A03_G5_HBSS_E106_JA_final_Redacted.pdf

Control Number: HUA-13-12

JUSTIFICATION ANDAPPROVAL

FOR OTHER THAN FULL AND OPEN COMPETITION

1. Agency/Contracting Activity: U.S. Army Contracting Command, Aberdeen Proving Ground (ACC-APG), Huachuca Division, 2133 Cushing Street, Building 61801, Fort Huachuca, Arizona 85613.

2. Description of Action:

Nature: New Requirement Follow-on Requirement

Mod to Existing Purchase Order/Contract Number (W91QUZ-07-D-0001-E106)

Pricing: Firm-Fixed Price Time & Materials Cost

Funds: Operations and Maintenance, Army (OMA) Other Funds:

Fiscal Year of Funds: 2013

Name of Proposed Contractor(s): Harris IT Services Corporation Street Address: 21000 ATLANTIC BLVD STE 300 City, State, Zip: DULLES VA 20166-2496 Phone: (703) 483-8707

3. Description of Services or Supplies: The estimated value of this modification is $290.474.64. A modification to the current Task Order is required to support Network Enterprise Technology Command’s (NETCOM)‘s Host Based Security System (HBSS) Support Services on the Combined Enterprise Regional Information Exchange SYSTEM(CENTRIXS) enclaves/networks for the period of performance of 24 February 2014 through 29 September 2014.

The HBSS system provides general HBSS health checks, implementation, maintenance guidance, and TIER III Support which includes the following:

- Implementation guidance based on a single authorized enterprise architecture, design and implementation

- Integrated hierarchy, tools, baselines, and configurations based on Army Golden Master

(AGM)

- Enterprise Certificate of Networthiness (CoN)

- Enterprise licensing

- Configuration and implementation of the Army rollup servers to include the Asset Compliance, Event and Policy servers in support of situational awareness for Army Cyber Command and DISA.

The HBSS capability provides Army Information Assurance and Network Defense personnel with the tools to protect, detect, track, and report malicious computer-related activities and incidents across the LandWarNet (LWN). HBSS involves the integration of multiple Information Assurance (IA), Computer Network Defense (CND), and Network Operations (NetOps) capabilities from compliance monitoring to automated incident reporting. The HBSS capability enables Army components to integrate existing security products and capabilities, eliminate redundant system management processes, and enhance end-point system security through a unified security product and management suite.

The HBSS support is on all U.S. Army NETCOM managed Administrative, Classified, and Non- Classified network infrastructures and all associated appliances affected thereon with respect to HBSS Servers and Systems.

The Department of Defense (DOD) Enterprise Solutions Steering Group (ESSG) identified a lack of sufficient security measures deployed on end-point computing systems as a priority gap in Global Information Grid (GIG) security. Following the identification of functional requirements to enhance host security, the ESSG directed the acquisition of the HBSS capability and approved its DoD wide deployment. The Joint Task Force for Global Network Operations (JTF-GNO) released a Warning Order (WARNORD) followed by Communication Tasking Order (CTO) mandating the deployment of HBSS on all classified and unclassified systems to include Programs of Record (PoR).

The CENTRIXS is a collection of classified coalition networks, called enclaves, which enable information sharing through the use of email and Web services, instant messaging or chat, the Common Operational Picture service, and Voice over IP. This modification is to include the HBSS Support Service on the CENTRIXS.

Currently the Task Order service requirements are for HBSS Service Support on non-classified networks and Secure Internet Protocol Router Networks (SIPRNET). The estimated travel is to provide the HBSS Support Service on the CENTRIXS enclave to support NETCOM locations in Southwest Asia (SWA), the Pacific Region (PAC) and Europe.

4. Authority: 10 U.S.C. 2304(c) (1) Only one responsible source and no other supplies or services will satisfy agency requirements and Federal Acquisition Regulation (FAR) Subpart 13.501(a) Sole source acquisitions.

5. Reasons for Authority Cited: Pursuant to 10 U.S.C. 2304(c) (1) and FAR 13.501(a) – Harris IT Services Corporation was awarded the current task order, W91QUZ-07-D-0001 E106, on 25 September 2013, through fair opportunity under FAR Part 16 utilizing Computer Hardware Enterprise Software Solutions (CHESS) Information Technology Enterprise Solutions - 2 Services (ITES-2S), which is a multiple award, indefinite delivery/ indefinite quantity contract vehicle. The requirement was competed amongst the vendors on the CHESS ITES-2S. The modification to the task order will add the HBSS Services Support to cover the CENTRIXS enclaves that are NETCOM is required to support during the life of this contract. This Task Order currently provides NETCOM HBSS Services Support for unclassified and classified network enclaves and can provide time sensitive support to the warfighter in Afghanistan. It has been identified, as part of NETCOM mission, that the HBSS Services Support are required on CENTRIXS enclaves.

The DoD networks are currently under increasing attack and continuing maintenance and network security support of the McAfee HBSS product is critical to DoD network defense.

