NHLBI - RISK MANAGEMENT FRAMEWORK SERVICES TASK ORDER 1 (TASKS 1 AND 3 WITH OPTIONAL 4, 5, AND 6)

NHLBI - 风险管理框架服务任务顺序 1（任务 1 和 3 以及可选的 4、5 和 6）

• 批准号: 10676505
• 负责人: WILLIAM GIEMER
• 金额: $ 8.85万
• 依托单位国家: 美国
• 财政年份: 2021
• 资助国家: 美国
• 起止时间: 2021-09-27 至 2022-09-26
• 项目状态: 已结题
• 来源: https://reporter.nih.gov/project-details/10676505
• 关键词: Area; Authorization documentation; Biomedical Research; Computers; Data; Data Security; Detection; Development; Documentation; Ensure; Exercise Test; Extramural Activities; Foundations; Goals; Information Systems; Mission; Monitor; National Heart, Lung, and Blood Institute; Outcome; Patients; Performance; Policies; Process; Recommendation; Risk Management; Security; Services; System; Techniques; United States National Institutes of Health; cyber security; design; high risk; improved; operation; programs; remediation; response; risk minimization; success; tool

This program has been designed to procure cybersecurity services, including threat detection, and response that enhances the performance associated with implementing the NIH Risk Management Framework Services. The outcome is to achieve and maintain NHLBI information to regulatory FISMA standards, including FISMA reportable systems such as general systems, nine major systems, and one hundred and fifty sub-systems across the NHLBI intramural and extramural studies. The program focuses on three areas: reducing high risks, improving visibility, and strengthen protections by conducting cyber hunting, monitoring, detecting, and responding to threats. These areas rely on a foundation of IT management best practices, including configuration management, patch management, system administration, operations management, vulnerability management, threat detection and response, and change management.

该计划旨在采购网络安全服务，包括威胁检测、 以及提高与实施 NIH 相关的绩效的响应 风险管理框架服务。结果是实现并维持 NHLBI信息符合监管FISMA标准，包括FISMA可报告系统如通用系统、九大系统、 以及遍布 NHLBI 校内和医院的一百五十个子系统 校外学习。 该计划重点关注三个领域：降低高风险、提高可见性以及 通过进行网络狩猎、监控、检测和 应对威胁。这些领域最依赖IT管理基础 实践，包括配置管理、补丁管理、系统 管理、运营管理、漏洞管理、威胁 检测和响应以及变更管理。