SSA awards $13M for Forescout software licenses, impacting IT security and network management

Contract Overview

Contract Amount: $13,082,305 ($13.1M)

Contractor: Carahsoft Technology Corp

Awarding Agency: Social Security Administration

Start Date: 2023-04-01

End Date: 2027-03-31

Contract Duration: 1,460 days

Daily Burn Rate: $9.0K/day

Competition Type: FULL AND OPEN COMPETITION

Number of Offers Received: 1

Pricing Type: FIRM FIXED PRICE

Sector: IT

Official Description: ESTABLISH A FIVE-YEAR CONTRACT (ONE BASE YEAR AND FOUR OPTION YEARS) FOR FORESCOUT EYESIGHT AND EYECONTROL SOFTWARE LICENSE SUBSCRIPTIONS.

Place of Performance

Location: RESTON, FAIRFAX County, VIRGINIA, 20190

State: Virginia Government Spending

Plain-Language Summary

Social Security Administration obligated $13.1 million to CARAHSOFT TECHNOLOGY CORP for work described as: ESTABLISH A FIVE-YEAR CONTRACT (ONE BASE YEAR AND FOUR OPTION YEARS) FOR FORESCOUT EYESIGHT AND EYECONTROL SOFTWARE LICENSE SUBSCRIPTIONS. Key points: 1. The contract focuses on essential software licenses for network visibility and control. 2. Competition was full and open, suggesting a potentially competitive pricing environment. 3. The contract duration spans five years, indicating a long-term need for these services. 4. The fixed-price contract type provides cost certainty for the agency. 5. The primary contractor, Carahsoft Technology Corp, is a known reseller of government IT solutions. 6. The award is categorized under IT services, specifically software publishers.

Value Assessment

Rating: good

The total award amount of $13,082,305 over five years for software licenses appears reasonable given the duration and the nature of enterprise-level cybersecurity software. Benchmarking against similar multi-year software subscriptions for network security solutions would provide a more precise value assessment. The firm fixed-price structure helps manage cost fluctuations, but the ultimate value depends on the utilization and effectiveness of the Forescout software in meeting the SSA's security objectives.

Cost Per Unit: N/A

Competition Analysis

Competition Level: full-and-open

The contract was awarded under full and open competition, indicating that all responsible sources were permitted to submit offers. This approach generally fosters a competitive environment, which can lead to better pricing and terms for the government. The number of bidders is not specified, but the open competition suggests that the SSA sought to maximize market participation to secure the best value.

Taxpayer Impact: Full and open competition is beneficial for taxpayers as it encourages multiple vendors to bid, potentially driving down prices and ensuring the government receives competitive rates for essential software.

Public Impact

The Social Security Administration (SSA) benefits directly through enhanced network security and visibility. The software delivered provides capabilities for monitoring, detecting, and responding to network threats. The geographic impact is primarily within SSA facilities nationwide where the software is deployed. The contract supports IT professionals responsible for network management and cybersecurity within the SSA.

Waste & Efficiency Indicators

Waste Risk Score: 50 / 10

Warning Flags

Potential for vendor lock-in if alternative solutions are not considered in the future.
Reliance on a single software suite may limit flexibility in adapting to evolving cybersecurity threats.
The effectiveness of the software is dependent on proper implementation and ongoing maintenance.

Positive Signals

Long-term contract provides stability for software licensing and support.
Firm fixed-price contract offers budget predictability.
Full and open competition suggests a potentially competitive pricing structure.

Sector Analysis

This contract falls within the Software Publishers industry, a segment of the broader Information Technology sector. The market for network security and visibility software is highly competitive, with numerous vendors offering solutions. The SSA's spending on this type of software is consistent with government-wide efforts to modernize IT infrastructure and enhance cybersecurity postures. Comparable spending benchmarks would involve analyzing other agencies' investments in similar network access control and cybersecurity platforms.

Small Business Impact

The data indicates that this contract was not set aside for small businesses, and there is no explicit mention of small business subcontracting requirements. Carahsoft Technology Corp is a large business reseller. The impact on the small business ecosystem is likely minimal unless Carahsoft engages small businesses for support services related to the software implementation or maintenance, which is not detailed in the provided information.

Oversight & Accountability

Oversight for this contract would typically be managed by the contracting officer and program officials within the Social Security Administration. Performance monitoring and adherence to the contract terms are key accountability measures. Transparency is facilitated through contract databases like FPDS, which record award details. The Inspector General's office may conduct audits or investigations if performance issues or potential fraud are identified.

Related Government Programs

Network Security Software
Cybersecurity Solutions
IT Infrastructure Modernization
Software Licensing Agreements
Federal Information Technology Contracts

Risk Flags

Long-term reliance on a single vendor's software.
Potential integration complexities with existing SSA systems.
Need for specialized expertise to manage and optimize software.

Frequently Asked Questions

What is this federal contract paying for?

