Specifications include, but are not limited to:It is the intent of the SCPA to solicit Proposals for the Work/Services of qualified Respondent(s) to provide Professional Services with all Cyber Security Assessment requirements stated herein. The objective of this RFP is to acquire a Contract to provide Professional Services to the SCPA. The primary considerations are economy of price, quality, Professional Services, and the ability to meet insurance requirements. 4.2GENERAL DESCRIPTIONA.Identify senior information security officer appointed with the mission and resources to coordinate, develop, implement, and maintain an organization-wide information security program. B.Identify asset and risk management strategies and SCPA governance model for Cyber Security. C.Assess accuracy of current information system inventory. D.Assess completeness of resources requested to implement the information security program planned. E.Assess detection of security anomalies, events and continuous security monitoring. F.Assess development of enterprise architecture taking into consideration information security and resulting organizational risk. G.Assess information security issues addressed in critical infrastructure plan. H.Assess information security program for completeness, accountability, dissemination, and confidentiality. I. Assess insider threat awareness and threat incident handling. J. Assess organizational commitment to enhancing security awareness and capabilities of organizational personnel and their participation in the wider security community for sharing relevant and emerging security information. K. Assess organizational risk management strategy and organization priorities for risk response actions. L. Assess organization's information security workforce development and improvement program. M. Assess protection of data, awareness and training, IT protection processes and procedures. N. Assess usefulness of information security measures of performance. O. Contractor presents Cyber Security program assessment to SCPA Executive Management
