Cybersecurity Support Services

Vendors to provide comprehensive cybersecurity support, advisory, and incident response services.
- Cybersecurity Assessments and Roadmap Planning:
The successful proponent must be capable of conducting cybersecurity assessments and preparing practical improvement plans. Assessments may include reviews of:
• Governance, processes, and organizational practices;
• People, roles, and responsibilities;
• Technology, infrastructure, and cloud environments;
• Third-party and supplier arrangements; and
• Operational practices and controls.
- Cybersecurity Process Development and Improvement
The successful proponent must be capable of developing, documenting, implementing, and improving cybersecurity processes and operating practices, including:
• Vulnerability management program development;
• Incident response plans and procedures;
• Risk management processes;
• Security awareness program management;
• Third-party and supplier cybersecurity review processes; Access review processes; and
• Cybersecurity performance measures and reporting.