Abhai Johri

Join us on Wednesday, May 29th at 8:30 AM to discover the joint strategies used by CERT Ukraine and CISA for cyber defense! Don't miss out on this opportunity to learn from the experts. Link in bio for more details and to get tickets. #CyberDefense #CERTUkraine #CISA #CyberSecurity #EventAlert

10

In a new eBook from Federal News Network, #BoozAllen experts Imran Umar and Erica Banks share lessons learned from DOD’s Thunderdome project and how they can be applied to federal civilian agencies as they implement #zerotrust architectures of their own with the help of the Cybersecurity and Infrastructure Security Agency’s Continuous Diagnostics and Mitigation program. Other #cybersecurity insights focus on #cloud, #EDR, and OT systems.

8

Find clarity on SCRM, NIST, and OTTPS standards and processes for Federal Government ICT Procurement! Watch our video that outlines where these all intersect: https://lnkd.in/eG_37QcB #NASASEWP #SCRM #NIST #OTTPS #FederalProcurement

3

The article has "borrowed" images from other websites, and according to an AI Detector, the content is 88% AI-generated. My thoughts:  I have noticed that more EP/Security businesses are using AI to create content and claim them as genuine articles. AI is only as good as the user that inputs the prompts. You'll need the skills and experience to distinguish fact from fiction in the generated content. Use AI as a tool, not a crutch. Almost everything I read that ends in "In conclusion," I dismiss as AI-generated. 

9

6 Comments

Unveiling Olympus: A game changer in cloud service management by the Defense Information Systems Agency. This platform harnesses technology to facilitate defense agencies in evolving their cloud environments at ease, minus the hassle of enterprise network connectivity. With integration to DISA’s Vulcan DevSecOps, Olympus brings to fore capabilities unseen before! Click here to learn more 👉 https://bit.ly/3wFYGvz #cloudmanagement #defenseagencies #DISA #Olympus

65

This is part of a critical effort by  the  U.S. Department of Commerce to understand the data landscape and to prepare for the future. Our thinking about public data standards needs to shift to accommodate the current and anticipated capabilities of AI systems. While LLMs can make better use of unstructured data than earlier generations of software, they also have limitations on input size and output reliability that need to be taken into account. If you have opinions on these issues, comment below-- but even more important submit them to the RFI!

12

4 Comments

Read the Guidehouse Defense and Security case study, detailing how our team helped a U.S. federal agency implement a data modernization strategy, enabling the agency to become more efficient with its data operations: https://lnkd.in/gnREN97R

1

What defines value? After three years of effort, this week marks the start of the federal government's enforcement of new secure software development requirements. Starting with GSA and then shifting to all commercial vendors selling to all agencies, the Office of Management and Budget industry-changing mandate is now in action. For years, vendors commented that they thought this would never happen, but guess what? It did. Attacks on nations' software are skyrocketing, and as a nation, we need to take steps to produce more secure software by design. Before implementing tools such as application security testing (SCA/SAST/DAST), you must ensure your organization has a proper foundation. This is why the NIST 800-218 Secure Software Development Framework (#SSDF) starts with organizations preparing themselves to ensure that their people, processes, and technology are prepared to perform secure software development at the organization level. CodeLock, Inc. received a grant from VIPC | Virginia Innovation Partnership Corporation to develop a dashboard to provide companies across the country with the resources they need to get started and comply with these new requirements. Over the last month, we have uploaded templates for policies and procedures that your organizations need to have in order to meet specific practice areas. Rather than you having to create this from scratch, we did the work for you, saving thousands of hours and the finances associated with that work. You can get a CodeLock account today and access all of these resources for only $19/month. Do no wait to take action, get started with the compliance process today. If you made it this far into my post, congratulations! Send me a message, and I will give you a discount code to get started for free. #ZeroTrust, #CyberSecurity, #SoftwareDevelopment, #DepartmentOfDefense, #InfoSec, #NationalSecurity, #DefenseTech, #CyberDefense, #SecureSoftware, #MilitaryTechnology, #DevSecOps, #InformationSecurity, #CyberAwareness, #GovernmentTech, #CyberThreats, #TechInnovation, #DigitalTransformation, #CloudSecurity, #DataProtection, #NetworkSecurity, #SecurityArchitecture, #CyberResilience, #IdentityManagement, #Encryption, #Compliance, #SecureCoding, #CyberRiskManagement, #AIInCybersecurity, #ThreatIntelligence, #CriticalInfrastructure, #CyberLaw, #CyberEthics, #TechnologyLeadership, #PublicSectorInnovation, #TechGovernance, #SecureByDesign, #PrivacyByDesign, #MilitaryInnovation, #DefenseStrategies, #CyberWarfare, #CyberDiplomacy, #GovernmentContracting, #DefenseContractors, #MilitaryTec, #TechPolicy, #SecureInfrastructure, #NationalCybersecurity, #TechForDefense, #SecureDevelopment, #GovernmentIT

13

1 Comment

In a new eBook from Federal News Network, #BoozAllen experts Imran Umar and Erica Banks share lessons learned from DOD’s Thunderdome project and how they can be applied to federal civilian agencies as they implement #zerotrust architectures of their own with the help of the Cybersecurity and Infrastructure Security Agency’s Continuous Diagnostics and Mitigation program. Other #cybersecurity insights focus on #cloud, #EDR, and OT systems.

