IT and OT Digital Forensics and Incident Response Retainer Services

The Pennsylvania-based government authority, Amtrak, is seeking a contractor to provide comprehensive Information Technology (IT) and Operational Technology (OT) digital forensics and incident response retainer services. The agency requires a partner capable of leading cyber incident response and crisis management efforts with end-to-end services that go beyond basic triage and forensic analysis. To solve these security challenges, the selected contractor must establish a managed, dedicated twenty-four-hour, seven-day-a-week cybersecurity incident response hotline for on-call support. The scope of work covers the deployment of secure, encrypted mechanisms for data exchange, communications, and system connectivity. The agency requires the deployment of an enterprise, host-based incident response and forensic review platform to investigate endpoints, servers, and other supported systems. This endpoint technology stack must support rapid acquisition, triage, and forensic analysis of endpoint-level artifacts consistent with enterprise-scale operations. Additionally, the project requires network-based forensic and detection technologies to intercept and analyze traffic between the agency network and the internet, alongside on-site and cloud-based log ingestion to detect indicators of compromise, suspicious patterns, or anomalous activity. Eligibility is strictly limited to onshore, United States organizations. The agency permits the performance of work to occur both onsite and offsite. Bidders must submit their responses digitally via email or through the online portal, and the agency is currently looking for proposals to determine the budget.