Trust no one: VA’s mindset for the digital world

[pacmanx1]

Trust no one: VA’s mindset for the digital world

The nation’s increasingly complex computing environment constantly withstands ever-evolving attempts to hijack data resources, compromising sensitive information. In 2020 and 2021, ransomware attacks on SolarWinds’s Orion software and Colonial Pipeline’s billing infrastructure exposed significant security weaknesses in the government’s software supply chain, impacting private and federal computer systems.

To help protect the United States from increasingly sophisticated cyber threats, the White House issued Executive Order 14028, Improving the Nation’s Cybersecurity, “to ensure baseline security practices are in place, to migrate the federal government to a ‘Zero Trust Architecture,’ and to realize the security benefits of cloud-based infrastructure while mitigating associated risks.”

Trust no one: VA’s mindset for the digital world - VA News

[brokensoldier244th]

This is not unusual anywhere in the information sector, and hasn't been for some years. Its just the government that is finally catching up. In my IT jobs in the last 15 yrs, probably the last 8 or so were in organizations large or small business that all used variations of this, or contracted with companies that provided these services. 

 

[Dustoff1970]

So many times over the years government attempts to provide for our safety and security has been failure.  One glaring example is Sept 11, 2001.  I based on experience do not trust the gov for this anymore than large corporations.

Like a used car salesman if their lips are moving then they are lying.

[MilvetHD]

38 minutes ago, Dustoff1970 said:

So many times over the years government attempts to provide for our safety and security has been failure.  One glaring example is Sept 11, 2001.  I based on experience do not trust the gov for this anymore than large corporations.

Like a used car salesman if their lips are moving then they are lying.

What he said...this is nothing new and is highly unlikey to change anything meaningfully. The Government ain't attracting the brightest in this space and never will. 

[Rattler]

2 hours ago, brokensoldier244th said:

This is not unusual anywhere in the information sector, and hasn't been for some years. Its just the government that is finally catching up. In my IT jobs in the last 15 yrs, probably the last 8 or so were in organizations large or small business that all used variations of this, or contracted with companies that provided these services. 

 

broken I spent from 1988 to 2008-2009 in the IT world. I still am the go to guy for some businesses because of my skill set. The fact is most people have no idea what is really going on out there. I am so tired of adds for LifeLock and VPN's as the cure all. I had a client (Older Doc) that got hacked.  They called him on the phone and got his one of his CC numbers.  I was a good thing one of his daughters pick up on it. LifeLock wouldn't do anything about it. 

[brokensoldier244th]

Social engineering- the one thing you can’t tech your way out of. Mitnick wasn’t  that great of a hacker of systems- he was, however, much more dangerous. He was good at hacking people.

[Vync]

@pacmanx1If they ended up knowing how jacked up the VA travel reimbursement site is, they would not even bother, lol...