Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Doug Hudson
Achieving Continuous Compliance in Cloud Ecosystems - GRC Viewpoint
Visibility into compliance requirements across cloud ecosystems presents complex and nuanced challenges. To illustrate this, there are at least 19 auditor validated certifications and attestations globally that don’t even cover regional requirements like CCPA, GLBA, EU Cloud Code of Conduct, MTCS Tier 3 (Singapore), just to name a few. Continuous integration/continuous deployment, auto-scaling, serverless, data lakes, and third parties add further complexity to the compliance ecosystem.
Orca Security for Government Achieves FedRAMP® “In Process” Status
Orca Security is pleased to announce that we have earned the FedRAMP “In Process” status and are listed on the FedRAMP Marketplace. This achievement marks the next step in our FedRAMP authorization journey to provide security for cloud environments, workloads, applications, and data for the customers requiring the strictest security standards.
CISA’s Cyber Performance Goals for Better Security
Originally published by Orca Security. Written by Doug Hudson. Last year, the Cybersecurity and Infrastructure Security Agency (CISA) released its 2022 Cross-Sector Cybersecurity Performance Goals in order to provide guidance for improving cybersecurity across government and private sector organizations. This was the initial publication from CISA and will be updated regularly with coordination from NIST, with a targeted revision cycle of at least every 6 to 12 months.
Understanding the Importance and Relevance of CISA’s Cloud Security Reference Architecture Announcement
In June 2022, the Cybersecurity and Infrastructure Security Agency (CISA) released the Cloud Security Reference Architecture with co-authors United States Digital Service and Federal Risk and Authorization Management Program (FedRAMP). The publication is intended to provide guidance on migrating to a cloud native ecosystem.
Enhancing Software Consumer Security: Embracing Security-by-Design and Default
Recently CISA, FBI, NSA and several international governmental agencies collaborated to publish ‘Shifting the Balance of Cybersecurity Risk: Principles and Approaches for Security-by-Design and -Default’. This publication first covers the concept that many technology manufacturers (e.g. software providers) suffer from ‘Vulnerable by Design’ and encourages these manufacturers to adopt Secure-by-Design approach, thus enabling Secure-by-Default.
CISA’s Cyber Performance Goals for Better Security
Last year, the Cybersecurity and Infrastructure Security Agency (CISA) released its 2022 Cross-Sector Cybersecurity Performance Goals in order to provide guidance for improving cybersecurity across government and private sector organizations. This was the initial publication from CISA and will be updated regularly with coordination from NIST, with a targeted revision cycle of at least every 6 to 12 months.
Federal Software Inventory Bill: How to Get a Complete SBOM of Your Cloud
On September 21st 2022, the Strengthening Agency Management and Oversight of Software Assets Act was introduced in the US Senate and approved by the Senate Homeland Security and Governmental Affairs Committee on September 28th. The act states that each US agency “shall complete a comprehensive assessment of the software entitlements and software inventories of the agency”.
Orca’s Cloud Security Platform Achieves FedRAMP Ready Status
Orca Security is excited to announce that our Cloud Security Platform has achieved the FedRAMP Ready designation, which indicates the offering has the capability to serve the US Federal Government, its agencies and contractors with a fully agentless cloud security platform for Federal Risk and Authorization Management Program (FedRAMP) environments.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Doug
Contact Doug, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack