Government shutdown and budgeting debates hurt agencies\u2019 ability to adequately protect their networks, because they lose time to procure necessary technologies, according to Trey Hodgkins, senior vice president for public sector at the Information Technology Alliance for Public Sector.<\/p>\n\n\n\n
As Congress looks likely to pass its fourth continuing resolution in five months, agencies will have a hard time procuring cybersecurity technologies through the Department of Homeland Security\u2019s Continuous Diagnostics and Mitigation program and be forced to deal with shorter appropriations timetables.<\/p>\n\n\n\n
\u201cAgencies cannot begin to spend dollars until they are appropriated, and if their planning, their execution, their identification of contractors, identification of which tools they need happens and we end up with a fiscal year where only five months are actually appropriated, it\u2019s too short of a time frame to effectively complete that, deploy the activity and get the dollars obligated for a contract,\u201d Hodgkins told members of the House Homeland Security Committee Jan. 17.<\/p>\n\n\n\n
\u201cSo it creates tremendous challenges, and those are some areas that delay implementation of a lot of programs, including CDM.\u201d<\/p>\n\n\n\n
The 2018 fiscal year occurs from Oct. 1, 2017, to Sept. 30, 2018, meaning that, even should Congress pass a complete appropriations bill by Friday, Jan. 19, agencies will have just over eight months of funding to work with when procuring technology for their CDM programs.<\/p>\n\n\n\n
According to Hodgkins, agencies also rely primarily on the DHS budget for CDM rather than putting line items in their own budget requests.<\/p>\n\n\n\n
Hodgkins suggested that Congress work to accelerate procurement cycles so that agency CDM programs can keep pace with the evolution of cyberthreats.<\/p>\n\n\n\n
\u201cThe committee should work to ensure that there are sufficient numbers of adequately trained contracting personnel to deploy CDM tools in a timely fashion, to keep up with the evolving threat landscape,\u201d said Hodgkins.<\/p>\n\n\n\n
Rep. John Ratcliffe, R-Texas, noted in his opening statement that the federal government isn\u2019t terribly good at procuring IT tools to begin with.<\/p>\n\n\n\n
\u201cIt\u2019s no secret that the government has trouble buying technology. Old and outdated technology is not only a barrier to the federal government completing its mission to serve the American people in a digital world, but brings with it insecurities and raises serious cybersecurity risks for each and every agency and department,\u201d said Ratcliffe.<\/p>\n\n\n\n
Frank Dimina, area vice president for federal at Splunk, also suggested that agencies better take advantage of the data already collected through the CDM program by using it to create a \u201ccyber weather map\u201d of threats to the federal government.<\/p>\n\n\n\n
\u201cOne key opportunity it to better leverage the existing data collected throughout CDM. In our view, DHS should transform the existing CDM integration layer into a common data analytics fabric that is standardized across the program,\u201d said Dimina.<\/p>\n\n\n\n
\u201cToday, CDM data presented in the federal dashboard is summary data. Like a photograph, summary data provides a snapshot in time, but lacks the fidelity of a live video feed. Providing DHS analysts with greater detail and drill-down capability would significantly enhance their ability to protect the homeland.\u201d<\/p>\n\n\n\n
Dimina added that data collected in the CDM program should be compatible with the DHS Einstein program, a system for monitoring, detecting and blocking threats to federal agencies, in order to expand agency cyber capabilities with what is already available.<\/p>\n","protected":false},"excerpt":{"rendered":"
Prolonged budget debates in Congress can inhibit federal agencies\u2019 ability to effectively implement phases of the DHS Continuous Diagnostics and Mitigation program, which helps monitor and protect government networks.<\/p>\n","protected":false},"author":7,"featured_media":30942,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":14,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":{"9":{"categories":["home","daily-brief","newsletters"],"primary_category":""}}},"categories":[38,3574,106,110,14,33,9,6],"tags":[],"coauthors":[2853],"class_list":["post-11826","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-congress","category-cyber","category-daily-brief","category-it-cloud-report","category-it-networks","category-newsletters","category-federal-oversight","category-acquisition"],"acf":{"subheadline":"","legacy_arc_id":"W6LE7JYIFFERDFWVRRVZGLAZ5A","arc_canonical_url":"\/it-networks\/2018\/01\/17\/shutdown-could-make-it-harder-to-prevent-cyberattacks\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n