Yolanda Craig's guest appearances

Yolanda Craig

ITSPmagazine

Julie Smith

Alison Levine

Sam Houston

Robert Lee

Andrew Smith

Robin Smith

Kathleen Smith

Omar Khawaja

Adam Levin

David Cross

Stephanie Lucas

Jeffrey Smith

Joel Makower

Caleb Barlow

Brian Kelly

OwlTail

Sandra Wheatley

Close the door. There is no more room. We resolved the cybersecurity skill gap problem, and it feels damn good! Well, maybe not, but is it really that hard? There are so many smart people out there that would do very well in InfoSec—do they even know this is an option?Would you dream of going to the moon if you never looked up to the sky? And even if you did, would you think that the dream could come true if no one like you has never gone there before, and nobody told you that you could become an astronaut if you so wanted?What is the connection between going to the moon and the InfoSec and technology industry?Maybe, if you cannot see it, there's a good chance that you are not part of one of the many underrepresented groups. Perhaps you were always told to look up at the sky and people that look like you went there and you thought you could be one of them if you only wanted to pursue that dream.We need to let everyone know that there is room for everyone in this industry, but it will not happen just by talking about it—if that was the case, we probably would have resolved the problem by now.We need to walk this talk more than what we are already doing. Thankfully, we are taking some steps but, it is obviously not enough—by far, not enough. We need to open those doors, go out there, and create opportunities. We need to define programs that work, become mentors, role models, and allies. We need to invest in a diverse and inclusive future because it is the right thing to do — because it is the best thing to do.If you just want to listen to the business talk, well, diversity is an investment, and there are valuable people out there that we need to go get. They are:the veteransthe young studentsthe people from underrepresented communitiesthe many women who love STEM and want to join this industryand, all those who wouldn’t want anything more than know that there are dreams to be dreamt and to be achievedLet’s all do something, starting with listening to this conversation and following some tangible actions. The reasons are clear. The actions are feasible. The resources are available (see below). And, the time is now. GuestsYolanda Craig, VP, Cyber Strategy, Everwatch Solutions | Former Manager (Cyber Information Technology), US DoDSandra Wheatley, SVP, Marketing, Threat Intelligence and Influencer Communications at FortinetThis Episode’s SponsorsBugcrowd: https://itspm.ag/itspbgcwebDevo: https://itspm.ag/itspdvwebResources (courtesy of Yolanda! 🙏)Military Programshttps://dodskillbridge.usalearning.gov/https://www.benefits.va.gov/GIBILL/yellow_ribbon.aspGeneral Information to Get Startedhttps://cybersecurityguide.org/resources/k-12-guide/https://www.nsa.gov/resources/students-educators/#students3Elementary and Middle School Programshttps://niccs.cisa.gov/formal-education/integrating-cybersecurity-classroomHigh School Programshttps://www.uscyberchallenge.org/cyber-campshttps://uscc.cyberquests.org/https://www.marist.edu/admission/pre-college/cybersecurityhttps://niccs.cisa.gov/formal-education/integrating-cybersecurity-classroomhttps://www.cybersecuritydegrees.com/features/resources-for-high-school-students-interested-in-cyber-security/https://www.nslcleaders.org/youth-leadership-programs/cybersecurity/https://www.cybher.org/College Programshttps://www.uscyberchallenge.org/cyber-campshttps://uscc.cyberquests.org/https://www.fbijobs.gov/studentshttps://www.misiacademy.tech/cedi-cyber-education-diversity-initiative/OrganizationsWomen in CyberSecurity (WiCyS)(ISC)2 - International Information Systems Security Certification ConsortiumISACA (Information Systems Audit and Control Association)ITIL (Information Technology Infrastructure Library)Forum of Incident Response and Security TeamsThe SANS InstituteCIS (Center for Internet Security)To see and hear more The Academy content on ITSPmagazine, visit:https://www.itspmagazine.com/the-academyAre you interested in sponsoring an ITSPmagazine Channel?https://www.itspmagazine.com/podcast-series-sponsorships

