The Federal Drive with Terry Gerton

Agencies are supposed to protect their data systems from cybersecurity threats, especially those known as high value asset systems. The Homeland Security Department office of inspector general looked at a high value asset system operated by the Transportation Security Administration. Uh oh. Lots of missing pieces. For the details, Federal Drive Host Tom Temin spoke with the principal deputy inspector general, Glenn Sklar and the acting assistant I-G for the office of audits, Craig Adelman

Learn more about your ad choices. Visit podcastchoices.com/adchoices

See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

On today's episode of the Federal Drive with Tom Temin:

Learn more about your ad choices. Visit podcastchoices.com/adchoices

See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

Typically, the process to update the cybersecurity controls that form the basis of federal information security standards takes at least a month, if not longer.

But the National Institute of Standards and Technology today is proposing a more urgent “patch release” to Special Publication 800-53, “Security and Privacy Controls for Information Systems and Organizations.” It was last updated through a major revision finalized in December 2020.

Today’s proposed update features an expedited two-week comment period. It proposes one new control and two corresponding “control enhancements” to address a major gap in identity and access control processes.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

Two tough new rules from the Federal Acquisition Regulation Council are coming, but originating with the Cybersecurity and Infrastructure Security Agency. They have to do with contractor incident reporting and for how contractors button up unclassified systems. For analysis Federal Drive Host Tom Temin turned to Haynes Boone procurement attorney Zach Prince.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

An urgent report from the Government Accountability Office is aimed at the State Department. GAO called for State to, in its words, "expeditiously get on with a cybersecurity risk management program." State has a plan, now it has to carry it out. For more on this, Federal Drive Host Tom Temin spoke with Jennifer Franks, GAO's Director of Information Technology and Cybersecurity.

GAO REPORT

Learn more about your ad choices. Visit podcastchoices.com/adchoices

See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

Women veterans, who were wounded or injured, are more likely, compared to men, to have post traumatic stress disorder and to die by suicide. That is according to the Wounded Warrior Project, which surveyed 18,000 male and female veterans. For more on the survey, Federal Drive Host Tom Temin spoke with Tracy Farrell, VP of the Project.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

On today's episode of the Federal Drive with Tom Temin:

Learn more about your ad choices. Visit podcastchoices.com/adchoices

See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

The Navy’s Program Executive Office Digital (PEO-Digital) turned to the Small Business Innovation Research program for the first time to find, test and hopefully use innovative technologies to continually improve its processes.

PEO-Digital has phase one and two SBIRs to leverage technologies and make improvements with the goal of making work better for sailors and employees.

“That’s one place where we’re just getting more creative,” Justin Fanelli, the acting chief technology officer for the Department of the Navy and the technical director of PEO-Digital, told Federal News Network after an AFCEA NOVA panel. “We’re looking at more mechanisms. We have something that’s called Advanced Naval Technology Exercise so that we can do commercial solution offerings. We have both phase one and phase two [opportunities] going out.”

Learn more about your ad choices. Visit podcastchoices.com/adchoices

See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

Conference work on the National Defense Authorization Act for 2024 proceeds, even as nothing else in Congress seems to be working. As always, the NDAA has provisions affecting Defense contractors. Federal Drive Host Tom Temin spoke with someone who says that sometimes, good intentions aren't matched by good legislation. Tom's guest was the President and CEO of the Professional Services Council, David Berteau.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

Insider cybersecurity threats are just as potent as Russian and Chinese hackers. Some employees make mistakes, clicking on that bad phishing link. Unhappy or disgruntled employees, that's another matter. Federal Drive Host Tom Temin talk with someone who says such people are far more susceptible than average to social-engineering attacks. Tom's guest was Max Shier, Chief Information Security Officer at Optiv.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.