DISA posts DIBNet sources sought
On July 26, the Defense Information Systems Agency posted a sources sought notice for Defense Industrial Base Network (DIBNet) development and sustainment (Solicitation Number: 831812879-2). Responses are due by 4:00 p.m. Eastern on August 9.
The Defense Information Systems Agency (DISA) is seeking sources for the development and sustainment of the next generation platform supporting DIBNet.
The DISA Cyber Situational Awareness and NetOps Division (ID6) is seeking information for potential sources for a broad-based requirement to defend Department of Defense (DoD) enterprise services (Email, Share Point, Cross Domain, etc.) systems and infrastructure from malicious activity both internal and external to the classified and unclassified enclaves of the DoD Information Network (DoDIN).
Building on the success of the DIBNet component of the Cyber Network Defense (CND) Tools Program, which will contractually end May 20, 2019, the new contract will be called DIBNet and Cybersecurity Information Sharing. The next generation platform is envisioned to be the primary platform for cybersecurity collaboration and information sharing between the DoD and the Defense Industrial Base (DIB) partners. The next generation DIBNet platform shall provide a scalable platform built upon information sharing practices to enhance collaboration between the DoD and the DIB partners. This platform shall operate as the primary portal for a document repository, portal spaces for collaboration, and forums to discuss and share cyber threat intelligence data. The DIBNet platform shall be designed to enhance capabilities for information sharing utilizing machine-to-machine capabilities and data standards such as Structured Threat Information eXpression (STIX) and Trusted Automated eXchange of Indicator Information (TAXII). The next generation DIBNet platform shall either build upon or replace the capabilities delivered by the current solution.
The expectation is that introducing the next generation platform for DIBNet shall significantly improve the mechanisms for information sharing and collaboration of cyber threat intelligence data between the DoD and the DIB partners. The portal shall provide ease-of-use for DoD and DIB partners including forum, topic, or discussion posts related to indicators of compromise. The portal shall have the ability to support email notifications for when a new forum, topic of discussion has been created, updated, or posted. The portal shall have the ability to support instant messenger between all participants in the DIB program. The DIB portal shall act as the primary document repository for information sharing between all the DIB participants. The portal shall support a robust notification capability to enhance to workflow of integration and collaboration to support the DIB participants.
The expectation is that introducing the next generation of DIBNet will significantly assist with information sharing and collaboration, with ensuring security of the information being shared and hosted in the environment. The environment shall be designed to provide ease-of-use for the administrators and the portal users. The DIBNet environment shall support both the unclassified and classified domains, while establishing a multiaccess solution for the DIB partners to access the classified domain. The DIB program shall be developed in an agile with a DevSecOps focus to support the ever evolving cyber threats. The portal shall be developed against STIX and TAXII methodologies for data standardizations to support machine-to-machine information sharing in near-real time expectations. The portal shall support and interoperate with an established incident collection process in the DIB. It shall support the storage, enrichment and dissemination of these reported incidents.
Full information is available here.