Product security: Navigating regulations and customer expectations
McKinsey Public & Social Sector Insights
SEPTEMBER 8, 2023
Following five success factors can help create a winning strategy for embedding security into the new-product life cycle.
Operations Regulations Security 
Enhancing Federal AI Safety: Responsible and Secure AI Sandbox
Microsoft Public Sector
OCTOBER 29, 2024
Who Should Read This This document will be beneficial to Federal Executives including Chief Information Officer, Chief Artificial Intelligence Officer, Chief Technology Officer, Chief Information Security Officer, Chief Data Officer, AI Lead, AI Scientist, and Data Scientist, among others.
Security 
115
115 
Cybersecurity regulations in 2023
Open Access Government - Technology News
DECEMBER 20, 2022
Robin Campbell-Burt, CEO at Code Red, discusses cybersecurity regulations in 2023 and how they will shape our futures. Increased interest by international governments in cybersecurity usually leads to one thing, and that is increased regulations. Cybersecurity is in the spotlight more than ever before.
Regulations 85
85 
Combating cyber-enabled fraud: Sapphire’s proactive cyber security approach
Open Access Government - Technology News
MAY 16, 2024
Given the vast number of cyber-enabled frauds in the UK, significant changes in the approach to cyber security are necessary to achieve this goal. Sapphire is a UK-owned and operated cyber security company. Cyber security awareness Security awareness is crucial in protecting against fraud and cyber attacks.
Security 116
116 
Microsoft Copilot for Security and NIST 800-171: Access Control
Microsoft Public Sector
MARCH 5, 2024
Microsoft Copilot for Security and NIST 800-171: Access Control Microsoft Copilot for Security in Microsoft’s US Gov cloud offerings (Microsoft 365 GCC/GCC High and Azure Government) is currently unavailable and does not have an ETA for availability. Future updates will be published to the public roadmap here.
Security 143
143 
Continuous monitoring and governance: AWS best practices for keeping your data secure during the holidays
AWS Public Sector Blog
DECEMBER 18, 2024
Many organizations use Amazon Web Services (AWS) to enhance their security posture and improve resilience. In this post, we discuss the AWS best practices for securing your data during the holiday season. After the holiday period, thoroughly review your processes for security monitoring and threat hunting.
Security 96
96 
An increase in cyber attack fines highlights firms’ need to tighten security
Open Access Government - Technology News
SEPTEMBER 9, 2022
Regulators bare their teeth with substantial fines. And in recent years, regulators including the ICO and the DPC of Ireland have issued multi-million-pound (or euro) fines. The latest Hiscox Cyber Readiness Report revealed the priorities of companies looking to increase their cyber security. References. [1] 1] [link]. [2]
Security 115
115 
European Health Data Space will enable health innovation through secure data sharing
AWS Public Sector Blog
MAY 28, 2024
In April 2024, the European Parliament adopted the proposed EHDS Regulation. As the world’s most comprehensive and broadly adopted cloud provider, we recognize our role and responsibility in supporting customers to use health data securely and responsibly. At AWS, security will always be our top priority.
Security 85
85 
US government agencies can communicate, collaborate securely with AWS Wickr
AWS Public Sector Blog
JANUARY 25, 2024
Consumer messaging apps and government While consumer messaging apps have become a convenient and easily accessible communications and collaboration option, they pose significant security risks. The problem is that consumer apps are designed for massive scale and extensibility, not necessarily for security.
Aligning the Landing Zone Accelerator on AWS with UK National Cyber Security Centre guidance
AWS Public Sector Blog
DECEMBER 11, 2023
Landing Zone Accelerator on AWS (LZA) is a solution to automate the deployment of a secure cloud foundation on Amazon Web Services (AWS). With this solution, customers with highly-regulated workloads and complex compliance requirements can better manage and govern their multi-account environment.
Security 80
80 
From AI to Zero Trust: Google Cloud Security delivers comprehensive solutions for the public sector
Google Public Sector
OCTOBER 16, 2024
These attacks target a broad range of industries and organizations, from water security to rural health care , via external targeting and insider threats. Today at the Google Public Sector Summit, we’re proud to unveil several new announcements around our security solutions. Read about all of the details below.
