John Binks, PMP®, AWS-CCP, AMA-CPM ✪

Interested in how to protect aircraft, drones, and other autonomous vehicles from cyber threats? Come join us next week for a webinar, as part of MassDOT’s Aeronautics Division events for the Federal Aviation Administration's Safety Day. This won’t be a dry session focusing on IT—we’ll be talking about threats posed against all manner of transportation technologies, and the systems mindset that will enable us to catalyze safe and secure economic activity in the future. Questions? Want to talk about something specific? DM me and let’s chat!

7

GSA Schedule Holders - Don't Miss This!! GSA is planning to release Refresh 22 to its MAS Solicitation 47QSMD20R0001 and an associated mass mod for existing schedule holders in August 2024. GSA will hold a webinar on Monday, July 22, 2024 at 1pm ET. The link to join is https://lnkd.in/gSAT5biS Refresh 22 expands OPTIONAL participation in the Transactional Data Reporting (TDR) pilot to 67 SINs! Make sure you understand what that means to you should you select to participate. Learn more about TDR at https://lnkd.in/g-h8Yn9A The refresh also adds a statement to FAR Clause 52.232-36 under GSAR/M clause SCP-FSS-001 regarding payments made by the Governmentwide Purchase Card (GPC) and related processing fees, that reads: "Proposed prices must be inclusive of all costs associated with acceptance of the Governmentwide commercial purchase card (e.g., payment processing fees). Schedule contractors may not impose a surcharge at the order level for payment by Governmentwide commercial purchase card." This is important so you can recoup processing fees as the Government pushes to expand its use of the GPC into contract payments. Sell software on GSA Schedules? GSAM/R clause I-FSS-600 will be modified to add that MAS contractors MAY indicate if a software producer has attested that software complies with Government-specified secure software development practices and has an attestation form uploaded to the CISA repository by adding language provided in the Refresh under bullet 18b, Terms and Conditions, in their text file. Addinional updates include: ▶ Updates to specific large categories, subcategories, and SINs as follows: ⏩ Facilities (B), Subcategory B02, SIN 541690E ⏩ Industrial Products (E), Subcategory E04, SINs 332510C and 332510S ⏩ Industrial Products (E), Subcategory E05, SIN 325320 ⏩ Transportation and Logistics Services (K), Subcategory K03, SINs 492110 and 492210SB ⏩ Transportation and Logistics Services (K), Subcategory K05, SINs 485 and 532111 ⏩ Travel (L), Subcategory L01, SIN 531 ⏩ Travel (L), Subcategory L02, SIN 531110 ▶ Implement minor revisions to the Modification Products Price Proposal Template (PPT) ▶ Incorporate clause and provision updates, through Federal Acquisition Circular (FAC) 2024-05 and GSAR/M Change 182 Details can be found at https://lnkd.in/grVYMCnf #gsa #schedules #refresh22 #massmod #MAS

19

Internal and external communication with video conferencing is important for #government agencies. How can agencies use #video for effective internal collaboration or better constituent engagement? Learn some of the benefits and solutions for video conferencing. #publicsector #publicsafety #firstresponders #stategovt #federal

1

From my previous post, but I thought this was important to share: As 2025 comes closer, the interest (to get CMMC certified) will rise, but the talent will not be available to help them. As I talk within our CMMC companies, most CCP, CCAs come from the IT space. A small percentage from the audit world. Auditors understand the wholeness of an assessment/audit, in other words, how to stand up the assessment/audit for a regulator. It is a story, not an objective based project. Unfortunately, most CMMC-industry people are too focused on the objectives and forget the true purpose of the assessment/audit: Is the contractor cyber secure and the OSC understands how to protect the CUI. Contractors run a business, not a NIST shop. We must help them through their assessment/audit, so they can continue their dedication to our defense industry. I see policies, literally, written by control/objective - how the heck can that help a contractor's business-you are then requiring them to learn the NIST language. We (auditors/assessors) need to take on the responsibility of creating normal business Information Security Policy(ies) for the contractor and then correlate to the controls/objectives. IF, you want to learn more, hear more????? I am on a panel this morning at 11 am to talk about CMMC: SPRS and working with the Primes: GO TO https://usgovcert.com #cmmc #cybersecurity #defensecontractors #defense 😃

