Enterprise Identity Service Security Evaluation Tool (EISSET)

Requirement

The Transportation Security Administration (TSA) / Information Technology (IT) / Information Assurance and Cybersecurity Division (IAD) has a need for the Tenable Identity Exposure (formerly Tenable.ad) product and vendor technical support to meet TSA’s need for a capability to detect and report on cybersecurity weaknesses, issues, and misconfigurations within TSA’s identity sources (such as Active Directory (AD) and Entra ID). In the past, TSA has relied upon vulnerability scanners to detect known Common Vulnerabilities and Exposures (CVE) on identity sources to provide security evaluations; however, with the increased emphasis on the security of individual identities, we requires additional capabilities to perform attack surface evaluations of the logical identities themselves. This requirement will be an additional capability and be coupled with existing vulnerability scanning products to provide a more holistic evaluation of the security of TSA’s Active Directory/Entra ID implementations. This requirement is to acquire software and ongoing OEM maintenance and support.