# Countering Threats Automated Platform — Program Element 0302609V

**Program element:** 0302609V  
**Component:** Defense-Wide  
**Appropriation:** 0400 — RDT&E, Defense-Wide  
**Budget Activity:** 7 — Operational System Development  
**Vintage:** President's Budget PB2027  
**Canonical URL:** https://hitchintel.com/programs/0302609V

## Summary

Defense-Wide funding ramps 133% to a $11.7M request in FY2027, sustained across the five-year plan. In the FY2027 defense authorization, the House funded it in full; the Senate funded it in full; House appropriators funded it in full.

## Funding profile

| Fiscal Year | Estimate Type | Amount ($M) |
|---|---|---|
| FY2025 | Actual | 5.6 |
| FY2026 | Enacted | 5.0 |
| FY2027 | Request | 11.7 |
| FY2028 | Outyear | 18.7 |
| FY2029 | Outyear | 18.7 |
| FY2030 | Outyear | 11.8 |
| FY2031 | Outyear | 10.8 |

> Estimate types are not summed — the profile mixes actuals, enacted law, the request, and outyear projections.

## Congressional marks (FY2027)

| Stage | Marked ($M) | Change ($M) |
|---|---|---|
| Request | 11.7 | — |
| House NDAA (HASC) | 11.7 | +0.0 |
| Senate NDAA (SASC) | 11.7 | +0.0 |
| House Approps (HAC-D) | 11.7 | +0.0 |

> FY2027 NDAA authorization marks, as of 2026-07-27. Not appropriations or final law.

## Projects (3)

| Project | Title | FY2025 actual | FY2026 enacted | FY2027 request | Move |
|---|---|---|---|---|---|
| 004 | Integrated Security Data Services (ISDS) | 0.0 | 0.0 | 8.1 | new start |
| 003 | Defense Security Analysis and Threat System (DSATS) | 0.0 | 5.0 | 3.6 | −29% |
| 000 | DITMAC System of Systems | 5.6 | 0.0 | — | — |

> Projects are the summable leaves: the program element total is their sum, never added to it.

### Project 004 — Integrated Security Data Services (ISDS)

The Defense Counterintelligence Security Agency (DCSA) is a strategic asset to the nation and our allies - continuously ensuring a trusted federal, industrial, and affiliated workforce and enabling industry's delivery of uncompromised capabilities by leveraging advanced technologies and innovation. DCSA uniquely blends critical technology protection, counterintelligence, security and professional education and certification to advance and preserve America's strategic edge. DCSA will mature the research and innovation capabilities for the security enterprise serving the Trusted Innovation Portfolio Acquisition Executive and the broader DCSA mission set. This effort will drive the pipeline of capability development with promising technologies to support personnel vetting, industrial security, insider threat missions, and acquisition modernization across the security and intelligence enterprise. By leveraging cutting-edge research, operational experimentation, and strategic partnerships with academia, industry, and government, DCSA will deliver trust-enabling solutions that enhance decision-making, streamline workflows, and address emerging challenges in a dynamic threat environment. These investments will ensure DCSA remains at the forefront of innovation, supporting warfighter readiness and strengthening national security.

| Activity (R-2A) | FY2025 | FY2026 | FY2027 |
|---|---|---|---|
| Integrated Security Data Services | 0.0 | — | 8.1 |

> R-2A activities carry the prior, current and budget year only — no five-year plan. Coverage is partial, so count them, never total them.

### Project 003 — Defense Security Analysis and Threat System (DSATS)

The Defense Counterintelligence Security Agency (DCSA) is a strategic asset to the nation and our allies - continuously ensuring a trusted federal, industrial, and affiliated workforce, and enabling industry's delivery of uncompromised capabilities by leveraging advanced technologies and innovation. DCSA uniquely blends critical technology protection, counterintelligence, security and professional education and certification to advance and preserve America's strategic edge. In alignment with DoDI 5205.16, DCSA facilitates effective access to essential insider threat data through an enterprise and shared data management capability. The Defense Security Analysis and Threat System (DSATS), previously known as the DITMAC System of Systems (DSoS), is the designated enterprise system required by the Department of War for the Insider Threat Program (InTP). DSATS requires the ability to function within a self-hosted cloud environment, incorporate new roles, migrate data from legacy systems, and facilitate the integration and sharing of data with both DCSA and external systems. Additionally, DCSA is improving dashboards and reporting, as well as conducting independent verification and validation testing. The system must also be adapted to support automated data ingestion, which will directly aid and enhance analytic efforts to focus on areas of increased risk. These capabilities will empower Commanders to more effectively manage insider threat cases at the installation level and will improve analytic capabilities to all tiers.

