I am currently contracted to a large municipality, working on a project to
specify requirements for a set of upgrades to their traffic control system.
As some of the upgrade features involve external (via corporate network,
via public dial in, via internet) access to traffic and traffic system
status information, system security has to be addressed.
We must develop a procurement strategy for finding the best expertise to
help us define a proper security strategy, and then proceed to design and
implementation. It is expected that the consultant/contractor would be
experienced in matching a practical security design to an existing system's
architecture, for large crticial systems, and would be aware of the latest
in security threats and the current technology to neutralize them.
As the area of system security is changing so quickly and we have no one
with exposure to this area, I was referred to this mailing list as a
possible venue for gathering information re. consulting and contracting
organizations that are experienced and knowledgeable in this regard.
Any suggestions on how to further proceed to gather info, as well as any
response from individuals and organizations interested in participating in
such work would be welcome.
|
|
