CyberCast

NIST Fellow Ron Ross discusses how federal agencies can maintain best cybersecurity practices while working remotely, plus how standards and practices like FISMA, zero trust and privacy play into federal strategies.

Federal officials came together during our Sept. 2 CyberScape virtual event to discuss priorities in security and hiring the next generation of leaders, including a conversation on women in tech with Katie Arrington, Jothi Dugar and Venice Goodwine. Looking ahead, standards like TIC 3.0 and CMMC will have lasting impact on federal security strategies.

The Department of Homeland Security Science and Technology Directorate in partnership with the National Information Assurance Partnership sponsored a pilot effort to determine to what extent NIAP evaluations of mobile app software could be automated. Vincent Sritapan, program manager for Mobile Security R&D at DHS S&T, and Michelle Brown, deputy director at NIAP, discuss these innovations for certifying mobile apps in government.

NUSTL Director Alice Hong discusses the lab's coordination with our nation's first responders on testing and evaluating cutting-edge technologies, from protective gloves to in-suit communication devices. We also talk about training exercises for radiological and nuclear incidents and active shooter scenarios, as well as how NUSTL is aiding in COVID-19 response efforts.

Adrian Monza discusses the strategy behind securing endpoints, users and data by getting rid of passwords and running anti-phishing exercises. He also talks about penetration testing, containerization and the importance of educating your entire organization about their role in cybersecurity.

Janet Vogel and Christopher Bollerer discuss the current challenges and opportunities in health cybersecurity, especially information-sharing across the public and private sectors, workforce training and education, and the cyber hygiene essentials underpinning security innovation.

Oki Mek discusses his priorities in his new position at the agency, including automating the authority to operate (ATO) process, educating the workforce on cybersecurity hygiene, the importance of blockchain and why innovation is not always about the technology.

Gerry Connolly discusses government progress on the standards and directives codified in FITARA, IT modernization and FedRAMP. We look at IT modernization efforts and discuss both the Modernizing Government Technology Act and the associated Technology Modernization Fund.

Stacie Alboum discusses her background in security at previous agencies plus how the "Optimize NIH" initiative and business management play into her current security priorities at the National Institutes of Health.

For more episodes: https://www.governmentciomedia.com/cybercast