White House updates Trusted Internet Connection policy

guest · Sep 14, 2019

White House updates Trusted Internet Connection policy
September 12, 2019
https://fcw.com/articles/2019/09/12/new-tic-policy-suzette-kent.aspx

The White House released a new Trusted Internet Connection policy Sept. 12 to bring the rules governing how federal agencies connect to the internet in line with current cloud and managed services technology.

The new policy "includes pathways to take advantage of modern technology and capabilities and software that wasn't even imagined with that original policy was written," Federal CIO Suzette Kent said at a FedScoop event. The TIC policy, she said, was the final major technology policy rewrite of rules that were more than five years old.

"Today, government traffic runs through an open internet connection and a virtual private network client," Stephen Kovac, vice president of global government and compliance at Zscaler, wrote in an April 2019 op-ed in FCW.
Click to expand...

The new policy adds three new uses cases to the traditional TIC.
The cloud use case supports managed services in infrastructure, software, email and platform. A use case to support agency branch offices is designed to accommodate the use of Software-Defined Wide Area Network technology. The third is designed to support telework and advances how individual users outside a network perimeter connect to their agency's network and cloud.
Click to expand...

FedScoop: OMB issues finalized Trusted Internet Connections memo

A draft of this TIC 3.0 guidance was released in December 2018. The final version is very similar.

The completion of this policy document marks a major milestone for Kent and her office. “The publication of this update marks the final piece of major policy that was over five years old,” she said. “Some of it was almost a decade.”
Click to expand...

guest · Sep 20, 2019

Leaders want TIC 3.0 to serve as model for better policymaking
September 19, 2019
https://www.fedscoop.com/tic-30-model-policymaking-trump-administration/

The release last week of the Trusted Internet Connections 3.0 policy may usher in a new, more nimble era of policymaking for IT, federal leaders said Wednesday.

The Office of Management and Budget’s updated and more flexible guidance for how agencies connect to the greater internet is a major victory in that it was the first update in a dozen years. But it also provided a new model for how OMB can revamp policy to be more iterative and in rhythm with the rapid evolution of technology.
“Instead of doing a two-year-long study and trying to come out with the answer and saying, ‘OK this is the next version of how we’re going to do X,’ it’s looking at more of an agile approach to policy development,” Wilmer said.
Click to expand...

guest · Dec 23, 2019

Homeland Security Releases TIC 3.0 Use Cases with Additional Guidance
December 23, 2019
https://www.nextgov.com/cybersecuri...-tic-30-use-cases-additional-guidance/162099/

The structure of the internet has changed significantly over the last two decades, and now agencies are getting guidance to ensure the infrastructure they use is secure no matter how or where employees connect to the network.

Ahead of the holidays, Homeland Security’s Cybersecurity and Infrastructure Security Agency released a draft of the use cases as one part of a five-volume set of TIC 3.0 guidance.

“TIC began with the goal of creating the first federal perimeter security baseline. The initiative focused on large federal agencies reducing the enterprise footprint to approximately 50 connections, or ‘TIC access points,’” Matt Hartman, CISA’s director of network resilience, wrote in a blog post-Friday.
“The world marches forward, and cloud computing, strong encryption and mobile devices are now the norm. It’s time again to increment the TIC model.”

“The TIC Use Cases posted to this site are not an exhaustive representation of all the scenarios agencies may wish to consider when securing their environments,” CISA officials wrote on the TIC 3.0 page. “Agencies are encouraged to combine uses cases, as appropriate, to suit their needs.”
Click to expand...

CISA opened the draft to public comments Monday. The comment period will extend to Jan. 31.
Click to expand...

guest · Mar 4, 2020

Real Work on TIC 3 Begins After Draft Guidance Is Finalized, Says Lead Official
March 3, 2020
https://www.nextgov.com/it-moderniz...guidance-finalized-says-lead-official/163488/

The program office managing the rollout of the government’s Trusted Internet Connection 3.0 policy is getting ready to finalize the guidance and first two use cases this spring. But that work is only the beginning, according to the TIC program manager.

“The important thing for agencies to understand: This is just the beginning of TIC 3,” Sean Connelly, TIC program manager and senior cybersecurity architect in CISA’s Office of the Chief Technology Officer, told Nextgov in an interview.
While there is no hard timeline, Connelly said his office plans to have the current draft documents finalized by springtime, then shift to the bigger lift of finalizing and releasing individual use cases.

