SO-OCIO-Information Security Center (ISC)
Investment ID: 005-000002335
Overview
Program Title
SO-OCIO-Information Security Center (ISC)
Description
Investment to maintain USDA IT Security Operations Center focused on achieving USDA Security Strategy: Achieve proactive security through actionable insight.
Type of Program
Standard IT Investments
Multi-Agency Category
Not Applicable
Investment Detail
ISC secures the business of USDA by managing and mitigating risks of cyber threats and vulnerabilities, thereby protecting the agencies' information technology service delivery to their constituencies and the American people. The benefit of the program is providing the Department a holistic view of the risks and the challenges of sustaining the requisite security posture. To streamline services being procured by the internal agencies, ISC will manage Department-level enterprise security products and services that meet federal mandates for security, reduce duplication in security contracts within the Department, and offer inherent cost savings to internal agencies. Benefits internal to the government: Economy of scale for enterprise security products and services, throughput, and scale of operation, with cost per unit of output, generally decreasing with increasing scale as fixed cost is spread out over the agencies; IT Security governance is shared across the Department; operational efficiency; and holistic view of Department's security posture. Benefits external to the government directly support the mission of the Department; and establishes a centralized cybersecurity program, which is the voice for the Department. Cost benefits: A cost saving of $3.1 million per year are expected due to Security Operations consolidation. Part of the ISC mission is to ensure the Personally Identifiable Information (PII) data remains secure for all USDA employees and external stakeholders, including farmers, ranchers, foresters, producers, and other partners totaling more than 100,000 individuals. ISC ensures that USDA PII remains secured, thereby avoiding costs associated with PII remediation and credit monitoring. Credit monitoring costs are calculated $141 per person per year, amounting to at least $14.1 million in savings to the department.