Question 1

Does E&S Grounding Solutions handle Controlled Unclassified Information (CUI)?

Accepted Answer

Yes.  We have established protocols for the secure receipt, storage, and transmission of CUI, including technical drawings and site specifications provided by our federal partners.

Question 2

Has E&S submitted a score to the Supplier Performance Risk System (SPRS)?

Accepted Answer

Yes.  We maintain an active self-assessment score in the SPRS database in accordance with DFARS 252.204-7020 requirements.

Question 3

Is your information security program documented?

Accepted Answer

Yes.  Our cybersecurity protocols are formalized in our documented information-security management system, which includes our System Security Plan (SSP).

Question 4

Does E&S Grounding Solutions have a System Security Plan (SSP)?

Accepted Answer

Yes.  We maintain a comprehensive System Security Plan (SSP) and a Plan of Action & Milestones (POA&M) that document our security controls, known gaps, and remediation timelines in accordance with NIST SP 800-171 Rev 2 requirements.

Information Security & Federal Compliance