SSJ DCFO RMF-SOD Redacted

SOLE SOURCE JUSTIFICATION UNDER SIMPLIFIED PROCEDURES

FOR CERTAIN COMMERCIAL ITEMS

UNDER FEDERAL ACQUISITION REGULATION (FAR) PART 12

1. AGENCY AND CONTRACTING ACTIVITY:

The Department of War, Washington Headquarters Services, Acquisition Directorate (WHS/AD), on behalf of the Office of the Deputy Chief Financial Officer (ODCFO).

2. DESCRIPTION OF ACTION:

WHS/AD proposes to issue a sole-source, hybrid Firm-Fixed Price (FFP) and Time and Materials (T&M) contract to Osprey Cove, LLC (a Service-Disabled Veteran-Owned Small Business [SDVOSB]), located at 3032 Little Haven Rd, Virginia Beach, Virginia 23452. The T&M portion of the contract will be for travel. The contract will provide technical, cybersecurity, and financial management audit advisory services supporting the Risk Management Framework (RMF) and Cross-Application Segregation of Duties (SoD). The estimated value of this action is $400,00.00. which includes labor ($394,285.00) and travel ($4,790.00), with a twelve (12) month period of performance. The effort will be funded by Operations and Maintenance (O&M) appropriations funds.

3. DESCRIPTION OF SUPPLIES/SERVICES:

The ODCFO assists the Under Secretary of War (Comptroller) (USW(C)) with responsibilities including the consolidated Department of War (DoW) financial statement audit, oversight of all DoW Component audits, and directing improvements that lead to unmodified audit opinions. The DCFO requires specialized support to resolve long-standing financial system deficiencies involving RMF cybersecurity control assessments that support Authority to Operate (ATO) decisions and financial statement audit testing, which continue to identify material weaknesses in security management, access control, segregation of duties, configuration management, and interfaces.
The contractor shall provide non-personal services across five core technical tasks as specified in the Performance Work Statement (PWS) below:
x

x

Task 1: Governance Meeting Support: Organize, attend, and support large-scale collaboration meetings (forums, workshops, multi-stakeholder working groups) with dedicated planning, logistics, pre-briefs, execution, minutes, and action tracking. Task 2: ICAM Solution Deployment, Onboarding, and Segregation of Duties: Provide financial management subject matter expert (SME) oversight, guidance, and functional requirements for Identity, Credential, and Access Management (ICAM); deliver SoD rule governance across Business Enterprise Architecture (BEA) end-to-end processes; and