1. UNITED IN SERVICE TO OUR NATION
Forecast to Industry 2017
Cyber Portfolio
COL Brian Lyttle
Program Executive Officer, Cyber
6 November 2017
UNCLASSIFIED
UNITED IN SERVICE TO OUR NATION

2. New Contract “Vehicles”:
BLUF: Bottom Line Up Front
New Contract “Vehicles”:
Capacity As A Service (CAP SVCS)
Elasticity
H/W & S/W
Anticipate award 1QTR FY18
Other Transactions Authority (OTA) Agreements
Granted May 2017
Prototype Projects Wanted
Rise in Operating Expenses
Significant areas of potential partnership
Automation of defenses / Machine Learning
Interoperability across vendors
Identity on the network (personnel and non- personnel)
Endpoint Detect & Respond

3. DoD Cyber Strategic Goals DODIN Cyber Strategic Goals
Cyber Defense Goals
DoD Cyber Strategic Goals
Ready Forces/Cyber Operations
Defend, Secure, Mitigate
Defend the Homeland
DISA Strategic Goals
Operate: Provide Efficient, Resilient, Reliable & Assured Infrastructure & Services
Build: Improve Responsiveness, Agility & Collaboration
Defend: Defend the DODIN, Secure DODIN Data and Mitigate risks to DoD
People: Recruit, Develop & Train our Professional Workforce
DODIN Cyber Strategic Goals
Establish a defendable network – automatically remediate vulnerabilities and insecure configurations
Actively block, in cyber speed, known and unknown attacks at network perimeter, regions, and endpoints
Rapidly discover (hunt) and eradicate attacks that evade defenses
Safeguard information and infrastructure from the insider threat
Share Information, provide situational awareness to empower the network defender (analyst)

4. Cybersecurity Strategic End-State and Implementation Plan
Mission dependability in the face of cyber adversaries
Strategic Objectives
3.1 Protect information and infrastructure from threats including the insider
3.2 Actively block attacks at the perimeter, regions and endpoints; hunt attacks that evade defenses
3.4 Ensure all systems are protected and defendable through criticality-based continuous risk management
3.5 Rapidly respond to proposed policy and regulatory initiatives to shape them to enable effective DoD spectrum operations
3.3 Provide situational awareness to commanders and network defenders
3.6 Reduce the DoDIN attack surface
Cyber Situational Awareness
Enterprise CyberSA solution for Perimeter, Regional, & Endpoint (3)
Improve cyber analytics with Authoritative Cyber Metadata Repository (3)
Real time cybersecurity event management - cohesive SIEM Architecture (2,3)
Near real time vulnerability tracking with mission asset solution (3,4)
Perimeter Cybersecurity
Actively block known and unknown attacks at IAPs and Gateways (2)
Protect Mission Critical Traffic – improved dynamic rate limiting & WCF (1)
Detect attacks in encrypted traffic (SSL) – implement break and inspect at all IAPs w/in SSL (2)
Rapidly remediate infected endpoint – implement XFF & WCF (2)
CyberNetOps
Reduce vulnerabilities rapidly through virtual/open source Cyber NetOps solutions (2,4)
Privileged User Control – Automate OOB System Authorization Access Request (SAAR) (1)
Standardize testing environment by consolidated testing environment (4)
Rapid provisioning and reconfiguration through White Box Implementation & NFV refresh (6)
Endpoint Security
Actively block attacks -- fully implement File, IP and URL reputation on all endpoints (EPS GTI) (2)
Block unauthorized apps from executing – implement application whitelisting (2)
Visibility of malicious activity on servers with Endpoint Detection and Response (1,2,3)
Contain attacks within high risk apps – implement containment on workstations (2)
NSCSAR Threat Framework
Joint Enablers
Extend assured identity & authentication in mobile & cloud environments w/ Purebred derived credentials (1)
Enable PKI authentication of FVEY & Coalition to US DoD SIPR resources thru SIPR REL DMZ (1)
Automate cross-domain security content with MNIS Security Content Implementation (1)
Improve training environment through Cybersecurity Range & Virtual JRSS stack enhancements (1)
Protect & Defend the DoDIN through CPT Cyber Support & Cyber Readiness Training (1)
Joint Regional Security Stacks
Actively block attacks - IPS (2)
Isolate attacks thru Virtual Routing and Forwarding technology (1,2,6)
Hunt for adversarial lateral movements through discover & purge attacks (2)

5. Acquisition Opportunities
Project Title & Description
Program Office
Anticipated Acq. Strategy
RFP / Projected Award
Secure Configuration Management (SCM) Development and Operations
Continued support, sustainment and enhancement of existing SCM capabilities, and rapid implementation of new features, updates and improvements.
DISA DBC ID3
Single award
Small Business Set-aside
RFQ: 1QFY18
Projected Award: 3QFY18
McAfee Antivirus / Antispyware (AV/AS) and Host Based Security System (HBSS) License Maintenance and Support
McAfee brand-name AV/AS and HBSS software license maintenance for DoD Enterprise, with Platinum (Tier III) Support.
NASA SEWP Limited Sources Competition
Projected Award: 1QFY18
CISCO Firepower Blanket Purchase Agreement (BPA)
BPA for use by DISA Cyber Security Service Provider (CSSP) customers that includes CISCO FirePower and FireSight hardware and software, licensing, subscriptions, and maintenance.
DISA DBC ID6
GSA Limited Sources Competition

6. Acquisition Opportunities
Project Title & Description
Program Office
Anticipated Acq. Strategy
RFP / Projected Award
Security Information Event Manager (SIEM)
Provides the primary alerting and workflow platform for Cyber Security Service and analytics for DISA and USCYBERCOM.
DISA DBC ID6
Single award
Small Business Set-Aside
RFQ: 1QFY18
Projected Award: 2QFY18
Advanced Cyber Analytics (ACA)
Provides audit and attack analysis capabilities to defend against insider and external threats to the DoDIN.

