Mike Miller

would like to see a little bit more stick, but its a start (still a slow process) Receiving AOs have the right to refuse participating in reciprocity with another organization due to insufficient content demonstrating an informed understanding of the security posture, risk assessment of the system, and the rationale for the risk determination as defined on the RMF KS, or due to excessive risk to the enclave or site, as determined by the site AO. However, the Receiving AO must document and report this refusal to the Granting organization’s AO within 10 business days. If a refusal does occur, both organizations will continue to work, and re-work, the ATO package to reach an agreement, if at all possible. When AOs cannot reach an agreement to leverage re-use and reciprocity, both parties must use the following resolution process to gain assistance in resolving the impasse: 1. If a conflict arises, due to reciprocity refusal there should be an attempt to resolve it at the AO level. This could include, but not limited to, the Granting AO conducting new assessments. 2. If the conflict cannot be resolved at the AO level, the RMF TAG Secretariat will be notified and the RMF TAG Chair will attempt to mediate the dispute as appropriate. 3. If the RMF TAG Chair cannot reach a resolution, the issue will be taken to the AO Council, chaired by the DoD CISO, who will serve as a mediator for the dispute. 

20

𝐓𝐮𝐫𝐧 𝐘𝐨𝐮𝐫 𝐌𝐢𝐥𝐢𝐭𝐚𝐫𝐲 𝐄𝐱𝐩𝐞𝐫𝐢𝐞𝐧𝐜𝐞 𝐈𝐧𝐭𝐨 𝐚 𝐒𝐭𝐚𝐧𝐝𝐨𝐮𝐭 𝐑𝐞𝐬𝐮𝐦𝐞—𝐖𝐞’𝐯𝐞 𝐆𝐨𝐭 𝐘𝐨𝐮 𝐂𝐨𝐯𝐞𝐫𝐞𝐝 💼✍️ To all transitioning service members, whether you’re leaving the US Navy, US Army, United States Marine Corps, United States Air Force, United States Space Force, or the U.S. Coast Guard, your next mission starts here. Mission to Commission Inc is offering complimentary resume reviews through the end of the month to help you translate your military experience into civilian success. 💡 📩 Simply reach out with your resume via the email below and the type of job you’re seeking. If you’re unsure, that’s okay—we’re here to help you find your path. Contact us at [email protected] for personalized support. Follow us and share this message to connect more veterans with the tools they need. We are here to set you up for success! 🚀 #Veterans #ResumeSupport #CareerTransition #MissionToCommission #VeteranCareers

10

3 Comments

🇺🇸🆔 U.S. Department of Homeland Security (DHS) Awards Contracts to Innovate Digital Credential Privacy The DHS Science and Technology Directorate (S&T) has announced government contracts awarded to Credence ID, Hushmesh, Netis d.o.o., Procivis, SpruceID, and Ubiqu. These contracts are aimed at developing privacy-enhanced technologies for digital versions of credentials used in immigration and travel, allowing users to store their information securely in digital wallets. Anil John, Technical Director of S&T’s Silicon Valley Innovation Program (SVIP), emphasized the importance of these developments, stating that the new capabilities will ensure secure storage and proper verification of credentials while preserving individual privacy. This initiative supports the DHS’s role as a primary issuer of critical credentials such as those for cross-border travel, employment eligibility, and citizenship. Jared X. Goodwin, Acting Chief of the Program Management and Data Division at U.S. Citizenship and Immigration Services (USCIS), highlighted that digital credentials and secure digital wallets meet the public’s expectations for convenience and security in a digital age. The standards for these digital solutions, developed by the World Wide Web Consortium (W3C), ensure global interoperability, accessibility, and privacy. The awards stem from the DHS Privacy Preserving Digital Credential Wallets & Verifiers solicitation, reflecting the department's commitment to enhancing service delivery while protecting privacy. This solicitation builds on previous efforts to address the vulnerabilities of paper-based credentials. Each selected company will receive up to $1.7 million across four SVIP phases. The awarded projects and their respective innovations are as follows: - Credence ID (Oakland, CA 🇺🇸 ) received $199,140 to adapt its existing identity verification technology to support W3C standards, allowing for a simple software update to current hardware readers. - Hushmesh Inc. (Falls Church, VA 🇺🇸 ) was awarded $199,430 to incorporate cryptographic security and zero-trust principles into its Mesh technology, enhancing key management for digital wallets. - NETIS Group (Ljubljana, 🇸🇮 ) received $198,849 to enhance its MIDVA platform, supporting organizational onboarding and credential verification through a Fleet Management Platform and Mobile Verifier App. - Procivis AG (Zurich, 🇨🇭) was awarded $187,285 to improve its Procivis One platform, making it more flexible and capable of handling various types of digital credentials. - SpruceID (New York, NY 🇺🇸) received $199,960 to advance its software for creating secure, verifiable digital credentials suitable for multiple sectors. - ubiqu (Rotterdam, 🇳🇱 ) was awarded $197,961 to integrate its Remote Secure Element technology, ensuring user control and secure recovery solutions for digital credential services Link to DHS media release in first comment

