The Defense Information Systems Agency’s (DISA) Defense Information Technology Contracting Organization (DITCO) has selected By Light Professional IT Services, LLC to receive another transaction authority agreement award in support of the Department of Defense’s (DoD) Cloud Based Internet Isolation program. This is DISA’s first production OTA awarded to an industry partner.
With a ceiling of $198.9 million, the OTA moves non-mission-essential internet browsing off of the endpoint to a cloud-based environment. By doing so, it significantly reduces the risk and attack surface of the DoD Information Networks and relieves congestion at the internet access points. The OTA has a one-year base period with four one-year option periods.
By partnering with industry, DISA’s CBII team determined a means to transform how DoD defends against internet web browser-based threats. This partnership will provide direct support to warfighters by providing cybersecurity within the cloud while protecting their electronic devices from exposure to direct threats.
A collaborative relationship early in this OTA acquisition strategy and assessment phase with DITCO drastically reduced acquisition timelines. The result was the fielding of two leading capabilities, through the award of two prototype OTAs.
Mission partners across DoD actively participated in the prototype by deploying and testing both capabilities. Their continued collaboration and in-depth feedback regarding requirements and how DISA could best meet them aided with DISA’s metrics-driven approach to select a product that meets the operational and financial objectives of the program.
The CBII solutions demonstrated successful completion of the prototype OTAs. Each solution met CBII project milestones and accomplished a particularly favorable outcome in terms of increasing the DISA/DoD cybersecurity posture. This provided bandwidth savings and bandwidth reduction and reducing congestion at DISA/DoD internet access points.
The CBII capability transfers internet browsing sessions from the traditional desktop browser to a secure, isolated cloud platform. This service isolates potential malicious code and content within the cloud platform, separating the threat from direct connections to DoD networks.
DISA has also recently announced that it has granted a one-year extension of the DoD Provisional Authorization for the Microsoft Azure Secret Region as a cloud service offering.
Lifting restrictions on the original provisional authorization granted in February 2019, the extension covers Microsoft Azure Secret Region’s Infrastructure/Platform and opens onboarding to DoD mission partners for data classified at the Secret level.