Abnormal AI Services

The Vendor is required to provide a Value-Added Reseller to provide and manage the tool to optimize licensing, configuration, tuning, incident investigation and forensics, as well as automate responses.
- Specialized Value-Added Reseller (VAR) services to support subscription management, continuous optimization, and operational effectiveness of the existing Abnormal AI deployment.
- Abnormal AI has the following core capabilities:
• Abnormal Behavior Platform: Analyzes identity and context to understand user behavior, enabling the detection of socially engineered attacks that often bypass traditional secure email gateways.
• Cloud Email Security: Protects Microsoft 365 and Google Workspace environments by identifying threats that lack traditional indicators of compromise.
• Account Takeover Protection: Detects when employee accounts are compromised by recognizing behavioral deviations.
• AI Security Agents/Mailbox: Offers an automated "AI co-worker" that triages user reported emails, investigating them and providing responses to employees, while also mitigating threats.
- Assessment and Optimization of the Abnormal AI Solution
• Review the current Abnormal AI configuration, policies, integrations, and entitlements
• Identify gaps, risks, or inefficiencies related to the current configuration and usage
• Assess alignment with industry best practices and Abnormal AI-recommended configurations
• Provide practical, prioritized recommendations to improve detection coverage, response effectiveness, and operational efficiency
• Support integration considerations with agency existing security and IT infrastructure where applicable
- Configuration, Customization, and Maintenance Services
• Configuration and optimization of policies, rules, and platform settings
• Assistance with change management related to configuration updates or feature enablement
• Guidance on adopting new Abnormal AI capabilities as they become available and relevant
• Support for maintaining alignment with recognized industry best practices and evolving threat landscapes
- Ongoing Support Activities
• The solution provider will deliver ongoing support services to help ensure the continued performance, effectiveness, and operational maturity of the Abnormal AI solution.
• These activities include continuous optimization informed by operational feedback, incident learnings, and evolving threat intelligence.
- Training and Knowledge Transfer
• Training for IT Security personnel on Abnormal AI best practices, platform usage, and incident response workflows
• Awareness level training materials to support end user understanding, where applicable
• Provision of training documentation, reference materials, and as built information
• Guidance on feature adoption and roadmap alignment
• Access to customer portals and learning resources
• Options for private, instructor-led virtual training sessions.