FCW Summit: CDM

The Continuous Diagnostic and Mitigation (CDM) program has matured and broadened its offerings and full deployment of agency dashboards is on the horizon. In the last year, however, ominous high profile breaches in commercial and critical infrastructure networks have highlighted the continued importance of strong cybersecurity across federal networks.

In the wake of the pandemic, federal IT managers are faced with an increasingly complex cybersecurity environment with a broader potential attack surface as networks accommodate a more diffuse workforce. Adding even more to the complexity is the ongoing IT modernization, which is shifting data and resources to the cloud.

The President’s executive order, released in May, ups the game against cyber threats, naming prevention, assessment and remediation as top national cybersecurity priorities. The order calls for increasing the government’s visibility into cyber threats, as well as mandating basic cybersecurity practices across the federal government such as multi-factor authentication, encryption and end point detection. It also called for the establishment of a Cybersecurity Safety Review Board.

Learn from program executives, industry executives and agency users about new capabilities and challenges and how agencies are dealing with the increased threats.

Attendees will come away with an improved understanding of:

  • How CISA is modernizing cybersecurity programs, services, and capabilities to be fully functional with cloud-computing environments with zero trust architecture
  • The CDM program’s evolving dashboard ecosystem
  • How the President’s mandate for agencies to update CDM agreements to secure object-level data is progressing, as well as efforts to gain more visibility into threat data
  • Emerging tech’s role in cyber detection, including zero trust
  • How new cybersecurity tools and services can be incorporated into CDM
  • The 4 core capabilities of CDM—management of assets, data protection, network security, and user and access management

Speakers

/media/images/GIG/GIGEvents/2021Custom/Speakers/Phipps_JaredBW.jpg

Jared Phipps

SVP of Worldwide Sales Engineering

SentinelOne

Read More
/media/images/GIG/GIGEvents/2021Custom/Speakers/Phipps_JaredBW.jpg

Jared Phipps

SVP of Worldwide Sales Engineering

SentinelOne

Jared Phipps has been involved in cybersecurity professionally since 2001. As Senior Vice President of Worldwide Sales Engineering at SentinelOne, Phipps uses his passion and experience in cybersecurity to advise prospects and clients through security projects. Phipps spent six years leading the sales engineering, professional services, and IR at Fidelis Cybersecurity. Prior to joining Fidelis, he worked for MITRE supporting NSA Cryptographic Modernization Programs for the United States Air Force. Phipps is a veteran of the United States Air Force, where he worked in cyber defense and offensive cyber operations.

/media/images/GIG/GIGEvents/2021Custom/Speakers/Moore_KelvinBW.jpg

Kelvin Moore

Chief Information Security Officer (CISO)

Small Business Administration

/media/images/GIG/People/W/Whitworth_AlexBW.jpg

Alex Whitworth*

Director of Supply Chain Management

Carahsoft

*Providing Session Opening Remarks

Read More
/media/images/GIG/People/W/Whitworth_AlexBW.jpg

Alex Whitworth*

Director of Supply Chain Management

Carahsoft

*Providing Session Opening Remarks

Alex Whitworth is an IT executive with more than 11 years of experience in all aspects of public sector sales, marketing and channel development. As Director at Carahsoft Technology Corp., he manages several sales teams, providing leadership and insight into the Public Sector IT marketplace. His teams play a major role in supporting the government’s evolving cybersecurity demands, with a deep focus towards supporting agencies with successful zero trust adoption. In addition, he leads Carahsoft Technology Corp.’s corporate strategic efforts in helping agencies with Supply Chain Risk Management objectives and helping organizations meet compliance with the DoD’s CMMC initiative.

As the trusted government IT solutions provider, Carahsoft serves as the largest government distributor for Microsoft, RSA, Forescout, IronNet, and Eclypsium among others. The company also drives value for an extensive ecosystem of resellers, system integrators, and consulting partners serving the government, education and healthcare markets.

