ATARC Cybersecurity Executive Order Breakfast Summit

Registration

Welcome | Opening Remarks

Visionary Keynote Briefing

Emerging Technology Talk

Securing NPEs in the Supply Chain

NIST defines a Non Person Entity (NPE) as any entity with a digital identity that acts in cyberspace, but is not a human actor.  The information age has created countless new types of NPEs from virtual machines and services to information artifacts, applications, containers, and the code itself which has been the target of many recent high-impact cyber-attacks.  In this session, we’ll cover:

• Executive Order and NIST response regarding secure software supply chains
• Best practices for securing CI/CD software delivery
• Practical resources to help your agency assess your risk in these areas and prioritize your action plan

Visionary Panel: Past, Present, and Future: Unpacking the Executive Order

Cyber threats are evolving at such rates that Federal training of cybersecurity practitioners are struggling to keep up. The continued cybersecurity push across government and industry, it is increasingly important for organizations to have proactive cyber plans in place. As the nation looks to recover from a once-in-a-century pandemic and increasingly more sophisticated cyberattacks, the U.S. government must ensure that it can secure its networks and data against evolving threats and provide resilient services to Americans during this new normal. 

Tune into this panel to hear as topic experts discuss the importance of how organizations should be proceeding with the requirements of the Cybersecurity Executive Order and how the workforce has been affected by it. What best practices do these topic experts recommend to help best protect security? What are some key tools and procedures that can be implemented? What legislation and funding are currently in place within the government? And where is the cybersecurity workforce headed?

Emerging Technology Talk

Rising to Software Regulation: Section 4 Executive Order Compliance

On May 13th, 2021, President Biden released the Cybersecurity Executive Order. For the first time in history, cybersecurity hygiene and software supply chain security has been under the microscope of the federal government. Over the last year, methods for compliance with the Executive Order have been developed, including new federally mandated secure development requirements, and certification requirements that will become mandatory in 2023.

Join the discussion and learn more about:
● The changes to software supply chain security management that we’ve
seen since the 2021 Executive Order
● Why a software bill of materials is so vital in establishing more secure
development
● Software security best practices you can start implementing immediately

Panel: Untrusted until Trust is Established: The Components of Zero-Trust

While traditional network security models have assumed endpoints and users within organization networks can be implicitly trusted, the zero-trust approach takes into account scenarios like threat actors that have stolen legitimate account credentials as well as insider threats. This type of model encourages continual monitoring and authentication of each endpoint under the premise that no actor, system, network or service within the “security perimeter” can be trusted. 

Zero-trust cybersecurity may eventually lead to superior security, but along the way, it can put companies at greater risk. One frequently overlooked obstacle to switching to a zero-trust cybersecurity model is the need for ongoing administration. Zero-trust models rely on a vast network of strictly defined permissions, but companies are always evolving. People move into new roles and change locations. Access controls must be updated each time to ensure the correct people have access to specific information. Keeping the permissions accurate and up to date requires ongoing input.

Tune into this panel to hear Federal topic experts discuss how they are moving to implement zero-trust architecture and the challenges that agencies can face while keeping pace with the ongoing federal requirements.

Emerging Technology Talk

Zero Trust & Varonis: The Data Pillar

As cyber threats targeting our federal resources become more advanced, agencies must adopt a zero-trust security stack that protects critical agency data stores. According to EO 14028 and OMB 22-09 agencies need to stop relying on legacy perimeter bases strategies, and inventory all sensitive data, enforce least privilege and explicit verification on all access. With Varonis, agencies can get ahead of the mandates and satisfy the data based Zero Trust requirements.

This presentation will cover how agencies can address current Zero Trust data requirements and modernize agencies’ data strategies to move from a legacy architecture to an advanced zero trust.

Panel: Prioritizing Improvements to Your Software Supply Chain Security

Traditional security efforts have centered around securing the perimeter, and the responsibility for security is increasingly falling to developers. Specifically, a key element of the Executive Order is focused on making sure federal agencies are NIST 800-53 compliant within their software supply chain security. 

In order to secure the software supply chain, that entails knowing exactly what components are being used in your software products—everything that impacts your code as it goes from development to production.

Tune into this panel to hear as topic experts discuss how they are enforcing their supply chain security and what risks/benefits come along with that. What are these agencies doing to make sure they are NIST 800-53 compliant? What are the biggest threats to supply chain security? How does the vendor assess the security of its software? 

ATARC Industry Partners

Register

Zoom for Government enables ATARC remote collaboration opportunities through its cloud platform for video and audio conferencing, chats and webinars across all devices. Allowing for individuals from all areas of government, industry and academia to communicate directly. 

*** ATARC is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.nasbaregistry.org. Program Level: Overview, no prerequisites required. Advance preparation: none. Delivery Method: Group Live. Field of Study: Information Technology. Registration #140762. In accordance with the standards of the National Registry of CPE Sponsors, CPE credits have been granted based on a 50-minute hour. Refund, cancellation and complaint resolution policy.