Specialized advisory and assistance services call order for security configuration standards support. The office of information security has the overall responsibility to develop IT security…

The Social Security Administration awarded a $634,350.88 firm-fixed-price call order to Accenture Federal Services LLC, a global professional services company, to provide specialized advisory and assistance services for developing, maintaining, and reviewing security configuration standards for multiple operating systems and applications. The standards aim to enhance overall security and reduce vulnerabilities across the agency's IT systems, based on federal guidelines and industry best practices. This call order is part of the Mission Oriented Business Integrated Services (MOBIS) contract vehicle, which provides professional services to federal agencies. The contract does not have a set-aside designation. Accenture Federal Services has provided similar IT services, management consulting, and enterprise modernization support to other federal agencies through past prime and subcontract awards.

Specialized advisory and assistance services call order for security configuration standards support. The office of information security has the overall responsibility to develop IT security policies and guidance for all agency components and offices. The division of security customer service, security standards administration team is responsible for developing, maintaining and reviewing ssas security configuration standards for multiple operating systems and applications. Each security configuration standard specifies how configuration options are to be set, and provides guidance to system administrators to enhance overall security and further reduce vulnerabilities. SSA develops security configuration standards based on federal guidelines, such as national institute of standards and technology (NIST) and defense information systems agency (DISA), vendor best practices, and industry best practices. Ongoing technical and regulatory changes require the regular review and modification established risk models. SSA reviews and updates security configuration standards on an annual basis.