Tuesday, December 11, 2018

Information Assurance (IA)/Cybersecurity News, Alert, and Reference Resources

Part of an any IT or IA/Cybersecurity professional's job is staying on top of news, governance, vulnerabilities, and technology and implementing countermeasures, mitigating vulnerabilities, and other security guidance or policy. The following is a list of resources for IT and IA/Cybersecurity professionals, primarily oriented towards support of Federal systems and networks, in particular DoD and Intelligence Community (IC).

Web Sites:
DoD:
​Non-DoD:
  • Cybersecurity and Infrastructure Security Agency (CISA). On November 16, 2018, President Trump signed into law the Cybersecurity and Infrastructure Security Agency Act of 2018. This landmark legislation elevates the mission of the former National Protection and Programs Directorate (NPPD) within DHS and establishes the Cybersecurity and Infrastructure Security Agency (CISA). CISA provides comprehensive cyber protection, infrastructure resilience, and emergency communications. CISA's National Cybersecurity and Communications Integration Center (NCCIC) provides 24x7 cyber situational awareness, analysis, incident response and cyber defense capabilities to the Federal government; state, local, tribal and territorial governments; the private sector and international partners. CISA provides cybersecurity tools, incident response services and assessment capabilities to safeguard the networks that support the essential operations of federal civilian departments and agencies. CISA coordinates security and resilience efforts using trusted partnerships across the private and public sectors, and delivers training, technical assistance, and assessments to federal stakeholders as well as to infrastructure owners and operators nationwide. CISA provides consolidated all-hazards risk analysis for U.S. critical infrastructure through the National Risk Management Center. CISA enhances public safety interoperable communications at all levels of government, providing training, coordination, tools and guidance to help partners across the country develop their emergency communications capabilities. Working with stakeholders across the country, CISA conducts extensive, nationwide outreach to support and promote the ability of emergency response providers and relevant government officials to continue to communicate in the event of natural disasters, acts of terrorism, and other man-made disasters.
  • ​​National Cybersecurity Center of Excellence​. The National Cybersecurity Center of Excellence (NCCoE), a part of the National Institute of Standards and Technology (NIST), is a collaborative hub where industry organizations, government agencies, and academic institutions work together to address businesses’ most pressing cybersecurity issues. This public-private partnership enables the creation of practical cybersecurity solutions for specific industries, as well as for broad, cross-sector technology challenges. Through consortia under Cooperative Research and Development Agreements (CRADAs), including technology partners—from Fortune 50 market leaders to smaller companies specializing in IT security—the NCCoE applies standards and best practices to develop modular, easily adaptable example cybersecurity solutions using commercially available technology. The NCCoE documents these example solutions in the NIST Special Publication 1800 series, which maps capabilities to the NIST Cyber Security Framework and details the steps needed for another entity to recreate the example solution. The NCCoE was established in 2012 by NIST in partnership with the State of Maryland and Montgomery County, Md. To learn more, visit the links below, review our fact sheet, and read about the NCCoE’s history​.
Industry:
Commercial Sites Dedicated to Government News:
Commercial IT and IA/Cybersecurity News and Information:
Organizations:
  • ASIS. ASIS International is the leading organization for security professionals worldwide. Founded in 1955, ASIS is dedicated to increasing the effectiveness and productivity of security professionals by developing educational programs and materials that address broad security interests, such as the ASIS International Annual Seminar and Exhibits, as well as specific security topics. ASIS also advocates the role and value of the security management profession to business, the media, government entities, and the public.
  • Center for Internet Security (CIS)
  • CSIAC. The Cyber Security and Information Systems Information Analysis Center (CSIAC) is a Department of Defense (DoD) Information Analysis Center (IAC) sponsored by the Defense Technical Information Center (DTIC). The CSIAC is a consolidation of three predecessor IACs: the Data and Analysis Center for Software (DACS), the Information Assurance Technology IAC (IATAC) and the Modeling & Simulation IAC (MSIAC), with the addition of the Knowledge Management and Information Sharing technical area.
  • CMA. Cyber Management Alliance. As specialist practitioners and consultants, we deliver the highest level of specialized operational and strategic cyber security training courses, educational webinars, and an informative series of executive interviews with highly-regarded industry professionals, innovative live and virtual events, bringing about the collaboration and sharing of information worldwide.
  • ICIT. Institute for Critical Infrastructure Technology. a 501C3, next-generation cybersecurity think tank cultivating a cybersecurty renaissance for the Nation's critical infrastructure community.
