CarahCast: Podcasts on Technology in the Public Sector: Recent Episodes
Carahsoft
CarahCast is Carahsoft’s new podcast channel dedicated to bringing our listeners the latest in Government IT case studies, technology trends, recent legislation news, and Government IT best practices.
In this podcast, experts discuss how to build durable, future-ready architectures through Modular Open Systems Architecture (MOSA) and modular open architecture, a "disconnected-first" approach and adaptable platforms such as Spectro Cloud Palette. Learn why effective tactical edge and edge computing security must be rooted in architectural decisions, rather than added as features after deployment.
Listen to the full podcast here: https://www.carahsoft.com/podcast/s8-bastille-presents-3a-the-wireless-threat-series-podcastSUBSCRIBE to get the latest tech tips & tricks from industry leaders!Federal agencies and businesses face growing exposure to wireless threats as modern devices introduce new cybersecurity attack vectors that traditional security tools cannot detect or control. To mitigate consumer and enterprise risks associated with IoT devices in no-phone zones, Bastille Networks’ wireless intrusion detection system identifies and quarantines unauthorized emitters and behavioral abnormalities before data breaches can occur. Explore real-world examples of how Bastille’s IoT security solution proactively defends mission-critical environments from covert emissions, unapproved device behavior and Wi-Fi deauthentication attacks.
Federal agencies and businesses face growing exposure to wireless threats as modern devices introduce new cybersecurity attack vectors that traditional security tools cannot detect or control. To mitigate consumer and enterprise risks associated with IoT devices in no-phone zones, Bastille Networks’ wireless intrusion detection system identifies and quarantines unauthorized emitters and behavioral abnormalities before data breaches can occur. Explore real-world examples of how Bastille’s IoT security solution proactively defends mission-critical environments from covert emissions, unapproved device behavior and Wi-Fi deauthentication attacks.
Listen to Forescout’s podcast to strengthen your cyber risk posture, protect critical infrastructure and secure your enterprise environments against evolving cyber threats.
Listen to Tanium’s podcast to discover how your organization can strengthen IT management, improve audit readiness and achieve CMMC Level 2 certification.
Explore how the Spectro Cloud Palette platform secures Kubernetes & edge management for Government IT teams. Access the podcast series to accelerate ATO today.
In this episode of the Wireless Threat Series Podcast, hosts Adrian Sanabria and Jon Bundy lay the groundwork on all things Bluetooth. They trace the tech from its 1994 origins through today's v6.2 spec, unpacking the two parallel stacks — Bluetooth Classic and BLE — and how they differ in power, speed, and security. They break down pairing methods, bonding, encryption gaps, and the surprising places Bluetooth shows up beyond your earbuds. Plus: a live sniffing demo.
Public Sector organizations face a rapidly evolving cybersecurity landscape where 90% of cyber breaches involve compromised credentials. To address identity-based attacks and go beyond network defense, organizations must adopt an identity-first security strategy that prioritizes resilience, visibility and recovery. In this episode of Identity Under Attack: Building Resilience in a Zero Trust Era, Zack Brigman discusses the evolution of identity-based attacks, the new risks introduced by AI and non-human identities and the importance of having a resilient backup and recovery strategy. Fill out the form to listen to the Druva podcast and discover how to better protect your agency’s identity system.
To secure operational technology (OT) environments, Federal agencies need cybersecurity solutions that comply with Zero Trust and CMMC requirements. Trout’s Access Gate solution seamlessly integrates with existing OT systems to prevent cyber threats and reduce risk.Access the Zero Trust for Operations podcast to discover how to close network security gaps with insights from SCOOP Cyber and Trout. Learn how your agency can seamlessly deploy Zero Trust frameworks that secure devices, reduce threats and achieve CMMC standards for your current systems.
Federal agencies and businesses face growing exposure to wireless threats as modern devices introduce new cybersecurity attack vectors that traditional security tools cannot detect or control. To mitigate consumer and enterprise risks associated with IoT devices in no-phone zones, Bastille Networks’ wireless intrusion detection system identifies and quarantines unauthorized emitters and behavioral abnormalities before data breaches can occur. Explore real-world examples of how Bastille’s IoT security solution proactively defends mission-critical environments from covert emissions, unapproved device behavior and Wi-Fi deauthentication attacks.
The Federal Government has made artificial intelligence and network security a strategic priority, so agencies must modernize legacy systems, mitigate data siloes and adhere to complex compliance requirements. With Peraton’s system integration tools and Federal AI expertise combined with NetApp’s intelligent data infrastructure and ai-ready data center, agencies are transitioning from AI experimentation to delivering operational impact at scale by modernizing mission delivery, streamlining decision-making and enhancing security. Discover how to modernize and unify critical systems, embed security and governance at the data layer and deliver high-performance AIOps across platforms built for hybrid and multicloud environments. platforms that enable AIOps acrossFill out the form to access the Peraton and NetApp podcast series to explore how modern data infrastructure can close the Government AI readiness gap with secure, mission-aligned AI capabilities.
Unlock the Atlassian and Isos Technology podcast to hear digital transformation experts discuss how Atlassian Jira Service Management enables greater operational resilience, stronger compliance and better mission outcomes. Discover how to align people and processes by using strategic change management to overcome cultural resistance and ensure modernization leads to scalable, long-term mission success.
Explore how Bastille's wireless intrusion detection system protects agencies from IoT attacks. Access the podcast series & secure your critical networks today.
Federal agencies and businesses face growing exposure to wireless threats as modern devices introduce new cybersecurity attack vectors that traditional security tools cannot detect or control. To mitigate consumer and enterprise risks associated with IoT devices in no-phone zones, Bastille Networks’ wireless intrusion detection system identifies and quarantines unauthorized emitters and behavioral abnormalities before data breaches can occur. Explore real-world examples of how Bastille’s IoT security solution proactively defends mission-critical environments from covert emissions, unapproved device behavior and Wi-Fi deauthentication attacks.
Public Sector organizations must meet customer expectations with limited resources while managing thousands of endpoints securely and efficiently across complex, distributed operating environments. To deliver high-quality services that protect critical systems from unauthorized users, Government and Education IT teams leverage BeyondTrust’s remote support capabilities to improve response times, reduce friction for technicians and ensure operational continuity.
Access the podcast to hear AIOps experts discuss how Hitachi VSP One delivers high-performance file services that accelerate IT modernization by improving fleet management, operational visibility and API-driven automation. Learn how Hitachi Vantara Federal can help your agency streamline firmware updates, licensing and system setup to enhance application performance and automate critical data workloads.
The Department of Defense (DoD) must ensure the confidentiality of military vessels locations by mitigating the use of mobile devices, unauthorized wireless activity and radio frequency (RF) based threats. To identify active device emissions and enhance operational security, Bastille’s wireless intrusion detection system leverages smartphones, commercial satellite networks and advanced geolocation techniques to identify their own RF signatures before adversaries can exploit them.Access the Bastille podcast to hear Scott Stapp, a retired Air Force general and former CTO at Northrop Grumman, discuss airspace security challenges and the need for proactive RF monitoring tools. Discover the importance of implementing device policies, operational security (OPSEC) education and practical solutions like Faraday bags and RF detection systems to defend against wireless threats. Fill out the form to unlock the Bastille podcast and discover how your organization can protect mission-critical environments with wireless intrusion detection systems.
State and Local agencies must modernize outdated infrastructure and authentication methods to mitigate evolving cyber threats, such as ransomware and credential-based attacks. To strengthen digital trust with adaptive access controls, Entrust empowers Government agencies to manage identity security with compliant passwordless, biometric and multi-factor authentication (MFA) systems.
Utilities companies with manual, paper-based systems must adopt cloud-based spend management software to efficiently manage expenses, receipts, reporting, auditing and compliance. By integrating with Enterprise Resource Planning (ERP) systems and leveraging automation capabilities, SAP Concur empowers Government agencies to simplify financial data management, strengthen security posture and streamline mission-critical processes to improve data accuracy and integrity. Access the SAP Concur podcast to hear industry experts discuss how AI-powered expense management tools digitally capture receipts, centralize invoices and reduce audit risks for utilities companies. Explore how to maximize operational efficiency with built-in compliance governance and continuous monitoring features that enhance real-time decision-making.Fill out the form to unlock the SAP Concur podcast and learn how to streamline spend management for your organization.
Migrating to the cloud doesn’t have to feel like navigating a storm. Every digital transformation initiative is unique and comes with its own risks, surprises and decisions that can make or break your journey — but it doesn’t have to be overwhelming.
Tune into the Vercara podcast to hear cybersecurity experts break down the latest attack trends and explore how organizations defend against DDoS threats with cloud-based security management tools. Discover how to build resilient IT infrastructure that ensures secure and accessible online services for higher education.
Operation Relief Fund (ORF) is a nonprofit organization committed to helping Special Operations Forces (SOF) and Shadow Warriors find relief from PTSD and trauma. Through advanced stellate ganglion block (ASGB) treatments, ORF offers a path to healing and improved quality of life for post-combat veterans. Listen to the podcast series to hear participants, partners and leaders share impactful stories of resilience and the mission behind the ORF. Discover how the ORF is providing life coaching along with ASGB to help veterans transition to civilian life. Fill out the form to unlock the ORF podcast series and learn how your organization can create an impact by helping those who protect us.
Stories of Impact is a podcast for veterans that shares real stories from combat to healing. Learn how the ORF provides mental health resources for veterans.
Access the podcast to hear healthcare experts discuss how Qlik Predict, Qlik Answers and Qlik Analytics optimize audit processes to identify attack trends and correct claim inaccuracies. Learn how healthcare teams enhance operational efficiency and performance tracking with actionable strategies that identify risks and validate billing policies.
Watch the podcast to hear Joseph Hackman, Founder and CEO of Permanence, discuss how integrating AI code-checking technology into complex IT environments enhances software development while remediating security vulnerabilities. Discover essential insights into how Permanence’s AI-powered code generation tools address skepticism around AI, simplify security maintenance and optimize resource allocation.
Unlock the Atlassian and Clovity podcast to hear digital transformation experts discuss how the Atlassian Government Cloud helps agencies unify cloud modernization, AI automation and compliance governance in a FedRAMP Moderate environment.
Government agencies often rely on outdated legacy systems that hinder cross-departmental collaboration due to fragmented data and operational inefficiencies. Watch the podcast to hear Atlassian and Clovity experts discuss how Government agencies streamline IT modernization with FedRAMP-authorized cloud solutions, powered by Jira, Jira Service Management and Confluence.
Access the podcast to hear Atlassian and Clovity experts discuss how to accelerate digital transformation for higher education organizations through compliant ITSM and digital collaboration tools, like Jira Service Management, Confluence and Loom. Explore how Atlassian enhances visibility and service delivery in higher education with practical use cases for ITSM, facilities, HR, legal and research.
Access the Atlassian podcast to explore how Carahsoft simplifies co-terms, contract management, renewals, discounts and procurement requirements while Clovity accelerates software delivery and implementation.
This podcast dives into how AI is reshaping data center networking, as Juniper’s Greg Bensimon discusses high-density compute, cutting-edge cooling, scalable architectures, and the battle between InfiniBand and Ethernet, along with zero-trust security and AI-driven operations.
Access the podcast to hear digital transformation experts discuss how UConn adopted the Atlassian cloud platform to modernize IT infrastructure, scale service delivery and centralize institutional assets. Learn how your organization can optimize learning and administrative environments with Atlassian's secure cloud services, powered by Jira Service Management, Confluence and Assets.
This podcast details how Nokia equips federal data centers for massive AI workloads with lossless, high-bandwidth networks, event-driven automation, and quantum-resistant encryption, leveraging Ultra Ethernet Consortium standards and U.S. security certifications to maximize GPU utilization and support classified DoD deployments.
Discover how Fortra helps agencies monitor, detect & block domain impersonation attacks with phishing prevention best practices. Watch the podcast today!
This podcast discusses how AMD is modernizing data centers with open standards, AI-ready hardware, and a broad CPU, GPU, and FPGA portfolio, while executives highlight supply-chain strategies, open-source investments, and partnerships that boost performance, cut costs, and maximize space.
Unlock the Equinix podcast series to hear high-performance data center experts discuss how secure cloud architecture and edge data centers are driving innovation and cyber resilience in the Public Sector. Explore how Equinix Fabric and Network Edge enhance operational efficiency and security through colocation and hybrid multicloud strategies while maintaining regulatory compliance.
Intel’s Dr. Darren Pulsipher explains how AI’s rapid growth drives innovation but raises energy concerns, emphasizing smaller CPU-based models that cut costs and power use while urging experimentation with AI and strong data management skills to stay competitive.
This podcast examines how HPE is meeting AI’s soaring compute demands with CPU/GPU advances, hybrid cloud models, and Neo cloud services that enable faster upgrades, liquid cooling, and flexible, consumption-based infrastructure.
This podcast features VAST Data’s Jeff Denworth and Randy Hayes detailing their “operating system for AI,” a disaggregated, full-stack platform integrating exabyte-scale NVMe storage, high-performance databases, GPU-optimized compute, and vector search to support AI training, fine-tuning, and agentic workflows, with automated data curation, auditability, and federal zero-trust compliance to prevent data poisoning and enable secure, large-scale analytics.
Access the application allowlisting podcast to discover how PC Matic helps Government and Education organizations meet NIST 800-171 and CMMC requirements while boosting system performance. Explore best practices and practical use cases for scaling endpoint security with innovative tools that identify assets, assess system vulnerabilities and control the attack surface across hybrid and cloud environments.
Watch the podcast to hear experts from Broadcom, Google Cloud and stackArmor discuss how agencies accelerate software delivery, improve customer experience and maintain compliance while meeting deadlines and staying within budget. Gain insights into how the Federal Government navigates FedRAMP’s evolving framework, leverages AI tools for portfolio management and breaks down information silos with a unified platform.
This podcast explores how NetApp is tackling soaring storage demands, as CTO Jim Cosby highlights intelligent data infrastructure, built-in ransomware protection, and AI-ready storage strategies that help public agencies manage massive datasets securely and efficiently.
Access the Pathlock podcast to hear an expert in GRC discuss how to simplify compliance and reduce operational risk by combining SAP identity management (IDM) and access control solutions on a single platform. Learn how agencies are leveraging integrated GRC solutions to future-proof SAP environments, simplify critical operations and optimize user experience.
This podcast highlights how Dell Technologies is advancing data center computing with its AI Factory, multi-cloud strategy, and disaggregated infrastructure to give federal customers flexible, cost-efficient, and secure IT solutions.
This podcast highlights how Equinix serves as a global hub for digital infrastructure, connecting networks, cloud providers, and public sector organizations while supporting AI power needs and expanding government reach through its partnership with Carahsoft.
This podcast examines how AI and high-performance computing are driving data centers to power densities of 300 kW+ per rack, as Vertiv’s Bob Silkowitz details advanced liquid cooling, modular containerized designs, and power strategies ranging from nuclear to gas turbines, along with dark-fiber connectivity and Carahsoft partnerships for scalable, sustainable federal infrastructure.
This podcast explores the rise of AI factories - data centers built to convert energy and data into AI “tokens” - as NVIDIA and Dell detail how federal agencies must rethink power, cooling, and compute while leveraging their AI Factory partnership to scale token generation, speed model training, and extend hardware performance for massive AI workloads.
