Larry Letow

📢 Check Point Again a Frost Radar XDR Leader in 2024 In this report, Check Point was cited as a Growth and Innovation Leader in Extended Detection and Response (XDR). Check Point XDR/XPR Key Highlights: • Collaborative Threat Prevention • AI Copilot • Consolidated Threat Intelligence and Analytics • Infinity Playblocks Automation • Centralized IOC Management • Threat Intelligence & Event Correlation Download your free copy of the Frost Radar™ XDR Report to learn more about why Check Point is a Growth and Innovation leader in Extended Detection and Response 👉 https://lnkd.in/gecJVKrG Yael Cinamon

4

Does being compliant with CMMC really matter right now? A small fraction of defense contractors have already done the hard work to prepare for these critical requirements to protect our national defense infrastructure. For the remaining ~200,000 contractors, it is a risk management decision. Can you afford to lose contracts with those clauses? Would your business stay afloat without that government customer? Could waiting hurt your business and bottom line? We have seen companies lose HUGE contracts that resulted in having to layoff people who have been there for 20 years. This stuff has a huge impact. Don’t think that you have to do it all at once! You just need to start with a solid plan and a budget. When you do this, you are ahead of the majority and will be on your way to a competitive advantage before you know it. The hardest part is getting started. Feeling stuck? Valor Cybersecurity is here to help you get ready. #cybersecurity #defense #compliance #dod

6

Enhanced Visibility & Hardening Guidance for Communications Infrastructure CISA has released actionable guidance to help organizations bolster the security and resilience of critical communications infrastructure. * Enhanced Network Visibility: Tools and strategies to monitor and detect potential vulnerabilities. * Hardening Measures: Practical steps to fortify systems against evolving threats. * Proactive Defense: Best practices for mitigating risks to critical infrastructure. Secure your communications systems today and stay ahead of potential threats. Explore the full guidance here: https://lnkd.in/gADKtUPf #Cybersecurity #InfrastructureSecurity #CISA #Resilience

30

Baltimore, Maryland: Last week, on the fringe of the AFCEA TechNet Cyber Conference, Mike Walsh sat down with Francis Rose to chat about the DoD's Comply-To-Connect (C2C) program and how this investment made by Congress creates a net-positive wrt -- ✍ Executive Order 14028: 1️⃣ "It is the policy of my Administration that the prevention, detection, assessment, and remediation of cyber incidents is a top priority and essential to national and economic security. The Federal Government must lead by example. All Federal Information Systems should meet or exceed the standards and requirements for cybersecurity set forth in and issued pursuant to this order." 2️⃣ "To keep pace with today’s dynamic and increasingly sophisticated cyber threat environment, the Federal Government must take decisive steps to modernize its approach to cybersecurity." Which requires the Federal Government to invest in and secure both Information Technology (IT) and Operational Technology (OT) systems. BL: The continuous monitoring, assessment, and security of all IT, IoT, and OT endpoints are both necessary and achievable to "build secure systems in untrusted networks" #ZeroTrust. ☠ 🌀 Volt Typhoon: 1️⃣ The discovery of Chinese malicious code embedded in the telecommunications systems used by the U.S. military in Guam, home to three strategic U.S. bases, sent waves through the national security community. The Chinese Communist Party (CCP) currently uses cyberspace to achieve espionage and intellectual property theft objectives. 2️⃣ However, they aspire to use malware hidden in our critical networks to disrupt our response to a future CCP invasion of Taiwan. BL: This cannot be overstated: denying the availability of weapon systems in the garrison is as effective as destroying them on the battlefield.

32

It's worth checking out and ensuring your business is ready.

2

Incredible news! "Modernizing the CMRS program is critical to achieving the DoD’s cybersecurity goals. Axonius was selected for its innovative platform, which supports faster, more accurate data analysis, and ensures a comprehensive view of cybersecurity risk across the DoD." Brian Hennigan, Division Chief of Endpoint Security PMO @ Defense Information Systems Agency We are so proud and humbled that our platform will now, on a strategic level(up to 10M assets and 2.5M DoD personnel!) - support the United States Department of Defense's mission of gaining visibility, measuring cyber risk, and taking action!

