Article | May 27, 2021
“Belonging to the essential nature of a thing; originating and included wholly within an organ or part.” That is the definition of “Intrinsic.” When we were developing the “IT Manhattan Project” framework, we were doing so in direct response to some of the most significant hacks in U.S. Federal history, which piled on to the already unprecedented push to expedite the modernizing of federal IT because of the COVID-19 response. The COVID-19 response shifted the way that the U.S. federal government operated, where our workforce worked from, the immediate need for mobile ‘available from anywhere’ workloads, and how to both secure and support that new way of doing federal business. A new, vigorous push towards rapidly modernizing federal IT environments was underway. Ultimately, it laid the groundwork for producing transformational federal memos and oversight by way of some of the following:
Executive Order 14028: “Improving The Nation’s Cybersecurity”
M-22-09: OMB’s Zero Trust Strategy M-22-09
NIST 800-53rev5: Fulfilling an expedited realization of the overall intent of NIST 800-53r5 through the emphasis on things like conditional access, TIC 3.0 frameworks, Secure Orchestration/Automation/Remediation, and modernized, agile approaches to secure micro-segmentation from Hybrid Environments up to Federal Cloud instances
Overall mandates like these carry with them a consistent anthem driving at rapid IT modernization with rigorous proof of performance schedules attached. Piling on top of those Herculean efforts, the urgency was drastically increased by several of the highest profile cyber compromises in U.S. federal history. Rapid modernization had to happen right away. The time for IT transformation was here, backed by promises of significant funding and a high level of political visibility.
The Shift to Zero Trust
At their core intent, Zero Trust architectures are expected to provide a centralized policy structure that dictates how every individual flow in our IT environments are permitted to talk. No user, host, or flow is permitted without being subjected to rigorous authentication and authorization policy. This shifts our previous understanding of North-South, East-West traffic and how we police it. The foundational intent of Zero Trust architectures centers around applying unified policy to every transaction that occurs between enterprise resources, and doing so in ways that are agnostic to the IT Silo that they reside in.
Zero Trust assumes there is no implicit trust granted to assets or user accounts based solely on their physical or network location.”
NIST 800-207 aptly
They go on to explain that the scope of this posture includes all assets, workflows, network accounts, and the like. In summary, police everything, abstract production traffic intent from the underlying infrastructure that supports it, and institute a unified security posture to execute the policing at every network entry point. Regardless of the domain. We all know that this is a tectonic but much-needed shift in our industry. I’d go so far as to say that the successful instantiation of this approach across Federal IT environments is critical to our national security going forward.
Management Complexities
Enterprise IT domains contain varied mixtures of OEM solutions, home-grown tools, and utilize a wide variety of protocols to intercommunicate that aren’t necessarily standardize. Each of these domains is normally managed by separate IT teams who specialize in maintaining those environments. In the federal landscape, each of these domains aren’t just managed by separate enterprise IT teams, but are commonly managed by different contractors. Therefore, IT security organizations have a difficult time achieving and maintaining the necessary operational awareness required to enforce centralized policy. These cultural complexities exacerbated by budgeting concerns have created a fatalistic mentality when it comes to far-reaching mandates. This is where the tectonic shift in architectural and administrative approach is so necessary. This is where multidomain architectures shine.
Let’s define a common baseline of enterprise domains seen across traditional IT environments:
Cloud
Data Center
Enterprise Networking
Extended Enterprise (IoT, OT/ICS)
Remote Access
But to deliver a successful Zero Trust across the enterprise, it is first necessary to understand some foundational building blocks on which to construct our architectural approach:
We can’t have MULTIDOMAIN POLICY without first achieving fuller
We can’t deliver macro and micro-segmentation without first having robust MULTIDOMAIN
We can’t have multi-vendor MULTIDOMAIN Zero Trust POLICY without sensical INTEGRATIONS to stitch each enterprise domain together.
Let’s face it, enterprise IT environments don’t simply include infrastructure from a single manufacturer, or even a few key manufacturers. Rather, our Enterprise IT environments are represented by a plethora of IT manufacturers specializing in different niches of IT and the domains they are commonly found in. These environments are managed by different Federal IT organizations, different contractors who support these Federal IT organizations, and many different teams that support each common IT silo. Different teams that support oft-compartmentalized areas like Network Security Operations, Network Operations, Data Center Operations, Institutional Services, Wide Area Networking contracts, Operational Technologies, and dotted lines to different leadership oversight like CIO Programs, CTO Architecture, the Cyber Security Office, and the audit oversight bodies that they are subjected to. Each of these make up a complex support structure that isn’t necessarily streamlined for efficiency.
