IT Security Services
Investment ID: 025-000004550
Overview
Program Title
IT Security Services
Description
Enables HUD to properly orchestrate the IT resources and systems it requires to effectively provide its services and execute its mission. This includes projects such as IT Security Policy Compliance and Ops and ADP Security Staff.
Type of Program
Standard IT Investments
Multi-Agency Category
Not Applicable
Investment Detail
HUD is taking the following initiatives and actions to ensure compliance with the directives in Executive Order (EO) 14028 (Improving the Nation's Cybersecurity):
- Modernizing Federal Government Cybersecurity to include development of an Agency Zero Trust Strategy and Architecture, deployment of an Agency wide iCAM solution, revamping the Agency's Multi-Factor Authentication (MFA) and data at risk encryption throughout the Agency IT Infrastructure
- Enhancing Software Supply Chain Security which includes creating an Agency-wide initiative for Supply Chain Risk Management, enhanced software evaluation criteria, processes and practices
- Standardizing the Federal Government's Playbook for Responding to Cybersecurity Vulnerabilities and Incidents which includes standing-up of the Agency's first Security Operations Center (SOC) with full IT Security and Incident Response capabilities with development of an Agency Incident Response (IR) playbook
- Improving Detection of Cybersecurity Vulnerabilities and Incidents on Federal Government Networks including deployment of Endpoint Detection and Response (EDR) and Data Loss Prevention (DLP).
- Modernizing Federal Government Cybersecurity to include development of an Agency Zero Trust Strategy and Architecture, deployment of an Agency wide iCAM solution, revamping the Agency's Multi-Factor Authentication (MFA) and data at risk encryption throughout the Agency IT Infrastructure
- Enhancing Software Supply Chain Security which includes creating an Agency-wide initiative for Supply Chain Risk Management, enhanced software evaluation criteria, processes and practices
- Standardizing the Federal Government's Playbook for Responding to Cybersecurity Vulnerabilities and Incidents which includes standing-up of the Agency's first Security Operations Center (SOC) with full IT Security and Incident Response capabilities with development of an Agency Incident Response (IR) playbook
- Improving Detection of Cybersecurity Vulnerabilities and Incidents on Federal Government Networks including deployment of Endpoint Detection and Response (EDR) and Data Loss Prevention (DLP).