Cybersecurity Assessment Services

A government authority in Michigan is seeking vendors to provide comprehensive cybersecurity assessment services. The selected vendor will be responsible for conducting technical kickoff sessions with IT, OT, and facility stakeholders to establish project parameters. They will document assumptions related to system uptime, safety protocols, and requirements for non-intrusive testing.

The scope includes the development of a detailed engagement plan, data request list, and communication protocols. Vendors will validate and document inventories of IT and OT assets such as servers, network devices, field devices, and applications. The engagement also covers reviewing logical and physical network diagrams, data flows, trust relationships, identification of critical systems, and single points of failure.

Further, the vendor will conduct vulnerability assessments using non-disruptive methods, review baseline security configurations, patch management, hardening standards, and logging setups. The assessment will encompass intrusion and anomaly detection capabilities, and involve technical readout sessions for engineering, IT, and security personnel to discuss the results and recommendations.