Exclusive: U.S. manufacturing group hacked by China as trade talks intensified - sources

Reuters | November 13, 2019

As trade talks between Washington and Beijing intensified earlier this year, suspected Chinese hackers broke into an industry group for U.S. manufacturers that has helped shape President Donald Trump’s trade policies, according to two people familiar with the matter. The National Association of Manufacturers (NAM) was hacked over the summer and hired a cybersecurity firm, which concluded the attack came from China, the two sources said. The security firm, which the sources did not name, made the assessment based on the usage of tools and techniques previously associated with known Chinese hacking groups, they said.

Spotlight

Spotlight

Related News

Cybersecurity

Carahsoft, Forescout, stackArmor Partner with Google Public Sector on Authority to Operate (ATO) Pilot Program to Secure Federal Workloads

GlobeNewswire | August 31, 2023

Carahsoft Technology Corp., The Trusted Government IT Solutions Provider®, Forescout Technologies, Inc., a global cybersecurity leader, and stackArmor, an advanced security and compliance solutions provider with a proven track record of delivering FedRAMP, DoD CC SRG, CMMC 2.0 and StateRAMP compliance acceleration, today announced a partnership with Google Public Sector to accelerate the availability of Forescout cybersecurity solutions to state, federal, and department of defense agencies. As part of an ATO pilot program, specialist solution providers like stackArmor combine with Carahsoft’s proven public sector market services, to provide ISVs like Forescout with a holistic “accreditation to acquisition” solution. "Google Public Sector is committed to working with partners like stackArmor and Carahsoft to accelerate the availability of Forescout cybersecurity solutions to state, federal, and Department of Defense agencies,” said Troy Bertram, Managing Director of Partners, Google Public Sector. “This pilot brings together partners with deep expertise and local knowledge to help ISVs accelerate the path to compliance and rapidly bring innovative technology to government agencies.” The Forescout® Cloud, built on Google Cloud, is a unified SaaS platform for security visibility, risk, and operational management. It continuously discovers and analyzes all connected cyber assets, whether they are managed or unmanaged for IT, OT/ICS, IoMT, IoT and cloud, and is a foundation for Forescout solutions that address challenges related to risk and exposure management, and threat detection and response. “We are delighted to be a partner of this ATO pilot program, which provides us with an accelerated pathway towards FedRAMP compliance and uniquely brings together engineering, compliance advisory and continuous monitoring services as well as market access solutions,” said Paul Kao, VP Product & Engineering, Forescout. “We selected stackArmor after a rigorous evaluation process and were impressed with their engineering expertise and ability to help us remove delays and friction from our aggressive accreditation roadmap.” stackArmor rapidly delivers a dedicated Google Cloud Landing Zone with NIST-compliant security services, a complete FedRAMP ATO documentation package and post-ATO continuous monitoring. To ensure the confidentiality, integrity and availability of sensitive data, ThreatAlert® provides a standardized secure by design architecture that is deployed “in-boundary” to ensure the highest levels of security and the ability to meet stringent government cybersecurity requirements including FedRAMP Moderate, FedRAMP High, DOD Impact Level 4 and 5 among others. “Reducing the time and cost of implementing NIST SP 800-53 based cybersecurity controls to achieve an ATO in compliance with FedRAMP, FISMA/RMF, DoD CC SRG and CMMC 2.0 requirements is a strategic necessity for commercial ISVs, critical infrastructure enterprises and public sector organizations, especially given the sharp rise in cybersecurity threats,” said Gaurav “GP” Pal, CEO and founder, stackArmor. “We are excited to expand our partnership with Carahsoft to bring our ThreatAlert® ATO Accelerator, which provides a secure by design cloud landing zone, defense in depth security services, OSCAL ready documentation package and continuous compliance automation to ISVs like Forescout, to accelerate the delivery of FedRAMP accredited cybersecurity services to government agencies.” "Interest in FedRAMP-accredited cloud services has accelerated since the passage of the FedRAMP Authorization Act in December of last year, which opens new opportunities for expanding the portfolio of available accredited SaaS and PaaS offerings in the federal marketplace," said Craig P. Abod, Carahsoft President. "stackArmor’s ThreatAlert® ATO Accelerator combined with Carahsoft’s unique market access solutions provide a compelling accreditation-to-acquisition solution." About Carahsoft Carahsoft Technology Corp. is The Trusted Government IT Solutions Provider®, supporting Public Sector organizations across Federal, State and Local Government agencies and Education and Healthcare markets. As the Master Government Aggregator® for our vendor partners, we deliver solutions for Cybersecurity, MultiCloud, DevSecOps, Big Data, Artificial Intelligence, Open Source, Customer Experience and more. Working with resellers, systems integrators and consultants, our sales and marketing teams provide industry leading IT products, services and training through hundreds of contract vehicles. Visit us at www.carahsoft.com. About Forescout Forescout Technologies, Inc. a global cybersecurity leader, continuously identifies, protects and helps ensure the compliance of all managed and unmanaged connected cyber assets – IT, IoT, IoMT and OT. For more than 20 years, Fortune 100 organizations and government agencies have trusted Forescout to provide vendor-agnostic, automated cybersecurity at scale. The Forescout® Platform delivers comprehensive capabilities for network security, risk and exposure management, and extended detection and response. With seamless context sharing and workflow orchestration via ecosystem partners, it enables customers to more effectively manage cyber risk and mitigate threats. www.forescout.com About stackArmor stackArmor provides cloud migration, security and compliance engineering services for compliance-driven markets, including Public Sector, Government Agencies, Healthcare, Education, Space & Defense, Financial Services, and Non-profit organizations. stackArmor’s ThreatAlert® ATO Accelerator provides a unique “in-boundary” solution that helps organizations rapidly achieve FedRAMP, FISMA/RMF, DOD CC SRG and CMMC 2.0 among other government-driven cybersecurity compliance frameworks. Learn more by visiting https://stackArmor.com