Close the door. There is no more room. We resolved the cybersecurity skill gap problem, and it feels damn good! Well, maybe not, but is it really that hard? There are so many smart people out there that would do very well in InfoSec—do they even know this is an option?Would you dream of going to the moon if you never looked up to the sky? And even if you did, would you think that the dream could come true if no one like you has never gone there before, and nobody told you that you could become an astronaut if you so wanted?What is the connection between going to the moon and the InfoSec and technology industry?Maybe, if you cannot see it, there's a good chance that you are not part of one of the many underrepresented groups. Perhaps you were always told to look up at the sky and people that look like you went there and you thought you could be one of them if you only wanted to pursue that dream.We need to let everyone know that there is room for everyone in this industry, but it will not happen just by talking about it—if that was the case, we probably would have resolved the problem by now.We need to walk this talk more than what we are already doing. Thankfully, we are taking some steps but, it is obviously not enough—by far, not enough. We need to open those doors, go out there, and create opportunities. We need to define programs that work, become mentors, role models, and allies. We need to invest in a diverse and inclusive future because it is the right thing to do — because it is the best thing to do.If you just want to listen to the business talk, well, diversity is an investment, and there are valuable people out there that we need to go get. They are:<ul><li>the veterans</li><li>the young students</li><li>the people from underrepresented communities</li><li>the many women who love STEM and want to join this industry</li><li>and, all those who wouldn’t want anything more than know that there are dreams to be dreamt and to be achieved</li></ul>Let’s all do something, starting with listening to this conversation and following some tangible actions. The reasons are clear. The actions are feasible. The resources are available (see below). And, the time is now. Guests <a href="https://www.linkedin.com/in/yolanda-c-r-craig/" rel="nofollow" target="_blank">Yolanda Craig</a>, VP, Cyber Strategy, Everwatch Solutions | Former Manager (Cyber Information Technology), US DoD<a href="https://www.linkedin.com/in/sandra-wheatley-smerdon-01679915/" rel="nofollow" target="_blank">Sandra Wheatley</a>, SVP, Marketing, Threat Intelligence and Influencer Communications at FortinetThis Episode’s SponsorsBugcrowd: <a href="https://itspm.ag/itspbgcweb" rel="nofollow" target="_blank">https://itspm.ag/itspbgcweb</a>Devo: <a href="https://itspm.ag/itspdvweb" rel="nofollow" target="_blank">https://itspm.ag/itspdvweb</a>Resources (courtesy of Yolanda! 