Skip to content

Cybersecurity Questionnaire · 2024

Protecting TribalBroadbandConnectivity:

Meeting CISA Cybersecurity Goals

Empowering Native American Tribes for grant funding compliance.

Bull Bear Defense Solutions helps Native American Tribes meet CISA Cybersecurity Performance Goals necessary for Tribal Broadband Connectivity Program grant compliance. Participation in the program requires adherence to cybersecurity and supply chain management guidelines detailed in the Notice of Funding Opportunity (NOFO) Appendix A certification, ensuring alignment with national cybersecurity objectives and responsible fund utilization.

NIST Cybersecurity Framework

Five functions. Fifteen controls.

  1. 01

    Identify

    Understanding your cybersecurity landscape.

    • Asset Inventory: Keep an updated list of all IT and OT assets.
    • Cybersecurity Leadership: Establish clear roles for cybersecurity.
    • Vulnerability Management: Identify and fix known vulnerabilities.
    • Third-Party Validation: Regularly validate your defenses with third-party assessments.
    • Supply Chain Security: Ensure vendors meet cybersecurity standards.
  2. 02

    Protect

    Implementing safeguards for your systems.

    • Password Management: Enforce strong password policies.
    • Credential Management: Manage and revoke access promptly.
    • Network Segmentation: Separate IT and OT networks.
    • Multi-Factor Authentication (MFA): Use MFA to authenticate.
  3. 03

    Detect

    Identifying potential threats.

    • Monitoring and Logging: Track login attempts and investigate suspicious activity.
    • Intrusion Detection Systems (IDS): Deploy IDS to target malicious activity.
  4. 04

    Respond

    Reacting quickly to incidents.

    • Incident Response Planning: Create and practice response plans with IT teams.
    • Threat Intelligence: Use threat intelligence to stay ahead and educate.
  5. 05

    Recover

    Recovering swiftly from incidents.

    • Backup and Recovery Solutions: Ensure reliable data backup and recovery.
    • Post-Incident Analysis: Review, improve and educate after incidents.

Start with the questionnaire.

NTIA asks every Tribal Broadband Connectivity Program recipient to complete an initial cybersecurity questionnaire. We help Tribes answer it honestly — and close the gaps it surfaces.