13

4 Comments

Propel your career to new heights as a Engineering and Implementation Manager at SAIC, where your expertise in managing large-scale IT and digital innovation projects can create a lasting impact on a national level. #enterpriseIT #modernization https://bit.ly/3V55pso #customerexperience #transformation

9

1 Comment

Military veterans and first responders are finding a new way to manage stress through beekeeping. The Hives for Heroes® program pairs military veterans and first responders with beekeeping mentors, providing them with a calming and therapeutic activity. The sound of the bees' wings and the process of tending to the hive have a soothing effect, helping participants to slow down and focus on the present moment, reducing stress and anxiety. United States Marine Corps veteran Francis Donohue and Stapleton resident Nick Rozak, a beekeeper, have teamed up through the Hives for Heroes program. Donohue says, "It's like equine therapy or any kind of pet therapy. It calms me down." Beekeeping provides a unique and effective way for military veterans and first responders to manage the stress they face in their everyday lives. By engaging in this hands-on activity, participants can find a sense of calm and connection, which can be beneficial for their mental health and overall well-being. #MilitaryVeterans #FirstResponders #Beekeeping #MentalHealth #StressManagement #HivesForHeroes #TherapeuticActivities #MilitaryNews

1

Struggling to manage cloud costs and resource optimization across multiple providers? Read this recent IDC MarketScape report to learn more about SAIC's strengths in cloud solutions.

25

On 5/28/2024, DoD will publish notice of an Information Collection Requirement titled, "Defense Federal Acquisition Regulation Supplement; Assessing Contractor Implementation of Cybersecurity Requirements" in the Federal Register. So what does this mean? First off... ✅️This is a notice, not a rule. ✅️There is NO impact to existing DFARS provisions or clauses (so don't go getting all excited). ✅️This is NOT the "DFARS 7012" rule everyone is waiting for. It's a notice of proposed extension of currently approved collection of data under DFARS provision 252.204-7019, Notice of NIST SP 800-171 DoD Assessment Requirement, and the DFARS clause 252.204-7020, NIST SP 800-171 DoD Assessment Requirements, in order to assess contractor implementation of cybersecurity requirements. Got heartburn with how things are done now with this data collection? DoD and OMB are requesting comments and recommendations by 6/27/2024. Search on Docket Number DARS-2024-0006 (or OMB Control Number 0750-0004) at https://lnkd.in/gM3mykRp What impacts are there to offerors and contractors? No changes at this time. DoD wants to use this extended data collection process to continue to assess where vulnerabilities exist in its supply chain. DFARS clause 252.204-7020 requires contractors provide the Government access to facilities, systems, and personnel in order to conduct a Medium Assessment or High Assessment, as necessary. Background: DFARS provision 252.204-7019 states that an offeror that is required to have implemented NIST SP 800-171 per DFARS clause 252.204-7012 shall have a current assessment for each covered contractor information system that is relevant to the offer, contract, task order, or delivery order in order to be considered for award. DFARS clause 252.204-7020 states that contractors must provide the Government access to its facilities, systems, and personnel in order to conduct a Medium Assessment or High Assessment, if necessary. Permalink to the Notice: https://lnkd.in/gsx3MeTJ

27

How much do you know about the federal government and their partnerships?🤔❓ The federal government often collaborates with corporations for #economicdevelopment, #research and #development, #infrastructureprojects, and #nationalsecurityinitiatives. However, such partnerships can raise concerns about conflicts of interest and accountability. JOIN ME and Christina Lomasney of Pacific Northwest National Laboratory (PNNL) on June 6th at 11:00 am ET as we discuss pressing challenges of #riskmanagement across the Federal Government. 🔎 Learn best practices for mitigating risks, ensuring compliance, and streamlining partnership processes. 🔎 Register now to modernize your risk management and partnership approach with PNNL and #Salesforce. #CRM Register Here: https://lnkd.in/eXU_Wr4Y

28

As modern life creates vast amounts of relevant data, federal agencies need to be able to harness it towards protecting the nation and improving the lives of its people. Booz Allen is helping missions across government achieve this. Where is your agency on the path to data enablement?

