Faced with growing ransomware threats, phishing attempts and more, the Department of Veterans Affairs is reevaluating what it means to be “secure” in a hybrid environment. VA CISO Lynette Sherrill outlines the agency’s cybersecurity strategy and emphasizes the importance of identity management through multi-factor authentication and least privileged access to secure critical IT systems and veteran data.

Upon the release of the White House’s new National Cybersecurity Strategy, federal IT and cyber leaders reviewed current cyber risks and strategies at GovCIO Media & Research’s first in-person event of the year, CyberScape: Insider Threats. Managing hybrid cloud security vulnerabilities, reducing technical debt, limiting the spread of shadow IT and securing open-source software were major talking points.

Drawing on her experience as a CTO in the private sector, Assistant National Cyber Director for Technology Security Anjana Rajan centered national discussions around open-source software security against the backdrop of the Russia-Ukraine war. Rajan identified risk drivers and solutions for bringing cybersecurity to the forefront of IT per the Biden administration’s new National Cybersecurity Strategy during the closing fireside chat of GovCIO Media & Research’s CyberScape: Insider Threats event.

The Enduring Security Framework, a public-private partnership with NSA as its executive secretariat, released a new product examining the benefits, security risks, deployment, and benefits of 5G network slicing. Based on the previously published work “Potential threat vectors to 5G infrastructure,” the new document provides an executive overview of the risks involved with deploying network slicing, including potential management strategies. Learn about the Enduring Security Framework, the work they do, and their assessment of the threats to a network slice and the 5G infrastructure as a whole.

With a challenging maritime computing environment, the Coast Guard supports several missions for the departments of Defense and Homeland Security. Assistant Commandant for C4 & IT Rear Adm. Christopher Bartz discusses his workforce, cybersecurity and tech priorities, including how he’s approaching the service’s own take on interconnected data systems akin to DOD’s JADC2 as well as a new software factory.

CISA’s Joint Cyber Defense Collaborative (JCDC) announced a 2023 planning agenda to stay ahead of persistent cybersecurity threats to federal agencies, such as supply chain risk and open-source software. Learn why these threats are so high profile and how federal agencies across defense, health and civilian sectors are working together to share critical information about cybersecurity risks and incidents. Don’t miss a fascinating tangent where we decide which superhero represents which federal agency.

As the Coast Guard prepares to launch its first software factory later this year, Deputy CIO Brian Campo discusses how his prior experience as CTO for the Department of Homeland Security prepared him to lead the Coast Guard into a more cybersecure future with zero trust, a continuous authorization to operate (cATO) approach and a strong foundation in data management strategies.

Cybersecurity will always be a critical issue. In 2022 federal agencies developed targeted strategies and frameworks to stay ahead of the evolving threat landscape. Our hosts reflect on the top news and trends of last year, including new zero trust strategies out of the departments of Defense and Veterans Affairs, evolving tech and cyber workforce frameworks, plans to combat ransomware and more. Plus we discuss how these efforts will pave the way for progress in 2023.

The Vulnerability Disclosure Program (VDP) is the youngest directorate within the Defense Department (DOD) Cyber Crime Center. Established in 2016, it's the sole focal point for receiving all vulnerability reporting at the agency, and it is uniquely positioned as it engages private-sector white hat researchers to support its mission. In January 2021, it expanded its scope from only public-facing websites to all publicly accessible DOD information systems. VDP Director Melissa Vice briefs how the program engages the security research community to strengthen network defenses, highlights the recent year-long pilot program for the Defense Industrial Base, and talks through her priorities for the coming year.

Global dependence on technology blurs the lines between national and cybersecurity, elevating the importance that consistent collaboration and information-sharing has in the industry. ODNI Director of Cyber Threat Intelligence Integration Center Laura Galante discusses the prevalence of disinformation and how the rapidly shifting cyber landscape impacts the intelligence community.