CyberCast

The Enduring Security Framework, a public-private partnership with NSA as its executive secretariat, released a new product examining the benefits, security risks, deployment, and benefits of 5G network slicing. Based on the previously published work "Potential threat vectors to 5G infrastructure," the new document provides an executive overview of the risks involved with deploying network slicing, including potential management strategies. Learn about the Enduring Security Framework, the work they do, and their assessment of the threats to a network slice and the 5G infrastructure as a whole.

With a challenging maritime computing environment, the Coast Guard supports several missions for the departments of Defense and Homeland Security. Assistant Commandant for C4 & IT Rear Adm. Christopher Bartz discusses his workforce, cybersecurity and tech priorities, including how he's approaching the service's own take on interconnected data systems akin to DOD's JADC2 as well as a new software factory.

CISA's Joint Cyber Defense Collaborative (JCDC) announced a 2023 planning agenda to stay ahead of persistent cybersecurity threats to federal agencies, such as supply chain risk and open-source software. Learn why these threats are so high profile and how federal agencies across defense, health and civilian sectors are working together to share critical information about cybersecurity risks and incidents. Don't miss a fascinating tangent where we decide which superhero represents which federal agency.

As the Coast Guard prepares to launch its first software factory later this year, Deputy CIO Brian Campo discusses how his prior experience as CTO for the Department of Homeland Security prepared him to lead the Coast Guard into a more cybersecure future with zero trust, a continuous authorization to operate (cATO) approach and a strong foundation in data management strategies.

Cybersecurity will always be a critical issue. In 2022 federal agencies developed targeted strategies and frameworks to stay ahead of the evolving threat landscape. Our hosts reflect on the top news and trends of last year, including new zero trust strategies out of the departments of Defense and Veterans Affairs, evolving tech and cyber workforce frameworks, plans to combat ransomware and more. Plus we discuss how these efforts will pave the way for progress in 2023.

The Vulnerability Disclosure Program (VDP) is the youngest directorate within the Defense Department (DOD) Cyber Crime Center. Established in 2016, it's the sole focal point for receiving all vulnerability reporting at the agency, and it is uniquely positioned as it engages private-sector white hat researchers to support its mission. In January 2021, it expanded its scope from only public-facing websites to all publicly accessible DOD information systems. VDP Director Melissa Vice briefs how the program engages the security research community to strengthen network defenses, highlights the recent year-long pilot program for the Defense Industrial Base, and talks through her priorities for the coming year.

Global dependence on technology blurs the lines between national and cybersecurity, elevating the importance that consistent collaboration and information-sharing has in the industry. ODNI Director of Cyber Threat Intelligence Integration Center Laura Galante discusses the prevalence of disinformation and how the rapidly shifting cyber landscape impacts the intelligence community.

Identity management is a key factor to creating a robust cybersecurity strategy. GSA's newly published Privileged Identity Playbook helps federal agencies implement and manage a privileged user management function as part of an overall ICAM program. GSA's Identity Assurance and Trusted Access Division Director Key Myers and CISA IT Specialist Ross Foard discuss the playbook's implications and best practices around identity management.

Privileged Identity Playbook: https://playbooks.idmanagement.gov/playbooks/pam/

CDM Program Information: www.cisa.gov/cdm

The CyberCast Ransomware Miniseries comes to a close with advice from CISA, which serves as the federal hub for cyber training, awareness and resources for industry and federal agencies. CISA National Risk Management Center Assistant Director Mona Harrington discusses trends such as triple extortion and ransomware-as-a-service and how strategies such as network segmentation and cyber incident reporting can help.

Mobile devices have become a prime target for malicious actors and ICE is using zero trust to significantly improve threat detection and data protection. In this episode, ICE CISO Rob Thorne also highlights the importance of applying zero trust principles to enterprise mobility and how cyber hygiene activities are helping to propel the agency on its path to zero trust. This episode is sponsored by DataDog.