 A cogent subcontractor that was having to do quite a bit of the work apparently had been running a separate contract for CMS supporting the federal exchanges or healthcare.gov, where it was generating the data that it was then going to be validating under this new contract. Classic, classic imperative activity OCI. There was a proposed mitigation strategy, but on review, GAO decided that strategy just wasn't enough.