Summary of Requirements (complete).pdf

NCIA/ACQ/2025/07052

Annex A – Summary of Requirements

Project No. 2022/0IS03005, CP9A3201

1. Project Objective

The project aims to establish a state-of-the-art cyber threat analysis platform. The Contractor shall build an updated and effective solution to receive existing commercial and specific internal feeds, perform the analysis and processing, and integrate to other existing cyber security systems to allow timely, accurate and effective use of the intelligence.

2. Scope of Work

The project encompasses the design, implementation, and licensing of a commercially off-the-shelf (‘COTS’) platform for the processing and ingestion of CTI data/information originating from different sources already existing in NATO. The work includes:

1. Refinement of Solution Requirements and design;

2. Any implementation activity (installation, configuration, ...) on required network segments with different classifications including NATO UNCLASSIFIED, NATO RESTRICTED and NATO SECRET;

3. Integration to existing systems for input / output flows and hosting infrastructure;

4. Documentation of the implemented solution (e.g. system manuals, administration manuals, user manuals, CIS descriptions, Service Level Agreements, etc.);

5. Support to testing and validation of the solution (i.e. FAT, SAT, and UAT) prior to final deployment;

6. Support to transitioning the implementation from the contractor to operations; and

7. Training on the new CTI capabilities, their operation and usage, and enhancements that these may bring in terms of doctrine (i.e. processes) and interoperability (i.e.

ingestion/consumption of CTI data from other sources).

The expected outcome of this project is to have improved CTI handling and sharing capability by introducing automation, improved control and better visibility. This will be achieved through a state-of-the-art CTI capability that is integrated across NATO systems and entities.

This capability will be procured with BOA+ on a Firm Fixed Price Basis to the Lowest Priced

Technically Compliant Bidder.

3. Period of Performance

NCIA/ACQ/2025/07052

The period of performance is expected to start in Q1 2026 and end in Q1 2029. It is important to note that this timeline represents the anticipated duration of the project and adjustments may be made asper the requirements of the solicitation process and the subsequent contractual arrangements.

4. Warranty and O&M Support

a. Following acceptance of the final operational delivery, the contract will require warranty for any software delivered.

b. The contract is expected to include O&M support following acceptance of the final operational delivery.