Digital Intelligence Investigation Analysis and Services

The Vendor is required to provide digital intelligence, investigation, analysis, and location/hazard/incident monitoring program include:
- Digital Threat Intelligence
• Identify, assess, and manage threats of violence against judiciary personnel and facilities.
• Monitor and identify all information sources for environmental, technological, biological, radiological and natural disaster threats (e.g., hurricanes, tsunamis, flooding, earthquakes, volcanic activity) that could disrupt the operational continuity of a subscriber (identified judiciary employee, judiciary property, and/or leased property of the judiciary).
• Identify human-initiated acts and/or incidents that could disrupt the operational continuity of any identified judiciary employee, judiciary properties, and/or leased properties of the judiciary to mitigate possible or identified threats that could disrupt the operational continuity of the judiciary.
• Capable of assessing and performing in-depth investigation and management of the identified human-initiated acts or incidents that could disrupt the operational continuity of any identified judiciary employee, judiciary properties, and/or leased properties of the judiciary.
• Ability to conduct advanced open-source intelligence (OSINT) which enable continuous monitoring of “deep” and “dark” web sources for potential threats, data breaches, and targeted activity.
• Ability to proactively track illicit forums, marketplaces, and encrypted networks to identify compromised credentials, emerging risks, and threat actor discussions related to the organization or its key personnel.
• Ability to incorporate into processes the use of custom keyword tracking and Boolean logic, allowing for precise filtering of relevant information, reducing noise and enhancing the efficiency of threat detection.
- Protective intelligence
• Deliver real-time situational awareness and threat alerts based on validated and corroborated incidents or threats.
• Conduct risk assessments to evaluate threat credibility and severity.
• Geospatial and/or global awareness threat mapping for state court locations to identify any information identifying potential natural, technological, biological, radiological, and human-initiated hazards and/or incidents that could disrupt the operational continuity of any identified judiciary employee address, judiciary property, and/or leased property of the judiciary.
• Provide actionable intelligence reports to support judicial security and law enforcement coordination.
- Social media targeted analysis
• Continuously review public online platforms for direct or indirect threats directed towards the judicial system
• Detect and report threatening language, behaviors, or patterns using advanced analytics and artificial intelligence (AI).
• Monitor for misinformation/disinformation campaigns that could escalate into physical threats or unrest.
• Detect and monitor reporting of potential or actual human-initiated acts and/or incidents that could disrupt the operational continuity of any identified judiciary employee, judiciary properties, and/or leased properties of the judiciary to mitigate possible or identified threats that could disrupt the operational continuity of the judiciary.  - Incident / case triage and management
• Ability to support the judiciary security agency with additional in-depth investigative triage and support as needed.
• Ability to centrally manage case files and incident reports for future reference and intelligence purposes, to include providing performance metrics.
• Ongoing vulnerability management of identified threat actors.
• Identify all federal, state, local, and private agencies generating the identified hazard information and, if information being generated is not open to the public, assist the judiciary with identifying applicable agency points-of-contact, describing data sharing requirements, and drafting data sharing agreements required to facilitate the sharing of identified information.
- Optional add-on services
• Investigative threat analysis (e.g., digital footprint, background checks, link analysis).
• Provide comprehensive protective intelligence for high-profile judiciary members with ability to provide targeted review and analysis for threats.
- System requirements
• The solution must use artificial intelligence, machine learning, and natural language processing to analyze data, relevant to the judiciary and its staff, from the internet including or sites, IRC channels, forums, underground marketplaces, and the dark web.
• The solution must assist the judiciary in a timely manner to identify, profile, and mitigate risks, focusing on judiciary staff, judiciary data, lost credentials, and threats associated with the judiciary and its infrastructure.
• The solution’s natural language capabilities must enable the translation of internet and dark web information from other selected languages to English.
• The solution must operate autonomously and fully managed by the vendor.
• The solution must be able to be configured and tuned to the judiciary's hierarchical threat priorities.
• The solution must have a secure portal where the judiciary and its staff can establish accounts related to the judiciary or personal identifiable information.
• The solution must allow established account holders to dynamically update their information for effective searches.
• The solution must securely use the data provided by the judiciary and its staff to appropriately train The AI/machine learning models appropriately.
• The solution shall allow judiciary users to opt-out after establishing an account and hence remove their data from the models used for searching.
• The solution must enable users to see the information found.
• The solution must redact or remove data identified as inappropriate use by judiciary staff and data.
• The solution shall identify emerging threats, exploits, and malware relevant to the judiciary’s applications and platforms.
- Contract Period/Term: 2 years
- Questions/Inquires Deadline: July 18, 2025