1

1 Comment

📣 Calling all businesses looking to expand their government contracting opportunities! 🏢💼 Have you heard about the GSA Schedule program? 🤔 It's a fantastic opportunity to get your products or services on the radar of federal government agencies. 🇺🇸✨ But how do you get on the GSA Schedule? 🤷‍♀️ Don't worry, we've got you covered with a step-by-step guide: 1️⃣ Research and Determine Eligibility: Find out if your company is eligible and which GSA Schedule category fits your offerings. 2️⃣ Register in SAM: Get your company registered in the System for Award Management (SAM) database. 🖥️ 3️⃣ Develop a Competitive Pricing Strategy: Analyze the market and create a pricing strategy that stands out while remaining fair and reasonable. 4️⃣ Prepare Documentation: Gather all the necessary documents like financial statements, performance records, catalogs, and pricing info. 📋 5️⃣ Submit the Application: Complete and submit your application through the GSA's eOffer/eMod system. 📤 6️⃣ Review and Negotiation: Your application will undergo a thorough review, and negotiations may begin if you meet the requirements. 💼💵 7️⃣ Award and Contract Execution: If approved, you'll receive an award letter outlining the terms and conditions. Review it carefully! 📝 8️⃣ Compliance and Reporting: Once you have a GSA Schedule contract, stay compliant with reporting sales and pricing. Stay informed about program updates! Remember, each GSA Schedule category may have its own nuances, so research and guidance are key. 📚💡 Consult a GSA consultant or expert for a smooth process. Ready to take your business to new heights and tap into the federal market? 🚀 Start your journey to the GSA Schedule today! 💼✨ #GSA #GovernmentContracting #BusinessOpportunities #FederalMarket #GrowYourBusiness

1

In a new eBook from Federal News Network, #BoozAllen experts Imran Umar and Erica Banks share lessons learned from DOD’s Thunderdome project and how they can be applied to federal civilian agencies as they implement #zerotrust architectures of their own with the help of the Cybersecurity and Infrastructure Security Agency’s Continuous Diagnostics and Mitigation program. Other #cybersecurity insights focus on #cloud, #EDR, and OT systems.

8

Concerning that in 2024 we still have an incredible amount of work to do to protect our most valuable asset #data. Most think vertical, not horizontal, most think back up is the answer but really all pillars apply! ICAM is instrumental, but what about the actual asset? SD3IT has some incredible partners for all of your Zero Trust Pillars and our team of experienced veterans and former federal employees can fill your gaps in your #cyber strategy. #sd3itcanhelp #ztpillars #protectthedata #datacentricsolutions

2

Have you registered for ATARC's Federal Law Enforcement IT Summit? 💡 This summit takes place on August 28, 2024 from 7:30 AM to 3:00 PM at the Carahsoft Collaboration Center in Reston, VA and brings together government and industry leaders to address critical #IT issues in law enforcement. The event features keynotes and panels on #cybersecurity challenges, data privacy, emerging technologies, and IT infrastructure resilience. Participants will gain insights from experts and foster collaboration among federal officials, industry leaders, and academic experts to tackle pressing IT challenges in the #law enforcement sector. Panel topics include: 💡Securing Tomorrow: Navigating Cyber Challenges in Law Enforcement 💡Balancing Act: Data Privacy and Governance in Law Enforcement 💡Emerging Technologies Use in Law Enforcement Agencies 💡From Cloud to Command Center: Strengthening IT Infrastructure Secure your spot now! - https://ow.ly/inOH50SyLx1

2

Read Guidehouse Defense and Security's new article, Managing Change Fatigue in the Federal Workforce, outlining our team's recommendations for agencies looking to produce better outcomes in the face of complex workforce challenges: https://lnkd.in/eXD7JN7V.

6

📣 Amazing opportunities ahead with the #AirForce for #SmallBusinesses. #USAF Seeking Small Businesses to Support Major Reoptimization Effort This plan focuses on four main areas – developing people, generating readiness, projecting power and developing capabilities. https://lnkd.in/gWhAwWfF #GovCon #SmallBusiness #Accounting #GovernmentContracting #GovernmentContractor #FederalContracting #FederalGovernment

2

1 Comment