Read More

Emerging Technology, Government Business

CSG Government Solutions Selected for Program Management Office Services on the Connecticut Medicaid Enterprise Technology System Program

Prweb | August 03, 2023

CSG Government Solutions, a national leader in government program modernization, today announced that it has been selected by the Connecticut Department of Social Services (DSS) to provide Program Management and Project Support Services for the Connecticut Medicaid Enterprise Technology System (CT METS) Program, including the implementation of an Enterprise Data Warehouse and Analytics module and Enterprise Provider module. CSG is supporting DSS’ initiative to replace their core MMIS and other systems supporting the Medicaid Enterprise with modern, modular solutions. The CSG team will provide full-service Program Management Office (PMO) services and expertise in Medicaid, enterprise architecture, system integration, Health Information Exchange, and security. The team is also providing quality assurance, risk management, schedule and resource management, and CMS certification support. “CSG is a leader in providing PMO and other services for Medicaid system modernizations across the country,” says Robin Dufresne, Executive Vice President and Senior Practice Director. “Our team applies our Medicaid expertise and dedication to help the DSS Medicaid Enterprise make a positive impact on the health and well-being of Connecticut’s individuals, families, and communities.” About CSG Government Solutions CSG Government Solutions is a leading government operations consulting firm helping states modernize critical program enterprises. We help governments leverage innovative technology and processes to meet the challenges of administering complex programs. Founded in 1997, CSG clients include 47 state and territory governments, the U.S. Department of Health and Human Services, the U.S. Department of Labor, and large municipal governments. For more information, visithttp://www.csgdelivers.comand connect with us onLinkedInandTwitter.

Read More

Emerging Technology

BRP Group, Inc. Introduces Government Contracting Center of Excellence

Businesswire | July 28, 2023

BRP Group, Inc. today announced the establishment of its newest national Center of Excellence (“COE”) — Government Contracting (“GovCon”) – to join the firm’s expanding portfolio of specialty practices. The new practice launch is part of BRP Group’s intentional strategy of leveraging the deep expertise of its national network of risk management and insurance partnerships, and their experts and specialists, to make a greater difference for their clients’ business needs regardless of geographic location. BRP Group’s GovCon COE team is comprised of knowledgeable insurance experts with broad experience advising clients who operate in the government contracting space. This COE is specifically structured to support federal contracting clients with property and casualty, employee benefits and retirement insurance solutions, GovCon M&A due diligence and in-house compliance specialists. “Our new Government Contracting (GovCon) Center of Excellence (COE) is an expansion of BRP Group’s specialized solutions and capabilities that work to meet the unique needs of current and prospective clients. By combining the expertise from our two partner firms, Armfield, Harrison & Thomas (AHT) and The Capital Group, we are excited to bring this additional practice to the marketplace,” said Dan Galbraith, BRP Group’s Chief Operating Officer. “Not only do government contractors encounter typical risk management and insurance issues, they also navigate unique challenges associated with conducting business within a rapidly-evolving, highly-regulated environment. With more than 25 years of experience and a proven track record of designing specialized insurance coverage for these complex business and regulatory conditions, our dedicated colleagues, led by BRP Group’s Senior Director of Sales Kevin FitzPatrick, keep clients protected, in compliance and proactively prepared to mitigate risk and manage costs.” The GovCon COE focuses on addressing the unique needs and challenges of clients in the hyper- competitive federal contracting space that are best solved by a unified team approach. The GovCon COE helps federal contractors navigate these mission critical areas: Controlling fringe expenses to keep competitive Wrap Rates GovCon Employee Benefits Benchmarking - designing programs that help improve employee attraction and retention. Risk Management Strategy Defense Base Act (DBA) Coverage International Coverage Cyber Liability Insurance Service Contract Act (SCA) Compliance and Strategy 401K plan development and administration In addition, the GovCon COE has integrated two key programs: GovTech™: The Government Technology Insurance Company offers robust commercial insurance policies that flow down the Federal Acquisition Regulation (FAR) and Defense Federal Acquisition Regulation Supplement (DFARS) framework and provides easy access to GovCon insurance subject matter experts at premiums that accurately reflect the exposures. GovConHealth: Provides go-to-market strategies to federal contractors to help them control employee benefits expenses. The initiative is powered by a unique and proprietary consortium-funded stop-loss arrangement that bands together high-performing federal contractors to safely and conservatively partially self-fund their employer-based healthcare. ABOUT BRP GROUP BRP Group, Inc. (NASDAQ: BRP) is an independent insurance distribution firm delivering tailored insurance and risk management insights and solutions that give our Clients the peace of mind to pursue their purpose, passion and dreams. We are innovating the industry by taking a holistic and tailored approach to risk management, insurance, and employee benefits, and support our Clients, Colleagues, Insurance Company Partners and communities through the deployment of vanguard resources and capital to drive our growth. BRP Group represents over 1.3 million clients across the United States and internationally. For more information, please visit www.baldwinriskpartners.com.

Read More