Tenable Security Center Maintenance Renewel

The Department of Veterans Affair (VA) Office of Information Security has a base requirement to renew maintenance and support for existing brand name Tenable Security Center (commercially labeled “Tenable.sc+”) licenses to cover: an Enterprise License of 1.2M IPs, its included three (3) console installations (see CLIN 1&2), eight (8) additional console installations (CLIN 3), maintenance for a Tenable.sc Director License of 1.2M IPs (CLIN 4&5) and to renew maintenance and support for a stand-alone Unlimited Hosts Tenable.sc Continuous View (CLIN 6). The console installations are in various datacenters with the Tenable.sc Director in Sterling, Virginia. Specifically, the maintenance and support of this application is required to support network vulnerability security and compliance scanning for the VA Cybersecurity Operations Center (CSOC) Vulnerability Scanning Services (VSS). Tenable Network Security Center Software licenses, which are already in production, perform discovery, configuration auditing, asset profiling, sensitive data discovery and vulnerability analysis of VA’s enterprise network environment and provide the data to help in assessing the agency’s Information Technology security state. The existing licenses are required for the authoritative scanning services provided by the CSOC to all of VA and allow the CSOC to conduct the monthly enterprise vulnerability scan (Enterprise Predictive Scan), Payment Card Industry scans, external vulnerability scans, scans for Authority to Operate, Security Control Assessments, scans to support Compliance Readiness Division (CRD) and scans in support of VA’s efforts to remediate the Office of Inspector General (OIG) material weaknesses. The licenses also support any scans required to assess the network for emergent or imminent threats, which scans are often required by various requesting agencies (e.g. Department of Homeland Security/CISA, Government Accounting Office, Department of Health Services, Internal Revenue Services, etc.) Ultimately, the existing Tenable licenses allow VA OIS CSOC VSS to effectively carry out its network vulnerability scanning. VA requires maintenance and support for the software licenses in order to keep the software patched, fully functional, and operationally current. Maintenance support is defined as any software patch, vulnerability security updates, maintenance releases, as well as problem resolution. Tenable product maintenance’s phone and web support shall be comprised of technical support provided for troubleshooting vulnerability, reporting of issues, even informational type questions during their established hours (Monday through Friday 6:00 AM to 9:00 PM Eastern Standard Time).