/media/images/GIG/GIGEvents/2020Custom/Speakers/GeraldCaronBW.jpg

Gerald Caron III

Chief Information Officer, OIG

U.S Department of Health and Human Services

/media/images/GIG/People/C/Catanoso_DavidBW.jpg

David Catanoso

Director, Enterprise Cloud Solutions Office

Department of Veterans Affairs

Read More
/media/images/GIG/People/C/Catanoso_DavidBW.jpg

David Catanoso

Director, Enterprise Cloud Solutions Office

Department of Veterans Affairs

Mr. Catanoso has over 25 years of experience in fields ranging from database development to enterprise architecture design and enterprise cloud solutions, contributing to a solid track record of success culminating in the overall growth of multiple technology initiatives. Mr. Catanoso led a cross-organizational team over three years to design and implement the VA Enterprise Cloud (VAEC), capable of hosting most of the VA’s applications. The VAEC is designed to be controlled by the VA and to accommodate all applications up to and including the FedRAMP High security level.

Prior to joining the VA in 2011, Mr. Catanoso worked in the private sector serving in roles related to project management, strategic planning, and systems integration. He also served as a Signal Officer in the US Army. A native of New Jersey, Mr. Catanoso holds a bachelor’s degree in Electrical Engineering from the University of Pennsylvania and a master’s degree in Computer Science from Fairleigh Dickinson University. In 2017 he completed the Senior Executive Fellows program at the Harvard Kennedy School of Government.

He currently serves as Director for the Enterprise Cloud Solutions Office (ECSO) at the Department of Veterans Affairs (VA). ECSO enables the leveraging of cloud solutions by internal and external customers and ultimately Veterans by providing standardization and common services. ECSO will support the efficient migration to and utilization of cloud technology by project teams/business sponsors and their customers.

Mr. Catanoso is married with 4 children. He is a member of the Civil Air Patrol and the Knights of Columbus. In his spare time he enjoys alpine skiing, scuba diving, target shooting, video games and photography.

/media/images/GIG/People/U/Usserman_ChrisBW.jpg

Chris Usserman

Director of Security Architecture

Infoblox

Read More
/media/images/GIG/People/U/Usserman_ChrisBW.jpg

Chris Usserman

Director of Security Architecture

Infoblox

Chris Usserman is a Director of Security Architecture and subject matter expert with Infoblox. Chris brings over 30 years’ experience in the U.S. intelligence community, and applies that experience by helping clients understand and incorporate cyber business intelligence to mature client cyber security programs. Chris’ focus is on the U.S. Government, and extends that public/private partnership to enhance the security posture of multiple sectors and communities of interest. Chris has been invited to speak on the subject of DNS and cyber security at global conferences. Prior to Infoblox, Chris was Senior Director, Applied Intelligence as well as Director, Government Programs at iSIGHT Partners (FireEye) for over three years. Chris was also a Lead Research Scientist at Lockheed Martin’s Advanced Technology Laboratories and served 14 years in the U.S. Air Force.

/media/images/GIG/GIGEvents/2021Custom/Speakers/Fanguy_JohnBW.jpg

John Fanguy

Chief Technology Officer

CyberRes Federal

Read More
/media/images/GIG/GIGEvents/2021Custom/Speakers/Fanguy_JohnBW.jpg

John Fanguy

Chief Technology Officer

CyberRes Federal

John is a former Federal technology executive, and has spent 30 years at Federal and Fortune 1000 organizations. During his 14 years at Accenture, he served clients globally designing, developing, and operating innovative solutions in customer care, infrastructure operations, financial systems, and logistics. John has more than a decade of helping deliver innovative Federal programs to agencies throughout the Federal government including DoD, DHS, Commerce, and HHS. John received his Bachelor and Masters of Electrical Engineering from Georgia Tech. He is an active mentor to early stage, leading-edge software technology companies.

/media/images/GIG/GIGEvents/2021Custom/Speakers/Hamblin_JoeBW.jpg

Joe Hamblin

U.S. Federal CTO

Armis

Read More
/media/images/GIG/GIGEvents/2021Custom/Speakers/Hamblin_JoeBW.jpg

Joe Hamblin

U.S. Federal CTO

Armis

Mr. Hamblin has worked with the TIC 2.0 and TIC 3.0 programs for many years. Mr Hamblin was able to leverage his many years of Cyber Security real world experience and able this to apply this to Zero Trust. Mr Hamblin leveraged his many years of Cyber Security real world experience to architect Zero Trust solutions that work today. Mr. Hamblin was at IBM for 24 years and served as Federal Security CTO and lead support for Federal Standards. Among many projects, he led the IBM Continuous Diagnostics and Mitigation (CDM) solutions and designed several very large Identity, Credential and Access Management (ICAM) solutions with deployments of over 70 million users.