Join us on CarahCast as Ethan Palmer and Nick Wager from Carahsoft breaks down VMware Cloud Foundation 9. Learn about the new graphical installer, unified VCF Operations for easier management, memory tiering to NVMe, GPU enhancements, vSAN deduplication, modern networking with virtual private clouds, and updated licensing. This episode is packed with insights for IT professionals looking to streamline deployments, boost performance, and maximize flexibility in their private cloud environments.
This podcast series is aimed at educating healthcare services and insurance companies about HIPAA compliance in the context of development and test data. Each episode focuses on key aspects of compliance, addressing technical, legal, and ethical challenges.
This podcast series is aimed at educating healthcare services and insurance companies about HIPAA compliance in the context of development and test data. Each episode focuses on key aspects of compliance, addressing technical, legal, and ethical challenges.
Listen to the LYME Navy Podcast to discover how industry and Government partners are enabling mission success!
Tune in to the QFlow Systems podcast to hear IT experts discuss real-world use cases, such as integrating the QAction platform with Microsoft Teams and how workflow automation solutions streamline service delivery and compliance. Listen now and discover how your organization can improve data storage strategies, grant approvals and document management processes.
In this episode, we dive into the advanced services of VMware Cloud Foundation (VCF) and explore how they empower organizations to get the most out of their cloud environments. Adam joins us to break down how solutions like vDefend, Private AI Foundation, Avi Load Balancer, and Live Recovery work seamlessly with VCF to strengthen security, enable GenAI adoption, modernize load balancing, and provide peace of mind against ransomware. We’ll also discuss which features users are adopting most, real-world examples of how they’re elevating IT environments, and why these capabilities are critical for today’s organizations.
Access the Verge Technologies podcast to hear IT experts discuss how SentientDB, Verge’s AI-powered cloud convergence platform, unifies Federal information systems at scale. Learn how organizations are leveraging automated cloud management systems to enhance database mobility, reliability and compliance.
Discover how your organization can leverage cutting-edge technology solutions to transform IT & enhance collaboration. Access the JTEK Data Solutions podcast.
Access the podcast to hear Splunk experts discuss how bitsIO’s datasensAI technology visualizes performance metrics and highlights opportunities to simplify infrastructure complexity while maintaining compliance. Discover how advanced AI/ML predictive analytics showcase unrealized value by streamlining data routing, archiving and usage workflows in the Public and Private Sectors.
In this episode, we explore the world of high-performance data centers and the transformative partnerships reshaping the public sector landscape. Join us as we explore how strategic collaborations between Equinix and Carahsoft can enhance operational efficiency, reduce latency, and drive innovation. Our expert guests will share insights on the critical role of data center infrastructure in ensuring optimal performance and security for public sector organizations.
In this podcast with Sujit Mohanty, General Manager of Field Engineering at Databricks, learn how the recent achievement of FedRAMP high for Databricks on AWS creates impactful opportunities for modernization within the Federal Government
Access the podcast to hear Greg Reeder, Senior Director of Public Sector Marketing at Datadog, and Martha Dorris, Founder of DCI Consulting, discuss how agencies increase agility and efficiency with innovative customer experience strategies, digital transformation and proactive application monitoring tools. Listen to practical use cases from the State Department, IRS and CBP showcasing how human-centric design increases engagement and public trust.Dive deeper into related resources like Datadog’s CX eBook, explore solutions tailored for public agencies at datadog.com/gov, and follow The CX Tipping Point® Podcast for ongoing insights into how private-sector CX practices are transforming government service delivery.
Listen to the smart governance podcast to hear industry experts discuss how the City of Linden leverages Google Workspace to digitally transform essential State and Local Government workflows. Explore how Google Workspace’s cloud-based productivity suite empowers agencies to improve organizational efficiency and protect sensitive data with advanced threat detection.
Discover how Public Sector organizations leverage VMware by Broadcom to unify & secure cloud infrastructure at scale. Listen to the VMware renewals podcast now.
Listen to the Atlassian’s Loom podcast to hear Arjuna Rivera, Senior Solutions Engineer at Atlassian discuss the advantages of streamlining communication with functional and customizable video messages. Explore how Loom can enable you to record key information via camera, microphone and desktop screen, then quickly edit and share it across your organization.
Tune in to the Docusign Law Enforcement & Public Safety podcast series and discover how agencies deliver timely justice by leveraging a secure digital document management system. Explore how the Docusign platform modernizes e-signature, eWarrant and subpoena processes to protect your organization’s sensitive information and optimize document workflows.
Tune in to the Docusign Law Enforcement & Public Safety podcast series and discover how agencies deliver timely justice by leveraging a secure digital document management system. Explore how the Docusign platform modernizes e-signature, eWarrant and subpoena processes to protect your organization’s sensitive information and optimize document workflows.
Explore how Government agencies leverage Entrust's identity & access management platform to meet CJIS compliance requirements. Protect your sensitive data now.
Unlock the Intel podcast to hear cybersecurity experts discuss the importance of supply chain security and solution acquisition strategies for safeguarding IT environments. Discover how your Federal Government agency can mitigate risk for end users while maintaining compliant and efficient operations.
Tune into the Verge Technologies podcast to hear data experts discuss how SentientDB, an AI-powered database management solution, ensures performance, reliability and mobility in multicloud and hybrid environments. Enable your Government agency to prioritize data management, security and team development with innovative cloud convergence services.
Podcast description: Join us for a webinar designed to help government agencies navigate CJIS compliance and explore the latest security measures. Gain insights from real-world case studies, including the City of Garland and the City of Northport, showcasing the practical implementation of TecMFA and Tectango for Police. Discover how these solutions streamline operations, improve data security, and contribute to CJIS compliance.
Listen to the Trusona passkey authentication podcast to learn from cybersecurity experts as they discuss robust phishing defense tactics and passwordless authentication solutions. Explore how your organization can leverage advanced password security software to enhance sign-in processes, effectively mitigating the evolving risks of GenAI by detecting impersonation fraud and account takeover attacks early.
Listen to the MB&A and Plauti podcast to hear from industry experts as they discuss real-world use cases. Discover how MB&A seamlessly integrates Plauti’s AI automation capabilities within Salesforce to modernize field inspection services for agencies. Allocate and improve data consolidation to enhance productivity and ensure security compliance.
State and local governments had to adapt quickly to the effects of the pandemic, as workers and residents alike were encouraged to shelter in their homes. This created major challenges for agencies' IT systems and technical support staff. Zero Trust has been widely adopted by agencies and organizations to secure their users, apps, Internet of Things (IoT) devices, and workloads, regardless of which networks or cloud resources they're connecting to, where they're located, or how they're connecting.During this podcast, Zscaler and CDI will provide information on how they can help you:- Simplify administration, improve visibility, and ensure consistent security controls and compliance across your entire agency's network.- Leverage our robust security capabilities to allow your agency to better protect sensitive data, networks, and systems from cyber threats.- Reduce upfront costs and ongoing maintenance expenses by consolidating security functions into a unified solution.
Listen to the org.manager podcast to hear John Kranz, VP of Customer Success at Ingentis, discuss best practices for streamlining organizational structure charts, HR management systems and data visualization processes. Learn how your Public Sector agency can deliver visual workforce data with ready-to-run extensions.
Listen to the Juniper Networks podcast to hear from data center experts discuss the benefits of AI-native networking and how leveraging Juniper’s Mist AI platform enhances end-user visibility and experience. Discover how the world’s first AI-driven wired and wireless network optimizes Public Sector workflows and data center systems.
Tune in to the Atlassian podcast to hear Erin Philips, Director of Product Marketing, and Kirk Shultz, Atlassian Consultant at Isos Technology, discuss how Atlassian JSM reduces resolution times for citizen inquiries and internal requests. Explore how Atlassian’s simple user interface fosters collaboration, enhances service delivery, promotes transparency and complies with Federal security requirements.
Hear from state and local IT officials and corporate thought leaders as they discuss the steps agencies are taking to innovate their services, protect their customers and agencies, and what they are tackling first in Florida.
Hear from state and local IT officials and corporate thought leaders as they discuss the steps agencies are taking to innovate their services, protect their customers and agencies, and what they are tackling first in Florida.
Hear from state and local IT officials and corporate thought leaders as they discuss the steps agencies are taking to innovate their services, protect their customers and agencies, and what they are tackling first in Florida.
The initial phases of 5G initiatives. Insights into progress updates, success stories, lessons learned, future strategies, and related subjects around the power of 5G.
In this HR data visualization podcast, SAP and Ingentis digital transformation experts discuss how Ingentis org manager integrates seamlessly with SAP SuccessFactors, empowering HR departments with data-driven insights. Drive transformative change by unlocking the full potential of your HR data.
Tune in to our podcast episode featuring DocuSign and SAP industry experts as they discuss how DocuSign CLM and SAP Ariba can streamline contract agreements, fortifying the connection between Public Sector agencies and suppliers.
In 2021, CISA Chief Information Officer Robert Costello made culture one of his top priorities. This moderated keynote will cover some of the challenges he faced, how his team addressed them, where those initiatives are delivering results, and why it’s important to have room to fail.
Join us as we delve into the pivotal role of digital signatures, content security and authenticity in thwarting fraudulent documents and deep fakes leveraging FedRAMP authorized Adobe solutions.
In today’s world, Federal agencies have successfully adopted individual cloud solutions that adhere to FedRAMP. The next frontier is to manage and adopt a portfolio of FedRAMP related cloud solutions to improve adoption and accelerate the innovation cycle. This session will review the recommendations and best practices for providing business users the full breath and scope of enterprise cloud solutions that address their FedRAMP requirements.
In this session, experts explore the benefits of cloud-based solutions, the impact artificial intelligence and other emerging technologies have on the infrastructure, and where more can be done to improve customer experience delivery.
This session aims to provide a high-level overview of the FedRAMP certification process, including the essential steps, requirements, and challenges that vendors encounter along the way. Listeners will gain insights into the benefits of achieving FedRAMP compliance, the intricacies of preparing for and undergoing the assessment, and practical strategies for streamlining the certification process. Through a real-world example, the podcast will also highlight common pitfalls and share best practices for addressing them.
In this session, experts in government and industry weigh in on the technology and tactics necessary to stay one step ahead of the next threat.
This session myth busts the process to outline best practices agencies and industry partners can follow, provide tangible solutions to the more complicated elements of FedRAMP authorization, and mitigate roadblocks in collaboration opportunities.
Better managing access control is critical to adopting Zero Trust best practices. As you move to the cloud, managing access to your data, apps, and APIs in a hybrid environment becomes even more challenging. Join this session to understand why authorization is more relevant now than ever and how fine-grained authorization gives you the level of security needed to lay the foundation for Zero Trust.
Improving this nation’s cyber defense has been a consistent theme and called out in federal guidance issued by the White House with Executive Order 14028, the National Cybersecurity Strategy, as well as CISA’s Strategic Plan 2023–2025. To accelerate improvements in cyber defense for federal agencies, Cloud Service Providers (CSP) must continue to adopt FedRamp practices to usher in needed innovation to elevate this nation’s cyber defense capabilities. OpenText Cybersecurity is poised to help this nation in Defending and Protecting Forward by offering a range of cloud services and capabilities to anticipate, adapt and evolve cyber defenses to counter threat actors’ behaviors and activities.
GovExec and Carahsoft co-hosted the annual GovForward FedRAMP Summit in Washington, D.C. to discuss the evolving threat landscape of federal cloud adoption. This event brings together government experts and industry innovators to examine the impact of threat-based cloud adoption, Federal policy changes and the power of knowledge sharing that drives technological advancements.
During this podcast, our experts will go over the essential soft skills that are crucial for government hiring, including communication, integrity, and safety behavior.
Join our webinar focusing on the imminent 2024 election concerns. A panel of cybersecurity and election integrity experts will uncover new coordinated vulnerability disclosure (CVD) practices, sharing insights from recent hacker challenges and discussing how CVD can fortify your security measures while enhancing trust with constituents.
Listen to our podcast episode featuring Entrust industry experts to discover how agencies leverage HSM encryption to store, protect and manage cryptographic keys.
Watch the Juniper Networks and Dell Technologies podcast to learn how your organization can meet Zero Trust requirements by establishing and managing user access to critical data centers and IT infrastructures. Learn about Juniper’s Apstra solution to establish a holistic approach to Zero Trust networking.
Listen to Mimecast's podcast to learn how Public Sector agencies enforce DMARC policies to streamline email security. Reject & quarantine phishing attacks now.
In this podcast, Venafi experts Faisal Razzak, Senior Product Manager, and Ivan Wallis, Global Solutions Architect, discuss best practices for leveraging encryption key management software to comply with the CA/B Forum guidelines. By leveraging Venafi’s technology, your agency can secure code signing operations to maintain data integrity.
GovExec and Carahsoft co-hosted the annual GovForward FedRAMP Summit in Washington, D.C. to discuss the evolving threat landscape of federal cloud adoption. This event brings together government experts and industry innovators to examine the impact of threat-based cloud adoption, Federal policy changes and the power of knowledge sharing that drives technological advancements.Stay current with the latest developments in cloud computing and federal cybersecurity by accessing the on-demand sessions from this year’s conference. Discover how secure cloud computing solutions can shape the future of your agency or organization.
GovExec and Carahsoft co-hosted the annual GovForward FedRAMP Summit in Washington, D.C. to discuss the evolving threat landscape of federal cloud adoption. This event brings together government experts and industry innovators to examine the impact of threat-based cloud adoption, Federal policy changes and the power of knowledge sharing that drives technological advancements. Today's speaker is Anil Karmel (Co-Founder and CEO, RegScale).
Listen to the podcast to hear Anthony Freed, Director of Strategic Communications and Threat Intelligence at Halcyon, discuss top threat agents and current trends influencing the underground ransomware-as-a-service industry.
Amid government’s sweeping migration to the cloud, pressure to update FedRAMP policies has long been building among legislators. Where do key policymakers priorities lie in the future for cloud adoption efforts? In this session, the 2023 FedRAMP Summit kicks off with critical insights from the legislators driving change for cloud.
Join us as thought leaders from Ohio agencies and the business community discuss their high-level vision and day-to-day objectives in adopting new technologies to revolutionize government IT.SUBSCRIBE to get the latest tech tips & tricks from industry leaders!https://www.youtube.com/user/carahtechtvFOLLOW US ON TWITTER:https://twitter.com/CarahsoftCONNECT WITH US ON LINKEDIN:https://www.linkedin.com/company/carahsoft/LIKE US ON FACEBOOK:https://www.facebook.com/carahsoftLISTEN TO US ON OUR CARAHCAST CHANNEL:https://www.carahsoft.com/carahcastREAD THE LATEST TECH COMMUNITY TRENDS:https://www.carahsoft.com/community
Join us as thought leaders from Ohio agencies and the business community discuss their high-level vision and day-to-day objectives in adopting new technologies to revolutionize government IT.SUBSCRIBE to get the latest tech tips & tricks from industry leaders!https://www.youtube.com/user/carahtechtvFOLLOW US ON TWITTER:https://twitter.com/CarahsoftCONNECT WITH US ON LINKEDIN:https://www.linkedin.com/company/carahsoft/LIKE US ON FACEBOOK:https://www.facebook.com/carahsoftLISTEN TO US ON OUR CARAHCAST CHANNEL:https://www.carahsoft.com/carahcastREAD THE LATEST TECH COMMUNITY TRENDS:https://www.carahsoft.com/community
A podcast series centered around important and innovative technology topics through a new and fresh lens creating an easy digest format for very complex technology. A special edition episode at Dell Technologies World 2023 with special guests Cris Tobin (Vice President of Federal Sales at Red River), Bogdan Frusina (Founder of Dejero), and Dan Romanelli (Senior Director OEM Federal Sales at Dell Technologies).
Join us as thought leaders from Ohio agencies and the business community discuss their high-level vision and day-to-day objectives in adopting new technologies to revolutionize government IT.
A podcast series centered around important and innovative technology topics through a new and fresh lens creating an easy digest format for very complex technology. For today’s topic, our special guests are James Ebler, Chief Technology Officer at Three Wire and Mark Harman, Sr. Security Systems Engineer at Versa Networks.
In this podcast, Mike Hofer, SAP Executive HXM Value Advisor, and Dan Hopkins, Eightfold.AI Global Public Sector VP, review emerging trends in HR and discuss how integrating SAP and Eightfold.AI technologies improve employee experiences in the public sector.
Take the next step in your hybrid-cloud journey with vSphere+, unifying lifecycle management for current and next generation workloads! Embrace next generation Kubernetes applications without having to refactor your datacenter with vSphere+! Unify multi-cloud management while supporting current and next generation applications with license-less vSphere+. Run VM & container workloads anywhere from a unified management plane with vSphere+! Bring the benefits of the cloud, next-gen containerization, and cut through the chaos with vSphere+!
Meet requirements outlined in OMB M-21-31 from tier 0 to 3 and Zero Trust while effectively facilitating network monitoring and analytics with the help of LiveAction solutions.
In Carahsoft’s podcast, Navigating OMB M-21-31 and Zero Trust Compliance with Expert Insights from LiveAction, you will learn how LiveAction helps federal agencies support the requirements outlined in OMB M-21-31, including implementation and planning strategies, as well as caveats to watch out for.
Joining Carahsoft, LiveAction's CTO and Founder, John Smith, sheds light on the specific requirements for each tier, emphasizing the urgency federal agencies face in meeting the mandate's obligations. Learn how LiveNX, LiveWire, and ThreatEye can play a pivotal role in fulfilling tier 0 - 3 network requirements, leveraging packet capture, encrypted traffic analysis and user behavior insights, cloud and network flow logs, SNMP, and centralized access.
When agencies/organizations understand cloud economics of cloud computing, they can optimize their investments and obtain the greatest value for the warfighter and addressing mission needs. Listen to hear Keith Nakasone, Senior Transformation Strategist of the Public Sector at VMware discuss cloud economics with VMware VP, Yvette Edwards.
In this podcast, Jen Racine, Director of Sales Consulting at Entrust, and Andrew Sheedy, Enterprise Sales Director at Entrust, discuss the importance of managing SSL/TLS certificates and how agencies can maintain TLS encryption with Entrust Certificate Services (ECS). Listen to the podcast to discover how Entrust ECS can support your organization with SSL/TLS management to secure online communication, meet compliance requirements, advance Zero Trust initiatives and much more.
A podcast series centered around important and innovative technology topics through a new and fresh lens creating an easy digest format for very complex technology. For today’s topic, our special guest is Herb Kelsey, Dell Technologies Security Strategy Program Lead from Office of the CTO. And we will spend time on Herb’s favorite topic “Zero Trust”.
Listen to the CarahCast to discover how CrowdStrike protects public sector networks & assets by proactively responding to cyber threats. Enable zero trust now.
Tune in to Season 2, Episode 3 of our podcast series to hear from Elizabeth Cappello, Deputy Chief Information Officer (CIO) for the Department of Homeland Security (DHS), and Craig Bowman, Senior Director - Federal for VMware, who will discuss:
- Meaningful implementation of artificial intelligence in cybersecurity
- How to view open standards versus purpose-built solutions
- Finding a balance between security and user experience
Check out this podcast series to learn from government IT luminaries and industry executives as they share their experiences tackling the toughest challenges you face, from the cloud and the supply chain to ransomware and recruiting. Whether you are with a federal agency or a city, county, or state government, in the US or abroad, you will benefit from this deep dive into issues of vital interest to the public sector today
Check out this podcast series to learn from government IT luminaries and industry executives as they share their experiences tackling the toughest challenges you face, from the cloud and the supply chain to ransomware and recruiting. Whether you are with a federal agency or a city, county, or state government, in the US or abroad, you will benefit from this deep dive into issues of vital interest to the public sector today
Check out this podcast series to learn from government IT luminaries and industry executives as they share their experiences tackling the toughest challenges you face, from the cloud and the supply chain to ransomware and recruiting. Whether you are with a federal agency or a city, county, or state government, in the US or abroad, you will benefit from this deep dive into issues of vital interest to the public sector today
Check out this podcast series to learn from government IT luminaries and industry executives as they share their experiences tackling the toughest challenges you face, from the cloud and the supply chain to ransomware and recruiting. Whether you are with a federal agency or a city, county, or state government, in the US or abroad, you will benefit from this deep dive into issues of vital interest to the public sector today
Check out this podcast series to learn from government IT luminaries and industry executives as they share their experiences tackling the toughest challenges you face, from the cloud and the supply chain to ransomware and recruiting. Whether you are with a federal agency or a city, county, or state government, in the US or abroad, you will benefit from this deep dive into issues of vital interest to the public sector today
Check out this podcast series to learn from government IT luminaries and industry executives as they share their experiences tackling the toughest challenges you face, from the cloud and the supply chain to ransomware and recruiting.
Whether you are with a federal agency or a city, county, or state government, in the US or abroad, you will benefit from this deep dive into issues of vital interest to the public sector today.
Check out this podcast series to learn from government IT luminaries and industry executives as they share their experiences tackling the toughest challenges you face, from the cloud and the supply chain to ransomware and recruiting. Whether you are with a federal agency or a city, county, or state government, in the US or abroad, you will benefit from this deep dive into issues of vital interest to the public sector today
Chuck Brooks, President of Brooks Consulting International , Aaron Bishop, CISO Air Force & Spaceforce , Scott Davis, CISO and Executive Director of Cybersecurity US DHS Customs and Border protection, Mitch Herckis, Acting Director of the Office of the Federal CIO, Executive office of the President, Elizabeth Schweinsberg, Digital Service Expert at US Digital Service, will discuss how organizations can implement zero trust to satisfy federal mandates.
In this podcast, you will learn how PC Matic's multi-patented allowlisting technology has solved the historical governance issues that have plagued traditional allowlisting products, for Federal agencies looking to fulfill the SWAM requirement within the Continuous Diagnostics & Mitigation program.In Carahsoft’s new podcast, Fulfilling SWAM Compliance in the CDM Program Through Application Allowlisting, Zack Austin, PC Matic's Vice President of Business Development will demonstrate the value their solution brings in regards to simplifying implementation and management of the default-deny method. We’ll also have Will Crenshaw - President CyberPrime, discussing CDM and the progress made across the Federal Government.SUBSCRIBE to get the latest tech tips & tricks from industry leaders!https://www.youtube.com/user/carahtechtvFOLLOW US ON TWITTER:https://twitter.com/CarahsoftCONNECT WITH US ON LINKEDIN:https://www.linkedin.com/company/carahsoft/LIKE US ON FACEBOOK:https://www.facebook.com/carahsoftLISTEN TO US ON OUR CARAHCAST CHANNEL:https://www.carahsoft.com/carahcastREAD THE LATEST TECH COMMUNITY TRENDS:https://www.carahsoft.com/community
Chuck Brooks, President of Brooks Consulting International Shawn Wells, Managing Director for Cybersecurity Strategy and Technology at Accenture Federal Services Gregory Garrett, VP Cybersecurity at Peraton Herb Kelsey, Federal CTO at Dell Technologies Eric Schlesinger, Operations & Engineering VP, Cyber Security at Parsons Tom Van Meter, Senior SE Director at Juniper Networks will discuss how organizations can satisfy federal safety mandates with zero trust.
The state of Colorado is undertaking a top-to-bottom modernization of its IT infrastructure, aimed at achieving what the Governor’s Office of Information Technology describes as four "wildly important goals." Four major initiatives (tech transformation, broadband access, digital government services, and enhanced employee engagement) are intended to deliver more and better digital services that improve residents’ lives and increase government employees’ job satisfaction.
The state of Colorado is undertaking a top-to-bottom modernization of its IT infrastructure, aimed at achieving what the Governor’s Office of Information Technology describes as four "wildly important goals." Four major initiatives (tech transformation, broadband access, digital government services, and enhanced employee engagement) are intended to deliver more and better digital services that improve residents’ lives and increase government employees’ job satisfaction.
The state of Colorado is undertaking a top-to-bottom modernization of its IT infrastructure, aimed at achieving what the Governor’s Office of Information Technology describes as four "wildly important goals." Four major initiatives (tech transformation, broadband access, digital government services, and enhanced employee engagement) are intended to deliver more and better digital services that improve residents’ lives and increase government employees’ job satisfaction.
A podcast series centered around important and innovative technology topics through a new and fresh lens creating an easy digest format for very complex technology. For today’s topic, our special guest is Herb Kelsey, Dell Technologies Security Strategy Program Lead from Office of the CTO. And we will spend time on Herb’s favorite topic “Zero Trust."
Tune in to Season 2, Episode 1 of our Mission First podcast to hear Mike Dent, Chief Information Cyber Security and Privacy Officer for Fairfax County Government and Craig Bowman, Senior Director – Federal at VMware discuss:
- How their move to the cloud is shifting their perspectives on security
- Adapting security around edge computing as increased workloads are pushed to the edge
- Strategic ways technology leaders can approach State and Local officials
In this podcast, Ned Miller, CrowdStrike Federal VP, and Andrew Harris, CrowdStrike’s Sr Director of Global Public Sector’s Technical Strategy, discuss how zero trust identity protection solutions help the public sector prevent data fabric breaches and reinforce legacy authentication protocols.
In this podcast, Mike Downard, President of Silicon Mountain, and Kevin Howard, Sales Manager at Carahsoft, discuss how nontechnical teams are embracing digital practices like enterprise service management (ESM) solutions through Atlassian's Jira Service Management tool to enhance daily workflow.
Insurance premiums for cyber coverage have significantly increased after a string of high-profile attacks and record setting ransomware numbers. Learn how your organization can utilize Mimecast to strengthen its cybersecurity.
Americans’ health, security, and economic wellbeing are tied to climate and weather. In a state that often faces natural disasters such as hurricanes and flooding, recovery depends on fast, secure IT resources to match manpower and machinery with the locations most in need, while delivering fast and secure assistance to victims.
Federal, state, and local agencies stand together in the fight to prevent and recover from cyberattacks, as their communities increasingly become targets of hackers and other cyber criminals. Cybersecurity risks range from data exploitation; insider threats; third-party practices as outsourcing increases; ransomware; identity theft; and fraudulent access to state government services.
The use of emerging and innovative technologies is transforming legacy systems to better respond to citizens and facilitate digital services. Using cloud-ready architectures, agile methods, and data interoperability, Florida is tapping top technology talent to redesign aging technology systems and deliver better outcomes for Floridians.
Listen in to hear Corben Leo, a Security Researcher from the Hack U.S. program, discuss some of the results. In addition, you'll learn some key differences between VDPs and bug bounty programs to better understand what each program can do for your agency.SUBSCRIBE to get the latest tech tips & tricks from industry leaders!https://www.youtube.com/user/carahtechtvFOLLOW US ON TWITTER:https://twitter.com/CarahsoftCONNECT WITH US ON LINKEDIN:https://www.linkedin.com/company/carahsoft/ LIKE US ON FACEBOOK:https://www.facebook.com/carahsoftLISTEN TO US ON OUR CARAHCAST CHANNEL:https://www.carahsoft.com/carahcastREAD THE LATEST GOVERNMENT TECH COMMUNITY TRENDS:https://www.carahsoft.com/community
Scott Pross, Vice President of Technology at Monalytic, a SolarWinds company, and Brett Littrell, Chief Technology Officer of Alum Rock Union School District, discuss real world solutions utilizing school district case studies. Learn how Alum Rock Union School District transformed their aging technical infrastructure into a modern network with SolarWinds to meet the needs of their students and staff.
In this episode, Nikhil Gupta, Core Cyber Demo Specialist at Carahsoft, is joined by Joseph Gallop, Intelligence Analysis Manager at Cofense. Together, they discuss new and long-standing phishing trends that challenge government agencies and contractors in 2022. In order to safeguard confidential information and effectively mitigate the risk of security breaches, public sector employees must be aware of the signs and trends of phishing attacks.
Cybersecurity professionals throughout all levels of government and the private sector are painfully aware of the risks to their own networks posed by third parties with authorized access – but insufficient security measures of their own. Supply chain hacks are favored by cybercriminals because they gain access to company data, as well as the ability to often breach customers’ networks.
State and local agencies see implementing zero trust architecture in their immediate future – 67 percent of state CIOs who responded to the 2021 Annual State CIO Survey anticipate that introducing or expanding a zero-trust framework will receive more attention in the next two to three years.
Ransomware threats are targeting state and local agencies with increasing frequency. At the same time, more state legislatures have banned their agencies from paying ransomware. These trends are on a collision course, making protection against ransomware even more urgent.
Join Scott Pross, Vice President of Monalytic, a SolarWinds company, for a discussion on real-world solutions utilizing the Service Desk application. Listeners will learn how to stop repeating processes over and over and get more information from the end user to resolve issues quickly and set up proper workflows to get the right data in front of the right people.
Listen to the latest VMware Renewals podcast to hear Tevin Clyde, VMware Renewals, and Nick Wager, Pre-Sales System Engineer, as they explore the offers and benefits of Carahsoft’s Affinity to Infinity (A2I) VMware Renewals Partner Program.
The second session takes a grassroots view of the threat hunting and hunt forward missions specifically looking at live fire scenarios and views from the front where convergence of IT, OT and IOT networks have been compromised.
Listen to session one to hear real-life examples of teams, tradecraft, and technologies that are changing the way we see the cybersecurity situation. This first session will walk viewers through examples where those in command are making the best use of Attack Surface Analysis platforms as well as harnessing the capabilities that can be found by making better use of the current cybersecurity efforts.
The third session will round out our three part series where we have explored the theory behind, practical uses of and now the live performance of the threat hunting mission and the hunt forward approach to information collection and TTP proliferation. Built with the mindset of the security operator or asset owner, we’ll step you through each phase of the assessment and how best to consolidate your information to make the best use of that data.
Learn why it’s time to implement an attack resistance management strategy to find unknown risks within your attack surface – the things automated tools miss. Through continuous testing and security expertise of ethical hackers, agencies can identify critical security gaps and prioritize fixes for exploitable assets.
In January, the White House released Memo M-22-09 that mandated, "Federal security teams and data teams work together to develop data categories and security rules to automatically detect and ultimately block unauthorized access to sensitive information." Simultaneously, there has been a 44% increase in workers' use of collaboration tools since 2019. Listen to this podcast from AvePoint and Carahsoft to learn how Microsoft's sensitivity labels can help your agencies on the path to complying with M-22-09. We will outline key insights into how AvePoint enhances Microsoft's native security capabilities, including: • The function of Microsoft sensitivity labels • How to put sensitivity label decisions into the hands of workspace owners (i.e., Teams, Groups, sites) • Actionable reporting based on Microsoft's sensitive information types and exposure
Listen to FCW, Keeper Security, and Carahsoft’s latest podcast on the topic of "Securing every user, every application on every device." This episode is an extension of Keeper Security’s presentation at FCW’s recent ICAM Workshop.
Join us to learn how several leading federal research organizations leverage the power of the Box Content Cloud to power their R&D missions.
Although no monitoring architecture is perfect, most monitoring issues can be traced back to avoidable gaps. Join Monalytic Vice President of Technology Scott Pross to learn how to find these problematic blind spots and mitigate “unknown” gaps before they impact valuable uptime, so teams can become proactive in resolving issues before disruptions happen.
On behalf of VMware and Carahsoft, we would like to welcome you to today’s podcast focused on VMware Horizon Renewals, we are lucky enough to have Nick Wager, our Pre-Sales System Engineer, as he discusses everything you need to know about VMware Horizon.
With the constant change in technology and the rising cyber threats, government organizations struggle to understand and translate cyber risks into the context of risk. Organizations can be overwhelmed by the magnitude, velocity and complexity of existing and emerging cyber risks. This session will focus on the challenges and yet opportunities government organizations have to determine assets critical to operations, ability to obtain and leverage actionable information, establish and communicate security policies and standards, detect and respond to attacks, identify and remediate security deficiencies, and establish clear IT risk management best practices.
Government organizations increasingly rely on third parties to help support operations, their employees and in many cases the public they serve. While it is possible to outsource many activities to third parties, organizations retain the risks associated with their third-party relationships. This session will focus on why organizations need to deeply understand the risks third-party providers present and why its critically important to have impactful controls in place in order to manage risk within acceptable boundaries.
The Chief Information Officer (CIO) and Chief Information Security Officer (CISO) are both important roles within any organization but can have differing views and challenges when delivering technology and services for their City. This session will explore the complex relationship between the CIO and CISO and how better understanding the other's perspectives and priorities can help accomplish the City's security goals.
The Infrastructure Investment and Jobs Act includes a $1 billion State and Local Cybersecurity Grant Program. This is an exciting opportunity for State and Local governments to collaborate and align strategic cybersecurity priorities. However, there are still many unknowns associated with this funding opportunity. This session will explore the Federal, State and Local government expectations of the grant funding and discuss approaches to building a cohesive grant submission.
A successful resiliency program aligns your impact analysis, continuity planning, IT disaster recovery planning, crisis management and incident response activities with your organization's broader business strategy and objectives. Resiliency requires building processes and technologies that naturally adapt to adverse conditions, make mid-course corrections, and avoid many of the negative impacts of a disruption. This session will focus on how an organizations resiliency can positively impact its overall operational risk.
Trustwave Government Solutions Managed Security Services (MSS) is the combination of the industry’s best preventive and detective tools under a world-class managed services umbrella with unrivaled global threat intelligence.
Join Carahsoft and Riverbed Technology for an informed and engaging discussion led by Donald Kyzar, former CIO, Department of Justice’s Office of Inspector General and Marlin McFate, Riverbed’s Public Sector CTO about how federal agencies can cost effectively ensure the productivity, performance, and experiences of end users, applications, remote workforces, citizen-facing services, and IT investments with Digital Experience Monitoring (DEM) solutions.
Stream Venafi’s latest podcast to hear from former USPS CISO, Greg Crabb as he presents his analysis and recommendations for Improving Your Federal Cybersecurity Practice in 2022. In this podcast, Greg Crabb will review the impacts of recent events and makes recommendations for planning for 2022.
Threat actors are evolving, preying on end users with clever, relevant, and timely phishing attacks, with no signs of slowing down or stopping. Listen in to hear how agencies can bridge the gaps in the prioritization of investments in phishing protection solutions.
In our rapidly changing digital world, agencies must evolve security strategies. A goal of Zero Trust is to create a security and network architecture that is dynamic, adaptable, and protected. The Executive Order on Cybersecurity has moved the term “Zero Trust” from a buzzword to a much-needed baseline for action planning around how we secure agency data and systems. Agencies must leverage Zero Trust principles to never trust, always verify, and only allow access when contextual parameters are met. Identity sits at the heart of Zero Trust. In a perimeter-less world, agencies must protect identities to stop adversaries from getting into our networks, moving laterally, escalating privileges, and ultimately accessing and manipulating our data. Leveraging ICAM and robust identity security strategies enables agencies to move from a network-based approach to a data-centric approach to defending systems.
Join government security experts for a discussion to understand:
- Why Privileged Access Management (PAM) is essential to major DoD initiatives like ICAM, Thunderdome, and Zero Trust
- How ICAM supports the Executive Order
- The Defense Department’s outlook on data-centric security and defending agency systems
- The path to secure modernization using Least Privilege
Zero Trust is essential for modern security architecture and a core protection framework for agile growth. Unlike old models that assume a level of trust once an asset is approved, Zero Trust never stops reviewing the asset as a potential threat. With this framework in mind, the White House released a new Executive Order to implement Zero Trust Architecture (ZTA) strategies across all federal agencies by the end of the Fiscal Year 2024.
In this podcast, our panel establishes key steps agencies should take to modernize, converge, and align their IT and OT systems.
Catch episode four of Mission First, our Department of Defense (DoD) and National Security podcast series focusing on the mission, not products.
During this session, Rob Thorne, Chief Information Security Officer, Immigration and Customs Enforcement (ICE) and Craig Bowman, Senior Director - Federal, VMware, will discuss:
- The biggest strengths and weaknesses in government cybersecurity
- How much Zero Trust is possible in an agency with aging infrastructure and limited budget
- What the Chief Information Security Officer's role is in shaping your organization's security strategy
Tune into our monthly podcast series, Mission First, where we will be focusing on the Department of Defense and National Security mission and not products. Hear from thought-leaders in the industry as they discuss complex challenges and topics buzzing within federal government IT.
From Log4J to hybrid work models, the evolving and dynamic IT environment expands the attack surface creating more vulnerabilities and risks for public sector organizations. This podcast will help you understand the cyber security challenges Attack Surface Management (ASM) solves and how it can be easily integrated into any cyber defense program.
ASM can provide comprehensive visibility of your environment, while continuously discovering and analyzing assets to monitor them for risks. Listen to this podcast to hear insight on how ASM can help government agencies become more resilient by:
Detecting infrastructure changes and exposures in real-time Managing cloud computing and shadow IT Embedding governance into workflows Building supply chain resilience Extending security policy outside the enterprise
In this podcast, our panel emphasizes the importance of thorough planning in executing a strong IT/OT convergence and outlines key items to account for.
The future of storage is here at Dell Technologies with powerful, efficient, and intelligent enterprise arrays. Hear from subject matter experts on the Dell Technologies advantage and how it can accelerate your transformations with multi-dimensional data storage, protection, and much more!
Exodus Intelligence employs some of the world's most advanced reverse-engineers and exploit developers to provide government agencies the unique ability to understand, prepare, and defend against the ever-changing landscape of cybersecurity. Exodus also provides customers with actionable threat intelligence including deep vulnerability analysis, detection and mitigation guidance, and tooling to test defenses.
In this podcast, our panel highlights the value of IT/OT convergence, and its impact on the practitioners across the security community. Topics covered in this session include the benefits of comprehensive OT security training, the OT lessons learned from the Log4j vulnerability, and what first steps to take on your convergence journey.
Andrew Ginter, VP Industrial Security at Waterfall Security Solutions, joined Carahsoft to discuss Critical (Industrial) Infrastructures, Recent Attacks, Near-Term Projections, and How to Prepare.
SUBSCRIBE to get the latest tech tips & tricks from industry leaders!
https://www.youtube.com/user/carahtechtv
FOLLOW US ON TWITTER:
https://twitter.com/Carahsoft
CONNECT WITH US ON LINKEDIN:
https://www.linkedin.com/company/cara...
LIKE US ON FACEBOOK:
https://www.facebook.com/carahsoft
LISTEN TO US ON OUR CARAHCAST CHANNEL:
https://www.carahsoft.com/carahcast
READ THE LATEST GOVERNMENT TECH COMMUNITY TRENDS:
https://www.carahsoft.com/community
In this podcast, Eric Williams, AVP of Supply Chain Management at University of Texas (UT) Health Houston, discussed how to collaborate with staff and stakeholders for mutual success. Attendees learned about his four cornerstones of a successful Procure-to-Pay (P2P) transformation and how he used change management to drive value for UT Health.
Listen in and hear how agencies can be equipped with solutions to quickly find, respond to, and remediate phishing attacks in real-time by combining the power of human reporting and high-fidelity AI & machine learning.
Join Blackberry and Carahsoft for a podcast on new cybersecurity for federal agencies. Today, federal agencies are challenged with prioritizing the data security and privacy of the American people and government amid an increasingly sophisticated threat landscape. The Cybersecurity Executive Order (CSEO) charges, “...the Federal government should lead in cybersecurity...” However, the past approach – adding additional layers to an already overly complex and unmanageable security infrastructure, managed by too few resources – is not sustainable. A new perspective is required to keep up, and ahead, of cyber adversaries today and in the future. During this insightful session with Roger Sels, Vice President, Cybersecurity Solutions, BlackBerry we will explore: How chaos in the field of cybersecurity has led to negative business outcomes Why spending more on cybersecurity – or having a bigger team – does not equate to increased protection New ways agencies can drive outcomes and increase security posture with measurable results.
Google is bringing the best of their products and cybersecurity partners to help protect against malware, phishing, ransomware, and other cyberattacks. Google Cloud's Work Safer program enables public sector organizations to securely collaborate and communicate in hybrid work environments.
Watch episode three of Mission First, our Department of Defense (DoD) and National Security podcast series focusing on the mission, not products.
During this session, Keith Nakasone, former deputy assistant commissioner of acquisition management within the information technology office at the General Services Administration’s (GSA) Federal Acquisition Service and Federal Strategist, VMware and Craig Bowman, Sr. Director - Federal, VMware, will discuss:
- Changes needed in the acquisition space to stay aligned with cloud modernization efforts
- How cybersecurity measures are changing to address increased concerns and supply chain risks
- U.S Government priorities in the new year, including moving to the hybrid cloud, supporting small businesses, and increasing work-from-anywhere capabilities
With the release of OMB’s Federal Zero Trust Strategy on January 26, 2022, agencies now have guidelines for achieving the Zero Trust mandates of the Cybersecurity Executive Order. Listen to the expert panel including former Federal CISO, Danny Connelly, as they discuss pitfalls to avoid when implementing OMB’s required actions and how to quickly comply with the strategy requirements without cutting corners.
In Visium’s newest podcast, Jesse Jones, Chief Architect at Visium Analytics and Joel Kelly, Director of Special Projects, joined us to provide an understanding on how TruContext™ enriches your Splunk processed data with an intuitive topological type view of the relationships amongst disparate data points.
Watch episode two of Mission First, our Department of Defense (DoD) and National Security podcast series focusing on the mission, not products. During this session, Jeremiah Sanders, Co-Founder of Kessel Run and Senior Federal Strategist, VMware and Alex Barbato, Senior Engineer, VMware Tanzu discuss:
- Continuous ATO and how has it evolved into Continuous Risk Management Framework
- The evolution of Kessel Run and how it set the stage for Continuous ATO in DoD agencies
- How agencies can begin the process and achieve Continuous ATO
- and more!
Tune into our monthly podcast series, Mission First, where we will be focusing on the Department of Defense and National Security mission and not products. Hear from thought-leaders in the industry as they discuss complex challenges and topics buzzing within federal government IT.
Start the new year right with VMware! Tune in to hear Lindy Christian, VMware’s Channel Engagement Manager, as she discusses the benefits and updates of renewing your VMware subscriptions.
Stream AvePoint's new podcast to learn how federal agencies can leverage Microsoft 365’s collaborative power using a Zero Trust model. Topics discussed include automating policy enforcement at the workspace (Teams, SharePoint, and M365 Groups), workspace compliance, lifecycle, and permissions recertification based on data sensitivity, and intelligent reporting of exposure risk based on sensitive information types and permissions data.
The Biden Administration has issued an Executive Order mandating all government agencies to deploy an endpoint detection and response (EDR) program to protect their data. To protect yours, trust only the most-deployed threat hunting tool in the U.S. government: VMware Carbon Black.
Listen to experts discuss database security best practices to assist in meeting the Presidential Executive Order on Cybersecurity.
Hear this conversation between Joe Beda, Co-creator of Kubernetes and Principal Engineer,VMware and Paul Puckett, Director of the Enterprise Cloud Management Office (ECMO), U.S. Army where they discuss:
- The development Kubernetes and when Joe realized it would be a part of every major software conversation globally
- Key trends, practices, and differences happening in the public sector versus private
- How Kubernetes helps manage Day 2 complexities of applications spanning from cloud service providers (CSP's), datacenters, and to the edge
- and much more...
Tune into our monthly podcast series, Mission First, where we will be focusing on the Department of Defense and National Security mission and not products. Hear from thought-leaders in the industry as they discuss complex challenges and topics buzzing within federal government IT.
The headlines are staggering. Hospitals and healthcare systems are struggling to protect against ransomware attacks, resulting in longer patient stays, delays in procedures, and ultimately, an increase in patient deaths. Although ransomware can cause serious damage, it’s not invincible. In fact, it’s only as strong as your organization’s weakest link. Why not turn the table on ransomware hackers for good? Veritas Healthcare CTO, Rick Bryant, explained the top 10 best practices your hospital or healthcare system can implement today to create a multi-layered, flexible, unified defense strategy that will ensure resilience and eliminate the risks to patient care.
Of all the security threats that face IT, phishing stands out because it is not an attack on the technology – it is “social engineering,” getting incautious users to click seemingly innocuous links or visit seemingly harmless websites and allowing hackers to steal user names, passwords, financial data, or other information they can use. Today, phishing is usually a “gateway crime” – hackers often use it as a way to get the credentials to gain entry into the broader IT system and launch other attacks, such as ransomware.
Blockchain is most commonly considered the foundation for cryptocurrency – the usual form of payment by ransomware demands – because it is a method of recording information that makes it difficult to impossible to change, hack, or cheat records of transactions. It’s a form of “distributed ledger” that records every transaction to every participant’s copy of that ledger. As a result, blockchain holds great potential to provide high levels of security for government agencies, provided they understand that transparency of transactions also is one of its characteristics.
In the end, any IT system is only as secure as its various components. Federal, state, and local agencies have learned that the hard way, as software platform and application providers have been hacked as a way to get into government systems. The Executive Order on Improving the Nation's Cybersecurity issued by the White House in May dedicates Section 4 to the topic of enhancing the security of the software supply chain.
Ransomware cyberattacks vaulted into public awareness with a vengeance when an East Coast gasoline pipeline shut down for days, causing a shortage and long lines at the gas pump when drivers panicked. But hospitals, schools and local governments have been dealing with ransomware threats for some time.
One of the biggest vulnerabilities state and local governments face is the huge installed base of legacy hardware and software. They are very expensive to maintain, draining resources that could be used to offer new, internet-based services. They often are riddled with security flaws, from bad code to unsecured ports –it’s next to impossible to keep up with all the patches that need to be implemented.
Listen to this podcast with BeyondTrust, MG Joe Brendler, US Army (Ret.), and Stephen M. Wallace, DISA, to understand why Privileged Access Management (PAM) is integral to secure the adoption of emerging initiatives across the government.
The FedRAMP ATO journey can be daunting for many Cloud Solutions Providers. From understanding the time and cost investments to understanding how to meet the compliance requirements, it can seem like a never-ending uphill battle. But there is a simpler, faster, cheaper way to achieve your FedRAMP ATO!
In Atlassian's new podcast, Derek Huether, Public Sector Solution Engineer with Atlassian and Dan Wilson, Founding Member and Business Development Manager with RightStar discuss how Atlassian Jira Align creates a collaborative environment to ensure that federal agencies project performance goals are met.
