NHLBI - RISK MANAGEMENT FRAMEWORK SERVICES TASK ORDER 1 (TASKS 1 AND 3 WITH OPTIONAL 4, 5, AND 6)

NHLBI - 风险管理框架服务任务顺序 1（任务 1 和 3 以及可选的 4、5 和 6）

• 批准号: 10676505
• 负责人: WILLIAM GIEMER
• 金额: $ 8.85万
• 依托单位国家: 美国
• 财政年份: 2021
• 资助国家: 美国
• 起止时间: 2021-09-27 至 2022-09-26
• 项目状态: 已结题
• 来源: https://reporter.nih.gov/project-details/10676505
• 关键词: Area; Authorization documentation; Biomedical Research; Computers; Data; Data Security; Detection; Development; Documentation; Ensure; Exercise Test; Extramural Activities; Foundations; Goals; Information Systems; Mission; Monitor; National Heart, Lung, and Blood Institute; Outcome; Patients; Performance; Policies; Process; Recommendation; Risk Management; Security; Services; System; Techniques; United States National Institutes of Health; cyber security; design; high risk; improved; operation; programs; remediation; response; risk minimization; success; tool

This program has been designed to procure cybersecurity services, including threat detection, and response that enhances the performance associated with implementing the NIH Risk Management Framework Services. The outcome is to achieve and maintain NHLBI information to regulatory FISMA standards, including FISMA reportable systems such as general systems, nine major systems, and one hundred and fifty sub-systems across the NHLBI intramural and extramural studies. The program focuses on three areas: reducing high risks, improving visibility, and strengthen protections by conducting cyber hunting, monitoring, detecting, and responding to threats. These areas rely on a foundation of IT management best practices, including configuration management, patch management, system administration, operations management, vulnerability management, threat detection and response, and change management.

该计划旨在采购网络安全服务，包括威胁检测， 和响应，提高与实施NIH相关的性能 风险管理框架服务。其结果是实现并保持 NHLBI信息符合FISMA监管标准，包括FISMA可报告系统，如通用系统、九大系统、 和150个子系统在NHLBI内部和 校外学习 该计划侧重于三个领域：降低高风险，提高可见性， 通过进行网络搜索、监控、检测和 应对威胁。这些领域最依赖于IT管理的基础 实践，包括配置管理、修补程序管理、系统 管理、运营管理、漏洞管理、威胁 检测和响应以及变更管理。