# Open Source Software: EMV Scoring Application: Tailored Cybersecurity Threat Evaluation

Canonical: https://abierto.us/opportunities/ed574f9c9231431eb7dbac5871566aa2

- Notice type: Special notice
- Status: Closed. Deadline was March 15, 2026 at 11:00 AM EDT
- Department: Department of Energy
- Contracting office: Battelle Energy Alliance–doe CNTR (899050)
- NAICS: 518210 Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services
- Product or service code: DJ01 Support services focused on supporting security policies/controls, processes, measuring compliance of relevant legal/compliance requirements, to include Section 508, and responding to security breaches. Also provides support for IT Security systems providing Continuous Diagnostics and Mitigation (CDM) for real-time Cyber Security and protection such as vulnerability scanning, managing firewalls, intrusion prevention systems, and security information and event management (SIEM). Includes Disaster Recovery (DR) services to support DR policy, process and means, dedicated failover facilities and perform DR testing.
- Place of performance: Idaho Falls, Idaho
- County: Bonneville County (FIPS 16019). https://abierto.us/counties/bonneville-county-id-16019
- City: Idaho Falls. https://abierto.us/cities/idaho-falls-id-1639700
- First posted: March 15, 2024
- Last posted: March 15, 2024
- SAM.gov: https://sam.gov/workspace/contract/opp/ed574f9c9231431eb7dbac5871566aa2/view

## Description

**Open Source Software:**

**EMV Scoring Application:** Tailored Cybersecurity Threat Evaluation In the digital age, cybersecurity threats pose significant risks to critical infrastructures. The Exploit, Malware, and Vulnerability (EMV) Scoring Application emerges as a crucial tool for organizations aiming to fortify their defenses by enabling precise, configuration-specific threat assessment.

Traditional vulnerability scoring systems, like the National Vulnerability Database's CVE scores, often lack the nuance needed to assess threats against specific configurations, leading to inefficient allocation of resources. Recognizing this gap, the collaboration between Idaho National Laboratory (INL) and Southern California Edison under the CES-21 Program birthed the EMV Scoring Application.

It was designed to allow users to apply their scoring schema against various configurations, thereby identifying the actual applicability of cyber threats to their unique environments. The EMV Scoring Application is a highly customizable and user-friendly graphical interface that simplifies scoring cyber threats according to user-defined criteria. It integrates seamlessly with STIX objects, offering the flexibility to export scored objects for further analysis.

By enabling users to create their scoring schema, the application provides a dynamic solution for evaluating the relevance and impact of exploits, malware, and vulnerabilities on specific configurations.

**Advantages Customizable Scoring:** Tailor the scoring process to fit specific operational configurations and security needs.

**Efficient Resource Allocation:** Focus security efforts on truly applicable threats, avoiding unnecessary expenditure on low-impact or irrelevant issues.

**Streamlined Evaluation Process:** Simplify the assessment of cyber threats with a user-friendly GUI, making complex scoring accessible to all users.

**Enhanced Cybersecurity Posture:** Identify and prioritize threats based on detailed, configuration-specific evaluations, strengthening defenses against targeted attacks.

**Agile Response Capabilities:** Leverage scored threat data to inform automated response technologies, enabling quick and effective action against cyber attacks.

**Applications Critical Infrastructure Protection:** Tailor threat assessments to safeguard essential services like electricity, water, and transportation.

**Corporate Security:** Customize cybersecurity measures for corporate networks, ensuring protection against targeted exploits and malware.

**Government Defense:** Apply specific scoring schemas for national security assets, optimizing defense strategies against sophisticated cyber threats.

**Healthcare Data Security:** Protect sensitive healthcare information by focusing on vulnerabilities relevant to medical infrastructure. Secure your organization's cyber defenses with the EMV Scoring Application. Download now and start customizing your cybersecurity threat assessment today.

## Publications

- March 15, 2024: Special notice, due March 15, 2026 at 11:00 AM EDT. Notice ed574f9c9231431eb7dbac5871566aa2. https://sam.gov/workspace/contract/opp/ed574f9c9231431eb7dbac5871566aa2/view

## Points of contact

- Andrew Rankin, andrew.rankin@inl.gov

---
Source: SAM.gov Contract Opportunities bulk extract. Confirm deadlines on SAM.gov before responding. Cite https://abierto.us/opportunities/ed574f9c9231431eb7dbac5871566aa2.