“From those different proposals, we’ll pick out the ones we think best reflect the possible use case,” Connelly said. “Then, the agency will implement that pilot itself. In the background, CISA will be observing the whole time.”
Click to expand...

guest · Apr 10, 2020

CISA suggests telework adaptations to TIC 3.0
April 8, 2020
https://www.fedscoop.com/cisa-telework-adaptations-tic-3-0/

TIC 3.0 introduced a multi-boundary approach to network security in guidance released by the Office of Management and Budget in September and detailed by the Department of Homeland Security‘s CISA in December.
But telework presents “unique” cybersecurity risks necessitating new security patterns and capabilities to detect, mitigate and prevent such threats, according to temporary TIC guidance released Wednesday afternoon.

CISA’s guidance also lists all the TIC security capabilities for telework.
“Increasing capacity and capabilities for remote telework and collaboration may require an increase in existing services such as internet service provider (ISP) bandwidth, VPN, and cloud,” reads the guidance.
Click to expand...

guest · May 12, 2020

Think long-term about TIC 3.0 advancements during spike in telework, experts say
May 11, 2020
https://www.fedscoop.com/tic-3-0-telework-architectures/

Coronavirus-related telework is hastening agencies’ adherence to the new Trusted Internet Connections (TIC) 3.0 guidelines, but industry experts are urging the government to lock-in that progress with further investment in IT.

Advances in cloud computing, encryption and mobility inspired the White House’s TIC 3.0 guidance, and additional interim telework guidance released in April encouraged agencies to run with the remote and telecommunications solutions they already were testing.
The digital research company Global Workplace Analytics estimates 25% to 30% of the U.S. workforce will continue to work remotely multiple days a week, post-pandemic.

An impromptu poll conducted by the Advanced Technology Academic Research Center during a webinar last month found 15% of agencies implemented TIC 3.0 while adding remote and telecom solutions for their workforce during the pandemic. Another 13% said they used the interim telework guidance as a guide.
Click to expand...

guest · Jul 31, 2020

CISA finalizes trio of TIC 3.0 documents
July 31, 2020
https://www.fedscoop.com/cisa-finalizes-tic-3-0-guidance/

The Cybersecurity and Infrastructure Security Agency introduced finalized Trusted Internet Connections 3.0 security architecture concepts supporting the latest technologies and various agencies adopting the guidance in three documents released Friday.

CISA also increased the number of TIC 3.0 security capabilities in response to agencies’ expedited adoption of cloud services, which introduce new cybersecurity vulnerabilities, during the coronavirus pandemic.

“CISA anticipates the final core TIC 3.0 guidance will better address stakeholder needs and concerns,” reads the agency’s response to the comments.
The guidance is expected to evolve to reflect technological advancements, changes in threats, and the lessons learned from TIC pilots to help ensure its usefulness to federal agencies.”
Click to expand...

CISA has concluded its comment adjudication period and plans to release the remaining finalized TIC 3.0 documents — the Use Case Handbook, renamed Overlay Handbook, Traditional TIC Use Case, and Branch Office Use Case — later this summer.
Click to expand...

guest · Oct 25, 2020

TIC program in ‘final stage’ before releasing remaining initial 3.0 guidance
October 22, 2020
https://www.fedscoop.com/tic-3-guidance-final-stage/

The Trusted Internet Connections program is in the “final stage” of its work with the Office of Management and Budget and other stakeholders to release remaining initial TIC 3.0 guidance, said Director Sean Connelly on Thursday.

The U.S. Digital Service, Federal CISO Council and General Services Administration are coordinating with the program on releasing finalized Traditional TIC and Branch Office use case documents within the next two month, although the November election could delay things. TIC policy covers the security of external connections to federal networks.
Click to expand...

First out of the gate will be the Remote User Use Case, which the program is looking to have a draft of by year’s end that will replace the TIC 3.0 Interim Telework Guidance released in April, Connelly said.
The interim guidance was issued in response vendor requests for anything tangible they could use to help agencies with the March-April surge in telework when the pandemic hit, Connelly said.

