Specifications include, but are not limited to: SERS is seeking a qualified vendor to provide the following services: 1. Validate the implemented network segmentation meets the requirements for separation of data types. SERS maintains: Personally identifiable information, including SSNs, bank account information, and employment history as part of member records. Protected health information, including diagnoses and examiner reviews as part of disability records. 2. Evaluate the internal segmentation design against standards and best practices for isolating sensitive data. Identify deviation from industry standard practices and quantify potential adverse impacts of these deviations. Perform non-destructive tests attempting to traverse network segments. This will be a full-knowledge, collaborative effort to verify control effectiveness with the SERS networking team.