Procurement

Slow IT procurement hinders security

cyber attack button

The difficulties that government agencies have in trying to acquire secure hardware and software that isn't obsolete or vulnerable before being deployed is a nagging problem that aggravates at least one cyber warrior.

"I'm frustrated by this," Charles Berlin, director of the National Security Operations Center at the National Security Agency, told other federal agency attendees at the 2013 SAS Government Leadership Summit on May 21 in Washington, D.C.

Appearing on panel of cybersecurity experts discussing how to manage expanding and mutating cyber security risks, Berlin said that rather than dealing with the security features of each individual piece of equipment added to the network, addressing the underlying platform and architecture is a more efficient, and ultimately more secure, route – especially given the length of time federal acquisition can take.

"If blade [servers] become commoditized, buy blades," he said. Cybersecurity is designed around process, not pieces of gear.

The NSA's cloud services are a way to defend information, he said. "The architecture is the thing. Commodity buys come and go."

About the Author

Mark Rockwell is a staff writer at FCW.

Before joining FCW, Rockwell was Washington correspondent for Government Security News, where he covered all aspects of homeland security from IT to detection dogs and border security. Over the last 25 years in Washington as a reporter, editor and correspondent, he has covered an increasingly wide array of high-tech issues for publications like Communications Week, Internet Week, Fiber Optics News, tele.com magazine and Wireless Week.

Rockwell received a Jesse H. Neal Award for his work covering telecommunications issues, and is a graduate of James Madison University.

Click here for previous articles by Rockwell. Contact him at mrockwell@fcw.com or follow him on Twitter at @MRockwell4.


The Fed 100

Read the profiles of all this year's winners.

Featured

  • Shutterstock image (by wk1003mike): cloud system fracture.

    Does the IRS have a cloud strategy?

    Congress and watchdog agencies have dinged the IRS for lacking an enterprise cloud strategy seven years after it became the official policy of the U.S. government.

  • Shutterstock image: illuminated connections between devices.

    Who won what in EIS

    The General Services Administration posted detailed data on how the $50 billion Enterprise Infrastructure Solutions contract might be divvied up.

  • Wikimedia Image: U.S. Cyber Command logo.

    Trump elevates CyberCom to combatant command status

    The White House announced a long-planned move to elevate Cyber Command to the status of a full combatant command.

  • Photo credit: John Roman Images / Shutterstock.com

    Verizon plans FirstNet rival

    Verizon says it will carve a dedicated network out of its extensive national 4G LTE network for first responders, in competition with FirstNet.

  • AI concept art

    Can AI tools replace feds?

    The Heritage Foundation is recommending that hundreds of thousands of federal jobs be replaced by automation as part of a larger government reorganization strategy.

  • DOD Common Access Cards

    DOD pushes toward CAC replacement

    Defense officials hope the Common Access Card's days are numbered as they continue to test new identity management solutions.

Reader comments

Please post your comments here. Comments are moderated, so they may not appear immediately after submitting. We will not post comments that we consider abusive or off-topic.

Please type the letters/numbers you see above

More from 1105 Public Sector Media Group