Consumer Financial Protection Bureau is concentrating on its people above its technology in its IT modernization and cybersecurity efforts.
Industry and government alike have been pondering the new proposed rule on vendor cybersecurity that was published just a couple of weeks ago. The Defense Department wants to finally get its Cybersecurity Maturity Model Certification program off the ground. It would impose new requirements on contractors. For one industry view, the Federal Drive with Tom Temin spoke with the Chief Technology Officer at Fortinet Federal, Felipe Fernandez.
This fed has a long career as an engineer and cyber security practitioner for the Navy and Marine Corps. He reached the Senior Executive Service years ago. Now he's on the civilian side of government, as the chief information security officer for the Homeland Security Department.
While the buzzword of 2024 may be artificial intelligence, or some derivative like generative AI or large language models, the biggest challenge and focus for federal IT community will continue to be the people.
Federal News Network asked a panel of current and former federal executives for their opinions about 2023 and what federal IT and acquisition storylines stood out over the last 12 months.
James Carnall, the head of cyber at Red River Technology, said that reaching a state of zero trust and enhancing cybersecurity generally will start with identity management.
With the pace in which AI and generative AI has been rolled out to the public, red-teamers are playing catch-up, with their team facing a significant deficit. There’s a lot for them to address in the near term, and in many cases, they’ll need to learn on the fly.
The rulemaking is largely what CMMC insiders expected, but it still raises questions, like how the certification program will impact external IT service providers.
Before their finalization, the proposed rules received over 200 comments from industry groups, universities and legal firms. Many of them highlight the complexities of cyber incident reporting and the many potential conflicts it has with the transparency the SEC seeks to provide investors.
The Energy Department created standard training courses to ensure employees have a baseline understanding of zero trust requirements, while the CFBP is focused on software development, including open source software.
In today's Federal Newscast: Some 6,000 vendors fail to comply with the ban on Chinese telecommunications equipment. A tiny agency has cleared it's backlog of incident reports in time for 2024. And the Marines Corps is looking for a new chief information security officer.
Ask the CIO, Federal News Network’s longest running show, received attention for the unusual agencies or people rather than the usual topics of cloud, cyber and customer experience.
Defense contractors are parsing out a nearly 250-page proposed rule. It landed sort like a lump of coal on Christmas Eve. It is all about a program known as Cybersecurity Maturity Model Certification (CMMC).
U.S. Indo-Pacific Command says it's starting with a clean sheet of paper on the topic of network defense, building a mission partner network that incorporates zero trust from the beginning.
In the rapidly evolving landscape of modern warfare and the escalating dependence on virtual mission collaboration, the demand for a more secure MPE has become exceedingly pressing. The moment to take action has arrived.