  • ISACA. As an independent, nonprofit, global association, ISACA engages in the development, adoption and use of globally accepted, industry-leading knowledge and practices for information systems. Previously known as the Information Systems Audit and Control Association, ISACA now goes by its acronym only, to reflect the broad range of IT governance professionals it serves.
  • (ISC)2
  • (ISC)2 Safe and Security Online​
  • ​Military Cyber Professionals (milSuite, Google+, Twitter)
  • NICCS. National Initiative for Cybersecurity Careers and Studies. NICCS is managed by the Cybersecurity Education and Awareness Branch (CEA) within the Department of Homeland Security’s (DHS) Office of Cybersecurity and Communications (CS&C). CEA promotes cybersecurity awareness, training, and education and career structure, with the added goal of broadening the Nation’s volume of cybersecurity workforce professionals.
  • NICE. National Initiative for Cybersecurity Education. The National Initiative for Cybersecurity Education (NICE), led by the National Institute of Standards and Technology (NIST), is a partnership between government, academia, and the private sector focused on cybersecurity education, training, and workforce development. The mission of NICE is to energize and promote a robust network and an ecosystem of cybersecurity education, training, and workforce development. NICE fulfills this mission by coordinating with government, academic, and industry partners to build on existing successful programs, facilitate change and innovation, and bring leadership and vision to increase the number of skilled cybersecurity professionals helping to keep our Nation secure.
  • ICMCP. International Consortium of Minority Cybersecurity Professionals.
  • SANS. Sysadmin, Network, Audit, and Security.
​​Mailing Lists:
  • 451 Alliance​. Free offer for (ISC)2 members.
  • 53List. Need subscription information for this.
  • CIS MS-ISAC​
  • cloudsavvyIT
  • Cyber Edge. 
  • DevOps.com.
  • DoD Issuances​
  • DISA IASE
  • The Drumbeat. DISA's mission partner-focused newsletter. milSuite URL:  https://www.milsuite.mil/book/docs/DOC-426463​
  • Full Disclosure. The Full Disclosure mailing list is a public forum for detailed discussion of vulnerabilities and exploitation techniques, as well as tools, papers, news, and events of interest to the community. FD differs from other security lists in its open nature and support for researchers' right to decide how to disclose their own discovered bugs. The full disclosure movement has been credited with forcing vendors to better secure their products and to publicly acknowledge and fix flaws rather than hide them.
  • Military Open Source Software [mill-oss]. MILITARY OPEN SOURCE SOFTWARE (Mil-OSS) Mil-OSS has been established to connect and empower an active community of civilian and military open source software and hardware developers across the U.S.
  • National Cybersecurity and Communications Integration Center (NCCIC) and United States Computer Emergency Readiness Team (US-CERT). From this page, you can also subscribe to US Department of Homeland Security, National Institute of Standards (NIST), Federal Emergency Management Agency (FEMA), Department of Defense (DoD), Defense Information Systems Agency (DISA), National Guard Bureau (NGB), and other Federal organizational mailing lists.
  • Network World​. Dozens of newsletters covering news, analysis, product reviews, security, wireless, data centers, etc.
  • National Institute of Standards and Technology (NIST) Computer Security Division Computer Security Resource Center (CSRC)​
  • USCYBERCOM
  • Army Cyber Command (ARCYBER)/2nd Army G36
  • S1NET​. Army milSuite resource which provides recently published Army Directives (AD) and All Army Activity (ALARACT) messages, Military Personnel (MILPER) messages, and member contributions and requests. In the military, S1 is concerned with manpower and personnel. "S" is for Army or USMC executive staff sections within headquarters of organizations commanded by a field grade officer (i.e., Major through Colonel) and having an executive officer to coordinate the actions of the executive staff (e.g., divisional brigades, regiments, groups, battalions, and squadrons; not used by all countries. "G" is for Army or USMC general staff sections within headquarters of organizations commanded by a general officer and having a chief of staff to coordinate the actions of the general staff, such as divisions or equivalent organizations (e.g., USMC Marine Aircraft Wing and Marine Logistics Group) and separate (i.e., non-divisional) brigade level (USMC MEB) and above​.
Webinars:
  • CSIAC Webinars. Cyber Security & Information Systems Information Analysis Center (CSIAC) offers free webinars on a regular basis with experts in the technical subject areas of Cybersecurity, Software Engineering, Modeling & Simulation, and Knowledge Management/Information Sharing. This podcast series is all the webinars that have been recorded.​
Newsletters and Blogs:
Digital Magazines:
​​Twitter Feeds:
YouTube:
Facebook:
Google+
RSS Feeds
Podcasts
  • AWS Podcast. The AWS Podcast is the definitive cloud platform podcast for developers, devops, and cloud professionals seeking the latest news and trends in storage, security, infrastructure, serverless, and more.
  • Defense One. Defense One Today will provide news, analysis and ideas for national security leaders and stakeholders.
Slack
Conferences:
Other:
Posted by at
Labels: , , ,

1 comment:

  1. simfrontFebruary 20, 2021 at 8:08 PM

    This blog presented itself in a very easy and clear way. Owner of this blog found a very simple way to express its view but when you read this blog completely, you would get to know about how hard it could be to express such in a easy way.
    OTH Gold

    ReplyDelete

Subscribe to: Post Comments (Atom)