AWS joins global thought leaders at 60th Munich Security Conference
AWS Public Sector Blog
FEBRUARY 15, 2024
Amazon Web Services (AWS) is proud to join senior decision-makers and thought leaders from around the world at the 60th edition of the Munich Security Conference (MSC) from February 16-18. MSC is a leading global forum for discussing the most pressing international security challenges.
Security 78
78 
How the Landing Zone Accelerator on AWS supports NCSC cloud security guidance
AWS Public Sector Blog
DECEMBER 11, 2023
Amazon Web Services (AWS) has collaborated with the UK National Cyber Security Centre (NCSC) to tailor advice on how UK public sector customers can use the Landing Zone Accelerator on AWS (LZA) to help meet the NCSC’s guidance on “ using cloud services securely.”
Security 84
84 
Risk, resilience, and security – the three key functions of public safety technology
Open Access Government - Technology News
APRIL 3, 2023
Ensuring emergencies are dealt with effectively requires adopting public safety technology that can facilitate the operational management of a crisis quickly and effectively to limit its potential damage. The platform is fully compliant with data privacy regulations, including GDPR.
Public Safety 111
111 
Could quantum computing security solve the data sovereignty challenge?
Open Access Government - Technology News
AUGUST 28, 2024
The siloed nature of operations and IT infrastructure mean approaches can vary significantly between Integrated Care Boards, Trusts, hospitals and even individual wards. To protect against these super computers, new, secure data-storage solutions are being developed. Take NHS IT systems, for example.
Security 75
75 
Securing and automating compliance in the public sector with AWS
AWS Public Sector Blog
DECEMBER 14, 2023
Compliance is essential, but ensuring compliance in the cloud with various regulations and standards can be challenging, especially for public sector organizations. This post explains how you can use AWS tools and services to secure and automate compliance in your environment. AWS provides you with the necessary tools to achieve this.
Microsoft Reference Identity Architectures for the US Defense Industrial Base
Microsoft Public Sector
NOVEMBER 3, 2023
The group has been focused on the Microsoft US Government cloud service offerings, including the US Sovereign Cloud with Microsoft 365 US Government (GCC; GCC High), Microsoft Azure Government , and additional highly regulated solutions. Head over to [link] to download a copy of the white paper today.
Regulations 122
122 
Defending sovereign workloads: Google Distributed Cloud's air-gapped approach to Zero Trust
Google Public Sector
JULY 17, 2024
Public sector and government organizations require cloud solutions that can drive innovation and also adhere to strict sovereignty and security requirements. For years, security experts have warned of the risks of government overreliance on singular security controls. A recent U.S.
Public Sector 117
117 
Understanding Compliance Between Commercial, Government, DoD & Secret Offerings - Sept 2024 Update
Microsoft Public Sector
SEPTEMBER 23, 2024
September 2024 Update Microsoft 365 Commercial + Azure Commercial FedRAMP in Azure The Federal Risk and Authorization Management Program (FedRAMP) is a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services.
Government 122
122 
Your cloud, your way: Google Distributed Cloud Hosted is generally available
Google Public Sector
MARCH 21, 2023
In 2020, Google Cloud introduced a digital sovereignty vision that included three distinct pillars: data sovereignty, operational sovereignty, and software sovereignty. GDC Hosted includes the hardware, software, local control plane, and operational tooling necessary to deploy, operate, scale, and secure a complete managed cloud.
Operations 103
103 
Streamlining digital transformation in German healthcare with AWS
AWS Public Sector Blog
JULY 25, 2024
Ensuring the availability and security of critical applications is paramount. Both institutions faced the discontinuation of existing outsourcing contracts and required a seamless transition to a new IT operating model. Max Grundig Klinik oversees approximately 40 mission-critical applications, encompassing EHRs, HIS, PACS, and DHRs.
Regulations 75
75 
Governments need to plan for the entire product lifecycle when they purchase technology today
American City & Country
SEPTEMBER 18, 2024
When they buy technology, cities and counties will often face multiple issues, says Dean Cunningham , segment development manager, Public Safety at Axis Communications , a company that produces network cameras, access control systems, network audio devices and other IP networking solutions for physical security and video surveillance applications.
