NHLBI - RISK MANAGEMENT FRAMEWORK SERVICES TASK ORDER 1 (TASKS 1 AND 3 WITH OPTIONAL 4, 5, AND 6)

该计划旨在采购网络安全服务，包括威胁检测， 和响应，以提高与实施NIH相关的绩效 风险管理框架服务。其结果是实现并保持 NHLBI信息符合监管FISMA标准，包括FISMA可报告系统，如通用系统、九大系统、 和150个子系统，横跨NHLBI内部和 校外研究。 该计划侧重于三个领域：降低高风险，提高可见性，以及 通过进行网络狩猎、监控、检测和 应对威胁。这些领域依赖于IT管理的最佳基础 实践，包括配置管理、补丁管理、系统 管理、运营管理、漏洞管理、威胁 检测和响应，以及变更管理。

This program has been designed to procure cybersecurity services, including threat detection, and response that enhances the performance associated with implementing the NIH Risk Management Framework Services. The outcome is to achieve and maintain NHLBI information to regulatory FISMA standards, including FISMA reportable systems such as general systems, nine major systems, and one hundred and fifty sub-systems across the NHLBI intramural and extramural studies. The program focuses on three areas: reducing high risks, improving visibility, and strengthen protections by conducting cyber hunting, monitoring, detecting, and responding to threats. These areas rely on a foundation of IT management best practices, including configuration management, patch management, system administration, operations management, vulnerability management, threat detection and response, and change management.