Creating a Virtual SOC
This is an analysis of the Logrhythm(R) SIEM Product, its implementation, and potential cost savings focused on a DOD IT...
Year: 2018
The Importance of Continuous Monitoring
How the National Security Agency (NSA) "Pwned" Cisco VPNs for 11 Years In the article, NSA Pwned Cisco VPNs for...
“Best Practice” Should be a Process NOT a Catch-phrase
The Four Key Components Best Practice has been a long held position by many communities to include program management and...
COMMENTARY: F-35 JSF Program, the 2018 “What’s Behind the Curtain” Candidate
The Joint Strike Fighter's (JSF) Autonomic Logistics Information System (ALIS) "Most-Public-Secret" The article, DOD Struggles with Risk Management Framework Adoption, https://defensesystems.com/articles/2018/11/30/dod-risk-management-framework.aspx is...
The Coming Storm…Security Clearance & Polygraph Shortages
This is an update to my original June 22, 2017 article regarding the state of polygraphs. Even with current changes...
Top 5 – 2018 Cyber-Analytics and Historical Gift Books
The must read books for 2018 These are the BEST books for the 2018 Cybersecurity Professional. These are the Top...
“We Need Every Wo(man) on Deck…”
The challenges of getting more women into STEM and cybersecurity If you haven’t heard, there was a big upset at...
SERIES3: Even More Challenges Facing Cyberlaw
The final installment on cyberlaw, issues, challenges, and headaches.... https://cybersentinel.tech/2018/11/10/series-virtual-evidence-challenges-in-cyberlaw/ MORE & MORE CHALLENGES The other tests facing the value...
5 Current Myths in Cyber
These myths are holding us back. We need to think more critically of the implications and impacts Myth 1: "Information...
PROPOSAL: A Federated Cybersecurity Domain as a matter of US Policy
What if the Risk Management Framework (RMF) applied to both the public and private sector ? SUMMARY This policy proposal...
HHS’s Blockchain Initiative & Its Security Pitfall
A Review of Cybersecurity Shortsightedness I really enjoy attending the Washington DC's Chapter of the National Contract Management Association's (NMCA)...
SERIES2: Cyberlaw for Cyber Professionals
PART 2: What we ALL need to know Covered in This Article: Fourth AmendmentFifth AmendmentElectronic Communications Privacy Act (ECPA)Communications Assistance...
BOOK: “The Signal and the Noise”
Considered one of the most insightful leaders in Predictive Analytics (PA) Silver, N. (2012). The signal and the noise: Why...
SERIES: Virtual Evidence & Challenges in Cyberlaw
PART 1: The Benefits & Dangers to Law Enforcement (LE) BACKGROUND The Washington Post Magazine (Sellers, 2015) described a fictional...
Is Artificial Intelligence our Savior or SkyNet?
The Good, Bad & Ugly The hype on artificial intelligence (AI) is in two camps: it's the best thing ever...
What’s Next for Better Cyber Predictive Analytics?
How can Predictive Analytics (PA) move forward to improve our ability to better anticipate problems and threats? The use of...
A Need for Better Cybersecurity Time Management
Some Suggestions for the Department of Defense A Hybrid-Risk Management Framework (RMF) Step 3 A challenge facing the Department of...
Should We Cyber-Snoop?
Cyber Surveillance, its implications, and China's embrace Are you aware of the potential for many of these new technologies? I...
President Xi, Tear Down This “Great Firewall”
A Disruptive Technology Solution for the 21st Century: "Voice of America 2.0" Is this the same attitude that blindsided us...
Cyber and Program Risk Management: Close Cousins…mostly
While not greatly different, there are some unique variations The history of Risk Management (RM) can be traced to the...
The Cybersecurity Skills Shortage is 50% Worse Than We Believe
The mainstream analysis is seriously flawed A shortage of nearly three million: This number may seem abstract,but it’s having a...
SYNOPSIS: Risk Management Strategies for Security Threats
A review of academic work addressing how to improve cybersecurity Larrimore, N. P. (2018). Risk management strategies to prevent and...
CONSIDER: Introducing “SPITS” as an Agile Cyber-Solution Framework
We consider the following mini-framework This is a discussion on an emerging cybersecurity tactical approach to inject an even lower...
EXCLUSIVE: ED IG Complaint: Bypassing Federal Retention Requirements
EDITOR: We received this from the original complainant who died several months ago and am sharing this as a public...
2018 National Cyber Strategy: Barely a Wimper
What does this mean for federal contractors? The September 2018 "National Cyber Strategy" was released by President Trump with barely...
CYBERLAW: The Stored Communications Act (SCA)
A Case Analysis SUPREME COURT OF THE UNITED STATES City of Ontario, California, Et. Al. v. QUON Et Al. Certiorari...
Supply Chain Risk Management (SCRM): The Next Major Crisis
Excellent article just appeared (Oct 4, 2018) in Bloomberg Businessweek: https://www.bloomberg.com/news/features/2018-10-04/the-big-hack-how-china-used-a-tiny-chip-to-infiltrate-america-s-top-companies A must-read of the Chinese infiltration into the US...
The Importance of PS-3 (Personnel Screening)
It's All About the Insider Threat Personnel Security controls may seem cumbersome and involved, especially when talking about unclassified systems....
Is the Dark Web All Bad?
The Differences between the "Deep" and "Dark" Web Some people have heard of the Dark Web, many others have not....
REVIEW: China’s Position on the 2014 Sony Attack: Implications for U.S. Response
Wilson, J. (2015). China's Position on the Sony Attack: Implications for the US Response. Washington, DC: US-China Economic and Security...