“There was that massive, immediate shift, so I think that’s important in terms of looking at how not only to secure those environments: secure the client side, secure the remote user,” Connelly said.
Click to expand...

guest · Dec 9, 2020

CISA Program Poised to Release Additional TIC 3.0 Use Cases
December 9, 2020
https://www.meritalk.com/articles/cisa-program-poised-to-release-additional-tic-3-0-use-cases/

Trusted Internet Connections (TIC) Program Office chief Sean Connelly said Dec. 8 that his office remains on track to issue several additional use cases over the coming months for the TIC 3.0 security initiative that Federal agencies can employ to advance their security postures.

Also expected in the near term are final releases of the program’s Traditional TIC and Remote Office use cases which the agency made available in draft form late last year.
Potential use cases after that may focus on zero trust, and internet of things, among others, Connelly said. He added that the program office views its work as near the end of the first phase of its efforts, and beginning the second phase.
Click to expand...

Over the longer term, he explained, the General Services Administration will take lessons learned from Federal agency TIC pilots and use those to develop acquisition vehicles that can create “stronger and more secure” civilian agency networks.
Click to expand...

guest · Dec 23, 2020

CISA Releases Draft TIC Use Case for Remote Users
December 22, 2020
https://www.meritalk.com/articles/cisa-releases-draft-tic-use-case-for-remote-users/

The Cybersecurity and Infrastructure Security Agency (CISA) released a draft version of a Trusted Internet Connections (TIC) Use Case focusing on access for remote users and user-owned mobile devices, setting the stage for more direct network access to agency and cloud-based resources.

The draft guidance released today builds on the TIC 3.0 Interim Telework Guidance document that CISA released in April. It keeps the same three network security patterns, but offers more details on security capabilities, appropriate trust zones, and architecture.
The use case is focused on devices that do not connect directly to network infrastructure, meaning that it can also apply to BYOD mobile devices that use cellular networks to connect to agency resources.
Click to expand...

“CISA expects the security guidance will help agencies improve application performance, reduce costs through reduction of private links and improve user experience by facilitating remote user connections to agency-sanctioned cloud services and internal agency services,” said Matt Hartman, acting assistant director at CISA’s Cybersecurity Division.
Click to expand...

guest · Sep 23, 2021

CISA Releases Guidance: IPv6 Considerations for TIC 3.0
September 23, 2021
https://us-cert.cisa.gov/ncas/curre...-releases-guidance-ipv6-considerations-tic-30

The federal government has prioritized the transition of federal networks to Internet Protocol version 6 (IPv6) since the release of Office of Management and Budget (OMB) Memorandum 05-22 in 2005. In 2020, OMB renewed its focus on IPv6 through the publication of OMB Memorandum 21-07. That memorandum specifically entrusts CISA with enhancing the Trusted Internet Connections (TIC) program to fully support the implementation of IPv6 in federal IT systems.
Click to expand...

In accordance with this OMB mandate, CISA has issued IPv6 Considerations for TIC 3.0 to provide federal agencies with guidance to help them use IPv6 to secure their networks by:

Providing IPv6 protocol information to enable a general understanding,

Informing agencies of their responsibilities concerning OMB M-21-07,

Aligning TIC 3.0 security objectives and security capabilities with IPv6, and

Offering awareness and guidance regarding IPv6 security considerations.

CISA encourages IT decision-makers and administrators in all federal government agencies and organizations to review IPv6 Considerations for TIC 3.0 to facilitate advancing IPv6 networks and ensuring future growth and innovation in internet services and technology.
Click to expand...

guest · Oct 7, 2021

CISA Releases Guidance: TIC 3.0 Remote User Use Case
October 7, 2021
https://us-cert.cisa.gov/ncas/curre...releases-guidance-tic-30-remote-user-use-case

In coordination with the Office of Management and Budget (OMB), the Federal Chief Information Security Officer Council (FCISO) Trusted Internet Connections (TIC) Subcommittee, and the General Services Administration, CISA has released Trusted Internet Connections 3.0 Remote User Use Case. The Remote User Use Case provides federal agencies with guidance on applying network and multi-boundary security for agencies that permit remote users on their networks. In accordance with OMB Memorandum M-19-26, this use case builds off TIC 3.0 Interim Telework Guidance originally released in Spring 2020.
Click to expand...

The TIC 3.0 Remote User Use Case considers additional security patterns agencies may face with remote users and includes four new security capabilities:

User Awareness and Training,

Domain Name Monitoring,

Application Container, and

Remote Desktop Access.

Click to expand...

Log in or Sign up

White House updates Trusted Internet Connection policy

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

White House updates Trusted Internet Connection policy

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches