Selling cyber now means understanding FITARA
Summary
Awareness of your customer agency’s cyber security progress is critical because the FITARA scorecard now captures additional metrics. It can also offer ideas about how your products and services can address suggested FITARA scorecard problems, drive solutions, and raise scores in subsequent evaluations. These recommendations helped move away from oversight to a focus on true agency IT transformation, particularly in the area of zero-trust-aligned cyber security. These proposed changes would make it more likely to have the FITARA scorecard aligned with the president’s executive order 14028, improving the nation’s cyber security. Additional proposed changes included considering multifactor authentication, smart patching, asset management and response, zero-trust progress, and SCRM principles with an eventual weight prioritization based on identified risk areas.