Government 110
110 
Migrate and modernize public sector applications using containers and serverless
AWS Public Sector Blog
OCTOBER 3, 2023
Many public sector customers are interested in building secure, cost-effective, reliable, and highly performant applications. Building modern applications in AWS helps customers with increased innovation, speed, reliability, scalability, and security while lowering total cost of ownership (TCO).
Public Sector 126
126 
Google Public Sector and Carahsoft launch ATO Accelerator for ISV Partners
Google Public Sector
OCTOBER 16, 2023
Google Public Sector and Carahsoft are launching an Authority to Operate (ATO) accelerator to support independent software vendors (ISVs) in their journey to achieve compliance authorizations, such as FedRAMP, DoD Impact Levels, and StateRAMP programs, to serve government agencies.
Public Sector 110
110 
Approaches for creating FedRAMP high/moderate impact workloads solutions OCONUS using AWS
AWS Public Sector Blog
JUNE 22, 2024
Cloud computing is pivotal to allow the federal government to gain operational efficiencies and drive innovation securely and cost efficiently. The AWS GovCloud (US-East) and (US-West) Regions are operated exclusively by US citizens who work within US territory. Deploy edge solutions using AWS MDC Figure 1.
Security 75
75 
Karsun Solutions builds modernization platform using Amazon Bedrock
AWS Public Sector Blog
MARCH 19, 2024
Summary Highly regulated enterprises and government agencies still maintain critical applications operating on legacy mainframe systems. According to GAO, reliance on older languages carries risks “such as a rise in procurement and operating costs, and a decrease in the availability of individuals with the proper skill sets.”
Operations 117
117 
How national security and defence missions protect data with Trusted Secure Enclaves on AWS
AWS Public Sector Blog
NOVEMBER 21, 2024
National security, defence, and law enforcement organizations want to use the cloud so they can share data and communicate in near-real time with their allies to counteract evolving threats to their citizens. AWS provides a global infrastructure and secure, scalable, mission-focused solutions. Watch this TSE animation.
Security 52
52 
Addressing data sovereignty with edge AI on AWS
AWS Public Sector Blog
JULY 2, 2024
Data sovereignty refers to a concept where individuals, organizations, or governments have control over their own data and infrastructure, ensuring independence, privacy, and security. This can be helpful for complying with data residency regulations.
Regulations 81
81 
How healthcare organizations can fulfill compliance standards with AWS
AWS Public Sector Blog
FEBRUARY 14, 2024
To modernize their healthcare infrastructure and improve data security, Bavarian hospital Fachklinikum Mainschleife , in collaboration with Amazon Web Services (AWS) Partner Kite Consult and consulting firm Oberender AG , undertook a massive initiative: the migration of their entire IT infrastructure to AWS.
Security 78
78 
Building compliant healthcare solutions using Landing Zone Accelerator
AWS Public Sector Blog
JUNE 12, 2024
However, with these benefits come challenges to meet regulatory and compliance requirements surrounding data privacy and security. In addition, there are a multitude of regulations and compliance requirements to meet, adding another layer of complexity to the already intricate web of data privacy controls.
How credit unions can evaluate their FFIEC, NCUA cyber compliance using AWS
AWS Public Sector Blog
JANUARY 18, 2024
Note: Security and compliance is a shared responsibility between AWS and the customer. The customer assumes responsibility and management of the guest operating system (including updates and security patches), other associated application software, as well as the configuration of any AWS security products.
Security 80
80 
Protecting private and public sector organisations from cyberattacks
Open Access Government - Technology News
SEPTEMBER 15, 2023
3] Consequently, most UK businesses accept operating within a defined level of cyber risk. This makes the 2023 Cyber Security Breaches Survey of particular concern because it indicates that while over 68% of UK businesses saw cyber security as a major concern, only about 29% had formalised risk assessment strategies. [4]
Public Sector 122
122 
How MLOps Helps Agencies Get the Most out of AI
GovLoop
MARCH 21, 2024
Those models also may not be adept at protecting sensitive or private data, or may not act in accordance with agency regulations and collection authorities. But any effort to maintain a model in production requires a secure, transparent and consistent process for making improvements over time.
