VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks...
Transcript of VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks...
![Page 1: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/1.jpg)
1
Welcome and Opening Remarks
Michael Watson
Aug. 1, 2018
www.vita.virginia.gov 1
![Page 2: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/2.jpg)
2
ISOAG Aug. 1, 2018
I. Welcome & Opening Remarks Mike Watson, VITA
II. How to Train Your Elephant David Brown, DBHDS
III. IAM Overview Grayson Walters, SAIC
IV. How To Keep Your Web Sites/Services Kyle Lindsay, VITA
From Becoming “Low Hanging Fruit”
V. SAIC Transition Update John Craft, VITA
VI. Upcoming Events Mike Watson, VITA
VII. Operations Update NG
![Page 3: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/3.jpg)
VITA ISOAG August 2018
How to Train Your Elephant
![Page 4: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/4.jpg)
Population: 500,000 Weight: up to 6 tons Average food: 300-400 pounds
![Page 5: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/5.jpg)
___________ of birds ___________ of monkeys ___________ of dogs ___________ of elephants
Flock
Congress Troop
Pack
Herd
![Page 6: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/6.jpg)
![Page 7: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/7.jpg)
Confidentiality Integrity Availability
People Processes Technology
![Page 8: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/8.jpg)
Technology =
Processes =
People =
![Page 9: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/9.jpg)
CULTURE
![Page 10: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/10.jpg)
Here’s the bottom line:
You can’t control
your elephant!
![Page 11: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/11.jpg)
“If a problem has no solution, it may not be a problem, but a fact, not to be solved, but to be coped with over time.” -Shimon Peres
![Page 12: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/12.jpg)
Elephants aren’t machines!
![Page 13: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/13.jpg)
CULTURE
![Page 14: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/14.jpg)
The Ultimatum Game
![Page 15: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/15.jpg)
High School
![Page 16: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/16.jpg)
CULTURE
![Page 17: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/17.jpg)
People Centric Security
![Page 18: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/18.jpg)
Take the test!
![Page 19: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/19.jpg)
![Page 20: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/20.jpg)
Process - Stability - Visibility - Bureaucracy Example: US Gov’t
Compliance - Conformity - Repeatability - Documentation Example: Healthcare Credit Cards
Trust - Human relations - Communication - Participation - Commitment Example: Start-ups Family-owned
Autonomy - Adaptive - Flexible - Agile - Innovative Example: Social media Academia
Internal Focus
External Focus
Tight Control
Loose Control
![Page 21: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/21.jpg)
Radar Chart
Process: 50 Compliance: 30 Trust: 5 Autonomy: 15
s Trust
Autonomy
Process Compliance
![Page 22: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/22.jpg)
Radar Chart
Trust
Autonomy
Process Compliance
![Page 23: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/23.jpg)
Clara
![Page 24: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/24.jpg)
Remember:
You can’t control
your elephant!
![Page 25: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/25.jpg)
1. Determine what kind of elephant you have
![Page 26: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/26.jpg)
2. Determine what kind of elephant culture you need
![Page 27: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/27.jpg)
![Page 28: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/28.jpg)
3. Identify why your elephant acts the
way it does
![Page 29: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/29.jpg)
4. Determine how to reward the
actions you want
![Page 30: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/30.jpg)
5. Start the process of training your
elephant
![Page 31: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/31.jpg)
Culture eats strategy for BREAKFAST
![Page 32: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/32.jpg)
Two Great Books
Lance Hayden
![Page 33: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/33.jpg)
VITA ISOAG August 2018
How to Train Your Elephant
![Page 34: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/34.jpg)
34 www.vita.virginia.gov
How To Keep Your Web Sites/Services
From Becoming 'Low-Hanging Fruit’
Kyle Lindsay
Security and Incident Response Intern
ISOAG
Aug.1, 2018
www.vita.virginia.gov 34
![Page 35: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/35.jpg)
35
Don’t Be The Low-Hanging Fruit!