| Activity (R-2A) | FY2025 | FY2026 | FY2027 |
|---|---|---|---|
| DSATS | 0.0 | 5.0 | 3.6 |

> R-2A activities carry the prior, current and budget year only — no five-year plan. Coverage is partial, so count them, never total them.

### Project 000 — DITMAC System of Systems

The Defense Counterintelligence Security Agency (DCSA) is a strategic asset to the nation and our allies - continuously ensuring a trusted federal, industrial, and affiliated workforce, and enabling industry's delivery of uncompromised capabilities by leveraging advanced technologies and innovation. DCSA uniquely blends critical technology protection, counterintelligence, security and professional education and certification to advance and preserve America's strategic edge. The DoW Insider Threat Management and Analysis Center (DITMAC) provides an integrated capability to collect and analyze information for insider threat detection and mitigation. The DSATS system gathers, integrates, reviews, assesses, and responds to information derived from DoW Insider Threat hubs, Counterintelligence (CI), security, cybersecurity, civilian and military personnel management, workplace violence, anti-terrorism risk management, law enforcement, user activity monitoring on DoW information networks, and other sources as necessary and appropriate to support the identification, mitigation, and countering of insider threats to Department of War (DoW) and Intelligence Community (IC) personnel, assets and information The DITMAC System of Systems - DSOS requires the capability to operate within a self-hosted cloud environment, add new roles, migrate data from legacy systems, integrate and share data with other DCSA and external systems, improve dashboards and reporting, and complete independent verification and validation testing. It also requires adaptation to allow for automated data ingest which will directly support and enhance analytic efforts to focus on areas of increased risk. These features will enable Commanders to better manage insider threat cases at the installation level and will improve analytic capabilities to all levels.

| Activity (R-2A) | FY2025 | FY2026 | FY2027 |
|---|---|---|---|
| DITMAC System of Systems (DSOS) | 5.6 | — | — |

> R-2A activities carry the prior, current and budget year only — no five-year plan. Coverage is partial, so count them, never total them.

## Where the FY2027 request goes

| Category | Share | $M |
|---|---|---|
| Other / unspecified | 100% | 11.7 |

> R-3 exhibit contract funding, not USAspending obligations.

## Mission & acquisition strategy

The Defense Counterintelligence Security Agency (DCSA) is a strategic asset to the nation and our allies - continuously ensuring a trusted federal, industrial, and affiliated workforce, and enabling industry's delivery of uncompromised capabilities by leveraging advanced technologies and innovation. DCSA uniquely blends critical technology protection, counterintelligence, security and professional education and certification to advance and preserve America's strategic edge. The DoW Insider Threat Management and Analysis Center (DITMAC) provides an integrated capability to collect and analyze information for insider threat detection and mitigation.

## Related program elements

- [0303430V — Federal Investigative Services Information Technology](https://hitchintel.com/programs/0303430V) (Defense-Wide)
- [0305146V — Defense Joint Counterintelligence Activities](https://hitchintel.com/programs/0305146V) (Defense-Wide)
- [0606003A — CounterIntel and Human Intel Modernization](https://hitchintel.com/programs/0606003A) (Army)
- [0602788F — Dominant Information Sciences and Methods](https://hitchintel.com/programs/0602788F) (Air Force)

## Source & machine access

- **Source:** FY2027 Office of the Secretary of Defense RDT&E Budget Justification, Exhibits R-2/R-3, PE 0302609V (PB PB2027); FY2027 NDAA committee marks (as of 2026-07-27).
- **MCP:** `mcp.hitchintel.com` — `budget_get_program_element(pe="0302609V")`.

*HitchAI is an independent intelligence service, not affiliated with the U.S. Department of Defense. Budget figures are requests/estimates, not obligations.*