IRS Sources Sought: Cybersecurity Counter Insider Threat Operations (CInT Ops) Support

Notice ID:  CYCLOPSSUPPORT

The Internal Revenue Service (IRS), Information Technology (IT) Cybersecurity organization implemented critical Counter Insider Threat (CInT) capabilities to mitigate serious risks to the IRS.  Cybersecurity manages the IRS IT Security Program in accordance with the Federal Information Security Management Act (FISMA) in tracking compliance, continuously monitoring risk, providing remediation recommendations and more. The Federal High Value Asset (HVA) initiative was established to identify, assess, and secure the Chief Financial Officers (CFO) Act and Non-CFO-Act agencies’ most critical information systems.

This task order is intended to provide technical cybersecurity CInT monitoring, analysis, and response activities for the IRS. The IRS is a large federal government agency that supports 80,000 employees with varying levels of access to information technology resources and a vast portfolio of applications, systems, and databases that must be monitored to ensure those access levels are being used as intended/defined by their role as well as guidance/policy governing acceptable behavior.

The contractor will leverage large-scale governmental experience in CInT Ops to successfully:

CInT Ops Program Management Office (PMO) Support:

• Provide direct support to CInT PMO through conducting and assisting the management of various tasks and projects including reviews, assessments, gap analyses. These activities will support the development of strategic and tactical plans in order to meet and implement various CInT related cybersecurity and privacy regulations, legislations, mandates, and directives protecting the government’s information assets.
• Advocate constructive improvements to the agency’s policies, governance, and infrastructure (i.e., agency’s User Behavior Analytics Ecosystem) to enhance the agency’s User Behavior Analytics posture.
• Provide documentation and analysis in support of legal analytics and incident response processes.

CInT Ops Monitoring, Analytics, and Incident Management:

• Employ advanced techniques to develop, enhance, and perform CInT and User Entity
• Assist with performing innovative and advanced User Behavior Analytics data analytics (e.g., machine learning) on vast stores of near real time and archived transactional data sets from across a wide range of IT systems (e.g., mainframe, servers, and network devices).
• Develop custom, complex User Behavior Analytics Use Cases, cross- organizational reporting, and risk metrics to identify and predict malicious activity.
• Identify previously undetected anomalous patterns, trends, and events that lead to the discovery of User Behavior Analytics activity supported with the associated corrective actions.

Behavior Analytics (UEBA) monitoring, analytics, and incident response related and activities from across a wide range of essential IRS IT systems.

The period of performance for this contract is 12 months from the effective date of the contract award with four (4) 12-month option periods.

Read more here.

🔊 Listen to Story