Summary and Overarching Goals
In articles to follow, you’ll see us referencing the IT Manhattan Project framework several times. Though many details of the framework can’t be discussed due to their sensitivity, the foundational principles are relevant across the board when pursuing intrinsic multidomain Zero Trust.
Establish Visibility (Administration, Telemetry, Assurance)
Define Straightforward Policy Structure and Hierarchy (Auth Chains)
Perform Multidomain Integrations (API Integrations)
Deploy Software-Defined Framework (Day-0, Programmable Fabrics, Multi-OEM Fabric Integrations)
Establish Sensical Automation Runbooks (Day-2 Operations)
We will also explore some areas that deliver unexpected value to the agency business in immediate ways. All of this will help create a cohesive story that helps CIOs, CISOs, and enterprise architects alike communicate the criticality of this multidomain Zero Trust approach to agency leaders across the federal spectrum.
Read More
Government Business
Article | July 14, 2022
Cities, counties, and states are being forced to upgrade or purchase new technology. The old legacy systems are now inadequate, inefficient, and somewhat dangerous because of their vulnerability to hacking. Many of the old systems are almost completely obsolete. They are unable to accommodate new applications.
In today’s data driven world, technology modernization leads to less cost, increases in efficiency, fewer requirements for human resources, and huge increases in convenience for citizens. Research on numerous capital improvement plans for cities, counties, and states reveals that funding is being allocated for major technology purchases and upgrades throughout the country.
Massachusetts
In a bill just signed by the governor, the Act Financing the General Governmental Infrastructure of the Commonwealth, $660 million has been allocated for information technology (IT) needs. Community colleges are scheduled to receive $140 million for cybersecurity, software, hardware, and infrastructure upgrades. Public schools will be eligible for competitive matching grants from a program that received $50 million. Much of the education funding will be used for access to broadband and other digital learning curricula. The IT funding includes $10 million for a statewide data sharing system for all criminal justice agencies and $10 million for the state’s Department of Health.
Cities and counties in Massachusetts also will receive funding. Sommerville’s need to acquire modern backup IT appliances and disaster and cybersecurity projects will get funding. The county of Berkshire is granted funding for a study to determine the cost of constructing a municipal broadband network. Avon will receive funding to move the township’s financial software to the cloud for increased security, and Easton will get funding for an e-permitting geographic information system and some technology-based service delivery software.
Texas
City leaders in Houston plan to spend millions to upgrade some outdated technology. The current computer-aided dispatch (CAD) system is more than 13 years old and has limited functionalities. The city's public safety department is in need of a new system to efficiently respond to police, fire, and medical calls for services. Funding allocations are outlined in the city’s 2021-2025 Capital Improvement Plan. The public safety CAD replacement is scheduled to receive $1 million, and the city has allocated $2.2 million for new budgeting software.
Nevada
The Las Vegas Public Works Department plans to procure a software solution for the city’s capital improvement project program management system (CPMS). The department is challenged with aging IT infrastructure, reduced resources, and currently, each phase of the CPMS uses separate software applications. This is labor intensive and ineffective. The plan is to have one software solution that tracks and manages all phases of the CPMS, including concept, planning, design, permitting, construction, and closeout. The city has budgeted $350,000 each year from 2021-2025 to complete this project.
Virginia
The city of Norfolk plans to upgrade its Department of Utilities’ billing system at a cost of $2 million. Over two years, city leaders plan to spend $4 million per year to purchase IT infrastructure. Purchases will include public safety radios, courthouse equipment, an electronic health record system, security appliances, a cybersecurity assessment, and upgrades to e-services platform.
The city of Portsmouth will upgrade its financial software beginning in 2021 with full implementation by 2024. The project will include software and hardware upgrades and the streamlining of third-party software. Beginning in 2022, the city will purchase record retention software to house permanent, and eventually all, citywide digital records. Plans also call for updating the city’s public safety records management/computer aided dispatch system at a cost of $900,000. New software will improve mobile computing and analysis tools, management dashboards, and multijurisdictional expandable capabilities for future potential collaborations with surrounding communities.
Pennsylvania
The city of Philadelphia’s Office of Innovation and Technology has a total of $153.6 million in city tax-supported funding programmed over its six-year FY21-FY26 capital program. Of the $22.5 million recommended, $8.67 million is for major upgrades for network infrastructure stabilization and enhancement. Another $13.83 million will support citywide departmental applications. This funding will be used for replacement of an old tax legacy system, a new personnel accountability system for the fire department, an integrated jail management system, and an enterprise resource platform modernization effort for procurement, accounting, and logistics. In 2021, the city also will design and implement a new fare collection system at a cost of $1.54 million to replace or enhance the current revenue collection equipment.