Public Sector 105
105 
Navigating the responsible use of AI in government procurement
AWS Public Sector Blog
NOVEMBER 25, 2024
Government procurement professionals are tasked with balancing the need for innovation while adhering to strict regulations. Procurement’s role in responsible AI implementation Procurement professionals are at the forefront of verifying compliance with policies and regulations governing the use of technology within government agencies.
Government 59
59 
A comprehensive cloud security approach for state and local governments
Google Public Sector
AUGUST 29, 2022
While the digitization of government services and operations has helped enhance the constituent experience, it has also increased the cyber threat surface for governments of all sizes. We recently commissioned a cybersecurity survey asking workers—including government workers—how they feel about their cloud security solutions.
Embedding Zero Trust in the DNA of public sector security
Open Access Government - Technology News
MAY 30, 2023
The shift to the cloud has rendered traditional approaches to security obsolete The shift to the cloud has rendered traditional approaches to security, using trusted IP addresses and perimeter firewalls, obsolete. However, these remain just guidelines, unsupported by legislation or mandatory regulations. Where does it end up?
Google Public Sector achieves CJIS compliance in Florida
Google Public Sector
APRIL 10, 2023
Assured Workloads supports multiple compliance regimes, including CJIS compliance as required by the CJIS Security policy. Assured Workloads allows Google Cloud customers to easily configure and maintain controlled environments that operate within the parameters of a specific compliance regime.
The Philosophy of the Federal Cyber Data Lake (CDL): A Thought Leadership Approach
Microsoft Public Sector
FEBRUARY 8, 2024
Pursuant to Section 8 of Executive Order (EO) 14028 , "Improving the Nation’s Cybersecurity", Federal Chief Information Officers (CIOs) and Chief Information Security Officers (CISOs) aim to comply with the U.S. Such a source empowers them to strategize, prioritize, and address any anomalies or shifts in their security stance.
Leadership 92
92 
Securing Funding in Tough Times
Grant Writing Made Easy
MAY 28, 2024
Securing funding can often feel like an uphill battle in nonprofits’ fluctuating economic landscape. This blog post delves into practical strategies for nonprofits seeking to enhance their grant writing skills and secure necessary funding during challenging periods.
Security 52
52 
New survey: Public sector poised for generative AI revolution
AWS Public Sector Blog
NOVEMBER 19, 2024
Almost half of respondents (43 percent) are interested in using generative AI to improve operational efficiency, followed by enhancing communications (29 percent), education and workforce development (28 percent), and enhancing citizen services (21 percent). The benefits can’t be ignored.
Public Sector 118
118 
Using Protective DNS services with AWS workloads
AWS Public Sector Blog
APRIL 22, 2024
Protective DNS services, commonly known as PDNS, are a go-to solution if you’re aiming to bolster the security of your infrastructure from the ground up. This proactive strategy not only secures networks at a foundational level, but also hinders potential attacks from gaining traction in the first place.
Security gaps leave local governments vulnerable to a variety of cyber threats
American City & Country
AUGUST 21, 2024
Cities and counties are beefing up their IT security, and that makes sense, says Augustine Boateng , interim chief information officer (CIO) in Memphis, Tenn. Boateng says implementing appropriate authentication measures is one of the most critical and easily completed security steps a jurisdiction can take.
SAP NS2 achieves ITAR compliance for SAP Ariba with Google Cloud
Google Public Sector
SEPTEMBER 19, 2023
We are pleased to announce that Assured Workloads on Google Cloud now supports International Traffic in Arms Regulation (ITAR) capabilities in nine U.S. government regulations administered by the U.S. SAP Ariba on Google Cloud provides a foundation for us to continue to grow our secure cloud portfolio to our Public Sector customers.
Regulations 67
67 
Support for DFARS in Microsoft 365 Government (GCC High)
Microsoft Public Sector
APRIL 11, 2024
Department of Defense (DoD) contractors and the Defense Industrial Base (DIB) by supporting the Defense Federal Acquisition Regulation Supplement (DFARS) requirements for the Microsoft 365 Government (GCC High) cloud service offering. Department of Homeland Security (DHS), the U.S. Microsoft is committed to U.S.
Government 88
88 
Let's personalize your content