Join us for a discussion on securing your devices as IoT becomes a foundational component of Smart Cities moving forward.
In this podcast, we sit down with municipal IT managers and industry providers who have found a way to connect with citizens at the speed of now. Listen as panelists Akshay Malik of Philadelphia, Kevin Hood of Tableau, and Josh Green, representing Adobe, discuss how Philadelphia and other U.S. Smart Cities have improved interactions with citizens through data visualization and a streamlined user experience.
Recent breaches within government agencies have proven that they face many threat vectors that need to be addressed. Having a clean supply chain is critical to developing reliable software solutions that meet or exceed customer and market expectations for security, integrity, and reliability. Micro Focus offers a comprehensive, multi-layered approach that allows us the ability to respond quickly to customer requirements while still controlling risks associated with today’s cyber threats. We are committed to formal supply chain security based on best practices, and we have mature processes in place to manage code development and delivery. Our practices for inbound supply chain security, development process security, and release security provide assurance that we are managing security risk with appropriate diligence and focus.
Carahsoft & McAfee Enterprise have invited two guest panelists to discuss existing Federal government frameworks for Zero Trust, the importance of placing data at the center of a Zero Trust Architecture, and best practices for meeting the requirements defined by Executive Order 14028.
Recent advancements in compute, networking, and storage technologies have highlighted high performance computing (HPC) along with putting data analytics and AI within reach for many agencies. Learn how Dell Technologies & Intel can run AI, data analytics, and advanced computing workloads on one system.
Secure, reliable data collection is at the heart of smart cities, and their veins are made up of a network of smart devices that can augment the ability of planners to build better cities. Internet of Things (IoT) has the ability to measure and connect accurate data at scale. The power to collect and process real-time data is an invaluable resource that cities should be utilizing. Hear from government leaders on how an IoT implementation will accelerate the digital transformation in your agency.
During this podcast, experts from Trustwave Government Solutions spoke about how to implement a least-privilege approach to limit who has access and to what data in your databases, why security technology that is not purpose-built for databases are not enough to protect against breach, and how attackers target database weaknesses for more than just stealing data.
During this podcast, hear from experts at Trustwave Government Solutions and IMPRES as they speak about toxic combinations of misconfigurations and vulnerabilities, understanding who has access to your data, and data security best practices for securing your databases.
President Biden’s Executive Order (EO) has accelerated the crucial need to improve U.S. cybersecurity and move towards Zero Trust. When building a true Zero Trust Architecture (ZTA), it’s critical for agencies to understand that security solutions need to work together to provide the best line of defense. Hear SailPoint, Thales, and BeyondTrust collaborate with government security leaders to discuss this topic.
Nebraska’s Department of Health and Human Services contributes to the lives and health of Nebraskans every day with the focus of helping people live better lives. During this podcast, Nebraska’s DHHS Data Manager, Brian Beswick, speaks about the challenges faced by a traditional state agency and how a modern data management strategy helped meet the challenges.
In this week’s episode, Mihika Pethe, Channel Partner Manager, Pravin Patil, Managing Partner, and Robert Antony, Senior Solutions Architect, from Kapstone Technologies will take a deep dive into the data analytics at Kapstone Technologies, including: new projects, strengths, major wins, and architecting solutions.
Listen to this week's episode with Hazem Hower and Dominic Pucci from M&S Consulting where they will discuss and define DevOps and explain how M&S Consulting leverages this practice when delivering applications and services at a high rate.
In this new environment, a zero trust approach can help agencies minimize their attack surface and cyber risk. Brandon Iske, Chief Engineer for the Security Enablers Portfolio at DISA, Josh Brodbent, Director of Public Sector Solutions Engineering at BeyondTrust, and Frank Briguglio, Global Public Sector Strategist at SailPoint, along with moderator Matt Topper, President and Solutions Catalyst at UberEther will discuss how to build an effective zero trust approach with an emphasis on identity and privilege access management.
In this week’s podcast episode, Rahul Gangu and Venkat Chivukula from RV Global Solutions will discuss how to leverage the AWS cloud for the highest ROI when archiving, purging and backing-up data.
Do you have a Data Security program or process, even one as basic as collecting logs? If you do, you will agree that getting results is complex, requires too much manual effort, is costly in more than one way, and likely doesn’t deliver on the actual results you need today or needed yesterday. Listen to this podcast to learn the following: -How you can more easily secure data with no need to replace or throw out the solution you already have -Secure more than a small portion of your data stores without added complexity or server agents if you’re using them -Expand security’s visibility to any or every location where critical data exists while reducing effort and deployed technology (On-prem, Cloud, Hybrid)
Please join industry experts as they discuss White House Executive Order 14028, Improving the Nation’s Cybersecurity focusing on improving Threat Intelligence sharing and predictive security.
In this week’s podcast episode, Eric Olson, Vice President of Cloud Solutions Architects, Buurst, will discuss how SoftNAS, one of Buurst’s cloud storage solutions, can help improve performance, availability, and cost control for their customers.
In this week’s episode, Ben Slavin, Senior Vice President of Strategy and Design, and Vincent Sharps, Chief Business Officer and Executive Vice President at Mindgrub, will discuss the pros and cons of custom application development vs. off-the-shelf software solutions.
Listen to Rob Efrus, Founder and CEO of Efrus Federal Advisors and Morey Haber, CTO and CISO at BeyondTrust discuss Biden’s Executive Order on Cybersecurity and what that means for “Zero Trust.” They will break down the ARP and Biden’s 2022 Fiscal Budget to explain how your agency can use funds now, and analyze how and why Privilege Management plays an increasingly crucial role in mitigating cyber-attacks and protecting CI.
Innovation theater is rampant in government. Organizations tout their agile credibility and tech chops, but true mission outcomes are hard to come by. By engaging, experimenting, and iterating in production with real users, risk and cost is significantly reduced and outcomes become possible in fractions of the time.
Listen to this podcast session with David Schmidtknecht, Co-Founder, Keith Johnson, Co-Founder and Theresa Backus Dunn, Director of Marketing, at cBEYONData, to learn about utilizing CFO Control Tower and AWS to modernize your organization’s financial processes.
During this podcast, VMware partners heard from VMware's Damon Cabanillas, VP of Sales.
During this podcast, VMware partners heard from Mike Wilkerson, VMware Cloud Specialist, who provided an overview of VMware Cloud on AWS.
During this podcast, VMware partners heard from Andrew Berenato, Global Tanzu Alliances and Paul Maunder, U.S. Regional Director, SLED - Tanzu, VMware, who provided an overview of the VMware Tanzu portfolio.
During this podcast, VMware partners heard from George Cassels, Network Security Specialist, at VMware.
During this podcast, VMware partners heard from Carahsoft's Nick Wager, Vmware Pre-Sales System Engineer.
In this podcast, Senior Lead of Nuance, Carahsoft, Elizabeth Savage, discusses security and biometric solutions from Nuance, with features such as integrated authentication, multi-modal authentication, fraud detection plus prevention, deep neural networks (DNN) and advanced algorithms to detect synthetic speech, recordings, and brute force attacks.
Featured Webinar Speakers
Moderator: John Landwehr, VP & Public Sector CTO, Adobe
-
Dr. Simon Pincus, Chief, Connected Health Branch, Defense Health Agency;
-
Steve Wallace, Systems Innovation Scientist, Emerging Technologies Directorate, Defense Information Systems Agency (DISA)
-
Amy Taira, JELA Program Manager, Carahsoft;
In this podcast, Stephen Parowski, Group Vice President at TTEC - Digital, discusses Connect and FedRAMP.
Listen to this podcast where Kevin Mead, Vice President of Business Development at Kinect Consulting, discusses the importance of the AWS Well-Architected Framework for federal agencies.
Please join industry experts to discuss the implications of the order, how agency department heads are reacting today, and share their insights into what to be on the lookout for from a policy, management, and cyber defender operator perspective.
In this podcast, hear insights from industry experts about key accessibility requirements as described in the Web Content Accessibility Guidelines (WCAG) 2.1. Specifically, this session will provide: Tips to help your agency determine how compliant you are today and formulate a plan to make all online forms accessible and compliant, Insights on utilizing Adobe Experience Manager (AEM) Forms for enterprise PDF creation to ensure compliance. Don't miss this opportunity to learn how to eliminate your agency's risk and provide citizens and employees with a seamless, 100% digital forms experience.
Carahsoft and FedInsider partnered to bring together a panel of Chief Data Officers and industry leaders for a dynamic discussion around the evolving challenges surrounding Data as a Strategic Asset. Our CDO Panel discussed the burgeoning use of artificial intelligence (AI) and how it is spurring invention and innovation across many sectors, including:
- Science, where AI is accelerating discovery;
- Education and the development of individualized curriculum
- Space through autonomous spacecraft and smart habitats
- Healthcare using sensors and smart micro-systems
- Smart Cities to reduce cost, enhance safety, and ensure environmental standards
- Military, intelligence and government through a wide variety of applications
In this special condensed podcast, Bruce Coffing, Chief Information Security Officer (CISO) for the City of Chicago, and Chris Covino, Policy Director for Cybersecurity for the City of Los Angeles, will summarize the insightful thoughts from the Local Government Track at RSA Public Sector Day 2021. Some topics will include the Department of Homeland Security’s Deputy Director, Nitin Natarajan’s “magic checkbook”, the importance of planning for ransomware attacks, and the benefit of expanded definitions of diversity.
In this podcast, RSA Chief Technology and Product Officer, Zulfikar Ramzan, will address the challenges and opportunities of cybersecurity in a post pandemic world including where the industry has been and where it needs to go.
In this podcast, industry leaders discuss Government Resiliency including their definitions of resiliency as it relates to cybersecurity, how resiliency has changed over the years, and how to reduce and manage complexities as you build resiliency.
In this podcast, industry leaders will discuss their personal experiences with diversity in the public sector, discuss the immense benefits of a diverse workforce in the cybersecurity industry, as well as offer insights into how the industry can further strengthen their diversity.
In this podcast, Co-chairs for the Coalition of City CISOs, Greg McCarthy and Michael Makstman will continue the discussion with Deputy Director Nitin Natarajan around cybersecurity and the importance of the public sector.
In this podcast, industry leaders from cybersecurity organizations including the Department of Homeland Security, Cybersecurity and Infrastructure Security Agency (DHS CISA), will discuss the impact ransomware has on the public sector and ways to reduce those impacts.
In this podcast, Dave McKewon, Deputy Chief Information Officer for Cybersecurity & Senior Information Security Officer, Department of Defense (DoD), will discuss how the DoD has evolved their cyber defenses over the years to lay the ground work for zero trust. He will also cover how the DoD is approaching the challenge of implementing this new framework across the DoD information network and how this paradigm shift will serve as one of the most significant cyber defense game changers in the Department’s history.
In this podcast, industry leaders from various public sector organizations will discuss the challenges and opportunities that present themselves as more and more organizations migrate to the cloud in an effort to enhance digital modernization.
In this podcast, industry leaders from the National Institute of Science and Technology (NIST), NASA, and the Department of Defense, will discuss the importance of supply chain security for every organization and ways to ensure your organization is secure, every step of the way.
In this podcast, Deputy Director, Nitin Natarajan, explains the importance of public sector as it relates to cybersecurity. As the industry continues to move forward to address huge challenges the public sector faces, the partnership of organizations is more important than ever. After listening to this podcast, check out the Fireside Chat with Nitin Natarajan where co-chairs for the Coalition of City CISOs continue the conversation with the Deputy Director.
Listen to Kelly Olivier, Principal Architect at Nutanix, discuss how to intelligently manage and share unstructured data to help your business make informed decisions.
According to Gartner, 90 percent of ransomware attacks can be prevented. Don't be part of the 10 percent – learn how hackers are defeating your ransomware tools. Hear from Grayson Lenik, Cybersecurity Expert at Trustwave Government Solutions, as he shares the evolution of ransomware, Red Team simulation against ransomware tools, and a case study of a recent ransomware attack.
In this podcast, MJ DiBerardino, CEO at Cloudnexa, discusses compliant migrations into the AWS Cloud for federal customers and the importance of moving workloads to the Cloud.
Agencies at all levels are under pressure to evolve their cybersecurity posture from a passive to a more active strategy. To accomplish that, they must modernize from static, on-prem, physical IT to a multicloud strategy - taking advantage of the power that public and private cloud can provide.
Listen to Lorenzo Winfrey, Senior Product Manager at Rackspace Technology; Phil Fuster, Senior Director at Rackspace Technology; and James Stanger, Chief Technology Evangelist at CompTIAdiscuss how secure Multicloud-as-a-Service (MCaaS) solutions provide the necessary tools to comprehensively address cloud security across multiple technologies and help agencies craft the right strategy to support the mission.
Listen to our Carahsoft podcast featuring Okta and Netsync for an opportunity to hear from your peer, David Potter, Sr. Manager of ESD, as he discusses his journey to achieving a modern identity platform for Tampa International Airport.
In this podcast you will hear how:
Snowflake enables a centralized and secure single source of truth for all data Snowflake and Deloitte enable agencies to instantly and securely share governed data Agencies can leverage Snowflake and Deloitte's solution to enable self-service analytics and data-driven decision making while maintaining required compliance standards
Listen as industry leaders share their insights and strategies for increasing the accessibility and functionality of the digital government.
Listen as industry leaders discuss the use of Big Data in business intelligence and analytics, the impact of collaboration technologies on data proliferation and management, and the emergence of data-driven citizen services in the wake of the pandemic.
Listen as industry leaders share ways they have assisted state and local governments address both the direct impacts of the pandemic and the gaps and shortfalls brought to light.
Listen to this examination of the strategies governments and technology companies are using to modernize technology to increase the accessibility and functionality of digital citizen services.
During this panel, the experts discussed what policies should companies have in place for their vaccine rollout, should companies mandate that their employees be vaccinated, and how can Vaccine Cloud be leveraged beyond COVID-19?
Learn how Auburn changed the "data mindset" across campus while building a solid foundation and a repeatable process to scale its data warehouse as its needs continue to grow. Hear from the core project team about the best practices to make data warehouse projects successful and how Snowflake enables a centralized and secure single source of truth for all data.
In this podcast, BlackBerry discusses how the AtHoc solution provides secure and reliable communications to protect and reach the public community from a centralized and common operating picture.
Listen to Kanuj Behl, Cloud Architect at Nutanix, discuss how Nutanix provides simplicity, stability, and scalability for Splunk deployments.
Hear directly from other campus leaders as they share their journeys to improve identity access and security systems, and learn how your campus can adopt similar strategies for student and campus success.
In this podcast, Google Cloud’s Chris Haas, SpringML’s Sindhu Adini and Washington University in St. Louis’s Dr. Philip R.O. Payne discuss how a data-driven approach can help drive efficient campus reopening solutions for student and faculty wellness.
In Carahsoft’s podcast, our featured speakers from the VMware Healthcare Industry Strategy team discuss how the threat landscape is changing, and how VMware acts to secure their customers.
As agencies continue to migrate to the cloud and adopt DevSecOps practices and tooling, the challenges to protect sensitive data (secrets) and ensure security policies are consistently applied and followed are tougher than ever. Together, Venafi and HashiCorp Vault make it easy for security teams to safeguard secrets and apply consistent policy while enabling development teams to consume those secrets while ensuring compliance.
Listen to the podcast and learn how HashiCorp Vault and Venafi can increase your Zero Trust security posture, establish policy and compliance guardrails, and seamlessly accelerate mission delivery.
