JUDICIARY - Endpoint Protection Solution - MRAS

The General Services Administration (GSA), on behalf of the Judiciary, is conducting market research to identify solutions for enhancing endpoint security across federal defender districts. The Defender Services Organization (DSO) oversees 83 Federal Defender districts, each operating independently while receiving administrative and IT support from DSO's National IT Operations and Application Development (NITOAD) branch. The primary goal of this initiative is to procure a state-of-the-art Enterprise Endpoint Detection and Response (EDR)/Endpoint Protection Platform (EPP) solution. This modernization effort aims to counteract the increasingly sophisticated cybersecurity threats that these districts face.

DSO currently relies on outdated endpoint security solutions that are inadequate for addressing modern cybersecurity challenges such as ransomware, phishing, zero-day vulnerabilities, supply chain attacks, and advanced persistent threats. By implementing an advanced EDR/EPP solution, DSO seeks to achieve improved visibility into potential threats, automate threat response processes, ensure scalability for future growth, and integrate seamlessly with existing NITOAD systems. The overarching objective is to safeguard critical assets against evolving threats by leveraging cutting-edge technologies like artificial intelligence and machine learning.

The scope of work for the contractor includes providing a FedRAMP authorized EDR/EPP solution that meets stringent performance criteria across various operating systems including Windows, Linux, macOS, iOS, and Android. The solution must support on-premises as well as hybrid and multi-cloud environments like Azure, AWS, or GCP. Key features required include sandbox capabilities for threat investigation, high detection accuracy for both known and unknown threats (>99%), behavior monitoring with detailed indicators of compromise (IoCs), comprehensive reporting capabilities with automated delivery options, anti-evasion techniques with high success rates (>90%), and significant reductions in manual analysis through automation.

Additionally, the desired solution should integrate smoothly with enterprise identity management systems to enhance operational efficiency through automated incident triage and real-time threat intelligence feeds. The contractor will be responsible for ensuring compatibility across diverse endpoints while maintaining minimal performance impact on system resources such as CPU usage and memory utilization. Ultimately, this initiative aims to bolster DSO's cybersecurity posture by deploying a robust EDR/EPP platform capable of adapting to future technological advancements in threat detection and response.