Raj Iyer, Ph.D.

🇺🇸🆔 U.S. Department of Homeland Security (DHS) Awards Contracts to Innovate Digital Credential Privacy The DHS Science and Technology Directorate (S&T) has announced government contracts awarded to Credence ID, Hushmesh, Netis d.o.o., Procivis, SpruceID, and Ubiqu. These contracts are aimed at developing privacy-enhanced technologies for digital versions of credentials used in immigration and travel, allowing users to store their information securely in digital wallets. Anil John, Technical Director of S&T’s Silicon Valley Innovation Program (SVIP), emphasized the importance of these developments, stating that the new capabilities will ensure secure storage and proper verification of credentials while preserving individual privacy. This initiative supports the DHS’s role as a primary issuer of critical credentials such as those for cross-border travel, employment eligibility, and citizenship. Jared X. Goodwin, Acting Chief of the Program Management and Data Division at U.S. Citizenship and Immigration Services (USCIS), highlighted that digital credentials and secure digital wallets meet the public’s expectations for convenience and security in a digital age. The standards for these digital solutions, developed by the World Wide Web Consortium (W3C), ensure global interoperability, accessibility, and privacy. The awards stem from the DHS Privacy Preserving Digital Credential Wallets & Verifiers solicitation, reflecting the department's commitment to enhancing service delivery while protecting privacy. This solicitation builds on previous efforts to address the vulnerabilities of paper-based credentials. Each selected company will receive up to $1.7 million across four SVIP phases. The awarded projects and their respective innovations are as follows: - Credence ID (Oakland, CA 🇺🇸 ) received $199,140 to adapt its existing identity verification technology to support W3C standards, allowing for a simple software update to current hardware readers. - Hushmesh Inc. (Falls Church, VA 🇺🇸 ) was awarded $199,430 to incorporate cryptographic security and zero-trust principles into its Mesh technology, enhancing key management for digital wallets. - NETIS Group (Ljubljana, 🇸🇮 ) received $198,849 to enhance its MIDVA platform, supporting organizational onboarding and credential verification through a Fleet Management Platform and Mobile Verifier App. - Procivis AG (Zurich, 🇨🇭) was awarded $187,285 to improve its Procivis One platform, making it more flexible and capable of handling various types of digital credentials. - SpruceID (New York, NY 🇺🇸) received $199,960 to advance its software for creating secure, verifiable digital credentials suitable for multiple sectors. - ubiqu (Rotterdam, 🇳🇱 ) was awarded $197,961 to integrate its Remote Secure Element technology, ensuring user control and secure recovery solutions for digital credential services Link to DHS media release in first comment

46

2 Comments

Cybersecurity Maturity Model Certification is an important protective measure for safeguarding critical information from adversaries. This is worth getting familiar with if you are collaborating with U.S. stakeholders.

9

The Department of Defense (DoD) is proposing changes to the Defense Federal Acquisition Regulation Supplement (DFARS) to implement updates from the National Defense Authorization Acts (NDAAs) for FY 2018, 2021, and 2022. These changes aim to refine requirements for contractors to submit cost or pricing data. Key updates include: 1. Higher Threshold for Certified Cost or Pricing Data: The threshold is raised to $2 million, reducing paperwork for smaller contracts while maintaining certification requirements for larger ones. 2. New Requirements for Non-Certified Data: Contracting officers can request "data other than certified cost or pricing data" to verify price reasonableness, making organized and transparent pricing documentation essential. 3. Application to Commercial Products and Services: The rules now apply to commercial items, including off-the-shelf products and services, requiring the same data submissions as traditional contracts. 4. Stronger Focus on Fair Pricing: Contracting officers have increased authority to scrutinize pricing data, even when certified data isn’t mandatory, emphasizing the need for clear, well-documented pricing justifications. The public comment period for this proposed rule ends on November 25, 2024, with comments accepted at Regulations.gov.

