DHS releases OTFPP Solicitation seeking Threat Intelligence Enterprise Services (TIES) Cybersecurity Threat Intelligence (CTI) Platform MVP

Notice ID: 70RCSJ24R00000010

This Other Transaction for Prototype Project (OTFPP) program solicitation is being released to develop and establish a THREAT INTELLIGENCE ENTERPRISE SERVICES (TIES) CYBERSECURITY THREAT INTELLIGENCE (CTI) PLATFORM CTI platform Minimum Viable Product (MVP).

The scope of this contract is to develop and establish a CTI exchange platform and data feeds for use initially by FCEB agencies for the TIES Minimum Viable Product (MVP). Authorities and resources permitting, coverage requirements over the Period of Performance (PoP) of this contract may expand to include State Fusion Centers (listed here: Fusion Center Locations and Contact Information | Homeland Security (dhs.gov)), Information Sharing and Analysis Centers and election and NSSE security organizations, state and local governments, Legislative and Judicial branch entities and other critical infrastructure organizations.

The TIES CTI exchange platform shall be a one stop integration point for analysts and infrastructure to receive, share and collaborate on relevant and timely CTI, enabling teams to protect their environments and others. The TIES platform shall support integrations with government systems (i.e., Automated Indicator Sharing (AIS), the Continuous Diagnostics and Mitigation (CDM) Program, agency run Threat Intel Platforms (TIPs)/ Security information and event management (SIEM)/ Security orchestration, automation, and response (SOAR) tools, etc.) as well as commercial threat feeds.

Additionally, the platform must foster bi-directional sharing capabilities which will foster collaboration and allow analysts to work with others to further enrich CTI.

In addition to the MVP solution, the government requires CTI services to supplement the CTI Exchange Platform capabilities. These CTI Services includes: Research and Analysis, Embedded Analyst Support, RFI and CTI Briefing Support, and Domain Takedowns and Mitigations. CISA and participating organizations operate in a dynamic landscape. The TIES offering may include additional CTI Services which would be identified, specified and consumed as needed throughout the period of performance. That is, CISA may request and identfiy specific capabilities to be delivered to any or all participating entities. The contractor shall remain flexible to support and execute a wide variety of needs as the CTI evolves over the PoP. Given the wide set of potential end-user organizations participating, CISA desires that the Contractor offers the Government advantageous cost-effective solution. The TIES end state must have inherent flexibility to support a wide range of potential user bases and use cases which may require from a contractor that optimizes execution via teaming arrangements or other streamlined approaches.

More here.

🔊 Listen to Story