f22fc274___Document_links
[State Entity Name] Employment & Economic Development Department [Description of Work] Firewall Rule Update and Evaluation Firewall rule updates and evaluation is an integral part of Information Security function of Business Information Technology (BIT) administered through the Department of Employment and Economic Development (DEED). In 2009, Minnesota State Office of Legislative Auditors (OLA) conducted a DEED Unemployment Insurance (UI) security review. The OLA findings concluded that DEED did not have adequate procedures for managing firewalls and did not sufficiently restrict computer traffic within the internal private network. OLA used the federal governments National Institute of Standards and Technology (NIST) Regulation 800-53 to assess DEEDs UI current security posture. DEED must restrict network computer traffic and develop adequate firewall rule set policy / procedures which must be developed with an in-depth correlation related to three specific phases: Phase I  Discovery  Requires access to report logs to cover usage summary of rules, objects and bindings, Phase II  Analyze, layout new rules, work to re-configure rules and categories for the DEED environment, and Phase III  Develop test rules, objects, flow with documentation. Phase III will provide new rules, objects, flow creation of firewall testing redundancy, and present documentation related to best practices. Also, DEED will engage OET as part of the firewall architecture activities for the Data Center Consolidation project. [Deadline for Vendor Response] 6/16/2010 [Publication Date] 6/2/2010 [Document links] 
Statement of Work Amendment or Addendum
Document links