SSJ Deloitte LLP Redacted

Department of Transportation
Federal Highway Administration (FHWA)
Information Technology (IT) Acquisition Center of Excellence (ACE)

SOLE SOURCE JUSTIFICATION

LOGICAL FOLLOW-ON

ORDER NO. 693JJ320A000013_693JJ322F00228N

The Department of Transportation (DOT) makes this Justification for orders pursuant to Federal Acquisition Regulation (FAR) 8.401(b) and GSAR 538.7104-3(b)(1)(iii). i.)

Identification of Agency and Contracting Activity:
Program Office:
DOT, Office of the Secretary (OST)
Office of the Chief Information Officer (OCIO)
1200 New Jersey Avenue, SE
Washington, D.C. 20590
Contracting Activity:
Federal Highway Administration (FHWA)

IT ACE

1200 New Jersey Avenue, SE
Washington, D.C. 20590

ii.)

Nature and/or Description of Action Being Approved:
The OCIO has a need to extend the cybersecurity management support services under Cyber Security Information & Program Services (CSIPS) Blanket Purchase Agreement (BPA) Order 693JJ320A000013_693JJ322F00228N awarded to Deloitte to support OST's applications and information systems. The CSIPS BPA Order currently expires on 10/31/2026 and this request is to extend current levels of support for an additional two (2) months (through 12/31/2026). An extension is needed while DOT goes through the process of restructuring the Department’s information technology workforce and determines whether this support can be reduced or fully assumed by Federal employees.

iii.) A Complete Description of Supplies/Services Required to Meet Agency’s Need: This task order provides a broad range of technical and professional services to DOT infrastructure, application, and information systems. The cybersecurity support provides mission essential cybersecurity services, including operations and oversight, risk and vulnerability management in support of multiple binding operational directives, and Federal Information Security Management Act (FISMA) compliance and reporting. Additionally, the contractor supports DOT systems to securely address vulnerabilities and non-compliance with Office of Management and Budget (OMB) and FISMA Directives, impacting enterprise cyber readiness and operational integrity; supports, operates, and maintains DOT cybersecurity tool stack (i.e., BigFix, Tenable and Invicti) to enable the Continuous Diagnostic and Mitigation (CDM) program to correlate and pass data to the Version 12/27/18

CDM dashboard from all security tools on behalf of the department, managing inventory, patching, and updates; and operates and maintains Tenable for vulnerability management,