ERT develops, implements, and maintains an IT security program consistent with Federal laws and agency regulations, policies, procedures, and standards; ensures implementation of all organizational security policies, plans, and procedures; designs, implements, and integrates controls to meet security requirements within the risk management framework; evaluates new security technologies and applications, and recommends change options to the information system owner; applies robust configuration management and change control processes; ensures distribution, tracking, and timely implementation of approved security alerts, patches, and bug fixes; and delivers secure and compliant cloud solutions integrating existing agency architecture with that of service providers.
