{"id":55356,"date":"2022-05-19T19:43:35","date_gmt":"2022-05-19T11:43:35","guid":{"rendered":"https:\/\/wp-productionenv-bjg9h2g2bgg5b8aa.southeastasia-01.azurewebsites.net\/news\/nasa-official-speaks-to-cybersecurity-language-gap-in-the-agency-2\/"},"modified":"2022-05-19T19:43:35","modified_gmt":"2022-05-19T11:43:35","slug":"nasa-official-speaks-to-cybersecurity-language-gap-in-the-agency-2","status":"publish","type":"post","link":"https:\/\/starpath.global\/news\/nasa-official-speaks-to-cybersecurity-language-gap-in-the-agency-2\/","title":{"rendered":"NASA Official Speaks to Cybersecurity \u2018Language Gap\u2019 in the Agency"},"content":{"rendered":"<\/p>\n

Getting cybersecurity right at a federal agency means learning to speak the language of the program and mission managers who actually run the IT systems you\u2019re trying to protect against hackers and cyberspies, said Rob Powell, a senior advisor on cybersecurity in the Office of the CIO (OCIO) at NASA<\/strong>.<\/p>\n

\u201cThe culture at NASA is that sometimes mission managers speak one language and corporate CIO, corporate cyber policy, speaks a different language,\u201d he told the audience during a May 13 CyberLEO keynote.<\/p>\n

Relationships are also vital in that culture, he said: \u201cWhen I first came to NASA, I had somebody tell me, \u2018Nothing happens at this agency unless there\u2019s a relationship.\u2019\u201d<\/p>\n

That was a bit of an exaggeration, he added, \u201cBut I will tell you that relationships absolutely help. When you can look across the table from somebody and develop some rapport \u2026 it makes a big difference.\u201d<\/p>\n

Powell said his first task in the job he started in 2016 was to start building bridges and connections and developing the relations.<\/p>\n

More importantly, he had to learn to speak to program and mission leaders in their own language to address their priorities. \u201cIt forced me to get out of my mentality of cyber is everything,\u201d he said. \u201cI eat, sleep and breathe cyber. But guess what? For the program managers, cyber is just one of the myriad of risks that they have to balance. \u2026 And if you cannot clearly articulate the cybersecurity issue in terms of the risks to their programs, the potential for mission failure or mission success \u2014 they won\u2019t have time for it.\u201d<\/p>\n

To deal with that language gap, Powell said the agency had drafted a document outlining the 30 most critical cybersecurity controls based on the threat landscape, likelihood, and consequences.<\/p>\n

After feedback from mission and flight managers about other cybersecurity best practices and standards promulgated within NASA, the new draft was couched in terms familiar to those managers, Powell explained. \u201cWe wrote those controls to be specific to the flight community at NASA. So they would understand not only what we\u2019re asking them to implement, but also how they could validate each of those controls as having been implemented in a flight program environment.\u201d<\/p>\n

The draft is out for comment within the agency, he said, and although NASA leaders hope to publish it when it was finalized, it is not currently public.<\/p>\n

Other cyber challenges at NASA include issues with the ways cyber risk is quantified, he said. Although there is a long-established practice of drawing up risk management plans for NASA programs, some of those plans don\u2019t include a cyber component, because many program managers didn\u2019t know how to quantify the cyber risk, he said.<\/p>\n

Powell said office of the CIO worked with program managers to help them understand the different evaluation criteria, critical assets, and critical data, and then show them how they can use those tools \u201csuch that when the program risk management boards met, they had a clear understanding of the cyber risks at the program level and resources could be allocated as needed.\u201d<\/p>\n

NASA\u2019s new Administrator Bill Nelson powered the agency\u2019s commitment to address the language gap and other cyber initiatives. \u201cFrom day one, they made it clear to OCIO leadership and agency mission leadership that cyber is at the top of their priority list.\u201d<\/p>\n

Powell added it is \u201ca great experience working at an agency where our leadership embraces cyber, so our mission leaders understand that the agency leadership is pushing on this. That makes my job a lot easier.\u201d<\/p>\n

Read more coverage of CyberLEO: <\/strong><\/p>\n

Space Development Agency Director Tasks Industry for Cyber Solutions<\/em><\/p>\n

LEO Operators and Manufacturers Wrestle with Supply Chain Cybersecurity<\/em><\/p>\n

Space Force Offers Free Cyber Scanning to Commercial Satellite Vendors<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

Getting cybersecurity right at a federal agency means learning to speak the language of the program and mission managers who actually run the IT systems you\u2019re trying to protect against hackers and cyberspies, said Rob Powell, a senior advisor on cybersecurity in the Office of the CIO (OCIO) at NASA. \u201cThe culture at NASA is […]<\/p>\n","protected":false},"author":1,"featured_media":47657,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":"","_links_to":"","_links_to_target":""},"categories":[2],"tags":[],"class_list":["post-55356","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"acf":[],"_links":{"self":[{"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/posts\/55356"}],"collection":[{"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/comments?post=55356"}],"version-history":[{"count":0,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/posts\/55356\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/media\/47657"}],"wp:attachment":[{"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/media?parent=55356"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/categories?post=55356"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/tags?post=55356"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}