dhs enterprise horizon continuous monitoring service

Potential FISMA Compliance Visibility
Functionality
Comprehensive data
collection, all systems
evaluated
Data hosting and format
Patch reports
Vulnerabilities in
environment
Correlating vulnerability
information and scan results
Trending and historical
accountability
O&M service visibility
ORR artifact preparation
Quality/consistency controls
Horizon Compliance Process
• Automated; collected as frequently as source system data is
updated -- nightly, weekly, monthly
• Centralized system with distributed component
responsibilities — validation to Change Management
Database (CMDB) is enforced
• Central high-availability database system; browser access;
enterprise summary data drillable to component, system,
device, and element
• Integrated into dashboard; separate reporting eliminated
• Integrated into dashboard within the wild awareness;
separate reporting need eliminated
• Ability to identify and address critical systems
Automated in dash reporting structure
Ability to track progress of FISMA and object-level scores,
with ability to demonstrate cause of score change
Complete traceability to service providers and their scores
Facilitated via dashboard reporting
High-quality data with cross-CMDB validation
Value
to Cost
November 13, 2013
5