CyberScape Insider Threats

James “Aaron” Bishop, a member of the Senior Executive Service, is the Chief Information Security Officer (CISO) for the Department of the Air Force, comprised of the U.S. Air Force and the U.S. Space Force. As CISO, he is responsible for advising the Chief Information Officer and senior officials on cybersecurity policy, cybersecurity programs and cyber force development in the department. He leads a Directorate comprised of military, civilian and contractor personnel responsible for developing cybersecurity policy and strategy for over 5,000 Air Force information technology systems. He oversees risk management and cybersecurity accountability for information systems, weapon systems and operational technology supporting military cyberspace operations. His portfolio includes policy and governance of the defense industrial base, cyber supply chain risk management, compliance and cybersecurity capabilities. He has oversight for the Freedom of Information Act, Privacy Act laws and cryptographic modernization supporting cyber operations for the department.

Chief Information Officer. In this position, she serves as the focal point within the DoD CIO to implement the Cybersecurity Maturity Model Certification (CMMC) program across the Defense Industrial Base(DIB).

As the CMMC Director, Ms. Bostjanick is responsible for sheparding this critical program though the Code of Federal Regulation System rulemaking process for both the CFR 32 and 48 and ultimately implementing the program across the more than 220,000 companies that make up the DIB. This includes collaborating across the Federal Government with partners such as the Department of Homeland Security and the other members of the Federal Acquisition Security Council, to standardize this process and truly federalize it. In this role, she also directs the Department’s efforts to educate DIB partners on programmatic requirements and ensures that DoD implements risk information sharing though the program’s execution. Additionally, Ms. Bostjanick is responsible for ensuring the Defense Acquisition community is trained and capable of including these requirements in their Programs and Acquisitions.

Prior to joining the CIO, Ms. Bostjanick served as the Director of SCRM for OCISO(A&S), where she was responsible for ensuring the incorporation of integrated supply chain efforts within USD(A&S). Ms. Bostjanick has an extensive career as an Acquisition Professional with roles that include the head of DIA’s Contracting Activity, and the Senior Contracting Officer for the Missile Defense Agency on the Standard Missile 3 Block IA and IB development and production program. She was responsible for cradle-to-grave execution of over $5 billion of highly-complex, cutting-edge contracts for our nation’s missile defense systems. Ms. Bostjanick has also served as the Deputy Procurement Executive with the Office of the Director of National Intelligence where she had responsibility for establishing Intelligence Community Enterprise-wide Policy and submissions to the Program Management Plan on an annual basis.

Ms. Bostjanick has had numerous awards and accomplishments throughout her career including the Naval Meritorious Civilian Service Award, David Packard Excellence in Acquisition Award, Office of the Secretary of Defense Certificate of Appreciation, the Director of National Intelligence Award for Collaboration Leadership, National Intelligence Meritorious Citation, and the Small Business Award.

Jason Burt is a Cyber Security Advisor (CSA) with the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency(CISA) assigned to Federal Region IV. CISA is the Nation’s risk advisor. The Agency protects the Nation’s critical infrastructure from physical and cyber threats by working with partners to defend against today’s threats and collaborating to build a more secure and resilient infrastructure for the future. CSAs are the front-facing cyber experts supporting regional operations capabilities. Mr. Burt serves as the liaison and focal point for communications, coordination, and outreach. He promotes cyber preparedness and resiliency, incident response, risk mitigation and situational awareness, and manages major cyber engagements; championing cyber resilience to public and private sector partners. Region IV encompasses eight states, including Mississippi, Alabama, Florida, Georgia, North Carolina, South Carolina, Tennessee, and Kentucky. Mr. Burt has been with the Department for nine years. Prior to becoming a CSA, he held positions as a Senior Watch Officer for CISA’s National Cyber Protection System (NCPS) Network Operation Center (NOC), as well as serving as a Network and Systems Administrator for the Department of Veterans Affairs. Additionally, Mr. Burt is also a retired Air Force Cyber Intelligence Officer. In this role, he provided direct support to Air Force Cyber Protection Teams tasked with defending key Air Force assets and resources against cyber threats.

Michael Epley has been helping the US defense and National Security communities use and adopt open source software over the last 2 decades with practical experience as a software developer and enterprise architect. During his tenure at Red Hat, Michael has passionately driven adoption of key technology: cloud and kubernetes, tactical edge/forward deployed systems, data analytics tools and platforms, and disconnected operations — always in the context of security and compliance concerns unique to this sector. Michael has BS degrees in Mathematics and Mechanical Engineering from Virginia Tech and a JD from The University of Texas School of Law.

