NCIA – Cyber Threat Intelligence Capability Uplift (RFQ-CO-424281-CTI)

Summary

The NATO Communications and Information Agency (NCI Agency) announces its intention to request quotations for the uplift and integration of an existing on-premises Cyber Threat Intelligence (CTI) capability. The procurement reference is RFQ-CO-424281-CTI (NCIA/ACQ/2026/07297, project 2022/0IS03005, CP9A3201), and the estimated value is EUR 5,100,000. The objective is to provide centralised functions for the ingestion, management, analysis, sharing, visualisation, automation and integration of threat intelligence, enabling effective classification, enrichment and correlation of information. The work includes enhancing the existing MISP (Malware Information Sharing Platform) environment, integrating COTS components, possible replacement of components (excluding MISP), design, installation and configuration of the solution across network segments at different security classification levels (NATO UNCLASSIFIED, NATO RESTRICTED and NATO SECRET), integration with existing systems, documentation, test support (FAT, SAT, UAT), transition to operations, and training. The contract includes a software warranty and O&M support following acceptance of final delivery. The procurement will be conducted under BOA+ procedures on a Firm Fixed Price basis, with award to the Lowest Price Technically Compliant (LPTC) bidder. Eligibility: companies not on the bidders list must submit a Declaration of Eligibility (DoE) through their delegation no later than 10 July 2026. The NOI closes on 10 July 2026. The RFQ is expected to be issued in July 2026 and to close in September 2026, with contract award expected in January 2027. The period of performance is expected to start in Q1 2027 and end in Q3 2029. The Finnish companies on the list are Reaktor Innovations Oy and Unikie Oy. The actual RFQ documents and their detailed terms will be published at a later date and are not reflected in this summary.

Attachments

• file_download.ashx