/media/images/GIG/GIGEvents/2021Custom/Speakers/Hale_LarryBW.jpg

Larry Hale

Director, IT Security Subcategory

U.S. General Services Administration

Read More
/media/images/GIG/GIGEvents/2021Custom/Speakers/Hale_LarryBW.jpg

Larry Hale

Director, IT Security Subcategory

U.S. General Services Administration

Lawrence Hale is the Director of the IT Security subcategory within the Office of Information Technology Category (ITC) in GSA’s Federal Acquisition Service (FAS). The Federal Acquisition Service provides buying platforms and acquisition services to Federal, State and Local governments for a broad range of items from office supplies to motor vehicles to information technology and telecommunications products and services. As an organization within FAS, ITC provides access to a wide range of commercial and custom IT products, services and solutions.

Mr. Hale is responsible for addressing the challenges of ensuring visibility of IT Security Solutions such as Highly Adaptive Cybersecurity Services (HACS), Continuous Diagnostics & Mitigation Tools and Supply Chain Risk Management (SCRM), while ensuring that FAS IT products and services align with federal security standards and mandates. Previously, Mr. Hale served as Director of ITC’s Customer Engagement Division. There he was responsible for planning and implementing customer development strategies for the Information Technology Category including Government-Wide Acquisition Contracts (GWAC) and business lines in the ITC portfolio.

Mr. Hale spent more than two years as Chief Information Security Officer of Affiliated Computer Services, a Fortune 500 Information Technology company. Previously, as Director of the Federal Computer Incident Response Center, (FedCIRC) Mr. Hale led the transition of that organization from GSA into DHS, and served as Deputy Director of the National Cyber Security Division's Computer Emergency Readiness Team (US-CERT).

In January 1999, Mr. Hale became the first military officer assigned to the National Infrastructure Protection Center (NIPC). He retired from the U.S. Navy as a commander in 2001. He has a master's degree in National Security and Strategic Studies from the Naval War College, and a master's in Aeronautical Science from Embry-Riddle Aeronautical University. He is a Federal Computer Week, Federal 100 Award winner, and a winner of the Association for Federal Information Resource Management (AFFIRM) 2016 Leadership Award.

/media/images/GIG/People/R/Reilly_DennisBW.jpg

Dennis Reilly

Vice President, Public Sector

Gigamon

Read More
/media/images/GIG/People/R/Reilly_DennisBW.jpg

Dennis Reilly

Vice President, Public Sector

Gigamon

Dennis Reilly has been a Vice President at Gigamon for over eight years, leading the group to 43% compounded annual growth and a 58% market share in the network visibility and analytics space. With over 30 years of technology and business experience, Mr. Reilly is a strong advocate for the Federal, State and local governments and educational institutions applying information technology to strengthen security and improve innovation and productivity. He has supported government agencies in Continuous Diagnostics and Mitigation (CDM) program initiatives and implementations for 7 years.

Prior to joining Gigamon, Dennis held sales leadership positions at companies such as Oracle, Netscape, BEA, and Plumtree Software. Earlier in his career, Mr. Reilly served as an officer in the U.S. Navy and earned his Bachelor’s degree at the United States Naval Academy and has a Master’s degree in business from Boston University.

Dennis resides in northern Virginia with his wife and has four adult children.

