There is no one-size-fits-all approach to developing an insider threat program.  Every insider threat program must take into consideration the unique threats that are particular to that organization.  For example, a government agency might be most concerned with the unauthorized disclosure of sensitive or classified information while a financial institution might be more concerned with theft or fraud. 

Zero Trust remains one of the key buzzwords in cybersecurity, and virtually every article, briefing, or marketing slick about zero trust talks about the importance of implementing multi-factor authentication (MFA). Single factor passwords have been asserted to be “broken” for years, with documented proof that attackers are able to successfully hack passwords regardless of complexity, length, and change frequency. Furthermore, passwords have become increasingly difficult for both users and organizations to manage. Well-designed MFA technologies, especially when paired with a mobile device or other token, address both the security risks and usability concerns without adding the complexity that limited the deployment of end user public key infrastructure (PKI) digital certificates.

Acting CDO Carlene Lleto is working on eight priority domains that include immigration, law enforcement and cybersecurity. The need for CDO offices was revealed during the COVID-19 pandemic. DHS launched a department wide COVID 19 vaccination campaign in partnership with Department of Veterans Affairs health center. The problem arose when DHS needed to get in contact with workers and it required “extensive time and effort to collecting and reconciling many different datasets from across the department”.

In a world where news spreads fast and online reputation is everything, cyber-attacks and data breaches are a massive threat to organizations across the world. Data breaches are among the top three threats to global stability and the average cost of a data breach is $3.86 million. Aside from the financial costs, reputations take a big hit and some never quite recover. When the overall costs of insufficient security are laid out, it’s clear that a solid cybersecurity strategy is crucial to every organization and a healthy cybersecurity budget is worth the investment.

Myth #1: You can prepare for a CMMC Audit by comparing cybersecurity posture to NIST SP 800-171 controls. 

Facts: Beware of ads and case studies citing CMMC experience based on NIST SP 800-171 readiness assessments. Conducting NIST SP 800-171 assessments is different from conducting CMMC readiness assessments. 

The CMMC Accreditation Body (AB) has announced that assessors should be using the most current version of the CMMC in their readiness assessments. Authorized assessors will be designated by a Certified 3rd Party Assessor Organization (C3PAO) badge. 

During the present-day digital transformation, cybercrime is becoming the number one form of criminal activity. “43% of online attacks are aimed at small businesses” and many aren’t prepared to defend themselves during these attacks! It is recommended that small business owners look into privacy programs to help support and protect vital information. When owning a business I’m sure the last thing you’re thinking about is someone hacking into your computer system when you’re busy catering to customers and clients needs.

When I stop to think about it, preparing for the holidays is a lot like preparing to encounter an insider threat; if you fail to plan, you plan to fail.  Yes, I know that is an old clichéd saying, but however cheesy it may be it is still true.

Cybersecurity, also referred to as information security, cybersecurity refers to the practice of ensuring the integrity, confidentiality, and availability (ICA) of information. Cybersecurity is comprised of an evolving set of tools, risk management approaches, technologies, training, and best practices designed to protect networks, devices, programs, and data from attacks or unauthorized access.

Controlled Unclassified Information (CUI) is a term that has begun to gain wider traction in the federal sphere as agencies face more scrutiny over privacy concerns and the handling of sensitive information. CUI serves as a label to simplify the ways that information is safeguarded and shared both within and amongst Executive Agencies and their customers.

Federation seems like such a great idea. Do the work once to perform identity proofing and issue a single credential for the user to manage, then allow the use of this single credential to access multiple resources spread across the Federal government.

With 5G comes a host of new innovation: Greater precision and improved reaction times in drones and autonomous vehicles, new wearable tech with additional features, advances and greater adoption of Internet of Things (IoT) devices and smart city developments, and remote healthcare.

It is not uncommon for cyber professionals to have a difficult time conveying to people unfamiliar with cybersecurity the ways in which to consider protection of their data. 

