Tag Archives: cloud security

Anne Neuberger, director of the cybersecurity directorate at the National Security Agency, said NSA plans to publish updated cloud security guidance for companies by the end of 2019, the Wall Street Journal reported Tuesday.

The General Services Administration and National Institute of Standards and Technology are working to implement automation in review procedures for the Federal Risk Authorization and Management Program, the Federal News Network reported Tuesday.

The Department of Defense is working on security guidance to prepare for cloud deployment once the Joint Enterprise Defense Infrastructure contract is awarded, FedScoop reported Thursday.

Beau Houser, the incoming chief information security officer of the Census Bureau, said he looks forward to addressing the challenge of safeguarding the technological platforms behind the 2020 population count, Federal News Radio reported Thursday. 

Dan Jacobs, a security expert at the General Services Administration, said agencies should deal with cybersecurity with a focus on people and processes as they transfer workloads to the cloud, Nextgov reported Thursday. “Many of the problems we face as a security community aren’t actually technical problems at all,” he said Tuesday at a lunch hosted by Symantec.

Bernard del Rosario, a chief engineer for the Defense Information Systems Agency, said at an AFCEA symposium in Maryland that the Secure Cloud Computing Architecture helps accelerate the "authority to operate" process, DISA said Wednesday. The agency's SCCA platform enables the Department of Defense’s partner entities to optimize security and management features to meet requirements for migrating workloads to the cloud. 

General Services Administration officials said they plan to provide federal security officers hands-on training on the Federal Risk and Authorization Management Program, FedScoop reported Wednesday. “We’re going to start bringing security officers into our office, give them some training on FedRAMP, radicalize them to our methodologies,” Zach Baldwin, program manager at FedRAMP, said Tuesday at the Cloud Security Alliance’s federal summit. 

Lauren Knausenberger, director of cyberspace innovation at the U.S. Air Force, said the service is developing methods to speed up the accreditation of software-as-a-service applications to handle controlled unclassified information, FedScoop reported Thursday. 

The Federal Risk and Authorization Management Program has released three new documents to clarify its process for continuously monitoring FedRAMP-authorized cloud service providers. FedRAMP said Tuesday the new continuous monitoring documents include a draft of the “Automated Vulnerability Risk Adjustment Framework Guidance,” which is intended to help CSPs build and deploy …

Scott Kaplan serves as chief of cloud security at the National Geospatial-Intelligence Agency  and works in the cloud security division of NGA’s Office of the Chief Information Officer and IT Services directorate, or CIO-T. He brings years of information technology, security, operations and business experience to his current position and aims to …