Paul Beckman
CISO, ManTech
“Complexity is the arch enemy of cybersecurity,” said Paul Beckman, who recently helped simplify and centralize the configuration management of decentralized cloud environments. This isn’t an easy task considering ManTech is in every cloud across the government and commercial spaces.
Across them all, Beckman and his team implemented a state-of-the-art cloud security posture management capability that enforces required baseline configurations across all of its cloud environments and instantly tells Security Operations team the moment any of these assets is observed deviating from them.
Essentially, Beckman and his team are enabling capabilities and innovation through the simplification of ManTech’s cloud management that better mitigate, prevent or instantly alert on vulnerabilities. This is how they are driving to get further left of boom – a misconfiguration can’t be exploited if it is not there to begin with.
Why Watch
Looking forward, Beckman and his team are using AI to analyze extensive log data to uncover previously hidden insights. They are also concentrating on advanced security monitoring. Their aim is to create a cloud-based, AI-compatible system for log analysis that is both user-friendly and efficient in identifying security threats, as quick as internet searches.
ManTech is focused on making identity verification a key part of its Zero Trust Architecture The company is a front-runner in showing how to effectively verify and authorize access to its network, adapting to different and changing factors.
“Keep it Simple. Above all else in cyber, master these 3 basic principles well and you will mitigate 99% of all your threats,” Beckman said. “1: Harden your equities – you cannot exploit a misconfiguration that does not exist. 2.: Be able to effectively manage (i.e. patch, push policy regarding) your equities – you cannot exploit a vulnerability that is not there; and finally, 3: Be able to closely monitor your equities for when a zero day gives you no other choice.”