Frequently Asked Questions

What does your cybersecurity assessment involve? #

Review of your Cybersecurity Policies and Procedures

• A questionnaire will be issued to selected RPC personnel to request policies, procedures, and other supporting documentation such as training records, network diagrams, evidence of vulnerability management and so on. The questionnaire will be generated from Qualys. RPC personnel will need to set up a password to access Qualys.
• Interviews will be conducted, as needed with RPC personnel to clarify the information that was provided from the documentation request.

Vulnerability Assessment

• The contractor will coordinate with selected RPC personnel to set up a virtual scanner appliance to scan the PSAP network. The contractor will work with the RPC personnel to connect the appliance to the network. Video and written instructions are also included on the Texas 911 Help Center website.
• The contractor will use the virtual scanner to perform automated vulnerability scans to detect weaknesses on the PSAP’s network.

Physical Assessment

• Site visits will be conducted to assess the physical security at the PSAPs. The contractor will check access logs, locked doors, fire detection systems and so on.

What to expect during the interview? #

Interviews will be conducted virtually, as needed, to clarify information provided by the RPC personnel.

To minimize the impact to your day-to-day operations, we requested supporting documentation to address the assessment questions. Interviews will only occur if clarification is needed.

What to expect during the physical assessment? #

Contractor personnel will coordinate with the RPC to schedule a site visit.

Contractor personnel will have a list of questions (around 30) based on the NIST and NENA requirements. They will request to see items such as access logs, the data room, fire detection and so on to verify implementation of the required physical security controls.

What to expect during the vulnerability scans? #

Contractor personnel will coordinate with the RPC personnel to set up the virtual scanner appliance on their networks.

How long will this assement last? #

For each PSAP location, the assessment should last between 1 – 3 weeks based on the size of the network, the volume of documentation provided for review, and availability of RPC personnel to facilitate the site visit.

How do I schedule an information session to learn more about the assessment? #

After the Stakeholder Engagement Meeting, the contractor will contact RPCs to schedule virtual meetings to address any questions they have regarding the assessment.

How will the results of the assessment be used to improve my cybersecurity program? #

This assessment will give RPCs insight about each PSAPs cybersecurity posture, to prioritize and identify resources to address vulnerabilities that could adversely impact the RPCs network.

What are the Hardware requirements to install the Virtual Scanner Appliance (OVA file)? #

HW Requirement: 2vCPU / 4GB RAM / 56GB HD

Target Platforms: VMware vSphere: vCenter Server, ESXi VMware Workstation, Workstation Player, Fusion Citrix XenServer

What do I need to do if I click on the questionaire link and the information is blank? #

The link defaults to “Templates”, so you need to click on “Campaign” to view the questions. If the “Campaign” is blank, please contact contractor for assistance. Sometimes in progress maintenance temporarily interferes with active campaign questionnaires.

What type of files can we upload to Qualys? #

Qualys currently supports the following file formats: .doc, .docx, .xls, .pdf, .txt, .csv, .ppt, .pptx, .png, .gif, .jpg, .jpeg, .zip

Is Qualys secure? #

Yes, the Qualys platform protects its data by storing in an encrypted format. Also, in addition to annual SSAE 16 audits, Qualys FedRAMP (https://www.fedramp.gov/ ) certified for utilization at the moderate level.

What if our RPC does not have any policies or procedures to submit? #

Please upload a blank document as an attachment, add a comment “section not applicable”, and proceed with submitting the campaign.

What is NIST? #

The National Institute of Standards and Technology (NIST) was founded in 1901 and is now part of the U.S. Department of Commerce. NIST is one of the nation’s oldest physical science laboratories. Congress established the agency to remove a major challenge to U.S. industrial competitiveness at the time — a second-rate measurement infrastructure that lagged behind the capabilities of the United Kingdom, Germany and other economic rivals.

From the smart electric power grid and electronic health records to atomic clocks, advanced nanomaterials and computer chips, innumerable products and services rely in some way on technology, measurement and standards provided by the National Institute of Standards and Technology.

Today, NIST measurements support the smallest of technologies to the largest and most complex of human-made creations — from nanoscale devices so tiny that tens of thousands can fit on the end of a single human hair up to earthquake-resistant skyscrapers and global communication networks.

Mission #

To promote U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that enhance economic security and improve our quality of life.

Vision #

NIST will be the world’s leader in creating critical measurement solutions and promoting equitable standards. Our efforts stimulate innovation, foster industrial competitiveness, and improve the quality of life.

Core Competencies #

• Measurement science
• Rigorous traceability
• Development and use of standards

National Institute of Standards and Technology (nist.gov)

What is NENA? #

NENA The 9-1-1 Association is the only non-profit professional organization solely focused on 9-1-1 operations, technology, education, and policy issues. We represent tens of thousands of hard-working 9-1-1 first responders who assist individuals in crisis and play a vital role in almost every emergency.

Our members, the unsung heroes of public safety, are directly involved in improving all aspects of 9-1-1 and in keeping our communities strong, safe, and vibrant. Through our collective efforts, NENA ensures that 9-1-1 is prepared to meet the needs of anyone requesting emergency assistance by developing the standards that make the 9-1-1 system work, providing training and best practices for 9-1-1 professionals, and educating the public and policymakers about 9-1-1 and its proper use. 

Our Vision is a public made safer by 9-1-1 services delivered by highly trained emergency-communications professionals and powered by the latest technologies. 

Our Mission is to empower our members and the greater 9-1-1 community to provide the best possible emergency response through standards development, training, thought leadership, outreach, and advocacy.

National Emergency Number Association (nena.org)