Description
The US Department of Veterans Affairs (VA) is seeking information from vendors for a Data Loss Prevention (DLP) Infrastructure Solution. The solution must deliver fully functional, integrated, enterprise-wide DLP capabilities covering data discovery, classification, protection, access governance, and continuous monitoring across network, cloud, and storage environments. The solution must support a minimum of 700,000 users and meet all VA cybersecurity, governance, and federal compliance requirements.
Some key points to consider:
• The solution must be a Commercial Off-the-Shelf (COTS) product
• The solution must support delegated access governance, data classification, automated policy enforcement, and owner-led access reviews
• The solution must meet Federal Risk and Authorization Management Program (FedRAMP) Moderate and Federal Information Security Management Act (FISMA) Moderate controls
• Vendors must provide a detailed Bill of Materials (BOM) and a Rough Order of Magnitude (ROM) for the support services listed in the draft Product Description (PD)
• Vendors must also provide a completed Compliance Matrix and a Vendor Supplemental Question response if proposing an alternative brand to Varonis