DHS Awards $24.18M to MITRE for System Engineering and Vulnerability Expertise

Contract Overview

Contract Amount: $24,181,002 ($24.2M)

Contractor: THE Mitre Corporation

Awarding Agency: Department of Homeland Security

Start Date: 2024-04-17

End Date: 2026-03-16

Contract Duration: 698 days

Daily Burn Rate: $34.6K/day

Competition Type: NOT COMPETED

Pricing Type: COST PLUS FIXED FEE

Sector: R&D

Official Description: SYSTEM ENGINEERING AND ACQUISITION EXPERTISE FOR CAPABILITY DELIVERY (CD) AND COMMON VULNERABILITIES AND EXPOSURES (CVE), COMMON WEAKNESS ENUMERATION (CWE) PROGRAM

Place of Performance

Location: MCLEAN, FAIRFAX County, VIRGINIA, 22102

State: Virginia Government Spending

Plain-Language Summary

Department of Homeland Security obligated $24.2 million to THE MITRE CORPORATION for work described as: SYSTEM ENGINEERING AND ACQUISITION EXPERTISE FOR CAPABILITY DELIVERY (CD) AND COMMON VULNERABILITIES AND EXPOSURES (CVE), COMMON WEAKNESS ENUMERATION (CWE) PROGRAM Key points: 1. The contract focuses on critical areas of system engineering, capability delivery, and cybersecurity vulnerability management. 2. MITRE Corporation, a well-established entity in R&D, is the sole awardee. 3. The 'Not Competed' status raises questions about potential price discovery and market competition. 4. Spending is categorized under R&D in Physical, Engineering, and Life Sciences, aligning with MITRE's expertise.

Value Assessment

Rating: fair

The Cost Plus Fixed Fee contract type allows for cost reimbursement plus a fixed fee, which can sometimes lead to higher costs if not closely managed. Benchmarking is difficult without specific cost breakdowns for similar R&D services.

Cost Per Unit: N/A

Competition Analysis

Competition Level: sole-source

This contract was not competed, indicating a sole-source award. This limits price discovery and may not leverage the full range of available market solutions, potentially impacting overall value for money.

Taxpayer Impact: Taxpayer funds are directed to a single provider without a competitive process, which could result in a higher cost than if multiple vendors had vied for the contract.

Public Impact

Enhances national cybersecurity by addressing system vulnerabilities and improving capability delivery. Supports the Department of Homeland Security's mission to secure the nation. Leverages specialized R&D expertise for complex technical challenges. Potential for increased costs due to lack of competition.

Waste & Efficiency Indicators

Waste Risk Score: 50 / 10

Warning Flags

Sole-source award limits competition.
Cost-plus contract type can inflate costs.
Lack of transparency in price discovery.

Positive Signals

Addresses critical cybersecurity needs.
Utilizes specialized R&D expertise.
Supports a key government agency (DHS).

Sector Analysis

This contract falls under Research and Development in the Physical, Engineering, and Life Sciences sector. Spending in this area often involves specialized expertise and can be subject to unique market dynamics, with R&D services typically commanding higher rates.

Small Business Impact

The awardee, The MITRE Corporation, is a large organization. There is no indication that small businesses were involved as subcontractors or partners in this specific award, suggesting limited direct impact on the small business sector for this contract.

Oversight & Accountability

The 'Not Competed' status warrants scrutiny from oversight bodies to ensure the justification for sole-source procurement was sound and that the pricing is reasonable. Continuous monitoring of the Cost Plus Fixed Fee elements is crucial.

Related Government Programs

Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology)
Department of Homeland Security Contracting
Office of Procurement Operations Programs

Risk Flags

Lack of competitive bidding.
Potential for cost overruns with CPFF.
Limited transparency in pricing.
No clear small business participation.
Reliance on a single, non-competed provider.

Frequently Asked Questions

What is this federal contract paying for?

Department of Homeland Security awarded $24.2 million to THE MITRE CORPORATION. SYSTEM ENGINEERING AND ACQUISITION EXPERTISE FOR CAPABILITY DELIVERY (CD) AND COMMON VULNERABILITIES AND EXPOSURES (CVE), COMMON WEAKNESS ENUMERATION (CWE) PROGRAM

Who is the contractor on this award?

The obligated recipient is THE MITRE CORPORATION.

Which agency awarded this contract?

Awarding agency: Department of Homeland Security (Office of Procurement Operations).

What is the total obligated amount?

The obligated amount is $24.2 million.

What is the period of performance?

Start: 2024-04-17. End: 2026-03-16.

What is the specific justification for awarding this contract sole-source to The MITRE Corporation, and how does it align with federal procurement regulations for non-competitive awards?

Federal regulations permit sole-source awards under specific circumstances, such as when only one responsible source can provide the required supplies or services. For this contract, the justification likely centers on MITRE's unique expertise in system engineering, cybersecurity vulnerability analysis (CVE/CWE), and its established role within the government's R&D landscape. A thorough review would confirm if these unique capabilities meet the stringent criteria for a sole-source justification, ensuring fair and reasonable pricing and necessity.

How will the Cost Plus Fixed Fee (CPFF) structure be managed to ensure cost efficiency and prevent potential overruns, given the R&D nature of the work?

Effective management of a CPFF contract for R&D requires robust oversight. This includes detailed cost tracking, regular performance reviews, and clear communication channels between DHS and MITRE. The fixed fee component incentivizes MITRE to control costs to maximize profit. However, the 'cost-plus' element means the government bears the risk of cost increases. Strong program management and defined milestones are essential to monitor progress and control expenditures.

What are the measurable outcomes expected from this contract in terms of improved system security and capability delivery, and how will their achievement be assessed?

Measurable outcomes would likely include the identification and mitigation of specific system vulnerabilities, the successful implementation of new capabilities, and the enhancement of existing systems' security posture. Assessment would involve defined metrics such as the number of vulnerabilities addressed, the reduction in system weaknesses, the successful deployment of new functionalities, and positive feedback on capability improvements. Regular reporting and performance evaluations against these metrics will be key.

Industry Classification

NAICS: Professional, Scientific, and Technical Services › Scientific Research and Development Services › Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology)

Product/Service Code: RESEARCH AND DEVELOPMENT › General Science and Technology R&D Services

Competition & Pricing

Extent Competed: NOT COMPETED

Solicitation Procedures: ONLY ONE SOURCE

Pricing Type: COST PLUS FIXED FEE (U)

Evaluated Preference: NONE

Contractor Details

Address: 7515 COLSHIRE DR, MC LEAN, VA, 22102

Business Categories: Category Business, Corporate Entity Tax Exempt, Nonprofit Organization, Not Designated a Small Business, Special Designations, U.S.-Owned Business

Financial Breakdown

Contract Ceiling: $57,803,953

Exercised Options: $57,803,953

Current Obligation: $24,181,002

Actual Outlays: $22,635,870

Subaward Activity

Number of Subawards: 11

Total Subaward Amount: $5,317,520

Contract Characteristics

Commercial Item: COMMERCIAL PRODUCTS/SERVICES PROCEDURES NOT USED

Cost or Pricing Data: YES

Parent Contract

Parent Award PIID: 70RSAT20D00000001

IDV Type: IDC

Timeline