Brian Harrell

This week's podcast, CIRCIA Rulemaking: Double Incident Reporting for the DIB. Defense contractors have had cyber incident reporting obligations under DFARS clause 252.204-7012 for many years. Recently, however, CISA issued a 457-page proposed rule implementing the 2022 Cyber Incident Reporting for Critical Infrastructure Act. Unless CISA and DoD can reach an agreement, DIB contractors will have duplicative incident reporting obligations for two different agencies. Links to watch/listen are in the comments ⬇ #DIB #DOD #cyber

14

2 Comments

Is Biden's National Security Memo Enough to Secure Critical Infrastructure? A recent National Security Memorandum (NSM-22) signed by President Biden focuses on improving critical infrastructure security and resilience. But is it enough? Experts weigh in on the effectiveness of the plan, debating its reach and implementation challenges. Mark Montgomery, Marco (Marc) Ayala, Gerry Kennedy Click to read more and see if the NSM-22 addresses your concerns: https://lnkd.in/gba2j5Yd #criticalinfrastructure #cybersecurity #NSM22 #infrastructuresecurity #nationaldefense #industrialcyber #icssecurity #ics

1

This Cybersecurity and Infrastructure Security Agency guide offers actionable steps to combat the evolving tactics of foreign malign influence operations. More resources available here: https://lnkd.in/ebM9fqFn #security #nationalsecurity #homelandsecurity #infrastructure #criticalinfrastructure #CI #resource #research #resources #highthreat #threat #threats #cybersecurity #cyber #electionsecurity

6

Next Tuesday, October 8, our CEO John Petruzzi, Jr. will join senior leaders from Lee Health, IDEMIA, and Everon at #SecuringNewGround's kickoff panel, "The View from the Top." This discussion, moderated by #SIA Board Member Brian Harrell, will cover key trends, challenges, and shifts in the global security industry. Don't miss this chance to gain valuable insights on navigating the future of security. #SNG #SecurityIndustry #Leadership #GlobalSecurity #UnlimitedTechnology

18

1 Comment

Last week, a task force said in a report that the victor of the 2024 presedential election must resolve cybersecurity regulations, better deter cyberattacks, address the cyber workforce shortage, develop plans with the private sector on critical infrastructure protection, and review how to keep the economy going in the event of major hacks. These immediate priorities help position the United States to maintain the lead in the growing global digital economy, foster innovation, and recognize that cybersecurity now impacts every aspect of American life. Beyond the immediate priorities, here are just some of the other recommendations from the report: 💡 Developing an offensive cyber strategy 💡 Establishing security standards for operational technology and information technology systems in each sector 💡 Creating a national K-12 cybersecurity curriculum You can download the full report here: https://loom.ly/tnNxDek Source: https://loom.ly/rGGmszo #AssessDesignProtect #cyberstrategy #cyberregulations

10

ASD’s ACSC, CISA, and Partners Release Secure by Design Guidance on Choosing Secure and Verifiable Technologies Read more on the link below. #defense #sbir #military #jointwerx #cmmc #cyber #cybersecurity @jointwerx @blackhaysgroup #GovernmentContracts #InfoSec #CyberDefense #NationalSecurity #DigitalTransformation #PublicSector #Startups #TechInnovation

1

Want to learn the essentials of scoping for a CMMC assessment? A-LIGN's Mike Gallagher will be joining PreVeil's Jamie Leupold on 10/23 at 3 PM EDT to discuss how you can: ✔ Properly identify your security boundary ✔ Include assets in scope vs. out of scope ✔ Expand your scope beyond the cloud  Register here! 👉 https://hubs.la/Q02TKsdn0 #CMMC #CMMCassessment #federalcompliance

20

In the continued aftermath of Hurricane Helene and as we face future disasters, it's important to remain cyber safe! This recent piece in Dark Reading offers great advice on the heels of CISA's recent warning about hurricane-related fraud. The main takeaways? * Be wary of unexpected IT "updates" * Scrutinize charity requests * Verify outage notices from service providers * Beware of unsolicited contractor offers * Cyber criminals exploit anxiety during natural disasters, and might use legitimate-looking emails, social media pleas, or even door-to-door solicitations. Full piece here: https://lnkd.in/gP4U-pAq #CyberSecurity #Cybersafe 

5

On August 15, the #DoD published the second of two proposed rules implementing the Cybersecurity Maturity Model Certification (CMMC) Program. The Proposed Defense Federal Acquisition Regulation Supplement (DFARS) Rule explains how CMMC compliance at the applicable level will be established as a pre-requisite to the award of a contract subject to CMMC, and how CMMC compliance will be monitored during contract performance. Read more about what the Proposed DFARS Rule means for prime contractors, subcontractors, and suppliers, and next steps to take, in this On the Subject: https://lnkd.in/gVjjf9D7 Authors: Daniel Graham, Jessica Sawyer, and Brian Long

