Common use of Cyber Security Incident Response and Management Clause in Contracts

Cyber Security Incident Response and Management. Contractor shall provide services in accordance with the following requirements and capabilities: Description - Service category to provide Cyber Security Incident Response and Management services necessary to ensure personnel at all levels respond to security incidents in a way that is rapid, compliant and thoughtful. Following are characteristics of this service category: Requirements / Capabilities • Certified Security Professionals writing plans, evaluating existing plans, documenting and recommending changes to incident response plans and related work. Examples of Potential Statements of work: • Classifying data stored or transmitted between computing platforms (e.g. PC, servers, mainframe) and networks; • Provide incident response and related training; • Exercise/simulate incident response scenarios; • 24/7 incident response assistance • Vulnerability management • Policy/procedure development; • Provide operational and analytical support related to security for computing platforms (e.g. PC, servers, and mainframe) and networks. • Consultation on operational and infrastructure requirements, standards and configurations • Facilitate meetings • Address security and incident response issues with functional areas and management • Analyze and evaluate new and emerging security technologies as well as vendor security products for their applicability and feasibility of use in securing hardware/software IT and telecommunications resources; • Perform security audits and/or penetration testing of IT systems and applications in the context of NIST, IRS 1075, CJIS, HIPAA and so on; • Provide operational and analytical support related to security for computing platforms (e.g. PC, servers, and mainframe) and networks.