Provide enterprise-wide risk and vulnerability identification, detection, analysis, recommendation, remediation, and validation support for the entire HUD Enterprise to include systems and applications operated and maintain by contractors on behalf of HUD.
December 14, 2022
Develop plans to safeguard IT system data against accidental or unauthorized modification, destruction, or disclosure to meet emergency data processing needs.
January 30, 2023
Participates in mandatory in-services and/or CE programs as mandated by policies and procedures/external agencies and as directed by management.
February 14, 2023
Monitors the threat environment to provide management awareness of current and emerging threats to better inform risk management decisions.
February 16, 2023
Documents compliance actions within the approved automated compliance tracking system or develops a Plan of Actions and Milestones (POA&M) to address non-compliance in the allotted timeframe.
March 12, 2023
Performs periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system and external Web integrity scans to determine compliance.
March 25, 2023
Assists in the on-going information security risk assessments, risk analysis and corrective action plans to determine the extent at which key business areas and infrastructure comply with organizational policies/procedures, statutory and regulatory requirements.
April 02, 2023
Support the development of technology program protection plans, and develop/review system's security documentation in order to identify potential security weaknesses, recommend improvements to address vulnerabilities, implement changes, and document security relevant changes.
April 05, 2023