Ep. 222 Securing Federal Systems: How API Management Transforms Digital Security Federal Tech Podcast: For Innovators, Entrepreneurs, And CEOs Who Want To Increase Reach And Improve Brand Awareness podcast

Player FM - Internet Radio Done Right

Ditambah twenty minggu yang lalu

Kandungan disediakan oleh The Oakmont Group and John Gilroy. Semua kandungan podcast termasuk episod, grafik dan perihalan podcast dimuat naik dan disediakan terus oleh The Oakmont Group and John Gilroy atau rakan kongsi platform podcast mereka. Jika anda percaya seseorang menggunakan karya berhak cipta anda tanpa kebenaran anda, anda boleh mengikuti proses yang digariskan di sini https://ms.player.fm/legal.

Rethinking Alzheimer's Disease Podcast

1
Ep 1: What Is Alzheimer’s Disease? 16:03

49 weeks ago16:03

Main Kemudian

Senarai

Suka

Disukai

16:03

Learn about the differences between Alzheimer's and dementia, and how Alzheimer's disease progresses. We talk about why catching the disease early can make a big difference. Dr. Sharon Cohen and Dr. Yaakov Stern walk us through the stages of Alzheimer's disease, from when there are no symptoms to when memory issues start to show. They explain the stages of Alzheimer’s and how it develops over time. We also hear from Kelly, who explains her personal experiences and concerns about developing Alzheimer’s, and what she does about it. For links to resources and information covered in this series, visit our website at HealthUnmuted.com/resources What did you think of this episode? We’d love to hear from you. Please visit healthunmuted.com/feedback to let us know! Rethinking Alzheimer’s Disease was made possible with support from Eisai Inc. [00:00:00] Introduction [00:03:10] What's the difference between Alzheimer's disease and dementia? [00:07:04] When does Alzheimer’s begin to develop? [00:09:08] What is Mild Cognitive Impairment (MCI)? [00:10:36] What is subjective cognitive decline? [00:11:59] What is preclinical Alzheimer's disease? [00:13:13] Why is it important to detect Alzheimer’s disease early? Disclaimer: The content provided in this podcast is intended for informational purposes only. It is not a substitute for professional medical advice, diagnosis, or treatment. Always seek the advice of your physician or other qualified healthcare provider with any questions you may have regarding a medical condition. Never disregard professional medical advice or delay in seeking it because of something you have heard on this podcast. Reliance on any information provided by this podcast or its guests is solely at your own risk. ©2024 Mission Based Media Ltd • April 2024 • AD-M2059…

Federal Tech Podcast: for innovators, entrepreneurs, and CEOs who want to increase reach and improve brand awareness »
Ep. 222 Securing Federal Systems: How API Management Transforms Digital Security

5 days ago 23:24

Kongsi

MP3•Laman utama episod

The federal government is transforming from on-premises and private cloud systems to a hybrid cloud.

What most listeners do not realize is that the linchpin to this transition is the Application Program Interface (API). It has been hiding under the radar for so many years that malicious actors use this perspective to attack the API.

Info Security Magazine reports that 99% of organizations struggle with API security. Where to start? First, get an inventory of how many APIs you are dealing with.

Stephen Ringo emphasizes the need for discovery tools to identify rogue and shadow APIs, noting that passive discovery methods are preferred to avoid network disruptions.

He also points out that API security is often overlooked, even in cloud-native solutions, and that misuse, rather than malformation, is the primary threat. Ringo advocates initiative-taking measures to secure APIs and prevent data breaches.

Three main ways to protect APIs:
Educate and raise awareness about API security risks among federal CIOs and IT leaders.
Discover and inventory all APIs, including rogue or shadow APIs, within the organization.
Evaluate API security capabilities of cloud providers and ensure proper security controls are in place.

222 episod

#Tech #Business #The Oakmont Group #John Gilroy

Ep. 222 Securing Federal Systems: How API Management Transforms Digital Security

Federal Tech Podcast: for innovators, entrepreneurs, and CEOs who want to increase reach and improve brand awareness

published 5 days ago

Kongsi

MP3•Laman utama episod

The federal government is transforming from on-premises and private cloud systems to a hybrid cloud.

Info Security Magazine reports that 99% of organizations struggle with API security. Where to start? First, get an inventory of how many APIs you are dealing with.

Stephen Ringo emphasizes the need for discovery tools to identify rogue and shadow APIs, noting that passive discovery methods are preferred to avoid network disruptions.

Three main ways to protect APIs:
Educate and raise awareness about API security risks among federal CIOs and IT leaders.
Discover and inventory all APIs, including rogue or shadow APIs, within the organization.
Evaluate API security capabilities of cloud providers and ensure proper security controls are in place.

222 episod

#Tech #Business #The Oakmont Group #John Gilroy

Semua episod

1
Ep. 222 Securing Federal Systems: How API Management Transforms Digital Security 23:24

5 days ago23:24

23:24

The federal government is transforming from on-premises and private cloud systems to a hybrid cloud. What most listeners do not realize is that the linchpin to this transition is the Application Program Interface (API). It has been hiding under the radar for so many years that malicious actors use this perspective to attack the API. Info Security Magazine reports that 99% of organizations struggle with API security. Where to start? First, get an inventory of how many APIs you are dealing with. Stephen Ringo emphasizes the need for discovery tools to identify rogue and shadow APIs, noting that passive discovery methods are preferred to avoid network disruptions. He also points out that API security is often overlooked, even in cloud-native solutions, and that misuse, rather than malformation, is the primary threat. Ringo advocates initiative-taking measures to secure APIs and prevent data breaches. Three main ways to protect APIs: Educate and raise awareness about API security risks among federal CIOs and IT leaders. Discover and inventory all APIs, including rogue or shadow APIs, within the organization. Evaluate API security capabilities of cloud providers and ensure proper security controls are in place.…

1
Ep. 221 Measuring what matters: Evaluating Success in Complex Federal Software Projects 20:38

7 days ago20:38

20:38

Connect to John Gilroy on LinkedIn https://www.linkedin.com/in/john-gilroy/ Want to listen to other episodes? www.Federaltechpodcast.com We all know the quote from Peter Drucker, "If you can measure it, you can manage it." It's pretty easy to apply when throwing a javelin but difficult when measuring success in complex software development projects. Today, we sat down with Jeff Gallimore, Chief Technology and Innovation Officer and founder of Excella. He brings with him decades of experience collaborating with teams on successful federal projects. We start by noting the fallacy of using one metric to measure success. While completing the initiative on time might make an agency administrator happy, that will change rapidly if compliance is not achieved, and scaling will break the system into pieces. Jeff has seen breakthroughs using a framework called DORA, DevOps Research and Assessment). The key metrics are deployment frequency, lead time for changes, change failure rate, and failed deployment recovery time. These metrics, now part of Google, are research-based and predictive of IT and organizational outcomes. They emphasize the importance of a holistic approach, avoiding single-metric focus, and the role of leadership and culture in fostering high-performing teams…

1
Ep. 220 How Customer Experience Can Make or Break Federal Technology Initiatives 28:54

12 days ago28:54

28:54

Connect to John Gilroy on LinkedIn https://www.linkedin.com/in/john-gilroy/ Want to listen to other episodes? www.Federaltechpodcast.com The Partnership for Public Service recently conducted a poll, and just 23% of Americans believe federal services are easy to navigate. Today, we will examine the importance of User Experience and how to overcome some of the challenges federal agencies face when attempting to improve. Lisa Hoover is the Head of Experience and Design at Karsun Solutions. In that role, she has experienced all aspects of federal design. She begins by observing that customer challenges may be recognized but not remediated. She argues that there are several reasons for this standstill. Many federal agencies are dealing with legacy systems, and attempts to improve the CX can have unintended consequences. Further, qualitative improvement is difficult to determine in a world of bits and bytes. Sometimes, the ease of scaling data can make a system so complex that one does not know where to begin. Lisa Hoover recommends looking at Karsun Solutions' ReDuxAI offer. It leverages AI to establish a “blueprint” to see how everything connects, making digital transformation possible. Hoover also addresses the need for efficiency in federal IT, aiming to streamline processes and improve customer satisfaction. The conversation underscores the potential of AI to enhance federal service delivery. https://karsun-llc.com/innovation-center/innovation-center-projects/go-redux-ai/…

