Department of Transportation - a Shared Service Provider

The Enterprise Services Center (ESC) is a federal organization within the U.S. Department of Transportation’s (DOT) Federal Aviation Administration (FAA). ESC also operates as a service provider under the Financial QSMO, and offers fully managed IT service offerings to include IT hosting, system/database/application administration, and software development.

ESC provides Cybersecurity, Financial Services, and IT managed services to a multitude of Cabinet-level, Large, Small, and Micro agencies across the Federal Government. ESC may provide services to any federal organization along with other governmental entities on a case-by-case basis.

ESC’s Cybersecurity Shared Services Center provides a variety of Independent Assessment, Vulnerability Scanning/Penetration Testing, and Cybersecurity Support services to federal agencies.

The Cyber QSMO formally validates services using an iterative validation process to ensure a service offering meets government recognized performance standards and requirements.

Please see the list of Services and Service Providers below for a list of initial cybersecurity services offered on the Cyber Marketplace. Validated service offerings are indicated with a green checkmark 

Services

  • Creation/Maintenance of Security Documentation and/or Procedures 
  • Interface Memorandum of Understanding / Interconnection Security Agreement Negotiations & Documentation 
  • Access Control Policies/Procedures Consultation & Documentation 
  • Audit Log Monitoring Processes/Procedures Consultation & Documentation 
  • Incident Response Planning & Testing Strategies Consultation & Documentation 
  • Physical Security Protections Consultation & Documentation 
  • Privacy Data Handling Policies/Procedures Consultation & Documentation 
  • Disaster Recovery Consultation, Documentation, & Testing 
  • Database Vulnerability Scanning 
  • Federal Risk and Authorization Management Program (FedRAMP) Third Party Assessment Organization (3PAO) Assessment of Cloud Environments 
  • Independent Assessments in Support of Systems Continuous Monitoring 
  • Independent Verification & Validation (IV&V) of Mitigation Activities 
  • Initial Independent Assessment in Support of Assessment & Authorization (A&A) 
  • Penetration Testing 
  • Phishing Vulnerability Scanning 
  • Wireless Network Vulnerability Scanning 
  • Information System Security Officer (ISSO) Services 
  • Risk Management Framework (RMF) Lifecycle Consultation 

Contact

For additional information, please visit their website: https://www.esc.gov/.

For inquiries about ESC offered services or if interested in purchasing services, please contact us at esc-cyberservices@faa.gov.