With cyberattacks on the increase at all levels of government, The White House issued a new executive order at the end of January that requires agencies to have a zero trust architecture in place by the end of FY 2024. The Office of Management and Budget followed with a memorandum (M-22-09) that laid out the requirements agencies must meet and the deadlines for completing the tasks outlined in the document. OMB identified five areas of focus--...

4, ba Cybersecurity is one of the biggest internal control areas that need executive attention. You just received an urgent call from the CEO. An e-mail was received demanding $10M Bitcoin to be paid as ransom to unencrypt the company's data. ​"Oh no! Maybe if we audited the organization's Cybersecurity program and controls before this happened, we might not be in this mess!" ​Sound familiar? Hundreds of Security, Compliance and Au...

4, ba Are your ITGC audits really helping to reduce your cybersecurity risks? This CPE internal auditor training event is designed for the financial auditor and IT auditor who need to improve their practical knowledge covering information technology general controls (ITGC). The attendees are walked through the concepts and frameworks that are important to the ITGC internal audit activities in order to create an added value for their organizati...

The nation’s defense systems and capabilities are challenged as never before-- on the ground, in the air, on the seas, in cyberspace and real space. The military must rise to those challenges on all those fronts to ensure the nation is secure. Information technology remains warfighters’ and defenders’ powerful primary tool for their jobs. From cloud computing, cybersecurity and artificial intelligence, to machine learning and...

When the National Artificial Intelligence Initiative Act became law at the beginning of 2021, it added resources and high level support for the government’s expansion of its pilot AI projects into large scale applications. A new AI Initiative Office was created at the White House to provide policy guidance and help speed the use of AI to leverage government data. The Government Accountability Office published its Federal AI Accountabilit...

From wildfires and hurricanes to increasing crime rates and the continuing pandemic, public safety organizations at all levels of government find themselves spread thin these days. However, a continued wave of technology innovations can help fill their need for better data, quicker response and effective delivery of services. The move of many public safety organizations to the cloud has opened new options for using and sharing operational data...

The COVID pandemic spurred agencies to move their data and applications to the cloud quicker than many had planned to make it more accessible for a remote workforce and to protect it from intensifying cyberattacks. More than a year into the new normal world of remote work, agencies are evaluating the best ways to secure the hybrid and multi clouds and their data troves to make sure it can meet the increased challenges. In May 2020, the Biden A...

To protect the health and safety of attendees, this event has been rescheduled due to COVID-19 concerns. New Dates: 10/19-10/21/2021 Presidential Policy Directive 21 (PPD-21): Critical Infrastructure Security and Resilience advances a national policy to strengthen and maintain secure, functioning, and resilient critical infrastructure. The Nation’s critical infrastructure provides the essential services that underpin American society. Pr...

OVERVIEW By the beginning of 2021, NIST will have released the finals of many Risk Management Framework (RMF) standards: SP800-53 Rev 5 – Security Controls SP800-53B – Security Control Baselines, Privacy Framework SP800-160 Vol 2 – Systems Security Engineering SP800-161 Rev 1 – Supply Chain Risk Management SP800-171 Rev 2 – Controlled Unclassified Information (CUI) and High Valued Assets (HVA) Revisions to the NIS...

Digital transformation is a holistic re-imagining of how companies, governments and organizations use technology, people and processes to deliver services or perform their mission. Through digital transformation, federal agencies look to deliver the same kinds of business or customer-focused digital experiences that are common in the commercial arena. The federal sector has been pursuing digital transformation for years through various avenues...