1
Ep. 219 Surviving Digital Disruption: How F5 Supports Federal Agencies 21:31

14 days ago21:31

21:31

Connect to John Gilroy on LinkedIn https://www.linkedin.com/in/john-gilroy/ Want to listen to other episodes? www.Federaltechpodcast.com Here we are at the beginning of 2025, and Bill Church, F5's CTO, discusses the company's role in helping federal agencies navigate the complexities of multi-cloud environments and cybersecurity threats. F5's strength spans the application portfolio of enterprise organizations. This includes application security, enhancement, quick access, improved availability, and even making them secure. It doesn't end there; they also help with encryption and authentication. Church emphasizes the importance of flexibility and consistency in managing diverse cloud environments. He highlights the challenges of API discovery, noting that many organizations are unaware of the number of APIs in their systems. F5's tools, like the App Study Tool, help identify and manage these APIs. Church also discusses using AI and machine learning in F5's solutions for enhanced security and data protection, including an AI gateway for large language models.…

1
Ep. 218 Next-Gen Attack Surface Management: Strengthening Federal Systems in the Digital Age" 25:23

19 days ago25:23

25:23

Connect to John Gilroy on LinkedIn https://www.linkedin.com/in/john-gilroy/ Want to listen to other episodes? www.Federaltechpodcast.com Matt Lembright, Global Lead of Censys Search, discusses the company's role in scanning the entire internet for threats, focusing on frequency, accuracy, and data richness. Censys helps government agencies and private organizations manage their attack surfaces by identifying exposed devices and vulnerabilities. The conversation highlights the challenges of securing operational technology (OT) and Internet of Things (IoT) devices, emphasizing the importance of understanding device protocols and maintaining up-to-date software. Lembright stresses the need for community engagement, local government involvement, and effective communication to protect critical infrastructure. He also mentions Censys' cybersecurity glossary as a resource for understanding key terms and concepts.…

1
Ep. 217 Inside Federal Digital Transformation: Key Strategies for Tech Leaders 29:03

21 days ago29:03

29:03

Connect to John Gilroy on LinkedIn https://www.linkedin.com/in/john-gilroy/ Want to listen to other episodes? www.Federaltechpodcast.com There is an idiomatic expression, “You can’t see the forest for the trees.” Essentially, it means that some people are so focused on the details that they cannot see the bigger picture. Today, Bob Ritchie, SAIC's Chief Technology Officer, takes a step back and examines the evolution of federal technology from a strategic perspective. He argues that because digital transformation is so convoluted, leaders tend to focus on the details of a transition rather than the ultimate objective. He frames this analysis in terms of systems integration vs. mission integration. He explains that while systems integration focuses on integrating technology for better outcomes, mission integration emphasizes achieving specific mission outcomes by iterative learning and adapting to technological changes. Ritchie highlights the importance of aligning systems with mission goals and maintaining vigilance to ensure technology choices support these objectives. He also discusses the need for a mature approach to technology adoption, including the strategic use of legacy systems like mainframes and the importance of a standard data layer to reduce complexity.…

