Network Infrastructure Security Vermont DOC

The Network Infrastructure Security resource will evaluate DOC’s existing network and physical infrastructure, assess security and compliance gaps, evaluate secure wireless deployment requirements, and recommend network security controls and segmentation approaches., * Assess existing network infrastructure across six DOC facilities.

• Review network topology and infrastructure.
• Evaluate network closets and physical infrastructure.
• Assess shared vendor infrastructure.
• Identify physical separation requirements.
• Evaluate secure wireless deployment constraints.
• Assess network-security risks.
• Conduct compliance gap analysis.
• Evaluate CJIS requirements.
• Apply NIST cybersecurity standards/frameworks.
• Consider HIPAA requirements for sensitive medical data.
• Recommend network segmentation.
• Recommend authentication mechanisms.
• Recommend encryption/security controls.
• Evaluate physical security considerations.
• Support Tri-Cage network architecture.
• Identify facility-specific infrastructure constraints.
• Develop security recommendations and remediation strategies.

The SOW specifically requires evaluation of network closets, shared vendor infrastructure, physical separation, and constraints affecting future wireless deployment.

• Network Infrastructure
• Network Security
• Wireless Networking
• Wireless Security
• Network Architecture
• Network Segmentation
• Authentication
• Encryption
• Security Controls
• Infrastructure Assessment
• Security Risk Assessment
• Compliance Gap Analysis

Required / Important Security Knowledge

• CJIS Security Policy
• NIST
• HIPAA
• Physical security
• Network segmentation
• Authentication
• Encryption

The RFP requires expertise in secure wireless design, CJIS compliance assessments, NIST standards, HIPAA considerations, network architecture/segmentation, and infrastructure modernization.

Preferred Experience

• Correctional facilities
• Military installations
• Healthcare/high-security environments
• Public safety
• Justice-sector environments
• State government
• Multi-vendor infrastructure
• Distributed/multi-facility environments