Notice ID: 36C10B24Q0010
Description
The mission of the VA is to provide benefits and services to Veterans of the United States. In meeting these goals, VA Office of Information & Technology (OIT) and the Office of Information Security (OIS) strive to provide high quality, effective, efficient, and secure Information Technology (IT) services to those responsible for providing care to the Veterans at the point-of-care, as well as throughout all the points of the Veterans’ health care environment in an effective, timely and compassionate manner.
Heuristic Behavior Analytics (HBA) is a significant part of VA’s overall defensive security strategy which provides comprehensive visibility into user account activity, data, and cyber traffic as it enters, exits, and moves throughout the network. The VA seeks continual analysis of heuristic behaviors by defining normal baselining behavior and traffic patterns which will provide a baseline for identifying anomalies. Alerts generated by anomalies to solution defined patterns and algorithms are forwarded to the appropriate security devices such as Security Orchestration Automation and Response (SOAR) and Security Information and Event Management (SIEM) or Cyber Security Operations Center (CSOC) analyst for investigation.
The Contractor shall provide project management, technical services and a HBA solution, based on current investment in this technology, and in accordance with existing VA Enterprise Security Directives and Standards and to ensure VA compliance with the Health Insurance Portability and Accountability Act (HIPAA) Privacy and Security Rule, Health Information Technology for Economic and Clinical Health (HITECH) Act, Privacy Act, National Institute of Standards and Technology (NIST) guidelines, Federal Information Security Management Act (FISMA), Federal Acquisition Regulation (FAR) and other laws and regulations pertaining to the protection of sensitive VA data. The Contractor shall provide all technical services required to support the HBA solution, including implementation, engineering, customer service support, training, testing, configuration management and disaster recovery.
