Stewart Kerr

Are you a contractor or subcontractor working with the DoD? Level 1 of CMMC 2.0 focuses on basic cybersecurity hygiene to protect Federal Contract Information (FCI). This foundational level requires the implementation of 17 practices, making it more accessible for small businesses. Good news! Most organizations can self-assess, making this a great starting point to secure your operations and ensure compliance. Have you started your journey to compliance with CMMC 2.0 yet? #compliance #contract #CMMC #cybersecurity

1

The DOD recently released new proposed rules for CMMC 2.0, which aim to protect sensitive #nationalsecurity information. While these new rules include special enclaves to avoid increased overhead costs for small businesses, further clarification is needed to fully support their participation. Small businesses can often lack the required support and resources needed to compete with large companies, as the latter can take on additional overhead without being significantly affected. Ingram Micro Public Sector is one of the leading distributors helping #smallbusinesses remain competitive in the government marketplace. Whether it’s innovative secure and compliant solutions, financial support or contract assistance, our deeply experienced public sector team is committed to supporting small businesses. https://lnkd.in/e3yRXskM

18

"The Fundamentals of Transforming Government Operations" on May 22nd. Join Kelly and Aaron to learn how government agencies use the Fundamentals Map™ to improve outcomes for citizens while operating more efficiently. Webinar registrants will receive the session recording. #epm #govtech https://lnkd.in/etzzUr4h

4

Joseph Goodman, by Steven Palange and Copilot for Microsoft 365, Certainly! Here’s a rewritten “About Me” section and a detailed cybersecurity plan: About Me: With a robust 25-year trajectory in IT, I’ve navigated roles from help desk support to security and compliance leadership at Virginia Tech. My expertise spans across platforms, with a niche in PHP and MySQL for web app development1. Presently, I’m steering IT security and compliance, safeguarding sensitive data across financial, student, and medical domains, and adhering to standards like PCI-DSS and HIPAA2. My tenure in public service as a council member in Pulaski, Virginia, has honed my skills in budgeting, economic development, and fostering collaborative governance. Cybersecurity Plan: Risk Assessment: Conduct a comprehensive risk assessment to identify potential cybersecurity threats. Evaluate the effectiveness of current security measures and identify areas of improvement. Policy Development: Develop clear cybersecurity policies and procedures, including incident response and disaster recovery plans. Ensure policies meet compliance standards like PCI-DSS, FERPA, HIPAA, GDPR, and GLBA2. Employee Training: Implement ongoing cybersecurity awareness training for all employees. Simulate phishing and social engineering attacks to prepare staff for real-world scenarios. Infrastructure Security: Deploy advanced firewalls, intrusion detection systems, and endpoint protection solutions. Regularly update and patch systems to protect against known vulnerabilities. Data Protection: Encrypt sensitive data both in transit and at rest. Establish strict access controls and regularly review permissions. Monitoring and Response: Utilize SIEM tools for real-time monitoring and alerting of potential security incidents. Develop a structured incident response team ready to act on alerts swiftly. Vendor Management: Assess the security posture of all third-party vendors. Ensure vendors adhere to the same ethical and security standards as the company. Continuous Improvement: Regularly review and update the cybersecurity plan to adapt to new threats and technologies. Foster a security culture within the organization, encouraging proactive identification and reporting of security issues. This plan leverages AI capabilities to enhance threat detection, automate security tasks, and provide predictive analytics for proactive defense strategies. It’s designed to be dynamic, adapting to the evolving landscape of cybersecurity threats.

42

Federal agencies, including the Department of Defense (DoD), are leaving behind cumbersome waterfall models for agile development in software projects. This shift aims to deliver rapid, mission-focused IT solutions while integrating agile acquisition methods. At REI, agile procurement means aligning with mission goals, breaking projects into manageable tasks, and ensuring flexibility and user feedback. The goal: to equip service members with effective, timely tools through efficient acquisition processes. Read more about deploying #agile practices for DoD: https://lnkd.in/eudFdJsH #ArmyAgile #agile #FederalGovernment #technology

5

New Maryland Law to Spawn Data Center Development Maryland has passed the Critical Infrastructure Streamlining Act of 2024 (CISA), which clarifies the definition and legislative framework around the use of emergency backup power generation in the state. The CISA bill, signed by Governor Wes Moore on May 9, passed with a unanimous vote in both the state House and Senate. The newly enacted legislation which goes into effect July 1, reiterates the state’s commitment to welcoming data centers, and fosters continuous innovation for businesses throughout Maryland. Governor Moore emphasizes that “this bill is going to supercharge the data center industry in Maryland.” Read the full story: https://lnkd.in/gcJcsq8j #digitalinfrastructure #datacenters #capex

15

These 6 technology trends can help power government in 2024: Government agencies are continually looking at new technologies that can impact mission priorities and enhance service delivery. The post These 6 technology trends can help power government in 2024 first appeared on Federal News Network. @Poseidon-US #FedearlNewsRadio #News

1

ASK DTS: Why did you want to get a Joint Surveillance Voluntary Assessment (JSVA)? A: We set out to demonstrate to small businesses that CMMC requirements can be met in a cost-effective way. For us, Microsoft Cloud was a big part of making that happen – on-premises infrastructure is much too expensive for SMBs. We also believe demonstrating our level of security through a 3rd party assessment as early as possible is a competitive advantage for contracting and handling remediation for other companies. Our customers can have confidence that DTS is protecting their sensitive data. #DTScybersecurity

