DHS awarded $25.5M to MITRE for cybersecurity and systems engineering support

Contract Overview

Contract Amount: $25,456,010 ($25.5M)

Contractor: THE Mitre Corporation

Awarding Agency: Department of Homeland Security

Start Date: 2019-04-16

End Date: 2020-04-15

Contract Duration: 365 days

Daily Burn Rate: $69.7K/day

Competition Type: NOT COMPETED

Pricing Type: COST PLUS FIXED FEE

Sector: R&D

Official Description: PERIOD OF PERFORMANCE: 4/16/2019 THROUGH 4/15/2020 (NTP PROVIDED VIA EMAIL ON 4/15/2019) THE PURPOSE OF THIS TASK ORDER WITH MITRE IS TO PROVIDE SYSTEMS ENGINEERING, INTEGRATION, ACQUISITION, PROGRAM MANAGEMENT, AND CYBER SECURITY SUBJECT MATTER EXPERTISE TO DEFINE, DEVELOP, AND DEPLOY NCPS AND CDM CAPABILITIES ACROSS THE FEDERAL DEPARTMENTS/AGENCIES (D/AS) THAT MAKE UP THE .GOV DOMAIN.

Place of Performance

Location: MCLEAN, FAIRFAX County, VIRGINIA, 22102

State: Virginia Government Spending

Plain-Language Summary

Department of Homeland Security obligated $25.5 million to THE MITRE CORPORATION for work described as: PERIOD OF PERFORMANCE: 4/16/2019 THROUGH 4/15/2020 (NTP PROVIDED VIA EMAIL ON 4/15/2019) THE PURPOSE OF THIS TASK ORDER WITH MITRE IS TO PROVIDE SYSTEMS ENGINEERING, INTEGRATION, ACQUISITION, PROGRAM MANAGEMENT, AND CYBER SECURITY SUBJECT MATTER EXPERTISE TO DEFINE… Key points: 1. Contract focused on enhancing cybersecurity and system integration across federal agencies. 2. MITRE, a federally funded research and development center (FFRDC), has unique expertise in this domain. 3. The contract was not competed, raising questions about potential cost efficiencies. 4. Performance period was one year, aligning with typical task order structures. 5. The task order falls under research and development, specifically in physical, engineering, and life sciences. 6. Cybersecurity and system deployment are critical functions for the .GOV domain's integrity.

Value Assessment

Rating: fair

The award of $25.5 million to MITRE for a one-year period represents a significant investment in specialized R&D services. Benchmarking this against similar contracts is challenging due to MITRE's unique FFRDC status, which often involves direct negotiation rather than competitive bidding. While MITRE provides essential expertise, the lack of competition means direct price comparisons to the open market are not feasible. The value proposition hinges on MITRE's specialized knowledge and ability to address complex national cybersecurity challenges.

Cost Per Unit: N/A

Competition Analysis

Competition Level: sole-source

This task order was awarded directly to The MITRE Corporation without a competitive bidding process. As a non-profit, federally funded research and development center (FFRDC), MITRE often receives sole-source awards for its specialized expertise and objective research capabilities. This approach allows for rapid deployment of critical services but bypasses the price discovery mechanisms inherent in full and open competition.

Taxpayer Impact: Taxpayers may not benefit from the cost savings that can arise from a competitive bidding process. However, the specialized nature of the work and MITRE's unique position may justify the direct award for ensuring critical national security functions are met effectively.

Public Impact

Federal agencies within the .GOV domain benefit from enhanced cybersecurity and system integration capabilities. Services provided include systems engineering, integration, acquisition, program management, and cybersecurity expertise. The contract aims to define, develop, and deploy critical capabilities across various federal departments. Workforce implications include leveraging specialized subject matter experts to bolster federal IT infrastructure security.

