Cyber Security Vulnerability Assessment Services

The Vendor is required to provide cyber security vulnerability assessment services for include:
• Network discovery - a review of network connectivity to identify all electronic access points to the electronic security perimeter.
• Logical network accessible network ports identification - a review to verify that all enabled logical network accessible ports have an appropriate business justification.
• Vulnerability review - a review of security rulesets and configurations, including controls for default accounts, passwords, and network management community strings.
• Wireless review - identification of common types of wireless networks and a review of their controls if they are in any way used for BES cyber system communications.