Heudecker wrote that the EO has resulted in the development of the Office of Management and Budget’s event log management maturity model, which he said calls for properly formatted timestamps in event logs.
He noted that implementing a “cohesive data format” could help improve sharing of data between agencies and the Cybersecurity and Infrastructure Security Agency and enable users to better understand data logs.
“The ability to route data to many places amplifies the value that can be derived from that data — for insight into current security events, for future research and for regulatory compliance,” Heudecker wrote.
He discussed cloud security and the need for agencies to advance collaboration between cloud security and operations teams and incorporate multicloud security capabilities without impeding the work of application developers.
Agencies should consider adopting a cloud security posture management platform and third-party virtual appliances, among other technologies, to help reduce the burden of maintaining security for employees, according to Heudecker.
He also called on agencies to train employees on security capabilities and multiple cloud platforms amid evolving cyberthreat landscape.
Client Solution Architects has appointed Ellen Barletto as chief growth officer, expanding her leadership responsibilities after nearly two decades with…
Brian Meyer, federal field chief technology officer at Axonius Federal, said cybersecurity asset management could help government agencies make dozens…
“Technology transformation company Red River has acquired Invictus International Consulting to expand its cybersecurity and enterprise modernization capabilities to support…
Synergy ECP, a software engineering, cybersecurity and systems engineering services provider, has acquired NetServices, a company offering secure, mission-focused technology services. The…