Countering Threats Automated Platform

The Defense Counterintelligence Security Agency (DCSA) is a strategic asset to the nation and our allies - continuously ensuring a trusted federal, industrial, and affiliated workforce and enabling industry's delivery of uncompromised capabilities by leveraging advanced technologies and innovation. DCSA uniquely blends critical technology protection, counterintelligence, security and professional education and certification to advance and preserve America's strategic edge. DCSA will mature the research and innovation capabilities for the security enterprise serving the Trusted Innovation Portfolio Acquisition Executive and the broader DCSA mission set. This effort will drive the pipeline of capability development with promising technologies to support personnel vetting, industrial security, insider threat missions, and acquisition modernization across the security and intelligence enterprise. By leveraging cutting-edge research, operational experimentation, and strategic partnerships with academia, industry, and government, DCSA will deliver trust-enabling solutions that enhance decision-making, streamline workflows, and address emerging challenges in a dynamic threat environment. These investments will ensure DCSA remains at the forefront of innovation, supporting warfighter readiness and strengthening national security.

The Defense Counterintelligence Security Agency (DCSA) is a strategic asset to the nation and our allies - continuously ensuring a trusted federal, industrial, and affiliated workforce, and enabling industry's delivery of uncompromised capabilities by leveraging advanced technologies and innovation. DCSA uniquely blends critical technology protection, counterintelligence, security and professional education and certification to advance and preserve America's strategic edge. In alignment with DoDI 5205.16, DCSA facilitates effective access to essential insider threat data through an enterprise and shared data management capability. The Defense Security Analysis and Threat System (DSATS), previously known as the DITMAC System of Systems (DSoS), is the designated enterprise system required by the Department of War for the Insider Threat Program (InTP). DSATS requires the ability to function within a self-hosted cloud environment, incorporate new roles, migrate data from legacy systems, and facilitate the integration and sharing of data with both DCSA and external systems. Additionally, DCSA is improving dashboards and reporting, as well as conducting independent verification and validation testing. The system must also be adapted to support automated data ingestion, which will directly aid and enhance analytic efforts to focus on areas of increased risk. These capabilities will empower Commanders to more effectively manage insider threat cases at the installation level and will improve analytic capabilities to all tiers.

The Defense Counterintelligence Security Agency (DCSA) is a strategic asset to the nation and our allies - continuously ensuring a trusted federal, industrial, and affiliated workforce, and enabling industry's delivery of uncompromised capabilities by leveraging advanced technologies and innovation. DCSA uniquely blends critical technology protection, counterintelligence, security and professional education and certification to advance and preserve America's strategic edge. The DoW Insider Threat Management and Analysis Center (DITMAC) provides an integrated capability to collect and analyze information for insider threat detection and mitigation. The DSATS system gathers, integrates, reviews, assesses, and responds to information derived from DoW Insider Threat hubs, Counterintelligence (CI), security, cybersecurity, civilian and military personnel management, workplace violence, anti-terrorism risk management, law enforcement, user activity monitoring on DoW information networks, and other sources as necessary and appropriate to support the identification, mitigation, and countering of insider threats to Department of War (DoW) and Intelligence Community (IC) personnel, assets and information The DITMAC System of Systems - DSOS requires the capability to operate within a self-hosted cloud environment, add new roles, migrate data from legacy systems, integrate and share data with other DCSA and external systems, improve dashboards and reporting, and complete independent verification and validation testing. It also requires adaptation to allow for automated data ingest which will directly support and enhance analytic efforts to focus on areas of increased risk. These features will enable Commanders to better manage insider threat cases at the installation level and will improve analytic capabilities to all levels.