Important News:SafeLogic's CryptoComply Achieves FIPS 140-3 Validation for 28 OEs and Receives Certificate #4781! Read the blog post!
The SafeLogic Blog
The DoD Doesn't Want to "Pull a Snowden"
December 10, 2013 •Ray Potter
Let’s face it. Few organizations address security proactively. They do it because of a regulatory mandate, or they do it because something happened. In the case of the federal government, sometimes both. Without getting political on the Edward Snowden situation, he certainly made everyone to think more about security. As a result, organizations in all industries are scrambling to ensure an insider doesn’t “Pull a Snowden” and put them at risk. Hey, I just coined a term!
The DoD is taking security seriously, so much so that it’s limiting use of smart devices until a suitable security solution is rolled out (and stay tuned… we have some exciting news there!). Even then, it’s a phased, multi-layered approach. Secure mobility is a dynamic and complex market; there is no silver bullet, and challenges won't be solved overnight. In fact, it gets worse: tomorrow's challenges for enablement and data protection aren't even realized yet. When they become apparent, hot new technology will answer, but it will have to meet strict assurance requirements before it can be deployed. A perfect storm, indeed.
Strong security, while not always glamorous, helps people stay out of the news, and that's exactly what the DoD wants. It goes deeper and is even more real than that: a security or data breach can mean a hit to your reputation and potentially a loss of market cap. In the case of DoD, it can mean a loss of life. Scary.
The DoD's renewed commitment means substantial opportunity for mobile security solution providers. This is good news for our industry. Earning a piece of that pie has the opposite effect of a breach - it builds reputation and market share for your solution! The stakes are high, but you know the hurdles and the barriers to entry. You can’t get to the table unless you meet FIPS 140 compliance requirements. It's absolutely required by the DoD. And you have to act fast. Certain vendors have already completed their validation, more are in progress and cutting through the red tape, and some particularly smart solutions are leveraging SafeLogic's RapidCert to ensure that they are ready and eligible to bid on these upcoming contracts.
Are you prepared for the RFPs?
Ray Potter
Ray Potter is the Founder of SafeLogic, which was spun off from his previous venture, the Apex Assurance Group consulting firm. He brings over 20 years of security and compliance experience, including leading teams at Cisco and Ernst & Young, to the operations team at SafeLogic. Ray loves playing guitar and flying airplanes.
Popular Posts
Search for posts
Tags
- FIPS 140 (111)
- FIPS validation (85)
- Encryption (70)
- cryptography (68)
- NIST (62)
- CryptoComply (60)
- SafeLogic (58)
- Industry News (54)
- cryptographic module (51)
- Conversations (49)
- CMVP (48)
- RapidCert (46)
- compliance (41)
- Ray Potter (33)
- SafeLogic News (33)
- Event (27)
- federal (27)
- CAVP (23)
- Cybersecurity (23)
- FIPS 140-3 (18)
- OpenSSL (16)
- government (14)
- FedRAMP (13)
- CryptoCompact (12)
- Cryptology (12)
- DoD (12)
- RSA (12)
- healthcare (12)
- partners (12)
- NSA (11)
- post-quantum cryptography (11)
- Cloud (9)
- PQC (9)
- security (9)
- CMMC (8)
- Suite B (8)
- testing (8)
- whitepaper (8)
- Approved Products List (APL) (6)
- HITECH (6)
- ICMC (6)
- lab (6)
- CEO (5)
- NIST 800-171 (5)
- NIST 800-53 (5)
- OpenSSL 3.0 (5)
- iOS (5)
- procurement (5)
- C3PAO (4)
- Common Criteria (4)
- HITECH Act (4)
- deadline (4)
- encrypt (4)
- innovation (4)
- procure (4)
- public sector (4)
- Air Force (3)
- BSAFE (3)
- DFARS (3)
- HIPAA Safe Harbor (3)
- HITECH Safe Harbor (3)
- OpenSSL 1.1.1 (3)
- OpenSSL 3.x (3)
- POA&M (3)
- TLS 1.3 (3)
- magazine (3)
- queue (3)
- transition (3)
- 3PAO (2)
- ACVP (2)
- BAA (2)
- CIO (2)
- CSP (2)
- Cyber Defense Magazine (2)
- Defense Industrial Base (2)
- HIPAA security controls (2)
- Historical Status (2)
- MFA (2)
- OpenSSL 1.0.2 (2)
- SPRS (2)
- StateRAMP (2)
- entropy (2)
- excellence (2)
- finance (2)
- founder (2)
- gold (2)
- leader (2)
- maturity (2)
- overlap (2)
- pilot (2)
- rsa conference (2)
- solution (2)
- sponsors (2)
- sunset (2)
- vendor (2)
- year (2)
- Active Status (1)
- Alliance for Digital Innovation (1)
- Android (1)
- CIO Prime Views (1)
- DHS (1)
- DIU (1)
- DIUx (1)
- DOJ (1)
- DoDIN APL (1)
- Entropy Source Validation (1)
- FCA (1)
- FIPS Compliance (1)
- FISMA (1)
- GSA (1)
- HITRUST (1)
- Matt Cornelius (1)
- Matthew Cornelius (1)
- Maturity Model (1)
- NCCoE (1)
- OMB (1)
- SLED (1)
- SP800-131A (1)
- SP800-90A (1)
- TLS 1.1 (1)
- background (1)
- best (1)
- co-founder (1)
- codies (1)
- congress (1)
- cybertech (1)
- education (1)
- elliptic curve cryptography (1)
- extended (1)
- faq (1)
- fintech (1)
- fiscal (1)
- fiscal year (1)
- fraud (1)
- globee (1)
- hill (1)
- interview (1)
- kratos (1)
- libgcrypt (1)
- national cybersecurity strategy (1)
- opportunities (1)
- parallel (1)
- profile (1)
- public (1)
- representatives (1)
- reseller (1)
- senate (1)
- senators (1)
- simplify (1)
- state (1)
- stealth mode (1)
- story (1)
- terminology (1)
- trophy (1)
- whistleblower (1)
- whistleblowing (1)