Felipe Fernandez is the CTO at Fortinet Federal, a U.S. next-generation cyber security solution vendor that provides real-time threat detection and prevention. In addition to his role as a team manager, Felipe also oversees the US Federal product strategy and certification process at Fortinet Federal, such as the DoDIN APL and NSACSfC. Felipe has more than 21 years of experience in consulting, deploying, operating, and auditing security solutions in DoD and the private sector.

Joe Foster joined NASA’s Goddard Space Flight Center as the Cloud Computing Program Manager in September 2018. He designed and built the Agency’s Mission Cloud Platform (MCP), achieving an Authorization To Operate (ATO) at a Moderate Security Level in only 10 months. Since the ATO, MCP has grown rapidly to now supporting almost 160 projects across all 10 NASA centers and still growing. For his work on MCP and thought leadership in the Federal space around Cloud Computing, Foster has won numerous awards including the 2020 Robert H Goddard Award, the 2021 NASA Agency Honors Award, and the 2021 Association for Federal Information Resources Management (AFFIRM) Leadership in Cloud Computing award winner.

Foster previously served as an IT Program Manager and Data Scientist with the National Geospatial-Intelligence Agency (NGA) from 2010–2018, where he migrated 60 separate activities from on-premises data centers to the cloud, spearheaded the adoption of the DevOps Pipeline, and conceptualized the system being used by the Agency to plan and track the cloud migration of 650+ applications. He served on NGA’s Cloud Leadership Team, Cloud Adoption Management Group, and DevOps Council, as well as two Intelligence Community-wide Cloud forums, the Intelligence Community IT Enterprise (ICITE) steering committee, and the ICITE Mission Users Group Forum. Foster also served in the U.S. Department of Homeland Security (DHS), the Nuclear Regulatory Commission (NRC), and as a private sector consultant. Foster is a U.S. Army Combat veteran who served as a Chemical, Biological, Radiological, Nuclear, and Explosives (CBRNE) Engineer from 1998–2005.

Anjana Rajan currently serves as the Assistant National Cyber Director for Technology Security at The White House. A renowned cryptographer, technology executive, and entrepreneur, Rajan has spent her career working at the nexus of national security and human rights. Prior to joining the White House, she was the first Chief Technology Officer of Polaris, the largest anti-human trafficking NGO in the United States. In this role, she architected Polaris’s web3 & human rights vision and built a proactive security strategy to defend the organization against foreign malign influence operations and violent extremist threats.

Previously, Anjana was a Tech Policy Fellow at the Aspen Institute, was a former Y Combinator founder, led open-source development of advanced cryptographic libraries, and worked at Palantir Technologies. She was a Knight Scholar at Cornell University’s Engineering School and received her bachelor’s and master’s degrees in Operations Research Engineering.

Ken Rogers is a member of the Senior Executive Service (SES) and provides executive leadership for IT strategic planning, policy, portfolio and performance management, and budget formulation and execution including the use of various working capital funds associated with the Department’s $2.97B global IT portfolio. This IT portfolio supports a 76K person workforce operating in over 300 locations around the world.

Mr. Roger’s public sector career included serving as the State Department Chair at the Department of Defense, National Defense University, College of Information & Cyberspace. He also served as the Chief Information Officer at the Department of Homeland Security’s Science & Technology Directorate and has held leadership positions as the Chief Architect and Strategist at the U.S. Department of Commerce and the Export Import Bank.

His private sector experience includes financial management, government relations, and information systems management in the banking and aerospace industries, and as an international economic and management consultant supporting USAID.

Mr. Korie Seville serves as the Defense Information Systems Agency’s (DISA) Hosting and Compute Center (HaCC) Technical Director. In this role, Mr. Seville is responsible for the strategic technical direction of various DISA HaCC data center and cloud initiatives, including the Joint Warfighting Cloud Capability (JWCC) and Zero Trust.

Prior to becoming the Technical Director, Mr. Seville was the HaCC’s cloud infrastructure architect. As a member of the HaCC, he was responsible for architecting and integrating commercial cloud hosted solutions into the DoD network infrastructure.

Before joining the HaCC, Mr. Seville was an infrastructure architect for the Cloud Computing Program Office (CCPO) providing support to critical cloud enabling projects to include the Cloud Layered Obfuscation Application Kit, Global Directory, Azure Hosting Infrastructure, and the Commercial Virtual Remote (CVR) environment, which brought Microsoft 365 to over a million Department of Defense employees during the global pandemic. Also, Mr. Seville received a Bachelor of Computer Science from the Shippensburg University of Pennsylvania