The Office of Management and Budget has instructed the General Services Administration to develop a single vehicle for all federal agencies to contract outside cybersecurity professionals in the event of a breach, Federal News Radio reported Monday.
Jared Serbu writes the GSA will have two months to prepare a breach response expertise contracting strategy and must implement a cost-reimbursable contract for governmentwide use by April 30.
“The idea here is that the agency has access to the help beforehand, so that when there’s a problem we have help from industry very, very quickly,” Trevor Rudolph, chief of OMB’s cyber and national security division, was quoted as saying by Federal News Radio.
OMB said an upcoming Federal Information Security Management Act implementation guide will offer instructions on how agencies can designate a security operations center for the management of cyber incidents, Serbu reports.
The agency also began an interagency review of draft guidelines to add cybersecurity protections in the federal acquisition process and could release a final version soon, the report said.