/media/images/GIG/GIGEvents/2021Custom/Speakers/Stanley_MartinBW.jpg

Martin Stanley

Branch Chief for Strategic Technology

Cyber and Infrastructure Security Agency (DHS/CISA)

Read More
/media/images/GIG/GIGEvents/2021Custom/Speakers/Stanley_MartinBW.jpg

Martin Stanley

Branch Chief for Strategic Technology

Cyber and Infrastructure Security Agency (DHS/CISA)

Martin Stanley, CISSP, is the Branch Chief for Strategic Technology at the Cybersecurity and Infrastructure Security Agency (CISA). Martin previously led the Cybersecurity Assurance Program at CISA and the Enterprise Cybersecurity Program at the U.S. Food and Drug Administration. Prior to his federal service Martin held executive leadership positions at Vonage and UUNET Technologies. Martin is co-author of Digital Health: Understanding the Benefit-Risk Patient-Provider Framework, published by Oxford University Press (March, 2021).

/media/images/GIG/GIGEvents/2021Custom/Speakers/Livingston_CharlesBW.jpg

Charles Livingston, Sr.

CDM Program Manager

Dept. of Health and Human Services

Read More
/media/images/GIG/GIGEvents/2021Custom/Speakers/Livingston_CharlesBW.jpg

Charles Livingston, Sr.

CDM Program Manager

Dept. of Health and Human Services

Charles is leading the Executive Engagement, Stakeholder Management and Operational Implementation of the HHS CDM Program, across all twelve Agency Operating Divisions (OpDivs) to include CDC, CMS, FDA, OS and NIH. He also serves as a principal advisor to HHS Cybersecurity leadership in supporting the initiative to ensure HHS and its OpDivs have an enhanced understanding of cyber threats and vulnerabilities to fix worst problems first.

He’s completed a 23 year naval aviation career, retiring at the rank of Commander (O5) and is a proven Cyber Security and Program Management Professional. A graduate of Cornell University and the Naval Postgraduate School, he’s a Washington D.C. native, married to his best friend Ellen and has a son, two daughters and a grandson.

/media/images/GIG/GIGEvents/2021Custom/Speakers/Rachwald_RobBW.jpg

Rob Rachwald

Director of Zero Trust Strategy

Palo Alto Networks

Read More
/media/images/GIG/GIGEvents/2021Custom/Speakers/Rachwald_RobBW.jpg

Rob Rachwald

Director of Zero Trust Strategy

Palo Alto Networks

Rob is a 20 year veteran of the cyber security industry with experience across application, network, cloud and endpoint security and comes to Palo Alto through Expanse. Rob ran product marketing at Fortify (acquired by HP), security strategy at Imperva during their IPO, communications at FireEye during their IPO, marketing at RedOwl (acquired by Forcepoint) and most recently ran marketing at ShieldX.

/media/images/GIG/GIGEvents/2021Custom/Speakers/Fisk_GinaBW.jpg

Gina Fisk

CISO

Department of Energy Office of Science (DOE-SC)

Read More
/media/images/GIG/GIGEvents/2021Custom/Speakers/Fisk_GinaBW.jpg

Gina Fisk

CISO

Department of Energy Office of Science (DOE-SC)

Gina Fisk is an accomplished executive who has dedicated her career to countering threats to our national security. She has a proven track record of transformational leadership and building national and international collaborations through interagency and public-private partnerships. Ms. Fisk has strengthened the Nation’s cybersecurity posture over her 25-year career by transforming department-level cybersecurity programs; integrating cyber defenses across distributed federal entities; countering foreign adversaries, malicious insiders, and criminal groups; developing data-driven strategy and policy for the nuclear weapons complex; leading scientific innovation with national laboratories; and training the interagency cybersecurity workforce.

Ms. Fisk currently serves as the Chief Information Security Officer of the Department of Energy Office of Science (DOE-SC). DOE-SC is a $7B enterprise that stewards 10 national laboratories and is the lead agency for scientific research for our Nation’s energy future. In this capacity she establishes and implements the enterprise cybersecurity vision, strategy, and program to safeguard the Nation’s scientific leadership and protect scientific assets from advanced cyber threats. Previously, as a senior advisor to the Department of Energy’s Chief Information Officer, Ms. Fisk led the enterprise transformation for information sharing and safeguarding, including cybersecurity and integrated cyber operations, across 97 DOE sites spanning 27 states. By unifying the best cyber talent from across the enterprise for the mutual defense of all DOE sites, she built a program that invigorated a collaborative, intelligence-driven, distributed approach to cyber response to strengthen DOE’s security posture. Ms. Fisk has also served in a variety of cybersecurity leadership roles at Los Alamos National Laboratory.

