NAS Cyber Information Security and Operations

The Federal Aviation Administration (FAA) is seeking information from potential vendors to support the National Airspace System (NAS) Cyber Operations. The scope of work includes performing independent risk assessments, penetration testing, and vulnerability assessments on NAS systems, as well as providing cybersecurity testing and operational security services. The FAA is looking for vendors with experience in supporting the day-to-day operations of strengthening the FAA's cybersecurity posture and protecting the integrity of the NAS systems. Key aspects of the job include: • Performing independent risk assessments, penetration testing, and vulnerability assessments on NAS systems • Providing cybersecurity testing and operational security services • Supporting the National Cybersecurity Operations (NCO) mission, including threat intelligence, analysis, and incident response • Evaluating cybersecurity controls for operational technology, industrial control systems, and aviation-specific systems • Supporting regression testing and validation of remediation actions • Assessing the cybersecurity architecture of NAS systems, including air-to-ground communications, radar, and telecom infrastructure