SSA RFI: Operational Technology Policy Development – MRAS

The Social Security Administration (SSA) requires a contractor that can deliver services related to Operational Technology (OT) and Industrial Automated Control Systems (IACS) to develop a cybersecurity policy and practices for the National Support Center (NSC).

The Contractor will align its efforts to industry standards to maintain the highest level of security and compliance needed within the NSC including: NIST SP 800-82, UFC 4-010-06, UFGS 25-05-11, IEC 62443. The contractor shall:

• Develop policies to guide cybersecurity operations for the NSC
• Develop processes to implement cybersecurity risk mitigations and incident responses
• Identify metrics for cybersecurity monitoring of the OT
• Contractor shall input all required information into the SSA format in XACTA for ISSO approval
• Support the process, assessment, and documentation requirements to achieve Authority to Operate (ATO)

The anticipated period of performance will be 24 months.

Read more here.

🔊 Listen to Story