Proof of concept for threat intelligence services and their integration with the systems available in PAMI

Description

The Inter-American Development Bank (IDB) is seeking to hire a firm to implement and evaluate a proof-of-concept (PoC) of an external Threat Intelligence service for the INSSJP-PAMI. The objective is to validate the effectiveness of these technologies to identify, contextualize and mitigate cyberthreats specific to the health sector, improving the security posture and the response to institutional incidents.

1. Prototype operation and monitoring
The consultancy will provide the service for a period of 12 months, focusing on the detection of risks in exposed digital assets:

- Technical configuration: Requirements validation and integration of data sources and ingestion rules customized for INSSJP needs.

- Actionable intelligence: Continuous collection and processing of data on external threats and vulnerabilities, generating tactical and strategic alerts and reports.

- Functional assessment: Effectiveness tests in real environments to measure the ability to correlate threats and their usefulness in decision-making.

2. Training and knowledge transfer
To ensure the operational autonomy of the institution, the project includes a robust educational component:

- Technical training: Practical workshops aimed at information security personnel on the consumption of intelligence and its integration with third-party systems.

- Documentation: Delivery of complete technical and operational manuals on the configuration and use of the service.

3. Feasibility and scalability analysis
The project will culminate with a strategic evaluation for the definitive implementation of the service:

- Evaluation of results: Preparation of a final report that analyzes the technical, operational and economic viability of the prototype.

- Roadmap: Design of a strategic plan for large-scale adoption, detailing the necessary resources, steps to be taken, and expected benefits for PAMI's critical infrastructure.

Note: Interested companies should review the international data management and logistics analysis experience requirements on the BEO Bidder Portal.