7. Acquisition Opportunities
Project Title & Description
Program Office
Anticipated Acq. Strategy
RFP / Projected Award
Continuous Monitoring and Risk Scoring (CMRS)
Sustain, maintain, and develop new risk management features on the Big Data Platform.
DISA DBC ID6
Single award
Small Business Set-aside
RFQ: 1QFY18
Projected Award: 3QFY18
Public Key Infrastructure (PKI) Operations
Provide sustainment, implementation, technical, development, and design support for DoD PKI and Common Service Provider (CSP).
DISA DBC ID2
Single award IDIQ
RFQ: 2QFY18
Projected Award: 4QFY18
Assured Compliance Assessment Solution (ACAS)
Provide enterprise solution and support to accurately assess the configuration compliance of DoD networks.
DISA DBC ID3
Projected Award: 1QFY19

8. Acquisition Opportunities
Project Title & Description
Program Office
Anticipated Acq. Strategy
RFP / Projected Award
Domain Name System (DNS)
Provides Engineering Support Services for the DNS.
DISA DBC ID5
Single award
GSA IT Schedule 70
RFQ: 2QFY18
Projected Award: 1QFY19
Acropolis
Provide technical, engineering, operational, sustainment and management functions to support day-to-day 24x7x365 O&M on all hardware, processes, applications, databases, networks, sensors/sensor feeds, analytical tools/capabilities included in the Centaur Operations mission.
DISA DBC ID6
Full and Open Competition

9. Acquisition Opportunities
Project Title & Description
Program Office
Anticipated Acq. Strategy
RFP / Projected Award
DISN Operational Support System (OSS) Assessment and Authorization, and Project Support Cell (A&A/PSC)
Track projects, and process accreditation packages for the OSS.
DISA DBC ID6
Single award
Small Business GSA Alliant
RFQ: 2QFY18
Projected Award: 4QFY18
Cyber NetOps Develop, Deploy, Support (CNODDS)
Deliver new and enhanced Cyber NetOps capabilities, and sustain those that have been deployed, for the Operations Support System (OSS).
Small Business Set-aside

10. Acquisition Opportunities
Project Title & Description
Program Office
Anticipated Acq. Strategy
RFP / Projected Award
Cross Domain Enterprise Services (CDES) Program Management and Software Development Support Services
Provides planning, program management, development, and integration of cross-domain solutions, and engineering services.
DISA DBC ID2
Single award
TBD
RFQ: 1QFY19
Projected Award: 3QFY19
Gateway Security and Engineering Support
Provide engineering and sustainment support for Perimeter Defense Capabilities.
DISA DBC ID5
DoD Cyber Situational Awareness (SA) Analytics
Develop and integrate new analytics; sustain existing analytics; support integration of analytics developed by third parties.
DISA DBC ID6
Small Business Set-Aside

11. Acquisition Opportunities
Project Title & Description
Program Office
Anticipated Acq. Strategy
RFP / Projected Award
Web Content Filtering (WCF)
Provide Engineering and Sustainment Support Services for the WCF system.
DISA DBC ID5
Single award
TBD
RFQ: 4QFY19
Projected Award: 2QFY20
Defense Industrial Base Network (DIBNet) Development & Sustainment
Provides sustainment and enhancements for DIBNet Unclassified and Secret cyber threat information sharing and collaboration between the DoD and DIB participants.
DISA DBC ID6
Full and Open Competition

12. Acquisition Opportunities
Project Title & Description
Program Office
Anticipated Acq. Strategy
RFP / Projected Award
Break and Inspect (BI) for Joint Regional Security Stack (JRSS) 2.0
Hardware / Software to support the JRSS capability to review and analyze outbound traffic encrypted by Secure Socket Layer / Transport Layer Security.
DISA DBC ID4
Single award
NASA SEWP Limited Sources Competition
RFQ: 1QFY18
Projected Award: 2QFY18
Inline Intrusion Prevention System (IPS) for JRSS
Hardware / Software to support the JRSS capability to actively analyze all incoming traffic flows and perform predetermined automated actions to deter unauthorized access.
Lab Stack for JRSS
Hardware / Software to provide additional instantiation of capabilities previously acquired to increase JRSS laboratory capacity.
Multiple awards possible

13. Acquisition Opportunities
Project Title & Description
Program Office
Anticipated Acq. Strategy
RFP / Projected Award
Joint Management Network (JMN)/Joint Migration Team/Service Migration Team (SMT) Support for the JRSS
Provide integration, migration and operational support services for the JRSS.
DISA DBC ID4
Single award
Full and Open Competition
RFQ: 3QFY18
Projected Award: 2QFY19