Enterprise cyber analytics_RFI
Closed Pre-Solicitation Posted
- Solicitation number
- ECA_RFI_2024
- Agency
-
Assisted Acquisition Services FEDSIM
Assisted Acquisition Services, General Services Administration
- Responses due
- Set-aside
- No set-aside
Opportunity facts
- NAICS code
- Not on record
- PSC
- Not on record
- Place of performance
- Fayetteville, North Carolina, United States
Notice details come from SAM.gov. Updated .
About this opportunity
The General Services Administration Federal Acquisition Service Assisted Acquisition Services Federal Systems Integration and Management Center seeks information on enterprise cyber analytics tools to support Department of Defense special operations forces under a zero trust architecture. Capabilities should include log management, data storage, security information and event management analytics, IT operations integration, security orchestration and automation for prevention and response. Collaboration between industry partners providing an integrated solution balancing cost and performance will be considered. Interested parties should respond by March 6, 2024 detailing experience meeting thresholds and objectives for the capabilities.
There is no set-aside designation. Responses should address capabilities in analytics and visualization as well as automation and orchestration to support development of an integrated system meeting cyber analytics requirements. No incumbent or budget information was provided, though the tools will support ongoing logging and monitoring of DOD information systems to improve network resilience and security through real-time intelligence and proactive data use.
Notice text
This request is for information only regarding Enterprise Cyber Analytics tools which support business and security operations in a multi-classification Department of Defense (DoD) architecture following the DoD Zero Trust (ZT) paradigm. The capabilities have been grouped into two categories: those supporting Analytics & Visualization and those supporting Automation & Orchestration. Failure to identify a capability in one category will not be identified as a failure in another category. Collaboration may be possible between industry partners to provide an integrated solution for Enterprise Cyber Analytics which meets regulatory requirements and desired functionality.
Current Federal and DoD regulations require logging and monitoring of enterprise information systems. These activities are leveraged for the purpose of improving network resilience, increased security, and improved operations through the application of an enterprise cyber analytics program. Through proactive use of captured data, analytics tools provide near real-time intelligence to support Security Operations Center (SOC) and Network Operations Center (NOC) teams. In the context of ZT, SIEM and SOAR tools are integrated to support Analytics, Visualization, and Automation objectives. While capabilities in Table 1 are divided into SIEM and SOAR, a response which answers one capability may be appropriate since the development of a holistic analytics program may consist of multiple integrated products. For example, solutions which efficiently address automation and integration with case management may marry with another solution providing efficient and economical logging, log retention, and log management to deliver an acceptable solution.
Files
| File | Type | Posted |
|---|---|---|
| ENTERPRISE CYBER ANALYTICS_RFI_Amendment 001.pdf | ||
| ENTERPRISE CYBER ANALYTICS_RFI.pdf |
On GovTribe
Work this opportunity
- Track it in your pipeline
- Find teaming partners
- Similar opportunities
- Ask GovTribe AI about this opportunity