1
Ep. 216 Let us look at Open-Source Intelligence 18:28

4 weeks ago18:28

18:28

Connect to John Gilroy on LinkedIn https://www.linkedin.com/in/john-gilroy/ Want to listen to other episodes? www.Federaltechpodcast.com In spy movies, the federal government has unlimited funds for intelligence. In fact, it is always at its fingertips, no matter where it is located. Would it be so? In the real world, agencies have budgets that limit their ability to do everything from reducing fraud to ensuring the safety of a supply chain. One way to leverage the funds allocated for this task is to use Open-Source Intelligence or OSINT. During today’s interview, Jason English from Babel Street shares his thoughts on how OSINT should be a part of the matrix where federal agencies can get practical intelligence. He starts by defining OSINT, which includes search engines, social media, public relations, news sources, web scraping, data analysis, and, yes, the dark web. This information is freely available to everyone, which gives it distinctive advantages. First, classified information can be costly to obtain. Rather than limiting your information sources to one area, OSINT will provide a much wider range of sources quickly. Further, transparency is becoming a more prominent theme in technology—by definition, one can review the origin of any piece of information to assure its veracity. When it comes to collecting, analyzing, and disseminating information, OSINT provides benefits that answer many of today’s federal agency requirements.…

1
Ep. 215 Is Procurement the Key to Leveraging AI? 25:08

5 weeks ago25:08

25:08

Connect to John Gilroy on LinkedIn https://www.linkedin.com/in/john-gilroy/ Want to listen to other episodes? www.Federaltechpodcast.com Technology comes and goes; you can call it the cloud, zero trust, or even Artificial intelligence. In early 2025, we see stress that we have not seen before. The GAO has issued a report examining the federal IT Acquisition process and concluding that it needs to strengthen oversight, implement a mature acquisition strategy, and have a capacity-capable system. Today, we sat down with Reid Jackson from Unison to discuss how to make these key acquisitions. During the interview, he discussed Acquisition Management, Cost Engineering, Virtual Acquisition, and Project Management. Unison has been involved in federal acquisition since 1984 and has a deep and thorough understanding of the procurement process. Reid Jackson relates that some newer organizations may have a superficial knowledge of regulations and may deploy software solutions that do not enable astute and effective decisions for federal agencies. During the interview, Reid Jackson from Unison overviews many aspects of these challenges.…

1
Ep. 214 An Independent View on Federal Technology 23:10

6 weeks ago23:10

23:10

Connect to John Gilroy on LinkedIn https://www.linkedin.com/in/john-gilroy/ Want to listen to other episodes? www.Federaltechpodcast.com Bill Sullivan, an independent consultant with experience in federal technology, discusses the impact of the new administration's policies on federal projects. He advises federal employees to maintain professionalism despite the hiring freeze and emphasizes the importance of security standards, particularly in AI and data management. Sullivan highlights the need for government to adapt its acquisition process to keep up with technological advancements. He also compares the current AI initiative to the Kennedy space mission, suggesting it could improve energy production. Sullivan emphasizes the importance of security, especially considering global competition, and praises Elon Musk's systematic approach to change. Key takeaways: >>> Maintain a professional demeanor and continue working diligently despite the changes. >>> Monitor the developments around the $500 billion investment and its potential impact on energy and data center co-location. >>> Advocate for reforms to the federal acquisition process to enable faster adoption of modern technologies.…

1
Ep 213 What is the Role of Generative AI in the Federal Government 25:35

6 weeks ago25:35

25:35

Connect to John Gilroy on LinkedIn https://www.linkedin.com/in/john-gilroy/ Want to listen to other episodes? www.Federaltechpodcast.com A recent SAS report shows that 84% of government decision-makers plan to invest in Generative AI in the next fiscal year. During today’s interview, Reggie Townsend details some of the precautions federal leaders must take to leverage this innovative technology. We begin the interview by mentioning that, in a governmental setting, technology cannot go beyond what is necessary to achieve a legitimate aim. Although that is a noble concept, it can be futile because we are in the incipient stage of this technology. We do not have any laws about using AI; we have a patchwork of national and international regulations on the ethical application of AI. We can start with the Executive Office of the President. In addition to other Executive Orders, President Biden released further guidelines his last week in office. While well-meaning, these guidelines are not practical when put into perspective of what is going on in other countries. Reggie Townsend indicates that AI Safety Institutes can promote consistency and a proper ethical response to using data from citizens to feed AI.…

