DoD's $11.2M contract for cybersecurity services awarded to I-Assure, L.L.C. via full and open competition

Contract Overview

Contract Amount: $11,205,000 ($11.2M)

Contractor: I - Assure, L.L.C

Awarding Agency: Department of Defense

Start Date: 2018-08-06

End Date: 2023-08-05

Contract Duration: 1,825 days

Daily Burn Rate: $6.1K/day

Competition Type: FULL AND OPEN COMPETITION

Number of Offers Received: 6

Pricing Type: FIRM FIXED PRICE

Sector: IT

Official Description: CERTIFICATION AND ACCREDITATION (C&A)/ASSESSMENT AND AUTHORIZATION (A&A) SUPPORT SERVICES. THE CONTRACTOR SHALL CREATE RISK MANAGEMENT FRAMEWORK (RMF) AUTHORIZATION PACKAGES AND PROVIDE DEFENSE INFORMATION ASSURANCE CERTIFICATION ACCREDITATION PROCESS (DIACAP) AND RMF AUTHORITY TO OPERATE (ATO) MAINTENANCE FOR THE ENTIRE RANGE OF INFORMATION SYSTEMS (ISS) NECESSARY FOR NAVAL SURFACE WARFARE CENTER CARDEROCK DIVISION.

Place of Performance

Location: BETHESDA, MONTGOMERY County, MARYLAND, 20817

State: Maryland Government Spending

Plain-Language Summary

Department of Defense obligated $11.2 million to I - ASSURE, L.L.C for work described as: CERTIFICATION AND ACCREDITATION (C&A)/ASSESSMENT AND AUTHORIZATION (A&A) SUPPORT SERVICES. THE CONTRACTOR SHALL CREATE RISK MANAGEMENT FRAMEWORK (RMF) AUTHORIZATION PACKAGES AND PROVIDE DEFENSE INFORMATION ASSURANCE CERTIFICATION ACCREDITATION PROCESS (DIACAP) AND RMF AUTHORITY T… Key points: 1. Contract focuses on critical cybersecurity functions for Naval Surface Warfare Center Carderock Division. 2. Services include Risk Management Framework (RMF) package creation and DIACAP/RMF ATO maintenance. 3. The firm-fixed-price contract spans five years, indicating predictable cost structures. 4. Awarded through full and open competition, suggesting a robust market for these specialized services. 5. The contractor, I-Assure, L.L.C., is positioned to support essential defense IT infrastructure. 6. This contract addresses the ongoing need for robust cybersecurity in military operations.

Value Assessment

Rating: good

The contract value of $11.2 million over five years for cybersecurity support services appears reasonable given the specialized nature of the work. Benchmarking against similar contracts for RMF and ATO maintenance for defense agencies suggests this pricing is within expected ranges. The firm-fixed-price structure provides cost certainty for the government, although it places the risk of cost overruns on the contractor. Without specific details on the scope of work for each information system, a precise per-unit cost comparison is difficult, but the overall value aligns with industry standards for comprehensive cybersecurity support.

Cost Per Unit: N/A

Competition Analysis

Competition Level: full-and-open

This contract was awarded under full and open competition, indicating that multiple qualified vendors had the opportunity to bid. The presence of six bidders, as suggested by the 'no' field, points to a healthy level of competition for these specialized cybersecurity services. This competitive environment generally leads to better pricing and service offerings for the government, as contractors strive to differentiate themselves and secure the award. The process likely involved a thorough evaluation of technical capabilities and pricing.

Taxpayer Impact: Full and open competition ensures that taxpayer dollars are used efficiently by fostering a market where the best value is sought. It minimizes the risk of inflated prices that can occur with less competitive solicitations.

Public Impact

Naval Surface Warfare Center Carderock Division benefits from enhanced cybersecurity posture and operational continuity. Ensures compliance with federal cybersecurity mandates and defense information assurance standards. Supports the readiness and security of critical naval warfare systems and infrastructure. The contract sustains specialized IT security expertise within the defense sector. Geographic impact is centered around the Carderock Division's operations, primarily in Maryland.

