Supply Chain Risk Management (SCRM) and Cybersecurity Supply Chain Risk Management (C-SCRM) have gained increased attention recently as several high profile incidents compromised a number of federal systems. In the wake of those incidents, The White House, the Cybersecurity and Infrastructure Security Agency and the National Institute for Standards and Technology have all stepped in to provide new guidance and tools for agencies to improve the...

The Federal Risk and Authorization Management Program (FedRAMP), the government-wide plan to secure cloud products and services, is almost a decade old. It is still evolving, however. Early in 2021, the House of Representative passed a bill that would have codified a number of its provisions into law, standardizing its processes for agencies to on-ramp cloud computing technologies. To date, the Senate has not acted on the bill. At the same tim...

It’s been a decade since "Cloud First" was put forth as a formal goal of government. In that time, agencies have moved from wary experimentation to straightforward "lift and shift" efforts to, increasingly, enterprise as-a-service solutions. The question is no longer whether to leverage cloud servicers, but how best to do so. Yet as the easier moves to the cloud have been made, the remaining systems and workloads require decidedly more c...

SANS is committed to delivering high-quality cyber security training so you can keep your skills sharp and stay ahead of cyber threats. Join us for interactive training during SANS 2021 - Live Online (March 22-27, EST), and receive relevant, applicable training from wherever you are. Choose from over 30 interactive courses, plus three NetWars Tournaments delivered Live Online. SANS Live Online events offer live-stream, instructor-led cyber sec...

High-value penetration testing doesn't involve just throwing a bunch of hacks at a target environment and declaring victory when a shell prompt magically pops up. Instead, the best penetration testers focus on understanding their craft in-depth, providing significant value to organizations by improving their security stance through technical excellence and implementation of a well-understood and repeatable methodologies, which will deliver rea...

SANS is committed to delivering high-quality cyber security training so you can keep your skills sharp and stay ahead of cyber threats. Join us for interactive trainings during SANS Cyber Security West 2021 - Live Online (Feb 1-6, PST), and receive relevant, applicable training from wherever you are. Choose your course and register now for practical training taught by top industry practitioners. SANS Live Online events offer live-stream, instr...

Defending against attacks is an ongoing challenge with new threats emerging all the time. Are you looking to quickly level up your blue team skills? Do you want to enhance your current skill set and become even better at defending your organization? Are you looking for the latest ways to mitigate the most recent attacks? SANS Stay Sharp: Blue Team Operations 2021 - Live Online (Jan 18-22, MST) offers short courses designed to equip you with cy...

At SANS, our mission remains steady. We continue to deliver relevant cyber security knowledge and skills, empowering students to protect people and their assets. Join us online for SANS Security East 2021 - Live Online (Jan 11-16, CST), and continue to build practical cyber security skills you can implement immediately. Choose from over 20 courses taught by real-world practitioners, plus two NetWars Tournaments delivered Live Online. SANS Live...

SANS Cloud Defender 2021 – Live Online (Jan 11-16, EST) provides immersion training designed to help you master the practical steps necessary for defending systems and applications in the cloud against the most dangerous threats. The courses are full of important and immediately useful techniques that you can put to work as soon as you return to your office. Register now for interactive training taught by top industry practitioners. SANS...

Discover the most effective steps to prevent cyber-attacks and detect adversaries with actionable techniques you can apply immediately. Join us for SANS Cyber Defense Initiative® 2020 - Live Online (Dec 14-19, EST), and receive relevant cyber security training from real-world practitioners. Choose from over 35 interactive courses taught by industry experts, plus three NetWars Tournaments delivered Live Online. SANS Live Online events offer...