EMERGING TECHNOLOGY, GOVERNMENT BUSINESS

Carahsoft Offers Support for Red Hat Solutions in AWS Marketplace

Carahsoft | February 24, 2023 | Read time : 02:10 min

Carahsoft Offers Support for Red Hat Solutions in AWS Marketplace

On February 23, 2023, Carahsoft Technology Corp. (Carahsoft), a government-related IT solutions provider, announced its support for Red Hat company in AWS Marketplace, providing easier access to enterprise open-source software in the public sector.

It would support Red Hat’s open hybrid cloud solution in AWS Marketplace, a digital catalog of software listings from independent software vendors who interact with the software running on AWS for the public sector. Its solutions designed for public sector customers would support application development, cloud computing, automation management technologies, professional services, certification, and training solutions of Red Hat. In addition, the listings would help AWS Marketplace customers with simplified software licensing, multiple procurement pricing options, and different deployment methods.

It would be an essential Government General Service Administration (GSA) Dealer and Distributor partner for Red Hat. It extends assistance for Red Hat’s AWS Marketplace distribution, opening the platform for United States government deployments. This collaboration on AWS Marketplace enables both to reach and fulfill customers’ needs for continuous growth quickly. Its customers, especially those from the Federal, State, Local and Education sector, would be benefited from supported public sector purchases through AWS Marketplace.

It is also an AWS Public Sector Partner, working with AWS-certifies resellers and managed service providers to offer a complete cloud-driven solution for migration, professional, and infrastructure services on AWS. In addition, its customers, who are working with AWS, can utilize existing AWS Enterprise Discount Program (EDP) funds for Red Hut’s products across any device.

“Carahsoft and our resellers continue to enable modernization in Government through the adoption of innovative enterprise open-source solutions,” said Natalie Gregory, Vice President of Red Hat Sales at Carahsoft. “We are proud to further support Red Hat in making its open-source IT capabilities more readily available to the Public Sector.”

(Source – Globe Newswire)

About Carahsoft

Headquartered in Reston, Virginia, Carahsoft, an IT consulting and services company, has been providing services for the public sector since 2004. It combines technology with the government procurement process, assisting organizations from the public sector. As a GSA Schedule Contract holder, it acts a government partner for vendors, networking with consulting partners, system integrators, resellers, and IT manufacturers. It supports marketing, strategic solutions delivery and proactive sales of government IT. In addition, it provides various cloud-based services for secured modernization, cybersecurity, MultiCloud, DevSecOps, Big Data, artificial intelligence, and customer experience.

Spotlight

Spotlight

Related News

EMERGING TECHNOLOGY

Unqork For Government Achieves FedRAMP® Authorization

Prnewswire | April 25, 2023

Unqork, the leading Codeless as a Service platform, today announced that it has achieved Authorization to Operate (ATO) on the Federal Risk and Authorization Management Program (FedRAMP®) Marketplace. Unqork enables customers, now including the Federal Government, to democratize technology and free themselves from the pitfalls of legacy code, unlocking innovation and speed to market with enterprise grade performance, scale, and security. The Department of Health and Human Services is the first federal agency to use Unqork for Government from the FedRAMP Marketplace to digitize payroll processing within the agency's Office of the Assistant Secretary for Health (OASH). Unqork is a new way for governments and enterprises to build and run applications ten times faster and 65% cheaper by replacing language – legacy code – with data. Through a universal data definition, Unqork's codeless engine powers beautiful front ends, scalable APIs, secure and performant back-ends, and everything in-between for the most stringent requirements of the Federal government. Unqork's customers include the largest regulated industries including banks, asset managers, insurance companies, state and local agencies, and healthcare providers. "We're thrilled to have achieved FedRAMP authorization so quickly in the five short years since Unqork was founded – a major testament to the security standards of the Unqork platform," said Gary Hoberman, Founder and CEO, Unqork. "Now that Unqork's codeless platform has received authorization on the FedRAMP marketplace, federal agencies have access to digital solutions that fuel their modernization efforts. We are excited to bring our codeless technology to the Federal agencies and team with them to unlock innovation and migrate legacy systems to the cloud." About Unqork Unqork is the leading Codeless as a Service platform that helps leading organizations build, deploy and manage complex software without having to think about code. Unqork created the codeless architecture standard – the future of software development that frees the world's largest enterprises from the pitfalls of legacy code and allows them to focus on innovation to drive business and maintain a competitive edge. More than one third of Unqork's corporate customers are in the Fortune 500, with a customer roster that includes Goldman Sachs, Marsh, Maimonides Medical Center and the U.S. Department of Health and Human Services.

