Multi-cloud security operations center

Challenge: Annually, FTC collects data from millions of consumer fraud complaints and thousands of corporate merger filings, which it uses to promote competition and protect consumers. This data is under increasingly sophisticated attacks from adversaries. As FTC transitions from an on-premise data center approach with manual approaches to a cloud-first strategy, it needs to enhance its security operations center capabilities.

Approach: FTC is procuring a Security Operations Center as a Service (SOCaaS) that:

• Allows for faster decision-making
• Reduces vulnerability attack surface
• Creates a repeatable foundation for future government-wide implementations of SOCaaS

With TMF support, FTC is expediting its SOCaaS implementation using security services and trusted cloud service providers to host sensitive FTC data. This approach will:

• Reduce the risk of bad actors executing a ransomware or other cyber attack
• Reduce the number of person hours to respond to indicators of cyber incidents
• Allow repurposing of these hours to improve operational systems for merger filing review and fraud reporting

FTC is collaborating with other federal cyber security leaders, including the Department of Homeland Security, to share best practices.