The Pentagon led the way for the rest of the government by implementing two-factor authentication across many of its systems. But plenty of important IT infrastructure still relies on a "reckless" system that depends on passwords alone for authentication.
Earlier this month, the Defense Information Systems Agency announced a major reorganization. It says the changes would help drive cybersecurity into everything the agency does. But DISA will never have unlimited resources, so it's now moving toward a "risk management" approach to cybersecurity: Accepting risk in some areas so that it can make sure that what really matters is highly secure. The risk management executive is a new position within the agency's organizational chart. DISA Risk Management Executive Mark Orndorff talked about the new cyber philosophy with Federal News Radio DoD Reporter Jared Serbu.
Mark Orndorff, risk management executive & chief information officer for the Defense Information Systems Agency, joins Federal News Radio for a free online chat to discuss his agency's new risk management organization and DoD's evolving approach to cybersecurity.
Long-time and well-respected cybersecurity executive Mark Orndorff is calling it a government career on Jan. 31.
Transportation and DISA CTOs say cloud computing may not deliver the savings many expected. Instead, the value of moving to the cloud is the ability to modernize apps, scaling up and down on demand and taking advantage of the agility and speed to get services to market.
New security guide places more trust in governmentwide FedRAMP program to secure unclassified data in commercial clouds, but retains tougher restrictions for more sensitive information.
The Defense Information Systems Agency is no longer the Defense Department's exclusive buyer of cloud computing services, but it is still in charge of security standards. Federal News Radio's Jared Serbu reports DISA's new cloud security revamp is all about the idea of informed risk.
The Defense Information Systems Agency launches reorganization, including the new Joint Task Force-DoD Information Networks. The new cyber organization will reach initial operating capability on Jan. 15, taking over 14-to-19 tasks from U.S. Cyber Command.
The Defense Information Systems Agency launches a new cyber defense organization. The Joint Task Force DoD Information Networks will official launch Thursday. The new cyber organization is part of the broader DISA reorganization that goes into effect Monday. Federal News Radio Executive Editor Jason Miller tells In Depth with Francis Rose about some of the changes.
If federal agencies aren't already serious about cybersecurity, the Sony saga ought to set everyone straight. The Defense Information Systems Agency has been a leader in cybersecurity for a while now. Its service catalog has a long list of cyber services available tor DoD agencies. Now DISA is launching a new cybersecurity methodology called the continuous monitoring risk scoring system (CMRSS). Dave Bennett is DISA's chief information officer. On the Federal Drive with Tom Temin, he told executive editor Jason Miller about the new approach.
A new memo from acting CIO Terry Halvorsen removes the requirement for DISA to be the main path to buy cloud computing services.
Dave Bennett, DISA's chief information officer, said the agency is beginning to implement a new approach to cybersecurity. He said the continuous monitoring risk scoring system (CMRS) looks at a variety of factors to give the agency a score based on a set of predetermined analytics.
The Defense Information Systems Agency is just getting started with a new cybersecurity methodology called the continuous monitoring risk scoring system or CMRSS. Dave Bennett is DISA's chief information officer. He tells executive editor Jason Miller about the CMRSS approach.
Mike Krieger, the former Army deputy CIO/G6, retired after 35 years in government. He says the move to email-as-a-service in the cloud provided the Army the roadmap to change how it looks at shared services.
The Navy is testing Microsoft's Office 365 as one potential option for migrating its email users to a cloud-based service. But the cost of securing the system is yet to be determined.