Continuous Monitoring & Agile Security Services (CMASS) IV

USCIS has a requirement for Continuous Monitoring & Agile Security Services (CMASS). USCIS seeks to establish a more sustainable and effective continuous monitoring program, leveraging data from security and governance tools to enhance our ability to identify and mitigate cybersecurity risks, evaluate emerging technologies, streamline security-related tasks. Additionally, we seek to transform the Ongoing Authorization (OA) program to incorporate new capabilities and risk models for Machine Learning (ML) and Artificial Intelligence (AI) and implement appropriate governance measures. The CMASS resources will continue to support security authorization and continuous monitoring activities, the Vulnerability Management & Configuration Management Programs, role-based cybersecurity training, and system stakeholder outreach to ensure USCIS meets security and DHS Information System Performance Plan (ISPP) requirements.