RFI for Cyber Physical Systems

The Michigan Department of Transportation (MDOT) is seeking information from prospective vendors about Cyber-Physical Systems Protection Platforms to enhance the cyber security of its field network. The platform should provide improved vulnerability management, threat management, visualizations, alerts, and integration with existing IT security and inventory tools. The requirements include scalability, asset inventory and discovery, vulnerability scoring, configuration settings, administrative functions, network support, and reporting. Vendors are asked to provide information on how their solution meets these requirements, including any server or workstation requirements, licensing requirements, pricing structure, installation time-frame, project phasing, and risks. Some key points to consider: • The solution should be scalable and provide centralized visibility and control. • The solution should provide asset inventory and discovery, including enumeration of device types, location, description, manufacturer, maintenance provider, and current firmware version. • The solution should assign a vulnerability score to every device on the network using standardized rating systems. • The solution should provide configuration settings, administrative functions, network support, and reporting. • The solution should detect and respond to anomalous or suspicious activity in a cyber-physical roadside environment. • The solution should support secure remote access to roadside equipment and detect and handle local physical access events at roadside cabinets.