Theodore Gates

Two members of the Public Interest Cybersecurity program at CLTC submitted guidance in response to the Cybersecurity and Infrastructure Security Agency's request for comment on its Product Security Bad Practices Guidance. In their comment, Shannon Pierson and Sarah Powazek offer two recommendations specifically addressing practices related to multi-factor authentication (MFA), as identified under the Security Features category. Read their recommendations here: https://lnkd.in/gPAqhvFj

6

Critical infrastructure comprises the assets, systems, and networks considered vital to the United States. Check out CDSE’s Insider Threat critical infrastructure toolkit that includes resource links, job aids, and more. Follow the link below to get started.   https://lnkd.in/emdmhQeq #CDSE #InsiderThreatToolkit

52

3 Comments

New comprehensive Homeland Security cyber incident reporting rules - Federal News Network: New comprehensive Homeland Security cyber incident reporting rules  Federal News Network #CyberSecurity #InfoSec #SecurityInsights

1

🛡️ 𝗔𝘁𝘁𝗲𝗻𝘁𝗶𝗼𝗻 𝗗𝗲𝗳𝗲𝗻𝘀𝗲 𝗖𝗼𝗻𝘁𝗿𝗮𝗰𝘁𝗼𝗿𝘀, 𝗖𝗜𝗦𝗢𝘀, 𝗮𝗻𝗱 𝗖𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲 𝗢𝗳𝗳𝗶𝗰𝗲𝗿𝘀! 🛡️ Are you prepared to meet the DoD's 72-hour cyber incident reporting requirement? Our latest video unpacks critical DFARS compliance information: ✅ The legal mandate under DFARS 252.204-7012 ✅ Why cyber incident reporting goes beyond NIST SP 800-171 ✅ The crucial role of the medium assurance certificate In the high-stakes world of defense contracting, ignorance isn't just costly - it's non-compliant. Watch now and ensure your organization is ready to respond within the critical 72-hour window! ⏰💼🔒 #DFARSCompliance #CyberIncidentReporting #DefenseContracting #NationalSecurity

CISA has published an update to the National Cyber Incident Response Plan (NCIRP) and is seeking comment on the draft update. The NCIRP is a strategic national framework for how federal; private sector; state, local, tribal, and territorial; and international partners collectively address significant cyber incidents. https://lnkd.in/dr7EquMG

2

Cybercom looking to combine and standardize defensive cyber kits; solicitation issued April 29, 2024, DefenseScoop https://lnkd.in/eg3H2tea U.S. Cyber Command, through the Defense Innovation Unit, has begun the process to standardize the gear that defensive cyber teams use to perform their missions. That effort will now also combine the equipment cyber protection teams use with the kit for hunt-forward operations performed by the Cyber National Mission Force, Cybercom’s elite unit tasked with defending the nation against significant digital threats. Hunt-forward operations, conceptualized over five years ago, involve physically sending defensively oriented cyber protection teams to foreign countries to hunt for threats on their networks at the invitation of host nations.

73

3 Comments

The latest UGA CyberArch webinar is now available to view online. In "Closing the Cybersecurity Loop: A Comprehensive CIS Controls Overview," Joshua Franklin, senior security engineer at the Center for Internet Security (CIS), covers the essential role of free tools in bolstering cybersecurity efforts alongside CIS Controls. https://lnkd.in/g_VRH4Yu

1

We are setting the standard and @Gartner agrees! "HyperSphere is the first and only solution to have a published NIST National Checklist hardening guide derived from NIST 800-53 rev5 and aligning to both FISMA and DoD IL4 baselines." 👉 https://lnkd.in/einirruU #Gartner #CyberCompliance #SecurityStandard

11

Cybersecurity and Infrastructure Security Agency's (CISA) Jen Easterly: Federal Cloud Security Must Evolve to Thwart Modern Threats Read it: https://lnkd.in/gv4TxTcf #cybersecurity #cyberinsurance

2

ICYMI: The DoD Chief Information Officer posted FAQs about Cybersecurity Maturity Model Certification (CMMC), the so-called CMMC 2.0. Download this PDF as a handy reference to help with your questions, and reach out to Project Spectrum for an assessment and resources. #DoD #cybersecurity #CMMC #FAQ

167

6 Comments

NSA Raises Concerns Over Cybersecurity Practices Among Defense Contractors The NSA has identified significant gaps in the cybersecurity practices of major defense contractors, revealing vulnerabilities that could be exploited by adversaries. The agency's latest report emphasizes the urgent need for enhanced security measures to protect sensitive defense information and infrastructure from cyber threats. Source: https://lnkd.in/g9hCCT3Y #Cybersecurity #DefenseContractors #NSA #NationalSecurity #DataProtection

1

Wondering how to craft a response to CISA about the proposed cyber incident reporting requirements (aka CIRCIA) before the January 17, 2025 deadline? Take a look at the responses cited in the Tribal Consultation Notification Letter https://lnkd.in/eAstxX4A that are available in public record and linked here: Federated Indians of Graton https://lnkd.in/ekKA2Bbh Bristol Bay Native Corporation https://lnkd.in/eW3WGg3q Cherokee Nation https://lnkd.in/ejMhfzNw Nisqually Red Wind Casino https://lnkd.in/eiQaKPWk Yocha Dehe Wintun Nation https://lnkd.in/e7nEpyhr Sycuan Band of the Kumeyaay Nation https://lnkd.in/eTUi4QeX Yuhaaviatam of San Manuel Nation https://lnkd.in/eNfbjQXB Morongo Band of Mission Indians https://lnkd.in/eErPzygg Baker Hostetler https://lnkd.in/e6YbSP_7 These are informational sources, not canned responses, but may help to inform your writing. Please be heard on this issue. 📣 This could impact the tribe you work for. #safeguardsovereignty #informationsharing

24

🗞️ In CyberScoop: "[T]he years of work to build up federal collaboration with industry are paying off, from the Joint Cyber Defense Collaborative to the National Risk Management Center — the 'proto' version of the JCDC, [Chris Krebs] said — to the National Security Agency’s Cybersecurity Collaboration Center. "'We’re starting to see that these things work with the resources and time into it, but it’s generating results and there’s no better evidence of the results, I think, than when Russia invaded Ukraine, and the ‘Shields Up’ campaign and the breadth to which that was able to change behavior in industry,' said Krebs, now chief intelligence and public policy officer at SentinelOne." To learn more, read the full article by Tim Starks: https://s1.ai/CS-Collab

42