🙏)<ul><li>Military Programs<ul><li><a href="https://dodskillbridge.usalearning.gov/" rel="nofollow" target="_blank">https://dodskillbridge.usalearning.gov/</a></li><li><a href="https://www.benefits.va.gov/GIBILL/yellow_ribbon.asp" rel="nofollow" target="_blank">https://www.benefits.va.gov/GIBILL/yellow_ribbon.asp</a></li></ul></li><li>General Information to Get Started<ul><li><a href="https://cybersecurityguide.org/resources/k-12-guide/" rel="nofollow" target="_blank">https://cybersecurityguide.org/resources/k-12-guide/</a></li><li><a href="https://www.nsa.gov/resources/students-educators/#students3" rel="nofollow" target="_blank">https://www.nsa.gov/resources/students-educators/#students3</a></li></ul></li><li>Elementary and Middle School Programs<ul><li><a href="https://niccs.cisa.gov/formal-education/integrating-cybersecurity-classroom" rel="nofollow" target="_blank">https://niccs.cisa.gov/formal-education/integrating-cybersecurity-classroom</a></li></ul></li><li>High School Programs<ul><li><a href="https://www.uscyberchallenge.org/cyber-camps" rel="nofollow" target="_blank">https://www.uscyberchallenge.org/cyber-camps</a></li><li><a href="https://uscc.cyberquests.org/" rel="nofollow" target="_blank">https://uscc.cyberquests.org/</a></li><li><a href="https://www.marist.edu/admission/pre-college/cybersecurity" rel="nofollow" target="_blank">https://www.marist.edu/admission/pre-college/cybersecurity</a></li><li><a href="https://niccs.cisa.gov/formal-education/integrating-cybersecurity-classroom" rel="nofollow" target="_blank">https://niccs.cisa.gov/formal-education/integrating-cybersecurity-classroom</a></li><li><a href="https://www.cybersecuritydegrees.com/features/resources-for-high-school-students-interested-in-cyber-security/" rel="nofollow" target="_blank">https://www.cybersecuritydegrees.com/features/resources-for-high-school-students-interested-in-cyber-security/</a></li><li><a href="https://www.nslcleaders.org/youth-leadership-programs/cybersecurity/" rel="nofollow" target="_blank">https://www.nslcleaders.org/youth-leadership-programs/cybersecurity/</a></li><li><a href="https://www.cybher.org/" rel="nofollow" target="_blank">https://www.cybher.org/</a></li></ul></li><li>College Programs<ul><li><a href="https://www.uscyberchallenge.org/cyber-camps" rel="nofollow" target="_blank">https://www.uscyberchallenge.org/cyber-camps</a></li><li><a href="https://uscc.cyberquests.org/" rel="nofollow" target="_blank">https://uscc.cyberquests.org/</a></li><li><a href="https://www.fbijobs.gov/students" rel="nofollow" target="_blank">https://www.fbijobs.gov/students</a></li><li><a href="https://www.misiacademy.tech/cedi-cyber-education-diversity-initiative/" rel="nofollow" target="_blank">https://www.misiacademy.tech/cedi-cyber-education-diversity-initiative/</a></li></ul></li><li>Organizations<ul><li>Women in CyberSecurity (WiCyS)</li><li>(ISC)2 - International Information Systems Security Certification Consortium</li><li>ISACA (Information Systems Audit and Control Association)</li><li>ITIL (Information Technology Infrastructure Library)</li><li>Forum of Incident Response and Security Teams</li><li>The SANS Institute</li><li>CIS (Center for Internet Security)</li></ul></li></ul>To see and hear more The Academy content on ITSPmagazine, visit: <a href="https://www.itspmagazine.com/the-academy" rel="nofollow" target="_blank">https://www.itspmagazine.com/the-academy</a>Are you interested in sponsoring an ITSPmagazine Channel? <a href="https://www.itspmagazine.com/podcast-series-sponsorships" rel="nofollow" target="_blank">https://www.itspmagazine.com/podcast-series-sponsorships</a>

