Cybersecurity key in converged NS2020 environment

How cybersecurity is woven into fabric of the GSA's next-generation telecommunications contract.

Telecom VOIP Switch - Shutterstock

Cybersecurity has always been a key aspect of the General Services Administration's Network Services Programs, but GSA's next-generation telecommunications contract will further embed the capabilities into the services it provides to other federal agencies, said a top acquisition official.

Mary Davie, assistant commissioner for the Office of Integrated Technology Services in GSA's Federal Acquisition Service, in a Feb. 2 blog post outlined steps her agency is taking to bump up security in the wake of the Office of Personnel Management breach. Those tactical and strategic cybersecurity measures include stepping up cybersecurity capabilities in its Network Services 2020 telecommunication strategy, she wrote.

Davie said GSA's current Networx telecommunications contracting vehicle includes baseline standards and security services. The upcoming NS2020 will enable interoperability and help agencies migrate from legacy technologies to a converged IP environment, ensuring that cybersecurity is built into the government's telecom infrastructure. Programs in the portfolio will specify cybersecurity requirements and include an even broader range of pre-defined, flexible security services, she said.

GSA worked closely with DHS on EIS security features, she said. In addition to provisions to help agencies implement DHS' Einstein 3A, EIS includes Managed Trusted Internet Protocol Services compliance, , Intrusion Prevention Services and a range of Managed Protection Services.

GSA's recently-launched next-generation Mobility 2.0 mobile device and services strategy is also part of NS2020's portfolio, Davie said. Mobility 2.0, she said, will embrace managed mobility, including Mobile Device Management and Mobile Application Management.

GSA added extensive cybersecurity measures into the EIS contract. The GSA's EIS Cybersecurity Extract, posted on the EIS Interact page in July 2015, added security features and requirements to comply with governmentwide directives on trusted Internet connections, Einstein deployment, and IPv6 transition policy.