Waste & Efficiency Indicators

Waste Risk Score: 50 / 10

Warning Flags

Lack of competition may lead to higher costs than a competitively bid contract.
Sole-source awards can limit opportunities for other qualified contractors, including small businesses.
Reliance on a single entity for critical cybersecurity expertise could pose a risk if that entity faces challenges.

Positive Signals

MITRE's FFRDC status ensures access to highly specialized and objective technical expertise.
Direct award facilitates rapid response to urgent cybersecurity needs.
Focus on critical .GOV domain infrastructure enhances national security.

Sector Analysis

This contract falls within the Research and Development sector, specifically focusing on IT and cybersecurity services. The market for cybersecurity and systems engineering support for government agencies is substantial, with numerous contractors vying for opportunities. MITRE, as an FFRDC, occupies a unique position, often serving as a trusted advisor and implementer for complex government IT initiatives. Comparable spending in this area is high, reflecting the ongoing need for robust federal IT infrastructure and cybersecurity.

Small Business Impact

As a sole-source award to MITRE, a large FFRDC, this contract does not appear to include specific small business set-asides. There is no indication of subcontracting requirements for small businesses within the provided data. This limits direct opportunities for small businesses to participate in this specific contract, though they may compete for other related federal IT and cybersecurity work.

Oversight & Accountability

Oversight for this task order would typically fall under the Department of Homeland Security's contracting and program management offices. As a task order under a larger contract vehicle, its execution is subject to the oversight mechanisms of that vehicle. Transparency is generally maintained through contract reporting, but the sole-source nature limits public insight into the negotiation and justification process compared to competitive awards. Inspector General jurisdiction would apply to any allegations of fraud, waste, or abuse.

Related Government Programs

Cybersecurity Modernization Initiative
Federal Information Security Management Act (FISMA) Compliance
Continuous Diagnostics and Mitigation (CDM) Program
General Services Administration (GSA) IT Schedule Contracts
Department of Homeland Security (DHS) Cybersecurity Programs

Risk Flags

Sole-source award lacks competitive pricing.
Potential for cost overruns due to lack of competition.
Limited visibility into specific performance metrics for this task order.

Frequently Asked Questions

What is this federal contract paying for?

Department of Homeland Security awarded $25.5 million to THE MITRE CORPORATION. PERIOD OF PERFORMANCE: 4/16/2019 THROUGH 4/15/2020 (NTP PROVIDED VIA EMAIL ON 4/15/2019) THE PURPOSE OF THIS TASK ORDER WITH MITRE IS TO PROVIDE SYSTEMS ENGINEERING, INTEGRATION, ACQUISITION, PROGRAM MANAGEMENT, AND CYBER SECURITY SUBJECT MATTER EXPERTISE TO DEFINE, DEVELOP, AND DEPLOY NCPS AND CDM CAPABILITIES ACROSS THE FEDERAL DEPARTMENTS/AGENCIES (D/AS) THAT MAKE UP THE .GOV DOMAIN.

Who is the contractor on this award?

The obligated recipient is THE MITRE CORPORATION.

Which agency awarded this contract?

Awarding agency: Department of Homeland Security (Office of Procurement Operations).

What is the total obligated amount?

The obligated amount is $25.5 million.

What is the period of performance?

Start: 2019-04-16. End: 2020-04-15.

What is MITRE's specific role and expertise in federal cybersecurity and systems engineering?

The MITRE Corporation is a non-profit, federally funded research and development center (FFRDC) that operates independently to provide objective analysis and technical expertise to government agencies. For this task order, MITRE's role was to provide specialized subject matter expertise in systems engineering, integration, acquisition, program management, and cybersecurity. Their focus was on defining, developing, and deploying capabilities for the National Cybersecurity Protection System (NCPS) and Continuous Diagnostics and Mitigation (CDM) programs across the federal .GOV domain. This involves understanding complex interdependencies within federal IT systems, identifying vulnerabilities, and recommending and implementing solutions to enhance security and operational efficiency.

How does the value of this contract compare to similar cybersecurity support contracts?