In this age of growing inter-connectivity, more and more businesses are choosing to rely on virtual services for convenience and efficiency. However, these practices put a firm in the crosshairs of a cyber-attack.  Based on the analysis of thousands of real-world incidents, Verizon found that in 2018, 53,308 cyber-security incidents have been recorded. 

NIST Special Publication 800-63B Digital Identity Guidelines, Authentication and Lifecycle Management includes choices of authenticators that may be used at various Authenticator Assurance Levels (AALs) for use by the US Federal Government.  Authenticators are used to authenticate a user to a resource’s access control mechanism.  Examples of authenticators include credit cards with chips, US Federal Government Personal Identity Verification (PIV) cards and DoD Common Access Cards (CACs).  NIST Special Publication 800-63B Digital Identity Guidelines (NIST SP 800-63B) helps standardize AALs to enable organizations to authenticate each other and share resources.

Spectre and Meltdown are attacks on computing systems that exploit characteristics inherent to most modern computer processors.  Specifically, Meltdown is recognized to affect Intel and ARM processors, while Spectre is known to affect Intel, AMD and ARM processors.

The Return of Coppersmith’s Attack (ROCA) is a recently discovered vulnerability in a cryptographic library used in some Infineon Technologies AG chips. It enables an attacker to practicably determine an RSA private key given an RSA public key. Quantum computers, while still in their infancy, will one day be capable of finding private keys like those used in RSA and other asymmetric cryptographic algorithms. So why should one care? Both the ROCA vulnerability and quantum computers are a threat to systems and processes that rely on asymmetric cryptographic algorithms.

Quantum computing is a futuristic way of computing. Presently in its infancy, the technology involves the use of qubits which are atomic sized memory units. Qubits can hold multiple values simultaneously and enable efficiencies in parallel computations. With a sufficient number of qubits working together as part of a quantum computing device, some believe that such a device will obtain quantum supremacy.

Today, information is being produced by and shared with billions of people and machines and around the world. Much of this environment is filled with information that owners are willing to share with others. But much proprietary and private information is not being so freely shared – and for good reason.

PKH Enterprises is currently looking for qualified policy, IT, and security professionals with active security clearances to support existing government contracts.

Asset protection and insider threat programs can help keep your critical data and intellectual property safe from theft or compromise.

From high-level strategic plans to detailed implementation plans, our program and project managers will help you succeed.

We are a leader in developing innovative and cutting-edge technology solutions for converting policy into action.  At PKH, we have invested significant time in building manual compliance systems, performance measurement tools and governance processes to assist in the implementation of policy.

Oratio albucius scaevola cu eum, ut usu malis novum detraxit. Nam ea veritus constituto persequeris. Ut mea duis meliore signiferumque, cu graeci salutatus contentiones eum, pro laudem fabulas id.

In est nisl utroque, atqui albucius scaevola te cum, vel et illud augue. Eu nec quodsi sanctus nonumes.

At PKH Enterprises, we understand that, within the federal government, meaningful collaboration and effective program implementation are often dependent on the utilization of an empowered governance structure.  New programs and new technologies present federal departments and agencies with challenges that require coordinated solutions.

At PKH Enterprises, we offer a full spectrum of experienced staff including certified project managers. Our certified PMPs possess experience with tried-and-true methodologies and knowledge of new management strategies, allowing them to apply the most effective approach to an organization’s most complicated challenges.

At PKH Enterprises, we understand that, within the federal government, meaningful collaboration and effective program implementation are often dependent on the utilization of an empowered governance structure.  New programs and new technologies present federal departments and agencies with challenges that require coordinated solutions.

At PKH Enterprises, we have a wealth of knowledge and success in the field of policy development.  We develop customized policy solutions to mission-critical issues that address the challenges presented by rapidly evolving technologies and adapt to changing national and departmental priorities.

The ICAM Program Manager is an ICAM expert with a knack for program management. He/She will head a team, direct technical efforts, and be responsible for overall program management including staffing and budgeting.

The Project Manager is a team leader. He/She establishes goals, prepares long- and short-term plans, manages team members, and makes sure that projects are finished satisfactorily and on time.

This is the short description or summary of the content of this post.