Students, Women, And Veterans—All Part Of The Solution To The Cybersecurity Skills Gap | The Academy | A Conversation With Yolanda Craig And Sandra Wheatley

Katie Arrington

It should be evident by now that Information security should be a core value to any organization—and even more so for those that interact with government entities—and furthermore for those that operate within the government defense space.It's easy to say. But even for those that want to honestly act on this objective, how can they make "this" actually happen?Good question indeed. This is precisely the one we are going to try to answer in this podcast.Organizations can meet the letter of the law, or regulation, or standard. Checkbox process—done.They can bring it to the front of the process and perform a risk assessment. Scenario documentation—done.But what about the middle bit where a lot of the critical thinking takes place and where the controls get defined; where the organization not only claims they "take security seriously" but can also prove it?How does an organization bridge this gap in a way that actually addresses the risk throughout the government's entire supply chain?This is where the Cybersecurity Maturity Model Certification (CMMC) comes into play. And looking at the most recent events, evidently, not a moment too soon.Now it is the time to go ahead and learn what the CMMC is.From the CMMC site:The Office of the Under Secretary of Defense for Acquisition and Sustainment (OUSD(A&amp;S)) recognizes that security is foundational to acquisition and should not be traded along with cost, schedule, and performance moving forward. The Department is committed to working with the Defense Industrial Base (DIB) sector to enhance the protection of controlled unclassified information (CUI) within the supply chain.OUSD(A&amp;S), working with DoD stakeholders, University Affiliated Research Centers (UARCs), Federally Funded Research and Development Centers (FFRDC), and industry, developed the Cybersecurity Maturity Model Certification (CMMC) framework.The CMMC will review and combine various cybersecurity standards and best practices and map these controls and processes across several maturity levels that range from basic cyber hygiene to advanced. For a given CMMC level, the associated controls and processes, when implemented, will reduce risk against a specific set of cyber threats.The CMMC effort builds upon existing regulation (DFARS 252.204-7012) that is based on trust by adding a verification component with respect to cybersecurity requirements.The goal is for CMMC to be cost-effective and affordable for small businesses to implement at the lower CMMC levels.Authorized and accredited CMMC Third Party Assessment Organizations (C3PAOs) will conduct assessments and issue CMMC certificates to Defense Industrial Base (DIB) companies at the appropriate level.This text above provides a decent overview. But you likely have some questions. If you want to learn more about CMMC, DFARS, C3PAOs, and DIB; and, if you want to hear how CMMC and NIST connect together; and, if you want to hear how the CMMC can be leveraged to improve (and demonstrate) your organization's cybersecurity posture, then this episode is for you.I had the distinct honor of bringing together two industry leaders that know the CMMC inside and out: Katie Arrington, CISO A&amp;S at United States Department of Defense responsible for bringing the CMMC to light; and Yolanda Craig, a former manager of Cyber Information Technology) at the US DoD and now helping government contractors be cyber-ready.This happens to be a very timely discussion given the recent cyber revelations for the American government supply chain. I would encourage EVERY organization (not just those supplying the government with products and services) to listen to this episode.Now, more than ever, we need supply chain security. Now, more than ever, knowledge is power. Grab some here and share with far and wide.Guest(s)Katie Arrington, CISO A&amp;S at United States Department of DefenseYolanda Craig, VP, Cyber Strategy, Everwatch Solutions | Former Manager (Cyber Information Technology), US DoDThis Episode’s Sponsors:Nintex: https://itspm.ag/itspntwebImperva: https://itspm.ag/imperva277117988RSA Security: https://itspm.ag/itsprsawebResourcesCMMC: https://www.acq.osd.mil/cmmc/index.htmlCMMC Accreditation Body: https://www.cmmcab.org/CMMC Assessment Guide: https://www.acq.osd.mil/cmmc/draft.htmlTo see and hear more Redefining Security content on ITSPmagazine, visit:https://www.itspmagazine.com/redefining-securityAre you interested in sponsoring an ITSPmagazine Channel?https://www.itspmagazine.com/podcast-series-sponsorships

It should be evident by now that Information security should be a core value to any organization—and even more so for those that interact with government entities—and furthermore for those that operate within the government defense space.It's easy to say. But even for those that want to honestly act on this objective, how can they make "this" actually happen?Good question indeed. This is precisely the one we are going to try to answer in this podcast.Organizations can meet the letter of the law, or regulation, or standard. Checkbox process—done.They can bring it to the front of the process and perform a risk assessment. Scenario documentation—done.But what about the middle bit where a lot of the critical thinking takes place and where the controls get defined; where the organization not only claims they "take security seriously" but can also prove it?How does an organization bridge this gap in a way that actually addresses the risk throughout the government's entire supply chain?This is where the Cybersecurity Maturity Model Certification (CMMC) comes into play. And looking at the most recent events, evidently, not a moment too soon.Now it is the time to go ahead and learn what the CMMC is. From the CMMC site: The Office of the Under Secretary of Defense for Acquisition and Sustainment (OUSD(A&amp;S)) recognizes that security is foundational to acquisition and should not be traded along with cost, schedule, and performance moving forward. The Department is committed to working with the Defense Industrial Base (DIB) sector to enhance the protection of controlled unclassified information (CUI) within the supply chain.OUSD(A&amp;S), working with DoD stakeholders, University Affiliated Research Centers (UARCs), Federally Funded Research and Development Centers (FFRDC), and industry, developed the Cybersecurity Maturity Model Certification (CMMC) framework.<ul><li>The CMMC will review and combine various cybersecurity standards and best practices and map these controls and processes across several maturity levels that range from basic cyber hygiene to advanced. For a given CMMC level, the associated controls and processes, when implemented, will reduce risk against a specific set of cyber threats.</li><li>The CMMC effort builds upon existing regulation (DFARS 252.204-7012) that is based on trust by adding a verification component with respect to cybersecurity requirements.</li><li>The goal is for CMMC to be cost-effective and affordable for small businesses to implement at the lower CMMC levels.</li><li>Authorized and accredited CMMC Third Party Assessment Organizations (C3PAOs) will conduct assessments and issue CMMC certificates to Defense Industrial Base (DIB) companies at the appropriate level.</li></ul>This text above provides a decent overview. But you likely have some questions. If you want to learn more about CMMC, DFARS, C3PAOs, and DIB; and, if you want to hear how CMMC and NIST connect together; and, if you want to hear how the CMMC can be leveraged to improve (and demonstrate) your organization's cybersecurity posture, then this episode is for you.I had the distinct honor of bringing together two industry leaders that know the CMMC inside and out: <a href="https://www.linkedin.com/in/katie-arrington-a6949425/" rel="nofollow" target="_blank">Katie Arrington</a>, CISO A&amp;S at United States Department of Defense responsible for bringing the CMMC to light; and <a href="https://www.linkedin.com/in/yolanda-c-r-craig/" rel="nofollow" target="_blank">Yolanda Craig</a>, a former manager of Cyber Information Technology) at the US DoD and now helping government contractors be cyber-ready.This happens to be a very timely discussion given the recent cyber revelations for the American government supply chain. I would encourage EVERY organization (not just those supplying the government with products and services) to listen to this episode.Now, more than ever, we need supply chain security. Now, more than ever, knowledge is power. Grab some here and share with far and wide.Guest(s) <a href="https://www.linkedin.com/in/katie-arrington-a6949425/" rel="nofollow" target="_blank">Katie Arrington</a>, CISO A&amp;S at United States Department of Defense<a href="https://www.linkedin.com/in/yolanda-c-r-craig/" rel="nofollow" target="_blank">Yolanda Craig</a>, VP, Cyber Strategy, Everwatch Solutions | Former Manager (Cyber Information Technology), US DoDThis Episode’s Sponsors:Nintex: <a href="https://itspm.ag/itspntweb" rel="nofollow" target="_blank">https://itspm.ag/itspntweb</a>Imperva: <a href="https://itspm.ag/imperva277117988" rel="nofollow" target="_blank">https://itspm.ag/imperva277117988</a>RSA Security: <a href="https://itspm.ag/itsprsaweb" rel="nofollow" target="_blank">https://itspm.ag/itsprsaweb</a>Resources CMMC: <a href="https://www.acq.osd.mil/cmmc/index.html" rel="nofollow" target="_blank">https://www.acq.osd.mil/cmmc/index.html</a>CMMC Accreditation Body: <a href="https://www.cmmcab.org/" rel="nofollow" target="_blank">https://www.cmmcab.org/</a>CMMC Assessment Guide: <a href="https://www.acq.osd.mil/cmmc/draft.html" rel="nofollow" target="_blank">https://www.acq.osd.mil/cmmc/draft.html</a>To see and hear more Redefining Security content on ITSPmagazine, visit: <a href="https://www.itspmagazine.com/redefining-security" rel="nofollow" target="_blank">https://www.itspmagazine.com/redefining-security</a>Are you interested in sponsoring an ITSPmagazine Channel? <a href="https://www.itspmagazine.com/podcast-series-sponsorships" rel="nofollow" target="_blank">https://www.itspmagazine.com/podcast-series-sponsorships</a>

Now, More Than Ever: Supply Chain Security—Unpacking The CMMC With Katie Arrington And Yolanda Craig