Mark Fedeli

The US #Navy just issued an article detailing the success of their #ZeroTrust implementation for Flank Speed. The top line is that the #security environment they’ve developed achieved 100% (91 of 91) of the Zero Trust Target level activities and nearly 100% (60 of 61) of the Advanced ZT level activities outlined in the Department of Defense’s Zero Trust strategy. As a result, the US Navy is well ahead of the Department’s 2027 goal for implementing Zero Trust at a Target activity level within their systems.   Our team is honored to support the Navy's deployment and configuration of Microsoft security solutions for Flank Speed and help DoN achieve this historic milestone. This is a testament to the defenders within DoN who are working tirelessly to deploy a comprehensive and integrated solution to protect their systems and personnel. If you want to learn how to implement a similar solution in your department or agency, see our implementation guide here: https://lnkd.in/gSxmS8uN #ZeroTrust #DoD #Microsoft #CyberSecurity Nadia Matthews, Steve Faehl, Gregory Knepper

105

4 Comments

Come see us at the SIA Government Summit (Main Auditorium of the National Housing Center) in DC next week! We will be discussing the path forward to modernization, proliferation of OT/IoT devices in the security space, and the convergence of technologies in an interconnected world. We are honored to have distinguished members of the Federal community on the panel, contributing their experiences and views on a range of topics resonating in the field of physical security today. Hope to see you there! #physicalsecurity, #homelandsecurity, #departmentofdefense, #accesscontrol, #CCTV,

2

Interested in #AI or Autonomous Systems? Then check out this article by Axios on my company's CINO.

6

Reducing latency from 2 Seconds to the time it takes to blink. Last week Meritalk released an article on DISA's plan to roll Thunderdome out to 60 sites through FY2024.  You may ask why this is important?  Why should anyone care? This matters because Thunderdome is likely to be one of the most impactful cybersecurity programs in DoD history.  All while America’s adversaries are the most aggressive they’ve ever been.  Why does Thunderdome matter? Through Thunderdome, the DOD is significantly increasing security, lowering costs, and massively improving the user experience all at the same time.  The perfect trifecta.  Imagine being a user and waiting for web response times in excess of 2 seconds. It's 2024, Thunderdome fixes this, globally. Direct benefits: -Direct Access to the NIPRnet from anywhere in the world -Users access SaaS services directly through the service connections, bypassing the JRSS stacks -Improves existing remote access latency from 2s to <10ms -Provides full ZTNA capabilities (conditional access) and full continuous monitoring of all traffic, users, and devices -Aligns on premises ZT policies with remote users This matters and brings DoD connectivity into more modern times while increasing conditional based access and security. It's faster, less expensive, and more secure. https://lnkd.in/eDp3ykX7 #meritalk #disa #CISO #ZT #zerotrust #DoD #defensedepartment

206

7 Comments

It would be nice if USSF could do something similar to this, and expose a pile of obs to play with. SDA TAP Lab is a good start, but you have to be selected. The UDL requires you to get explicit permission from each of the sources. I get the impression (possibly incorrectly) that the NGA data lake is more open?

24

12 Comments

Big update in #defense; FOCI mitigations and approvals through the Defense Counterintelligence and Security Agency (DCSA) are required for companies with contract awards $5M or more, even if all the work is UNCLASSIFIED. This article highlights the substantive changes in how the government is protecting the DIB from undue foreign influence. It also demonstrates that a lot of the details are yet to be ironed out. Here’s the main piece of advice: “DoD contractors that do not currently hold a facility clearance but do have DoD contracts in excess of $5 million should familiarize themselves with the SF-328 and establish policies and procedures to assess and comply with the FOCI Instruction and forthcoming DFARS provision.” The main issue I see is Defense Counterintelligence and Security Agency (DCSA) becoming THE BOTTLENECK for contract execution, and now not just for classified contracts, but ALL CONTRACTS OVER $5M. (Calling AI solutions to speed up FOCI approvals and Security clearance processing!). I’m curious if folks have already been affected by this- delayed contract start dates, any new terms you’re seeing?! Please share! #nationaldefense #executionmatters #onward

28

2 Comments

Transforming at speed requires informed focus. Read our Top 10 Emerging Technologies for the DOD and National Security report​ that is featured in National Defense, NDIA's Business and Technology Magazine. https://lnkd.in/eE-bA8Em

15

Exciting news from SAIC! Our CEO Toni Townes-Whitley discusses the integration of #AI in cyber defense in a recent CNBC interview. Stay tuned for insights on how we are leveraging technology to enhance #CyberSecurity.

