NCIA – Encrypted Traffic Interception Design & Build (RFP-CO-424365-CETIS)

Summary

The NATO Communications and Information Agency (NCIA) has issued a Notification of Prospective Opportunity (NPO) seeking a contractor to design and implement a centrally managed Encrypted Traffic Interception System. The solution must be capable of centrally intercepting, inspecting and analysing encrypted network traffic and of carrying out the actions required for network management. The system will leverage existing NATO systems (gateways, firewalls, web proxies) and/or new contractor-provided components to cover a wider range of protocols. The scope includes integrating and reconfiguring systems into a unified security baseline, deploying NATO-provided encryption interception PKI certificates, and on-premises (high side / low side) and cloud interfaces. Scale: approximately 100 interfaces across existing systems and approximately 20 high side and 20 low side installations of the new component, with infrastructure covering all NATO nations. The bid includes an optional Operate & Maintain service. The Rough Order of Magnitude (ROM) is EUR 10 million (indicative only). Eligibility is restricted to contractors from participating NATO nations. Security classification: NATO SECRET (NS). A Declaration of Eligibility (DoE) issued by the National Authority is required and must reach NCIA no later than 24 August 2026. Estimated RFP release: 30 September 2026. Estimated bid closing date: 13 November 2026. Estimated contract award: 29 January 2027. Language: English. The actual evaluation criteria will be published in the subsequent RFP documentation, which has not been provided here; it contains additional conditions not reflected in this summary.

Attachments

• file_download.ashx