Joint Cybersecurity Operations and Integration Center: 23.5 Million Records, Secured
Joint DoD and VA cybersecurity oversight supporting the secure transfer of 23.5 million Veterans health records into the new EHR system.
Department of Veterans Affairs
Provided joint oversight between DoD and VA to enhance cybersecurity capabilities, improve information sharing, training, policy development, vulnerability assessments, incident response exercises, and continuing education initiatives, with the goal of securely transferring 23.5 million Veterans health records into the new EHR system in accordance with government laws, policies, and guidance.
What the Work Delivered
- Reviewed 300+ RMF security packets via eMASS to document security controls and assisted with POA&M quarterly review of over 2000 POA&Ms.
- Embedded cybersecurity professionals in the VA’s Joint Cybersecurity Operations and Integration Center (JCOIC) to improve cyber defense capabilities and facilitate information sharing.
- Enhanced cooperation between sub-organizations within DoD & VA and shared best practices on cyber defense measures.
How We Delivered It
Mobile Security
Supported the EHRM program with a specific focus on the cybersecurity elements around mobile devices, mobile applications, mobile technologies, and mobile security to integrate COTS mobile solutions to the new Cerner Millennium EHR.
MedCOI Architecture
Engineered architectures and designs for the Joint VA-DoD Medical Community of Interest (MedCOI) security construct and the implementation of the VA’s Medical Module (MedMOD) for medical device security to enable troubleshooting.
RMF Documentation
Documented mobile solutions under the Risk Management Framework (RMF) to obtain an agency-level ATO/ATC.
Technical Guidance
Authored and provided evaluations in the form of technical guidance, white papers, and strategy briefs on cybersecurity tools and network topologies to senior leadership.
Gap Analysis
Analyzed security reports related to mobile technologies (apps, devices, etc.), identified gaps, and provided feedback to mature artifacts.
Clinical Training
Created cybersecurity trainings to increase awareness and understanding of cybersecurity risks and best practices among medical professionals.
Have a Program that Looks Like This One?
Let’s talk about how we can help.