15

Be sure to register for this dynamic panel discussion to hear my boss speak about some of the innovate ways we’ve been thinking about mission readiness! #cyber #webinar #atarc

8

Check out ATARC's latest White Paper: Navigating Cyber Challenges: Federal Agencies in the Digital Age! 🌐 In a recent roundtable, Federal experts discussed the various challenges and opportunities of navigating a rapidly evolving cyber landscape. Read along here - https://ow.ly/rFrJ50R9iYY #security #risk #cyber

7

The strategic cooperation between India and the United States has been solidified through foundational agreements such as the Logistics Exchange Memorandum of Agreement (LEMOA) in 2016 and the Communications Compatibility and Security Agreement (COMCASA) in 2018. These agreements have paved the way for the India-US initiative on Critical and Emerging Technology (iCET), launched in January 2023, to deepen collaboration across key technology sectors like space, semiconductors, AI, and clean energy. During the second iCET meeting, NSA Ajit Doval and US NSA Jake Sullivan highlighted the importance of preventing the leakage of sensitive technologies to countries of concern, particularly China. Protecting these technologies is crucial for maintaining national security and the strategic edge of both nations. Ensuring the security of emerging technologies reinforces the commitment to a resilient and secure partnership. National security remains a prime concern in all international deals concerning emerging technologies. The protection of classified information and data is essential for any collaboration, reinforcing the commitment to a secure and resilient partnership. #nationalsecurity #digitaltransformation #colloboration #emergingtechnology #india

16

2 Comments

Major news for Defense Contractors! The CMMC Final Rule (CFR 32) has entered its last phase before publication, setting up the formal third-party assessment system. All public comments have been addressed, and the CMMC final rule is projected to be published in the Federal Register around September-October this year. Following publication, there will be a 60-day period before it goes into effect. From early 2024 to March 2025, assessors will begin conducting CMMC assessments and certifications at full speed. The DFARS clause (48 CFR) adding an audit and certification requirement for contract awards will likely go into effect around March 2025. For DoD contractors, now is the time to prepare for audits, Preparation typically take 9 to 18 months. Don't risk interruptions in your ability to obtain and keep DoD contracts. Has this convinced your leadership that CMMC is real? If you're scrambling, consider solutions that provide a clear path to compliance. Quatronics guides companies on what to do, how to do it, and when to stay compliant. Act now to maintain your DoD contracts without disruption.

9

4 Comments

The GAO report highlights the barriers faced by federal agencies when implementing cybersecurity risk management processes. Addressing these hurdles ensures a strong and resilient cybersecurity posture. One of the key areas for improvement is the need to refine cyber risk evaluation methods. Currently, federal agencies heavily rely on the Common Vulnerability Scoring System (CVSS) to assess the criticality of security vulnerabilities in software applications. However, this system has its limitations. A more nuanced approach that considers multiple factors would enable a more sophisticated and effective response to cybersecurity threats.

5

The New DoD Defense Industrial Base (DIB) Cybersecurity Strategy 2024 is a comprehensive framework essential for bolstering the cybersecurity and resilience of the Defense Industrial Base. This strategy is crucial in safeguarding our national security and maintaining our technological edge. Key Highlights: - Enhanced Collaboration: Strengthening interagency cooperation and communication within the DIB cybersecurity community. - Cyber Resiliency: Prioritizing critical DIB capabilities and ensuring robust recovery plans from cyber incidents. - Regulatory Framework: Developing regulations to govern cybersecurity responsibilities of DIB contractors and subcontractors. - Information Sharing: Improving threat intelligence sharing and leveraging commercial partnerships to enhance cyber threat awareness. Aligned with the 2022 National Defense Strategy and the 2023 National Cybersecurity Strategy, this approach ensures that our defense ecosystem remains secure and resilient in today’s contested cyberspace. Read the full document to learn more about how we are protecting our nation’s critical infrastructure and defense capabilities: https://lnkd.in/dUdqE7SS #CyberSecurity #Defense #NationalSecurity #DIB #DoD #CyberResilience #InformationSecurity #TechnologyAdvantage #Innovation #Collaboration

6

1 Comment

Based on my experience and observations, CISA is indeed providing the leadership necessary to harmonize cybersecurity across critical infrastructure in line with NSM-22 goals and objectives. Unfortunately, there are still some in the US Government that want to retain the failed "status quo" and are promoting siloed cybersecurity practices that prefer non-US guidelines; https://lnkd.in/evac78Ev

1