Ms. Fisk is passionate about bridging the digital divide and attracting students, and especially women and girls, into Science, Technology, Engineering, and Math (STEM) fields. She has led several computing and cybersecurity education programs that introduced thousands of high school students to computing and programming, and she also personally mentored 75 high school, undergraduate, and graduate students in cybersecurity. She taught undergraduate classes in computing and cybersecurity at several different universities, including specialized summer programs for high school teachers in New Mexico. Most recently, she served on the program committee for the Grace Hopper Celebration of Women in Computing, which brought over 8,000 women together to discuss career and research interests in computing.

Ms. Fisk earned her B.S. in Computer Science from the University of New Mexico and her M.S. in Computer Science from the University of Southern California, with research specializing in systems security, steganography, privacy, and data loss prevention. She has over 250 academic citations and several awards in cybersecurity including two Distinguished Performance Awards.

/media/images/GIG/GIGEvents/2021Custom/Speakers/Jensen_ChrisBW.jpg

Chris Jensen

Public Sector Business Development Manager

Tenable

Read More
/media/images/GIG/GIGEvents/2021Custom/Speakers/Jensen_ChrisBW.jpg

Chris Jensen

Public Sector Business Development Manager

Tenable

Chris Jensen is the Public Sector Business Development Manager at Tenable, where he develops and supports strategic cybersecurity initiatives and programs in federal, state, and local markets. Prior to joining Tenable in 2017, Chris served in a broad range of leadership roles in Public Sector IT contracting, including business operations, contract and program management, business development and capture. Chris began his professional career as an officer in the U.S. Navy. After leaving active service, he continued to serve in the U.S. Navy Reserve until his retirement in 2008. A graduate of the U.S. Naval Academy, Chris also holds a J.D. from The George Washington University Law School.

/media/images/GIG/People/J/Johnson_ChristopherBW.jpg

Chris Johnson

Deputy Chief Technology Officer

National Geospatial-Intelligence Agency

Read More
/media/images/GIG/People/J/Johnson_ChristopherBW.jpg

Chris Johnson

Deputy Chief Technology Officer

National Geospatial-Intelligence Agency

Mr. Johnson serves as the Director of the Cybersecurity Operations Center at the National Geospatial-Intelligence Agency. Named to the position in March 2019, Mr. Johnson oversees the 24x7 cyber network defense of NGA’s global information technology enterprise. He leads a combined civilian-contractor-military workforce of approximately 150 across multiple NGA mission locations. Mr. Johnson was appointed as the Intelligence Community Tri-Chair on the Committee on National Security Systems Subcommittee in November of 2018.

Prior to this assignment, Mr. Johnson served as the Chief of Risk Management for the Intelligence Community Chief Information Officer (IC CIO) at the Office of the Director of National Intelligence. In this role he supported and advised the IC CIO and IC Chief Information Security Officer in managing the shared risk of the IC Information Environment by leading and coordinating performance analysis, independent security assessments, enterprise IT risk assessments, and cybersecurity planning and budgeting functions for the Intelligence Community. Additionally, he served as the United States Representative to the Five Eyes Enterprise Information Assurance Group where he represented U.S. policy positions and interests to a group of multinational cybersecurity experts chartered to ensure the secure and trusted intelligence sharing, integration, and collaboration between five partner nations.

Mr. Johnson has over 17 years of experience in the public and private sectors, gaining expertise as an electronics technician, cybersecurity officer, and IT Program Manager. He joined the federal service in 2012 with the NGA, focusing on cybersecurity, vulnerability analysis, and risk management. His work on strategic planning, budgeting, and program execution began in 2014, when he became the first Cybersecurity Lead for NGA’s newly established Portfolio Management governance structure.

From 2007-2012, Mr. Johnson was a defense industry consultant, providing services related to IT risk management, assessment and authorization of information systems, and cybersecurity testing and evaluation for the U.S. Air Force and NGA.