63

3 Comments

🚨 CMMC Update: Congressional Challenge Ahead! Congressman Gary Palmer has introduced a joint resolution (H.J.Res.221) aiming to nullify the DoD's Cybersecurity Maturity Model Certification (CMMC) Program under the Congressional Review Act. This move could impact the CMMC final rule set to take effect on December 16, 2024. What This Means: • 𝗥𝗲𝗴𝘂𝗹𝗮𝘁𝗼𝗿𝘆 𝗨𝗻𝗰𝗲𝗿𝘁𝗮𝗶𝗻𝘁𝘆: The resolution could halt or delay CMMC implementation. • 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗜𝗺𝗽𝗮𝗰𝘁: Ongoing debates about securing the defense industrial base. • 𝗦𝘁𝗮𝘆 𝗣𝗿𝗼𝗮𝗰𝘁𝗶𝘃𝗲: Flexibility and vigilance are crucial during this time. Next Steps: • 𝗦𝘁𝗮𝘆 𝗜𝗻𝗳𝗼𝗿𝗺𝗲𝗱: Monitor developments in Congress. • 𝗥𝗲𝘃𝗶𝗲𝘄 𝗖𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲 𝗣𝗹𝗮𝗻𝘀: Be prepared for potential changes. Let's keep our community informed. Feel free to share this post and comment with your thoughts on how you see this potentially impacting our industry. #CMMC #Cybersecurity #GovCon #DoD #Compliance #NIST800171 #Congress #RegulatoryUpdates

9

1 Comment

Ensuring Compliance: Aegis Cyber Defense Systems’ Commitment to Government and Industry Standards In today's highly regulated landscape, maintaining compliance with both governmental and industry-specific cybersecurity standards is not just a requirement—it's essential for safeguarding operations, protecting sensitive data, and avoiding costly penalties. At Aegis Cyber Defense Systems, we understand the complexity of regulatory frameworks and how vital they are to businesses, especially for government contractors, critical infrastructure sectors, and enterprises handling sensitive information. Why Compliance Matters Aegis Defender Pro not only provides cutting-edge cybersecurity solutions but also ensures that our clients meet their regulatory obligations. Our platform is designed with compliance in mind, automating security protocols that align with major regulatory requirements. Here’s how we help organizations stay compliant: Comprehensive Logging and Monitoring Our platform provides continuous logging of all network activities, ensuring that your organization can meet the audit and reporting requirements set by compliance standards. Detailed logs are essential for demonstrating adherence to regulatory guidelines and for identifying any unauthorized access attempts in real time. Real-Time Auto-Mitigation Aegis Defender Pro’s auto-mitigation feature ensures that your network is always protected against emerging threats, in line with the latest security recommendations. When a malicious IP or CIDR is identified, it is blocked across all your network’s firewalls within minutes, ensuring compliance with regulations that mandate immediate threat response. Centralized Control and Reporting Our platform provides a centralized dashboard that allows organizations to monitor their compliance status across all endpoints. Whether it’s patch management, firewall updates, or network segmentation, you can track everything in one place. This centralized control is invaluable for audits and assessments, making it easier to provide proof of compliance. Crowdsourced Security for Enhanced Compliance With every Aegis client contributing to our Master Block List, your organization benefits from a community-based defense system that not only secures your own network but also strengthens the collective defense. This proactive approach ensures that threats are identified and mitigated before they can affect compliance measures. Read more: https://lnkd.in/ePT5k8Xx

6

#Cyber #riskmanagement is vital for protecting the nation’s data assets from cyber adversaries. Yet the US GAO office uncovered security gaps in risk management as the agency analyzed the effectiveness of the 2023 National Cybersecurity Strategy. Read more from Qualys CISO Jonathan Trull in Federal News Network. https://lnkd.in/eW5Mdqyp

14

looking forward to this Conference and having great conversations about Cybersecurity and Compliance.

