PSC DJ10: IT AND TELECOM - SECURITY AND COMPLIANCE AS A SERVICE — Federal Procurement Code

Description

Security and Compliance support delivered as a service, by subscription, or service contract. Includes support of security policies/controls, processes, measuring compliance of relevant legal/compliance requirements, to include Section 508, and responding to security breaches. Also provides support for IT Security systems providing Continuous Diagnostics and Mitigation (CDM) for real-time Cyber Security and protection such as vulnerability scanning, managing firewalls, intrusion prevention systems, and security information and event management (SIEM). Includes Disaster Recovery (DR) services to support DR policy, process and means, dedicated failover facilities and perform DR testing.

Includes

Software that is licensed for use over a defined period of time. This can also be referred to term, temporary, provisional, or short-term.

Excludes

The implementation actions defined by Disaster Recovery policy (e.g. building DR servers) are not included in the Disaster & Recovery sub-tower and are part of the respective towers where the actions take place (e.g. Compute, Storage, Network).

Notes

Software as a Service, Service Contracts, Subscription based software provisioning, and device rentals are considered services.

Suggested adjacent classifications

PSC codes describe what the government buys. These related classifications help connect procurement codes to industries, commodities, and trade workflows.