During this podcast, you will:
- Learn the three design patterns used by organizations in production
- Learn from a real-world example and reference architecture
- Understand the differences between each, and how they might apply to your infrastructure
In this podcast, a panel consisting of Dr. Barry Chaiken, the Clinical Chief at Tableau Software, Charles Gabrial, the Project Manager of Standards & Interoperability at The Federal Electronic Health Record Modernization, Cupid Chan the BI & AI Committee Chair of LF Data & AI at the Linux Foundation, and Chris Cooper, the AVP of Health and Education at Collibra highlight the value of data intelligence within the healthcare industry.
In this podcast, a panel consisting of Allyson Spring, the AVP for Federal at Collibra, Graham Evans, Principal at Booz Allen Hamilton, Howard Levenson, the General Manager for Federal at Databricks, and Brian Shealey, the VP of Public Sector at Trifacta highlight the value of data within the Department of Defense.
In this podcast, a panel consisting of Aileen Black, and SVP of Public Sector at Collibra, Nick Hart, the President of Data Foundation, Dr. Barry West, the CEO and Founder of West Wing Advisory Services, and Iram Ali, the Senior Customer Enablement Advisor for US Federal and Non-Profit Businesses at AWS highlight the value of data governance, and how it can help advance mission.
In this podcast, Frank Briguglio, Global Public Sector Strategist at SailPoint Technologies, Wes Dunnington, Senior Director or Architecture at Ping Identity, Wade Ellery, Director of Solution Architects and Senior Technical Evangelist at Radiant Logic, Rashaad Steward, Systems Engineering Director for U.S. Public Sector at Exabeam, and Matt Topper, President and Solutions Architect at UberEther will discuss how to radically enhance security by integrating industry-proven solutions you probably already have.
In this podcast, experts from Zscaler & Garnet River discussed how K-12 organizations can provide a secure and seamless transition for their Home Internet Access for Students that includes remote learning, as well as, ensuring compliance through simple Internet safety, privacy and security policy implementation. As the Internet is utilized more and more, deeper protection is required to keep students, teachers, principals, and administrators safe without compromising the educational processes.
In this podcast, Eric Clark, Program Manager at SpringML, and Brian Shealey, Vice President of Public Sector at Trifacta, discuss how the service is used across many of its clients and how you can use Cloud Dataprep in your own organization.
U.S. air travel has been forever changed by COVID-19. When post-pandemic travel ramps up, airports will be seeking to recover lost revenue while modernizing processes to deliver touchless experiences to travelers. So what can airports do to seamlessly adjust to this new normal and reinvent traditionally siloed operational models to meet constituent expectations? In this podcast, our panel of experts from Adobe, AOE, AWS, and Auckland Airport discuss how U.S. airports can rapidly convert legacy processes, personalize experiences and communications based on data, and deliver improved non-aeronautical revenue. Listen to this podcast to hear: • Current trends and recommendations to drive non-aeronautical revenue • Why distinctive, diverse, and digital experiences are imperative for airports to leverage • How airports can quickly move from offline to online, increase internal collaboration, and empower citizens and employees with digital transformation solutions • Auckland, Frankfurt, and London Heathrow airports’ modernization initiatives and lessons learned
In this podcast, you’ll take back key action items to your team to accelerate the process of building, launching, and automating secure applications on AWS.
On behalf of F5 and Carahsoft, we would like to welcome you to today's podcast, focused around zero trust, where Scott Rose, computer scientist at NIST and a co-author on NIST's 800-207, Zero Trust Architecture publication; Gerald Caron, Director of Enterprise Network Management for the Department of State; Brandon Iske, Chief Engineer at DISA; and Jason Wilburn, zero trust engineer at F5, will discuss the pros and cons of different zero trust designs, how other federal initiatives tie into zero trust, and understanding what zero trust principles do for cybersecurity posture.
Ryan Johnson: Thank you. Once again thanks, everyone, for joining. My name is Ryan Johnson. I'm a solutions engineering manager with F5 Government Solutions. Today, we have a group of exciting guests, mostly from the federal space, to discuss zero trust in theory and talk about the implementation of zero trust. First off, I have Scott Rose with NIST. Scott, would you like to talk a little bit about yourself?
Scott Rose: Sure, thanks. I'm Scott Rose. I am currently at the Information Technology Lab at NIST. I am the coauthor of the NIST special publication 800-207, Zero Trust Architecture, and also, attached as a subject matter expert for the upcoming NCCOE, or National Cybersecurity Center of Excellence Project on Zero Trust Architecture.
Ryan Johnson: Thank you, Scott. If anyone hasn't had a chance to read that 800-207, definitely take a look. It's well worth your time. Next off, we have Gerald Caron who's with HHS. Gerald, would you like to tell us a little about yourself?
Gerald Caron: Well, I'm on detail to HHS, but technically I am the representative of the Department of State, then SES. I'm the director for Enterprise Network Management at the Department of State. Basically, the infrastructure person, do the network, active directory, a lot of the security implementation aspects of things. I am participating and starting to co-chair the CIO's innnovation council working group on zero trust. I am Forrester certified and zero trust strategist as well.
Ryan Johnson: Very good. Thank you, Gerald. Next up, we have Jason Wilburn with F5 Networks. He's identity and access guru or [inaudible 00:02:20], if you will. Jason, would you like to tell us a little bit about yourself?
Jason Wilburn: Sure. Thanks, Ryan. So, I'm a system engineer, covering the system integrator space for F5 Federal. But as Ryan mentioned, I am also the co-lead for [inaudible 00:02:35], which is anything related to access and authorization controls or access policy manager product.
Ryan Johnson: Thank you, Jason. Next up, we have Brandon Iske with DISA. Brandon, would you like to tell us a little bit about yourself.
Brandon Iske: Yes, thank you, Ryan. So, I'm Brandon Iske. I'm the Chief Engineer for our Security Enablers Portfolio. So, that includes ICAM or Identity and Credential Access Management, Zero Trust reference architecture development, Public Key Infrastructure, PKI, and then Software Defined Enterprise. So, I'm part of the Defense Information Systems Agency. Again, it's a [inaudible 00:03:12] support agency to the Department of Defense. Thank you.
Ryan Johnson: Well, thank you, Brandon. There are two topic we're going to talk about. The first is behind the theory Zero Trust, understanding federal zero trust straight from the source. The second topic is the reality, the implementation of zero trust. So, jumping into the first topic, the theory. This question to you, Scott Rose. You're one of the authors of NIST 800-207 Zero Trust Architecture. Can you tell us briefly what problem zero trust is trying to solve, and what are the main goals?
Scott Rose: Well, yeah, zero trust is the new paradigm of how you want to look at enterprise security. Basically it's taking a lot of the trends that we saw emerging over the last 10 years or so and pulling them together and layering them together to solve what we see is like company attacks that the common script from attacks that you see are going out there. It's where the initial breach happens. The attacker then moves laterally through the network, and then performs the actual attack ransomware, data exfil, whatever. Then they're not discovered until the next audit, some six, eight months later.
Zero trust tries to minimize that kind of attack scenario where you segment away, you micro segment away resources, you do endpoint security, you do strong authentication both inside the infrastructure, on-prem as well as outside coming in to limit that lateral movement and make sure that every connection from a client to an enterprise and resource is both authenticated and authorized. The ideas that you want to try, don't rely on your perimeter defenses anymore, but you're doing it every step of the way. So, there's a little mini perimeter around like now, every resource and every user. So, you always have, at least, more knowledge, not total knowledge, of what's going on in your enterprise.
Ryan Johnson: Thank you Scott. This next question is for you, Gerald. What is the biggest misconception about zero trust?
Gerald Caron: First of all, the level setting on the definition that I find is most difficult and people really understanding. No offense to any of the vendors here, but depending on who you talk to, they spend the definition their own way. So getting that common understanding of what zero trust is, is really important. Some people think its identity, but it's a little more than that. As Scott was saying, it's about protecting what's important and shifting that paradigm in that culture that we do. We're very compliance-focused culture. FISMA makes us that way, put our scorecards, things like that.
But I think zero trust gets us to a more effective cybersecurity posture. Commonly, we've done that peanut butter spread approach, where we try to protect everything equally, with Frederick the Great says, "If you try to protect everything equally, you protect nothing." That quote up, basically, but great IT innovator that he was. But really that peanut butter spread approach is not sustainable. You can't cover everything you can't 100 be and 100% patched when you have 109,000 workstations across the world. It's pretty unlikely.
So what's important, as Scott was talking about? What's important? Definitely, if you need to understand what zero trust is. You're grappling with that definition. Yes, definitely. Don't suggest, but do read 800-207. I believe, and Scott would agree with me that, that's going to morph as new technologies and capabilities and concepts come about, that that is going to morph and mature as we go along on this journey as well.
Ryan Johnson: Yeah, I would agree with you on that. This next question's to Brandon. Looking ahead, what are the next or the biggest stumbling blocks for creating a zero trust environment?
Brandon Iske: Thank you for that question. So from my perspective, I think within DISA and DoD again, we're a very large environment. So I think from our vantage point, just trying to set the standards is really what where we're at. So again, we very much leverage the 800-207 as a framework for DoD and what we develop for the zero trust reference architecture. So, we've recently approved that. So that's available internal to the DoD right now. So that's our way to get the common framework, and language, and taxonomy established across the department.
Other trends, we see, again a lot of the pillars of zero trust really do rely on existing capabilities and cybersecurity efforts that we have. From my vantage point, I think there are a few gaps in those technologies, at least, for what the department has adopted from an enterprise perspective. So, I'll talk on some of those. Again, it's making sure we're doing the existing capabilities, whether it's ICAM, whether it's endpoint, whether it's network segmentation. All those things really have to start coming together. Again, it's eliminating those stove pipes and enabling more API access to these capabilities, tighter integration, and really trying to drive towards conditional access beyond just what we do with PKI, CAC, or PIV today.
The one gap I see the department has been looking at pretty heavily across the board is as how do we access our IL5 cloud environments from commercial internet. Really with COVID and mass telework, that's been a big challenge for us is to enable secure, collaboration, and access to applications and data, but still from most of us being off the network. So, for [inaudible 00:09:07] that's a big challenge because, in those cases, a lot of our designs assume all the users are on inside the perimeter. So, this concept really changes that or turns the problem on its head. So again, that's secure access.
We're also looking at some of the SASE-type capabilities or secure access edge capabilities. But even in that space, the duty is large. We're not going to be able to just use one vendor across the board. So, trying to drive interoperability of those capabilities, looking at what's best of breed, but also how can we... I don't want to have 10 agents on my computer just to be able to get to different applications across the department. So those are some of the big challenge I think we still see us ahead beyond just the obvious cultural challenges of getting everyone to understand the concept, build their maturity model towards that, and then adopt these concepts and integrations.
Ryan Johnson: Yeah. I would definitely agree with you. This is not a single vendor solution by any means. This will be a grouping of different vendors to maybe some homegrown stuff to address these type of issues. Thank you, Brandon. Next question is to Jason Wilburn. Zero trust makes identity to the new perimeter. Why does zero trust take this approach?
Jason Wilburn: So, one of the things that I always laugh when I hear that it's the new perimeter because I've heard that it's the new perimeter for 10 years. I think I even have it coined from F5 from eight years ago, they said identity is the new perimeter. So I guess my wife's car that's 10 years old is still new to her. So, the fact is, is identity, really, is a linchpin in a zero trust infrastructure because without identity, you can't really secure anything because we have to know who that person is or what is making that request. That becomes really important in a couple of things.
One is the account creation. Are we creating accounts? Where do those accounts live, and how many entities of that identity actually just wrote an organization because the identity of John Smith can exist in multiple places? Really, what we're trying to do is to reduce the number of identities down to really holistically one single identity for, say, John Smith. But also, the next piece and that is really getting down to how they authenticate or how they assert themselves inside of the environment. That really gets down to things like multifactor neighbor, or if we can really get to the holy grail of going full password, which in the federal space we do a lot of password list-based authentication, doing things like smart cars, CAF, PIV, things like that.
That's really what we're trying to do is truly validate that that user is who they really are because to truly achieve zero trust, a lot of things revolve around one knowing who that user is and then once that user starts doing things within the network, really, should he be able to do those things in this network based off the permission levels and their user behavior and the device they're coming from, and where they're going to, but it all really revolves around the first step, and that user... they're truly identifying who that user is.
Ryan Johnson: Yeah. That ties into what everyone else has said, as well Jason. Appreciate that. The-
Gerald Caron: Ryan, can I add something to that question?
Ryan Johnson: Absolutely.
Gerald Caron: That identity of the new perimeter thing really scares me because then people get super focused on identity and say [inaudible 00:12:57] zero trust. That's just a, for lack of a better term, a pillar. Everything Jason said is absolutely important. But if Jason's account got compromised, for instance, what's the first two questions probably the cyber guy is going to ask that's looking at the problem? What did he have access to, and is there [inaudible 00:13:16]?
So it actually becomes about the data more than anything. So, it's about protecting that data at the end of the day. So I think it's really important. I think one of the things that, really, an identity itself is we do it very linear today, where it's one-time authentication, it's one-time access and then. Okay. Have a nice day. It's got to be a constant dynamic checking and rechecking of many other factors, as well as authentication and access. It's going to be continuous.
Jason Wilburn: Yeah. You're completely right, Gerald. Identity really is just one more data point to determine access to something, right?
Gerald Caron: Yeah, I totally agree. I just like to clarify that that's just one piece of it. [crosstalk 00:14:01].
Ryan Johnson: Not the entire enchilada, if you will.
Gerald Caron: Correct because I see a lot of people talk about it that way.
Jason Wilburn: No, no.
Ryan Johnson: Yeah, I would agree with you on that because a lot of places aren't doing that currently, and they think this is the solution, but it's just, like you said, part of the solution.
Jason Wilburn: Right. The enforcement point, like to take back to Scott's document, with the 207, the enforcement point's right, they will know about the identity, but the enforcement point takes in a lot more consideration beyond just the user's identity. There's all that telemetry data that we're getting in. What's the machines coming from? What they're trying to access? There's lots more information than just the user identity to determine access control.
Gerald Caron: Right. It's not always a human, right.
Jason Wilburn: That's right.
Gerald Caron: There's data flowing all the time and then there's data at rest. So, you got to protect that. There's not always the human involved.
Jason Wilburn: Completely right. So let's go down the road of what do we do with the service account that's coming from and making an API call from one PC to another PC in the same data center. How do you validate that and secure that beyond really when I think... a lot of times when we talk about zero trust, a lot of times we talk about remote users or just users in general, talking to resources and what we've been trying to get away from [inaudible 00:15:24] the user doesn't really matter where they live, whether they live in corporate environment or whether they live at home, or they're in Starbucks, where the user live resides doesn't really matter because at a network level, that's just an IP address.
We care about, one, how did they authenticate; and two, what device are they trying to access from, not just... is he on the corporate... The corporate land might give us more information and more telemetry by just being on the WiFi at Starbucks, but it's more than identity definitely.
Ryan Johnson: One thing that really hits home for me is the proliferation of modern applications, and API's talking everything. You got APIs on the cloud or even within the same agency or interagency or app, however, and Gerald's point about these non-human interactions verifying those, especially, when it's so spread out with different APIs. To me that really hits home. The next question is to Scott. There are multiple architectures listed in the 800-207. Why would an organization choose one architecture over another?
