John Curran

MeriTalk

John Curran is MeriTalk's Managing Editor covering the intersection of government and technology.
TMF

Federal CIO Clare Martorana forecasted this week that the hundreds of millions of dollars of investments that the Technology Modernization Fund (TMF) has made in recent years to jumpstart Federal agency security improvements will be bearing fruit within the next 12 months. […]

Tom Kennedy, Axonius

Tom Kennedy, vice president of Axonius Federal Systems, said on April 16 that the company expects to receive FedRAMP (Federal Risk and Authorization Management Program) authorization for its hosted service offering for the Federal government in the near term. […]

The Cybersecurity and Infrastructure Security Agency’s (CISA) Continuous Diagnostics and Mitigation (CDM) program is focusing closely on a range of goals for the remainder of fiscal year (FY) 2024 including expanding the program’s asset management capabilities to include mobile and cloud services, and leveraging the fruits of the program’s endpoint detection and response (EDR) capabilities to help CISA provide better security intelligence across Federal civilian agencies. […]

Cloud Computing Brainstorm 2019 - Sean Connelly

Sean Connelly, who has been long been a prime mover on zero trust and other security policies for the Cybersecurity and Infrastructure Security Agency (CISA), will soon be leaving Federal government service to join cloud security provider Zscaler, the company confirmed to MeriTalk. […]

The Senate Homeland Security and Governmental Affairs Committee voted today to approve the Multi-Cloud Innovation and Advancement Act, which aims to modernize and streamline the adoption of cloud computing technologies by Federal government agencies. […]

Google HQ
Chris DeRusha, Federal CISO

Federal Chief Information Security Officer (CISO) Chris DeRusha gave broad credit today to Federal agencies for making marked improvements in cybersecurity over the past few years, and cited the ability of one larger agency – which he did not name – with being able to take particularly quick action in the face of the Ivanti vulnerabilities that the government began warning about in January. […]

CISA

Matt House, who runs the Cybersecurity and Infrastructure Security Agency’s (CISA) Continuous Diagnostics and Mitigation (CDM) program, previewed today that his office is working on an effort to better explain how the CDM program supports the Federal government’s push toward zero trust security architectures, and specifically the Zero Trust Maturity Model (ZTMM) that CISA last updated in April 2023. […]

SBA

The U.S. Small Business Administration (SBA) said it’s working on a list of longstanding IT management problems previously flagged by the agency’s inspector general, and it estimates taking action on most of those by Aug. 30 of this year. […]

A new report from the Treasury Department on how the financial services sector is approaching managing AI-driven cybersecurity risks reveals challenges familiar to many sectors – think workforce, data quality, and funding. But one that stands out from the rest gets down to the very basic level of understanding those risks: reaching broad agreement on what artificial intelligence means, and adopting common terms that will allow for greater understanding of the technology. […]

John Curran
MeriTalk