Waste & Efficiency Indicators

Waste Risk Score: 50 / 10

Warning Flags

Potential for vendor lock-in if specialized knowledge is not adequately transferred.
Reliance on a single contractor for critical authorization to operate processes could pose a risk.
Scope creep could lead to cost increases if not managed tightly under the firm-fixed-price structure.

Positive Signals

Firm-fixed-price contract provides budget predictability.
Awarded through full and open competition, indicating a competitive market.
Contract duration of five years allows for stable support and knowledge retention.
Focus on essential cybersecurity functions for a key naval warfare center.

Sector Analysis

This contract falls within the broader Information Technology and Engineering Services sector, specifically focusing on cybersecurity and information assurance. The market for these services is substantial and growing, driven by increasing cyber threats and stringent regulatory requirements, particularly within the defense industry. The Naval Surface Warfare Center Carderock Division's need for RMF and ATO support is representative of a common requirement across many government agencies. Comparable spending benchmarks in this niche often involve significant investment due to the high level of expertise and security clearance required.

Small Business Impact

The data indicates this contract was not set aside for small businesses (ss: false, sb: false). As a result, large businesses were eligible to compete and likely dominated the bidding process. There is no explicit information regarding subcontracting plans for small businesses. This suggests that the primary benefits to the small business ecosystem would be indirect, potentially through supply chain opportunities if the prime contractor engages small businesses for specific components or services, which is not guaranteed.

Oversight & Accountability

Oversight for this contract would primarily reside with the Department of the Navy and the Naval Surface Warfare Center Carderock Division. As a delivery order under a larger contract vehicle, the specific oversight mechanisms would be detailed in the parent contract. Accountability is managed through the firm-fixed-price terms and performance requirements. Transparency is facilitated by the contract award process, which was full and open competition. Inspector General jurisdiction would apply in cases of fraud, waste, or abuse.

Related Government Programs

Defense Information Systems Agency (DISA) cybersecurity programs
Naval Sea Systems Command (NAVSEA) IT support contracts
Risk Management Framework (RMF) implementation
Authorization to Operate (ATO) processes
Cybersecurity support services for federal agencies

Risk Flags

Cybersecurity is a critical and evolving threat landscape.
Reliance on external contractors for core security functions.
Potential for knowledge transfer gaps.
Ensuring continuous compliance with evolving DoD cybersecurity directives.

Frequently Asked Questions

What is this federal contract paying for?

Department of Defense awarded $11.2 million to I - ASSURE, L.L.C. CERTIFICATION AND ACCREDITATION (C&A)/ASSESSMENT AND AUTHORIZATION (A&A) SUPPORT SERVICES. THE CONTRACTOR SHALL CREATE RISK MANAGEMENT FRAMEWORK (RMF) AUTHORIZATION PACKAGES AND PROVIDE DEFENSE INFORMATION ASSURANCE CERTIFICATION ACCREDITATION PROCESS (DIACAP) AND RMF AUTHORITY TO OPERATE (ATO) MAINTENANCE FOR THE ENTIRE RANGE OF INFORMATION SYSTEMS (ISS) NECESSARY FOR NAVAL SURFACE WARFARE CENTER CARDEROCK DIVISION.

Who is the contractor on this award?

The obligated recipient is I - ASSURE, L.L.C.

Which agency awarded this contract?

Awarding agency: Department of Defense (Department of the Navy).

What is the total obligated amount?

The obligated amount is $11.2 million.

What is the period of performance?

Start: 2018-08-06. End: 2023-08-05.

What is the track record of I-Assure, L.L.C. in providing similar cybersecurity services to the Department of Defense?

Information regarding the specific track record of I-Assure, L.L.C. for this particular type of service is not detailed in the provided data. However, the award of this contract through full and open competition suggests that the company met the minimum qualifications and demonstrated capability to perform the required RMF and ATO maintenance services. Further investigation into past performance evaluations, other contract awards, and client feedback would be necessary for a comprehensive assessment of their track record. The duration of the contract (5 years) implies a level of confidence from the awarding agency in the contractor's ability to deliver sustained performance.

