## Cybersecurity for Facility-Related Control Systems and Medical Devices and Equipment

# Core Competency

**3 Territory Solutions** is an intelligence-led cybersecurity firm with concentration in Facility-Related Control Systems (FRCS) and Medical Devices and Equipment (MDE). As a partner with the Department of Defense and Department of Veterans Affairs as well as other public and private utility providers, we understand the nuances of working with control systems.

### [Download 3 Territory Solutions Capability Statement](/content/images/3_Territory_Solutions_CapabilityStatement.pdf)

* * *

### Thinking

We help our partners Think about their systems polices, standards, guidance and procedures plus all the planning necessary to ensure a right-sized security posture.

### Doing

We Do system enclave implementation / integration, inventory development, hardware / firmware configuration / penetration testing, vulnerability testing, gap assessments and incident response.

### Learning

We Learn through vulnerability research in our 1,650 sf hands-on lab where we simulate and test the complex interconnectivity of IT, FRCS, and other MDE present in today’s healthcare and military facilities.

### Teaching

We Teach cybersecurity through speaking events, immersive sessions, webinar series and written publications.

* * *

## Past Performance

**Cybersecurity Standards Development for FRCS and MDE:** Defense Health Agency, Falls Church, VA. Developed the enterprise policy for system isolation architecture as well as assessment and continuous monitoring guidance standards.

* * *

**Risk Management Framework Document Development for Enterprise Architecture of FRCS and MDE:** Defense Health Agency, Falls Church, VA. Produced the documentation for DHA to obtain a type-accredited ATO for the enterprise isolation architecture of FRCS and MDE.

* * *

**FRCS and MDE Security Control Overlay Development:** Created a medical facility tailored overlay, for use in eMASS, that coordinates security controls prescribed by CNSSI 1253 with FDA’s HSR Tool, HIPAA (NIST SP 800-66 Rev1) and the existing Privacy and ICS overlays (not yet published in eMASS) for all systems.

* * *

**FRCS Information Assurance Practices Development:** BUMED Navy Medicine West, San Diego, CA. Generated the standards and best practices for FRCS within NMW’s most recent Information Assurance Guidance document.

## Differentiators

- Pioneered the adaptation of traditional ICS methodologies to MDE and FRCS
- All team members required to hold an advanced degree in cybersecurity, professional licensure or CISSP/GICSP certification. Recruitment is by existing team member referral only
- Core focus area is in project scope for enterprise solutions, not simply "butts in seats"
- All team members possess CAC and necessary underlying security investigations
- Senior team members regularly speak and author publications within the industry

* * *

## Company Data

**EIN:** 47-5263984  **DUNS:** 080016732  **CAGE Code:** 7LGY

**NAICS:** 541219, 541330, 541350, 541511, 541512, 541513, 541519, 541611, 541618, 541620, 541690, 541990, 561210

Small Business Goals Eligible / Staff with clearances up to the Top Secret level / Accept Credit and Purchase Cards

* * *

### [Download 3 Territory Solutions Capability Statement](/content/images/3_Territory_Solutions_CapabilityStatement.pdf)