2

would like to see a little bit more stick, but its a start (still a slow process) Receiving AOs have the right to refuse participating in reciprocity with another organization due to insufficient content demonstrating an informed understanding of the security posture, risk assessment of the system, and the rationale for the risk determination as defined on the RMF KS, or due to excessive risk to the enclave or site, as determined by the site AO. However, the Receiving AO must document and report this refusal to the Granting organization’s AO within 10 business days. If a refusal does occur, both organizations will continue to work, and re-work, the ATO package to reach an agreement, if at all possible. When AOs cannot reach an agreement to leverage re-use and reciprocity, both parties must use the following resolution process to gain assistance in resolving the impasse: 1. If a conflict arises, due to reciprocity refusal there should be an attempt to resolve it at the AO level. This could include, but not limited to, the Granting AO conducting new assessments. 2. If the conflict cannot be resolved at the AO level, the RMF TAG Secretariat will be notified and the RMF TAG Chair will attempt to mediate the dispute as appropriate. 3. If the RMF TAG Chair cannot reach a resolution, the issue will be taken to the AO Council, chaired by the DoD CISO, who will serve as a mediator for the dispute. 

20

lots of companies will need this in the future get ready

4

2 Comments

Enhanced Visibility & Hardening Guidance for Communications Infrastructure CISA has released actionable guidance to help organizations bolster the security and resilience of critical communications infrastructure. * Enhanced Network Visibility: Tools and strategies to monitor and detect potential vulnerabilities. * Hardening Measures: Practical steps to fortify systems against evolving threats. * Proactive Defense: Best practices for mitigating risks to critical infrastructure. Secure your communications systems today and stay ahead of potential threats. Explore the full guidance here: https://lnkd.in/gADKtUPf #Cybersecurity #InfrastructureSecurity #CISA #Resilience

30

🚨 New GAO Report on AI Risks in Critical Infrastructure 🚨 The US Government Accountability Office (GAO) has released a report examining how federal agencies are evaluating artificial intelligence (AI) risks in critical infrastructure sectors. AI has potential to improve critical infrastructure systems but may also introduce vulnerabilities. Executive Order 14110 requires lead federal agencies to evaluate and annually report on AI risks to critical infrastructure sectors Gartner predicts over 70% of government agencies will use AI for decision-making by 2026 Key findings: - None of the 17 sector risk assessments fully addressed all 6 key activities for evaluating AI risks; - Major gaps included evaluating risk levels and the likelihood of risks occurring, as well as mapping mitigation strategies to specific risks GAO recommends DHS expedite updates to its AI risk assessment guidance to address these gaps before the next round of assessments in January 2025. #CriticalInfrastructure #AISecurity #Cybersecurity #RiskManagement #RiskNeverSleeps https://lnkd.in/envrigTF

23

1 Comment

For years, the vulnerabilities in our defense supply chains have been well understood, yet the risks remain. The time for analysis is over—the DoD must act decisively, allocate the necessary funding, and drive real change. Until we do, these critical supply chains will stay exposed, threatening the resilience of our national defense. It’s time to transform this longstanding weakness into a strategic advantage. From the article: “The lethal detonation of hand-held pagers and walkie-talkies used by Hezbollah militants this week in Lebanon demonstrated powerful spycraft, but it also raised questions about a gaping vulnerability in the global supply chain… …Even the most sophisticated participants are often unclear on who they are relying on for critical parts and raw materials, or where the risks lie… …The clear lesson of the supply chain upheavals that accompanied the pandemic was that the longer the journey entailed in making any product, the greater the chance that something might go awry, inflicting delay and higher costs… …Now there’s a potent yet related concern: The more complicated the journey, the greater the exposure to mischief… …Every movement along the way, and every additional company brought into the manufacturing process represents an opportunity for those pursuing violent agendas to insinuate themselves into the works and weaponize the product.” https://lnkd.in/eycRgcDR

1

Its budget season for many A&D companies. Keep this in mind as you plan for next year: ‘DOD releases final rule for CMMC, setting the stage for implementation next year’ https://lnkd.in/egXXCDaT

22

There is critical shortage of data professionals in the federal government agencies like U.S. Department of Veterans Affairs and Defense Health Agency. At SAS we are always seeking ways to help with trustworthy solutions and responsible innovation. SAS Viya bridges that gap with solutions that are 460% more productive than our competitors. Here what the recent Futurum study found: ✅ Data engineers are 16 times more productive accessing, preparing and governing data with Viya. ✅ Data scientists are 3.5 times more productive building, optimizing and validating models. ✅ MLOps engineers are 4.5 times more productive automating, monitoring and retraining models. ✅ Business analysts and other non-technical staff can complete 86% of data life cycle tasks using Viya, compared to 56% in the commercial environment and 47% in the non-commercial environment. #AI #ML #Productivity #ModelOps #Innovation

