II. F. Brand Name Specification Redacted.pdf

v1.6_FEBRUARY2021 administrative burden to conduct these spot checks manually

The ability to map privacy data across the command will help to ensure that the information being collected it necessary and not maintained past the Navy's requirement. Knowing where the data resides at rest will allow for safeguards to be put in place so that only those with a need to know have access and that proper transfer of information is conducted at the end of a person's employment at the command reducing the potential for privacy breaches.

It is the Navy's responsibility to protect unauthorized access and disclosure of sensitive PII and to safeguard that data with the appropriate administrative, technical, and physical controls to ensure the security of the records and to prevent compromise or misuse during storage, transfer, or use.

NUWCDIVNPT requires an easily implemented product. Spirion, LLC enables the accurate discovery of sensitive data on endpoints, file-shares, email, cloud applications, and databases.

Coverage also includes all file-types, include image-based files. Pre-built sensitive data-definitions extend well beyond regular expressions, to ensure very low false positive-rates.

Custom Sensitive Data Definitions can be logically built through a graphic interface to allow for accurate discovery and classification of CUI and unique sensitive data types.

Spirion enables security administrators to persistently classify sensitive data with metadata tags, for easier visibility to Next-Generation Firewall (NGFW), Cloud Access Security Brokers (CASBs), Data Loss Prevention (DLP) and additional downstream controls. Administrators and business users can review classification results securely through its interface, allowing immediate or scheduled reviews and take action.

Spirion provides real time, highly scalable alerting on sensitive data based on prioritized risk.

This capability spots, alerts and remediates/protects when sensitive data is in out-of-policy locations or past its retention period. The Spirion dashboard combines and presents all key information about the existence of sensitive data across the information environment, with trending analysis segmented by tag groups (users, devices, business units, classifications etc.).

This is key for Incidence Response (IR) and Forensics, as well as targeting focus for Security Information Even Management (SIEM) and additional data protection monitoring ala DLP functionality found in many controls.

v1.6_FEBRUARY2021

Spirion is only available from authorized resellers. An extensive amount of time and resources have been spent implementing Spirion and developing processes and procedures using the results it provides. In order to continue and further develop this capability Spirion software is required.

If continued use of this capability were stopped and a lesser substitute were purchased, the amount of resources needed to achieve anywhere near the results we have achieved would double in time and cost.

RESELLERS:

Resellers must be an authorized Spirion, LLC reseller.

Requiring Department:

Based on the above, I recommend this acquisition be conducted on a Brand Name Specification basis. I certify the technical data which form the basis of this justification are complete and accurate.

Date

APPROVAL:

Contracting Officer:

Based on the above, I have determined that the circumstances of the contract action deem only only this brand can fulfill the requirements. I certify that this justification is accurate and complete to the best of my knowledge and belief.

Date