currently preparing for competition for a new call order that will consist of a new separate ATO for the Navy, as well as ongoing support for keeping the system in compliance.

The estimated award date is April 2017. However, this competitive award cannot be made within the timeframe required for cybersecurity coverage needed from 1 January 2017 – 30 April 2017.

If there is a lapse in service, then the AIE 2 program will lose all ability to continue to patch/update all IAVMs, install software patch updates, and provide CS control maintenance to ensure a sustained security posture at more than twenty (20) sites. As part of the accreditation effort, the contractor must assess artifacts and controls in Enterprise Mission Assurance Support Services (eMASS). This is critical in obtaining an ATO. If the performance period is not extended, the eMASS entry/assessment will end and an ATO will not be achievable. The contractor is also responsible for preparing and updating a Plan of Actions & Milestones (POA&M) which details any issues with the system and how they will be or have been fixed.

Again, if the call order is not extended, this will not continue. This is part of what is submitted to the Assessing Official (AO) for an ATO. The contractor who is preparing all of the documentation, assessing the controls, etc. needs to be present during the third party Security Controls Assessor – Validator (SCA-V) assessment. Currently the SCA-V is scheduled for February 6 – 10 2017. If an extension is not given, then the SCA-V will either be cancelled, or the customer will run a great risk of not receiving an ATO because the contractor won’t be present to provide details on the system.

If the extension is not received, then the program will lose their current DIACAP ATO and the extension will be null and void. This will in turn jeopardize 20+ CONUS sites that have access to AIE 2 badging. The current Period of Performance (POP) expires on 31 December 2016.

However, due to several Government delays, the POP needs to be extended until 30 April 2017.

Government delays include the following:

1.) The customer’s delay in providing the SCA-V with funding for the assessment and as a result the SCA-V assessment date has had to be moved several times.

2.) Because the SCA-V date has moved several times, the contractor had to work with the U.S. Army Network Enterprise Technology Command (NETCOM) on obtaining an extension for the current DIACAP ATO so that the AIE 2 system would not be shut down.

3.) The customer denying/delaying the contractor access to a laboratory. This particular laboratory is where the contractor is able to utilize a .mil account which is required in order to work in eMASS.

The extension of services is needed for the contractor to continue patching, STIG-ing, etc. to downgrade any category 1 findings on the system in order to get the system in compliance with DoD standards. If these task are not performed, neither the contractor nor the customer would be able to move forward to obtain an ATO on the AIE 2 system. The Contractor has been able to obtain for the customer, an extension on the current Department of Defense Information Assurance Certification and Accreditation Process (DIACAP) ATO. That extension will expire on 30 April 2017. Therefore, the RMF ATO must be obtained prior to 30 April 2017.

HNC-17-8928

5. Best Value Determination: A best value determination was made at the time the call order was awarded. URS was determined to provide the best value to the Government taking technical approach, past performance, and price into consideration. I hereby determine that the extension of services on this order represents the best value to the Government in accordance with FAR 8.405-6(c) (2) (v). Additionally, I hereby determine that the anticipated cost or price to the Government for this contract action will be fair and reasonable. At the time of the initial award the Cost Engineer evaluated each proposal for fairness and reasonableness. The prices proposed reflected a clear understanding of the requirement and all rates were determined balanced for the base and option periods. The rates for the current period were determined fair and reasonable and are applicable to the four month extension in accordance with FAR 52.217-8.

Gloria Harris Contracting Officer

6. Market Research: Market research is being conducted for the new call order award and there are multiple qualified vendors under the IA/IS Support BPA who will be offered a fair opportunity to participate in the solicitation. However, based on the reasoning mentioned in section 4 above, these sources cannot meet the Government’s need at this time. The program manager / Contracting Officer Representative was contacted and confirmed that this contractor is qualified and have performed satisfactorily.

7. Other Facts:

a. Procurement history. This call order, W912DY-13-A-0012-0005, was awarded and procured utilizing the Engineering and Programmatic Support Services Blanket Purchase Agreement (BPA) mentioned above on 29 September 2015. Fair opportunity was provided to all BPA holders. Award was made to URS Group, Inc.

b. Other facts. N/A

8. Efforts to Obtain Competition: Any new orders will be competed amongst the vendors on the IA/IS Support BPA which consists of two small businesses and three large businesses. The time required to issue a solicitation, evaluate proposals, and award a new task order can take up to 3 months, which will not meet the current needs of the Government to maintain continual security in San Diego, California. Therefore, based on the current needs and the time required to award a new contracts, there is no additional benefit to the Government to compete this action at this time.

10. Technical Certification: I certify that the supporting data under my cognizance which are included in the justification are accurate and complete to the best of my knowledge and belief.

11. Requirements Certification: I certify that the supporting data under my cognizance which are included in the justification are accurate and complete to the best of my knowledge and belief.

Contracting Officer Certification: I certify that this justification is accurate and complete to9.

the best of my knowledge and belief.

Based on the foregoing justification, I hereby approve the modification to extend services under FAR Clause 52.217-8 by four months on an other than full and open competition basis pursuant to the authority of FAR 8.405-6(a)(1)(i)(C) provided that the services and property herein described have otherwise been authorized for acquisition.

Gloria Harris Contracting Officer

Approval