Current State of CDM and the next 10 years
A conversation between the new PM and DPM with lessons learned from CDM’s first 10 years along with open conversation on how the program should evolve to be a foundational cyber capability in every Federal agency’s toolbox.
Speakers
Betsy Kulick, Deputy Program Manager, CDM, Department of Homeland Security
Matt House, CDM Program Manager, Cybersecurity and Infrastructure Security Agency (CISA)
More On Demand
November 2, 2022
Opening Keynote: Sharpening the Defensive Cyber Tools
An executive-level look at new developments in the government cyber world, including new policy directives and zero trust, an update on dashboards and revamping the CDM services
Sponsored by:
Proactive Security in Application Development: What’s on your network?
What does CDM look like when developing our own applications? What risk is present on the network, and did we create that risk ourselves? Proactive supply chain security during development is key to safeguarding our data, network, and users.
Sponsored by:
CDM Dashboards: The Challenges and the Rewards
A discussion of how CISA’s agency dashboards are collecting info on vulnerabilities and sharing it.
Sponsored by:
Putting Zero Trust first in Defense and How that changes CDM
A look at the new priorities the Executive Order has mandated and how that affects how agencies move forward with their cyber plans.
Sponsored by:
Mitre ATT&CK!, Threat Modeling & Understanding Your Control Coverage
Organizations often struggle to adequately understand how security frameworks, GRC programs, and technical controls all work together to defend against Threat Actors and emerging threats. In today's climate of vendors promising their tools or technologies will be your security "silver bullet", many organizations lack the visibility or understanding of how their controls truly function, where control gaps may exist, or whether controls are effective at defending against the TTP's they should be prioritizing. By bridging the gaps between GRC programs, regulatory compliance, technical tooling and Threat Intelligence, security teams can be informed of where to invest time and resources to improve control coverage, or where to direct efforts to validate existing controls for efficacy to continually improve defenses.
Read MoreSponsored by:
