Michele Thomas

The nexus of private sector cybersecurity and public sector awareness is only growing stronger. A great show this year and we welcome the ongoing (and strengthening) partnerships w government leaders. #RSA #Cybersecurity #Securebydesign

4

1 Comment

The GAO report highlights the barriers faced by federal agencies when implementing cybersecurity risk management processes. Addressing these hurdles ensures a strong and resilient cybersecurity posture. One of the key areas for improvement is the need to refine cyber risk evaluation methods. Currently, federal agencies heavily rely on the Common Vulnerability Scoring System (CVSS) to assess the criticality of security vulnerabilities in software applications. However, this system has its limitations. A more nuanced approach that considers multiple factors would enable a more sophisticated and effective response to cybersecurity threats.

5

SAIC's CloudScend™ empowers agencies to accelerate #CloudMigration by securely migrating workloads faster, maximizing value while minimizing risks. This IDC MarketScape report recognizes this solution, check it out to learn more.

1

#SEC finalized amendments for S-P, designed to protect PII. RIAs, BDs and more must, (1) have a written incident response plan (IRP) and (2) develop procedures to notify people whose PII was improperly accessed. To quote the SEC, "The basic idea for covered firms is if you’ve got a breach, then you’ve got to notify. That’s good for investors.”" 18-24 months to implement. #ria #rias #cybersecurity

4

Update: posted in the comments are the new NSM and a Fact Sheet. “The Biden administration has unveiled its plans for revamping how the government will boost the resilience and security of U.S. critical infrastructure through a new national security memorandum that affirms CISA’s role as the national coordinator, improve information sharing and codify the agency’s work on identifying “systemically important entities.” The NSM, set to be signed today by President Biden, will replace the structure established in 2013 by former President Obama through Presidential Policy Directive 21. CISA was created by Congress in 2018 and gets new responsibilities through Biden’s NSM that reflect how the threat environment has changed over the past 11 years and work with sector risk management agencies.” From today’s article in Inside Cybersecurity, authored by Sara Friedman.

27

7 Comments

The New DoD Defense Industrial Base (DIB) Cybersecurity Strategy 2024 is a comprehensive framework essential for bolstering the cybersecurity and resilience of the Defense Industrial Base. This strategy is crucial in safeguarding our national security and maintaining our technological edge. Key Highlights: - Enhanced Collaboration: Strengthening interagency cooperation and communication within the DIB cybersecurity community. - Cyber Resiliency: Prioritizing critical DIB capabilities and ensuring robust recovery plans from cyber incidents. - Regulatory Framework: Developing regulations to govern cybersecurity responsibilities of DIB contractors and subcontractors. - Information Sharing: Improving threat intelligence sharing and leveraging commercial partnerships to enhance cyber threat awareness. Aligned with the 2022 National Defense Strategy and the 2023 National Cybersecurity Strategy, this approach ensures that our defense ecosystem remains secure and resilient in today’s contested cyberspace. Read the full document to learn more about how we are protecting our nation’s critical infrastructure and defense capabilities: https://lnkd.in/dUdqE7SS #CyberSecurity #Defense #NationalSecurity #DIB #DoD #CyberResilience #InformationSecurity #TechnologyAdvantage #Innovation #Collaboration

6

1 Comment

Find clarity on SCRM, NIST, and OTTPS standards and processes for Federal Government ICT Procurement! Watch our video that outlines where these all intersect: https://lnkd.in/eG_37QcB #NASASEWP #SCRM #NIST #OTTPS #FederalProcurement

3

A recent report from the Government Accountability Office (GAO) reveals that only six out of the numerous leadership and oversight mandates outlined in the 2021 executive order on enhancing national cybersecurity are yet to be fulfilled by the responsible agencies. Read to learn more about GAO’s report. 🔗 https://hubs.ly/Q02vNYgc0

1

Check out this article in Federal News Network, where SkillStorm Advisory Board Chair Suzette Kent discusses the critical need for cyber & cloud skills within the federal government. It is clear that a skills-based hiring approach (vs. rigid four-year degree requirements) is necessary to help close the tech skills gap while enabling the government and contractors to close the tech skills gap and keep the US on the cutting edge of technology. https://lnkd.in/g6pU95uR

20

This week's podcast, CIRCIA Rulemaking: Double Incident Reporting for the DIB. Defense contractors have had cyber incident reporting obligations under DFARS clause 252.204-7012 for many years. Recently, however, CISA issued a 457-page proposed rule implementing the 2022 Cyber Incident Reporting for Critical Infrastructure Act. Unless CISA and DoD can reach an agreement, DIB contractors will have duplicative incident reporting obligations for two different agencies. Links to watch/listen are in the comments ⬇ #DIB #DOD #cyber

14

2 Comments

GovCon -- New DFARS 252.245-7005 clause has some important changes regarding the Management and Reporting of Government Property Take a look at this blogpost to learn more https://zurl.co/jlTW

1

The DOD recently released new proposed rules for CMMC 2.0, which aim to protect sensitive #nationalsecurity information. While these new rules include special enclaves to avoid increased overhead costs for small businesses, further clarification is needed to fully support their participation. Small businesses can often lack the required support and resources needed to compete with large companies, as the latter can take on additional overhead without being significantly affected. Ingram Micro Public Sector is one of the leading distributors helping #smallbusinesses remain competitive in the government marketplace. Whether it’s innovative secure and compliant solutions, financial support or contract assistance, our deeply experienced public sector team is committed to supporting small businesses. https://lnkd.in/e3yRXskM

18

It will be interesting to see how this impacts #CMMC, especially internationally. Haven't had a chance to read it yet, but I'm looking forward to it! #cyber #cybersecurity #reciprocity #informationsecurity #infosec #DoD #NIST #NIST800171 #CMMC2

24

1 Comment

From Chris H.'s take on CISA's voluntary SbD Pledge: '... a cybersecurity version of a “Scouts Honor” ... not legally binding, and therein lies the challenge we will discuss below. '... we need to try and garner broader adoption among the non-security software community for this paradigm change ... This means traditional software companies, as well as large enterprise businesses who aren’t “software companies” by nature but are using software to power their modern enterprise ... [The latter would be folks with in-house development teams creating bespoke tools for organisational processes?] 'That said, it isn’t nothing, and there is something to be said for reputational harm, trust and more in a community that can be slow to forget and unforgiving when an organization slips up. '... another positive step forward for the software community when it comes to at least speaking to the need for more Secure-by-Design products and software ... 'What remains to be seen, is who will not just talk the talk, but walk the walk'. https://lnkd.in/gRncaapb

1