The Obama administration, as part of a $19 billion national cybersecurity plan, is contemplating a one-stop shop for agencies to quickly buy cyberincident response services.
A new request for information asks security vendors for advice on consolidating preventive, reactive and fix-it help in the government’s biggest pre-approved IT contractor list.
The proposed “Highly Adaptive Cybersecurity Services” would be available through what is called General Services Administration IT Schedule 70.
GSA issued the market research survey to receive feedback and learn how contractors currently listed on Schedule 70 have been selling their cyber help.
GSA expects that providing agencies a single menu of options will better reflect the present marketplace and the government’s needs, plus minimize costs. The line item also should allow IT contractors already on Schedule 70 “to more easily differentiate cybersecurity services from other IT offerings,” the market research questionnaire states.
The government anticipates “proactive services” would include identifying legitimate IT assets that are on your network, scanning for security vulnerabilities, and testing employees’ reflexes to fraudulent “phishing” emails. The preventive measures also consist of web application assessments and hunts to spot undetected adversaries or breaches.
The proposed “reactive services” essentially are emergency response services, like determining the extent of a breach, kicking the bad guys out of the system, and restoring the network.
The “remediation services” might include technical support for security controls, system updates, or architectural improvements to fix the problems found during proactive or reactionary network evaluations.
The Highly Adaptive Cybersecurity Services proposal traces its origins…