The SANS Institute *SOLE SOURCE NOTICE*

The Oregon Department of Justice (DOJ) has issued a Sole Source Notice for cybersecurity training services and certification from the SANS Institute, covering Marion County, Salem City, and surrounding jurisdictions. This procurement is specifically focused on obtaining specialized cybersecurity training and certification programs through a sole source acquisition, with the DOJ asserting that the SANS Institute is the only qualified provider for these services. The procurement references OregonBuys Solicitation number S-13700-00000328 and seeks to acquire comprehensive cybersecurity educational resources and certification pathways. Potential vendors who believe they can provide equivalent or superior services are invited to submit a written protest by August 2, 2021. To be considered valid, protests must include a detailed statement of legal and factual grounds, a comprehensive description of potential harm to affected parties, and specific relief requested. Interested parties are directed to contact Ashley Buol at the Department of Justice for additional information or clarification about the procurement.

The sole source notice does not explicitly outline specific set-aside designations or restrictions on responding organizations. No incumbent vendors are mentioned beyond the SANS Institute, and the document does not provide specific budget ranges or award values for the cybersecurity training services. The procurement appears to be open to potential protesters who can demonstrate comparable capabilities in cybersecurity training and certification. The notice suggests a competitive challenge process where alternative vendors can contest the sole source determination by providing substantive evidence of their ability to meet the DOJ's requirements. While the document does not specify integration requirements with existing infrastructure, it implies a need for high-quality, specialized cybersecurity training programs that meet the specific needs of Marion County and associated jurisdictions. The procurement process emphasizes the technical complexity and specialized nature of the required cybersecurity training services.