Search Contract Opportunities

CISA COCO Industry Day: CISA Capacity Building (CB) Cybersecurity Shared Services Office (CSSO) Threat Information Enterprise Services (TIES)

Type: Special Notice • Match:  95%
Opportunity Assistant

Hello! Please let me know your questions about this opportunity. I will answer based on the available opportunity documents.

Please sign-in to link federal registration and award history to assistant. Sign in to upload a capability statement or catalogue for your company

Popular Questions:

Description

Background
The U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) Capacity Building (CB) Cybersecurity Shared Services Office (CSSO) is seeking to develop the Threat Information Enterprise Services (TIES) to consolidate and standardize cyber threat intelligence (CTI) tools, services, and data across the Federal Civilian Executive Branch (FCEB) and other stakeholders. CSSO aims to leverage CISA’s capabilities and industry solutions to enhance threat visibility, improve actionable intelligence, achieve economy of scale, and centralize CTI requirements into a unified, CISA-branded enterprise service.

Work Details
Provide a notional CTI platform incorporating commercial feeds, CISA tools (ServiceNow, AIS, MNG, PDNS, VDP, etc.), security tools (SIEM/SOAR), and a CTI Exchange Platform. Deliver a catalog of services including Threat Intelligence Research & Analysis, Embedded Analysts, CTI Briefings, RFI Support, CTI Maturity Assessments, CTI Training, CTI Support, and Community Guidance. Perform configuration and test activities under an Other Transaction or Commercial Solutions Opening Pilot (CSOP) agreement, including system architecture design, integration with SIEM/SOAR and enterprise dashboards, sequencing of development and configuration activities, identification of technical dependencies and constraints, and assumptions.
Conduct a live presentation and demonstration with real data injection using CSV flat files and STIX files, ingesting and processing Indicators of Compromise in real time against government-specified criteria, and demonstrate operations and sustainment level of effort, engineering/integration support, and security incident response. Following successful testing, execute a follow-on contract for platform licensing, support services, operations and sustainment, and engineering and integration support.

Period of Performance
Phased execution beginning with configuration and test in Q2 FY2024 (approximately 120-day period post-award) followed by a follow-on licensing and sustainment contract extending into FY2025.

Place of Performance
Virtual/remote support for CISA Capacity Building CSSO, conducted via Microsoft Teams and supporting Federal Civilian Executive Branch (FCEB) systems headquartered in Washington, DC.

Bidder Requirements
Offerors must identify existing FedRAMP authorizations and existing Authority to Operate (ATO) or accreditation boundaries. Must propose and execute a configuration and test plan completing development within 120 days of agreement. Must submit a solution brief (12–15 slides) and conduct a live demonstration of the CTI platform using real data injection.
Must be eligible under Other Transactional Authority or CSOP procedures and able to retain core intellectual property.
Posted:

The U.S. Department of Homeland Security (DHS) CISA Cybersecurity and Infrastructure Security Agency (CISA) Chief of Contracting Office (COCO) in support of the CISA Capacity Building (CB) Cybersecurity Shared Services Office (CSSO) will host an Industry Day virtually via Microsoft Teams on Wednesday, December 13, 2023, from 2:00PM to 3:00PM EST.

The purpose of the event is to provide Industry with an overview of a potential upcoming Fiscal Year 2024 requirement: CISA CB CSSO Threat Information Enterprise Services (TIES).

There will also be an opportunity for a question-and-answer period.

Briefing slides will be posted approximately 2 days before the event.

Registration Link: Provided below.

UPDATE:

Following the Industry Day live presentation, CISA is requesting industry feedback on the following 3 areas for consideration. Responses are limited to 2 pages and may be submitted via email to apfs-inquiries@cisa.dhs.gov. The page limitation does not apply to the open Q&A period following the event. All questions and feedback are due NLT COB on December 22, 2023.

  1. The Government is looking for general feedback on an acquisition approach, specifically the utilization of OTs or the CSOP as described in the Industry Day Briefing slides and Draft Notice. Please provide insights or recommendations as well as any clarifications on approach, sequencing of activities or components.
  2. The Government is requesting feedback on the feasibility of the Configuration and Test timeline as it pertains to your solution. Please note that the Government must test a solution as soon as practical. The Government has identified a 120-day period after agreement/award for development/configuration prior to a test and acceptance event.
  3. The Government is requesting company/team specific insights and best practices to assist in achieving ATO and getting the CTI platform into operations as soon as practical.
    • Identify existing FedRAMP Authorizations
    • Identify existing ATO/Accreditation boundaries

Please follow this posting for additional updates regarding this event.

DISCLAIMER:

This Industry Day Notice is not a Request for Proposal (RFP) or an invitation for bid, nor is it to be construed as a commitment by the Government. The Government does not intend to make an award on the basis of this Industry Day or otherwise pay for the information which will be received.

Posted:

Overview

Agency
DHS Office of the Chief Procurement Officer (OCPO) [DHS]
Response Deadline
None
Posted
(updated: )
Set Aside
None
NAICS
None
PSC
None
Place of Performance
Not Provided
Source
Open
On 12/1/23 DHS Office of the Chief Procurement Officer issued Special Notice for CISA COCO Industry Day: CISA Capacity Building (CB) Cybersecurity Shared Services Office (CSSO) Threat Information Enterprise Services (TIES).
Primary Contact
Name
Eva I. Shaw-Taylor   Profile
Email
eva.shaw-taylor@cisa.dhs.gov
Phone
None

Secondary Contact

Name
Shannon Kennedy   Profile
Email
shannon.kennedy@cisa.dhs.gov
Phone
None

Documents

Posted documents for CISA COCO Industry Day: CISA Capacity Building (CB) Cybersecurity Shared Services Office (CSSO) Threat Information Enterprise Services (TIES)

Opportunity Assistant

AI Analysis

IDV Awards

Indefinite delivery vehicles awarded through CISA COCO Industry Day: CISA Capacity Building (CB) Cybersecurity Shared Services Office (CSSO) Threat Information Enterprise Services (TIES)

Contract Awards

Prime contracts awarded through CISA COCO Industry Day: CISA Capacity Building (CB) Cybersecurity Shared Services Office (CSSO) Threat Information Enterprise Services (TIES)

Protests

GAO protests filed for CISA COCO Industry Day: CISA Capacity Building (CB) Cybersecurity Shared Services Office (CSSO) Threat Information Enterprise Services (TIES)

Incumbent or Similar Awards

Potential Bidders and Partners

Awardees that have won contracts similar to CISA COCO Industry Day: CISA Capacity Building (CB) Cybersecurity Shared Services Office (CSSO) Threat Information Enterprise Services (TIES)

Similar Active Opportunities

Open contract opportunities similar to CISA COCO Industry Day: CISA Capacity Building (CB) Cybersecurity Shared Services Office (CSSO) Threat Information Enterprise Services (TIES)

Experts for CISA COCO Industry Day: CISA Capacity Building (CB) Cybersecurity Shared Services Office (CSSO) Threat Information Enterprise Services (TIES)

Recommended subject matter experts available for hire

Additional Details

Source Agency Hierarchy
HOMELAND SECURITY, DEPARTMENT OF > OFFICE OF PROCUREMENT OPERATIONS > CISA CONTRACTING ACTIVITY
FPDS Organization Code
7001-70RCSJ
Source Organization Code
500182403
Last Updated
Last Updated By
amy.ulisse@cisa.dhs.gov
Archive Date