Paul Kinder

Learn about freely available resources that can help you implement a #ThreatInformedDefense and see the value of collaborative #RandD. Download the Center for Threat-Informed Defense's latest annual report now. https://hubs.ly/Q02tSpSp0 #cybersecurity #cyberattack #cyberdefense #cyberthreats #ctid #mitre

14

Career change seekers 🔎 read more about how the DoDM aligns with the CompTIA global certification tracks that extends future opportunity success in DoD technology roles. Learn more about how the Lion Solutions - Career Catapult Bootcamp Program as a CompTIA Delivery partner will provide the core foundations of your career exploration to information technology. Shannon Miller Contact us at - [email protected] if you reside in the District of Columbia, Maryland and Virginia to get started! Workforce Development organizations, we would love to discuss community partnerships to support your tech explorers.. #techequity #technologycareers #whynotyou #technologygrowth #technologydevelopment #technologywealthgap #workforcedevelopment #techforcedevelopment

19

Last month, CISA issued an alert that Chinese-backed hacking group Volt Typhoon had compromised the #IT environments of multiple Critical Infrastructure organizations as part of a larger plan to “compromise and maintain persistent access to U.S. Critical Infrastructure.” Read our blog, "How Federal Agencies Can Keep Critical Infrastructure Safe" here:​ https://hubs.ly/Q02v2BSz0 #Cybersecurity #Everfox #CriticalInfrastructure #FederalAgencies

9

It is time to ensure that all government agency employees throughout the U.S. understand the risk every time they open up an email message at work. CFISA cybersecurity awareness training has been certified by the Texas Department of Information Resources. It is imperative that all government agencies require this vital training for all employees. Center for Information Security Awareness - CFISA State of Missouri LightSpeed Virtual Training #securityawareness #cybersecurity #getyourheadinthegame

3

ICYMI: The DoD Chief Information Officer posted FAQs about Cybersecurity Maturity Model Certification (CMMC), the so-called CMMC 2.0. Download this PDF as a handy reference to help with your questions, and reach out to Project Spectrum for an assessment and resources. #DoD #cybersecurity #CMMC #FAQ

167

6 Comments

The Department of Defense (DoD) has released the final rule for the Cybersecurity Maturity Model Certification (CMMC), and if your company works with the DoD, it’s crucial to understand how these changes impact your business. Learn more here- https://smpl.is/9w9at #ZogInc #PennsylvaniaIT #FloridaIT

1

The proposed rule for the Cybersecurity Maturity Model Certification (CMMC) program, released by the Defense Department, closely aligns with industry expectations, maintaining a three-level framework and emphasizing prime contractor accountability. It reflects the DoD's commitment to bolstering cybersecurity resilience within the defense industrial base (DIB), with a clear timeline set for full implementation by October 2026. Despite this clarity, questions remain regarding which version of NIST standards contractors must meet and how requirements apply to managed service providers (MSPs), highlighting the need for ongoing clarification and refinement. Overall, the proposed rule signifies a significant step forward in strengthening cybersecurity across the DIB, demonstrating the DoD's seriousness about protecting sensitive information and enhancing the security posture of defense contractors and subcontractors. How do you think the DoD will address these uncertainties to ensure a smooth transition to CMMC compliance?

12

DISA Expands Thunderdome Zero Trust Program Deployment; Brian Hermann, Quoted. ExecutiveGov discusses the Defense Information Systems Agency's (DISA) expansion of the Thunderdome zero trust program. In 2023, the program was deployed to 15 sites and plans are underway to extend it to 60 more sites in 2024. The program involves four key components: 🔐 Customer security stacks 🔗 Software-defined wide area networking 📴 Secure access service edge capability, and 💯 Application security stacks. Brian Hermann, DISA's director of the cybersecurity and analytics directorate, emphasized the program's role in advancing zero trust architecture, which is crucial for organizational security. DISA has also finalized the contracting process to support the U.S. Coast Guard’s network security improvement efforts through Thunderdome. Versa Networks is at the forefront of enhancing cybersecurity with their pivotal role in DISA's Thunderdome project. Their cutting-edge solutions are setting new standards in securing our nation's digital infrastructure. For more details, you can read the full article here:-https://lnkd.in/gfn9pcYM #DISA #Thunderdome #ZeroTrust #Cybersecurity #versanetworks #channelpartners