Read More

CYBERSECURITY

Tidelift Public Sector Momentum Increases as Cybersecurity Supply Chain Risk Management Becomes Top Government Priority

Businesswire | May 30, 2023

Tidelift, a provider of solutions for improving the security and resilience of the open source software powering modern applications, today announced that it has been awarded three U.S. government contracts worth over $3.5 million, and is expanding its public sector organization in response to increased demand for innovative solutions that help the U.S. government improve its cybersecurity supply chain risk management (C-SCRM) capabilities. High-profile software supply chain vulnerabilities including Log4Shell and SolarWinds have dramatically increased attention on the need for improved software security, both in the public sector and beyond. In the U.S., this effort began in May, 2021 with White House Executive Order 14028: Improving the Nation’s Cybersecurity, and since then a variety of policy and legislative initiatives around cybersecurity have gained traction. In September, 2022, the U.S. government’s Office of Management and Budget released memorandum M-22-18 on Enhancing the Security of the Software Supply Chain through Secure Software Development Practices. M-22-18 formalizes the guidance provided in the NIST Secure Software Development Framework and NIST Software Supply Chain Security Guidance documents as the government requirements for developing secure software, and mandates federal government agencies comply with these guidelines. This memorandum sets aggressive deadlines for compliance with specific dates for both government agencies and organizations selling software to the government to comply with NIST guidelines. Among other stipulations, it requires that any organization selling software to the government must self-attest that their software is compliant with the NIST SSDF by June 2023 for critical software or by September 2023 for all other software. More recently, the National Cybersecurity Strategy sets a new precedent for software security liability, with the government intending to hold software producers liable for damages caused by preventable security vulnerabilities and offer liability protections to organizations that can show they follow secure software development practices. Tidelift awarded three U.S. government contracts worth over $3.5 million In addition to efforts like those mentioned above, the U.S. government is increasingly investing directly in improving open source software security. Tidelift was recently awarded three separate innovation research awards as part of the U.S. government SBIR program. The SBIR program is designed to help U.S.-based businesses invest in their technical potential, while stimulating technology innovation and meeting specific research and development needs. Through these SBIR Phase II awards, Tidelift is working with the Department of the Air Force and the Defense Advanced Research Projects Agency (DARPA) to help spur innovation in the systems and processes the U.S. government uses to improve open source software security and cybersecurity supply chain risk management. This investment will help Tidelift expand its industry-leading open source software management solution, including increasing its ability to partner with even more open source maintainers to validate their components meet important security, maintenance, and licensing standards required by government and industry users, and pay these maintainers for this critical work. It will also help the U.S. government better address the requirements and deadlines emerging from Executive Order 14028, memorandum M-22-18, and the NIST Secure Software Development Framework, especially when it comes to the open source components in use in government applications. Tidelift is also helping address new requirements around software bills of materials (SBOMs) that U.S. government agencies are beginning to understand, interpret, plan for, and deploy. Along with Tidelift producing an SBOM from every application build, the company is actively working upstream with open source maintainers to validate and improve security, maintenance, and licensing metadata for their projects and capture this data using the TACOS (Trusted Attestation and Compliance for Open Source) attestation framework. "The United States Air Force, and the Government as a whole, are among the largest consumers of open source software. With the increasing requirements around Software Supply Chain Risk Management (SCRM) and Software Bills of Materials (SBOM) initiatives, we are excited to partner with Tidelift to enhance cybersecurity resilience outcomes for open source software dependencies that support our most critical work," said Robert "Devo" DeVincent, Chief Software Officer, Air Force 309th Software Engineering Group. Tidelift expands public sector organization to meet growing demand Tidelift has named Matthew Arnow, a long-time veteran of Tidelift, to lead the newly expanded public sector team. Matthew heads up the team with extensive experience working with government and public sector clients. “Tidelift looks forward to working more closely with our government and public sector customers and prospects to improve the resilience of our mission-critical open source infrastructure,” said Matthew Arnow, head of public sector for Tidelift. “Our unique approach of working directly with the maintainers behind thousands of important open source projects will help public sector customers comply with U.S. government security directives and meet necessary government and industry standards.” Tidelift partners with Carahsoft to support public sector expansion Tidelift has also partnered with Carahsoft, the leading government reseller partner, to help more quickly and effectively address the number of large public sector opportunities. “Over the past year, we’ve seen increased demand from our customers for solutions that help improve open source software security and supply chain resilience,” said Natalie Gregory, vice president, Carahsoft. “We look forward to working with Tidelift and our reseller partners to deliver open source software supply chain risk management solutions to our government customers.” About Tidelift Tidelift, a 2022 Gartner Cool Vendor, helps organizations effectively manage the open source behind modern applications. Through the Tidelift Subscription, the company delivers the tools, data, and strategies powering an inclusive and organization-wide approach to improving the health and security of the open source software supply chain. Tidelift enables organizations to move fast and stay safe when building applications with open source, so they can create more incredible software, even faster. https://tidelift.com/

