RFI-Advanced Forensic Capabilities for Identifying Non-Traditional Insider Data Exfiltration Methods

The Federal Bureau of Investigation's Finance and Facilities Division is issuing a Request for Information (RFI) to survey the market for advanced forensic capabilities designed to identify and trace non-traditional methods of data exfiltration from FBI-managed workstations. The procurement focuses on mature, commercially available technologies capable of forensically detecting low-tech/high-stealth exfiltration methods such as physical screen photography and covert screen captures that bypass conventional network-based data-loss prevention controls. Respondents must be U.S.-based companies with a Top Secret facility clearance and eligibility for Sensitive Compartmented Information access, demonstrating technical ability and experience operating in classified environments. The solution must maintain document integrity for discovery purposes, apply to common file types including PDF and Microsoft Office documents, and incorporate logging, timestamping, and attribution capabilities aligned with federal standards CNSSD 504 and NITTF guidance. The deadline for submission is April 22, 2026, at 10:00 AM ET, with responses limited to 10 pages and submitted to Meredith Mcie at mkmcie@fbi.gov.

This RFI carries no set-aside designations and is issued for informational and planning purposes only, constituting neither a solicitation nor a commitment to award a contract. No potential incumbents or current contractors are identified in the notice, and no specific award value or budget range is disclosed. The RFI does not provide funding for response preparation costs, which must be borne exclusively by responding organizations. While the notice specifies that respondents should identify applicable GSA or NASA SEWP contract vehicles under which services could be provided, no specific timeline for service delivery or enterprise deployment is detailed beyond the requirement for enterprise-wide deployment capability across all FBI enclaves, including air-gapped and classified networks.