Description
Support services focused on supporting security policies/controls, processes, measuring compliance of relevant legal/compliance requirements, and responding to security breaches. Also provides support for IT Security systems providing Continuous Diagnostics and Mitigation (CDM) for real-time Cyber Security and protection such as vulnerability scanning, managing firewalls, intrusion prevention systems, and security information and event management (SIEM). Includes Disaster Recovery (DR) services to support DR policy, process and means, dedicated failover facilities and perform DR testing.

Excludes
The implementation actions defined by Compliance policy (e.g. implementing controls like multi-factor authentication) are not included in the Compliance sub-tower and are part of the respective towers where the actions take place (e.g. Compute, Storage, Network, Application, End User).

Possible NAICS Codes
541512 – Computer Systems Design Services
541519 – Other Computer Related Services
541511 – Custom Computer Programming Services
561621 – Security Systems Services (except Locksmiths)
513210 – Software Publishers
541513 – Computer Facilities Management Services
541330 – Engineering Services