Smarter Gov Tech, Stronger MerITocracy

Department of Homeland Security Under Secretary Chris Krebs, head of the agency’s National Protection and Programs Directorate (NPPD), has named Bob Kolasky to serve as director of the newly-established National Risk Management Center (NRMC), a DHS official confirmed to MeriTalk today. […]

Brad Nix, senior advisor at the Department of Homeland Security’s National Cybersecurity and Communications Integration Center (NCCIC), said Thursday at MeriTalk’s Cyber Security Brainstorm that DHS’s establishment earlier this week of its new National Risk Management Center represents “an acknowledgement on our end that there is more to be done” to assess risk faced by critical infrastructure sectors–some of whom have less-well developed abilities to detect and respond to threats. […]

Federal IT leaders discussed the ways their organizations are tackling the proliferation of more and more endpoints on Federal networks at MeriTalk’s Cyber Security Brainstorm Thursday. In particular, ever-increasing mobile connectivity is creating the potential for further headaches, but the officials advised that next-gen technologies and proper network and data governance provide avenues to expand the ways employees work without compromising security at the network edge. […]

Sen. Ron Wyden, D-Ore., wants to understand what the Department of Homeland Security (DHS) has learned from Domain-based Message Authentication, Reporting, and Confirmation (DMARC) reports about cyber criminals using email to impersonate Federal agencies. […]

Paul Beckman, chief information security officer at the Department of Homeland Security, said Thursday at MeriTalk’s Cyber Security Brainstorm that software-defined networking, adopting a zero-trust model, and optimizing DHS’ security operations centers (SOC) are his biggest emerging priorities to promote better security across the department. […]

Suzette Kent

Sens. Lindsey Graham, R-S.C., Sheldon Whitehouse, D-R.I., and Richard Blumenthal, D-Conn., introduced two pieces of legislation on Tuesday designed to improve cybercrime prevention and strengthen U.S. election infrastructure. […]

2018 Cyber Security Brainstorm

Panelists at MeriTalk’s Cyber Security Brainstorm on Thursday will shed light on a host of vital cybersecurity issues, including threats to control systems, the foundational importance of security to IT modernization efforts, and the keys to success in risk-based security practices, according to a sneak peek into the thinking of just a few of the 25 experts scheduled to speak. […]

Vice President Mike Pence, speaking at the Department of Homeland Security National Cybersecurity Summit today, called upon Congress to pass long-delayed legislation that would officially create the Cybersecurity and Infrastructure Security Agency (CISA) under DHS. […]

IRS

The General Accountability Office said in a report issued today that the Internal Revenue Service made some progress during FY 2017 in addressing information security control issues previously flagged by GAO, but it also said a more recent audit by the watchdog agency covering FY 2017 turned up newly identified control deficiencies – leaving IRS with a total of 154 improvement recommendations at the end FY 2017. […]

Speaking at the Department of Homeland Security’s (DHS) inaugural National Cybersecurity Summit, Christopher Krebs, under secretary for DHS’ National Protection and Programs Directorate, announced formation of the Information Communications Technology Supply Chain Task Force. […]

Following the Department of Homeland Security’s announcement of a new National Risk Management Center, critical infrastructure executives along with Federal agency leaders hailed the new coordinating wing of DHS as a way to harness the collective strengths of both government and industry to address cyber concerns that have the potential to hobble the nation’s critical functions. […]

Security in the cloud is a shared responsibility between cloud service providers (CSPs) and government organizations. CSPs provide agencies with a secure platform to operate on, but it is the responsibility of agency security leaders to ensure the applications that are being hosted have been hardened, according to security experts. […]

Booz Allen Hamilton has won a task order worth up to $1.03 billion to provide services under the Continuous Diagnostics and Mitigation (CDM) Program to CDM’s Group D Federal agencies, according to contracting information on the General Services Administration’s (GSA) Federal Procurement Data System. […]

President Trump on Friday nominated James Gfrerer to head IT for the Department of Veterans Affairs. Pending Senate confirmation, Gfrerer will be the VA’s CIO and assistant secretary for information and technology. […]

At a House Homeland Security Committee hearing on Wednesday, July 25, to examine findings of the Federal Cybersecurity Risk Determination Report and Action Plan released by the Office of Management and Budget (OMB) in May, lawmakers and private sector witnesses hailed new legislation as a necessary – but on its own insufficient – step to bring down the security risks of three-quarters of Federal agencies deemed in cyber danger. […]

The House Oversight and Government Reform Committee’s information technology and government operations subcommittees held a joint hearing Wednesday to key in on the most salient, persistent, and omnipresent issue in Federal agency IT: cybersecurity. On hand to testify were Federal CIO Suzette Kent, and Comptroller General Gene Dodaro, seeking to illuminate congressional inquirers on Federal agency progress to mitigate the wide range of cyber risks. […]

voting, election security

Today’s House Committee on Oversight and Government Reform (OGR) covered the waterfront on election cybersecurity issues but came up with little that differed much from many of the other election cybersecurity hearings that have happened on the Hill over the last few months. The greatest hits were once again discussed–concerns over involvement in the 2016 election, threats facing the 2018 midterm elections, and how to respond to Russia cyber aggression towards U.S. election infrastructure and technology. […]

The House Homeland Security Committee today voted to recommend two bills, the Advancing Cybersecurity Diagnostics and Mitigation Act and the Department of Homeland Security Chief Data Officer Authorization Act, aimed at strengthening and solidifying IT operations of the Department of Homeland Security (DHS) and to guard against evolving cybersecurity threats. […]

In the push to keep Federal IT systems secure, cybersecurity teams find themselves overloaded with information and tools and would like to see automation help them turn information into actionable intelligence, IT and industry leaders said during a FedInsider webinar on July 19. […]

Categories