How does the value of this contract compare to similar cybersecurity support services for naval warfare centers?

The contract value of $11.2 million over five years, averaging approximately $2.24 million annually, for RMF and ATO support services is generally considered within a reasonable range for specialized cybersecurity functions within the Department of Defense. Benchmarking against similar contracts awarded to other naval warfare centers or defense agencies for comparable services indicates that this pricing is competitive. Factors influencing this include the complexity of the information systems supported, the specific security controls required, and the level of expertise needed. The firm-fixed-price nature also contributes to predictable spending, making it easier to compare against budgeted amounts.

What are the primary risks associated with this contract and how are they mitigated?

Key risks include potential scope creep, where the requirements might expand beyond the initial agreement, leading to cost overruns (though mitigated by the firm-fixed-price structure which places risk on the contractor). Another risk is the reliance on a single vendor for critical authorization processes, which could impact operational continuity if the contractor fails to perform. Mitigation strategies likely involve robust contract management, clear definition of tasks, performance monitoring, and contingency planning by the Naval Surface Warfare Center. The five-year duration also presents a risk of technological obsolescence if not managed proactively, requiring continuous adaptation by the contractor.

How effective is the current approach to cybersecurity support for the Naval Surface Warfare Center Carderock Division likely to be?

The effectiveness is likely to be good, given the contract's focus on core cybersecurity functions like RMF package creation and ATO maintenance, which are essential for compliance and operational security. The use of full and open competition suggests a selection process that favors capable providers. The five-year duration allows for sustained support and development of institutional knowledge. However, effectiveness ultimately depends on the contractor's execution, the clarity of requirements, and the agency's own internal oversight and collaboration. Continuous assessment and adaptation to evolving cyber threats will be crucial for long-term effectiveness.

What are the historical spending patterns for cybersecurity services at the Naval Surface Warfare Center Carderock Division?

The provided data focuses on a single contract award and does not offer historical spending patterns for cybersecurity services at the Naval Surface Warfare Center Carderock Division. To understand historical trends, one would need to analyze previous contracts awarded for similar services, including their values, durations, and contractors. This would reveal whether spending has been consistent, increasing, or decreasing, and whether there has been a reliance on specific vendors over time. Such analysis is crucial for identifying long-term strategic investments in cybersecurity.

What is the significance of the 'Engineering Services' NAICS code (541330) for this cybersecurity contract?

The assignment of NAICS code 541330 (Engineering Services) to this contract, while the service is cybersecurity-focused, highlights the engineering and technical expertise required for developing and maintaining authorization packages and ensuring system accreditation. Cybersecurity, particularly within defense contexts, often involves complex system design, integration, and risk assessment that fall under the umbrella of engineering. This code suggests that the contract emphasizes the technical and analytical aspects of ensuring information systems meet stringent security and operational requirements, rather than purely administrative or basic IT support.

Industry Classification

NAICS: Professional, Scientific, and Technical Services › Architectural, Engineering, and Related Services › Engineering Services

Product/Service Code: IT AND TELECOM - INFORMATION TECHNOLOGY AND TELECOMMUNICATIONS › ADP AND TELECOMMUNICATIONS

Competition & Pricing

Extent Competed: FULL AND OPEN COMPETITION

Solicitation Procedures: SUBJECT TO MULTIPLE AWARD FAIR OPPORTUNITY

Solicitation ID: N0016718R3002

Offers Received: 6

Pricing Type: FIRM FIXED PRICE (J)

Evaluated Preference: NONE

Contractor Details

Address: 2711 MONROE ST, MANDEVILLE, LA, 70448

Business Categories: Category Business, Limited Liability Corporation, Small Business, Special Designations, U.S.-Owned Business, Veteran Owned Business

Financial Breakdown

Contract Ceiling: $17,333,148

Exercised Options: $11,205,000

Current Obligation: $11,205,000

Contract Characteristics

Commercial Item: COMMERCIAL PRODUCTS/SERVICES PROCEDURES NOT USED

Cost or Pricing Data: NO

Parent Contract

Parent Award PIID: N0017810D6082

IDV Type: IDC

Timeline