Section 7: Threat Detection

Section Overview

Section 7 enhances the ability to detect malicious activity on federal networks by enabling a government-wide endpoint detection and response (EDR) system and improved information sharing between agencies. The EDR system will be centrally located to support host-level visibility, attribution, and response for FCEB agencies. In addition, agencies must follow Office of Management and Budget (OMB) requirements to adopt the government-wide EDR approach.