Cyber Analytic and Data System

The Cyber Analytic and Data System (CADS) is a system of systems that provides a robust and scalable cyber mission information technology (IT) infrastructure and analytic environment. This environment will integrate cyber data sets and provide the tools and capabilities required to support the ability to analyze the full breadth of stakeholder visibility data. The results of that analysis will ultimately support the rapid identification, detection, mitigation, and prevention of malicious cyber activity across all CISA cyber stakeholder communities. CADS will provide a modern, scalable, unclassified analytic infrastructure, knowledge management, and communications capabilities for CISA’s cyber operators and aligns with the vision of CISA’s Joint Collaborative Environment (JCE).

CADS consists of three investment areas that will continue to evolve and deliver capabilities that support the Cybersecurity Division’s (CSD’s) mission to defend and secure cyberspace: Cyber Mission IT Infrastructure, Cyber Operations Tools, and Cyber Mission Engineering.

1. Cyber Mission IT Infrastructure: This investment area provides mission infrastructure services for cyber data ingestion, integration, management, analysis, knowledge management, and collaboration platforms. The CADS Program leverages and integrates common DHS and CISA IT infrastructure services to provision infrastructure as a service, platform as a service, and software as a service for CSD cyber mission needs.
2. Cyber Operations Tools: This investment area includes analytics and information sharing tools that CISA cyber operators will use to conduct analysis on operational visibility data to identify trends as well as critical vulnerabilities. Cyber operations tools will facilitate the ingestion and integration of data as well as orchestrate and automate the analysis to support the rapid identification, detection, mitigation, and prevention of malicious cyber activity. The CADS Program will deliver a future state analytic environment that will enable aggregation of data into an integrated model, where data is harmonized and easy to use and where analysts can conduct analysis across multiple data sets to enable data fusion.
3. Cyber Mission Engineering: This investment area provides engineering services, standards, and best practices to enable other CISA programs to integrate with the analytic and data environment delivered as part of this program. This investment area also provides Data Science services that enable CISA cyber operators to better utilize the data models, analytics, and analytical results to effect cyber mission operations.