Read More

EMERGING TECHNOLOGY, CYBERSECURITY

Trustwave Supports United States Patent and Trademark Office’s Zero Trust Architecture with Leading Database Security

Businesswire | March 29, 2023

Trustwave Government Solutions (TGS), a Federally-focused cybersecurity provider and the wholly-owned subsidiary of Trustwave Holdings, Inc., today announced it has been awarded an expanded database security contract with the United States Patent and Trademark Office (USPTO). The expanded contract will allow USPTO to further build upon its robust Zero Trust Architecture (ZTA) with the expansion of DbProtect’s purpose-built database vulnerability management, Rights Management for advanced user rights review and Threat Monitoring. “At USPTO, our mission to foster innovation through examination, granting high-quality patents and trademarks is crucial to American prosperity,” said Jamie Holcombe, Chief Information Officer of USPTO. “Part of our mission requires creating, deploying, and protecting the critical data in one of the world’s largest repositories of innovation which includes almost every conceivable creation for over the last 250 years. Our expanded contract with Trustwave Government Solutions is a key investment to ensure our mission is sustained in a secure way.” As the central repository for U.S. Patent and Trademark data, actively monitoring and protecting American innovation and intellectual property data is essential to USPTO’s mission. In response, USPTO has become a pioneer in building and operationalizing Zero Trust Architecture across the five pillars of the federal Zero Trust framework: users, apps, data, networks, and devices. By providing real-time visibility of database assets, vulnerabilities, risk levels, user privileges, and anomalies, TGS will help USPTO security teams deliver on two of the five zero-trust pillars: users and data. “USPTO is constantly at the forefront of Zero Trust Architecture innovation, and we’re thrilled to be a partner on this journey with them,” said Bill Rucker, President of Trustwave Government Solutions. “Data is at the heart of the Zero Trust conversation, and in order to operate securely today and in the future, databases need to be considered as critical assets with the appropriate security considerations applied. Gone are the days of ‘good enough’ scanning. Databases are just more important, and they should be protected at all costs.” TGS’s Database Security offering proactively assesses threats to databases to help government entities gain visibility into the vulnerabilities in on-premises or cloud databases that could lead to a data breach. It automates the security of critical data by uncovering vulnerabilities that threat actors could exploit, limiting user access to the most sensitive data, and alerting on suspicious activities, intrusions, and policy violations. As a result, government clients can spend less time chasing database security alerts and more time on activities that drive value, like remediating risks and reducing attack surfaces. Trustwave has been laser-focused on database security for more than 20 years and is currently protecting thousands of databases across the commercial and Federal Government spectrums. In fact, Trustwave’s DbProtect was the only database vulnerability scanner included in the original tools acquisition under the Department of Homeland Security (DHS) Continuous Diagnostic and Monitoring (CDM) program, and it is the only database security solution recognized by Marsh’s Cyber Catalyst program to have meaningful impact in reducing cyber risk by top global cyber insurers. As the threat landscape evolves and adversaries find new ways to exfiltrate and manipulate data, the government has been finalizing Zero Trust adoption guidance to adhere to the Biden administration’s cybersecurity executive order to “advance toward Zero Trust Architecture.” USPTO is setting the example for other government entities to employ a database-specific security approach that includes continuous vulnerability and configuration assessments and remediation, database privileged access visibility and control, and continuous database activity monitoring to alert and respond to anomalous database activity. About Trustwave As a recognized global cyber defender that stops cyber threats all day, every day – we enable organizations and governments to conduct their business securely. Trustwave detects threats that others can’t see, enabling us to respond quickly and protect our clients from the devastating impact of cyberattacks. We leverage our world-class team of security consultants, threat hunters and researchers, and our market-leading security operations platform to relentlessly identify and isolate threats with the right telemetry at the right time for the right response. Trustwave is a leader in managed detection and response (MDR), managed security services (MSS), consulting and professional services, database security, and email security. Our elite Trustwave SpiderLabs team provides award-winning threat research and intelligence, which is infused into Trustwave services and products to fortify cyber resilience in the age of advanced threats.

Read More