CISA looks for βdeep engagementβ with innovators via new platform
The Cybersecurity and Infrastructure Security Agency doesnβt want to leave companies hanging when they reach out to CISA with an important innovation or technology development.
Thatβs a key reason why CISA earlier this month launched an Industry Engagement Platform, referred to as the IEP. The website provides an external portal where companies, nonprofits, academia and others can sign up to share information with the agency.
βWe want deep engagement with the private sector technology innovators, and it can sometimes be hard to schedule meetings with the government or share what youβve been working on,β Bob Costello, CISAβs chief information officer, said in a recent interview with Federal News Network.
Costello said CISA started work on the platform earlier this year with the goal of improving that process. He said the design of the IEP is based on widely used tax preparation services, with easily fillable fields and the ability to suggest meeting times with CISA staff across different divisions, depending on the topic.
βWhat weβre going to see first and foremost is hopefully shifting to the left or a shorter time period from when a vendor contacts us, to us expressing interest in the scheduling of that meeting, because we have the system handling all of that,β Costello said.
He said the new platform augments the more traditional ways CISA engages with outside organizations, such as requests for information or industry days. The goal is also to help smaller companies get in touch with the agency.
βI do see it as advancing our transparency and accessibility to working with us,β he said. βSo much innovation happens in the private sector, as well as in research labs and elsewhere. But we really want to hear from all those innovators that maybe sometimes just donβt even know how to contact us.β
The new platform should also eventually give CISA a wealth of analytics on companies, technologies and sectors it engages with, Costello said. Tracking that engagement over time should also help the agency, he added.
βMaybe one groupβs interested, or we see something here, but itβs not quite ready for an investment,β Costello explained. βCome back and talk to us in six months, and then weβre able to actually kind of track that progress in the system as well, too. I think that thatβs very helpful overall to that business relationship that we have with industry.β
The cyber agency, which provides a range of cybersecurity and infrastructure services to government and industry, is interested in hearing about innovations in IT and security controls, data analytics, post-quantum security and artificial intelligence.
As the CIO, Costello said heβs particularly interested in automated testing solutions.
βThereβs a lot of good work being done on automated testing of IT solutions. Automated or AI-based red teaming of systems is very interesting to us,β he said. βAnd not just vulnerability scanning, but helping to determine if your system or asset is actually vulnerable to the vulnerability that thatβs being disclosed, or if you have other compensating controls in place that make it so that patching within 10 minutes is not really required β¦ Thatβs the next generation of understanding how we do vulnerability management.β
Meanwhile, the engagement platform is a step toward eventually needing just one account to work with CISA, Costello said. Right now, the agencyβs various cybersecurity services, for instance, all have different sign-up portals.
The agency also runs a voluntary cyber incident reporting portal. But under a rule scheduled to be finalized next May, thousands of companies across critical infrastructure sectors will be required to report cyber incidents to CISA, markedly increasing the number of reports the agency will receive.
βWe are hoping to come in time where reporting to CISA or sharing information to CISA can happen across automated systems, while always maintaining that capability for a human to share information with us,β Costello said. βIβd really like us to start driving in [fiscal] 26. and we have a lot of really great ongoing initiatives, to get to that more automated sharing of large scale information.β
The post CISA looks for βdeep engagementβ with innovators via new platform first appeared on Federal News Network.

Β© Getty Images/iStockphoto/metamorworks