Alison King

Come see us at the SIA Government Summit (Main Auditorium of the National Housing Center) in DC next week! We will be discussing the path forward to modernization, proliferation of OT/IoT devices in the security space, and the convergence of technologies in an interconnected world. We are honored to have distinguished members of the Federal community on the panel, contributing their experiences and views on a range of topics resonating in the field of physical security today. Hope to see you there! #physicalsecurity, #homelandsecurity, #departmentofdefense, #accesscontrol, #CCTV,

2

In this JSOU Live webinar, I talk about key concerns in the cyber supply chain with my colleagues and we look at ways we can mitigate those threats. If you are interested in C-SCRM, the supply chain, or vulnerabilities please take a look! We recorded this a few years ago, but it is still relevant! #CSCRM #cybersecurity #supplychain https://lnkd.in/eZR5KQck

6

1 Comment

Sara Friedman, thanks for the great article! DoD's ramp up plan per the draft 32 CFR Part 170 for the number of assessed orgs isn't the throughput concern. As an authorized C3PAO, we are warning clients to expect heavy market pressure from their Primes when Peak InfoSec and other C3PAOs can start doing assessments to get CMMC Level 2 Certified ASAP. We are hearing consistently that start date will be March 2025. We are already hearing subs are told by their primes to either undergo a JSVA before the start date or be ready to get CMMC L2 Certified during Phase 1. Or, be ready to be dropped from teaming groups... We are also uncertain about if and how DoD would want authorized C3PAOs to prioritize assessments. Logically, companies competing for Phase 2+ contracts and ESPs should have priority. Everyone else gets worked as the ecosystem naturally grows to handle the demand, which I believe it will. In the meantime, we recommend all DIB companies to start their C3PAO selection process now and get on the assessment schedule.

2

Solutions exist for secure mobile communications! As this alert from the FBI on risks to mobile communications circulates, know that the ATARC (Advanced Technology Academic Research Center) Future of Secure Work (FSW) Work Group has a series of concise white papers that outline solutions and steps to expand secure mobile communications while enhancing security. Organizations can have both mobile communications and improved security. Elizabeth Wyckoff Heather McMahon Jamie J. Randy Siegel Mark Gorak Nox Landa Michael Campbell James Stanger #communication #security #mobility #survivability

30

1 Comment

Yesterday had some significant announcements from the United States Department of Defense #FFRDC and #UARC community, with the next leaders of three major organizations being announced on the same day. Mark Peters will become MITRE's new CEO (https://lnkd.in/ev8vf2iw). Melissa Choi will become MIT Lincoln Laboratory's next Director (https://lnkd.in/eBqvFgUx). John Beieler will become University of Maryland Applied Research Laboratory for Intelligence and Security's next Executive Director (https://lnkd.in/eeS2XaHt). Personally I think this is a momentous point in time for the DOD and the FFRDC/UARC community. Technology's importance to the future of warfighting could never be stronger, but so too is the importance of technology in pre-conflict economic competition. DOD is in a unique position to integrate across these domains, and having three new leaders with such strong S&T credentials puts the FFRDC/UARC community and the DOD in an excellent position to succeed.

147

3 Comments

We are at an inflection point and democracies must work together to protect the international rules-based order. MITRE and the Atlantic Council have teamed up to address pivotal global security and civil challenges, beginning with a NATO Force Mix Analysis examining ways to harden the Alliance's eastern flank and deter Russian aggression. Stay tuned for more updates on our joint initiatives. #TransatlanticSecurity #NationalSecurity https://lnkd.in/eh22wi7G  

68

1 Comment

This week I shared thoughts on the #threat of Chinese malicious cyber activity and the importance of #cybersecurity at a keynote speech to the Air Force Technical Applications Center in sunny Florida. During AFTAC's Cybersecurity Day, I encouraged DoD members and industry partners alike to go to NSA.gov to learn from some of the over 75 Cybersecurity Advisories we've published about the threat and what to do about it. We talked about threats like #VOLTTYPHOON and the tactic of #livingofftheland to access and operate in our networks. Products on NSA.gov offer ways to become a hard target by employing #zerotrust principles. We can't choose to not be targets, but we can and must choose to be HARD targets...

199

2 Comments

In my latest for Federal News Network, I dive into one of the most important questions facing the defense industrial base: How can we reduce the complexity and cost of #CUI security under #CMMC so that the small businesses that are crucial to defense innovation can comply?   It starts with an honest look at legacy approaches that cost too much and deliver far too little. Next, we need to enable these organizations to freely use CUI when they need it and how they need it, within the boundaries of their mission sets and security protocols.   So how do we do it? Read the full article here to find out: https://lnkd.in/eKJKusrj

20

SAIC's CloudScend™ empowers agencies to accelerate #CloudMigration by securely migrating workloads faster, maximizing value while minimizing risks. This IDC MarketScape report recognizes this solution, check it out to learn more.

