VA HR LOB - FISMA HIGH upgrade Limited Source Justification redacted

The Limited Source Justification is for a security related upgrade for the implementation of appropriate security controls to transition the Veterans Affairs Human Resources Information System (HRIS) Shared Service Center (SSC) solution to a Federal Information Security Management Act (FISMA) categorization of High, and to also implement a Trusted Internet Connection (TIC) for permanent connectivity between the host and VA, and to incorporate the latest revision of the National Institute of Standards & Technology (NIST) 800-53 security controls, which is Revision 4 controls.  This work is not tied to the completion of development, deployment, and/or any PMAS specific increments. 
Technical and Scope Approach Evaluation – The Technical Approach Risk as outlined in the PCR/Proposal is evaluated as low. IBM proposes to: Upgrade the FISMA security category from Moderate to High.  IBM will alter the existing HRIS SSC network architecture by implementing a Trusted Internet Connection (TIC). In accordance with VA direction, IBM will implement an internal Business Partner Extranet (BPE) with a dedicated monitoring circuit while connecting to a VA TIC gateway.  The VA will provide the Multiprotocol Label Switching (MPLS) equipment for installation by Carpathia, IBM’s hosting partner.  This implementation of TIC is a long term solution and hereafter referred to as TIC Phase 2.  TIC Phase 1 refers to a temporary solution where a VPN solution has already been implemented.   IBM will also upgrade the FISMA High security controls as described by NIST SP 800-53 Revision 4.