Based on:
RSI Security
![Page 36: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/36.jpg)
36
Objectives
I. Limit Recon Information
II. Plan and Follow A Patching Schedule
III. Utilize VITA Vulnerability Scan Reports
IV. Avoid Use of Insecure Protocols
![Page 37: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/37.jpg)
37 www.vita.virginia.gov
Verbose HTTP Headers and Responses
![Page 38: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/38.jpg)
38 www.vita.virginia.gov
Follow A Patching Schedule
• VITA/server providers handle patching of the OS and base web server software ONLY
– ANY addition software is the responsibility of the agency
• Research – Test – Deploy
– Stay up-to-date on updates to your environment
– Compare risks to costs
![Page 39: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/39.jpg)
39 www.vita.virginia.gov
Maintenance Cycle Coordination
• Verify your team is on the same page
– Everyone should be aware of the expectations
– Environment should be understood by all
– ‘Cycles’ implies that these processes never end
• Track vulnerabilities and updates
• Set regular intervals to revisit and verify
![Page 40: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/40.jpg)
40 www.vita.virginia.gov
Utilize Vulnerability Scan Reports
• Reports hold identical data to what malicious parties will utilize for attacks
– You receive advanced warning
– Service is included at no addition cost
• Most vulnerabilities are relatively simple to fix
– Software vendors create patching guides
– Incorporate quarterly scan results in to your patching schedule if possible
![Page 41: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/41.jpg)
41 www.vita.virginia.gov
Avoid Insecure Protocols
• Allow for practically effortless attacks
Based on:
OctoPerf
![Page 42: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/42.jpg)
42 www.vita.virginia.gov
HTTP Websites Marked Insecure
Google Chrome now lists ALL HTTP
websites as “Not secure”
![Page 43: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/43.jpg)
43 www.vita.virginia.gov
The Hard Truth
• “Update X will break my legacy system.”
– Is it time to explore upgrading the system?
– Can you afford an incident? Would an incident cost less than an upgrade?
• “Security patch Y doesn’t allow old or outdated clients to connect.”
– Balance security and reduced interoperability
– Is it ethical to let citizens risk compromise of their own PII by allowing the use legacy clients?
![Page 44: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/44.jpg)
44 www.vita.virginia.gov
Takeaways
• Don’t make it easy!
• Preemptive actions will safeguard your nights and weekends in the future
• VITA Security is here to help
– Just ask!
![Page 45: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/45.jpg)
45 www.vita.virginia.gov
Questions?
![Page 46: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/46.jpg)
46 www.vita.virginia.gov
Links • CIS Best Practices
• How to disable verbose HTTP headers
![Page 47: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/47.jpg)
47 www.vita.virginia.gov
Appendix
1. How To Move to HTTPS
2. Evolution of SSL/TLS Protocols
3. TLSv1.0 Deprecation Notice by PCISSC
![Page 48: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/48.jpg)
48 www.vita.virginia.gov
How To Move To HTTPS
• Private websites can obtain certificates for free
• Public websites can obtain certificates for a fee
– Ask your customer account manager for pricing and details
![Page 49: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/49.jpg)
49 www.vita.virginia.gov
SSL/TLS Evolution
Source
![Page 50: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/50.jpg)
50 www.vita.virginia.gov
TLS1.0 Deprecated By CC Industry
• Payment Card Industry Security Standards Council set due date for all eCommerce websites of June 30th, 2018
• Also includes all versions of SSL! *SSL was replaced by TLS
• Official Information Supplement
![Page 51: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/51.jpg)
© SAIC. All rights reserved.
Information Security Officer’s Advisory Group IAM Overview
01 August 2018
Prepared for:
![Page 52: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/52.jpg)
© SAIC. All rights reserved. 52
Security Clearance Database
Identity & Access
Management
Security Operations Grayson Walters
![Page 53: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/53.jpg)
© SAIC. All rights reserved. 53
Security Clearance Management
Ensuring Compliance for Service Tower Supplier (STS) Personnel
SAIC is providing a comprehensive security clearance database for STS personnel
The database will track items such as: Completion of background checks Completion of specialized or agency required training Facility Badges
![Page 54: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/54.jpg)
© SAIC. All rights reserved. 54
Clearance Database Criteria
Based on Appendix C of the VITA
Agency MOU
![Page 55: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/55.jpg)
© SAIC. All rights reserved. 55
Identity & Access Management
![Page 56: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/56.jpg)
© SAIC. All rights reserved. 56
Identity and Access Management (IAM)
Managing Access
Changes to access can be initiated from the service portal.