1

Thanks to Sara Friedman at Inside Cybersecurity for reaching out to talk about post-election expectations on #cybersecurity issues in the next Administration. As I mentioned, "The topic or concept of cyber regulatory harmonization is a top issue no matter who wins the White House. There are certain sectors that have overlapping and duplicative regulations. I would expect either administration that comes in would focus on harmonizing cybersecurity regulations for those that have that overlap, that duplication.” But I encourage all to read the article! #criticalinfrastructure #regulatoryharmonization #nationalcriticalfunctions Van Scoyoc Associates #elections

9

The #CMMC framework, initially introduced in the federal government, is expected to extend to state/local government and the commercial space. We understand the impact of CMMC on #MSPs serving the Defense Industrial Base (DIB) and acknowledge the preference for adopting solutions that meet CMMC requirements rather than managing separate solutions. To ensure the success of our partners and the larger IT Nation community, we will adopt a staged adherence strategy through: ✅ ConnectWise to Achieve CMMC Level 2 Compliance by 2025 ✅ Hosting in Government Community Cloud ✅ ConnectWise's CMMC Portfolio will be Hosted and Available "We understand the critical importance of #cybersecurity in today's rapidly evolving landscape, and we are fully committed to supporting our partners in meeting the rigorous compliance requirements of CMMC Level 2,” said Patrick Beggs, CISO at ConnectWise. “By providing comprehensive solutions and guidance, we aim to empower MSPs to navigate these challenges with confidence and ensure the security of their clients' data. Together, we can build a stronger and more resilient cybersecurity ecosystem." Read the press release at http://ms.spr.ly/6044lxLX0 #ConnectWise #AI #Cybersecurity #MSPCommunity #MSPPlatform

2

Tactical edge systems are a pain to implement in a dynamic environment. Slow, unreliable and complex are all adjectives that come to mind. So much so that a return to analog has been on the rise. Reading this, it feels like the focus is in the right place. Now to execute 😎 Reliability, security, availability and speed will be key! In that order too 🤓

5

It's more vital than every to ensure the security and fidelity of communications. My friends KoolSpan, Inc. maintain their own NIST FIPS 140-2 (and shortly FIPS 140-3) certs for encrypted communications. See small piece that was just written about the differences between enterprise and consumer, Layer 7 applications. Don't trust big tech platform providers to ensure security. Host on-prem or in your own hybrid cloud environment. https://lnkd.in/ezU6zqws

10

1 Comment

Release of RFI for AI Industry Partnerships. The US Army intends to release a series of requests for information focused on #ArtificialIntelligence capabilities, testing and security in the next few months with plans to issue the #RFI specific to fostering #AI partnerships with industry in July. I have had numerous discussions with our industry partners about the future of #AI and the opportunities ahead. Check out this opportunity to be a part of the #AI solution and capability evolution #USArmy #RequestForInformation #ArmyModernization #DigitalTransformation #ArmyDigitalOdyssey #ArmyAgile #MachineLearning #DefendAI #Malware #Software

46

2 Comments

#Veterans bring a wealth of skills and experience that align seamlessly with many private-sector roles, especially in cybersecurity. With upskilling opportunities available through the DOD and beyond, the bridge between federal security programs and private-sector demands has never been more vital. As these skills become increasingly essential, the private sector is seeking experienced talent for leadership roles. Long-term career planning is key—leveraging these opportunities can open doors to impactful roles in the private sector. Let’s celebrate and support veterans as they make invaluable contributions to the cybersecurity landscape. #Cybersecurity #Upskilling #Veterans #Leadership

16

📢 Attention Defense Contracting Community: 📢 Attention John M. Tenaglia, Principal Director, Defense Pricing and Contracting In light of the recently released MEMORANDUM FOR COMMAND, titled "Class Deviation—Safeguarding Covered Defense Information and Cyber Incident Reporting," it's crucial to reconsider certain aspects of the CMMC 2.0 program. Referencing the initial implementation of DFARS clause 252.204-7012: "(ii)(A) The Contractor shall implement NIST SP 800-171, as soon as practical, but not later than December 31, 2017." In this context, the clauses clearly state that THIRD-PARTY Assessments or Certifications of Compliance are NOT recognized by the DoD, nor does the DoD certify that a contractor is compliant with the NIST SP 800-171 security requirements. Implementing these clauses would render the proposed CMMC 2.0 program obsolete and could potentially save $4 billion. Additionally, using NIST SP 800-171 Rev 3 as the standard would allow the Defense Industrial Base (DIB) to submit Organization Defined Parameters (ODP) to meet evolving cybersecurity requirements, ensuring continual security and compliance. Let's align policy with practical, cost-effective cybersecurity measures for our defense contractors.....IMHO K #Cybersecurity #CMMC #DefenseContracting #NISTSP800171#$4B

4

#ObsessivelyEnthusiasticInvestor #UnreasonablyEnthusiasticInvestor #IrrationallyEnthusiasticInvestor at REFASHIOND Ventures: The Industrial Transformation Fund. We look for the people we believe are doing the best work in Industrial Transformation & Supply Chain Technology; Attempting the impossible. Then we go all-in on them. With obsessive and unreasonable enthusiasm. Join us. #IndustrialTransformation #SupplyChain #Innovation #Technology #Startups #VentureCapital #DemandTheImpossible #UnreasonableEnthusiasm #ObsessiveEnthusiasm #IrrationalEnthusiasm

5