6

DISA Expands Thunderdome Zero Trust Program Deployment; Brian Hermann, Quoted. ExecutiveGov discusses the Defense Information Systems Agency's (DISA) expansion of the Thunderdome zero trust program. In 2023, the program was deployed to 15 sites and plans are underway to extend it to 60 more sites in 2024. The program involves four key components: 🔐 Customer security stacks 🔗 Software-defined wide area networking 📴 Secure access service edge capability, and 💯 Application security stacks. Brian Hermann, DISA's director of the cybersecurity and analytics directorate, emphasized the program's role in advancing zero trust architecture, which is crucial for organizational security. DISA has also finalized the contracting process to support the U.S. Coast Guard’s network security improvement efforts through Thunderdome. Versa Networks is at the forefront of enhancing cybersecurity with their pivotal role in DISA's Thunderdome project. Their cutting-edge solutions are setting new standards in securing our nation's digital infrastructure. For more details, you can read the full article here:-https://lnkd.in/dNvErjXS #DISA #Thunderdome #ZeroTrust #Cybersecurity #versanetworks #channelpartners

2

1 Comment

The Cybersecurity Maturity Model Certification 2.0 was just released! So, if you work with controlled unclassified information (CUI) or federal contract information (FCI), then you have to meet one of three levels of CMMC compliance, depending on the sensitivity of the information. Message myself or Alexander Cybersecurity Solutions to learn more about how we can help assess/audit your information security program, be it CMMC or any other compliance mandates! Oh yeah, and once you’ve done this go back to your insurance provider for better rates and lower premiums no that the security gaps are tried up and a program is in place to keep it up to date. Or, ping Charlie Stenger and he’ll be happy to help get you the best cyber insurance package possible. All the best! #compliance #audit #assessment #federal #contractors #riskmanagement #resilience #cybersecuirty #GRC

18

1 Comment

Join Bridget Wilson, CISSP, CMMC RP, Neil K. Jones, and me TODAY for the latest #CMMC updates you don’t want to miss! Got specific questions or topics you’re curious about? Let me know, and we’ll cover them. This session has actionable insights to help you navigate this pivotal moment in compliance and cybersecurity. Don’t miss out—let’s get informed and prepared together! #Cybersecurity #CMMCUpdates #StayAhead

16

2 Comments

Attending #WEST25? Swing by booth 526 to see Arthur Ford and Haley Ruiz to learn how Tricentis is working with the #Navy and the rest of the #DoD to implement #softwaretestautomation in support of #ERP, #devsecops, #agile, and #modernization initiatives. #SAP #Oracle #SFDC

10

The increasing relevance of data sanitization in classified data environments...

23

1 Comment

🌟 Proud Partnership! NetCentrics is thrilled to partner with the Air National Guard to enable ANG’s cloud missions and cloud threat hunts and enhance security! Washington Air National Guard and Maryland National Guard are the first to receive these new capabilities.   Our innovative solution Wraith® seamlessly integrates with existing cloud and on-premise architectures, reducing overall costs and training duration ─ while supporting readiness and agility of Cyber Protection Teams (CPTs).    This collaboration not only strengthens ANG’s cyber defense capabilities but also sets a new standard for the Department of Defense.   Together, the ANG and NetCentrics are making strides in securing critical mission assets and workloads across multi-cloud environments.    Read the press release: https://lnkd.in/eirq3V8f #Partnership #CyberDefense #CloudSecurity #DoD #ANG

22

1 Comment

This October marks the 20th anniversary of Cybersecurity Awareness Month! 📲🔐 In 2004, The Department of Homeland Department of Homeland Security and the National Cybersecurity Alliance recognized the lurking digital risks in an age of constant connectivity. As a result, they launched Cybersecurity Awareness Month, an initiative endorsed by President GW Bush. This program was designed to educate the nation about both the risks AND the necessary prevention measures for safely navigating the digital world.🌐 Cybersecurity Awareness Month has evolved into a collaborative effort between government and industry that not only increases public understanding but also inspires action, fosters ongoing discussions, and emphasizes the importance of digital safety.🛡️ #CybersecurityAwarenessMonth #StaySafeOnline #DigitalSafety

9

1 Comment

With an increase in consumer banking done online post-pandemic, and the current geopolitical situation, it’s important for the Public and Private sectors to share threat intelligence to stop bad actors and Secure the Internet.

5