Cybersecurity management support contract awarded to Criterion Systems, L.L.C. for $3.44M over 5 years

Contract Overview

Contract Amount: $3,442,143 ($3.4M)

Contractor: Criterion Systems, L.L.C.

Awarding Agency: Department of Transportation

Start Date: 2021-07-20

End Date: 2026-07-19

Contract Duration: 1,825 days

Daily Burn Rate: $1.9K/day

Competition Type: FULL AND OPEN COMPETITION

Number of Offers Received: 3

Pricing Type: FIRM FIXED PRICE

Sector: IT

Official Description: THE PURPOSE OF THIS REQUIREMENT IS TO ACQUIRE HIGHLY QUALIFIED AND EXPERIENCED CONTRACTORS TO PROVIDE TASK AREA 3: CYBER SECURITY MANAGEMENT SUPPORT (TECHNICAL) FOR THE FRA CYBERSECURITY PROGRAM. THESE SERVICES ARE FOR EXISTING SERVICES AS DEFINED IN

Place of Performance

Location: VIENNA, FAIRFAX County, VIRGINIA, 22182

State: Virginia Government Spending

Plain-Language Summary

Department of Transportation obligated $3.4 million to CRITERION SYSTEMS, L.L.C. for work described as: THE PURPOSE OF THIS REQUIREMENT IS TO ACQUIRE HIGHLY QUALIFIED AND EXPERIENCED CONTRACTORS TO PROVIDE TASK AREA 3: CYBER SECURITY MANAGEMENT SUPPORT (TECHNICAL) FOR THE FRA CYBERSECURITY PROGRAM. THESE SERVICES ARE FOR EXISTING SERVICES AS DEFINED IN Key points: 1. Contract provides essential technical cybersecurity management support for the FRA's cybersecurity program. 2. The award was made under full and open competition, suggesting a competitive bidding process. 3. The contract is a BPA Call, indicating it's a call order against an existing Blanket Purchase Agreement. 4. The firm-fixed-price contract type helps manage cost certainty for the government. 5. The duration of 1825 days (5 years) suggests a long-term need for these services. 6. The contract is not set aside for small businesses, nor does it appear to have specific subcontracting requirements mentioned.

Value Assessment

Rating: good

The contract value of $3.44 million over five years for cybersecurity management support appears reasonable given the scope of services. Benchmarking against similar IT support contracts within the Department of Transportation or other federal agencies would provide a more precise value-for-money assessment. The firm-fixed-price structure offers cost predictability. Without specific details on the deliverables and performance metrics, a definitive assessment of cost efficiency is challenging, but the overall value seems aligned with typical federal IT service procurements.

Cost Per Unit: N/A

Competition Analysis

Competition Level: full-and-open

This contract was awarded under full and open competition, meaning all responsible sources were permitted to submit offers. The data indicates there were 3 offers received. A competitive process with multiple bidders generally leads to better price discovery and potentially more favorable pricing for the government. The number of offers (3) suggests a moderate level of competition for this specific requirement.

Taxpayer Impact: The full and open competition ensures that taxpayer dollars are likely being used efficiently by fostering a competitive environment that drives down costs and encourages innovation among bidders.

Public Impact

The Federal Railroad Administration (FRA) benefits from enhanced cybersecurity management and technical support. Services delivered include technical cybersecurity management crucial for protecting federal data and systems. The geographic impact is primarily within the operational scope of the FRA, likely supporting its headquarters and potentially remote operations. The contract supports a workforce of skilled cybersecurity professionals, contributing to the federal IT workforce.

Waste & Efficiency Indicators

Waste Risk Score: 50 / 10

Warning Flags

Potential for vendor lock-in if transition planning is not robust at contract end.
Reliance on a single contractor for critical cybersecurity functions could pose a risk if performance degrades.
The specific technical expertise required may limit the pool of qualified contractors, potentially impacting future competition.

Positive Signals

Awarded under full and open competition, indicating a robust selection process.
Firm-fixed-price contract type provides cost certainty and reduces financial risk for the government.
Long contract duration (5 years) suggests stability and continuity of essential cybersecurity services.
The contractor, Criterion Systems, L.L.C., has experience in federal IT services, implying a level of established capability.

Sector Analysis

This contract falls within the IT services sector, specifically focusing on computer facilities management and cybersecurity. The federal government's spending on IT services, particularly cybersecurity, has been steadily increasing due to rising cyber threats. Comparable spending benchmarks for cybersecurity management support contracts can vary widely based on scope, duration, and specific services required. However, contracts of this size and duration are common within federal agencies seeking to maintain and enhance their digital defenses.

Small Business Impact

This contract was not awarded as a small business set-aside, nor does the provided data indicate any specific subcontracting goals for small businesses. This means that the primary contract was competed broadly, and there is no explicit mechanism within this award to ensure a portion of the work flows down to small businesses. The impact on the small business ecosystem is neutral to potentially negative if small businesses were capable of performing this work but were not incentivized to bid or subcontract.

Oversight & Accountability

Oversight for this contract would typically be managed by the Federal Railroad Administration's contracting officers and program managers. Accountability measures are embedded in the firm-fixed-price contract terms, requiring specific deliverables and performance standards. Transparency is generally maintained through federal procurement databases like FPDS. Inspector General jurisdiction would apply if any fraud, waste, or abuse were suspected or identified during the contract's performance.

Related Government Programs

Federal Cybersecurity Programs
IT Management Support Services
Cybersecurity Services
Blanket Purchase Agreements (BPAs)
Department of Transportation IT Contracts

Risk Flags

Potential for performance issues if contractor lacks specific technical expertise.
Risk of cybersecurity incidents if support is inadequate.
Dependence on a single contractor for critical functions.