North Carolina
The Forsyth County Board of County Commissioners has approved a 2020-2021 annual budget which includes a $6.2 million enterprise resource planning system. The county’s budget, finance, and human resources software programs are in critical need of replacement. In Chatham County, there are plans to replace the current tax office software at a cost of $1 million, and the current software is being evaluated for new purchases.
Oregon
The city of Salem’s Information Technology Department has announced plans to update its financial system at a cost of $650,000. This upgrade is needed to maintain support of the application and increase functionality. The city also plans to update its enterprise storage array at a cost of $250,000. This equipment is primarily used for enterprise applications including financial services, cash handling, parking, utility billing, police records, and other city records flagged for retention purchases.
There is absolutely no doubt – 2021 will be a good year for companies that have new technology to sell to public officials.
Mary Scott Nabers is president and CEO of Strategic Partnerships Inc., a business development company specializing in government contracting and procurement consulting throughout the U.S. Her recently released book, Inside the Infrastructure Revolution: A Roadmap for Building America, is a handbook for contractors, investors and the public at large seeking to explore how public-private partnerships or joint ventures can help finance their infrastructure projects.
Read More
Government Business, Government Finance
Article | July 12, 2022
Blockchain has started to take off. It is now seen as an important part of development. More and more countries and governments are optimistic about joining the race of leveraging blockchain to commence different projects. It can be used in process optimization, cybersecurity, or integrating connected devices. This distributed ledger format is intended to support both public and government sectors, concluding, identity management, digital currency, payments, health care, land registration, voting, and management of legal entities.
Need For Blockchain in Government Sector
To provide maximum governance, the government must transform itself digitally from both intra-departmental and interdepartmental perspectives. As different departments run on different disjoint technologies, it leads to the concern of data consistency and data integrity. Due to which it becomes highly essential to incorporate multiple digital identities based on citizens in each department to make cross-referencing an easier task. And this is what Blockchain is for and should be used by the government.
Moreover, all over the world, banks are turning towards blockchain technology as a support for their complicated economy. They are going to utilize blockchain for issuing digital currencies. That’s the reason why the central banks of Russia, Japan, Britain, China, and the US are planning to meet and explore digital potential before launching CBDC (Central Bank Digital Currency).
Advantages Of Blockchain
By using Blockchain, governments can acquire several benefits. Some of which are:
1. Data Protection
Personal data has always been higher risk in the unique ids saved by the government. Crucial details have sometimes been open to public records leading to data breach attacks. With the use of blockchain, these intensities can be easily avoided as the blocks are secured from cyber attacks.
2. Transparency
It has been found that citizens have low trust in government bodies due to the unawareness of the reason behind their decisions. However, blockchain tends to remove the barrier of secrecy by creating a distributed network that enables participants to verify data that led to the decision.
3. Reduced Corruption
Every public service department has at least one corrupt officer. So the government is taking measures to remove such personals which indeed is not possible due to other corrupt officials. However, with the inclusion of the Blockchain system, the mediator link will be terminated from the government system leading to the dumping of the corrupted officials.
Final Thoughts
One of the most intimidating things about blockchain is the absence of regulatory bodies that can cause any theft or scams. For a modern digital world, blockchain resembles a key-tool for securing digital records, developing economic transition, budgeting, and so much more. Companies that want to establish themselves as the pioneer in the upcoming blockchain revolution should also hire developers to develop their own blockchain-based apps or platforms for secured transactions.
Read More
Article | June 17, 2020
COVID-19 hit the construction industry like a tsunami. Almost all medium to large construction projects were shuttered as government leaders scrambled to protect the health of Americans.
Today, however, even though the pandemic has not been contained, there is renewed interest in construction and reason for optimism. The immediate future is considerably brighter today than it was three months ago. Although construction projects are moving slower and fewer new ones being launched, there is definite movement.
One year ago, construction projects were so abundant industry leaders warned of imminent danger related to America’s shortage of skilled construction workers, designers, and engineers. Those alarms are not as loud today, but that could change soon because new projects are being announced on a daily basis throughout the country.
Officials at the Tampa International Airport placed approximately $906 million in construction projects on hold, but there’s little doubt that construction will begin again in the not too distant future. Air travel is down more than 95 percent, and urgency for planned expansions and upgrades is not as great.
Many colleges and universities also have delayed projects. In fact, the University of Nebraska-Lincoln (UNL) put a two-year halt on construction planned for this month. A $155 million football facility near Memorial Stadium is delayed primarily because university officials anticipate a $50 million budget shortfall. There’s also uncertainty about when sports events can resume.
But, more positive news may definitely be found in almost every state in the U.S. Here are just a few examples of upcoming construction projects in America.