6

VoicedIQ Spotlight: Tracking DoD MDA Integration and Operations for Enterprise Solutions (MIOES)? Seeking to update the status of this effort, AlphaBrook engaged with MDA personnel, who explained, “The Draft RFP should be released in the Oct 2024 timeframe and the final RFP is expected to be released in Spring 2025.” This upcoming opportunity is a follow-on to the current Integrated Research Development for Enterprise Solutions (IRES) contract and is expected to involve services including support for concurrent test, training, and operations (CTTO); mission execution platform integration; enterprise communications support; and synchronization of capabilities across the MDIOC information technology environment. For more information and direct verbal feedback on the effort including: • Performance of their existing contractor • Existing pain points with the current contract • Intended contract vehicle for procurement • Key vehicle decision-makers • And more additional insights See our full analysis: https://lnkd.in/eWs6YVmf #TheAdvantageIsKnowing #BusinessDevelopment #FederalContracting

1

The Department of Defense released a 400-page document, "Zero Trust Overlays," which details one overlay for each of the seven pillars in the DoD Zero Trust Strategy, plus an overlay for the enablers. Learn more about this new guidance. https://bit.ly/4cb3XKU

13

Platform One is not just about the work that we do but the work that we make capable. 🤝 Vulcan’s team of only 6 people had to create a “pay by the seat” licensing model to help DoD customers adopt #DevSecOps and Agile practices as a part of the cloud-centric vision within DISA J9 Hosting and Compute (J9 HaC). By utilizing Platform One’s Big Bang and Iron bank the Vulcan team was able to create a low cost – best value solution for DoD customers who wanted an enterprise solution without feeling the major budget constraints that can impact the ability to deploy and get tools to the warfighters. 🎖 Platform One can be effectively utilized by a team of just 6 people, imagine what we could do for you! Click here to contact our customer success team to do a tech fit today: https://lnkd.in/giyuPEzG Read more about this incredible accomplishment here: https://lnkd.in/gaCP4ucu #PlatformOne #MissionObsessed #Casestudy #Militarytech #Software #Kubernetes #Security #Airforce

101

1 Comment

🚀 Enhancing Cybersecurity with LogicFinder’s Solutions! 🚀 We're excited to spotlight our ASSIST Tool Development project for the DoD. This tool enhances data analysis, processing, and utilization, empowering DoD personnel with critical insights for informed decisions and operational superiority. 🔗 Learn more: www.logicfinder.net 📧 Contact us: info@logicfinder.net #CyberSecurity #Innovation #Technology #DoD #Defense #DataAnalysis #IntelligenceSolutions #TechInnovation #OperationalExcellence #SupportTools #AI #MachineLearning #BigData #DataScience #InformationSecurity #CyberDefense #TechSolutions #ITConsulting #SecureTech #AdvancedTechnologies #MilitarySupport #DataProcessing #CuttingEdgeTech #TechDevelopment #LogicFinder #TechIndustry #DigitalTransformation #DataInsights #DoDSolutions #MissionCritical #NationalSecurity

6

Senior Advisor at the DoD Chief Digital and Artificial Intelligence Office and Chief Product Officer of Advana, Ashley Elizabeth Evans, and others shared insights on leveraging AI/ML and automation to bolster mission readiness in defense during FedScoop's #uipathontour. The collaborative efforts between the entire CDAO, including Advana, are aimed at harnessing the potential of data and AI/ML technologies to optimize decision-making processes and operational efficiency within the DoD and defense operations. Engaging in forward-looking dialogues with other leaders such as these is essential for advancing technology within defense operations.

127

1 Comment

Headed to RSA Conference? Here are a few tips from someone who has been there ~22 times, (but who is counting?!) In addition to the big vendors who often host informational talks at their booths, make time to visit the small booths on the expo floor. You will see cool, new technology; meet interesting people; and the vibe is less intense. Go to the sessions that interest you the most and turn on your active listening skills. Your texts and emails can wait. The speakers spend months preparing high quality, compelling content. They deserve our attention and informed Q&A. Help the new folks with directions, tips, and advice they seek. We were all new once. Network. Make it a goal to meet 5 new people and build a plan to stay connected to them. Rest. It is a marathon, not a sprint. There are a lot of competing events and demands on your time. Make sure you take time every day to recharge and rehydrate. Create a buddy system for your safety. Prioritize rest and safety. Have fun. RSA week is one of the coolest weeks of the year. It can be as entertaining and compelling as you make it. The opportunity for engaging conversations, deep topic discussions, forging new friendships, and building industry depth is unsurpassed. Hope to see you there!

586

39 Comments

Here's iTnews' list of funded IT projects in last night's federal budget: https://lnkd.in/djqGXTH8 The federal government outlined at least $2.8 billion in planned investments in technology systems and policy development over the next four years, eclipsing last year's $2 billion.

2

Why would the Government want to know if your proposal was written with AI or any contract deliverables will be written with AI, and which AI tool? (1) They may want to fact check the proposal / deliverable. We all know AI tools are only as good as the data they draw from. (Fun fact...ask ChatGPT about the Federal Acquisition Regulation and you'll very often get wildly outdated and incorrect answers. And that is also true for other industries and policies, too.) (2) They want to know data / info is both secure and private. Your proposals and deliverables, when released into the world of OpenAI, ChatGPT, Gemini, etc., inform others. Think the Government wants other Governments or bad actors to know its business? Or, let's pose the question so it hits home. Do you want your competitors or bad actors to know your business? Not sure what to look for or ask about in an AI tool? We've pulled together a list of things to Do, Know, and Ask when assessing AI tools for use in GovCon, taken from our chats with AI tool developers themselves. Find it at https://lnkd.in/dJ667TbW.

10

2 Comments