1
Ep. 212 Making Sense of the Confusing World of AI & The Federal Government 21:10

7 weeks ago21:10

21:10

Connect to John Gilroy on LinkedIn https://www.linkedin.com/in/john-gilroy/ Want to listen to other episodes? www.Federaltechpodcast.com Anyone with a pulse knows the new Trump administration has rescinded dozens of Executive Orders written by the previous president, Joe Biden. Executive orders #14110 and #14141, which dealt with artificial Intelligence, were part of this package. This has put the federal technical community in a state of expectation. On the one hand, they are charged with reducing costs by leveraging technology; on the other hand, they have a hiring freeze, and nobody knows what the new AI mandates will consist of. Today, we sat down with Jennifer Sample from EmpowerAI, a veteran of the tech wars, and asked her what direction developments in AI will take. Jennifer Sample reminds listeners that the federal government must consider privacy restrictions when applying AI to solving federal problems. Unfortunately, our near-peer adversaries have no such constraints. When the federal government attempts to apply AI, it does so inconsistently. The CIO Council may be able to list 1,700 federal use cases for AI, but the hard part is vetting the data sources and matching impact with agency goals. During the interview, Jennifer Sample discusses concepts like being AI ready, continuous qualification, and contextual governance. 2025 will force the federal government to do more with less; AI is a tool that can help accomplish that noble goal. If you want to hear a more in-depth discussion, she will speak at the Potomac Officers’ Club on March 12, 2025, in Tyson’s Corner, Virginia.…

1
Ep 211 Build Software Faster: GitLab 29:14

7 weeks ago29:14

29:14

Connect to John Gilroy on LinkedIn https://www.linkedin.com/in/john-gilroy/ Want to listen to other episodes? www.Federaltechpodcast.com A recent study showed that the federal government has identified 1700 use cases for Artificial Intelligence. Today, we examine some challenges and solutions for unlocking the power of AI represented in these examples. Our guest, Joel Krooswyk from GitLab, examines Software Bills of Material, repatriation, and what efficiency might look like in the future. SBOM. For years, software developers have recommended using a Software Bill of Material. Today, its value has become so apparent that it is becoming mandatory. During the interview, Joel Krooswyk discusses the security benefits of mandating an SBOM policy for all federal software development. Fifteen years ago, Vivek Kundra coined the phrase “Cloud First.” It took a while, but cloud adoption is pervasive by the federal government. However, with this adoption, we have seen examples where cloud service providers may over-promise and under delivery. The interview provides guidelines for transitioning from the cloud back to the premises, which is increasingly called “repatriation.” Software development in the future will make compliance partner with DevSecOps in an automated process. This will reduce maintenance costs and provide real-time reporting. Intelligent automation will be able to validate each step of the process.…

1
Ep 210 Software Development and the Shift Left 26:16

8 weeks ago26:16

26:16

Connect to John Gilroy on LinkedIn https://www.linkedin.com/in/john-gilroy/ Want to listen to other episodes? www.Federaltechpodcast.com “Efficiency” seems like the new buzzword for federal technology in the next few years. When writing software sense, efficiency can mean writing code once and moving on to regular maintenance. However, we see security initiatives being mandated that cause developers to go back to previous stable systems and add code alterations to comply with new cyber threats. Even beginner efficiency experts will tell you the time and cost of operating in this manner can be expensive. Further, recording can add new bugs and risks, making the system more complex. Federal technology leaders from CISA have not lost sight of this. They have a “Secure by Design” initiative that addresses this issue. As in many tech concerns, the concern is how to accomplish this noble task. Today, we sit down with Nathan Jones from Sonar. He offers a solution that seeks to “shift left” the whole concept of security by design. His company provides systems that can review code to ensure its compliance. Further, he expands on an approach that can collaborate with developers while they write code. Nathan Jones gives listeners details about how Sonar’s Qube can be deployed on a server, in the cloud, or with IDE. The benefits are ample: lower maintenance, minimizing risk, and allowing a focus on innovation rather than rewriting code.…