7

🚨 Wichita faces a major disruption after a ransomware attack encrypted city systems, prompting a shutdown to prevent further spread. Services are curtailed as the city works on secure restoration. 🖥️🔐 ⭐ Actionable Insights and Tips 📡 Prioritize the implementation of robust, real-time network monitoring tools that detect unusual activity and trigger immediate alerts, allowing for quicker response and isolation of threats. 🔧 Adopt a comprehensive patch management strategy to ensure that all software and systems are regularly updated, minimizing vulnerabilities that can be exploited by ransomware. 🛡️ Leverage encrypted backups and diverse storage solutions, ensuring that critical data can be restored without paying ransoms, thus maintaining operational continuity even under cyber attack. At SSL.com, Trust is What We Do 🔒 #Cybersecurity #RansomwareProtection #DigitalResilience Read more from link in comments ⬇️

4

1 Comment

The Department of Defense has released the final rule for the Cybersecurity Maturity Model Certification (CMMC) Program, marking a significant shift in cybersecurity requirements for defense contractors. This comprehensive framework aims to enhance the protection of Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) within the Defense Industrial Base Key Points of the Final CMMC Rule: • Effective Date: The rule becomes effective 60 days after its October 15, 2024 publication • Three-Tiered Model: CMMC establishes three levels of certification based on the sensitivity of information handled • Assessment Requirements: The program introduces a robust assessment process to verify contractors' implementation of cybersecurity standards • Phased Implementation: A four-phase rollout plan over three years will gradually introduce CMMC requirements into DoD contracts Impact on Contractors: • Certification Necessity: Certain DoD contractors handling FCI and CUI will need to achieve specific CMMC levels as a condition for contract awards • Subcontractor Flow-down: CMMC requirements will extend to subcontractors at all tiers processing, storing, or transmitting FCI or CUI • Self-Assessment Option: For Level 1 and some Level 2 requirements, contractors may conduct self-assessments • Third-Party Assessments: Higher-level certifications will require assessments by CMMC Third-Party Assessment Organizations (C3PAOs) How Intrust IT Can Help: As an experienced IT services provider, Intrust IT is well-positioned to assist defense contractors in navigating the CMMC certification process: • Gap Analysis: We can conduct thorough assessments to identify areas where your cybersecurity practices may fall short of CMMC requirements. • Remediation Planning: Our experts can develop comprehensive plans to address any identified gaps, ensuring your systems align with the necessary CMMC level. • Implementation Support: We offer hands-on assistance in implementing required security controls and practices. • Documentation Assistance: Our team can help prepare the necessary documentation, including System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms). • Continuous Monitoring: We provide ongoing support to maintain compliance and prepare for potential audits or reassessments. • Training and Education: Intrust IT can deliver tailored training programs to ensure your staff understands and adheres to CMMC requirements. By partnering with Intrust IT, defense contractors can confidently approach the CMMC certification process, ensuring they meet DoD cybersecurity standards and remain eligible for future contract awards. To learn more please refer to the following: https://lnkd.in/gHHWQm8h #CMMC #CUI #DIB #compliance #GRC #NIST #DoD #DFARS #FCI

3

If you missed the Implementing Zero Trust Controls and Monitoring for NIST 800-171A Rev.3 webinar, you can rewatch it at the link below! Here are some key points: - Implementing allowlisting for CMMC NIST 800-171A Rev.3 - Best practices for automating continuous monitoring of endpoint compliance - Advanced approaches to monitoring and documenting baseline configuration - Implementing security impact considerations for policy changes and exception Watch it here: https://lnkd.in/egRcA-Bg

17

No one is immune from cyberattacks. You may be a small manufacturer, but if you are part of the defense industrial base supply chain, you are a very attractive target for cybercriminals who want to ride the tail all the way up to a big defense contractor. In this edition of #AskDeb, Deb from QA shares a cautionary tale of an attack that permanently damaged 24,000 laptops. ➡️ Read here: https://loom.ly/liyTKuM #cybersecurity #cyberattack #digitalmanufacturing

5

CISA's recently released "Product Security Bad Practices" guidance highlights the risks of memory-unsafe languages like C/C++. What can be done to secure existing memory unsafe code bases? We're sharing three key steps. #CISA #ProductSecurity

6

Our #massdatagov recently commented on the Cybersecurity and Infrastructure Security Agency #CIRCIA #cybersecurity reporting requirements NPRM including suggestions around reporting requirements for incidents at third party organizations #security #MHDCregulatory Read our comment here: https://ow.ly/JRRW50SiqLG

3