A Note From Our President & Founder Jim Garrettson
Last week President Trump signed an executive order to bolster our nation’s cybersecurity and maintain and strengthen U.S. cybersecurity capabilities.
The order addresses the network security of U.S. government agencies, enhances the protection of infrastructure like the financial sector and the energy grid, and provides guidelines for developing a more robust cyber deterrence strategy.
As accusations of hacking and cyberattacks by Russia and China continue to pile up, and scores of people and institutions suffer embarrassing revelations on WikiLeaks, the need for cybersecurity has never been clearer. The devastating WannaCry ransomware cyberattacks last week only underscored how desperately we need public and private sector cybersecurity practices that work effectively.
One of the key aspects of Trump’s order is that the National Institute of Standards and Technology (NIST) will be developing the cybersecurity standards that the federal agencies must follow, according to a framework they have set up which will fulfill five key functions: identify, protect, detect, respond and recover. Each of these functions is divided and subdivided to enable augmentations and deletions of concepts at those smaller levels, allowing for increased flexibility for the framework, according to NIST’s Matthew Barrett.
Under the executive order, agency heads will be held accountable for implementing risk management measures that are proportional to the risk and magnitude of harm that unauthorized access and use could cause. All federal agencies will have to abide by NIST’s framework in their efforts to manage their cybersecurity risks. Additionally, the executive order requires agencies to provide a risk management report to the Secretary of Homeland Security and the Director of the Office of Management and Budget within 90 days of the order being signed.
Since this is a cybersecurity compliance standard, it stands to reason that all government contractors and sub-contractors will be affected. While DOD contractors have faced tight cybersecurity standards for years, other businesses operating in the federal space, like those in the health industry, for instance, may have adjusting to do.
This represents both a challenge and a business opportunity for those with the cyber-security and implementation know-how.
If you’re interested in learning more about how federal agencies can improve their respective data security measures to respond to constantly evolving IT threats and the evolving role of cyber and strategic partnerships, you can attend the Potomac Officers Club’s 2017 Spring Cybersecurity Summit. The Summit will be held on Wednesday, May 24th at the Westin Tysons Corner, located at 7801 Leesburg Pike Falls Church, Virginia 22043.
Keynote speakers include:Â
ADM. MICHAEL ROGERS -Â Commander/US Cyber Command & Director, National Security Agency (NSA) of U.S. Navy
JEANETTE MANFRA – Deputy Under Secretary for Cybersecurity and Communications (Acting), Office of the Under Secretary, NPPD of the DHS
RON PONTIUS -Â Deputy to the Commanding General U.S. Army Cyber Command of the DoD
NIST Reveals Draft of Cyber-Security Framework
Industry experts and federal employees met at a workshop hosted this week at the National Institute of Standards and Technology in Gaithersburg, Maryland to hammer out the details of the new federal cybersecurity framework draft requested by President Donald Trump in his executive order.
55 Firms Land Spots on $37B Army Contract for C4ISR Program Support Services
The U.S. Army has selected 55 companies to compete for task orders under a potential $37.4 billion contract vehicle that covers knowledge-based professional services for government programs that have command, control, communications, computers, intelligence, surveillance and reconnaissance requirements.
John Sutton Named KeyW COO; Marion Ruzecki Appointed Chief People Officer
KeyW Corp. has named John Sutton, formerly head of Vencore’s defense, civilian and homeland security group, as chief operating officer and 22-year employee care and recruitment professional Marion Ruzecki as chief people officer.
Trump Orders All Federal Agencies to Provide Cyber-Security Plans to NIST Within 90 Days President Donald Trump signed an executive order designed to strengthen the cybersecurity of the federal government that will require National Institute of Standards and Technology (NIST) to provide a cyber-security process framework that all federal agencies comply with.
DHS, DOJ Triple Spending on Internet of Things
The Department of Homeland Security and Department of Justice have tripled their spending on equipment and services related to the Internet of Things (IoT) over the past six years, spending $600 million on the smart security industry, a new study by contracting intelligence firm Govini finds.
Roger Krone: Leidos to Complete 50% of IS&GS Integration by July
Roger Krone, chairman and CEO of Leidos, has said he believes the company will reach the halfway mark by July in its integration of Lockheed Martin‘s former information systems and global solutions business
Sen. Mark Warner Asks OMB, DHS on Security Patch Implementation Amid Ransomware Attack
Sen. Mark Warner (D-Virginia), vice chairman of the Senate Select Committee on Intelligence, has asked the heads of the Office of Management and Budget and Department of Homeland Security about the measures the agencies have taken in response to the ransomware attack.
Government agencies are seeing more efficient responses and resolutions to cybersecurity issues as a result of a number of strategies, including a focus on collaboration, according to officials from the Cybersecurity and Infrastructure Security Agency. CISA’s David Carroll, who serves as associate director for mission engineering, credits private-public partnerships as the “fuel” of cyber operations and
Baltimore, Maryland-based digital services integrator Fearless will continue to help the Centers for Medicare and Medicaid Services improve the security and privacy of CMS systems and sensitive data under an extension to the CyberGeek contract. Fearless said it will work with Coforma and CivicActions to help the CMS Information Security and Privacy Group build a
Artificial intelligence has presented the U.S. Department of Energy with an opportunity to revolutionize the way it carries out its mission. Ann Dunkin, chief information officer of the DOE, has identified the analysis of climate-focused technologies like solar panels as just one potential benefit. Though new AI technologies could be groundbreaking, there are many security concerns
