DHS ITP Technical Evaluation and Design (TED) Team Market Research

The Department of Homeland Security (DHS) Office of the Chief Security Officer is seeking support services for its Insider Threat Program (ITP). The ITP is responsible for coordinating the development and implementation of policies and capabilities to detect and mitigate insider threats within DHS. The program requires an experienced team of subject matter experts (SMEs) to review the current technical architecture, define a data dictionary based on DHS policy, propose technical requirements for a High-Level User Activity Monitoring (UAM) and User Behavior Analytics (UBA) Enterprise Solution, and provide support to the DHS Program Analysis and Risk Management/ Joint Requirements Council (PARM/JRC) process. The contract has a base period of 12 months with four option periods.

The work to be acquired includes defining a data dictionary for each item described in the DHS Insider Threat Sharing Guide, identifying databases at each DHS component, reviewing the current ITP technical architecture, proposing technical requirements for a UAM and UBA solution, and providing support to the PARM/JRC process. The team will need expertise in enterprise architecture, data normalization, data storage, cloud infrastructure, IT security, and network engineering. The deliverables include documentation of the data dictionary process, network diagrams for data movement, proposed common data dictionary format, design documentation for the UAM and UBA solution, and recommendations for UAM solutions.

The place of performance will be both onsite and off-site facilities within the Washington, DC National Capital Region. Contractor employees will generally work between 0900 to 1500 EST hours from Monday to Friday but may be required to work outside normal business hours as needed. The contract period of performance is 12 months with four option periods.

Notable aspects of this opportunity include the requirement for TS/SCI clearances for all team members, compliance with Section 508 accessibility standards, and the use of government-furnished equipment and facilities. The contractor will also be responsible for safeguarding sensitive information and complying with government regulations and policies regarding safety and security.