HHS NIH - Google Threat Intelligence Enterprise Subscription - MRAS

The Department of Health and Human Services (HHS), through the General Services Administration (GSA), is conducting market research to identify potential vendors capable of providing a comprehensive threat intelligence solution. The National Institutes of Health (NIH) intends to procure a Commercial Off-The-Shelf (COTS) 12-month subscription to the Google Threat Intelligence Enterprise Tier. This effort aligns with HHS's goal of enhancing cybersecurity measures and ensuring robust protection against evolving cyber threats.

The work requested involves the provision of high-quality, vendor-agnostic malware indicators of compromise, signatures, and analysis. Additionally, the NIH requires finished intelligence reports and detailed insights into threat actor tools, techniques, and procedures aligned with the MITRE ATT&CK framework. The solution must be capable of seamless integration with NIH's existing tooling infrastructure, allowing access to information in a machine-readable format via an Application Programmatic Interface (API). A critical requirement is support for at least 30,000 queries per day through this API.

Google Threat Intelligence offers extensive visibility into cyber threats while enabling integration with NIH's current security tools. This includes access to malware analysis and signatures from numerous security vendors' sandboxes. Furthermore, Google provides finished intelligence reports and detailed information on threat actors, as well as attack surface analysis. The "Enterprise" package specifically meets NIH's needs by supporting 30k API calls per day, facilitating integration into NIH's Incident Response workflows without requiring significant changes to existing processes.