The IRS has implemented significant enhancements to its Cybersecurity Fraud Analytics and Monitoring (CFAM) program. This contract shall continue those programmatic successes and ensure the protection of IRS’s online applications, taxpayers’ data, and the tax revenue.
Cybersecurity Fraud Analuytics and Monitoring (CFAM)
As the IRS continues to develop and enhance the capabilities of the Cybersecurity Fraud Analytics and Monitoring Team, it is imperative that this capability is provided by leveraging this contract and delivery of the tasks identified below.
Specifically, the Fraud Analytics support is expected to ensure that the IRS has a team of forensic analysts and data scientists that are organized, trained, and equipped to do the following:
- Maintain and continuously improve the near-real-time monitoring posture to detect and treat evolving cyber threats.
- Quick responses, near immediate acknowledgement and initial observations expected to be reported within one week, to tips, incidents, and suspicious activities. Such responses include identification of the threats’ nature, root-cause analysis, and recommendation for immediate action and future mitigation.
- Conduct complex analytics on large transactional data sets to identify anomalous patterns in users’ activity and build and refine predictive models to classify anomalous transactions.
- Conduct deep forensics analysis of incidents and anomalies with log data to identify new use case patterns of behavior and potential attack vectors as input into the predictive analytics, as well as deep analysis of potential anomalous activity isolated by the predictive analysis.
- Review and support the data architecture and data elements design, improvement, analysis, and extract-transform-load (ETL) operation of the entire SADI/CSPs/Applications ecosystem …
The Fraud Analytics Team’s operational functions are comprised of several critical processes to prevent, detect, and support the response to fraud incidents. This Fraud Analytics contract support shall provide the following basic services:
- Monitor – Maintain a near-real-time 24x7x365 monitoring posture, with continuously improved indicators/models, and standardized incidence response workflow and procedures.
- Prevention – Provide monthly recommendation reports to communicate their suggested improvements to IRS’s applications, processes, and policies to defend against and defeat future fraudulent activities …
The period of performance for this work is anticipated to be 12 months from the effective date of the Task Order award with four (4) 12-month option periods.
Want to get involved with OS AI? - A small number of Sponsorship Opportunities are now available here. Starting at $500.