GSA awards $43.9M for CDM tools and CMAAS integration to ManTech, supporting non-CFO Act agencies

Contract Overview

Contract Amount: $43,894,012 ($43.9M)

Contractor: Mantech Advanced Systems International, Inc.

Awarding Agency: General Services Administration

Start Date: 2016-06-29

End Date: 2020-07-31

Contract Duration: 1,493 days

Daily Burn Rate: $29.4K/day

Competition Type: FULL AND OPEN COMPETITION

Number of Offers Received: 2

Pricing Type: TIME AND MATERIALS

Sector: IT

Official Description: THE PURPOSE OF THIS TASK ORDER (TO) IS TO PROCURE CONTINUOUS DIAGNOSTICS AND MITIGATION (CDM) TOOLS AND SENSORS AND THE ASSOCIATED CONTINUOUS MONITORING AS A SERVICE (CMAAS) INTEGRATION TO SUPPORT THE NON-CHIEF FINANCIAL OFFICER (CFO) ACT FEDERAL AGENCIES AND THEIR COMPONENTS. IGF::OT::IGF.

Place of Performance

Location: ARLINGTON, ARLINGTON County, VIRGINIA, 22203

State: Virginia Government Spending

Plain-Language Summary

General Services Administration obligated $43.9 million to MANTECH ADVANCED SYSTEMS INTERNATIONAL, INC. for work described as: THE PURPOSE OF THIS TASK ORDER (TO) IS TO PROCURE CONTINUOUS DIAGNOSTICS AND MITIGATION (CDM) TOOLS AND SENSORS AND THE ASSOCIATED CONTINUOUS MONITORING AS A SERVICE (CMAAS) INTEGRATION TO SUPPORT THE NON-CHIEF FINANCIAL OFFICER (CFO) ACT FEDERAL AGENCIES AND THEIR COMPONENTS. IG… Key points: 1. Contract focuses on cybersecurity tools and services for federal agencies. 2. Competition was full and open, suggesting a competitive bidding process. 3. The contract duration of approximately 4 years indicates a significant, long-term need. 4. The use of Time and Materials pricing may present cost control challenges. 5. This award falls under IT services, specifically computer systems design. 6. The contract supports agencies not typically covered by CFO Act financial reporting requirements.

Value Assessment

Rating: fair

The total award of $43.9 million over roughly four years for Continuous Diagnostics and Mitigation (CDM) tools and Continuous Monitoring as a Service (CMAAS) integration appears to be within a reasonable range for large-scale cybersecurity deployments. However, without specific benchmarks for the exact tools and services procured, a precise value-for-money assessment is difficult. The Time and Materials (T&M) contract type, while flexible, can sometimes lead to higher costs if not managed diligently, compared to fixed-price contracts. The number of bids received (2) is on the lower side for a full and open competition, which might suggest less aggressive pricing than a more crowded field.

Cost Per Unit: N/A

Competition Analysis

Competition Level: full-and-open

This contract was awarded under full and open competition, indicating that all responsible sources were permitted to submit offers. However, only two bids were received. While full and open competition is generally preferred for maximizing price discovery and ensuring fair access, the low number of bidders could suggest potential limitations in the market for these specific services or a complex solicitation process that deterred broader participation. This level of competition may not have driven the most aggressive pricing.

Taxpayer Impact: Taxpayers benefit from the principle of full and open competition, which aims to ensure fair pricing. However, with only two bids, the potential for significant cost savings may have been limited compared to a scenario with more robust competition.

Public Impact

Federal agencies, particularly those not subject to the CFO Act, will receive enhanced cybersecurity capabilities through the deployment of CDM tools and CMAAS integration. The services delivered aim to improve the continuous monitoring of federal IT systems, identify vulnerabilities, and mitigate cyber threats. The geographic impact is nationwide, as it supports non-CFO Act agencies across the federal government. Workforce implications include the need for skilled personnel to implement, manage, and utilize the procured cybersecurity tools and services.

Waste & Efficiency Indicators

Waste Risk Score: 50 / 10

Warning Flags

Time and Materials (T&M) contract type can lead to cost overruns if not closely monitored.
Low number of bidders (2) in a full and open competition may indicate limited market interest or high barriers to entry, potentially impacting price competitiveness.
The scope of 'CDM tools and sensors' is broad, requiring careful management to ensure specific needs are met without scope creep.

