Applying commercial best practices to DoD risk management to offer suggestions how to move from risk avoidance to cost effective risk management
Jerome Edge - Lockheed Martin
Oct 25, 2017Size: 152.9MB
Download: MP4 Video
Watch in your Browser Watch on YouTube
AbstractThe Department of Defense has mandated a risk management rather than risk avoidance approach in Cybersecurity. All Department of Defense programs are being directed to the Risk Management Framework (RMF) process. No Cyber system can be 100% secure. RMF mandates that we clearly determine the "value" of assets, such as information and intellectual property, and design systems to properly protect those assets. The commercial domain embraces the mantra that an organization should not spend more to protect the asset than the asset is worth. This presentation will provide an overview of RMF as applied to a specific publically available case study and highlight that utilizing commercial best practices can reduce cost of delivered systems to DoD.
About the SpeakerJerome Edge is a System Security Engineer who works for Lockheed Martin Corporation to provide secure solutions to DoD Information Systems.
Jerome has worked at Lockheed Martin Aeronautics Company for 20 plus years with over 10 years in a Security Engineering role on a multitude of aeronautical aircraft.
Jerome is a Certified Information System Security Professional (CISSP) and Security + and looking forward to obtaining a certification in Certified Ethical Hacker (CEH).
Jerome holds a Bachelor of Science degree in Electrical Engineering from University of Tennessee (1997) and a Master of Science degree in Security Engineering from Southern Methodist University (2010).
The views, opinions and assumptions expressed in these videos are those of the presenter and do not necessarily reflect the official policy or position of CERIAS or Purdue University. All content included in these videos, are the property of Purdue University, the presenter and/or the presenter’s organization, and protected by U.S. and international copyright laws. The collection, arrangement and assembly of all content in these videos and on the hosting website exclusive property of Purdue University. You may not copy, reproduce, distribute, publish, display, perform, modify, create derivative works, transmit, or in any other way exploit any part of copyrighted material without permission from CERIAS, Purdue University.