Noel Nazario

SAIC's CloudScend™ empowers agencies to accelerate #CloudMigration by securely migrating workloads faster, maximizing value while minimizing risks. This IDC MarketScape report recognizes this solution, check it out to learn more.

1

OSIbeyond is excited to share the 6th CMMC article by our CEO and GovCon expert, Payam Pourkhomami. Gain valuable insights on preparing for a CMMC 2.0 assessment by reading the article below.

4

The proposed rulemaking by the Cybersecurity and Infrastructure Security Agency (CISA) on the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) aims to establish new requirements for critical infrastructure sectors, including the defense industrial base, to report certain cyber incidents and ransomware payments to CISA. This move is intended to enhance the nation's cybersecurity through improved information sharing and incident reporting. For DoD contractors, already subject to the Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012, the impact of CIRCIA may involve additional reporting obligations, particularly concerning cyber incidents and ransomware. DFARS 252.204-7012 mandates defense contractors to safeguard covered defense information and report cyber incidents to the DoD. The CIRCIA legislation could supplement existing DFARS requirements by establishing a broader and more immediate reporting mandate to CISA, potentially including a wider range of cyber incidents beyond those currently mandated under DFARS. This means that DoD contractors might have to navigate and comply with both sets of requirements, ensuring that they report relevant cyber incidents promptly and accurately to both the DoD under DFARS and to CISA under CIRCIA. The specifics of how CIRCIA will integrate with existing DFARS obligations are still unfolding, and it will be crucial for DoD contractors to stay informed of the final rulemaking by CISA to understand the full scope of their reporting responsibilities.   📢 Public Comment Period Open Until June 3rd! 📢

9

Attention #CloudSecurity pros, #IAM experts, #DataPrivacy officers, #IT auditors, #CISOs, and #CIOs. This live panel discussion, "Navigating IAM in a Cloud-Based World," on July 25 at 1:00pm ET is for you. Expert practitioners from GuidePoint Security, CrowdStrike, Delinea and Tenable will share insights on integrating Cloud Security and Identity Access Management. Register now and enhance your security posture and operational efficiency. https://okt.to/GVf4Nb

1

Secure #technology serves as the foundation of federal agencies being able to execute on their missions. #CIOs and #CISOs cannot do this work alone - it takes a #CSuite. 🚨If you are a member of the CSuite in the #US #Federal #Government: ✅ Read this memo, ✅ Understand your IT modernization journey and what investments you need from year to year, and ✅ Ask how you can support efforts to secure and modernize your infrastructure. By partnering with your tech teams, you will place your agency on a path to #digital #transformation by: ✅ deploying technology that’s #securebydesign #securebydefault ✅ retiring and modernizing #IT in need, ✅ protecting the #data you manage on behalf of the American people, and ✅ delivering #impact with taxpayer dollars. Aligned CSuites: ✅ accelerate innovation, ✅ lower administrative burden, and ✅ inspire others to join us. We can deliver a 21st century government. It takes all of us. Let’s go! 🚀💻🇺🇸 Office of Management and Budget | Office of the National Cyber Director, The White House |U.S. Federal Chief Information Officers (CIO) Council

10

1 Comment

Federal agencies have a plethora of cybersecurity tools all gathering critical data to defend from cyberattacks. #BoozAllen is helping them integrate that data to better protect themselves through its work on the Cybersecurity and Infrastructure Security https://lnkd.in/egbRw35n

2

NEMA submitted comments to the Cybersecurity and Infrastructure Security Agency this week on CISA's proposed rule to implement the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA). CIRCIA presents a milestone in how the federal government will now engage with the private sector as a partner in the cybersecurity and protection of the nation’s critical infrastructure. NEMA has long been an active partner within the Critical Manufacturing Sector and CISA. Alongside the American Lighting Association, NEMA's comments highlight how to best maintain this productive collaboration, specifically for determining statute-required "sector-based criteria". NEMA and other organizations also seek clarification that trade associations themselves would not be considered critical infrastructure entities even if they represent companies that own and operate critical infrastructure. Read NEMA's comments here: https://lnkd.in/ed8y6g4M

