Provision of Dragos Operational Technology Security System

Background The Public Transport Authority?s (PTA) Information Management and Operational Systems (IMOS) Security and Network Branch requires a 3-year agreement for Dragos Operational Technology Security System, to address recently identified operational technology vulnerabilities within PTA?s systems. In recent years, the intersection of digital advancements and operational technology (OT) has escalated the complexity and vulnerability of control systems, particularly within critical infrastructure sectors such as rail. The convergence of IT and OT environments has exposed essential services to cyber threats that can disrupt operations, compromise safety, and incur significant economic losses. A recent Proof of Value (PoV) conducted by Dragos on PTA?s OT systems has shed light on the acute vulnerabilities present within PTA infrastructure. The assessment revealed operational technology vulnerabilities spanning control systems, Process Logic Controllers (PLCs), and network assets. Perhaps most alarmingly, it was discovered that what was assumed to be a closed network of control systems possessed numerous undisclosed connections to the internet, significantly elevating the risk of cyber-attacks. Aligned with these findings, PTA?s Security Strategy for 2024 includes a critical objective to roll out a comprehensive rail infrastructure security system. This initiative is driven by the urgent need to mitigate risks, enhance system resilience, and secure PTA?s operational continuity against the backdrop of an evolving cyber threat landscape. Scope The PTA require the Contractor to supply Licenses and subscriptions for the following Dragos OT components: Dragos Sensor model NS-1020-EDragos Sensor subscription license, 1 GbpsDragos OT Watch subscription, 1 GbpsDragos Sensor model NS-25-DRPower Supply Adapter, NS-25-DRDragos OT Watch subscription, 25 MbpsDragos Sensor subscription license, 25 MbpsDragos SiteStore subscription license, STS-500Dragos SiteStore virtual, model STS-500-VMService - Remote Deployment & Installation Costs Up to 15 SensorsTraining CreditShipping and HandlingDragos WorldView End User (incl 10 users) - employee count to 25,000