Ryan White Title III HIV Capacity Development and Planning Grants - Address: 1500 21st Street, Sacramento, CA 95811 Project Director: Michelle Monroe, CEO Phone/ Fax: (916)914-6240 Email: mmonroe@onecommunityhealth.com Website: https://onecommunityhealth.com/ Grant Program: FY2024 Ryan White Part C – Capacity Development Amount Requested: $150,000 Cares Community Health dba One Community Health has chosen Infrastructure Development, Emergency Preparedness for this supplemental funding opportunity. In response to organizational development and growth, One Community Health (OCH) proposes to utilize this funding opportunity to address cybersecurity mitigation as part of the health center’s continuous improvement to its Emergency Preparedness plan. While OCH recognizes that there is no end to cyber-risk, having the appropriate managed detection and response plan, along with appropriate in-depth security planning, policies, tools, and testing procedures will protect and prevent OCH from operational disruption caused by ransomware and other prevalent threats. In today’s rapidly evolving cybersecurity landscape, (example the recent ransom attack on Change Healthcare that impacted our pharmacy operations) organizations are facing increasingly sophisticated threats that can cripple their operations and put sensitive data at risk. As a result, businesses must deploy advanced cybersecurity measures to protect their digital assets. Since 1989, OCH has served as the primary care and service organization for patients living with HIV/AIDS. OCH is Sacramento region’s largest provider of comprehensive HIV services and serves as a medical home for People Living with HIV/ AIDS for the Transitional Grant Area (TGA), which consists of Sacramento, Placer, El Dorado, Yolo, and Alpine counties in northern California. In 2022, OCH was awarded Ryan White Part C Capacity Development funding (HRSA-22-019) to develop cyber-security into its existing Emergency Preparedness Plan. OCH successfully developed and implemented a 24/7 threat detection, investigation, and complete incident response systems within its Emergency Preparedness Plan. This proposal will build upon and bolster the previous cybersecurity project to strengthen organizational capacity to respond to the ever-changing health care landscape and increase access to high-quality HIV primary health care services for low-income and underserved people with HIV. OCH have chosen Infrastructure Development – Emergency Preparedness for this application and plan to continue to build its cybersecurity systems to protect electronic Personal Health Information (ePHI) of our Ryan White and Community Health Center patients, as well as other OCH systems from cyber-attacks, such as Managed Detection and Response (MDR). OCH will utilize 2024 RWHAP Part C Capacity Development funds to support the following three-prong cybersecurity upgrades: 1. Implement a new SentinelOne MDR system for all workstations and server endpoints, 2. Implement ConnectWise SIEM to manage log aggregation and incident responses to consolidate event information across the entire network 3. Implement SentinelOne Ranger for network visibility and control for unauthorized devices to enhance device visibility, asset management and mitigating security risks.