DOJ's $28.6M IT Security Program contract awarded to MANTECH ADVANCED SYSTEMS INTERNATIONAL, INC. for network security strategy

Contract Overview

Contract Amount: $28,619,778 ($28.6M)

Contractor: Mantech Advanced Systems International, Inc.

Awarding Agency: Department of Justice

Start Date: 2007-12-05

End Date: 2012-09-04

Contract Duration: 1,735 days

Daily Burn Rate: $16.5K/day

Competition Type: FULL AND OPEN COMPETITION

Sector: IT

Official Description: THE PURPOSE OF THE IT SECURITY PROGRAM IS TO DEVELOP AN OVERALL DOJ COMPUTER AND NETWORK SECURITY STRATEGY TO ENSURE THAT DOJ MISSION CRITICAL COMPUTER SYSTEMS AND NETWORKS REMAIN RELIABLE, SECURE TOOLS RATHER THAN OPERATIONAL LIABILITIES.

Place of Performance

Location: WASHINGTON, DISTRICT OF COLUMBIA County, DISTRICT OF COLUMBIA, 20530

State: District of Columbia Government Spending

Plain-Language Summary

Department of Justice obligated $28.6 million to MANTECH ADVANCED SYSTEMS INTERNATIONAL, INC. for work described as: THE PURPOSE OF THE IT SECURITY PROGRAM IS TO DEVELOP AN OVERALL DOJ COMPUTER AND NETWORK SECURITY STRATEGY TO ENSURE THAT DOJ MISSION CRITICAL COMPUTER SYSTEMS AND NETWORKS REMAIN RELIABLE, SECURE TOOLS RATHER THAN OPERATIONAL LIABILITIES. Key points: 1. The contract focuses on developing a comprehensive IT security strategy to safeguard mission-critical systems. 2. Value for money is assessed by comparing the contract's duration and scope against similar IT security initiatives. 3. Competition dynamics indicate a full and open competition, suggesting a potentially competitive pricing environment. 4. Risk indicators include the long duration of the contract (over 4 years) and the critical nature of IT security. 5. Performance context is defined by the need for reliable and secure computer systems for DOJ operations. 6. Sector positioning is within administrative management and general management consulting services, specifically for IT security. 7. The contract's success hinges on the effective implementation of the security strategy to prevent operational liabilities.

Value Assessment

Rating: fair

The contract value of approximately $28.6 million over nearly five years suggests a significant investment in IT security. Benchmarking against similar large-scale IT security strategy development contracts within federal agencies is crucial for a precise value-for-money assessment. Without specific deliverables or performance metrics, it's challenging to definitively assess if the pricing is competitive or if the value delivered aligns with market rates for such specialized consulting services. The duration implies a sustained effort, which could be cost-effective if it leads to long-term security improvements.

Cost Per Unit: N/A

Competition Analysis

Competition Level: full-and-open

The contract was awarded under full and open competition, indicating that all responsible sources were permitted to submit offers. This approach generally fosters a competitive environment, which can lead to better pricing and a wider range of innovative solutions. The number of bidders is not specified, but the open competition suggests that the Department of Justice sought to leverage the broadest possible market for these critical IT security services.

Taxpayer Impact: A full and open competition is generally favorable for taxpayers as it increases the likelihood of obtaining services at a competitive price due to market forces.

Public Impact

The primary beneficiaries are the Department of Justice agencies relying on secure and reliable IT systems. The services delivered aim to ensure the continuity and integrity of critical DOJ computer systems and networks. The geographic impact is national, covering all DOJ operations that depend on its IT infrastructure. Workforce implications include the potential need for specialized IT security personnel within DOJ to implement and manage the strategy.

Waste & Efficiency Indicators

Waste Risk Score: 50 / 10

Warning Flags

Long contract duration could lead to complacency or outdated strategies if not actively managed.
The critical nature of IT security means any lapse could have severe operational and national security consequences.
Reliance on a single contractor for strategy development might limit exposure to diverse security approaches.
The effectiveness of the strategy is dependent on successful implementation, which is outside the scope of this award.

Positive Signals

Awarded under full and open competition, suggesting a robust selection process.
Focus on a comprehensive strategy addresses a fundamental need for secure IT operations.
The contract aims to prevent operational liabilities, indicating a proactive approach to risk management.

Sector Analysis

This contract falls within the broader IT services sector, specifically focusing on cybersecurity consulting and strategy development. The market for IT security services is substantial and growing, driven by increasing cyber threats. Comparable spending benchmarks would involve looking at other federal agencies' investments in similar IT security strategy and consulting contracts. The administrative management and general management consulting services NAICS code (541611) encompasses a wide range of advisory services, but the specific focus here is on the critical domain of cybersecurity.

Small Business Impact

The data indicates that small business participation (sb) was false and there was no specific small business set-aside (ss). This suggests that the contract was not specifically targeted towards small businesses. Consequently, the primary contractor, MANTECH ADVANCED SYSTEMS INTERNATIONAL, INC., would be responsible for any subcontracting. The extent to which small businesses might be involved would depend on MANTECH's subcontracting plan, if any, and the nature of the services required. Without further information on subcontracting goals, the direct impact on the small business ecosystem is unclear.

Oversight & Accountability

Oversight mechanisms for this contract would typically involve contract officers, program managers within the Department of Justice, and potentially the DOJ's Office of the Inspector General (OIG). Accountability measures would be tied to the performance metrics and deliverables outlined in the contract. Transparency is facilitated through contract award databases and reporting requirements. The OIG may conduct audits or investigations to ensure the effective use of funds and the achievement of program objectives.

