Tony Cole, chief technology officer at Attivo Networks, discusses ways the government can better mitigate breaches at agencies, and why rolling out continuous diagnostics and mitigation is difficult in the federal government.
One of the Office of Management and Budget’s goals for FY19 is to standardize cybersecurity capabilities and practices across the federal government. However, deciding which of these capabilities need to be deployed is a challenge. Tony Cole, chief technology officer at Attivo Networks, says that there are multiple obstacles to maintaining continuous diagnostics and mitigation at government agencies. “The cultural problem is real, and it is problematic, but It is also a policy thing in the way a program gets structured. When you look at any large program that comes out, they have to put a program together where the acquisition is completed under acquisition policies. Part of the challenge is sometimes you aren’t looking at new and innovative technologies you can bring in,” Cole said.