Cyber Analytic and Data System

The Cyber Analytic and Data System (CADS) is a system of systems that provides a robust and scalable cyber mission information technology (IT) infrastructure and analytic environment. This environment will integrate cyber data sets and provide the tools and capabilities required to support the ability to analyze the full breadth of stakeholder visibility data. The results of that analysis will ultimately support the rapid identification, detection, mitigation, and prevention of malicious cyber activity across all CISA cyber stakeholder communities. CADS will provide modern, scalable analytic infrastructure, knowledge management, and communications capabilities for CISA’s cyber operators that align with the vision of CISA’s Joint Collaborative Environment (JCE).

CADS consists of three investment areas that will continue to evolve and deliver capabilities that support the CISA cyber mission to defend and secure cyberspace: Cyber Mission IT Infrastructure, Cyber Operations Tools, and Cyber Mission Engineering.

1. Cyber Mission IT Infrastructure: This investment area provides mission infrastructure services for cyber data ingestion, integration, management, analysis, knowledge management, and collaboration capabilities. The CADS Program leverages and integrates common DHS and CISA IT infrastructure services to provision infrastructure as a service, platform as a service, and software as a service for CISA cyber mission needs.
2. Cyber Operations Tools: This investment area includes analytics, collaboration, knowledge management, and information sharing tools that CISA cyber operators will use to conduct analysis on cyber operational visibility data to identify trends as well as critical vulnerabilities. Cyber operations tools will facilitate the ingestion and integration of data as well as orchestrate and automate the analysis to support the rapid identification, detection, mitigation, and prevention of malicious cyber activity. The CADS Program delivers a robust analytic environment that enables the aggregation of data into an integrated model, where data is harmonized to enable more efficient analysis across multiple data sets.
3. Cyber Mission Engineering: This investment area provides engineering services, standards, and best practices that enable other CISA programs to integrate with the analytic and data environment delivered as part of this program. This investment area also provides Data Science services that enable CISA cyber operators to better utilize the data models, analytics, and analytical results to effect cyber mission operations.