3

As federal agencies increase #AI adoption, they are developing strategic plans to ensure steady, successful implementation. These recently published plans outline AI use cases, implementation strategies, and the decision-making process for aligning with OMB’s AI governance memo. These efforts will shape the future of AI in government, balancing innovation with transparency. At Ingram Micro, we understand the complexities agencies face in navigating the fast evolving AI governance landscape. With our expertise, we deliver tailored tools and strategies that meet mission needs and ensure compliance with federal AI requirements. https://lnkd.in/eHMwFdCa

9

As #cybersecurity threats evolve, Assistant Secretary of Defense for Cyber Policy, Michael Sulmeyer is taking a proactive approach by shifting current DOD cyber metrics from general insights to also include projects’ return on investments. This self-assessment approach will help the department track progress and prioritize resilience and proactivity in protecting critical systems. With a deep understanding of the challenges facing DOD, Ingram Micro supports agencies as they work to gather information on global threats. Our expertise ensures compliance with essential federal cyber regulations like CMMC, helping agencies stay ahead of the evolving landscape and achieve mission success. https://lnkd.in/eB2ucpua

7

In IT operations, true success is when no one knows you exist. #BoozAllen Vice President, Franco Susi, discusses how large federal civilian agencies can prepare for significant #ITOps programs and move towards a proactive IT Ops posture through #AI Ops. https://bit.ly/3VPvoUX

76

4 Comments

Interested in #AI or Autonomous Systems? Then check out this article by Axios on my company's CINO.

6

$984 million to eligible companies to scale innovations for #nationalsecurity in the 31 #technology categories. Thank-you Office of the Secretary of Defense, #DOD, Office of Strategic Capital for all your efforts and support to our #entrepreneurs who have made this a priority. Leveraging private capital for national and economic priorities. Key areas of investment and additional details below. #industrialbase #innovation #defensesecretary #deputydefensesecretary NSIN - National Security Innovation Network FedTech #startup https://lnkd.in/gqNnE7Kg

13

Secure #technology serves as the foundation of federal agencies being able to execute on their missions. #CIOs and #CISOs cannot do this work alone - it takes a #CSuite. 🚨If you are a member of the CSuite in the #US #Federal #Government: ✅ Read this memo, ✅ Understand your IT modernization journey and what investments you need from year to year, and ✅ Ask how you can support efforts to secure and modernize your infrastructure. By partnering with your tech teams, you will place your agency on a path to #digital #transformation by: ✅ deploying technology that’s #securebydesign #securebydefault ✅ retiring and modernizing #IT in need, ✅ protecting the #data you manage on behalf of the American people, and ✅ delivering #impact with taxpayer dollars. Aligned CSuites: ✅ accelerate innovation, ✅ lower administrative burden, and ✅ inspire others to join us. We can deliver a 21st century government. It takes all of us. Let’s go! 🚀💻🇺🇸 Office of Management and Budget | Office of the National Cyber Director, The White House |U.S. Federal Chief Information Officers (CIO) Council

19

2 Comments

Staying informed in the dynamic world of government contracting (GovCon) is crucial for success. The GovCon media offers a wealth of free information, keeping you updated on the latest news, issues, and trends. From defense technology to federal policies, these sources provide valuable insights to help you stay ahead of the curve. This article highlights 12 GovCon media outlets that every government contractor should follow. Bookmark these links and subscribe to their newsletters to stay well-informed. https://lnkd.in/eSH4mqJH #GovCon #GovernmentContracting #GovConNews #FederalContracting #DefenseTechnology #GovernmentPolicies #ContractorResources #GovConUpdates #StayInformed #GovConTrends #IndustryInsights #GovConMedia #GovConSuccess #Bids #Proposals #LohfeldConsulting #ExecutiveBiz #FederalNewsNetwork #GovBrew #GovCIO #G2Xchange #OrangeSlices #WashingtonTechonology

1

The AI Tech and Talent Task Force released their report to the President. Highlights include a 288% increase in AI applicants (across Government) and an expected 500+ hiring through 2025. #ai #hiring #people #sme #surge #publicservice #it

54

3 Comments