Louisiana
The Louisiana State Legislature has approved $529 million for construction on university campuses. The University of Louisiana at Lafayette plans to spend $187,700 to repair Fletcher Hall and $16.4 million to renovate Madison Hall. Northwestern State University will receive $37.4 million for construction related to Kyser Hall. Louisiana Tech University plans to spend $40.5 million for a number of campus improvements, and Louisiana State University (LSU) has $227.7 million for construction projects. Southern University in Baton Rouge has planned renovations and expansions for about $18.2 million.
North Carolina
Wake County has approved a $1.47 billion budget and Capital Improvement Plan (CIP). It outlines construction projects at Wake Technical Community College that include new buildings on many campuses. One project outlined in the CIP is a new Emergency Operations Center, and other projects include a new Public Health Center, construction of training space at the Board of Elections Center, facility upgrades at Human Services Sunnybrook, a Facility Condition Assessment program, and vacant space build out for housing at Oak City Multi-Services Center.
Missouri
On June 2, North Kansas City Schools received approval for a $155 million zero-tax increase bond issue. Lee’s Summit voters also approved a new $224 million bond issue for various infrastructure projects in the R-7 School District. Some of the construction projects include a fourth middle school facility and renovations to the three existing middle school facilities. Voters approved a no-levy-increase bond question for $25 million for improvements to district facilities at Belton School District 124.
Wisconsin
The city of Sun Prairie has approved its 2021-2023 Capital Improvement Plan that includes many construction projects. The funding includes $7.4 million for phosphorous treatment and plant capacity upgrades at the Water Pollution Control Facility and $2.1 million for Sun Prairie Utility’s Business Park Substation expansion. Unfunded projects for 2021 include $3 million for a library expansion, a public works campus, and a Grans-Hepker intersection expansion. In 2022 the city will spend $7.4 million on street reconstruction. Another unfunded project for years 2022 and 2023 is a $5.7 million bathhouse renovation.
New Jersey
The New Jersey Turnpike Authority and the South Jersey Transportation Authority approved a toll increase to fund approximately $25 billion in construction over 10 years. Projects include the widening of 15 different sections of a turnpike, the replacement of a bridge between New Jersey and Pennsylvania, and upgrades to roadway tolling stations. The plan also calls for widening of a 13-mile section of the Expressway, construction of a direct connector to the Atlantic City Airport and installation of cashless toll equipment.
The governor announced plans this week to develop an offshore wind port on an artificial island along the Delaware River, potentially giving the state a competitive edge in the race to attract offshore wind jobs and manufacturers. The project would be unlike anything yet proposed in the U.S. and its cost could be as high as $400 million. The New Jersey Economic Development Authority will lead development of the port with the hope of creating thousands of high paying jobs and establishing New Jersey as the national capital of ‘off shore wind’.
Texas
The Capital Area Metropolitan Planning Organization (CAMPO) Transportation Policy Board adopted a 2021-2024 Transportation Improvement Program (TIP) that has numerous major construction projects. It includes $633 million for the I-35 Capital Express project which will be sponsored by the Texas Department of Transportation (TxDOT). The TIP also outlines transportation plans from regional transportation entities including TxDOT-Austin District, Capital Metro, Capital Area Rural Transportation System, and other local sponsors that have federally funded or regionally significant projects. One project the board chose to maintain is construction of two lane frontage roads on U.S. Highway 183. That project is projected to cost approximately $75 million.
Other projects in the CAMPO plan are:
Slaughter Lane widening to six lanes from Brodie Lane to N. Mopac Expressway – $15.73 million;
William Cannon widening to four lanes from McKinney Falls Parkway to Running Water Drive – $14.69 million;
Braker Lane extension from Samsung Boulevard to Dawes Place – $14.05 million;
University Boulevard reconstruction and widening to four lanes from County Road 110 to A.W. Grimes Road – $7.88 million;
Gattis School Road Segment 6 widening to six lanes – $11.38 million;
RM 967 widening from Oak Forest Drive to FM 1626 – $5.32 million;
FM 621 widening from CR 266 to De Zavala Drive in Hays County – $5.1 million;
SH 180 left turn lane installation and elimination of shoulder gap – $2.05 million; and,
Hopkins Multi-use Bike-Pedestrian Facility construction – $2 million.
Construction, engineering, architectural, and design firms will, no doubt, find immediate opportunities to contract with public officials. Additionally, as Congress begins to take up the task of developing an infrastructure bill, it is clear that construction projects will be hailed as the fastest way to stimulate the nation’s economy – a goal that has bipartisan support in America.
Mary Scott Nabers is president and CEO of Strategic Partnerships Inc., a business development company specializing in government contracting and procurement consulting throughout the U.S. Her recently released book, Inside the Infrastructure Revolution: A Roadmap for Building America, is a handbook for contractors, investors and the public at large seeking to explore how public-private partnerships or joint ventures can help finance their infrastructure projects.
Read More