Cyber-Physical Systems Protection Platforms

The Vendor is required to provide a cyber-physical systems protection platform.
- Cyber security can be enhanced through improved vulnerability management, threat management, visualizations, alerts, and integration with existing IT security and inventory tools.
- Administrative Functions
• Restrict device access to authorized users/entities.
• Detect anomalous traffic (traffic which deviates from expected traffic patterns).
• Provide alerting capabilities.
• Provide incident response and forensic data.
• Provide role-based access control.
• Provide ability to port user privileges.
- Network
• Support common communication protocols while not impacting transportation operations.
• Provide network topology diagrams.
• Provide network segmentation-related features.
• Prevent unauthorized device connections.
- Reporting
• List discovered vulnerabilities and associated recommended actions to remediate each vulnerability.
• List discovered security threats and recommended actions to mitigate each threat.
• Assign a risk score to each vulnerability and security threat.
• Provide security frameworks compliance reports.