SingleSourceJustificationLetter.pdf

DEPARTMENT OF THE AIR FORCE

262d Cyberspace Operations Squadron (AFSPC)

JOINT BASE LEWIS-MCCHORD WASHINGTON

15 August 2018

MEMORANDUM FOR 194 MSG/MSC – BASE CONTRACTING OFFICE

FROM: 262 COS/CC

SUBJECT: Justification for Soliciting from a Single Source - for the procurement of The Escal Institute of Advanced Technologies, Inc. Cyber Security Training Courses for the 262 COS

In accordance with Federal Acquisition Regulations, Part 13.106-1(b)(i), I am requesting your approval for soliciting from a single source.

1. Agency and Contracting Activity:

194 WG – 194th Wing Base Contracting Office.

2. Nature and/or Description of Action:

Justification for soliciting from a single source - for the procurement of The Escal Institute of Advanced Technologies, Inc. Cyber Security Training Courses for the 262 COS.

3. Description of Service and Estimated Price:

262 COS requires various online cyber security training courses and testing towards Global Information Assurance Certification (GIAC) for 32 personnel. The Escal Institute of Advanced Technologies, Inc.

(dba SANS Institute) is the only contractor that provides these courses which lead to obtaining their proprietary GIAC certification.

COURSE QTY W/NETWARS

CORE

W/NETWARS

DFIR

MGT 414 1

NETWARS

(only)

5 3 2

SANS 301 2

SANS 301 5

SANS 401 1

SANS 503 2

SANS 503 1

SANS 505 5 1

SANS 506 2

SANS 578 5

SEC 301 2

SEC 542 1

SEC 560 5

SEC 566 5 2 1

4. Justification:

JOINT BASE LEWIS-MCCHORD WASHINGTON

The required SANS online cyber security training and GIAC certifications are sole source products that are manufactured, sold, and distributed exclusively by The Escal Institute of Advanced Technologies, Inc.

(SANS). There are no other authorized resellers or distributors of SANS training or GIAC Certification exams to the DoD. GIAC certification is unique in the field of information security certifications because it not only tests a candidate's knowledge but also the candidate's ability to put that knowledge into practice in the real world. GIAC is the only certification source that is approved on the DoD Approved 8570 Baseline Certification list to meet this requirement.

SANS provides intensive, immersion training designed to aid personnel in mastering the practical steps necessary for defending systems and networks against the most dangerous threats. The courses were developed by real-world practitioners through a consensus process involving hundreds of administrators, security managers, and information security professionals that address a range of cybersecurity topics from basic security fundamentals and awareness to in-depth technical aspects of the most crucial areas of information security. SANS stays on the cutting-edge by updating all courseware to keep on top of the latest threats at least annually, often more frequently. The identified courses address both security fundamentals and awareness and in-depth technical aspects of the most crucial areas of IT security.

Furthermore, they are full of important and immediately useful techniques that can be applied as soon as an airman completes a course.

The 262 COS can overcome training challenges by providing surgical training to robust key skillsets and close the identified training gaps. In addition, the 262 COS is seeking to enhance the ability of our full-time staff to organize, train, and equip our Airman for the upcoming deployment. Senior leadership has identified training to provide an increase in knowledge with recent tactics and techniques. Armed with this additional training, the 262 COS is best poised to defend the critical infrastructure that we are called on to protect, to represent our unit and the Washington State Air National Guard, and to set the precedent for future Cyber Protection Teams (CPTs). This request is urgent, with the deployment fast approaching, and is required to be procured by SANS Institute to obtain the level of training necessary. The requested training is essential in maintaining mission continuity and for compliance with established organizational standards.

6. Market Research:

DoD Directive dictate that the required online cyber security training and certifications are can only be met by The Escal Institute of Advanced Technologies, Inc. (SANS), whose classes and proprietary GIAC certifications are obtained only from them. Responses/quotes to past sources sought and solicitations also indicate that no other vendors have the capability to provide training to meet the GIAC standards required by DoD Directive.

I, the undersigned, certify that this justification is accurate and complete to the best of my knowledge and belief.

THOMAS A. PRIES, Lt Col, WA ANG Commander

JOINT BASE LEWIS-MCCHORD WASHINGTON

1st Ind, 194 MSG/MSC

MEMORANDUM FOR 194 MSG/MSC

I certify that this justification for soliciting from a single source is accurate and complete to the best of my knowledge and belief. I hereby determine that this request is sufficient to justify soliciting from a single source, and that the anticipated cost to the government will be fair and reasonable.

MATTHEW J. BERUBE, MSgt, WA ANG Contracting Officer