Jill Singer

would like to see a little bit more stick, but its a start (still a slow process) Receiving AOs have the right to refuse participating in reciprocity with another organization due to insufficient content demonstrating an informed understanding of the security posture, risk assessment of the system, and the rationale for the risk determination as defined on the RMF KS, or due to excessive risk to the enclave or site, as determined by the site AO. However, the Receiving AO must document and report this refusal to the Granting organization’s AO within 10 business days. If a refusal does occur, both organizations will continue to work, and re-work, the ATO package to reach an agreement, if at all possible. When AOs cannot reach an agreement to leverage re-use and reciprocity, both parties must use the following resolution process to gain assistance in resolving the impasse: 1. If a conflict arises, due to reciprocity refusal there should be an attempt to resolve it at the AO level. This could include, but not limited to, the Granting AO conducting new assessments. 2. If the conflict cannot be resolved at the AO level, the RMF TAG Secretariat will be notified and the RMF TAG Chair will attempt to mediate the dispute as appropriate. 3. If the RMF TAG Chair cannot reach a resolution, the issue will be taken to the AO Council, chaired by the DoD CISO, who will serve as a mediator for the dispute. 

20

Three words I use when describing my company's #DigitalEnginerering solution, ReadyOne: award - winning, rapid, and transformative. Visit SAIC at #SMD2024 to learn how ReadyOne can level up your digital engineering journey.

2

In IT operations, true success is when no one knows you exist. #BoozAllen Vice President, Franco Susi, discusses how large federal civilian agencies can prepare for significant #ITOps programs and move towards a proactive IT Ops posture through #AI Ops. https://bit.ly/3VPvoUX

76

4 Comments

We are witnessing a shift in American business operations that starts with cybersecurity at the very highest level of the federal government and trickles down to Main Street. To consider your next steps, ask yourself: • How close is my touchpoint to federal money? • What is our current security posture? • Does my weakest link—vendor or employee—know what to do when faced with a sophisticated scam? • Is cybersecurity protection less expensive than losses from a breach or hack? • How quickly might we need to provide cybersecurity as a qualification? If I were starting a business today, I would use the CMMC final rule as the standard to protect my company, data and people. Implementing even the most basic of the rule’s controls provides a level of protection that can buy time to budget for and implement more advanced security over the next year or two. To keep reading: https://bit.ly/3Ty9umY

9

Enhanced Visibility & Hardening Guidance for Communications Infrastructure CISA has released actionable guidance to help organizations bolster the security and resilience of critical communications infrastructure. * Enhanced Network Visibility: Tools and strategies to monitor and detect potential vulnerabilities. * Hardening Measures: Practical steps to fortify systems against evolving threats. * Proactive Defense: Best practices for mitigating risks to critical infrastructure. Secure your communications systems today and stay ahead of potential threats. Explore the full guidance here: https://lnkd.in/gADKtUPf #Cybersecurity #InfrastructureSecurity #CISA #Resilience

30

Its budget season for many A&D companies. Keep this in mind as you plan for next year: ‘DOD releases final rule for CMMC, setting the stage for implementation next year’ https://lnkd.in/egXXCDaT

22

The Department of Defense (DoD) is proposing changes to the Defense Federal Acquisition Regulation Supplement (DFARS) to implement updates from the National Defense Authorization Acts (NDAAs) for FY 2018, 2021, and 2022. These changes aim to refine requirements for contractors to submit cost or pricing data. Key updates include: 1. Higher Threshold for Certified Cost or Pricing Data: The threshold is raised to $2 million, reducing paperwork for smaller contracts while maintaining certification requirements for larger ones. 2. New Requirements for Non-Certified Data: Contracting officers can request "data other than certified cost or pricing data" to verify price reasonableness, making organized and transparent pricing documentation essential. 3. Application to Commercial Products and Services: The rules now apply to commercial items, including off-the-shelf products and services, requiring the same data submissions as traditional contracts. 4. Stronger Focus on Fair Pricing: Contracting officers have increased authority to scrutinize pricing data, even when certified data isn’t mandatory, emphasizing the need for clear, well-documented pricing justifications. The public comment period for this proposed rule ends on November 25, 2024, with comments accepted at Regulations.gov.

2

Watch this PW24 replay as the US Veterans Affairs discuss how both the renovation of legacy systems and embracing the program’s rapid growth led the IVC to vastly improved responsiveness of this critical program. https://pe.ga/4e2vyix

4

Interested in #AI or Autonomous Systems? Then check out this article by Axios on my company's CINO.

6

This would show great progress and open more doors! Forward thinking organizations are exploring the significant funding available for Cyber registered apprenticeships! Our Apprenticeships are tied to employment outcomes. #skillstorm Suzette Kent #skillsbasedhiring #cyber #cybersecurity #apprenticeships #cybersecurityapprenticeships #funding #skillsgap #Veterans #underrespresented #instructorledtraining #RTI #federal #employmentoutcomes #DOL #awscloud #awsdevops #javamicroservices #fullstackdevelopment #cybersocanalyst #penetrationtesting

2

1 Comment

This is just awesome!! Virtualitics awarded another key production contract supporting DOD force modernization priorities. Our AI-readiness applications within Automated Master Storage Planning (A-MSP) solution are igniting new capabilities for Ammo Troops and materiel storage planners - pivotal in transforming munitions assembly, sequencing movement orders & optimizing warehousing operations. #MissionAI #TeamVirtualitics #ReadinessApps #IntegratedReadinessOptimization #DefenseTech Learn more: https://lnkd.in/gQZBY92k

51

6 Comments

Can't wait to hear Hoke Smith share how Nuix #Neo and #AdaptiveSecurity map to the DoD ZT activities, along with Roman Arutyunov and Matthew Koehr from Xage Security share how they're helping DoD customers with their Zero Trust requirements. Four Inc. bringing best of breed technology to solve your pressing ZT challenges.

14

SUNY Albany's College of Emergency Preparedness, Homeland Security and Cybersecurity and the Center of Technology in Government is providing a webinar to share findings from research supporting effective emergency alerts and warnings. This may be of interest not only to public safety officials and emergency managers, but also to providers of public warning technologies. #emergencyalerting #emergencyalerts #IPAWS #crisiscommunications

2

Discover how advanced technologies like #AI and sophisticated modeling can help federal agencies tackle grand challenges and make faster, better-informed decisions. Read to learn more! #BoozAllen https://lnkd.in/ggge3dge

6