Related Government Programs

DOJ Cybersecurity Initiatives
Federal Information Security Management Act (FISMA) Compliance
IT Modernization Programs
Network Security Services
Critical Infrastructure Protection

Risk Flags

Critical Infrastructure Protection
Long-Term Strategy Development
Cybersecurity Risk
Sole Source Potential (if follow-on)

Frequently Asked Questions

What is this federal contract paying for?

Department of Justice awarded $28.6 million to MANTECH ADVANCED SYSTEMS INTERNATIONAL, INC.. THE PURPOSE OF THE IT SECURITY PROGRAM IS TO DEVELOP AN OVERALL DOJ COMPUTER AND NETWORK SECURITY STRATEGY TO ENSURE THAT DOJ MISSION CRITICAL COMPUTER SYSTEMS AND NETWORKS REMAIN RELIABLE, SECURE TOOLS RATHER THAN OPERATIONAL LIABILITIES.

Who is the contractor on this award?

The obligated recipient is MANTECH ADVANCED SYSTEMS INTERNATIONAL, INC..

Which agency awarded this contract?

Awarding agency: Department of Justice (Offices, Boards and Divisions).

What is the total obligated amount?

The obligated amount is $28.6 million.

What is the period of performance?

Start: 2007-12-05. End: 2012-09-04.

What specific IT security threats was this program designed to address for the Department of Justice?

While the provided data outlines the program's purpose as developing an overall DOJ computer and network security strategy to ensure mission-critical systems remain reliable and secure, it does not detail the specific threats anticipated. Generally, such programs aim to address a wide spectrum of cyber threats including, but not limited to, malware, ransomware, phishing attacks, denial-of-service attacks, insider threats, data breaches, and advanced persistent threats (APTs). The strategy developed would likely prioritize threats based on the DOJ's unique operational environment, the sensitivity of the data it handles, and the potential impact of a successful cyberattack on its mission.

How does the contract value of $28.6 million compare to similar IT security strategy contracts in the federal government?

The contract value of approximately $28.6 million over a period of nearly five years (1735 days) represents a substantial investment. To benchmark this effectively, one would need to compare it against contracts for similar scope and duration awarded to other federal agencies for IT security strategy development and consulting. Factors such as the size and complexity of the agency, the criticality of its IT infrastructure, and the specific services procured (e.g., policy development, risk assessment, architecture design, implementation planning) would influence pricing. Without access to a comprehensive database of comparable contracts with detailed service descriptions and pricing, a precise comparison is difficult. However, for a large federal agency like the DOJ, this figure appears within a reasonable range for a multi-year, comprehensive cybersecurity strategy initiative.

What were the key performance indicators (KPIs) or deliverables expected under this contract?

The provided data snippet does not specify the key performance indicators (KPIs) or detailed deliverables for this contract. Typically, an IT security strategy contract would include deliverables such as a comprehensive security strategy document, risk assessment reports, security architecture designs, policy recommendations, implementation roadmaps, and potentially training materials. KPIs might focus on the thoroughness of the strategy, its alignment with federal security mandates (like FISMA), the identification of critical vulnerabilities, and the feasibility of proposed solutions. The success of the contract would likely be measured by the DOJ's ability to adopt and implement the developed strategy effectively to enhance its overall cybersecurity posture.

What is the track record of MANTECH ADVANCED SYSTEMS INTERNATIONAL, INC. in delivering IT security services to the federal government?

MANTECH ADVANCED SYSTEMS INTERNATIONAL, INC. was awarded this contract for IT security strategy development. To assess their track record, one would need to examine their past performance on similar federal contracts, particularly those involving cybersecurity, IT strategy, and consulting services. This would involve reviewing past performance evaluations, any contract awards or terminations, and their history of meeting deadlines and quality standards. Information on their specific expertise in developing and implementing comprehensive security strategies for large organizations like the Department of Justice would be crucial. A thorough review of their contract history, client feedback, and any publicly available performance data would provide a clearer picture of their capabilities and reliability in this domain.

How has the Department of Justice's spending on IT security evolved over the years, and does this contract represent a significant shift?

The provided data focuses on a single contract awarded in 2007 and ending in 2012. To understand the evolution of DOJ's IT security spending, a broader analysis of historical data would be necessary, covering multiple fiscal years and various IT security contracts. This would reveal trends in overall spending, the types of services procured, and the contractors involved. This specific $28.6 million contract, awarded during a period of increasing federal focus on cybersecurity, likely represented a significant investment at the time for developing a foundational security strategy. Whether it represents a 'shift' would depend on prior spending levels and the strategic importance placed on cybersecurity prior to this award. Without historical context, it's difficult to definitively label it as a shift, but it clearly indicates a commitment to formalizing and enhancing IT security.

Industry Classification

NAICS: Professional, Scientific, and Technical Services › Management, Scientific, and Technical Consulting Services › Administrative Management and General Management Consulting Services

Product/Service Code: IT AND TELECOM - INFORMATION TECHNOLOGY AND TELECOMMUNICATIONS › ADP AND TELECOMMUNICATIONS

Competition & Pricing

Extent Competed: FULL AND OPEN COMPETITION

Solicitation Procedures: NEGOTIATED PROPOSAL/QUOTE

Evaluated Preference: NONE

Contractor Details

Parent Company: Mantech International Corporation (UEI: 053518312)

Address: 12015 LEE JACKSON MEMORIAL HWY, FAIRFAX, VA, 22033

Business Categories: Category Business, Not Designated a Small Business

Financial Breakdown

Contract Ceiling: $28,619,778

Exercised Options: $28,619,778

Current Obligation: $28,619,778

Contract Characteristics

Commercial Item: COMMERCIAL ITEM PROCEDURES NOT USED

Parent Contract

Parent Award PIID: DJJ07F1578

IDV Type: BPA

Timeline