1

In this article, SolarWinds GVP of Engineering Krishna Sai explores how AI, ML, and observability can help SOCOM and other DoD agencies achieve a multi-domain infrastructure that is interoperable, dependable, transparent, secure, and high performing. Read more in C4ISRNET here: https://bit.ly/3VZypTk

2

$984 million to eligible companies to scale innovations for #nationalsecurity in the 31 #technology categories. Thank-you Office of the Secretary of Defense, #DOD, Office of Strategic Capital for all your efforts and support to our #entrepreneurs who have made this a priority. Leveraging private capital for national and economic priorities. Key areas of investment and additional details below. #industrialbase #innovation #defensesecretary #deputydefensesecretary NSIN - National Security Innovation Network FedTech #startup https://lnkd.in/gqNnE7Kg

13

According to the three-star director of the NGA, Vice Adm. Frank Whitworth, that rising demand for Maven — and Maven’s laudable flexibility in letting users build custom code and even their own AI models — has begun to strain his agency’s resources. Or as he put it, “Success begets challenges.” Speaking Aug. 29 at a conference hosted by Georgetown University’s Center for Security & Emerging Technology, Whitworth said that, “The number of detections are way up [and] the number of models that we have are way up, but that then drives a computational problem. If you drive that many detections through that many inferences, with the same level of compute that you had in 2017… it starts to slow down. We are already seeing evidence of that.” As a general rule, text requires less data than imagery, which requires less than video — and Maven was originally built to detect anomalies in full-motion video from Predator drones, whose sheer volume was drowning the military’s cadre of intelligence analysts.

7

The U.S. Intelligence Community needs interoperable and antifragile sensemaking capabilities to help inform decision makers. By investing in a Sensemaking Infrastructure Framework, we can bridge technology gaps, streamline data integration, and empower analysts to deliver high-quality intelligence at the speed of relevance. Learn more by reading our latest installment in the Intelligence After Next series. #Innovation #Sensemaking #IntelligenceCommunity https://lnkd.in/enJ7AM2y

21

IQT Tops Silicon Valley Defense Group’s (SVDG) NATSEC100 Report For the Second Year Running! The #NATSEC100 list is comprised of SVDG's ranking of the top 100 venture-backed defense and dual-use technology startups. For the second year in a row, IQT was named the #1 most active investor in this space, with capital invested in 35 out of these 100 companies — more than the next two most active investors combined. Each of these ventures serves our mission of "Global Security Investing." We not only aim to identify and leverage the most cutting-edge defense-focused and dual-use technologies, but emphasize the importance of international reach and collaboration in these efforts — because innovation is happening everywhere, all the time. Check out the full report here: https://natsec100.org/ Read the IQT press release here: https://lnkd.in/ebz8_WHu #GlobalSecurityInvesting

44

On 5/28/2024, DoD will publish notice of an Information Collection Requirement titled, "Defense Federal Acquisition Regulation Supplement; Assessing Contractor Implementation of Cybersecurity Requirements" in the Federal Register. So what does this mean? First off... ✅️This is a notice, not a rule. ✅️There is NO impact to existing DFARS provisions or clauses (so don't go getting all excited). ✅️This is NOT the "DFARS 7012" rule everyone is waiting for. It's a notice of proposed extension of currently approved collection of data under DFARS provision 252.204-7019, Notice of NIST SP 800-171 DoD Assessment Requirement, and the DFARS clause 252.204-7020, NIST SP 800-171 DoD Assessment Requirements, in order to assess contractor implementation of cybersecurity requirements. Got heartburn with how things are done now with this data collection? DoD and OMB are requesting comments and recommendations by 6/27/2024. Search on Docket Number DARS-2024-0006 (or OMB Control Number 0750-0004) at https://lnkd.in/gM3mykRp What impacts are there to offerors and contractors? No changes at this time. DoD wants to use this extended data collection process to continue to assess where vulnerabilities exist in its supply chain. DFARS clause 252.204-7020 requires contractors provide the Government access to facilities, systems, and personnel in order to conduct a Medium Assessment or High Assessment, as necessary. Background: DFARS provision 252.204-7019 states that an offeror that is required to have implemented NIST SP 800-171 per DFARS clause 252.204-7012 shall have a current assessment for each covered contractor information system that is relevant to the offer, contract, task order, or delivery order in order to be considered for award. DFARS clause 252.204-7020 states that contractors must provide the Government access to its facilities, systems, and personnel in order to conduct a Medium Assessment or High Assessment, if necessary. Permalink to the Notice: https://lnkd.in/gsx3MeTJ

27

Are you up to speed on the DOD's National Defense Industrial Strategy? Here's a smart primer on priorities, one of which is supply chain resilience. Coming out of the pandemic, digitalization is a massive part of this strategy. Take a look. #digitalization #aerospacemanufacturing #aerospaceanddefense #defensemanufacturing https://lnkd.in/g_sBUfTM

9

The new National Defense Industrial Strategy Implementation Plan (NDIS-IP) aims to strengthen the U.S. defense industrial base in response to global competition and security challenges. See https://lnkd.in/eBdmcF88 It outlines six key initiatives focused on Indo-Pacific deterrence, resilient supply chains, workforce readiness, flexible acquisitions, and economic deterrence. The plan emphasizes collaboration with industry, Congress, and international partners to enhance production capabilities, address vulnerabilities, and ensure military readiness. Key efforts include increasing munitions production, modernizing submarine capabilities, and fostering partnerships like the Partnership for Indo-Pacific Industrial Resilience. By aligning resources and prioritizing initiatives, the United States Department of Defense seeks to maintain technological superiority and adapt to evolving geopolitical dynamics for future national security. About the Samuel Group D.C. Samuel Group D.C. is dedicated to aligning government policy with business strategy to ensure client success. Our team bridges the gap between regulatory frameworks and business goals, helping clients stay compliant while positioning them for growth and innovation. By connecting policy and business, we drive sustainable success for a more prosperous and secure America. Visit us at www.samuelgroup.us. https://lnkd.in/eqD5VMw6

7