Positive Signals

Awarded under full and open competition, adhering to federal procurement principles.
Supports critical cybersecurity infrastructure for federal agencies, enhancing national security.
The contract duration of nearly four years allows for sustained cybersecurity improvements and integration.

Sector Analysis

This contract falls within the Information Technology (IT) sector, specifically focusing on cybersecurity solutions. The market for cybersecurity tools and services, including Continuous Diagnostics and Mitigation (CDM) and Continuous Monitoring as a Service (CMAAS), is substantial and growing rapidly within the federal government. Federal agencies are increasingly investing in these areas to defend against evolving cyber threats. Comparable spending benchmarks for similar large-scale cybersecurity deployments can vary widely based on scope, but multi-million dollar awards are common for comprehensive solutions.

Small Business Impact

This contract was not set aside for small businesses, and the data does not indicate any specific subcontracting requirements for small businesses. The prime contractor, ManTech Advanced Systems International, Inc., is a large business. This means that the direct economic benefit to the small business ecosystem from this specific award is likely minimal, unless ManTech actively engages small businesses as subcontractors for specialized services or components.

Oversight & Accountability

Oversight for this contract would primarily fall under the General Services Administration (GSA), specifically the Federal Acquisition Service, which awarded the Delivery Order. The contract type (Time and Materials) necessitates robust oversight to manage costs and ensure performance aligns with the Statement of Work. Accountability measures would be tied to performance metrics and delivery schedules. Transparency is generally maintained through federal procurement databases like FPDS-NG, where contract actions are reported.

Related Government Programs

Continuous Diagnostics and Mitigation (CDM) Program
Cybersecurity Services
IT Infrastructure Modernization
Federal Information Security Management Act (FISMA) Compliance

Risk Flags

Potential for cost overruns due to Time and Materials pricing.
Limited competition (2 bidders) may impact price competitiveness.
Complexity of integrating diverse CDM tools and CMAAS.

Frequently Asked Questions

What is this federal contract paying for?

General Services Administration awarded $43.9 million to MANTECH ADVANCED SYSTEMS INTERNATIONAL, INC.. THE PURPOSE OF THIS TASK ORDER (TO) IS TO PROCURE CONTINUOUS DIAGNOSTICS AND MITIGATION (CDM) TOOLS AND SENSORS AND THE ASSOCIATED CONTINUOUS MONITORING AS A SERVICE (CMAAS) INTEGRATION TO SUPPORT THE NON-CHIEF FINANCIAL OFFICER (CFO) ACT FEDERAL AGENCIES AND THEIR COMPONENTS. IGF::OT::IGF.

Who is the contractor on this award?

The obligated recipient is MANTECH ADVANCED SYSTEMS INTERNATIONAL, INC..

Which agency awarded this contract?

Awarding agency: General Services Administration (Federal Acquisition Service).

What is the total obligated amount?

The obligated amount is $43.9 million.

What is the period of performance?

Start: 2016-06-29. End: 2020-07-31.

What is ManTech's track record with similar federal cybersecurity contracts?

ManTech Advanced Systems International, Inc. has a significant history of performing federal IT and cybersecurity services. They have been awarded numerous contracts across various agencies, including the Department of Defense and civilian agencies, for work related to network security, threat detection, data protection, and system integration. Their experience often includes large-scale deployments and managed services. Reviewing their past performance on similar CDM or CMAAS-related contracts, including any reported issues or successes, would provide further insight into their capability to execute this specific task order effectively. Data on contract modifications, past performance evaluations, and any disputes or claims would be crucial for a comprehensive assessment.

How does the $43.9 million cost compare to similar cybersecurity tool procurements?

Benchmarking the $43.9 million cost requires a detailed understanding of the specific Continuous Diagnostics and Mitigation (CDM) tools, sensors, and the scope of Continuous Monitoring as a Service (CMAAS) integration procured. For large federal cybersecurity initiatives, this figure can be considered moderate to significant. For instance, broader CDM program phases or agency-wide cybersecurity modernization efforts have seen costs ranging from tens to hundreds of millions of dollars. The key comparison points would be the number of endpoints covered, the sophistication of the tools, the level of managed services included, and the duration of the contract. Given this is a Delivery Order under a larger contract vehicle, its cost is relative to the overall ceiling and the specific task requirements.

