Sonya Proctor: TSA Creating New Security Directive for Pipeline Cybersecurity Mitigation Measures

The Transportation Security Administration is developing a second security directive focusing on requirements for pipeline cybersecurity mitigation measures. Sonya Proctor, the TSA’s assistant administrator for surface operations, testified before two subcommittees of the House Homeland Security Committee on Tuesday. Proctor noted that the new directive will be a security-sensitive information document and will prescribe mitigation […]
Posted on by Andrea McHale

Kratos Authorized as CMMC Third Party Assessment Organization

Kratos Defense & Security Solutions has been accredited as a certified third party assessment organization under the Department of Defense’s Cybersecurity Maturity Model Certification program. The company is now awaiting the completion of preparatory and authorization steps to be cleared to perform assessments on defense contractors seeking compliance with the first three CMMC levels. The […]
Posted on by Adrian Rosenberg

Security Officials Warn of 5G Supply Chain Vulnerabilities

Homeland security officials have stressed the importance of supply chain security amid the federal government’s increasing adoption of 5G-enabled technologies.  Serena Reynolds, leader of the Cybersecurity and Infrastructure Security Agency’s 5G initiatives, said the government and its contractors should educate themselves on the dangers of untrusted vendors, GovernmentCIO Media & Research reported. One official at […]
Posted on by Robert Johnson

Army Develops Tool for Assessing Situation-Specific Cybersecurity Technologies

Army researchers have developed a software tool designed to help cybersecurity analysts identify the best course of action in near real time. The repeatable experimentation system uses virtualization and simulation techniques to assess the viability of cybersecurity algorithms in various situations. RES runs multiple virtual experiments in parallel and packages their results for other researchers […]
Posted on by Robert Johnson

Customer Value Partners Selected for NIH’s Risk Management Framework BPA

Tech consulting firm Customer Value Partners has received a spot on the National Institutes of Health’s multiple-award Risk Management Framework blanket purchase agreement. Under the terms of the five-year, $86 million BPA, the Virginia-based company will provide cybersecurity risk management and authority to operate services across the NIH’s 27 institutes and centers. Services may be […]
Posted on by Adrian Rosenberg

Nominees for Top Cyber Posts Back Mandatory Cybersecurity Standards in Critical Sectors

Jen Easterly and Chris Inglis, nominees for two of the highest cybersecurity positions in the federal government, said they favor imposing mandatory cybersecurity standards on critical infrastructure organizations. During a Senate hearing, Easterly and Inglis said that voluntary standards failed to fend off the advanced persistent SolarWinds attack and the ransomware attack against Colonial Pipeline, […]
Posted on by Robert Johnson

Redspin Named CMMC Third Party Assessor Organization

The Cybersecurity Maturity Model Certification Accreditation Body has authorized Redspin, a division of CynergisTek, to perform assessments on defense contractors seeking compliance with the first three CMMC levels. Redspin is the first authorized CMMC third-party assessment organization and the only candidate C3PAO that passed level 3 requirements. Before being cleared by the CMMC-AB, Redspin first […]
Posted on by Adrian Rosenberg

Varonis to Support DOD Zero Trust Effort With Data Security Platform

The U.S. government has selected Varonis Systems’ Data Security Platform for the Department of Defense Zero Trust Testbed initiative. The testbed is located at DreamPort, a Columbia, Maryland-based facility for cyber innovation, collaboration and prototyping. The facility was created through a partnership between the U.S. Cyber Command and the Maryland Innovation and Security Institute. The […]
Posted on by Andrea McHale

LookingGlass to Provide Threat Intelligence Platform to DOD Analysts

LookingGlass Cyber Solutions has been awarded a five-year contract to provide its threat intelligence and analytics platform to Department of Defense analysts. The scoutSuite platform will provide actionable threat intelligence data tailored to the mission needs of the department’s cybersecurity analysts and operators, LookingGlass said Tuesday. DOD awarded the production-other transaction agreement after the Defense […]
Posted on by Robert Johnson