41
Cyber security training services, including providing training to identify, detect, and handle cyber-attacks; training services to develop professional defensive, forensic, and penetration tester skills including detecting, containing, isolating, refining, analyzing, and exploiting the understanding of system vulnerabilities; Industrial Control Systems and SCADA security training services
42
Cyber strategy design services, namely security audits and risk assessments of networks, IT infrastructures, end points, industrial networks, web server infrastructures, cyber security organization policies, employee training levels, security operations capabilities and organizational data security procedures; cyber-incident and cyber-attack response services, including identifying, containing, analyzing, mitigating and reporting cyber-incidents and cyber-attacks; cyber-attack simulation services; ethical hacking and penetration testing; cyber-security technology research services, including cyber-threat landscape analyses, defensive and offensive cyber tactics, techniques and procedures of advanced threat actors and emerging technologies; IT services, namely, cyber support services, namely in the fields of cyber systems, communications, infrastructures, penetration testing and governance, risk and compliance consulting; cyber monitoring services, including real time analysis, ongoing cyber-attack and cyber campaign identification within a network; IT security services for systems, networks, communications, infrastructure, and applications including risk assessments, penetration testing and application security reviews, application security audits, and information security code reviews; cyber solutions services, namely, integration of cyber security products, threat detection and analytics, cloud-based user and application protection, data storage services; IT services, namely, Industrial Control Systems and SCADA security consultancy and research services; IT services, namely, real-time security assessments of SCADA, DCS, EMS, and process control system environments; cybersecurity testing services for Industrial Control System and SCADA infrastructures; Industrial Control Systems and SCADA security consultancy services, namely, risk assessments, risk classification, threat identification, security control selection, standards compliance, system design reviews, pre-commissioning testing, application security commissioning assistance, site audits, responsive solutions and preventative measures against cyber attacks; consultancy in relation to compliance and procedure services in the fields of communications networks, systems, system applications and mechanisms; IT services for the implementation of security standards, including health information security standards