Frequently Asked Questions

What is this federal contract paying for?

Department of Transportation awarded $3.4 million to CRITERION SYSTEMS, L.L.C.. THE PURPOSE OF THIS REQUIREMENT IS TO ACQUIRE HIGHLY QUALIFIED AND EXPERIENCED CONTRACTORS TO PROVIDE TASK AREA 3: CYBER SECURITY MANAGEMENT SUPPORT (TECHNICAL) FOR THE FRA CYBERSECURITY PROGRAM. THESE SERVICES ARE FOR EXISTING SERVICES AS DEFINED IN

Who is the contractor on this award?

The obligated recipient is CRITERION SYSTEMS, L.L.C..

Which agency awarded this contract?

Awarding agency: Department of Transportation (Federal Railroad Administration).

What is the total obligated amount?

The obligated amount is $3.4 million.

What is the period of performance?

Start: 2021-07-20. End: 2026-07-19.

What is the track record of Criterion Systems, L.L.C. in performing similar federal cybersecurity contracts?

Criterion Systems, L.L.C. has a history of performing federal IT and cybersecurity-related contracts. A detailed review of their past performance, including contract awards, performance evaluations (e.g., CPARS), and any past issues or successes, would be necessary for a comprehensive assessment. Their experience with the Department of Transportation or similar agencies would be particularly relevant. Without access to specific past performance data, it's difficult to definitively gauge their capabilities for this specific task area, but their presence as an awardee suggests they met the minimum requirements during the bidding process.

How does the awarded value of $3.44 million over 5 years compare to similar cybersecurity management support contracts within the federal government?

The awarded value of approximately $688,000 per year for cybersecurity management support is within a common range for federal IT services. However, a precise comparison requires detailed analysis of contract scope, deliverables, labor categories, and geographic location. Contracts for similar services can range from hundreds of thousands to tens of millions of dollars annually, depending on the complexity and scale of the agency's cybersecurity program. Factors such as the number of systems supported, the sensitivity of data, and the specific technical expertise required significantly influence pricing. This contract's value appears moderate for a 5-year federal cybersecurity support engagement.

What are the primary risks associated with this contract, and how are they being mitigated?

Key risks include potential underperformance by the contractor, cybersecurity breaches due to inadequate support, and cost overruns if the firm-fixed-price model is not strictly adhered to or if scope creep occurs. Mitigation strategies typically involve robust contract oversight by the government, clearly defined performance standards and Service Level Agreements (SLAs), regular performance reviews, and contingency planning. The firm-fixed-price nature itself is a risk mitigation tool against cost overruns. The government's ability to monitor performance and enforce contract terms is crucial for mitigating these risks.

How effective is the Federal Railroad Administration's cybersecurity program, and how does this contract contribute to its overall effectiveness?

The effectiveness of the FRA's cybersecurity program is not directly detailed in the provided data. This contract is intended to provide 'highly qualified and experienced contractors' for 'Cyber Security Management Support (Technical)' for the FRA Cybersecurity Program. Therefore, its contribution is expected to be in bolstering the technical capabilities and management oversight of the program, aiming to enhance its overall effectiveness in protecting the FRA's information systems and data. The success of this contribution would depend on the contractor's performance and the alignment of the support provided with the FRA's specific cybersecurity objectives and threat landscape.

What are the historical spending patterns for cybersecurity support services at the Federal Railroad Administration?

Historical spending patterns for cybersecurity support services at the FRA are not provided in the data. To analyze this, one would need to examine past contracts awarded by the FRA for similar services over several fiscal years. This would involve searching federal procurement databases for contracts related to cybersecurity, IT support, and information assurance within the FRA. Understanding historical spending can reveal trends, identify periods of increased investment, and provide context for the current contract's value and duration, helping to assess if current spending is consistent with past investments or represents a significant shift.

What specific technical cybersecurity management support tasks are included under Task Area 3?

The provided data specifies that Task Area 3 covers 'CYBER SECURITY MANAGEMENT SUPPORT (TECHNICAL)'. While the exact technical tasks are not enumerated, this typically encompasses a range of activities such as developing and implementing cybersecurity policies and procedures, managing security controls, conducting risk assessments, monitoring security alerts, incident response planning and execution, vulnerability management, security awareness training coordination, and ensuring compliance with federal cybersecurity mandates (e.g., NIST, FISMA). The 'technical' aspect suggests a focus on the implementation and operational aspects of cybersecurity rather than purely policy or strategic planning.

Industry Classification

NAICS: Professional, Scientific, and Technical Services › Computer Systems Design and Related Services › Computer Facilities Management Services

Product/Service Code: IT AND TELECOM - INFORMATION TECHNOLOGY AND TELECOMMUNICATIONS › IT AND TELECOM - APLLICATIONS

Competition & Pricing

Extent Competed: FULL AND OPEN COMPETITION

Solicitation Procedures: SUBJECT TO MULTIPLE AWARD FAIR OPPORTUNITY

Solicitation ID: CSIPS 03-01

Offers Received: 3

Pricing Type: FIRM FIXED PRICE (J)

Evaluated Preference: NONE

Contractor Details

Address: 8330 BOONE BLVD STE 400, VIENNA, VA, 22182

Business Categories: Category Business, Corporate Entity Not Tax Exempt, Not Designated a Small Business, Special Designations, Subchapter S Corporation, U.S.-Owned Business

Financial Breakdown

Contract Ceiling: $3,442,143

Exercised Options: $3,442,143

Current Obligation: $3,442,143

Actual Outlays: $3,020,625

Contract Characteristics

Commercial Item: COMMERCIAL PRODUCTS/SERVICES PROCEDURES NOT USED

Parent Contract

Parent Award PIID: 693JJ320A000011

IDV Type: BPA

Timeline