8

📝Full Defense Strategy: https://hubs.ly/Q02tb2pl0 The Pentagon has introduced its inaugural strategy to advance cybersecurity within the defense industry. Announced by David McKeown, the Deputy Chief Information Officer for Cybersecurity, the initiative underscores collaboration with the U.S. defense industrial base to combat ongoing cyber threats. The strategy outlines key goals to enhance cybersecurity governance, boost defense base resilience, and improve collaborative efforts against cyber adversaries. Officials emphasize the necessity of protecting critical information and the U.S. warfighting advantage through a fortified cybersecurity posture. The approach includes evaluating compliance with cybersecurity standards, enhancing threat intelligence sharing, and developing robust responses to cyber incidents. This strategy aligns with the National Defense Strategy and aims to secure critical defense production and information integrity against malicious cyber activities. The release of this cybersecurity framework is part of broader efforts to modernize and secure the U.S. defense industrial base, ensuring it meets the challenges of a complex national security landscape.

3

Join us next week for our next live episode of Conversations from the Inside. Host, 🕵️‍♀️ Christopher Burgess will discuss the convergence of blended threat in Government with industry expert Jean-Paul Bergeaux, Federal CTO, Guidepoint Security. Wednesday, May 22 at 10am PT/1pm ET RSVP: https://lnkd.in/gCtDdj5q 📆 Mark your calendars for an engaging exchange of perspectives, valuable insights, and actionable strategies to navigate the evolving threat landscape. #insiderthreat #InsiderRisk #InsiderRiskmanagement #FederalGovernment #ExtrenalThreats

45

Have you checked out Defense Acquisition University’s Cyber Solutions webinars? They can help an AFWERX SBIR/STTR awardee learn about cybersecurity as it relates to federal contracts! Two sessions will be held in December on the following topics: December 12: Primer and DoD Contract Requirements for Supply Chain Risk Management (SCRM) 👉 Learn about supply chains, the DoD contract requirements, and questions to ask around supply chain risk management to verify the requirements are in place and active. December 16: Basic Cyber Hygiene - walk-through of the FAR 52-204.21 and the Proposed CMMC LEVEL 1 👉 Learn about the FAR, the cyber lingo and implementation of the fifteen requirements to keep Federal Contracting Information from becoming public. Learn more about these sessions and other upcoming webinars to grow your knowledge of cybersecurity: https://ow.ly/gg3V50UlHgx . . . #AFWERX #cybersecurity #federalcontracts #webinar #smallbusiness #DoD

22

1 Comment

In observance of National Critical Infrastructure Security and Resilience Month, the Cybersecurity and Infrastructure Security Agency (CISA) and the Office of the Director of National Intelligence, released guidance to assist #criticalinfrastructure owners and operators to detect and mitigate efforts by foreign intelligence entities to disrupt U.S. critical infrastructure. As a nation, continued #cyber and physical threats to critical infrastructure Americans rely on daily are being observed. U.S. adversaries and their foreign intelligence entities understand the importance of the critical infrastructure sectors and how degrading them could hinder the national response to events. “U.S. adversaries and their foreign intelligence entities (FIEs) a understand the importance of these sectors and how degrading them could hinder our national response in the event of crisis or war, given that harm to these sectors could cause panic, erode confidence in the government, and complicate leadership decision-making,” the agencies identified in a document titled ‘Safeguarding Our Critical Infrastructure: Vigilance Makes a Difference.’ #Threatlandscape #Cyberattacks #Cyberthreats #Adversarialattacks https://lnkd.in/gpZKTxAe

26

1 Comment

⚙️ PRC Hackers Escalate Attacks on Critical Infrastructure: Insights from SANS Experts Security expert Rob T. Lee warned CBS News Chicago that cyberattacks on our water and utility systems could have profound impacts. He provided a detailed look at what such attacks might entail in the future. "Cyber attack is a great levying capability against any nation-state. This could be just an ever-increasing way to let the nation's utilities take even greater notice that they are doing everything possible to prevent any kind of cyber attack." - Rob T. Lee 🔗 For more details, watch the full report → https://lnkd.in/eygq9Nin SANS ICS | #ICSSecurity #OTSecurity #CyberAttacks

8

1 Comment

⚙️ PRC Hackers Escalate Attacks on Critical Infrastructure: Insights from SANS Experts Security expert Rob T. Lee warned CBS News Chicago that cyberattacks on our water and utility systems could have profound impacts. He provided a detailed look at what such attacks might entail in the future. "Cyber attack is a great levying capability against any nation-state. This could be just an ever-increasing way to let the nation's utilities take even greater notice that they are doing everything possible to prevent any kind of cyber attack." - Rob T. Lee 🔗 For more details, watch the full report → https://lnkd.in/eygq9Nin SANS Institute | #ICSSecurity #OTSecurity #CyberAttacks

19

2 Comments

CMMC Final Rule and what it means to you. Interesting read on our perspective of CMMC for Security Integrators and Contractors https://lnkd.in/e4USstUC

1