Perform comprehensive cyber risk assessments utilizing the NCSR, for the Departments of Education, Family Affairs, Health, Public Safety, and Finance (i.e., the five key GPR agencies) to understand those entities’ cybersecurity posture and identify cybersecurity risks and control gaps. Assessment results will be leveraged to update the Cybersecurity Plan and select future SLCGP investment projects.

Perform comprehensive cyber risk assessments utilizing the NCSR, MS-ISAC Foundational Assessment, etc. for the remaining GPR agencies and the municipalities to understand those entities’ cybersecurity posture and identify cybersecurity risks and control gaps. Assessment results will be leveraged to update the Cybersecurity Plan and select future SLCGP investment projects.

Perform enhanced logging and analysis for GPR agencies and/or municipalities through the implementation and integration of an enterprise SIEM tool to enable centralized log ingestion and monitoring.

Launch a mass education and awareness campaign on the Puerto Rico Cybersecurity Plan for employees of the GPR, municipalities, and private sector entities that operate or manage IT systems on behalf of the GPR or municipalities.

Develop and facilitate cyber exercises that help improve the ability to monitor, evaluate, and assess cyber incident response capabilities of GPR agencies and the municipalities, as well as GPR/PRITS’ own information sharing and incident management processes and procedures in the event of a cyber-related emergency impacting one or more GPR agencies or municipalities.