FBI_RFI_OCIO_Attachment_01.pdf

ATTACHMENT 01 – REQUIREMENTS

1 Red Team

The FBI’s Red Team uses offensive tools and techniques to emulate cyber threats to FBI operational systems and networks. Their approach will vary, mimicking both an advanced external threat as well as a trusted insider and are objective based. Operations are conducted under a specific time constraint, with the goal to not simply achieve an objective but to find as many ways as possible to achieve an objective within the time allotted.

2 BLUE Team

The FBI Blue Team performs advanced operational vulnerability assessments using a variety of subject matter experts to identify risk; they also provide incident response, and threat hunting services.

3 Enterprise Vulnerability Assessment Program (EVAP)

The team leverages security and vulnerability assessment SMEs adept at interpreting and assessing security controls to support multiple information assurance programs at the FBI. The team is also responsible for building, operating, and supporting the FBI’s enterprise vulnerability scanning solution and ISSO toolbox.

4 Enterprise Information Security Unit (EISU) Vulnerability Team

Contractor resources to provide critical vulnerability management support and process improvement to include Vulnerability Management Analyst – to provide reporting of FBI’s response to vulnerabilities identified, and Process Improvement Consultant – to develop a vulnerability management reporting process improvement plan.

5 Enterprise Security Operation Center (ESOC) Incident Response Team

In the event of a cybersecurity attack against the FBI, the ESOC IRT acts as first responder, performing actions such as shutting down or isolating endpoints, terminating harmful processes (or preventing them from executing), quarantining and/or deleting files, as well as additional remediation activities. The team will also analyze ESOC's existing backlog of incident reports to identify potential ongoing compromises and recommended responses.

6 Enterprise Cybersecurity and Information Assurance Services Team

The FBI is interested in contractor support on systems like the Land Mobile Radio Network (LMR), Radio Over Internet Protocol (ROIP), Voice over Internet Protocol (VoIP), RiskVision and XACTA, to assure programs receive reaccreditation and exploring next generation applications.