A. Deliverable #1 Emergency Threat Alerts i. Offeror shall notify CDOS by email as soon as possible, and in no event later than one hour from discovery, of any threat that suggests an imminent, specific, concrete threat to life or injury for the Secretary, the Secretary’s immediate family, or any person included in the monitoring list that CDOS provides to the Offeror. B. Deliverable #2 Daily Threat Alerts i. Offeror shall upload to its online portal, for access by CDOS with email notification of the upload, the daily threat reports for the day by 17:00 mountain time (MT), Monday – Friday (except on federal holidays) with information on potential threats, or indicating no threats identified that day: a. Offeror shall identify potential threats of violence or injury across those social media networks and internet sites that Offeror believes to be likely to include potential threatening content, including, without limitation, at least X, Facebook, Instagram, Reddit, Bluesky, TikTok, Gab, Gettr, Rumble, Telegram, and Truth Social. b. Offeror shall define “threats” as information that any reasonable person would interpret as a real and serious communication of an intent to inflict harm. This content could describe, encourage, suggest, or condone a specific act of violence against any of the individuals named by CDOS in its monitoring list provided to Offeror, as well as against CDOS facilities or CDOS systems. c. Offeror shall provide reports under the existing Offeror Threat Alert format used by CDOS unless otherwise agreed upon by Offeror and CDOS. C. Deliverable #3: Threat Updates i. Offeror shall provide updates on identified or potential future threats under the following terms: a. Whether the threat is part of a coordinated inauthentic behavior by “bots” or other non-human engines. b. Whether the threat has been generated by an inauthentic user (a “bot”). c. Whether the threat is receiving continuing user engagement after initially being identified and reported by Offeror. d. Whether the user who posted the threat has posted other threatening content previously. e. Whether there is a mechanism with the particular social media platform where the threat content was posted to submit a request for taking down the threatening content or other enforcement options; and, f. Updates on actions taken by platforms or other parties to address particularly concerning content. ii. Offeror shall provide updates on potential future threats resulting from broader narratives or trends in cases such as: a. An identified narrative that could encourage future threats against CDOS personnel or facilities. iii. Offeror shall provide updates via email unless otherwise agreed upon by Offeror and CDOS.
