DAG 2016 – Joint and Other Systems Services

Secure Configuration Management

Information: Not Included

The proposal is being consolidated within another project - CSA project.

Replace Existing Systems with Newer or Different System

Objective

SCM is a security-focused configuration management concept that implements and maintains the established security requirements of the organization and information systems. Today's DND/CAF faces two enormous challenges: defence against sophisticated cyber-threats and maintaining compliance with government regulations (Policy on Government Security). The SCM capability will help achieve both objectives. The SCM capability will enable the reduction of networks' attack surfaces by delivering an automated capability to proactively and continuously harden the security configurations baseline of operating systems, applications, and network and security devices. At the same time, the SCM capability will enable the automation (monitor/auditing) of the compliance with mandated security baselines.

Requirements

The Project requires specialized knowledge and expertise to define and implement SCM capability enhancements within the department. Deliverables include the following: Compliance Management-Automated validation and enforcement of compliance to business, procedural and technical policies; System Integrity Assurance-Automated validation that managed hardware and software items have not been modified from a known state; Monitoring and Auditing-Automated logging of system events (with sufficient attribute granularity to support forensic analysis) and secure capture and storage of log files; Management-Automated methods of managing systems, including patch security policy management.

Preliminary Estimate

  • $20 million to $49 million

Anticipated Timeline

Point of Contact

Assistant Deputy Minister of Information Management
Phone: 613-995-2017


The information on this page is provided for advisory purposes only and is current as of the date of publication. The information is, however, subject to change without notice and no commitment regarding its future accuracy or content, or any subsequent implementation of the Project described, is made by DND or the Government of Canada. Any expense incurred by any person or entity in reliance upon the information provided is at the sole risk of that person or entity. It is important to note that these contact details are provided for use by interested industry partners only. Please direct all media enquiries to the department of National Defence's Media Relations Office at 1-866-377-0811

Date modified: