POPULARITY
Guest: Archana Ramamoorthy, Senior Director of Product Management, Google Cloud Topics: You are responsible for building systems that need to comply with laws that are often mutually contradictory. It seems technically impossible to do, how do you do this? Google is not alone in being a global company with local customers and local requirements. How are we building systems that provide local compliance with global consistency in their use for customers who are similar in scale to us? Originally, Google had global systems synchronized around the entire planet–planet scale supercompute–with atomic clocks. How did we get to regionalized approach from there? Engineering takes a long time. How do we bring enough agility to product definition and engineering design to give our users robust foundations in our systems that also let us keep up with changing and diverging regulatory goals? What are some of the biggest challenges you face working in the trusted cloud space? Is there something you would like to share about being a woman leader in technology? How did you overcome the related challenges? Resources: Video “Compliance Without Compromise” by Jeanette Manfra (2020, still very relevant!) “Good to Great” book “Appreciative Leadership” book
Chris DeRusha, former Federal Chief Information Security Officer and Deputy National Cyber Director, has joined Google Cloud to lead its global public sector compliance initiatives. DeRusha's new role will involve expanding Google Cloud's offerings in artificial intelligence, cloud computing, and security across public sector entities globally. He will report to Jeanette Manfra, Google Cloud's Global Director of Security and Compliance. DeRusha's significant experience in security and infrastructure, from both his public and private sector roles, is expected to significantly enhance Google Cloud's services to its public sector clientele. Additionally, the Department of Homeland Security has introduced the initial cohort of its AI Corps, which consists of ten technology experts with diverse backgrounds in fields like artificial intelligence and cybersecurity. This move is part of a broader effort by the federal government to enhance its AI capabilities, following a presidential executive order aiming to recruit 500 AI experts across various federal agencies. The AI Corps, led by Michael Boyce, aims to grow to 50 members and is part of DHS's strategy to strengthen its technological expertise.
Based on the draft guidance OMB published recently to modernize the FedRAMP cloud security authorization program, it appears the practice of enlisting vendors to build government-specific cloud enclaves could be a thing of the past. As it stands, the policy would push federal agencies to use the commercial public cloud services that vendors provide most any of their other customers rather than these Gov Clouds. Joining The Daily Scoop Podcast to discuss that change, other details from the new FedRAMP guidance and much more is Jeanette Manfra, Global Director, Risk and Compliance at Google Cloud and former Assistant Secretary for Cybersecurity and Communications at the Department of Homeland Security. The Daily Scoop Podcast is available every Tuesday and Thursday afternoon. If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast on Apple Podcasts, Google Podcasts, and Spotify.
Anne Neuberger, deputy national security advisor for cyber and emerging technology, Rep. John Katko (R-N.Y.), the ranking member of the House Homeland Security Committee, Jeanette Manfra, the global director of risk and compliance at Google Cloud, and Sean Joyce, the global and U.S. cybersecurity and privacy leader at PwC, join Washington Post Live to discuss the importance of cybersecurity in business, policy and national security. Conversations recorded on Thursday, Oct. 13, 2022.
Rep. John Katko (R-N.Y.) and Jeanette Manfra, Global Director of Risk and Compliance at Google Cloud, join The Post to discuss the importance of cooperation between the public and private sector to chart a path to securing cyberspace.
This week's episode comes courtesy of WEDI's virtual event on ransomware held in late 2020. This one day summit highlighted the growing concern of ransomware and other cyberattacks facing the healthcare industry, a concern that continues to this day. Our keynote for that event was Jeanette Manfra, Global Director of Security and Compliance at Google Cloud. Prior to Google Cloud, Jeanette was the Assistant Secretary for Cybersecurity and Communications for the US Department of Homeland Security.
In this sample of the Cyber Space podcast, Jeanette Manfra, the former assistant director for cybersecurity at the Cybersecurity & Infrastructure Security Agency (CISA), speaks with host John Carlin about the differences between cybersecurity in the government and private sector. In the full episode, Manfra also discusses Manfra’s time serving in Iraq, how she got into cybersecurity, and her new role as Director of Government Security and Compliance at Google Cloud. Cyber Space is the newest podcast for members of CAFE Insider. Every other Friday, Carlin, who led the Justice Department’s National Security Division, explores issues at the intersection of technology, policy, and law with leaders who’ve made an impact in the world of cybersecurity. To listen to the full episode and get access to all exclusive CAFE Insider content, try the membership free for 2 weeks: cafe.com/insider Sign up to receive a free weekly newsletter, featuring analysis by Elie Honig, and more: cafe.com/brief Cyber Space is produced by CAFE Studios. Executive Producer: Tamara Sepper; Senior Editorial Producer: Adam Waller; Audio Producer: Nat Weiner; Editorial Producers: Noa Azulai, David Kurlander, Sam Ozer-Staton. Cyber Space is produced in association with Brooklyn Law School’s BLIP clinic. Special thanks to Amanda Kadish,Isabel Agosto, Jordan Khorshad, and Motty Rivki. See omnystudio.com/listener for privacy information.
Matthew sits with EHNAC Executive Director and CEO Lee Barrett, a veteran healthcare leader and subject matter expert on data security. As the US healthcare industry is threatened with ransomware attacks from cyber actors, Lee discusses the necessary and mandatory steps and practices all healthcare organizations must take to prepare for what appears to be the inevitable. SPECIAL ANNOUNCEMENT- WEDI is holding a FREE virtual event, "Prepare and Protect: The Threat of Ransomware to the U.S. Health Industry" on Wednesday, December 16 from 11am- 4pm EST. Our keynote speaker is Jeanette Manfra, Global Director, Security and Compliance with Google Cloud and the former Assistant Secretary for Cybersecurity and Communication with the U.S. Department of Homeland Security. Presenters include Greg Singleton, Director of Health Sector Cybersecurity Coordination with HHS, Lee Kim, Director of Privacy and Security with HIMSS, Kevin Charest, Senior VP, CISO and Head of IT Infrastructure with HCSC (and former CISO and Cybersecurity Director with HHS) and many more. Learn more about this program at www.wedi.org
This week, we welcome Jeanette Manfra, Global Director, Security and Compliance at Google Cloud! Government agencies are running in antiquated, fortress-based government clouds under the guise this is the only option for superior security and compliance. However, security and compliance don t have to be a blocker to innovation; they can be part of the transformation. Jeanette will discuss how Google Cloud is enabling this transformation with Assured Workloads for Government by simplifying the compliance configuration process and providing seamless platform compatibility between government and commercial cloud environments. Show Notes: https://wiki.securityweekly.com/scw38 Visit https://www.securityweekly.com/scw for all the latest episodes! Follow us on Twitter: https://www.twitter.com/securityweekly Like us on Facebook: https://www.facebook.com/secweekly
This week, we welcome Jeanette Manfra, Global Director, Security and Compliance at Google Cloud! Government agencies are running in antiquated, fortress-based government clouds under the guise this is the only option for superior security and compliance. However, security and compliance don't have to be a blocker to innovation; they can be part of the transformation. Jeanette will discuss how Google Cloud is enabling this transformation with Assured Workloads for Government by simplifying the compliance configuration process and providing seamless platform compatibility between government and commercial cloud environments. Show Notes: https://wiki.securityweekly.com/scw38 Visit https://www.securityweekly.com/scw for all the latest episodes! Follow us on Twitter: https://www.twitter.com/securityweekly Like us on Facebook: https://www.facebook.com/secweekly
The discussion continues with Jeanette Manfra. Visit https://www.securityweekly.com/scw for all the latest episodes! Show Notes: https://wiki.securityweekly.com/scw38
Government agencies are running in antiquated, fortress-based government clouds under the guise this is the only option for superior security and compliance. However, security and compliance don’t have to be a blocker to innovation; they can be part of the transformation. Jeanette will discuss how Google Cloud is enabling this transformation with Assured Workloads for Government by simplifying the compliance configuration process and providing seamless platform compatibility between government and commercial cloud environments. Visit https://www.securityweekly.com/scw for all the latest episodes! Show Notes: https://wiki.securityweekly.com/scw38
The new Trusted Internet Connections (TIC) policy that the Office of Management and Budget released in September was step one to reducing the burden of using cloud services. The Department of Homeland Security is getting ready to give agencies the second step in this process. Jeanette Manfra, the assistant director for cybersecurity at the Cybersecurity and Infrastructure Security Agency at DHS, said as part of this evolution for how agencies can secure their internet connections, her agency will soon release a TIC document catalog. She spoke more about it with Federal News Network's Jason Miller on Ask the CIO.
Jeanette Manfra, assistant secretary at the Cybersecurity & Infrastructure Security Agency outlines top priorities for the recently-elevated agency. Jose Arrieta, associate deputy assistant secretary of acquisition at HHS, Oki Mek, chief product officer at the Division of Acquisition at HHS, and Michael McFarland, director of the Office of Acquisition Business Systems at HHS, discuss the government’s first blockchain authority to operate, and what it means for the department’s acquisition workforce. Mark Forman, former Federal CIO, and Simon Szykman, former CIO at the Commerce Department, discuss the latest FITARA scorecard, and what the future holds for federal IT oversight.
Jeanette Manfra, the assistant secretary for the Office of Cybersecurity and Communications at DHS, said her office will focus on helping agencies manage and mitigate vulnerabilities through the CDM program.
In today's Federal Newscast, officials from the Homeland Security Department tell lawmakers the agency is working across government to figure out consequences for not following the binding operational directive.
The Homeland Security Department plays a critical role in cybersecurity. The agency not only oversees cybersecurity for the entire civilian government, but it gives cyber help to other industries as well. Nextgov Senior Correspondent Joseph Marks and Homeland Security’s cyber lead Jeanette Manfra discuss how to protect election systems from hacking, forging new alliances with industry, and the importance of a diverse and inclusive cyber workforce. Show notes: At RSA, Homeland Security Secretary Kirstjen Nielsen promised the U.S. would strike back against cyberattacks. The agency also announced its security as a service program for industry partners. Here’s that Government Accountability Office report that says only 11 percent of industry cyber pros are women. Meanwhile, women represent about 30 percent of the federal IT—not just cyber—workforce, though that number has decreased. This episode is underwritten by Leidos.
Lawmakers on the House Oversight and Government Reform Subcommittee on IT are concerned that the IT modernization effort is losing momentum. Federal News Radio's Jason Miller joined Federal Drive with Tom Temin to talk about why the committee will continue to press agency chief information officers to move off legacy systems.
In our 179th episode of The Cyberlaw Podcast, Stewart Baker, Stephen Heifetz, and Jennifer Quinn-Barabanov discuss: President blocks Lattice acquisition; House Judiciary committee leaks plans for 702 weakening; Equifax: How bad will the litigation be?; How it happened; the Federal Trade Commission; the lawsuits pile up; plus Congress, plus the states; not to mention derivative suits; Administration uses April Fools’ Day sanctions against Iranian hackers; more trouble for Facebook over the Russia probe; and for Silicon Valley in general; not to mention the "racist ad" controversy; Google; Twitter; everyone; California’s Eighth Circuit clarifies breach standing law? Our guest interview is with Jeanette Manfra, Assistant Secretary, Office of Cybersecurity and Communications at the Department of Homeland Security. The views expressed in this podcast are those of the speakers and do not reflect the opinions of the firm.
In our 175th episode of the Steptoe Cyberlaw Podcast, Stewart Baker, Michael Mutek, Alan Cohn, Quentin Johnson, and Gus Hurwitz discuss: longtime USG suspicions of Kaspersky boil over into action; Knight First Amendment Institute brings first amendment claim against Trump for using Twitter's block function; Booz Allen has a plausible explanation for the weirdness of NotPetya’s otherwise self-defeating ransomware pose; impenetrable cybersecurity unit downgraded to dialogue; also, Administration is downsizing international cyber norming to a coalition of the willing; Senator Klobuchar should claim credit' Jeanette Manfra named a/s for cybersecurity; China news: Xi’s crackdown continues as China moves to ban VPN usage; Woe is WoSign, also StartCom, as Google drops them from certificate authority lists; what does that say about the relative Chinese ties of Google, Mozilla, Apple and Microsoft?; speaking of which, Apple caves again. Our guest interview is with Eric Hysen, former Executive Director of the Department of Homeland Security’s Digital Service. The views expressed in this podcast are those of the speakers and do not reflect the opinions of the firm.
Jeanette Manfra, the acting undersecretary for cybersecurity at the Homeland Security Department, offered an in-depth look into the steps DHS and the government took to keep federal agencies safe from WannaCry.
America's History of Recalcitrance De jure discrimination Racism online is evolving in a way that is consistent with the way racism has always evolved--from explicit to subtle. Plaintiff-side civil rights lawyers have found it easiest to win -- if civil rights cases can ever said to be "easy"-- in cases in which they can convincingly demonstrate defendants' explicit discriminatory policies. The Civil Rights Act of 1964, the United States Supreme Court's 1954 decision in Brown v. Board of Education, and their subsequent cases and amendments comprise the bulk of American civil rights law. The Civil Rights Act prohibits discrimination on the basis of race, color, religion, sex or national origin. Brown held segregation in public schools to be unconstitutional. In interpreting a statute, judges will consider Congressional intent, which includes the circumstances under which Congress enacted the law. Congress enacted the Civil Rights Act in an era of widespread de jure segregation in the South. Every 6th grader knows that, prior to Brown, state and local authorities in the South required "colored" and "white" students to attend segregated schools. Black students usually attended inferior schools with old books and in dilapidated buildings. Southern authorities also required colored and white citizens to use separate facilities such as water fountains, restrooms, waiting rooms, and buses. They also enabled most private establishments, such as restaurants and hotels, to segregate as they pleased. Following Brown, Southern racists remained undeterred. For example, on June 11, 1963, fully 9 years after Brown, Alabama Governor George Wallace famously "stood in the schoolhouse door" to prevent Vivian Malone and James Hood from entering and registering for classes at the University of Alabama. President Kennedy deployed the National Guard to remove Wallace, which they did. Virginia's response to Brown is also illustrative of the Southern response to it. Virginia Senator Harry F. Byrd, Sr. and his brother-in-law, Virginia General Assembly leader James M. Thomson, together pursued a "Massive Resistance" strategy to oppose desegregation. Under Massive Resistance, the Virginia Assembly passed laws to prevent and punish local school districts for integrating in accordance with Brown. Further, Virginia authorities continued to enforce Massive Resistance initiatives well into the 1960s, even after federal and state courts ordered them to end their recalcitrance. The Civil Rights Act finally codified the nation's civil rights policy. Given the context in which the Civil Rights Act was enacted, courts are most likely to strike down laws and policies that contain explicit "suspect" classifications; namely, those that refer to race, color, religion, sex or national origin. Indeed, courts subject such de jure discrimination statutes and policies to the Constitutional "strict scrutiny" standard--the highest standard of judicial review. Paradoxically, laws designed to help traditionally marginalized groups, and which mention those groups explicitly, are also subject to strict scrutiny and thus likely to be struck down. (The intricacies of the strict scrutiny standard go well beyond the scope of this post. However, if you are interested in learning more about strict scrutiny and the other levels of scrutiny courts are likely to apply in interpreting the Constitution's Equal Protection Clause, click here.) De facto discrimination After many years of resisting civil rights laws, racists in the North and South had an a-ha moment. If they could figure out a way to maintain their supremacy using things that looked like something else, but achieved the same ends, they were golden! And so de facto discrimination--laws and policies that are not discriminatory on their face, i.e. they are facially neutral, but have discriminatory effects, have been the order of the day ever since. Stop-and-frisk? Check. Insanely long prison sentences for minor offenses? Check. School segregation based on merit? Check. Proposed cuts to Medicaid? Check. Voter re-districting? You get the point. Welcome to the age of stealth racism. "I thought this post was about racism online." It is. The same racist ideologies that prevailed in 1964 prevail today. Since 1964, opponents of the Civil Rights Movement, many of whom are still alive today, and their descendants and allies, have persisted in their efforts to preserve their supremacy. They have taken racism online. This is the story of some of the measures the tech sector has taken, such as Google's Conversation AI, to curtail racism online and how defiant hate speakers have evaded those measures by creating their own code language. Hate speech is indeed protected speech and that's the problem. Researchers at the Rochester Institute of Technology peeled back the top layer of the internet and found hate speech teeming underneath. My guest today is Rijul Magu (@RijulMagu). Rijul co-authored, along with Shitij Joshi and Jiebo Luo at the Rochester Institute of Technology, a report entitled "Detecting the Hate Code on Social Media". He's the lead author. Rijul is currently a Masters Student at RIT and he earned his undergraduate degree at Jaypee Institute of Information Technology in Noida, India. Resources University of Rochester School of Engineering and Applied Sciences Department of Computer Science (homepage of Graduate Studies Faculty Advisor Jiebo Luo) Detecting the Hate Code on Social Media by Rijul Magu, Kshitij Joshi, and Jiebo Luo Zero to One: Notes on Startups, or How to Build the Future by Peter Thiel News Roundup The New York State Commission on Forensic Science has adopted a new controversial policy regarding the use of suspects' DNA evidence. The Commission voted 9-2 to allow police to collect not just suspects' own DNA evidence, but also the DNA evidence of close relatives. While the measure has the support of prosecutors, opponents of the bill pointed out procedural flaws with some describing the new policy as a kind of genetic stop and frisk. Nathan Dempsey has the story at Gothamist. A Department of Homeland Security official --Jeanette Manfra, acting deputy undersecretary of cybersecurity and communications for the agency's National Protection and Programs Directorate -- told members of the Senate Intelligence Committee last week that Russia targeted election systems in 21 states during last year's presidential election. Ranking Member Mark Warner wrote Homeland Security Secretary John Kelly to make public the names of the states that were targeted. However, Secretary Kelly has thus far not released that information claiming that to do so would harm national security. Edward Graham covers this in Morning Consult. Uber CEO Travis Kalanick has resigned following the fallout from former Attorney General Eric Holder's report on the company's frat boy culture. However, several employees have attempted to have Kalanick reinstated. Rebecca Savransky has the story in the Hill. The Congressional Black Caucus wrote a letter Monday to Uber leadership urging them to improve racial and ethnic diversity in hiring and promotions at the company. A new Politico and Morning Consult report shows 60% of Americans either strongly or somewhat support the FCC's current net neutrality rules the new Trump-era FCC under Ajit Pai appears to be in the process of overturning. Two-thousand and fifty one registered voters were surveyed. The FCC has recommended a $122 million fine on a suspected robocaller--the highest-ever FCC fine. Officials suspect the alleged robocaller, Adrian Abromovich, a Florida man, made some 100 million robocalls over three months. Harper Neidig has the story in The Hill. The FCC also unanimously passed a rule change last week that will allow law enforcement to bypass blocker called IDs belonging to callers making imminent threats. Harper Neidig has this one in The Hill as well. We may soon be able to access Internet via an internet connection made from space. Doing so would significantly speed up upload and download speeds. The FCC approved a plan of Greg Wyler who plans to link up 720 satellites to deliver high speed broadband from space as soon as 2019. Brian Fung has the full story in the Washington Post. President Trump met with tech executives, including drone developers last week. The president said he'd work to give tech companies the "competitive advantage they need" and "create lots of jobs". David Shepardson covers the story in Reuters. In a unanimous 8-0 decision, the Supreme Court ruled last week that a North Carolina law that prevents registered sex offenders from going on Facebook is unconstitutional under the First Amendment. Lydia Wheeler covers this in the Hill. FCC Chaiman Ajit Pai testified at a Senate Appropriations Committee hearing last week about the agency's budget. Pai recommended a budget cut of over 5.2% since last year, or $322 million, which Chairman Pai conceded would come from the elimination of over 100 Commission jobs.