Information Systems Security Management (ISSM)

Background
The IRS is considering an Information Systems Security Management (ISSM) Contract. The ISSM project is to procure the necessary contractor technical expertise and support providing comprehensive support in the creation of a robust and overarching ISSM Vulnerability Compliance and Remediation Program. This program is intended to standardize procedures, develop new capabilities by implementing automated processes and tools, and increase ISSM ISSO’s awareness and efficiencies in the performance of their duties.

Work Details
The contractor shall provide expertise and services in developing a framework for the ISSM Vulnerability Compliance and Remediation Program.
The contractor shall provide expertise and services in vulnerability identification and remediation efforts.
The contractor shall provide expertise and services in data taxonomy. Contractor shall identify and develop automated processes and tools.
The contractor shall provide expertise and services in asset inventory verification and conciliation.
The contractor shall develop a continuous monitoring reporting program to provide status reports on ISSM supported systems/ applications and supported efforts.
The contractor shall provide training and knowledge transfer of all areas and items developed in support of this program.
The contractor shall provide develop ISSM Security Measurement (Quantitative) approach to measuring and analyzing security controls implementation and effectiveness at the information system and program levels.