46

2 Comments

First responders need #connectivity to do their jobs. Hurricane Helene and its brutal aftermath demonstrated this urgency—for alerting residents of imminent danger, organizing rescue missions, and coordinating for recovery.  Jade Communications recently launched SmartTown, making them the first ISP in their region to provide first responders with free, secure, and reliable Wi-Fi through their state-of-the-art network. In addition, Jade partnered with San Luis Valley Health, the only in-patient hospital serving the massive 8,000-square-mile San Luis Valley, to offer its medical teams access to Wi-Fi wherever they go, at no cost to them.     And when packaged together with solar poles, SmartTown can be a vital component during times of natural disasters, providing critical connectivity to a community when the rest of its infrastructure has been destroyed.     Learn more about Jade’s efforts to support first responders and hospitals: https://lnkd.in/eY4EiuTz     #NaturalDisaster #Broadband #Reliability 

8

Join Fedmine, a GovSpend solution, for an informative session on how to use Competitive Intelligence to win more this Thursday, May 16th at 12 EST. I personally am thrilled to have Jacob George take us through some important elements, and more specifically how to use the data! #govcon #smallbusiness #webinar

4

1 Comment

Interested in #AI or Autonomous Systems? Then check out this article by Axios on my company's CINO.

6

What is Data Readiness? Reposting and amplifying my comment to highlight two points about CORAS: First, CORAS maps to Department of the Navy Chief Information Officer (DON CIO) Information Superiority Vision 2.0 uniquely by securely optimizing a range of bread-and-butter PEO and PM decisions: POM, UFRs, divestments, modernization, data call response, program oversight, S&T portfolio management… This makes current data orders of magnitude more useful for each decisions. Our SmartLane, SmartList, SmartBoard, AI NLP, What If, Driver Trees, and Data Chain features are interconnected in a matrix of value that grows the more you use it. Second, CORAS also creates rich new data, making a new class of decisions available. This includes our AI and ML and applies especially to complex data-to-decision workflows such as mission thread development, Agile Combat Employment, rapid tech insertion, SCRM, and Vanguard investments to cross the “valley of death.” CORAS SaaS does by of these things with a community of amazing and successful customers, and by building on what works already. Standard reporting tools like PowerBI and Qlik become even more useful, as CORAS gives the program workforce more tools to enrich and clarify the picture leaders want to see. Data Readiness is about optimizing data for the decisions you want to make, both bread-and-butter and more advanced stuff. As Justin Fanelli said clearly this week, we are all racing to the Davidson Window (look it up!) and have no time to waste. #LFG

2

This would show great progress and open more doors! Forward thinking organizations are exploring the significant funding available for Cyber registered apprenticeships! Our Apprenticeships are tied to employment outcomes. #skillstorm Suzette Kent #skillsbasedhiring #cyber #cybersecurity #apprenticeships #cybersecurityapprenticeships #funding #skillsgap #Veterans #underrespresented #instructorledtraining #RTI #federal #employmentoutcomes #DOL #awscloud #awsdevops #javamicroservices #fullstackdevelopment #cybersocanalyst #penetrationtesting

2

1 Comment

Three words I use when describing my company's #DigitalEnginerering solution, ReadyOne: award - winning, rapid, and transformative. Visit SAIC at #SMD2024 to learn how ReadyOne can level up your digital engineering journey.

2

The American Society of Military Comptrollers (ASMC) Professional Development Institute (PDI) 2024 is next week, working to build unity in the defense financial management community. Swing by booth 202 to talk about truly automating your internal controls, audit, and risk management programs. https://lnkd.in/gg5iHjpu #PDI2024 #PDIdfm #ASMC #DefenseFinancialManagement #DefenseFM #ERM #RiskManagement #audit #internalcontrols

25

Hear from Connor W. Norwood, PhD, MHA and Timothy McFarlane on challenges they faced in their journey to modernization and their best practices to set your agency up for success Also, learn more about specific use cases addressed with the Databricks platform in this webinar.

8

In IT operations, true success is when no one knows you exist. #BoozAllen Vice President, Franco Susi, discusses how large federal civilian agencies can prepare for significant #ITOps programs and move towards a proactive IT Ops posture through #AI Ops. https://bit.ly/3VPvoUX

76

4 Comments

Where's the Beef? I mean Data! Defense Information Systems Agency (DISA) leaders emphasized the importance of transparency and relevance in AI pitches! DISA advised vendors to avoid using AI just for the sake of it and instead focus on how AI features work and the data they were trained on! The key takeaway: AI solutions must be mission-specific and backed by solid, well-curated data! https://lnkd.in/eys_DJ8W Steve Wallace #Rocks Sydney Freedberg Breaking Defense #AI .

3

Enjoyed this report from the Office of Local Defense Community Cooperation (OLDCC). Really interesting how Fed defense initiatives impact state and local economies. Intriguing to see that states like Hawaii and Alaska exceed the average economic impact despite lower overall funding. And New York is a top defense contract recipient but not among the top states for total defense spending. Great read!

8

Not sure how to implement NIST’s SSDF? DigiCert's webinar on Compliance & Security Automation Within Federal Software Supply Chains is available now. Watch on demand ⬇️

7