NIST SP 800-137

Editor’s Note:  The DHS OIG’s Annual Performance Plan for  Fiscal Year 2014 is available here. In the brief excerpt below, The Office of Management’s Information Technology Division discusses plans for Continuous Diagnostics and Mitigation Implementation.

Continuous Diagnostics and Mitigation Implementation

ITD will take action to reduce cyberspace risks in our offices and DHS at large, in part, by increasing our knowledge about IT assets on the network, as well as reducing vulnerabilities present in DHS OIG systems. We plan to install continuous diagnostics and mitigation tools in the first quarter of FY 2014, and establish a strong patching and vulnerability management process in the second quarter based on government‐wide and industry best practices. The performance indicators for this project are FY 2014 FISMA performance metrics and implementing proactive IT security processes.