SOLICITATION NOTICE
D -- Software Lifecycle Support for Continuous Monitoring and Risk Scoring and Digital Policy Management Solution
- Notice Date
- 9/13/2011
- Notice Type
- Justification and Approval (J&A)
- NAICS
- 541519
— Other Computer Related Services
- Contracting Office
- Defense Information Systems Agency, Procurement Directorate, DITCO-Scott, 2300 East Dr., Building 3600, Scott AFB, Illinois, 62225-5406, United States
- ZIP Code
- 62225-5406
- Archive Date
- 10/8/2011
- Point of Contact
- Lori M. Dall, Phone: 6182299487
- E-Mail Address
-
lori.dall@disa.mil
(lori.dall@disa.mil)
- Small Business Set-Aside
- N/A
- Award Number
- HC1028-08-D-2018-0018
- Award Date
- 9/8/2011
- Description
- Purchase Request Numbers: DIAMZ15024, DIAMZ15045, DIAMZ25041 JUSTIFICATION FOR OTHER THAN FULL AND OPEN COMPETITION (OTFAOC) LIMITED SOURCES JUSTIFICATION Justification for OTFAOC Number: (JA11-083) Upon the basis of the following justification, I, as, Procuring Activity Competition Advocate hereby approve the use of other than full and open competition of the proposed contractual action pursuant to the authority of 10 U.S.C. §2304c(b), Task and Delivery Order Contracts: Orders - Fair Opportunity Exceptions. JUSTIFICATION 1. REQUIRING AGENCY AND CONTRACTING OFFICE : Requiring Agency: Defense Information Systems Agency (DISA)/Program Executive Office Mission Assurance and Network Operations (PEO MA), ATTN: PEO MAP.O. Box 549, Fort Meade, MD. 20755-0549 Contracting Activity: DISA/Defense Information Technology Contracting Organization (DITCO) SCOTT, ATTN: PL83, 2300 East Drive, Scott AFB, IL 62225-5406 2. NATURE/DESCRIPTION OF ACTION(S): The objective of this effort is to acquire the resources necessary for the requirements management, development and implementation for the redesign of certain features of the DISA Vulnerability Management Solution (VMS). Certain VMS features will be redesigned into stand alone applications and to use service orientated architectures. Specifically, Digital Policy Management Solution (DPMS) will support the Vulnerability Content Maintenance functions and Continuous Monitoring and Risk Scoring (CMRS) will support the IAVM/Directive Compliance Reporting functions. VMS is 100% Government off the shelf (GOTS) software. Additionally, this effort shall provide for the continuation of the licensing for Symantec Deepsight, which provides a real time vulnerability data feed, and this effort will also provide "break fix" application code development for bug fixes until the IAVM program is integrated into the DPMS platform. a. Type of action: New ENCORE II Task Order - Cost Plus Fixed Fee (CPFF) award b. Amount: $12.47M c. Type of funding: Operations and Maintenance funds d. Year of funding: FY2011 and FY2012 3. DESCRIPTION OF SUPPLIES/SERVICES : An Encore II task order is to be issued to Hewlett Packard Enterprise Services (HPES) LLC, an Encore II contract holder, to reengineer the VMS platform to support net centric operations, as a scalable, web service-based application. This is necessary to address existing operational and performance gaps in VMS. VMS currently consists of several primary modules: Vulnerability content maintenance, Organization Maintenance, Compliance Finding Management, and IAVM & Directive compliance notification and reporting. The VMS Project manager has determined that the least cost and most efficient means to deliver an operational platform is to extract current VMS functionality into stand alone applications for Vulnerability Content Maintenance and IAVM/Directive Reporting. As such, Digital Policy Management Solution (DPMS) will support the Vulnerability Content Maintenance functions and Continuous Monitoring and Risk Scoring (CMRS) will support the IAVM/Directive Compliance Reporting functions. The specific work tasks required for this effort are as follows: A. Contract team project management B. Requirements management tasks are required to create and manage operational, functional, design, and test requirements C. System and application engineering is required to build new platforms and applications that will scale to support enterprise use. D. Software development is requirement to codify application design requirements E. Testing is required to validate functional operations F. Release Management is required to validate and coordinate release approvals. G. Deployment support is required to deliver operational updates to the enterprise. H. Database and Application operational support staff is required to maintain acceptable performance of deployed applications I. Training support is required to develop materials for the community to use the new functionality. The period of performance (PoP) is one year from award date for the base period with two 3-month option periods. Estimated PoP: Base Year POP: 1 August 2011 through 31 July 2012 Option Period 1 PoP: 1 Aug 2012 through 31 Oct 2012; and Option Period 2 PoP: 1 Nov 2012 through 31 Jan 2013. Life cycle costs are limited to the period of performance FY11 - FY12 and are estimated to be approximately $12.47M. Funding for option tasks is contingent upon additional Government funding. Anticipated life cycle costs of the base and option years if all years and optional tasks are executed. Base Year - $8,218,887.46 Option Period 1 (3 months) - $2,124,138.17 Option Period 2 (3 months) - $2,124,138.17 4. IDENTIFICATION OF STATUTORY AUTHORITY : 10 U.S.C. §2304c(b), Task and Delivery Order Contracts: Orders - Fair Opportunity Exceptions. Only one awardee is capable of providing the supplies or services required at the level of quality required because the supplies or services ordered are unique or highly specialized. (FAR 16.505(b)(2)(i)(B)). 5. DEMONSTRATION OF CONTRACTOR'S UNIQUE QUALIFICATIONS : HPES is uniquely qualified to provide services to PEO MA based upon their unique experience with VMS and IAVM and in-depth knowledge of VMS/IAVM functionality. HPES has been the contract support for VMS/IAVM for over 10 years and is the only available integrator with the necessary intimate knowledge of and experience with VMS/IAVM to maintain the system that addresses the current vulnerabilities and prevents future intrusions. As stated in paragraph 9 below, this effort was previously competed via IASSURE with the Federal Acquisition Streamlined Act (FASA) Logical Follow-on exemptions. EDS, now HPES, was the only vendor to provide a proposal. A task order and 4 logical follow-on task orders were awarded. The effort was later competed among 26 ENCORE II vendors. Three proposals were received with HPES's being the only technically acceptable. HPES has established a unique relationship with DISA and has a unique understanding of all aspects of the program. HPES understands DISA architectures, programs, standards and guidelines. HPES's experience also uniquely qualifies them to capture the necessary requirements and develop a solution that transitions VMS/IAVM functionality into a more automated and scalable services orientated architecture. If this work was awarded to a new contractor, the project manager estimates the new contractor would take at least 6-12 months to learn the VMS and IAVM systems and to reverse engineer existing business and data requirements that VMS and IAVM supports today. HPES would have to remain during the transition to ensure proper knowledge transfer. The estimated cost planned for this effort would substantially increase if another vendor were allowed to attempt to perform this effort. The learning curve to gain the experience currently residing with HPES would be substantial, but it would be a minimum of 6-12 months to be at the same learning curve as HPES. The time required to bring another vendor up to full qualification would adversely impact the mission of this organization. The Government does not have the in house resources to provide these services/support as described in Paragraph 3.
- Web Link
-
FBO.gov Permalink
(https://www.fbo.gov/notices/05c4f6b1ae2c7e1e955d4c48d1f6bbcc)
- Record
- SN02574973-W 20110915/110914001138-05c4f6b1ae2c7e1e955d4c48d1f6bbcc (fbodaily.com)
- Source
-
FedBizOpps Link to This Notice
(may not be valid after Archive Date)
| FSG Index | This Issue's Index | Today's FBO Daily Index Page |