Reducing Cyber Risk Across Defence: FAQ

Q: Does this competency focus on threat detection and response systems/cyber defense?

A: The Cyber ​​Resilience Program is not responsible for the threat detection and response aspect of Cyber, so it is not our primary interest.

Q: Are you looking for solutions that can improve OT security or is this phase limited to tools to quantify risk first?

A: The priority of Challenge 3 of this competency is to understand and quantify the risk present in OT systems. However, if you think your innovation could help us in the next stage, improving OT security, we would consider it.

Q: Do OT assets also include cyber physical systems?

A: Yes.

Q: Does Challenge 1: Digital Resilience cover artificial intelligence (AI) resilience?

A: Yes, AI resilience is a subset of digital resilience. It is not our top priority when it comes to digital resilience, but it is of interest.

Q: Are there any mandatory technologies that need to be considered in terms of integration with specific SIEM tools or applications?

A: No, we are looking for technologies that provide results of up to Technology Readiness Level (TRL) 6. We do not expect senders to be able to instantly integrate with current MoD tools. Currently, the Ministry of Defense has several tools in this space, but no prior knowledge of these tools is required to submit a proposal.

Q: Can you expand on the “must demonstrate knowledge of the contemporary military operating environment” requirement?

A: The work completed through this competition will be for the Ministry of Defence, therefore we would like proposals to consider the types of environments we operate in, the operations we run and the business the Ministry of Defense conducts.

Q: Can the MOD share the work already being done in this field to allow us to understand whether an idea is innovative?

A: We recommend reading the strategy under which the Cyber ​​Resilience Program was defined, available on the website. The Secure by Design portal will also be available, containing more information. We recommend contacting your regional Innovation Partner for more tips and guidance.

Q: Where can we find more information/examples of the “contemporary military operating environment” so we can be sure we align our proposal appropriately?

A: The Defense Command Document and the Digital Strategy for Defense are useful publications that provide some guidance on Defense-wide activities and objectives.

Q: If we intend to conduct primary research, would you provide access to participants from the defense sector?

A: Wherever possible, participants from the Defense sector may be provided, although this is not guaranteed. Suppliers requesting access to Defense participants must describe how they could implement the project if such access were not possible.

Q: What level of GFX might be available?

A: The level of GFX available is specific to each proposal. Discussions on GFX would take place at a later stage when a decision was received from the "Fund". Suppliers requesting GFX must describe how they could deliver the project if GFX were not available.

Q: Are you looking for just software solutions to these problems, or are you looking for learning-based solutions with workshops, training of trainers, etc.?

A: The solution does not need to be software. We would be interested in solutions such as an innovative approach to managing risk, implementing resilience or security by default.

Q: The report said that the proposals should be innovative. Can you expand on what innovative means in this context?

A: The Ministry of Defense is already carrying out similar work with various industry partners, so the basic approaches to the topics outlined in the competition are understood. Therefore, we are interested in proposals that present new solutions, or improve existing ideas.

Q: You state that you are not interested in proposals that provide solutions that are already marketed products, can you explain?

A: If the solution is already a normal business within the industry, it is not innovative. If commercial products are used, there needs to be an innovation aspect. This could include adapting an existing solution for use in a specific Defense context.

Q: Can we use a commercial product and create a plugin as an innovative solution and apply it as a proposal?

A: It would depend on the scope of the proposed modification. Please take note of the IP conditions of this competition: ensure that the proposal conforms to the Defcon 705 requirement.

Q: What if we already have an applicable product currently on the market?

A: We recommend that you register to attend the CRP briefing through TechUK. The next such briefing is scheduled for Friday, October 6. Check out the TechUK events page here.

Q: Does the tool or technology prototype need to be ready at the proposal stage?

A: No, however it must be ready for the demo stage.

Q: What do you expect from the prototype demonstration?

A: We are awaiting an indication of a solution that will help us overcome the challenges contained in the competency document. We don't have a strict vision of the prototype or how it should work; However, this should give us confidence that your approach will work.

Q: If our idea is tangential to this contest but more relevant to a future contest, should we wait for the later contest before submitting it?

A: If you are unsure if your idea is right for this competition, please contact your regional representative. Innovation Partner to discuss available opportunities.

Q; Are there any requirements to work at classification levels above OFFICER?

