Specifications include, but are not limited to: ➢ The application will be used and must meet NERC-CIP baseline/change detection requirements. ➢ Must produce reports suitable for NERC-CIP audits, such as point-in-time baseline reports and show configuration changes. Please provide samples of reports with an explanation of how they are produced with your bid. ➢ Licensing for 250 endpoints. Details will be provided to the vendor, but for bidding purposes see the following list of type of endpoints. o Network devices o Block storage o NAS devices o Operating Systems -LINUX & Windows o Physical Access Control o Back up appliances o Remote access appliances o Load balance appliances o Logging appliances o Authentication appliances o Firewall Management o Proxy servers o SAN storage switches o Server Hardware o Up to 5 applications regarding local account and related configuration information o Lights-Out Management o Virtualization Platform ➢ Remote data collectors for at least 17 subnetworks ➢ Installation, initialization, and knowledge transfer to the OT Network Staff as work is progressing. ➢ Instructor led interactive training for at least 5 users. The training can be in person or online. If online, it should be live training through MS TEAMS or similar forum. ➢ 3 years of maintenance support ➢ Deliverables: o Detailed written design description. o As-built documentation. o NERC-CIP Compliance Reports
