State seeking new plays to protect networks, data

Acquisition

State seeking new plays to protect networks, data

The State Department wants industry to help it write a new playbook for government cybersecurity best practices. State's Bureau of Information Resource Manageme...

Nicole Ogrysko@nogryskoWFED

September 4, 2015 3:50 pm

2 min read

The State Department is turning to the playbook idea to help government develop better cybersecurity best practices, and it wants industry to help write it.

The department released a request for information Wednesday.

State’s Bureau of Information Resource Management, Information Assurance (IRM/IA) is looking for “specialized cybersecurity experts” who can write a how-to guide for responding to cyber attacks and coordinating offensive cyber activities.

Playbooks would support State’s Information Management, Information Assurance program, which is responsible for the department’s cybersecurity initiatives. But the RFI said the playbooks would get released to the public once they’re finished.

“The playbooks will not be tailored specifically to the information technology architecture of the U.S. Department of State, but rather will be written in a manner that reflects current industry best practices and thinking while still providing the granularity necessary to configure and implement specific hardware and software solution sets,” the RFI said.

The department encouraged five companies specifically, including AT&T, Booz Allen-Hamilton, CenturyLink, Deloitte and Planet Technology, to submit responses, but it’s open to others as well.

The goal is to publish one playbook every 30-to-45 days under a one-year, firm, fixed-price contract. The RFI mentions 12 possible subject areas, including two-factor authentication, mobile device and cloud computing security.

Responses are due Sept. 11.

Agencies posted some progress in improving their cybersecurity posture during a 30-day cybersecurity sprint after two major breaches at the Office of Personnel Management. But most cyber experts would agree there’s more work to do.

“The cyber threat to critical infrastructure continues to grow and represents one of the most serious national security challenges we must confront,” the RFI said.

The playbook concept isn’t new. The Office of Management and Budget released one for digital services in May 2014. The White House and General Services Administration both developed an open government playbook last year to give agencies more tools to better interact with the public.