Scott Rose: Basically, as they need to look at whatever they're trying to push a zero trust architecture on, what workflow, what mission they're doing, all that will help decide which model will fit best for them. You got to take into account, both what they may already have owned or what technology needs they have, what can they just... what they can use anyway, just configure in a different way. Let's say they already went with vendor A and they have an installed base, but there are certain features that they're not using now, but as they move towards a zero trust architecture, they just turn those on because some things work better than others, some solutions require like agents installed, may not be able to put agents on things, especially if you're looking at [inaudible 00:17:28] an IoT kind of deployment. You can't push a lot of agents on the small form devices, but you have to go with a different model there.
But when it comes to the approaches that we described, like the enhanced identity governance, microsegmentation, software-defined perimeters, I think of the most mature as zero trust enterprises and architectures out there will have elements of all three. Those three approaches, we're just calling those like what is the load bearing technology that you're using in your architecture, whereas the models are more of what kind of products are you using, that dictates the model. Whereas like what technology are you putting the emphasis on, whether you're the identity management governance part, the micro segmentation parts, or using a software-defined networking or software-defined perimeter model. All those depends what's you're doing in that initial analysis, both what is the mission or workflow that you're working on to try and make more secure, and then you develop the other set of policies and controls around those, and then those guide you as to which model that you may be going towards.
Ryan Johnson: Thank you, Scott. Appreciate that. Next question is to Gerald. Looking into the future, what's next in zero trust? What technologies are going to impact zero trust security or require security in a different way than we see right now?
Gerald Caron: Technology moves so fast nowadays, you can't keep up. As I'm speaking right now something new, something new just come out that I don't know about. But Brandon, I think, mentioned SASE and edge computing. I think that's something that people are very much looking at services through the cloud. One of the things I advocate for that I'm looking at is I hate being tethered to an on-premise network. We're in a new normal. Everybody's working mobily now. I have to Boomerang back just to go back out to the cloud on the internet. So, how can I be untethered but to have all the security that I need in telemetry to make the right decisions is something that I'm looking at. So, it's something that I advocate for as well.
So, technology is moving so fast. I think some are a little more mature than others in this space. But I see it's going to be very much competitive because we're all looking this way now. I think, as I said before, we're all trying to become more effective at our cybersecurity, not just check marks and coming compliant. We really need to protect the data and then the things that we need to protect. I equate I get to protect the crown jewels versus the bologna sandwich. You can have my bologna sandwich. But I'm going to put my concentration on those crown jewels.
So understanding what's important to you and understanding what the heck is your risk posture. A lot of people struggle with accepting and understanding what their risk is. There is a lot of non-technical aspects to zero trust that people need to understand, the methodologies, what is your risk tolerance and the processes, and what is the data, and where is your data, and what is that categorization of that data. Those are all non-technical things. There's a lot of work in those areas that people do struggle with that I find. So, there's a lot. But I see every day talking with a lot of vendors, there's a lot of maturity in the space, and I just look forward to seeing some of the capabilities because there's a lot of concepts in 800-207, like I talked about ongoing authentication and ongoing access.
Right now, it's very linear still. That's something that would be maturing that people are looking at doing so. I think there's a lot. I look forward to it because a lot of people are putting their emphasis here, especially, with what we just experienced with the solar winds. There's a lot of focus in this area now, even more so if there wasn't before.
Brandon Iske: Ryan, if I can add in there, I think, Gerald is spot on. I think, as we can build towards more dynamic access, conditional access, and then having applications be aware of that context to govern what I can and can't do what's on that application. I think that's where... As all this comes together, those are the type of outcomes that we start to get at, whether if I'm from a personal device and maybe a low-assurance model, maybe I can't download attachments or something, but I can view those or view some content. So, those additional granular controls, I think, start to come out there, become achievable once we have some of these capabilities, conditional access and aggregation of telemetry together as well.
Jason Wilburn: If I can jump in, too, Ryan. I think that just being able to absorb the additional telemetry data, whether it be some sort of behavioral analytics coming out of a risk engine, just coming out of various security tools, I thought had mentioned this before, the breaking down of the silos between the team. I think that's one of the biggest things about zero trust. Holistically, from a security model perspective, what we're saying is that, hey, it all needs to work together as a single point of control that is closest to the resource, that Gerald mentioned. There can be some context around it that no longer is it just the firewall blocking IPEs and things like that, and DLP looking at data exfil, and antivirus looking at what's happening on the server from a virus perspective or malware happening on the client. It all needs to work together, and it all needs to come back because that becomes part of the behavior or of the workflow that's happening between the client and the resources for accessing so that we can truly understand, is this a permitted flow? Yeah, this is a permitted user coming from a permitted device to a resource that it should have allowed to.
But based off not just what happened at the very beginning of the session, but what's happening throughout the life of the session, what's changed throughout the life of the session, that becomes critically important to really secure everything day one because back to Gerald's data exfil comment. Cool. You've got access to the data right now. Should you be able to download some document or upload some document five minutes into the session based off what something has changed? Maybe not.
Ryan Johnson: Yeah, I agree that's what we're trying to get to. All right. That concludes the first topic of the theory. Now, we're going to jump into the second topic, the reality, adopting zero trust. The first question is once again to Scott Rose. What components are available to federal entities to assist in forming zero trust architecture?
Scott Rose: Well, most of these are not real solid technologies, but it's more of frameworks and things that may help. There are existing government programs already out there. Both like a DHS, they have their CDM program. There's FICAM, things like that. These are already in place to actually build these, kind of like what Gerald called the pillars of zero trust. They've already been in place for a while. We looked at how zero trust extends those, how those reliant on those programs.
I mean, as well as we have for NIST, there's the risk management framework. That isn't the end all be all, but you can think of that as a tool to help one level down. Once you've developed that architecture, the RMF can maybe help develop that set of controls and checks in place to actually ensure that what you're doing, you're implementing correctly to your stated goals. These things are in place that are basically technology neutral, that whatever vendors you're using, you can always apply these frameworks and tools to help along the way.
In a way, that NIST, the Special Publication 800-207, that's also... think of that as a framework, [inaudible 00:25:53] just both on the architects, but also the way that the architects can then talk to the procurement people. They can, hopefully, understand what exactly you want. So when the procurement and the architects talk to the vendors, they're all speaking that same set of term, not just [inaudible 00:26:09] randomly zero trust or something like that. There's actually a set of rules and uses for these technologies that they can both use as a common set of terms.
Ryan Johnson: All right, next question... Thanks again for that, Scott. Next question is for Gerald. What are the things that enterprise needs to understand before migrating to ZTA or zero trust architecture?
Gerald Caron: That's a really good question. Think of the difficulty that some folks are going to have. I mentioned the data, understanding the data, where it is, where it's going and what classification it is. The where it's going. Where is it normally go? What is the flow? What is normal look like? How do you baseline normal? That's going to be really difficult because understanding what normal looks like will depend on when something happens now, what actions do I have to take? So understanding where that data flow is, where that data resides, what it is, who owns it because you're going to have to work with data owners. It's going to take a village. It's not just the network guys, not just the IT guys. It's going to take a village to do with zero trust in my estimate at an agency.
But, as Scott was saying, be on the same page with terminology and things like that. But I think that's the difficult part. I think that answers one of the questions is how do you know what abnormal is? Well, you got to know what normal looks like to know what abnormal looks like. So I think that's really important. So, I like the inside out method, that start with the data, and then all right, what's facilitating access to that data. Device app. What do you do with those things, and then work back to the identity, given the right access to the right people at the right time.
We talked about this from the end user standpoint a lot. I want to go back to this. The administrators as well are very powerful. So you have to address the administrators. I think that gets lost a lot of times when people start talking about... They talk about users accessing data. Well, your administrators need to be addressed as well in a zero trust. So that's something that's difficult.
The one other thing I would say that's difficult, Ryan, is that we all, as different agencies, we all share data, we all classify it differently. If I want to share with Brandon a certain amount of data, I do sensitive but unclassified, but he may classify it in a different way. Where do we meet when we want to share data with those different classifications, so that we can properly do that? Then when I give Brandon my data, it's my data. He's going to be a good steward for it. If he doesn't have the right things in place, now, I've put my data out there. So, how can we all get on that same page? Interagency sharing is I think going to be a challenge as well.
Ryan Johnson: Absolutely. It makes complete sense. That's a big, big challenge. Next question is for Brandon. Is it necessary to have a ZTA if the enterprise does not utilize cloud resources?
Brandon Iske: Thank you for that question. I would say absolutely. Again, the threat is the same whether you're in the cloud or not. So, whether you have disconnected resources, or closed networks, or connected networks. You still have very similar threats to some extent. So I think it absolutely applies. Again whether you look across the pillars, whether it's identity or endpoint, we still have to do those same things and even what we're doing in DoD to enhance our identity ICAM processes. Again, it's all about authentication and account lifecycle management. Those are the big pieces that... We still have a long journey to get to from an enterprise perspective to get those under control in a better fashion than what we do today.
We have CAC or PIV programs that are very strong, but again, those are a strong authenticator. It's the entire lifecycle of the additional pieces of identity that come into play. Again, all those same concepts apply regardless of where the data or applications exist. Other efforts that we've done in this arena as well, too, I would say is our cloud-based internet isolation. So again, this is a way that we move the end user browsing to a cloud environment for our actual benefit. So, in this case, basically, my browsing session is going to be terminated in a cloud environment. From a data protection and exploit perspective, those drive by downloads basically would happen in that cloud environment, not on my endpoint. So, it actually comes to help us also in this mass telework environment as well, too.
So, I can split my traffic going straight to the cloud for browsing and not backhaul that all the way back to the VPN to come on to the internal network. So, that's given us a few really big benefits, again, in a very hybrid model where in some cases, we're using cloud; in other cases, we still have a huge set of legacy that's still going to be on-prem for the foreseeable future until they modernize or whatever schedule they have to modernize.
Jason Wilburn: Brandon, if I could ask a question about the browser isolation component. Is this going to be in when a user is accessing internal resources inside of the agencies, or is this going to be also a service that's internet-facing? So, when a user's setting on-prem or anywhere, and he's now going to the internet once they go to Google, is all internet traffic really going to be browser isolated? Is that the envisioning?
Brandon Iske: So, it is what we're doing. So, the basically .com or any commercial internet browsing [inaudible 00:31:55] capability [inaudible 00:31:57] .mil is going to bypass that. So, whether I'm on a VPN or the .mil resources already internet facing, those are the [inaudible 00:32:08]. So I mean, basically, you're not routing either way. So, it does allow us to basically not be backhauling that traffic back onto the doden or [inaudible 00:32:16] for duty terminology, for our internal network.
Ryan Johnson: Thank you, Brandon. Next question is to Scott Rose. Looking to the future, what is next in zero trust? What technologies are going to impact it or acquired in a different way than what we see right now? I love the question.
Scott Rose: Yeah. I don't know for sure because everybody makes predictions and are constantly surprised about how they don't pan out. But at least in the near term, I see a lot of people focusing both on IoT like we are as well. How do you get those and manage those in an automatic fashion? So, you don't actually have to have human administrators going out and touching all those devices or doing something to those devices. They're getting to the point where you can just quickly get them onboard them onto a network. You know exactly what they're doing because they say what they're doing in [inaudible 00:33:19]. Manufacturer vouches for them. You onboard them, you have go through the entire lifecycle, and you offboard them if you need to all in a more streamlined automated fashion. That's going to be coming on as people look for IoT solutions.
The other one is we're seeing more people looking at machine learning when it comes to developing user profiles as feedback to what we call like the policy engine or the trust algorithm moving on. Building up again, what does this user normally do in order to see when something abnormal happens? You always [inaudible 00:33:57] this. You have a person, say, working in HR, and they connect to this database with all the user information. They do roughly, say, three to five gigs of traffic going back and forth from this database a day. Suddenly, you see that jump up to 800 gigs. That should cause a red flag going up because that's abnormal. But then again, maybe it's because there's the annual performance review, where they're downloading everything and going through everything.
Maybe that happens every year at a certain time. Then again, you're building up that profile saying, "Okay, we know that does happen at a certain timeframe. So what happens outside of that timeframe, then maybe something strange is going on." Those kind of trends we're seeing, just try and improve the dynamic nature of zero trust. That's kind of the things that are just on the horizon and starting to appear.
Ryan Johnson: Thank you, Scott. Next question is for Gerald. What mistakes or what are the biggest misunderstandings with zero trust in the industry or within federal entities right now?
Gerald Caron: Definition. Understanding the totality of zero trust, understanding as a full architecture, full framework. People talk about it in bits and pieces. Unfortunately, some vendors will talk about zero trust, but you got to understand the whole landscape of it because they may come in and do the authentication and access management piece, but not do the data segmentation piece, or the app hardening piece, or network mapping for understanding where your data's flowing and things. So, understanding that it's not just a one-product thing. It is truly going to be an integration. It's going to take a whole effort, a whole village to do it.
So, really understanding and getting level set, and understanding the use cases and understanding what your risk tolerance is, is very important. What are you willing to take risk for? What's important to you? Putting your emphasis on what's important. The cafeteria schedule, okay. But your medical records, I'm going to put a little more emphasis on that probably than the cafeteria schedule. So, and understanding where does that reside? How do I protect that and things? So, really understanding what it is you're trying to accomplish, and then we all have our little special snowflakes in all of our different agencies. So, what is our little spin on things? So understanding what your use cases are, I think's really important.
Ryan Johnson: Thank you, Gerald. Next question is for Jason. Let's go to another identity question, Jason. If identity is a new perimeter, what should federal agency entities consider when looking at making identity their enforcement point? How is this achieved?
Jason Wilburn: So, it's not going to be the enforcement point. It's just going to be another piece of information, a data point that can be used by an enforcement point. To Gerald's point, it needs to be looked at holistically. Identity just needs to be one part of it. I think the biggest thing is understanding really where are all your identities within an organization. Are they all in active directory? Are they all in a SaaS-based [inaudible 00:37:22]? Do each application have their own directory structure? So, while you think that John Smith's account only exists in say active directory, it might exist in multiple locations. So then you need a good strategy to onboard identity, decommission identity, and then also validate identity. That means back into needing some sort of MFA or a good authentication method.
Ryan Johnson: Next question is to Scott. What are the concerns a federal entity needs to understand before migrating to ZTA?
Scott Rose: Well, the concerns I need to think or that they need to worry about is, basically, they need to know what they do, they need to know their mission, they need to know the risks inherent to that they're doing their mission, and then they need to know what they have, who both.... These are accounts of the network, the devices, the workflows, they need to have those knowledge at first. They need to be able to detect and monitor things previously before they can actually start moving down this road to zero trust because you can't really build a policy and a set of checks around things that you don't actually know. So, those are the main concerns.
Other concerns are how it will impact the users. We need to educate them to make sure everybody else is onboard because if the other kind of operating units in an organization or a federal agency or something, if they're not onboard, there's going to be a problem because the way things are... because they may result in the changes of the workflow of [inaudible 00:39:02] times. They're accessing things. What permissions they have or don't have? There's always that learning curve when you're trying to actually refine these policies. If that becomes aggravating, they're going to start trying to find ways around it. That's the last thing you want because then you have the shadow IT springing up behind it and things that you've sorted all these strange traffic that you're not seeing on the network, but people claim that it's very important for them to do their job. Those sorts of things. So you need to actually realize that going down the road of zero trust is a unified front. Everybody needs to take those steps together.
Ryan Johnson: Yeah. Thank you, Scott. Probably the last question here, this is directed to Gerald once again. How does zero trust relate to TIC 3.0 and CDM?
