By George Romas I previously wrote about the various “functional areas” of continuous monitoring. According to the federal model, there are 15 functional areas comprising a comprehensive continuous monitoring solution, as shown in the graphic below: These functional areas are grouped into the fo...
By Bob Gourley The Security Analysis and Risk Management Association (SARMA) and the Military Operations Research Society (MORS) are partnering to help advance the body of knowledge around global supply chain risk management on 5 and 6 May. Please see the details below and click here to register. Pl...
By Bob Gourley One of my personal and professional IT heroes is Bob Bigman. He rose to senior leadership ranks in the IC by an ability to continuously learn and think and act and execute on hard tasks very well. He served as the CSO for CIA and since retiring from there has continued to […]...
By Dawid Czagan The goal of risk management is to deliver optimal security at a reasonable cost. This article introduces quantitative risk analysis, cost/benefit analysis, risk handling, and types of countermeasures. The CIA Triad Risk is related with vulnerabilities, which threaten the confidential...
Editor’s note: this is part of our series on FedCyber Summit sponsors. We especially appreciate our sponsors. They show a great appreciation for the federal cyber security mission and we want to bring attention to them here as a way of showing our gratitude. About HP ESP: Enterprises and gov...
By BobGourley What will our collective technological future be like in 2013? The answer, of course, depends a great deal on what actions we take to make our future. But the answer also depends on many other factors, including mega trends that are transforming entire industries. We recently reviewed ...
By RyanKamauff Here are the top cyber news and stories of the day. NIST publishes IT supply chain risk guidance – Supply Chain Risk management will be a growing concern as we continue to source almost all of our silicon and technology from foreign countries. The NIST document “calls ...
By RyanKamauff Here’s today’s top cyber news and stories. Rob Carey, deputy DoD CIO, said on Tuesday – “Security is a game of risk management. If you have that sorted out, then you should be able to derive some savings because you’ve virtualized your computing enviro...