Many types of access will be provisioned automatically upon completion of the request and approval process.
Notifications, audit logging, and compliance record retention occur as part of the workflow
Approved personnel will be able to pull live records from connected systems.
![Page 57: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/57.jpg)
© SAIC. All rights reserved. 57
Getting ahead of the game:
Start looking at your groups in CoV Active Directory Clean up descriptions
If you mean “Provides Read Only Access to the S Drive” say that instead of the current descriptions which generally say nothing.
Begin thinking of logical groupings for access Collections of groups that add up to provide a type of access How these collections relate to user roles
![Page 58: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/58.jpg)
© SAIC. All rights reserved. 58
Long Term
Solution Designs that provide Identity and Access Management for your applications.
As the BRM group starts up, inform them if you will be interested in deploying the IAM solution for your applications as well.
![Page 59: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/59.jpg)
© SAIC. All rights reserved. 59
Questions?
![Page 60: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/60.jpg)
60 www.vita.virginia.gov
SAIC Transition
Update John Craft
Deputy CISO
ISOAG Meeting
August 1, 2018
www.vita.virginia.gov 60
![Page 61: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/61.jpg)
61
Transition Patch Hold for 8/17 Cycle
• VITA has authorized a server patch hold for the
weekend of 8/17
• Server patching will resume on 8/24
• Servers originally scheduled for patching the
weekend of 8/17 will receive August and September
patches during the September patch cycle.
• Agencies who wish to make up patches in a later
August patch window should coordinate through
their CAM.
www.vita.virginia.gov
![Page 62: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/62.jpg)
62
Clearances
• To ensure a smooth operational changeover, existing VITA security clearances for transitioning NG incumbent staff will be carried over until those employees transition to the new service tower provider. Clearances will be re-certified as part of new service tower employment transition.
• New hires and non-incumbent staff will follow established clearance procedures.
• Agencies should contact their CAMs if they will require re-certification of clearances as part of the transition.
www.vita.virginia.gov
![Page 63: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/63.jpg)
63
Agency Badges
• VITA is directing NG to not collect agency-
issued badges for NG employees
transitioning to SAIC.
• We are aware that some agency-issued
badges contain a “Northrup Grumman”
identifier and will need to be re-issued.
www.vita.virginia.gov
![Page 64: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/64.jpg)
64
Questions?
www.vita.virginia.gov
![Page 65: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/65.jpg)
65 www.vita.virginia.gov 65
Upcoming Events
![Page 66: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/66.jpg)
66
Future ISOAG
September 12, 2018 @ CESC 1:00-4:00 Speakers:
Prentice Kinser, SAIC
First Sergeant Eric Gowan, VSP
Jayne Holland, NIC, Inc
ISOAG meets the 1st Wednesday of each month in 2018
![Page 67: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/67.jpg)
67
IS Orientation
When: Thursday, Sept 13, 2018
Time: 10:00 am
Where: CESC
Link :http://vita2.virginia.gov/registration/Session.cfm?MeetingID=10
![Page 68: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/68.jpg)
68
COVITS 2018
COVITS 2018
Sept. 5-6
Greater Richmond Convention Center
![Page 69: VITA - Welcome and Opening Remarks Michael …...2 ISOAG Aug. 1, 2018 I. Welcome & Opening Remarks Mike Watson, VITA II. How to Train Your Elephant David Brown, DBHDS III. IAM Overview](https://reader036.fdocuments.net/reader036/viewer/2022071015/5fce866547d4cf741608f027/html5/thumbnails/69.jpg)
69
ADJOURN
THANK YOU FOR ATTENDING
Picture courtesy of www.v3.co.uk