THIS IS NOT A REQUEST FOR COMPETITIVE PROPOSALS. This is a notice of intent to award a brand name contract under statutory authority 10 USC 2304(c)(1), set forth in Federal Acquisition Regulation 6.302-1, Only One Responsible Source and No Other Supplies or Services Will Satisfy Agency Requirements.United States Special Operations Command (USSOCOM), 7701 Tampa Point Blvd, Tampa, FL 33621, requires Encase Forensic software for maintenance and support. Interested parties may e-mail
[email protected] or fax 813-828-6967, Attn: Stephen Colton no later than Friday, 14 September 2007; 12:00 p.m.. EST. V. DEMONSTRATION THAT THE CONTRACTORS UNIQUE QUALIFICATIONS OR NATURE OF THE ACQUISITION REQUIRES THE USE OF THE AUTHORITY CITED ABOVE (APPLICABILITY OF AUTHORITY) Encase Enterprise Forensic software provides USSOCOM Headquarters the capability to monitor, investigate, remediate and protect all networks against malicious intrusion, security incidents and cyber attacks. The software allows USSOCOM to meet the following requirements: More rapidly and thoroughly investigate computer incidents occurring on any and all nodes within USSOCOM?s network, regardless of its location (SIPRNet, NIPRNet and JWICS), unique closed networks and standalone systems Respond to IDS alerts to verify whether machines have been compromised Identify deviations from system baselines during INFOCON support to identify and verify integrity of critical workstations and servers dramatically reduce the time and costs related to investigating and resolving network wide incidents while dramatically increasing the security posture of the information and information systems contained therein Ensure policy compliance on all workstations and servers Proactively and reactively locate and eliminate classified data spillage that has strayed to a network of lower classification. Proactively identify and address internal and external network security, information assurance, and counterintelligence threats before they erupt into significant events. Locate, analyze, and capture data in a forensically sound fashion from any network-connected node. Identify unauthorized active programs running on the network, such as peer-to-peer communications, covert channels, and alternate data streams. Coordinate more effectively with criminal and counterintelligence investigators when investigating an incident. Comply more thoroughly and at lower cost with Federal Information Security Management Act (FISMA) of 2002 and the resulting NIST interpretation detailed in the Special Publication 800-61, Computer Security Incident Handling Guide. The acquisition of the maintenance support for the current key licenses will ensure that USSOCOM continues to have the ability to provide operational forensic analysis and remediation at a level of acceptability required by DISA and DoD directives/mandates. The Encase Enterprise software provides a highly specialized capability surpassed by any other application available to resolve, isolate and cleanup contaminated areas dealing with security incidents and events of interest on or within our networks at a level and scope required to support USSOCOM?s networks. Therefore, this acquisition will be a follow-on contract for the continued performance of a highly specialized service/software The Encase Enterprise software allows the analyst/technician the ability to access multiple files/folders across an array of servers storing terabytes of data, in a limited amount of time to isolate data needed to be extracted and cleaned to meet NSA, DIA and DISA standards for proper handling of data spills. No other tool on the market can provide this level of discovery and remediation. The Encase software that is being used has also been embedded as a module interface in a DoD/Joint Staff downward directed program that will be implemented within USSOCOM this year, which will allow us the ability to further enhance our current capabilities by also protecting workstations and devices on the network. United States Special Operations Command believes that award to any other source would result in substantial duplication of cost to the Government that is not expected to be recovered through competition. The approximate cost of the duplication effort would be $466,086.00, as outlined in the table below. These costs are based on expenditures under the current contract that have been incurred to gain a level of operational acceptance by the government for contractors and government employees. Qty Cost Total Offsite training 6hrs. $1,995.00ea. $11,970.00total; Manhours expended 160hrs. $106.00ea. $16,960.00total; Travel (TDY expenditures) 6hrs. $1,050.00ea. $6,300.00total; Installation 1hrs. $15,000.00ea. $15,000.00total; Basic edition - manhours expended 192hrs. $106.00ea. $20,352.00total; IA Suite - manhours expended 64hrs. $106.00ea. $6,784.00total; Extended Onsite Group Training 120hrs. $106.00ea. $12,720.00total; Initial Cost and 1 year Maintenance 2hrs. $188,000.00ea. $376,000.00total; Total $466,086.00total; The cost that would not be recovered through open competition involves resources for testing and operational readiness (certification and accreditation, operational compatibility and continuity) with the current network architecture and the risk associated to downtime and lack of coverage during a replacement phase of new technology.