Hello, Guest!
  • Thursday, April 24, 2025

The Bridge on TV Talks With Rick Tracy and Matt Barrett about Cybersecurity

The Bridge on TV aired Sunday featuring Rick Tracy, Chief Security Officer, Telos Corporation and Matt Barrett, Program Manager, Cybersecurity Framework, National Institute of Standards and Technology (NIST). These industry leaders shared their viewpoints on Improving Government-Industry Cooperation in Cybersecurity.

Highlights from the show include:

  • Barrett commented that “Cybersecurity can’t be combatted by cybersecurity professionals alone.”
  • Barrett also commented that the Challenge is to “get everybody on the same page and pulling in the same directions. He called on more involvement starting at the Board level, but extending to other “senior executives, business process professionals, and technologists.”
  • Tracy shared that “Industry is watching the development [of the NIST Framework] for the impact the regulation is going to have on business.”
  • Tracy raised a caution flag about SP 800-171, which eventually will amend the DFARS to include a requirement protecting Controlled Unclassified Information in nonfederal information systems and organizations — or lose their contracts. “Many companies are concerned about the impact of what this regulation will have on their businesses from the resource perspective—and what companies will have to spend to implement the regulation.

“With the rampant toxicity and rancor spewing forth from today’s political dialogue, it is refreshing that the cybersecurity initiative enjoys bi-partisan support and rationale discourse. Today’s episode of The Bridge proves that not every issue must be contentious.”

Jim McCarthy, The Bridge Moderator

  • “Many of my stakeholders present to me suggestions that are overly nebulous, overly proscriptive, and sometimes overlapping regulations.” Barrett as Program Manager of the Cybersecurity Framework, Barrett has taken ownership to make sure the Framework adequately addresses these concerns.
  • Barrett stated the five key words define the NIST Cybersecurity Framework are Identify, Protect, Detect, Respond, and Recover. “These simple concepts define the framework, but also apply to IT risk management.”
  • There was a Consensus among the guests on issues like the need for communication between the government and private sector, and the need for scalability, flexibility, customization, and a tool for cybersecurity measurement. Tracy called on the Government and industry “to focus on common ground.”  The common ground also includes IT modernization and shared or cloud services.
  • Barrett forecasted that the second draft of the NIST Cybersecurity Framework will be issued in Fall of 2017, with a final version slated for the calendar year 2018.

 

 

 

 

 

 

 

 

Video of the Day

Related Articles

GovCon Expert Payam Pourkhomami Explains the Difference Between NIST SP 800-171 and CMMC 2.0—Part 2 Cybersecurity

GovCon Expert Payam Pourkhomami Explains the Difference Between NIST SP 800-171 and CMMC 2.0—Part 2

By Payam Pourkhomami, President & CEO of OSIbeyond Read part one here What is the difference between NIST SP 800-171 and CMMC? Aspect NIST SP 800-171 CMMC 2.0 Certification process Self-assessment only Self-assessments combined with mandatory third-party certification for most Level 2 contractors and all Level 3 contractors Requirements Narrowly focused on controlled unclassified information

GovCon Expert Payam Pourkhomami Explains the Difference Between NIST SP 800-171 and CMMC 2.0—Part 1 GovCon Expert

GovCon Expert Payam Pourkhomami Explains the Difference Between NIST SP 800-171 and CMMC 2.0—Part 1

By Payam Pourkhomami, President & CEO of OSIbeyond The Department of Defense has been battling digital threats for decades, striving to fortify the defense industrial base. To achieve this, numerous cybersecurity requirements have been introduced for organizations that process or store controlled unclassified information, or CUI. Among these requirements are NIST SP 800-171 and CMMC

HP Federal’s Matt Barry on Significance of Endpoint Security by Design Cybersecurity

HP Federal’s Matt Barry on Significance of Endpoint Security by Design

Matt Barry, chief operating officer at HP Federal, noted that threat actors can use endpoints as vectors that could enable them to infiltrate an organization’s network and highlighted the importance of security by design to ensure the security of such endpoints and safeguard government and contractor systems. “When we design more secure solutions upfront, that