7

DOD issues class deviation, effective immediately, for its safeguarding covered defense information #cyber rule under DFARS 252.204-7012. This deviation amends the #defense regulation to specifically require compliance with NIST SP 800-171 rev. 2 until the deviation is rescinded. Because the pre-deviation language required compliance with the version of NIST SP 800-171 "in effect at the time the solicitation is issued," the deviation provides needed clarity as contractors not only prepare for DOD's upcoming #CMMC rule but also to avoid a compliance headache when NIST publishes rev 3 to #nist800171. #govcon

4

Read this Guidehouse Defense and Security case study detailing how our team helped a client transform into a dynamic organization supporting cybersecurity operational activities across multiple governmental levels: https://lnkd.in/e7wy2HfF.

3

The New DoD Defense Industrial Base (DIB) Cybersecurity Strategy 2024 is a comprehensive framework essential for bolstering the cybersecurity and resilience of the Defense Industrial Base. This strategy is crucial in safeguarding our national security and maintaining our technological edge. Key Highlights: - Enhanced Collaboration: Strengthening interagency cooperation and communication within the DIB cybersecurity community. - Cyber Resiliency: Prioritizing critical DIB capabilities and ensuring robust recovery plans from cyber incidents. - Regulatory Framework: Developing regulations to govern cybersecurity responsibilities of DIB contractors and subcontractors. - Information Sharing: Improving threat intelligence sharing and leveraging commercial partnerships to enhance cyber threat awareness. Aligned with the 2022 National Defense Strategy and the 2023 National Cybersecurity Strategy, this approach ensures that our defense ecosystem remains secure and resilient in today’s contested cyberspace. Read the full document to learn more about how we are protecting our nation’s critical infrastructure and defense capabilities: https://lnkd.in/dUdqE7SS #CyberSecurity #Defense #NationalSecurity #DIB #DoD #CyberResilience #InformationSecurity #TechnologyAdvantage #Innovation #Collaboration

6

1 Comment

CMMC Final Rule moves closer to implementation in 2024! The DoD submitted the first Final Rule to implement CMMC to the Office of Information and Regulatory Affairs (OIRA) on June 27, taking a major step closer to publishing and officially launching the CMMC program. The rulemaking package included 8 supporting documents detailing a model overview, assessment and scoping guides for the CMMC levels as well as a hashing guide. How does this timeline impact your organization’s compliance planning? Are you on track to meet all requirements by the end of 2024? Our experts can help! Contact SSE: https://lnkd.in/gEF5XKHv #SSE #CMMC #CMMCCompliance #Cybersecurity #DoD #DefenseContracting #RegulatoryCompliance #InformationSecurity #GovCon #FederalContracting #CyberRegulations #2024Compliance #CMMCPreparation

2

The Department of Justice recently intervened in a False Claims Act case involving compliance with the requirements of DFARS 252.204-7012 and National Institute of Standards and Technology Special Publication 800-171. In our latest Government Contracts Navigator post, Michael Montalbano and Samarth Barot look at the requirements, this case, and what contractors should do to mitigate any potential liabilities. #govcon #governmentcontracting #cybersecurity #falseclaimsact

9

Smaller businesses are becoming easier targets, jeopardizing national security and supplier capabilities. This article in #Signal Magazine examines these overlooked risks and shares Dr. Thomas Graham, PhD, CISSP, MBA's insights on safeguarding data and managing risks in defense M&A. Read here:https://bit.ly/4bngFFq

16

CISA, FBI, and ODNI Release Guidance for Securing Election Infrastructure Against the Tactics of Foreign Malign Influence Operations Read more on the link below. #defense #sbir #military #jointwerx #cmmc #cyber #cybersecurity @jointwerx @blackhaysgroup #GovernmentContracts #InfoSec #CyberDefense #NationalSecurity #DigitalTransformation #PublicSector #Startups #TechInnovation

1