State, Local, Tribal and Territorial (SLTT) Indicators of Compromise - Automation Pilot

The summary for the State, Local, Tribal and Territorial (SLTT) Indicators of Compromise - Automation Pilot grant is detailed below. This summary states who is eligible for the grant, how much grant money will be awarded, current and past deadlines, Catalog of Federal Domestic Assistance (CFDA) numbers, and a sampling of similar government grants. Verify the accuracy of the data FederalGrants.com provides by visiting the webpage noted in the Link to Full Announcement section or by contacting the appropriate person listed as the Grant Announcement Contact. If any section is incomplete, please visit the website for the Office of Procurement Operations Grants Division, which is the U.S. government agency offering this grant.

State, Local, Tribal and Territorial (SLTT) Indicators of Compromise - Automation Pilot: The purpose of this cooperative agreement is to extend the period of performance for the previously selected recipient to apply the usage of automation to enhance and speed the evaluation of threat Indicators of Compromise (IOC) at the state and local government levels. In addition, the pilot will identify key areas for potential reduction of manual tasks by humans and actionable information sharing across enterprises and SLTT. The pilot will also identify orchestration services needed to integrate the activities of sensing, understanding, decision-making, and acting. The grant recipient may select up to five states and/or localities to participate in the pilot project. The pilot project will focus on developing model processes, methods, and accompanying policies and procedures that can be applied by SLTT to accomplish the following:Action upon IOCs within minutes of receipt.Reduce time spent on repetitive tasks.Provide generation, enrichment and scoring of IOCs.Receipt, remediation and response to IOCs.Demonstrate the use of Security Orchestration, Automation, and Response (SOAR) operational procedures and capabilities combined with information sharing to make data more actionable and enable consistent execution at and across SLTT levels.Development of repeatable processes for orchestration and automation services that bridge existing SLTT policies with SOAR capabilities.This NOFO is an extension of a previously awarded project selected via DHS–19-CISA-128-SLT001.