Digital Risk Protection for Social Media

General InformationThe Manufacturing Extension Program (MEP) National NetworkTM provides small and medium-sized manufacturers with the resources needed to grow and thrive. MEP's industry experts work side-by-side with manufacturers to reduce costs, improve efficiencies, develop the next generation workforce, create new products, and find new markets. The National NetworkTM is made up of 51 centers. MEP uses a number of social media platforms to market the MEP National NetworkTM such as Twitter, Facebook, LinkedIn, and public websites to name a few. The MEP Centers also have their own social media channels, which are currently unprotected/unmonitored. To protect the National NetworkTM brand, the MEP centers also need to protect their individual accounts and sites.MEP is looking for third-party developed and maintained Software-as-a-Service (SaaS) platform, and a market leader in digital risk protection (DRP) to provide digital risk monitoring of social media, brand, and digital

channels for security threats and business risks. The SaaS platform has to have a global data collection engine, artificial intelligence-based analysis, and automated remediation, allowing protection from cyber, brand and physical threats (such as trademark issues, malware posted to social media as comments, phishing attacks that impersonate or squat on MEP National NetworkTM-related URLs).Salient characteristics the SaaS platform needs to meet are as follows:1. Offers actionable intelligence and rapid remediation with a primary focus on brand protection, and social media risks through a flexible analytics platform as well as the quick takedown and remediation it can facilitate via native integrations with many security technology partners (Twitter, Facebook, LinkedIn, Slack, HipChat, Instagram, Reddit, Patebin sites, Tumblr, YouTube, VK, mobile app stores, the deep and dark web, domains, including non-U.S. social media sites).2. The ability to protect brand, and individual social accounts and analyze unique behavioral risk indicators that customers can identify and rank using its global data collection engine, and artificial intelligence-based analytics.3. The ability to also monitor and alert on the deep and dark web to identify threats to the MEP National NetworkTM brand. Deep Web -- meaning sites that are not indexed or searchable, typically requiring authentication. Dark web - meaning the portion of the web that requires use of special protocols and/or browsers and that provides some level of anonymity for users.4. Allows use of scripting language to customize and refine searches (i.e. allows customers to customize searches).5. The SaaS platform interface is user friendly (very intuitive user interface) that IT security and non-IT technical professionals can use.Contracting Office AddressDepartment of Commerce, National Institute of Standards and Technology, Acquisition Management Division, 100 Bureau Drive, Building 301, Room B121, Mail Stop 1640, Gaithersburg, MD, 20899-1640NIST is seeking responses from all responsible sources, including large, foreign, and small businesses. Small businesses are defined under the associated NAICS code for this effort, 541519, as those domestic sources having $27,500,000.00 in sales. Please include your company's size classification and socio-economic status in any response to this notice.Instructions to Responders:Interested parties that can meet or exceed the salient characteristics/specifications are requested to email a detailed capabilities statement describing their abilities to robert.singman@nist.gov no later than the response date for this sources sought notice. The report should include achievable specifications and any other information relevant to your capabilities including any specification that cannot be met or is deemed close to but not meeting an identified specification. Also, the following information is requested to be provided as part of the response to this sources sought notice:1. Name of company(ies), their addresses, and a point of contact for the company (name, phone number, fax number and email address) that provide the services for which specifications are provided.2. Indication if the company(ies) are small business and social economic category(ies).3. Indication of whether the services required are currently on one or more GSA Schedule (i.e. Multiple Award Schedules [MAS]) contracts and, if so, the GSA MAS contract number(s).4. Indication if the company(ies) can provide all, or some, of the services.5. Any other relevant information that is not listed above which the Government should consider in developing its minimum specifications and finalizing its market research.