What are the primary risks associated with this Time and Materials (T&M) contract?

The primary risk with a Time and Materials (T&M) contract is the potential for cost overruns, as the government pays for the labor hours and materials used, rather than a fixed price. This necessitates stringent oversight by the contracting agency to ensure efficient use of resources and prevent scope creep. If not managed effectively, T&M contracts can become more expensive than fixed-price alternatives. Other risks include potential delays if contractor resources are not adequately allocated or if unforeseen technical challenges arise. Ensuring clear task definitions and regular progress reviews are critical mitigation strategies for T&M contracts.

How effective are CDM tools and CMAAS in improving federal cybersecurity posture?

Continuous Diagnostics and Mitigation (CDM) tools and Continuous Monitoring as a Service (CMAAS) are designed to significantly enhance federal cybersecurity posture by providing near real-time visibility into an agency's IT environment. CDM tools automate the identification of vulnerabilities, misconfigurations, and threats across networks and endpoints. CMAAS integrates these data feeds, often providing a centralized view and managed services for analysis and response. When implemented effectively, they enable agencies to proactively identify and address risks before they can be exploited, moving from a reactive to a more proactive security stance. Their effectiveness is contingent on proper deployment, integration with existing systems, and skilled personnel to interpret and act upon the data.

What is the historical spending trend for CDM-related procurements by the GSA?

The General Services Administration (GSA) has been a key facilitator for federal cybersecurity procurements, including those related to the CDM program. Historically, GSA has managed large contract vehicles and issued numerous Delivery Orders for CDM tools, services, and related cybersecurity solutions. Spending trends have generally shown an increasing demand for these capabilities as federal agencies face escalating cyber threats. GSA's role often involves consolidating requirements and leveraging economies of scale. Analyzing GSA's historical spending data for CDM and similar cybersecurity services would reveal a pattern of consistent investment, likely showing growth over the years as the program matured and agency needs evolved.

What does the low number of bidders (2) imply about the market for these specific services?

A low number of bidders, such as two in this full and open competition, can imply several things about the market for these specific Continuous Diagnostics and Mitigation (CDM) tools and Continuous Monitoring as a Service (CMAAS) integration services. It might suggest that the market is highly specialized, requiring unique technical expertise or certifications that only a few companies possess. Alternatively, the complexity of the solicitation, the specific requirements, or the contract type (Time and Materials) might have deterred broader participation. It could also indicate a mature market where a few dominant players exist. From a taxpayer perspective, fewer bidders may mean less competitive pricing than if there were a larger pool of interested and capable vendors vying for the contract.

Industry Classification

NAICS: Professional, Scientific, and Technical Services › Computer Systems Design and Related Services › Computer Systems Design Services

Product/Service Code: INFORMATION TECHNOLOGY EQUIPMENT (INCLD FIRMWARE) SOFTWARE,SUPPLIES& SUPPORT EQUIPMENT

Competition & Pricing

Extent Competed: FULL AND OPEN COMPETITION

Solicitation Procedures: SUBJECT TO MULTIPLE AWARD FAIR OPPORTUNITY

Offers Received: 2

Pricing Type: TIME AND MATERIALS (Y)

Evaluated Preference: NONE

Contractor Details

Parent Company: Mantech International Corporation

Address: 2251 CORPORATE PARK DRIVE, HERNDON, VA, 20171

Business Categories: Category Business, Corporate Entity Not Tax Exempt, Not Designated a Small Business, Special Designations, U.S.-Owned Business

Financial Breakdown

Contract Ceiling: $52,725,678

Exercised Options: $51,971,213

Current Obligation: $43,894,012

Actual Outlays: $-12,884

Subaward Activity

Number of Subawards: 9

Total Subaward Amount: $5,383,001

Contract Characteristics

Commercial Item: COMMERCIAL PRODUCTS/SERVICES PROCEDURES NOT USED

Parent Contract

Parent Award PIID: GS00Q09BGD0041

IDV Type: GWAC

Timeline