f22fc274___Document_links
[State Entity Name] Employment & Economic Development Department [Description of Work] Web Application Security Assessment The Minnesota Department of Employee and Economic Development (DEED) is the states principal economic development agency. DEED programs promote business recruitment, expansion, and retention; international trade; workforce development; and community development. DEED has a project currently underway to document all of the applications and their related servers and databases. As part of this effort DEED is looking to strengthen the security of the environment and the applications to protect the Personally Identifiable Information (PII). DEED has approximately 66 applications. In an effort to strengthen the security of the DEED electronic data stored or processed in multiple tiered applications through-out the department, DEED is requiring an in-depth assessment and analysis of the current security controls in place to protect the confidentiality, integrity and availability (CIA) of critical data and applications. This effort will scrutinize and identify gaps in the controls designed to protect the departments data as well as provide recommendations on improvements to these controls. We are seeking professional/technical services to independently evaluate the controls protecting PII  see page 7. The applications will need to be classified based on CIA of the data. Using these classifications, define a standard set of expected controls for the identified tiers based on various best practices for information security. The controls identified will then be assessed to identify control deficiencies as well as remediation recommendations to strengthen the security controls to the appropriate level based on the data classification. The assessment results will be used to identify and prioritize remediation activities to strengthen data security. [Deadline for Vendor Response] 9/17/2010 [Publication Date] 8/11/2010 [Document links] 
Statement of Work Amendment or Addendum
Document links