The contractor provides incident analysis and assessment in order to determine the scope and impact of incidents. The contractor also provides the Agency with effective incident response support around the clock. These plans detail the incident response process, identify internal resources, assign duties to team members, describe policies, define severity levels, list escalation chains, and specify emergency/recovery procedures. Under INRS, the contractor reviews the Agency's security infrastructure and develops the appropriate strategic plans in collaboration with the customer. INRS provides an effective method of addressing these security intrusions, thereby ensuring operational continuity in case of attacks. Reactive services involve telephone and on-site support for responding to malicious events such as Denial of Services (DoS) attacks virus, worm, and trojan horse infections illegal inside activities, espionage, and compromise of sensitive internal Agency databases. They include onsite consulting, strategic planning, security audits, policy reviews, vulnerability assessments, security advisories, and training. Proactive services are designed to prevent incidents. INRS is comprised of both proactive and reactive activities. INRS was not offered as a service on the FTS2001 contracts. The service does provide Agencies with secure Web access to contractor incident analyses and recommendations. INRS does not currently offer any features. The Incident Response Service (INRS) offering is described below. Managed E-Authentication Service (MEAS).Intrusion Detection and Prevention Service (IDPS).Managed Tiered Security Services (MTSS).In addition to this mandatory level of security, the Networx contracts provide additional security services that may be ordered on a fee-for-service basis. These requirements are detailed in Section C.3.3.2 Security Management of the Networx contracts. The contracts employ adequate and reasonable means to ensure and protect the integrity, confidentiality, and availability of Networx services, Operational Support Systems (OSS), and Government information transported or stored in the contractor's Networx services infrastructure. The Networx contracts require a basic level of security management for its contractors that ensures compliance with Federal Government generally accepted security principles and practices, or better.

Networx contract pricing