Gray Tier at DHS CISA NCATS

National Cybersecurity Assessments and Technical Services

Project Summary: Gray Tier Technologies, contracted to provide junior and senior-level network penetration testers and direct support, under the direction of assessment operations for the Department of Homeland Security (DHS) Risk and Vulnerability Assessment (RVA) program from Nov 2017 to the present. Support included conducting penetration tests, maintain a baseline operational capability to perform Vulnerability Assessments on behalf of DHS as requested. Execute using repeatable processes to gather information on the current state of federal, state, local, tribal, and territorial agencies, as well as Critical Infrastructure owners/operators. Draft assessment reports in a timely and proficient manner using standardized templates and processes. Extending and improving the RVA program by updating methodologies and developing new capabilities, maintain technical tools and software, and update documentation and training to reflect modifications in methodology and new improvements. Supporting technical project manager with a technical point of contact to inform project planning, project tracking, issue resolution, and status reporting. Developing new RVA products and services in the form of stewardship tasks.

Gray Tier Assessments conducted (YTD):

• Risk and Vulnerability Assessments (106)
• Remote Penetration Test (46)
• Red Team Assessments (2)