The federal government is all in on a zero trust approach. Continued migration to the cloud; the move to mobile and bring-your-own-device; the convergence of IT, operational technology and Internet of Things; and the sharp increase in remote working due to the pandemic have changed how the government must approach cybersecurity.
Challenges still exist in securing critical infrastructure against cyber attacks.
During this exclusive webinar, moderator Jory Heckman and guest Tom Sasala, chief data officer with the Department of the Navy will discuss data management strategy and AI's role in cybersecurity. In addition, Randy Hayes, public sector at VAST Federal will provide an industry perspective.
Chris DeRusha, the federal chief information security officer in OMB, said agencies and vendors need time to understand and implement NIST’s new Secure Software Development Framework.
Zero trust improves security around vetting users, but it does nothing to address user-created challenges like falling prey to phishing attacks. Training isn’t enough. Instead, implement AI/ML-driven monitoring, advises Proofpoint’s Hanna Wong.
Section 6722 of the 2023 NDAA would require DHS to mandate a bill of materials for technology from current and future contractors and some in industry are calling the provision problematic.
OMB wants to avoid a future SolarWinds by requiring federal software vendors to self-certify that they’re following secure development practices.
"Agency unification" and bolstering the workforce are major facets of CISA's latest strategic plan.
What the federal government can do to protect against the threat of quantum computing
As threats rapidly evolved over the last two years, the Biden administration declared that the federal government must execute a massive shift in cybersecurity strategy with aggressive timelines.
Industry has launched a pretty strong objection to the latest version of the cybersecurity maturity model certification program, known as CMMC.
The agency is seeking public input on the development of landmark cyber incident reporting regulations.
The White House and the Pentagon are working on new cyber workforce plans to help overcome longstanding recruitment and retention challenges.
NSA released a suite of “post-quantum algorithms” that will eventually be requirements for national security systems, along with a series of deadlines for the transition.
The National Counterintelligence and Security Center is taking advantage of a moment when agencies and policymakers are more attuned to cyber supply chain security concerns.