Gerald Caron: So, I think the great thing about CDM, for those that have been participating in it, it's such a good foundational things that I think you can build on for zero trust. I think Brandon said it, well, earlier, is like, you're probably already doing some things and taking a good inventory of some of those efforts that you already have going on, and how it fits into the zero trust architecture that... So, there may be some tweaks. TIC, I think, definitely is part of... a contributor to the solution, especially, some of these efforts that allow for the telemetry and the services to do that untethering that I was talking about, and get all that data and make decisions based off that.
Definitely. I think the way CDM is taking in and doing like the asset discovery, a lot of the understanding of the mapping, eventually in the subsequent phases later on to do the network access control, so you can quarantine or trigger an action on a device. There's a lot of good things that I think they provide some good building blocks that will get you a part of your zero trust solution. Not the totality. Of course, we've already talked about that, but I think there's some good foundational pieces that they've put in place that contribute to the overall zero trust architecture.
Scott Rose: Yeah. To follow up on that, if you go through the part of the NIST 800-207, we have a coauthor from DHS, and he's the head of the TIC program. We made sure that, at least, the text that we had in those sections where we talk about CDM and TIC, we had a lot of input and overview from DHS there. So, he made sure that the wordings and both of the tone and both matchly don't contradict. So yeah, we made sure that we were expressing the fact that these programs are interlaced.
Thanks for listening. If you would like more information on how Carahsoft or F5 can assist your federal agency, please visit www.carahsoft.com or email us at f5-sales@carahsoft.com. Thanks again for listening, and have a great day.
The introduction of the Cybersecurity Maturity Model Certification (CMMC) to the Defense Industrial Base (DIB) comes with a renewed emphasis on securing Controlled Unclassified Information (CUI) across all layers of the DoD supply chain.
For DoD agencies and DIB contractors who are subject to CMMC, Microsoft 365 offers robust tools like DLP and AIP to protect content at the file level. However, to ensure CUI remains secure, IT requires an additional layer of control over where the data resides in their environment (i.e. Teams, SharePoint).
Striking the balance between enabling end-users to collaborate efficiently while maintaining secure control over these collaboration workspaces requires a strong data governance strategy to be in place.
In this podcast, listen to AvePoint Public Sector's Principal Solution Engineer, Jay Leask, and C3 Integrated Solutions President, Bill Wootton, to learn how organizations across the DIB are implementing smart data governance strategies to navigate the following challenges in their M365 environments:
• Reporting • Decentralized provisioning • Control over membership • Inadvertent sharing • Data classification • Workspace recertification • Lifecycle management
Listen to this podcast to hear insights on:
- GCP Administration Fundamentals: reviewing various services, billing, and support cases and navigating the UI, IAM, etc.
- Running VMware workloads natively on GCP
- Application Modernization by deploying containerized apps into Cloud Run, Google Kubernetes Engine (GKE), and Google Anthos
- Modernization of Data and Analytics workloads on GCP using Pub/Sub, Dataflow, BigQuery, Data Catalog, Data Studio, and Looker
During this podcast, experts from Okta, Zscaler, and GuidePoint discuss how some agencies are approaching their Zero Trust journey, successful use cases, and best practices agencies should consider.
In this podcast, Topics in Government Mainframe Transformation to Azure Gov Cloud, Microsoft’s Azure Global Engineering – Critical Infrastructure team discuss transitioning from mainframe, midrange, and other non-x86 platforms into Azure Gov cloud, including uses cases, technology patterns, and example reference architectures.
In today’s environment, the government is continuously searching for ways to modernize and take risks. Embracing what Artificial Intelligence and Machine Learning have to offer is more important now than ever. With new trends on the rise, agencies are learning what they can do with this technology.
In this podcast, NVIDIA’s Adam Thompson discusses Artificial Intelligence and Machine Learning, its importance over the last year and what we can expect to see in the next year as part of Carahsoft’s community blog series focused on mission critical IT trends in 2021.
In this podcast, Aaron Jensen, the Senior Solutions Engineer at Delphix and Arif Hajee, the Principal Solutions Engineer at Delphix explain how a programmable data infrastructure ensures test data can keep pace with high-velocity development and improve development productivity.
In this podcast, Eric Wassenaar, the Senior Account Executive of SLED at Veracode and Jason Phillips, the Senior Solution Architect at Veracode examine SOSS findings pertaining to the government and education sector.
Listen to Nutanix’s Account Manager, Patrick Conaway, discuss Nutanix hybrid cloud’s ability to unify operations across all IT sites and clouds, simplify tasks, improve service delivery, and accelerate adoption of DevSecOps within your organization.
Listen to this podcast to hear Jason Malnar, Senior System Engineer at Nutanix, discuss the enhanced features and capabilities of Nutanix Prism Pro and how it can dramatically improve your virtualization and infrastructure management with predictive analytics and task automation.
Listen to Nutanix Systems Engineer, Derik Davenport, discuss how you can harness cloud-like services for your federal agency’s database operations.
Listen to Nutanix Systems Engineer, Daeric Graeber, Nutanix's end-to-end consumer-grade management and desktop as a service (DaaS) solutions.
Election officials throughout the country, armed with cyber-trooper support from Washington, went on the offensive this year and staved off significant cyber penetration of the election process.
With the coronavirus pandemic, organizations and offices have had to adjust from daily face-to-face contact to phone calls and video chats. During this time, workflow automation has become an integral part of keeping companies as efficient and productive as possible.
In this podcast, Adobe’s Wayne Byrd, an Account Executive for the US Air Force and Yasir Saleem, a Principal Solutions Consultant discuss Workflow Automation, its importance over the last year and what we can expect to see in the next year as part of Carahsoft’s community blog series focused on mission critical IT trends in 2021.
In this podcast, Mike Cameron, System Engineer at Nutanix, discusses how to eliminate complexity with a single click deployment for state and local government and education.
Hyperconverged infrastructure (HCI) can lower cost, improve performance, and increase efficiency all with a smaller datacenter footprint. In this podcast, Luis Gomez, Sr. System Engineer at Nutanix, discusses the value of Nutanix HCI brings to you and your organization.
Federal agencies are increasingly viewing DevSecOps as an enabler of their migration to the cloud. DevSecOps brings rapid application development, more reliable applications, and increased security to their applications. Palo Alto Networks has continued to enable our customers to streamline their application development and shift security left.
Listen to the podcast to hear Brain Wegner, Systems Engineer for Palo Alto Networks, discuss how solutions have enabled our customers to achieve a Continuous Authority to Operate (cATO) and implement Zero Trust Architecture for the applications.
Listen to John Bowles, Senior Systems Engineer at Nutanix discuss how Nutanix's multi-cloud platform, Xi Beam, provides security compliance and cost governance capabilities for public and private clouds.
In Carahsoft’s new podcast, Digital Transformation and Lessons Learned From Our Healthcare Providers, our special guest speakers from the VMware Healthcare Industry Strategy Team discuss how the COVID-19 Pandemic is forcing dramatic IT Transformation, and the new ways that healthcare providers are delivering care.
COVID-19 has disrupted many aspects of the ways in which government operates, and one major change that agencies must address are the new ways in which threat actors use this time of change and uncertainty to their advantage.
In order to scale defenses rapidly to protect themselves in this post-COVID cyber threat landscape, agencies should adopt a strategy of collective defense.
Listen to this podcast, to learn more on how Nutanix HCI can: •Reduce the physical footprint of legacy datacenter infrastructure •Increase and leverage underutilized resources •Improve IT security posture •Modernize environments for the cloud era
In this podcast Mick Flanigan, Senior Director of Professional Services, for Contegix covers Atlassian license purchasing options, how to choose a reseller, working with a solutions partner, and so much more. Tune in for an insight into the benefits of buying through a solution partner versus alternative options!
Listen to Phil Ditzel, Sales Specialist at Nutanix discuss how to implement a work from home environment in a timely, effective, and secure manner with Nutanix's desktop as a service (DaaS), Xi Frame.
Listen to this podcast to learn how you can instantly implement a work from anywhere environment in a secure manner through Nutanix’s desktop as a service (DaaS) solution, Xi Frame.
Join thought leaders from NVIDIA, Pure Storage, and SFL Scientific as we discuss the foundations necessary in the formulation of an Artificial Intelligence Strategy in Government Operations.
Tune into our podcast, A Holistic People-Centric Approach to Insider Threat Management, to discover how the ObserveIT platform helps agencies protect against data loss, malicious acts, and brand damage.
In this podcast, Jeremy Adair, Sr. Systems Engineer, discuss how Nutanix’s software-defined scale-out file storage solution, Files, designed to address a wide range of use cases.
In this podcast, Roger Gibson, Systems Architect and John Weidenhammer, Systems Engineer from Nutanix will discuss how Nutanix Era automates and simplifies database management.
In this podcast, Chris Robertson, Chief Software Engineer, IBR discusses the advantages of using Liferay to deliver a one-stop shop for Navy career management.
Mobile Integrate has extensive experience with integrating the VMWare Workspace ONE portfolio into healthcare environments, including identity management for an easy single sign-on (SSO) experience and lifecycle management to ensure the clinicians have the correct device with the info they need while keeping personally identifiable information (PII) secure. Mobile Integrate has also completed successful patient engagement workflows leveraging VMware Workspace ONE so patents can stay engaged with their treatment and communicate with members of their care team, friends, and family members.
After government and educational institutions made heroic leaps to move virtual this year, how can you modernize, manage, and scale up and down these services cost-effectively?
Elections are among the most important administrative processes underlying our democracy, and they face an array of sophisticated threats designed to undermine system integrity and public trust. With AWS, election administrators and political campaigns are empowered to focus on the core needs of the electorate in a secure, scalable, and cost-effective way rather than building and maintaining the underlying infrastructure to support mission-critical efforts.
In Carahsoft’s new podcast, Kelly Estes, Systems Engineer at Nutanix discuss how Nutanix Clusters on AWS enables single infrastructure management plane across all clouds, app migration across clouds with no code changes needed, and license portability cost optimization features with maximize investment.
In Red Hat’s new podcast, Ryan Kraus, Staff Data Science Solutions Architect at Red Hat, discusses trends in edge computing across the public sector and Red Hat’s collaborative AI-driven solution that enables high performance data processing in the field.
Agile transformation is a journey, not a destination. The need for an agile transformation is becoming more critical to cope with the rapidly changing, ambiguous and volatile world we work in. Agile mentoring can help your organization become more dynamic, cross functional and successful than ever before. In Atlassian's new podcast, John Turley, Innovator for Adaptavist, explains the value of an autonomous and cross functional working environment. He goes on to discuss how Agile mentoring adds the necessary components that methodology and technology often lack.
Federal departments and agencies employ millions of personnel to carry out the missions and functions that the American public relies on for its well-being. The IT systems and networks of the Federal government continue to be attractive targets for foreign intelligence services and other malicious actors. As the threat landscape changes and attacks become more human-targeted, it's crucial to understand the data your users have access to and how they are handling that sensitive information.
With over 90% of attacks originating from email and countless breaches caused by human error, it's important to engage your end-users and create a culture of security awareness. Now is the time to gain visibility and understanding of your greatest security risk: your people.
In this podcast, McAfee Security Engineer, Chris Moran, and e.Republic Vice President of Research, Joe Morris, discuss how McAfee MVISION Mobile Advanced can protect your remote teachers and students.
In this podcast, you will hear a chat with Matt Brown, CEO of Shorepoint, and Rob Palmer, EVP and CTO of Shorepoint, to discuss what impact the first Quality Services Management Office (QSMO) Shared Service offering from The Office of Management and Budget (OMB) & Cybersecurity and Infrastructure Security Agency (CISA) will have on Federal agencies.
In Carahsoft’s new podcast, Mike Garris, Solutions Architect at Red Hat, discusses the rapid adoption of Red Hat Ansible for network automation across federal government agencies and how your team can modernize and streamline operations with Red Hat’s tool for enterprise IT automation.
In today's rapidly changing world, the skills of U.S. soldiers and veterans needed to thrive after their service ends is ever evolving. With only 50% of U.S. veterans saying that they have the skills to prepare them for the transition to civilian life, the Army was faced with the critical task of building a digital platform to support training and education opportunities for soldiers and veterans. The Army chose Liferay as the modern digital experience platform for its flexibility and mobile solution architecture.
Supply chain complexity is rising, and the public and private sectors are stronger together. The resulting approach is called cyber collective defense, and it’s changing how businesses and the federal government protect their supply chains.
Recent years have shown a massive expansion of the global cyber attack surface. The proliferation of IoT and smart devices plus the speed and scale of communications have created an environment that makes it easier for adversaries to exploit vulnerabilities in federal systems.
Adam Clater, Chief Architect, North America Public Sector at Red Hat, discusses the value of a Red Hat subscription and Red Hat’s process for refining open source innovation into stable, secure solutions for your state and local agency or academic institution's production environments.
Listen to Amanda Babb, Principal Consultant for Praecipio Consulting, discuss the value that Cumulus Cloud, a comprehensive hosting solution, brings to your enterprise organization.
In this podcast, CEO and Co-Founder of Isos Technology, Thad West, shares the various services partners can provide whether it be consultative or technical.
Listen to Greg Herbold, Palo Alto Networks’ Director of State and Local and Education, discuss how to consistently tackle the top threats in K-12 schools in traditional and remote learning models.
Listen to part 2 of our podcast with Justin Leader, CEO of HyperVelocity, to hear how to effectively modernize implementation of CRM modernization within your agency.
Listen to part 1 of our podcast with Justin Leader, CEO of HyperVelocity, an Atlassian Platinum Enterprise Solution Partner for helpful information on personnel onboarding and tracking customer relationships.
Red Hat’s Transformation Specialist and DevOps Evangelist, Michael Ducy, discusses Red Hat's industry-leading enterprise open source tools for DevSecOps success.
Atlassian Solution Services Associate, Dan Schillace, shares the benefits that Atlassian training provides, including the 6 overall Certifications available to earn and share.
Atlassian Verified Government Partner Addteq shares how their Unstoppable app helps visually impaired users to have full control of Atlassian products such as Jira and Confluence.
Listen to Atlassian State and Local Channel Manager, Shayla Sander, talk about implementing enterprise service management and what it could mean for your agency.
Hear Apnatomy Co-Founder, Jason White, talk with Atlassian Sales Director, Sean O'Sullivan about how Apnatomy brings agile experience from private sector into the public sector.
Red Hat’s Cloud Domain Architect, Jason Ritenour, sits down with our Red Hat Sales Director, Rich Savage, to take a deeper dive into automation across the public sector.
Addteq VP of Marketing, Jaclyn Mazzarella discusses with Atlassian Sales Director, Sean O'Sullivan, how Atlassian helps agencies comply with Section 508 of the Rehabilitation Act.
CloudBees DevOps Evangelist, Brian Dawson sits down with Red Hat's Sales Director, Rich Savage to discuss how CloudBees can ease the pain of shifting to DevOps.
Atlassian Senior Solutions Engineer, Ken Urban sits down with Atlassian Sales Director, Sean O'Sullivan to discuss the benefits of using Atlassian solutions with DevOps.
Red Hat’s Chief Architect, Adam Clater, discusses the importance of IT Optimization in Government, the Red Hat solutions that enable optimization, and the benefits modernizing provides your agency.
Red Hat’s OpenShift Practice Lead, Chuck Svoboda, sits down with our Red Hat Sales Director, Rich Savage, to discuss the impact that containers have towards IT optimization across the public sector.