Two years after the White House issued an executive order creating a national strategy for artificial intelligence, agencies are moving past pilot projects and are looking for the next level of AI in government. Although some of the most visible projects are at NASA, DOD and IRS, many agencies are working on developing AI projects that support services, improve mission effectiveness and decision making and automate repetitive tasks. There is a...

In October of 2020, then-Defense Secretary Esper defined defense readiness as "our military’s ability to answer the nation’s call, and to fight and win, anytime, anywhere. … The question we must answer is this: if called upon to fight tonight, are we ready?" Ensuring that answer is "yes" demands change in every corner of the Department of Defense, and especially in the technology that will power tomorrow's military. Cybersec...

The federal government has been working to update its policies, architectures and frameworks around digital identity for some time. OMB revised its Identity Credential and Access Management guide in May of 2019 and that National Institute for Standards and Technology has been working on an updated version of its guidance on security and privacy controls for information systems. Then, the pandemic hit, and all programs went into overdrive as ag...

IT modernization has been a federal priority for years, but many agencies still struggle to turn that goal into a practical plan of action. Securing multi-year funding is one challenge, but the fundamental obstacle is often the sheer complexity of transforming government-scale systems. Smart, successful modernization demands a holistic approach that addresses several essential pillars: security, network infrastructure, multi-cloud architecture...

Most government agencies have made the journey to cloud since the Cloud First and Cloud Smart strategies came from OMB starting in 2010. Many organizations have more than one cloud. The challenge becomes blending the different types of cloud and service models to provide access to needed data, while at the same time protecting a much enlarged attack surface created by the large number of workers who are accessing the data remotely. If there is...

OVERVIEW By the beginning of 2021, NIST will have released the finals of many Risk Management Framework (RMF) standards: SP800-53 Rev 5 – Security Controls SP800-53B – Security Control Baselines, Privacy Framework SP800-160 Vol 2 – Systems Security Engineering SP800-161 Rev 1 – Supply Chain Risk Management SP800-171 Rev 2 – Controlled Unclassified Information (CUI) and High Valued Assets (HVA) Revisions to the NIS...

Eight years in, the Continuous Diagnostic and Mitigation program has matured and broadened its offerings significantly. The focus now is on deploying a threat intelligence framework for governmentwide use, integrating the AWARE risk-scoring algorithm and rolling out of security orchestration automation and response (SOAR) to automate vulnerability detection and defensive cyber operations. More extensive and sophisticated use of data in dashboa...

The Federal Data Strategy's action plan was reworked in response to the COVID-19 crisis, while state and local governments are simultaneously expanding health data initiatives and looking for more cost-effective data solutions. Add in the growing importance of data-intensive cyber threat detection and the broad potential of AI and automation, and it becomes clear: Agencies' data challenges are evolving rapidly, and a solid data strategy is mis...

Transforming the IT infrastructure for an agency is a complicated task that requires coordinated and effective decision making, buy-in from key executives and detailed data and security strategies -- not to mention funding for new technology or the move to managed services. This FCW Summit will discuss new policies and guidance that will govern these changes. In addition, agencies that are well into their modernization journey will share lesso...

First floated as an idea in 2010, the Federal Risk and Authorization Management Program was officially launched in 2012 as a government-wide program to secure cloud products and services. A recent audit by the General Accountability Office showed that more than 900 government cloud projects have been authorized by FedRAMP, but hundreds more continue to operate without authorizations, which presents a kaleidoscope of security challenges to the...