FEDERAL SUPPLY SERVICE Federal Network Systems LLC - Verizon

Security Services (Antivirus program, account management, domain management; Communications
security; Network security (information assurance)
Verizon Security Consulting Services. Verizon's Security Consulting Services–also known as "packaged"
security services – help companies quickly improve their information security environment in an effective,
cost-efficient way. Verizon’s suite of security consulting services offers complete, end-to-end security
solutions, including:
• Executive Security Briefing. Executive Security Briefings help organizations understand potential
threats to their information assets, and the risks associated with today's computing environments.
These 2-hour presentations are free, value-added services for the first 100 requests on the latest
security threats and solutions. They are delivered to CIOs, VPs, and Directors.
• Genuity Questionnaire. Before work on a security implementation can begin, Verizon/ Genuity
administers a required, in-depth questionnaire to help establish a baseline of a company’s existing
security systems, policies, and infrastructure. Because the questionnaire is fairly detailed and many
companies do not have the in-house resources to complete it, Verizon provides a security consultant to
assist the customer.
• Vulnerability Testing Services. Verizon analyzes customers’ information "insecurity," which consists
of three levels of testing:
- Basic Vulnerability Testing Service. Includes port scans and vulnerability scanning tools; the
latest security methodologies and technologies; and testing of components from external access
points.
- Intermediate Vulnerability Testing Service. Includes the basic testing service, plus consultation
from system component experts who evaluate current security posture, develop guidelines and
recommend improvements, and conduct high-level (basic) penetration testing.
- Advanced Vulnerability Testing Service. Includes the basic assessment, plus comprehensive
(detailed) penetration testing.
Verizon provides a number of assessment services, including a Silver level and a more comprehensive
Gold level assessment, as well as host, firewall, and HIPAA assessments, as described below:
- Silver Level Assessment. The Silver Level Assessment includes a basic, external port scan,
physical security review, documentation review, and network architecture diagram review. After
Verizon security experts carefully analyze this information, they create a written report, hold a
second meeting to discuss the report and customer security concerns, and finalize a comprehensive
security plan.
- Gold Level Assessment. This security assessment includes the basic components of the Silver
Level Assessment, including a basic, external port scan, physical security review, documentation
review, and network architecture diagram review. Verizon security experts carefully analyze this
information, create a written report, hold a second meeting to discuss the report and customer
security concerns, and finalize a comprehensive security plan. The Gold Level Assessment also
includes:
- An advanced, external port scan of the network to identify services.
- A vulnerability scan of the external network (maximum of five public access servers).
- Basic Phone (modem) sweep of the network to search for unauthorized modems connected to
the network
• Host Assessment. A Host Assessment determines how the operating system provides security for the
network. The assessment also includes a review of physical security and how it relates to IT security,
and a procedural review of security procedures in place. Key components of the assessment include:
- An onsite physical security assessment and interview with physical security staff.
- An automated Operating System assessment that gathers data about the operating system, its
security features, settings, and service pack levels.
- Assessment of up to 10 servers (5 external and 5 internal servers).
- A review of the client’s security procedures.
- Written report of findings with recommendations