1
Ep. 209 AI & and Proposal Development in 2025 23:12

9 weeks ago23:12

23:12

Connect to John Gilroy on LinkedIn https://www.linkedin.com/in/john-gilroy/ Want to listen to other episodes? www.Federaltechpodcast.com People are getting comfortable with Generative AI and applying it to many business areas. This widespread adoption shows many of the weaknesses of individuals misusing technology. It is one thing to settle a baseball statistics argument with GenAI; another complete application when competing for a million-dollar federal contract that includes management of sensitive information. These include biased outputs, lack of creativity, and misinformation, to name a few. Today, we offer a solution. Vishwas Lele is the co-founder and CEO of pWin.ai. He has decades of experience in federal contracts and a sophisticated understanding of applied Artificial Intelligence. He has seen the reliance on cliches and superficial language that can result in the inappropriate application of AI for proposal writing. His solution is to partner with Shipley Associates, a proposal writing company that has been in business for fifty years and has technology that can safely use AI. The result: pWin.ai. If you would like a more detailed explanation, consider attending a webinar on January 22, 2025…

1
Ep 208 Innovation with OSCAL, Federal Cloud, and Compliance 19:12

9 weeks ago19:12

19:12

Connect to John Gilroy on LinkedIn https://www.linkedin.com/in/john-gilroy/ Want to listen to other episodes? www.Federaltechpodcast.com Everyone reading this knows that April 15 is the dreaded day that one must pay federal income taxes. Big business has hordes of tax accountants and lawyers who do tax planning to accommodate federal deadlines. Sometimes, the deadline could be better known. Are you familiar with the OMB’s M-24-15? This will require companies to submit compliance information in a machine-readable format. Today, we sat down with Valinder Mangat from DRTConfidence. Valinder describes technology, deadlines, and approaches your company can use to comply. This interview will serve as a warning about an immense deadline that is crucial if you work with the federal government and cloud service providers. Essentially, NIST recognized that compliance done manually was time-consuming and subject to error. Back in 2016, they suggested OSCAL to streamline compliance. In addition to speeding things up, OSCAL allows for reuse without repetitive assessments. Whether you realize it or not, by the end of 2025, each federal contractor will be expected to provide compliance information in the OSCAL format, which stands for Open Security Controls Assessment Language. The other side of the coin is important to discuss as well. If you are an agency dealing with cloud compliance, you will be expected to be able to ingest compliance data in the OSCAL format.…

Selamat datang ke Player FM

Player FM mengimbas laman-laman web bagi podcast berkualiti tinggi untuk anda nikmati sekarang. Ia merupakan aplikasi podcast terbaik dan berfungsi untuk Android, iPhone, dan web. Daftar untuk melaraskan langganan merentasi peranti.

Dengarkan lebih 500+ topik

TERRO T300B Indoor Liquid Ant Killer , 12 Bait Stations

Emergence

Pink Pony Club

Podcast Berbaloi untuk Didengar

Federal Tech Podcast: for innovators, entrepreneurs, and CEOs who want to increase reach and improve brand awareness » Ep. 222 Securing Federal Systems: How API Management Transforms Digital Security

Ep. 222 Securing Federal Systems: How API Management Transforms Digital Security

Podcast Berbaloi untuk Didengar

Selamat datang ke Player FM

Sweet Dreams (feat. Miguel)

Neutrogena Makeup Remover Wipes Singles, Individually Wrapped Face Wipes, Daily Facial Cleanser Towelettes, Gently Removes Oil & Makeup, Alcohol-Free Makeup Wipes, 20 ct

EltaMD UV Clear Face Sunscreen SPF 46, Oil Free Sunscreen for Face with Zinc Oxide, Dermatologist Recommended Lotion,1.7 oz Pump

Nutrafol Women's Balance Hair Growth Supplements, Ages 45 and Up, Clinically Proven for Visibly Thicker Hair and Scalp Coverage, Dermatologist Recommended - 1 Month Supply

Panduan Rujukan Pantas

Federal Tech Podcast: for innovators, entrepreneurs, and CEOs who want to increase reach and improve brand awareness »
Ep. 222 Securing Federal Systems: How API Management Transforms Digital Security