A12__Security_Onion_Sole_Source_Justfication_REDACTED_19-063.pdf

For All Actions At or Below the Simplified Acquisition Threshold Use for FAR Part 8, FAR Subpart 13.1, or FAR Part 16, Control No: 19-063

Version – August 2015

Memorandum for Record – Limiting Competition at or below the Simplified Acquisition Threshold

1. Contracting Activity: 411th CSB, APO AP 96271-5590

2. Description of Action:

Nature: New Requirement Follow-on Requirement

Contract Vehicle: Purchase Order Number _______________________________ Blanket Purchase Agreement (BPA) Number _______________ Order/BPA# _______ against FSS Contract #_____ _________ Order #___________ against Multiple Award IDIQ Contract Name or #______________

Order #_______ against a single award IDC Contract

Modification # _______ to existing PO/TO/DO/Call Order

Pricing/Contract Type: Fixed Price Time & Materials/Labor Hours Cost Reimbursable Hybrid

Funds: Operations & Maintenance, Army (OMA) Other Funds: ________

FY: ___19_____

Name of Proposed Contractor(s) and Address:

Security Onion Solutions, LLC_____________ 717 Bishops Cir________________________ Evans, GA 30809_______________________

Brand Name Buy: Yes No

3. Description of Services or Supplies: Security Onion Solutions will provide training on their proprietary, open source software. They will train 15 Soldiers for 8 hours each day, for one week.

1267212844.LN

Inserted Text Delete

1166444604.MIL

Highlight

Control No: 19-063

Version – August 2015

Period of Performance: One week of training.

Total Value: $ 81,765.51___________

4. Authority:

FAR 13.106-1(b)(1): For purchases not exceeding the simplified acquisition threshold (SAT), only one source reasonably available, urgency, exclusive licensing agreements, brand name, or industrial mobilization.

Or FAR 8.405-6(a)(1)(i)(B) and 8.405-6(b)(1)Brand Name

FAR 8.405-6(a)(1)(i)(A) Urgency FAR 8.405-6(a)(1)(i)(B) Only One Source is Capable FAR 8.405-6(a)(1)(i)(C) Logical Follow-on

Or

FAR 16.505(b)(2)(i)(B) Only One Awardee is Capable FAR 16.505(a)(4) Brand Name FAR 16.505(b)(2)(i)(A) Urgency FAR 16.505(b)(2)(i)(C) Logical Follow-on FAR 16.505(b)(2)(i)(D) Minimum Guarantee

5. Reasons for Authority Cited:

a. Security Onion is a comprehensive platform for intrusion detection, network security monitoring, and log management. Security Onion has over 300,000 downloads and is being used by organizations around the world to help monitor and defend their networks.

b. 2ID Computer Network Defense (CND) uses the Security Onion to monitor, defend, and protect the Division’s CENTRIXS-K Mission Command Network. CND uses the Security Onion’s real-time monitoring capability of the program to detect malicious and abnormal network activity. There is currently no other Army program of record system that provides the same capability as Security Onion. Security Onion was developed by Mr. Doug Burke in 2008 and is an open source platform. However, the company Security Onion Solutions is the only company that provides Security Onion training.

c. The class taught by Security Onion Solutions is the culmination of 6 years of lessons learned while building Security Onion and best practices developed while deploying Security Onion for real networks. 2ID/RUCD Cyber Network Defenders need instruction on how to install, operate and maintain the Security Onion software to defend against advanced persistent threats. Information Technology Security classes offered by SysAdmin, Audit, Network and Security (SANS), which are not as technically intensive as Security Onion training, cost anywhere from $3,000 to $6,000 per student for a one week class.

1166444604.MIL

Highlight

1166444604.MIL

Highlight

1166444604.MIL

Highlight

1166444604.MIL

Highlight

1166444604.MIL

Highlight

Version – August 2015

Control No: 19-063

6. Publicizing Contract Actions: For FAR Part 13 actions, the public display and synopsis requirements of FAR 5.101 and FAR 5.203 do not apply due to the $ threshold, apply and will be followed, or do not apply due to an exception at

5.202 ______________________.

Requirement to post justification in accordance with FAR 8.405-6(b)(3), FAR 13.105(c), or FAR 16.505(a)(4)(iii)(A)

Action is NOT a brand name restriction and is under $150K, no posting required

Action is a brand name restriction, under $25K, no posting required

Action is a brand name restriction, over $25K. It will be redacted and posted with the solicitation.

Action is a brand name restriction over $25K but will not be posted due to exception:

FAR 6.305(f) FAR 8.405-6(b)(3)(iii)(A) FAR 8.405-6(b)(3)(iii)(B) FAR 8.405-6(b)(3)(iii)(C) FAR 16.505(a)(4)(iii(C)

7. Market Research: Security Onion Solutions, LLC is the sole source provider of official Security Onion training. No other training providers act as representatives on their behalf. Their Basic and Advanced training courses are sold only as a direct transaction between Security Onion Solutions, LLC and end customers.

8. Other Facts: Information Technology Security classes offered by SANS, which are not as technically intensive as Security Onion training, cost anywhere from $3,000 to $6,000 per student for a one week class.

9. Technical/Requirements Certification: I certify that the supporting data under my cognizance which are included in the justification are accurate and complete to the best of my knowledge and belief.

Typed Name: CPT Michael Prescott Date: 14 January 2019 Title: 2ID C6 CSO OIC

2/7/2019

X Michael Prescott

Signed by: PRESCOTT.MICHAEL.G.1294980411

1166444604.MIL

Highlight

1166444604.MIL

Highlight

1166444604.MIL

Highlight

1166444604.MIL

Highlight

1166444604.MIL

Highlight

Version – August 2015

Control No: 19-063

10. Contracting Officer Certification/Approval:

I hereby determine that the anticipated cost or price to the Government for this contract action will be fair and reasonable based on historical date from previous contracts. On February 22, 2017 Security Onion Solutions provided a quote for services to the government for nearly the exact same requirement.

Their price quote proposed the following:

15 Students On-Site Security Onion Basic Training course for $74,985.00 with an 11.7% Discount totaling = $66,235.00

Travel to our location not to exceed $5,000.00. (non-discounted)

The total cost of the on-site training provided was $71,235.00

A contract was awarded to Security Onion Solutions 21 June 2017.

The same company (Onion Training Solutions LLC) provided a quote on February 6, 2019 for a similar requirement. The proposed price is as followed:

15 Students Security Onion Basic course On-Site for $79,975.02 with a 10% discount totaling = $71,977.51

An additional requirement of 15 Student Computers was added to this proposal at $5,985.00 with a 20% discount totaling = $4,788.00

And Travel to our location not to exceed $5,000.00. (non-discounted)

The total cost of the on-site training would be $81,765.51 a 13% increase from the previous quote two years ago.

I certify that this justification is accurate and complete to the best of my knowledge and belief, and that completing this purchase as a sole source is in the best interest of the Government. Additionally, I approve this justification to limit competition subject to the availability of funds and provided that the services or supplies herein described have otherwise been authorized for acquisition.

Typed Name: Hyon-Suk Chong Date: April 15, 2019 Title: Contract Officer Signature: __________________________________________________________

1166444604.MIL

Highlight

1166444604.MIL

Highlight

1166444604.MIL

Highlight

1166444604.MIL

Highlight

1166444604.MIL

Highlight

1166444604.MIL

Highlight

1166444604.MIL

Highlight

1166444604.MIL

Highlight

1166444604.MIL

Highlight

1166444604.MIL

Highlight

1166444604.MIL

Highlight

1166444604.MIL

Highlight

1166444604.MIL

Highlight