Social Security Administration awarded $13.1 million to CARAHSOFT TECHNOLOGY CORP. ESTABLISH A FIVE-YEAR CONTRACT (ONE BASE YEAR AND FOUR OPTION YEARS) FOR FORESCOUT EYESIGHT AND EYECONTROL SOFTWARE LICENSE SUBSCRIPTIONS.

Who is the contractor on this award?

The obligated recipient is CARAHSOFT TECHNOLOGY CORP.

Which agency awarded this contract?

Awarding agency: Social Security Administration (Social Security Administration).

What is the total obligated amount?

The obligated amount is $13.1 million.

What is the period of performance?

Start: 2023-04-01. End: 2027-03-31.

What is the specific functionality of Forescout Eyesight and EyeControl software and how does it align with the SSA's cybersecurity needs?

Forescout Eyesight and EyeControl are network security platforms designed to provide visibility into network-connected devices, assess their security posture, and enforce security policies. Eyesight typically focuses on discovery, classification, and risk assessment of devices, while EyeControl enables automated policy enforcement, such as quarantining non-compliant devices or restricting access. For the SSA, these tools are crucial for managing a complex network environment, identifying vulnerabilities, preventing unauthorized access, and ensuring compliance with federal cybersecurity mandates like the Cybersecurity Enhancement Act. The software helps maintain situational awareness of the SSA's digital assets, which is vital for protecting sensitive citizen data and ensuring the continuity of critical services.

How does the $13 million award compare to historical spending on similar software by the SSA or other federal agencies?

Without specific historical data for the SSA's spending on Forescout or comparable network security solutions, a direct comparison is challenging. However, enterprise-level network visibility and control software licenses, especially for a five-year duration, often represent significant investments. Agencies like the Department of Defense or large civilian agencies frequently spend millions annually on such solutions due to the scale and complexity of their networks. The SSA's $13 million award over five years ($2.6 million annually) appears to be within the expected range for a large federal agency procuring comprehensive network security software, assuming it covers a substantial portion of their network infrastructure.

What are the key performance indicators (KPIs) used to measure the success of this contract and the effectiveness of the Forescout software?

Key performance indicators for this contract would likely focus on the software's ability to meet defined security objectives. Examples include the percentage of network devices accurately discovered and classified, the reduction in security incidents related to unauthorized or non-compliant devices, the speed and effectiveness of policy enforcement actions, and the system's uptime and reliability. The SSA would also track metrics related to threat detection rates, response times to identified vulnerabilities, and user satisfaction among IT security personnel. Regular performance reviews and reports from Carahsoft Technology Corp, based on these KPIs, would inform the SSA's assessment of value and contract performance.

What is Carahsoft Technology Corp's track record in delivering similar IT solutions to federal agencies, particularly the SSA?

Carahsoft Technology Corp is a major government IT reseller with a strong track record of delivering a wide range of software and hardware solutions to federal agencies, including the SSA. They specialize in providing access to leading technology products through various government-wide acquisition contracts (GWACs) and other contract vehicles. Their business model involves partnering with manufacturers like Forescout and facilitating procurement for government clients. While Carahsoft is primarily a reseller, their experience in navigating government procurement processes and managing large-scale IT contracts is extensive. Specific performance details for this particular Forescout contract would be found in performance reports and agency evaluations.

Are there any identified risks associated with the implementation or long-term use of Forescout software within the SSA's environment?

Potential risks include integration challenges with existing SSA IT infrastructure, the complexity of configuring and managing the software to meet specific security policies, and the need for specialized personnel to operate and maintain the system effectively. There's also a risk of vendor lock-in, making future transitions to alternative solutions more difficult or costly. Furthermore, the effectiveness of the software is contingent on continuous updates and adaptation to evolving cyber threats, requiring ongoing investment and vigilance. Ensuring comprehensive training for SSA staff is critical to mitigate operational risks and maximize the software's benefits.

Industry Classification

NAICS: Information › Software Publishers › Software Publishers

Product/Service Code: IT AND TELECOM - APLLICATIONS

Competition & Pricing

Extent Competed: FULL AND OPEN COMPETITION

Solicitation Procedures: SUBJECT TO MULTIPLE AWARD FAIR OPPORTUNITY

Solicitation ID: 28321323Q00000121

Offers Received: 1

Pricing Type: FIRM FIXED PRICE (J)

Evaluated Preference: NONE

Contractor Details

Address: 11493 SUNSET HILLS RD, RESTON, VA, 20190

Business Categories: Category Business, Corporate Entity Not Tax Exempt, Not Designated a Small Business, Special Designations, U.S.-Owned Business

Financial Breakdown

Contract Ceiling: $16,988,555

Exercised Options: $13,082,305

Current Obligation: $13,082,305

Actual Outlays: $9,449,550

Contract Characteristics

Commercial Item: COMMERCIAL PRODUCTS/SERVICES

Parent Contract

Parent Award PIID: 47QSWA18D008F

IDV Type: FSS

Timeline