Cyber Security Defense Services III

The USCIS Office of Information Technology (OIT) has a requirement for information regarding contractors’ ability to provide services to protect USCIS' IT infrastructure and resources, information systems, and the information used in these environments from cybersecurity threats. First and foremost, this should not be interpreted as seeking consultants to “develop new solutions.” Rather, it seeks staff that can provide Operations and Maintenance (O&M) support for security-related products/projects. OIT is seeking information regarding: The ability and experience of Contractor(s) supporting the work areas listed below The abilities of small businesses to meet the identified requirements Appropriate contract types and contract structures. This includes identification of particular task areas as having a sufficiently defined scope to provide a firm basis for pricing all or part of the contract as firm fixed priced. Anticipated work areas: Deploying and operating cyber security tools (antivirus, network traffic analysis, logging, vulnerability scanning, network device scanning and identification, etc.) to identify vulnerabilities and/or detect anomalous activity within the enterprise Providing security expertise in network design, configuration, and operation Developing and deploying solutions to automate security compliance in cloud environments Scanning USCIS source code and web applications Conducting penetration tests and security exercises to assess the security posture of USCIS systems and to determine the effectiveness of USCIS security tools and processes