CYBER TRIAGE SOFTWARE LICENSE RENEWAL

This is a Notice of Intent, not a request for proposal. The National Institute of Allergy and Infectious Diseases (NIAID) of the National Institutes of Health (NIH) intends to negotiate an other than full and open competition basis for the Cyber Triage License software renewal for 12 months.

The Office of Cyber Infrastructure and Computational Biology (OCICB) within the National Institute of Allergy and Infectious Diseases (NIAID) provides leadership and direction on effective strategies, policies, and standards for technology services, support for biomedical research programs, information technology resources, and customer support. This includes ensuring information technology infrastructure, tools, and applications fully and comprehensively support the NIAID mission.

The Bioinformatics and Computational Bioscience Branch within the OCICB focuses on providing a suite of scientific services and resources tailored to the NIAID research community. The branch also provides the scientific computing resources needed to analyze existing data and generate new hypotheses. These resources include access to scientific software and tools such as LabKey which provides professional services and software solutions to scientific research groups facing unique data management challenges.

The digital forensics arm of SIRT would like to renew the license for Cyber Triage as part of the forensics toolset. Cyber Triage is a forensics and cybersecurity tool that helps triage cybersecurity incidents. The software uses an agentless tool that extracts registry files and system logs from an endpoint and processes it flagging malware and other suspicious activity. During evaluation SIRT analysts created hash tables for known ransomware, SolarWinds, and Sunburst to name few.

The software also flags suspicious behavior from users and during evaluation was used on some cases that allowed SIRT to determine if a deeper forensic dive would be necessary. Using the software saves time and quickens response time on incidents. The software will receive Linux support this year and next year will have Mac support which would address all platforms used by NIH/NIAID. The vendor also supplies support free of charge and usually response is either the same day or within 24 hours.

SIRT needs the renewal by requested date to ensure uninterrupted continued service as it is a heavily relied on tool for NIAID forensics and incident response. The statutory authority for this sole source requirement is 41 U.S.C. 253 (c) (1) as implemented by FAR 13.106-1 only one responsible source and no other supply of service will satisfy agency requirements. THIS IS NOT A REQUEST FOR PROPOSAL.

All responsible sources that could provide comparable services may submit a capability statement that will be considered by email (subject line to reference NOI-NIAID-24-2225587 in the eSASS system, by 12:00 pm eastern standard time July 29, 2024. All quotations and required documents must be submitted via the NIAID electronic Simplified Acquisition Submission System (eSASS) website at https://esass.nih.gov. All vendors must register in the eSASS system to submit a quotation.

Instructions on how to register / submit quotes are included on the website. Late submissions shall be treated in accordance with the solicitation provision at FAR 52.212-1(f). All responsible sources may submit an offer that will be considered by this Agency.