The Defense Department is taking a hard look at the traditionally long and thorough processes in place to certify and accredit new commercial tools and services, and officials are looking to industry to play a major role to potentially reform the way certification and accreditation (C&A) is done.<\/p>\n\n\n\n
“One of the things we are going to do \u2014\u00a0and you’ll see an announcement out in a couple weeks \u2014\u00a0is get a team together of industry and government experts on security and accreditation processes,” DoD CIO Terry Halvorsen told reporters on April 8.<\/p>\n\n\n\n
A public-private team led by Richard Hale, deputy CIO for cybersecurity, and Marianne Bailey, principal director for DoD CIO cybersecurity, is set to evaluate how the Pentagon can better conduct security and accreditation in a way that makes tech-buying faster and more nimble\u00a0\u2014\u00a0particularly when it comes to cloud services, Halvorsen said.<\/p>\n\n\n\n
“I think we’ve reached a point where we no longer can do specific hardware or software accreditation\u2026today if you’re fielding a cloud environment, you’re [updating] continually in a cloud environment,” Halvorsen said. “Microsoft, Amazon \u2014 they change their cloud security process almost nightly. Our processes wouldn’t sustain that.”<\/p>\n\n\n\n
Instead, Halvorsen said he hopes that a thorough review of C&A by process, and at some point possibly by vendor, will accelerate the purchase of services from companies that already have a solid track record with the office.<\/p>\n\n\n\n
Ideally, that would allow DoD officials to look at a vendor and say, “‘your process within your specific area is good. We like it. We’re going to keep validating on a yearly basis, but yes it’s good and we’re going to accept your tools as you develop them.’ If we don’t do something like that, we can’t keep pace,” Halvorsen said. “I don’t know that that will be the model, that’s just an example, but that’s where we are trying to get to.”<\/p>\n\n\n\n
He added that response to the project from industry has been “phenomenal\u2026industry is all in.”<\/p>\n","protected":false},"excerpt":{"rendered":"
The DoD CIO wants to reevaluate how the Pentagon certifies and accredits new technologies.<\/p>\n","protected":false},"author":7,"featured_media":39102,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":16,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[16],"tags":[],"coauthors":[2772],"class_list":["post-13257","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-it-networks"],"acf":{"subheadline":"","legacy_arc_id":"VSB5IVNOVBCRZBRLM5SRKDPKPE","arc_canonical_url":"\/it-networks\/2016\/04\/08\/dod-to-reassess-tech-accreditation-process\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n