Directly comparing the value of this $25.5 million, one-year contract to similar cybersecurity support contracts is complex due to MITRE's unique FFRDC status and the sole-source nature of the award. FFRDCs often command higher rates due to their specialized, objective, and long-term relationship with the government, which bypasses typical competitive procurement processes. While other cybersecurity support contracts might be competitively bid and potentially lower in cost per hour or deliverable, they may not offer the same depth of integrated systems engineering and R&D focus that MITRE provides. The value is derived from MITRE's specific mandate and expertise rather than market price competition.

What are the primary risks associated with a sole-source award to MITRE for these services?

The primary risk associated with a sole-source award to MITRE is the potential for higher costs compared to a competitively procured contract, as the government does not benefit from price discovery through multiple bids. Another risk is the limited opportunity for other highly capable contractors, including small businesses, to participate and innovate. Furthermore, over-reliance on a single entity, even a trusted FFRDC like MITRE, for critical functions like cybersecurity could pose a systemic risk if MITRE encounters operational challenges or if its strategic direction diverges from agency needs. However, MITRE's FFRDC charter aims to mitigate some of these risks through objectivity and a focus on national interest.

How effective are NCPS and CDM capabilities in protecting the .GOV domain?

The National Cybersecurity Protection System (NCPS) and Continuous Diagnostics and Mitigation (CDM) programs are foundational to the U.S. government's efforts to protect the .GOV domain. NCPS, often referred to as Einstein, provides intrusion detection and prevention capabilities across federal networks. CDM offers agencies a suite of tools and services to identify cybersecurity risks, detect threats, and improve their overall security posture by providing continuous monitoring of assets and vulnerabilities. While these programs have significantly enhanced federal cybersecurity, their effectiveness is an ongoing challenge due to the evolving threat landscape, the complexity of federal IT infrastructure, and the need for consistent implementation and utilization across all agencies. Continuous improvement and adaptation are key to their sustained effectiveness.

What is the historical spending trend for cybersecurity and systems engineering support at DHS?

Historical spending by the Department of Homeland Security (DHS) on cybersecurity and systems engineering support has been substantial and generally increasing over the years, reflecting the growing cyber threats and the critical nature of DHS's mission. DHS is a primary target for cyberattacks and is responsible for protecting critical infrastructure, making significant investments in these areas essential. Spending often involves a mix of internal capabilities, contracts with FFRDCs like MITRE, and awards to numerous private sector IT and cybersecurity firms. While specific year-over-year trends for this exact type of task order are not detailed here, the overall budget allocation for cybersecurity within DHS consistently represents a significant portion of its operational and developmental expenditures.

Industry Classification

NAICS: Professional, Scientific, and Technical Services › Scientific Research and Development Services › Research and Development in the Physical, Engineering, and Life Sciences (except Biotechnology)

Product/Service Code: RESEARCH AND DEVELOPMENT › OTHER RESEARCH/DEVELOPMENT

Competition & Pricing

Extent Competed: NOT COMPETED

Solicitation Procedures: ONLY ONE SOURCE

Pricing Type: COST PLUS FIXED FEE (U)

Evaluated Preference: NONE

Contractor Details

Address: 7515 COLSHIRE DR, MC LEAN, VA, 22102

Business Categories: Category Business, Corporate Entity Tax Exempt, Nonprofit Organization, Not Designated a Small Business, Special Designations, U.S.-Owned Business

Financial Breakdown

Contract Ceiling: $26,431,989

Exercised Options: $25,456,010

Current Obligation: $25,456,010

Subaward Activity

Number of Subawards: 1

Total Subaward Amount: $196,988

Contract Characteristics

Commercial Item: COMMERCIAL PRODUCTS/SERVICES PROCEDURES NOT USED

Cost or Pricing Data: YES

Parent Contract

Parent Award PIID: HSHQDC14D00006

IDV Type: IDC

Timeline