A: There is no requirement to work at a classification level higher than OFFICER. DASA's default approach is for all contracts to be issued OFFICIAL to allow participation from a broad group of suppliers. If there is a requirement to increase the classification level of the project, and provided you have approved this appropriately, this can be considered during the course of the project. The DASA Submission Service is limited to OFFICIAL information only.

Q: Is the goal TRL 6 for this initial phase of the competition? The competition document states that more phases could occur to increase the TRL.

A: This competition is interested in innovation projects that will generate results at Technology Readiness Level (TRL) 6 – demonstration of technology model or prototype in a relevant environment.

We are in the early stages of all three challenges within this competition and related projects and programs are being established. As these projects and programs develop, there may be more phases in which higher TRL work can be sought and contracted.

Q: Can the proposals address multiple challenges?

A: Yes, a proposal can cover multiple challenge areas and Salesforce will allow you to select multiple challenge areas on your submission form. However, covering multiple challenge areas can result in a weaker proposal if they are not fully covered.

Q: What types of organizations do you want to partner with?

A: DASA submissions are welcomed from the private sector, academia, individuals (i.e. sole traders) and public sector research establishments (PSRE). DASA will examine the legal status of organizations before entering into any contract. In most cases there are no nationality restrictions; however, individual DASA competency documents will detail any necessary restrictions.

Q: Can a university apply to this competition?

A: Yes, universities can apply (independently) to DASA competitions.

Q: Are you open to joint applications from companies that together can address a broader set of aspects of the challenges presented?

A: Yes, we welcome collaborative proposals. However, covering multiple challenge areas can result in a weaker proposal if they are not fully covered. A proposal will require a lead applicant, with partner organizations listed as subcontractors. We would also recommend clearly stating in the proposal the responsibilities of each organization involved.

Q: Can the same research team or institution submit more than one proposal?

A: Yes, more than one proposal can be submitted as long as they are different proposals and address potentially different challenges. Proposals must be independent and not dependent on DASA funding multiple projects from the same provider.

Q: Is the funding £880,000 per proposal? Or £176,000 per proposal?

A: There is £880,000 in total available for the overall competition. Funding will not be limited to £176,000 per proposal. This competition seeks to finance up to five proposals. We anticipate that there will be variations in total project costs.

Q: Can expressions of interest be submitted before writing a proposal to see if the idea is in scope?

A: We recommend contacting your regional Innovation Partner for more tips and guidance.

Q: What accreditations (e.g. Cyber ​​Essentials, etc.) are required at the time of application?

A: We do not require any specific accreditation. However, due to the theme of the competition, we hope that the proposals show considerations for accreditations.

We recommend reading Section 12.1 of the tender document which details the Supplier Assurance Questionnaire (SAQ) that must be completed.

Q: Do we need national security clearance for our researchers and staff who will work on this project?

A: Security clearance is not required before applying to DASA. DASA competitions are open to citizens of the United Kingdom and friendly countries.

Q: Are there restrictions on working with foreign suppliers?

A: There are no restrictions on working with foreign suppliers from friendly countries. However, we would not welcome proposals that involve working with hostile countries.

Q: Is there a list of evaluation criteria?

A: The evaluation criteria can be found on the DASA GOV.UK page and in the competition document in Section 14 "How your proposal will be evaluated". If you need help accessing the information, please contact the DASA Help Center at accelerator@dstl.gov.uk.

Q: Is it mandatory to identify an end user?

A: Defense Digital is funding this contest and is the end user. It is not necessary to identify end users when applying to DASA themed competitions.

Q: What is the maximum project duration?

A: The contracts awarded will have a maximum duration of 9 months.

Q: Who owns the intellectual property?

A: The intellectual property remains with the innovator. We recommend reading the DASA Standard Terms and Conditions on the website. There is a clause within DEFCON 705 that states that if you do not wish to commercialize a solution after funding, we reserve the right to license the intellectual property to you.

Q: Who has priority in export control?

A: You must comply with the local laws of the country you are exporting from. We recommend speaking with the local authorities in your country. We would not expect any problems if we were exporting from a friendly country.

Q: Can we submit a proposal if we have submitted or have submitted the same or a similar proposal to another competition?

A: If the proposal had merit but could not be funded due to budget constraints, for example, "fundable not funded", you may resubmit it to this competition; however, we hope that the proposal will be modified to meet the requirements of this competition. . We suggest that providers in this situation interact with their regional authorities. Innovation Partner for more guidance.

Leave a Comment

Comments

No comments yet. Why don’t you start the discussion?

Leave a Reply

Your email address will not be published. Required fields are marked *