A veteran of the United States Navy, Mr. Johnson served on active duty from 2001-2007 as an AEGIS SPY1A radar systems technician on board the USS Yorktown, and an IT systems and network administrator for Tactical Air Control Squadron 12. He has served in U.S. Navy Reserve since leaving active duty and currently holds the rank of Chief Petty Officer.

Mr. Johnson holds a Bachelor of Science degree in Information Technology from Excelsior College and is a member in good standing with ISC2 and ISACA, holding the credentials of Certified Information Systems Security Professional, and Certified Information Security Manager.

/media/images/GIG/GIGEvents/2020Custom/Speakers/BetsyKulickBW.jpg

Betsy Kulick

Senior Advisor, Continuous Diagnostics and Mitigation (CDM) Program

Cybersecurity and Infrastructure Security Agency (CISA)

Read More
/media/images/GIG/GIGEvents/2020Custom/Speakers/BetsyKulickBW.jpg

Betsy Kulick

Senior Advisor, Continuous Diagnostics and Mitigation (CDM) Program

Cybersecurity and Infrastructure Security Agency (CISA)

Betsy Kulick is a Senior Advisor to the Continuous Diagnostics and Mitigation (CDM) Program within the Cybersecurity and Infrastructure Security Agency (CISA).

As the former Deputy Program Manager and current Senior Advisor, she has specific responsibilities for managing portfolios to deliver CDM capabilities to agencies, engineering deployment and architecture-related activities, program support and acquisition, and outreach activities. Through partnerships with agencies and industry, the CDM Program fortifies the cybersecurity of civilian government data and networks by providing capabilities that deliver relevant, timely and actionable information. CDM enables cybersecurity professionals to manage risks by providing innovative tools, processes, governance and training required to defend against cybersecurity threats and vulnerabilities.

Betsy was engaged with the program from its inception, helping shape the program approach and delivery to the 23 civilian Federal Chief Financial Officer (CFO) Act agencies, as well as to 70+ non-CFO Act agencies. Betsy has been supporting DHS since its establishment, having served as the Information System Security Officer for several early DHS networks, one of which connected the Federal government with private infrastructure entities.

Betsy holds a B.A. degree in political science from Pomona College in Claremont, CA, a Master’s in International Affairs from Columbia University in New York City and is a Certified Information Systems Security Professional.

/media/images/GIG/GIGEvents/2021Custom/Speakers/Brodbent_JoshBW.jpg

Josh Broadbent*

Sr. Public Sector Security Director

BeyondTrust

*Providing Session Opening Remarks

Read More
/media/images/GIG/GIGEvents/2021Custom/Speakers/Brodbent_JoshBW.jpg

Josh Broadbent*

Sr. Public Sector Security Director

BeyondTrust

*Providing Session Opening Remarks

Josh has more than 20 years in IT experience and has architected identity and privilege access management solutions for over 3 million user accounts. He joined BeyondTrust in 2018 as a Senior Solutions Engineer and was quickly selected to lead the team. Prior to BeyondTrust, he was a senior Solutions architect for Quest Software. He began his career by founding a managed service provider (MSP) at 12. He held multiple industry certifications by 14, making him the youngest in the nation to do so. That MSP went on to become successful, and ultimately his launching point into Public Sector architecture and support.