If not approved, HBSS Support Services will not be provided to CENTRIXS enclaves and NETCOM will fail to provide HBSS Support to the CENTRIXS enclaves worldwide. If this service is not provide it will leave the system vulnerable for network attacks.

Harris IT, subcontracted with McAfee, are currently working on McAfee product HBSS for unclassified and classified networks for NETCOM and has the understanding of how the Army networks and HBSS are integrated today. Awarding another contract to another contractor at this point would be neither cost effective nor realistic to expect another contractor to perform during the brief interim timeframe required to realign HBSS services requirement in Afghanistan and the migration of services from one location to another location in Afghanistan in preparation for the drawdown of bases, realignment and closures in Afghanistan. Awarding another contract would be cost prohibitive due to the time and effort associated with the transition of services for a interim period. Issues potentially include start up costs, manning problems including recruitment, continuity of services, transfer and accountability of Government Furnished Property (GFP), and medical expenses and training. etc. The cost to issue another contract for this service has been estimated at $400K. This includes the administrative cost of putting a new contract in place.

By utilizing the current contract for services defined for the NETCOM HBSS mission for unclassified and classified networks, the cost and mission impact of initiating another vendor services can be avoided. These costs and delay in mission would be driven by the need for new competition and acquisition.

6. Actions to Increase Competition: To increase future competition and prevent the need for such a modification in future requirements the “Lessons Learned” from recent oversights of not including all of the systems and area in to the requirement, have been incorporated into the new HBSS FY2014/2015 follow-on contract support. HBSS continues to evolve into systems of increasing complexity and lifecycle support.

7. Market Research: The CHESS website and the General Services Administration (GSA) website were reviewed, and it was determined that the vendors on the CHESS ITES-2S contract would be able to provide the HBSS Services Support on the CENTRIXS enclave. However, it was determined that awarding to another contactor to perform during the interim period would be neither cost effective nor realistic. Items that can be problematic include, but are not limited to start up costs, manning problems including recruitment, continuity of services, transfer and accountability of Government Furnished Property (GFP), and medical expenses and training.

8. Procurement History:

Previous Purchase Order(s) or Contract(s): Yes No

If "Yes", for each purchase order or contract provide:

Purchase order or contract number:

Was action competed? Yes No (Previous contract)

If action was not competed, state the cited authority, summarize rationale, and describe the actions that were supposed to be taken to increase competition and the results thereof:

9. Additional Information to support the justification: Modification to existing contract, lessons learned due to oversight, from this action and previous actions have been incorporated and anticipated in follow-on contract. Follow on contract will be fully competed.

10. Technical / Requirements Certification: I certify that the supporting data under my cognizance which is included in this abbreviated J&A is accurate and complete to the best of my knowledge and belief.

David N. Miller COR/IT System Manager david.n.miller1.civ@mail.mil

11. Fair and Reasonable Price Determination: I hereby determine that the anticipated cost to the Government for this contract action will be fair and reasonable IAW FAR Subpart 13.106-3 (2), as only one response will be received, consistent with market research, comparison of prices proposed on previous purchases, current price lists, and comparison of the Independent Government Cost Estimate IGCE, as appropriate for the circumstances, to reasonably ensure that the quote received can fulfill the requirements.

Elizabeth C. Woodson Procuring Contracting Officer

12. Reviews: I have reviewed this justification and find it legally sufficient.

Michael J. Rudkin Legal Advisor

13. Contracting Officer’s Certification: I hereby certify that this justification is accurate and complete to the best of my knowledge and belief. Based on the foregoing, I support the acquisition as detailed in this sole source justification subject to availability of funds, and provided that the services and supplies herein described have otherwise been authorized for acquisition.

Elizabeth C. Woodson Procuring Contracting Officer

MILLER.DAVID.NORM

AN.1071762200

Digitally signed by MILLER.DAVID.NORMAN.1071762200 DN: c=US, o=U.S. Government, ou=DoD, ou=PKI, ou=USA, cn=MILLER.DAVID.NORMAN.1071762200 Date: 2014.03.20 10:56:07 -07'00'

WOODSON.ELIZABETH.

CHRISTIAN.1082177929

Digitally signed by

WOODSON.ELIZABETH.CHRISTIAN.1082177929

DN: c=US, o=U.S. Government, ou=DoD, ou=PKI, ou=USA, cn=WOODSON.ELIZABETH.CHRISTIAN.1082177929 Date: 2014.04.02 14:36:28 -07'00'

RUDKIN.MICHAEL.JA

Y.1136429740

Digitally signed by RUDKIN.MICHAEL.JAY.1136429740 DN: c=US, o=U.S. Government, ou=DoD, ou=PKI, ou=USA, cn=RUDKIN.MICHAEL.JAY.1136429740 Date: 2014.03.24 10:28:39 -07'00'

WOODSON.ELIZABETH.

CHRISTIAN.1082177929

Digitally signed by

WOODSON.ELIZABETH.CHRISTIAN.1082177929

DN: c=US, o=U.S. Government, ou=DoD, ou=PKI, ou=USA, cn=WOODSON.ELIZABETH.CHRISTIAN.1082177929 Date: 2014.04.02 14:36:37 -07'00'