Limited Source Justification Redacted

220 BINNEY

CAMBRIDGE, MA 02142

Volpe.DOT.gov

Justification for an
exception to fair opportunity
Noncompetitive Logical Follow-on Task Order Issued Under a Government-Wide Acquisition Contract (GWAC) Exceeding the Simplified Acquisition Threshold (SAT) This acquisition is conducted under the authority of the Clinger-Cohen Act of 1996, of which the primary statutory referenced authority is 40 U.S.C. 11302(e) which specifically authorizes Government-Wide Acquisition Contracts (GWACs) for information technology programs, operated by U.S. Office of Management and Budget (OMB)-designated executive agents. I.

Contracting Activity.
x
x
x

II.

Nature and/or description of the action being processed. x
x
x
x

III.

Agency: U.S. DOT Volpe National Transportation Systems Center Office: V-222, Operations and Simplified Acquisitions Branch Contact: Christopher Dooley, Acquisitions Branch Chief & Contracting Officer ƒ Phone: (857) 998-2257 | e-mail: [email protected]

Contractor: VersaTech Inc., 8510 Corridor Rd, #200, Savage, MD 20763-9505 Point of Contact: Jason Peay | [email protected] Contract Type: Firm-Fixed-Price
Period of Performance: 12-month base period with 12-month option period Description of supplies/services required to meet agency needs.

The Volpe National Transportation Systems Center (Volpe Center) requires contractor support to conduct comprehensive security assessment services for its Cybersecurity Program. The contractor shall evaluate the effectiveness of existing security controls, identify vulnerabilities and gaps, and verify compliance with applicable laws, regulations, and policies. The assessment will deliver actionable findings and prioritized remediation recommendations to strengthen Volpe’s security posture, mitigate risk, and enhance its information assurance framework in support of the Center’s ongoing mission to protect critical systems and information. x Independent Government Cost Estimate (IGCE):
x Period of Performance: The period of performance consists of a 12-month base period and a 12-month option period. Across both the base and option periods, the contractor will perform cybersecurity assessments or Cyber Maturity Assessment (CMA) revisions on up to 10 systems, including optional system assessments based on agency needs.

220 BINNEY

CAMBRIDGE, MA 02142

Volpe.DOT.gov

IV.
Justification/Rationale for Limiting Sources & Demonstration of Contractor's Unique Qualifications
In accordance with DOT Class Deviation 2026-14, dated October 27, 2025, the U.S. DOT