/media/images/GIG/People/G/Grabowski_RichardBW.jpg

Richard Grabowski

Acting CDM Program Manager

Cybersecurity and Infrastructure Security Agency

Read More
/media/images/GIG/People/G/Grabowski_RichardBW.jpg

Richard Grabowski

Acting CDM Program Manager

Cybersecurity and Infrastructure Security Agency

Richard Grabowski is the Acting Program Manager for the Continuous Diagnostics and Mitigation (CDM) Program within the Cybersecurity and Infrastructure Security Agency (CISA), Cybersecurity Division. In this role, he has specific responsibilities for managing portfolios to deliver CDM capabilities to agencies, engineering deployment and architecture-related activities, program support and acquisition, and outreach activities. Through partnerships with agencies and industry, the CDM Program fortifies the cybersecurity of civilian government data and networks by providing capabilities that deliver relevant, timely and actionable information. CDM enables cybersecurity professionals to manage risks by providing innovative tools, processes, governance and training required to defend against cybersecurity threats and vulnerabilities. Prior to Richard’s current role, he led the CDM Program’s Architecture and Technology Integration Section. He started with CDM in 2014 as a Systems Engineer supporting the CDM Dashboard and Dynamic and Evolving Federal Enterprise Network Defense (DEFEND; formerly Task Order [TO2]) Group C agencies. Previous to this, Richard spent over nine years providing client/server and virtualization integration services to the federal government. Richard holds a B.S in Systems and Information Engineering from the University of Virginia and a M.S. in Systems Engineering from The George Washington University.

/media/images/GIG/GIGEvents/2020Custom/Speakers/JudyBaltensperger2020.jpg

Judy Baltensperger

Project Manager, CDM Dashboard

Cybersecurity and Infrastructure Security Agency (CISA)

Read More
/media/images/GIG/GIGEvents/2020Custom/Speakers/JudyBaltensperger2020.jpg

Judy Baltensperger

Project Manager, CDM Dashboard

Cybersecurity and Infrastructure Security Agency (CISA)

Judy Baltensperger is a Project Manager for the Continuous Diagnostics and Mitigation (CDM) Dashboard at the Cybersecurity and Infrastructure Security Agency (CISA). In this role, she oversees the development, implementation, and acquisition capabilities of the CDM Dashboard.

Prior to joining the CISA CDM Program, Judy has experience implementing mission critical/business essential information systems with the Technical Management Directorate (TMD) of U.S. Army, PEO-EIS, PdM P2E deploying IT capabilities for the European, Southwest Asia and Pacific Theaters. As well as serving as Systems Manager deploying IT capabilities with the NATO Consultation, Command and Control in Afghanistan, Drug Enforcement Administration and several IT capabilities facilitating Intelligence Community information sharing with the Department of State, Bureau of Diplomatic Security on a global scale in hostile international environments.

Judy holds a Master of Business Administration (MBA) degree from Jones International University, a Master of Science degree in Information Security Analysis (MSISM) from University of Fairfax, and a Bachelor of Science (BS) degree in Marine Engineering Systems from the U.S. Merchant Marine Academy.

Judy is a Certified Information Systems Security Professional (CISSP) with 20+ years of experience, a certified NSA 4012 Senior Systems Manager (CNSS), and a certified NSA 4011 Information Systems Security (INFOSEC) Professional (CNSS).

Judy was recently honored as one of the of the 2018 Federal 100 Award Winners.

Agenda

8:10 AM

Thursday, November 4, 2021

Opening Remarks

8:15 AM

Thursday, November 4, 2021

CDM Program Overview & Current State

Betsy Kulick, Senior Advisor, Continuous Diagnostics and Mitigation (CDM) Program, Cybersecurity and Infrastructure Security Agency (CISA)

Josh Broadbent*, Sr. Public Sector Security Director, BeyondTrust

*Providing Session Opening Remarks

Description

This session will address how CISA leverages the CDM Program to fortify the cybersecurity of civilian government data and networks by increasing awareness of cyber risk and visibility across the federal civilian agency branch. CDM delivers actionable information via dashboards and automated tools to federal agencies to strengthen monitoring of threats and vulnerabilities. In this session, learn more about current cyber threats, the state of the program and its successes.

Sponsored By:

8:40 AM

Thursday, November 4, 2021

Debunking Common Myths About XDR

Jared Phipps, SVP of Worldwide Sales Engineering, SentinelOne

Description

The cybersecurity threat landscape is rapidly evolving. Extended Detection and Response (XDR) is the next frontier in threat centric security prevention. As with all technologies that emerge, myths confuse and conflate reality. Please join Jared Phipps, SVP, Worldwide Solutions Engineering of SentinelOne discusses these myths and provides an overview of the ideal XDR approach to cybersecurity.

