U.S. Department of Justice Cybersecurity Conference

Smartphones, tablets, and other mobile computing devices are quickly proliferating across the consumer market. iPhones, iPads, Androids, and other devices are becoming a necessary part of people's everyday lives. As such, employees have a strong desire to use these familiar consumer oriented devices in their work place and they are pushing their management to allow it. Simultaneously, many organizations are under pressure to expand telecommuting options and reduce IT and telecommunication costs.

The trend of implementing consumer mobile devices has been accelerating in the Federal government and DOJ is no exception, with many Components moving forward with Mobility pilots and facing these obstacles. This session will focus on how ITSS is addressing these challenges in a comprehensive manner, through creating policies, processes, and guides to assist in mobile device planning and deployments. We will also discuss the risks and challenges associated with deploying consumer oriented mobile devices into Government enterprise environments, including a discussion on the unique vulnerabilities and potential attack vectors associated with these devices.

NIST has been actively working to address security threats to the firmware in common computing platforms. Tim will will presenting the motivations for this work, and overview NIST's recent accomplishments and current efforts in this space.

With the proliferation of mobile devices, social networking and the cloud, children are more susceptible to online dangers than ever. It is of utmost importance to teach them how to be safe and responsible digital citizens. The (ISC)2's Safe and Secure Online program brings its certified information security expert members into schools to educate children as well as their parents and teachers.

According to the National Cyber Security Alliance (NCSA) 2010 National K-12 Baseline Study, 95% of educators, school administrators and technology coordinators believe that cyberethics, cybersafety and cybersecurity should be taught in schools. Additionally, nearly 30% of teachers do not believe they are prepared, and nearly 25% believe they are only somewhat prepared to discuss subjects such as cyberbullying, malware, phishing scams, sexting and data backups in the classroom.

The (ISC)2's Safe and Secure Online (SSO) program brings its certified information security expert members directly into classrooms to educate students on topics such as cyberbullying, social networking, malware, identity theft, password protection, and more. The program provides these modern-day volunteer Officer Friendlies with cutting-edge presentation material, including an interactive PowerPoint presentation with music, videos and games, and advice on presenting to children in a classroom environment. Over 70,000 children have been reached through the program to date, and a new parent/teacher presentation was launched in 2011 to ensure they have the skills to protect the children in their care.

In the aftermath of WikiLeaks the Federal Government has made great efforts to reform the governance, policies, and processes that safeguard the nation's most sensitive classified information. As a result of these efforts, the President signed an Executive Order that established a national insider threat task force and mandated that Departments and Agencies also establish their own programs. During this session, the DOJ's Insider Threat Point of Contact will discuss the approach and framework the Department has developed to address national policies and requirements. The discussion will also include the unique mission challenges and privacy and civil liberty concerns that must be addressed in the development of any insider threat program.

This presentation is based on my management philosophy and operational experience as a federal government manager of Information Technology (IT) for more than twenty years. As Systems Administrator in Central America and West Africa for the U.S. Agency for International Development; and Director of Geographic Information Systems, Chief Information Officer and Chief Technology Officer at Civil Rights Division of the Department of Justice, I will present a list of fundamentals that should be in the basic playbook of any IT manager who wants to get "IT" done. These fundamentals include governance, business awareness and the importance of a framework that includes a strategic and tactical plan.

Katie Lewin, Director of GSA's Federal Cloud Computing Program will discuss the Federal Risk and Authorization Management Program (FedRAMP) and take questions on this new initiative.

FedRAMP is a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. The program launched in December 2011 and is the result of close collaboration with cybersecurity and cloud experts from GSA, NIST, DHS, DOD, NSA, OMB, the Federal CIO Council and its working groups, as well as private industry.