Sponsored By:

9:00 AM

Thursday, November 4, 2021

Panel: Best Practices for Risk Assessment and Management

Larry Hale, Director, IT Security Subcategory, U.S. General Services Administration

Dennis Reilly, Vice President, Public Sector, Gigamon

Martin Stanley, Branch Chief for Strategic Technology, Cyber and Infrastructure Security Agency (DHS/CISA)

Description

Cybersecurity threats have shifted and adapted to the changing network environment over the last year, as networks and workforces migrate to the cloud, expanding beyond agencies’ traditional boundaries. Assessing and managing that risk has become even more critical in this dispersed environment. Agencies are looking for ways to meet those challenges. This session will provide some context on the evolving challenges and offer some best practices they can use to minimize threats.

Sponsored By:

9:40 AM

Thursday, November 4, 2021

Coordinating the Response to Ransomware

Kelvin Moore, Chief Information Security Officer (CISO), Small Business Administration

Alex Whitworth*, Director of Supply Chain Management, Carahsoft

*Providing Session Opening Remarks

Description

This session will provide an update on SBA’s CDM efforts and will look at how ransomware affects the SBA and its customers. It will also describe how the agency works with organizations such as CISA and FBI to reduce the threats from ransomware.

10:05 AM

Thursday, November 4, 2021

Coffee Break

10:10 AM

Thursday, November 4, 2021

CDM, Zero Trust and Compliance in the Cloud

Gerald Caron III, Chief Information Officer, OIG, U.S Department of Health and Human Services

David Catanoso, Director, Enterprise Cloud Solutions Office, Department of Veterans Affairs

Chris Usserman, Director of Security Architecture , Infoblox

Description

As agencies continue their modernization efforts with moving data and systems to the cloud, the CIOs at two major health agencies discuss how are they addressing CDM in the cloud and what have been some of the lessons they have learned as they adjust to new security approaches to data loss protection.

Sponsored By:

10:45 AM

Thursday, November 4, 2021

CDM Evolution: Unmanaged Devices and Fusion of Asset Visibility

Joe Hamblin, U.S. Federal CTO, Armis

Description

Sponsored By:

11:05 AM

Thursday, November 4, 2021

Panel: Strategies for Reducing Cyber Exposure

Gina Fisk, CISO, Department of Energy Office of Science (DOE-SC)

Chris Jensen, Public Sector Business Development Manager, Tenable

Chris Johnson, Deputy Chief Technology Officer, National Geospatial-Intelligence Agency

Description

Sponsored By:

11:45 AM

Thursday, November 4, 2021

CDM Dashboard Updates

Judy Baltensperger, Project Manager, CDM Dashboard, Cybersecurity and Infrastructure Security Agency (CISA)

Description

The CDM Dashboard provides a panoramic view of the cybersecurity posture across the federal civilian landscape and provides agency cyber leaders with situational awareness and data they need to support cybersecurity performance and enable proactive response to emerging risks. In this session, learn about the progress of agency dashboard deployments, the new CDM Dashboard as a Service, some upcoming proofs of concepts and what ahead for the CDM Dashboard program.

12:05 PM

Thursday, November 4, 2021

Assets, Data, Network, and Access: Strategies for Success

John Fanguy, Chief Technology Officer , CyberRes Federal

Description

Sponsored By:

12:25 PM

Thursday, November 4, 2021

Executive Insights: Zero Trust Security and CDM

Charles Livingston, Sr., CDM Program Manager, Dept. of Health and Human Services

Rob Rachwald, Director of Zero Trust Strategy, Palo Alto Networks

Description

Sponsored By:

12:55 PM

Thursday, November 4, 2021

CDM Program Vision and Plan for the Future

Richard Grabowski, Acting CDM Program Manager, Cybersecurity and Infrastructure Security Agency

Description

This session will discuss how CDM supports government-wide and agency-specific efforts to provide an adequate, risk-based, consistent, and cost-effective cybersecurity solution, how CDM assists with the deployment of capabilities that help agencies protect their assets and their data, and how CDM fits within the mandates of the new Cybersecurity Executive Order. The acting program manager will also look ahead to the priorities for the next fiscal year and what’s in the future for CDM.

1:20 PM

Thursday, November 4, 2021

Closing Remarks

Underwriters

BeyondTrust
SentinelOne
Gigamon
Armis
Tenable
Palo Alto Networks
Micro Focus
InfoBlox