John Bermingham joined the team in 2020 as TSI\u2019s resident cybersecurity and compliance expert. Throughout his twenty-five years in the IT and cybersecurity industry as a US Airman and later on as a contractor, John has worked with a wide variety of government agencies and companies to include ACS Defense Inc., Lockheed Martin Corp., Northrop Grumman Corp., and several Federally Funded Research and Development Centers (FFRDCs).<\/p>\n
We connected with John to learn more about him and what he brings to the TSI team.<\/p>\n
<\/p>\n
1. Tell us what inspired you to get into the IT compliance and cyber-security industry? Where there any events that lead you to that point?<\/strong><\/p>\n My initial brush with compliance was while working in the Office of Inspector General at the Electronic Systems Center (ESC) in 1999.\u00a0 The \u201cY2K\u201d issue was brewing and I was asked to join a team that assessed ESC\u2019s progress of preparing the network by installing patches to systems.\u00a0 This impressed upon me how important computers and networks were becoming to the mission and piqued my interest.<\/p>\n <\/p>\n 2. You\u2019re a 20-year veteran of the USAF; what were some of the most important things that you learned throughout your time in the service?<\/strong><\/p>\n The Core Values of the United States Air Force:\u00a0 Integrity first, Service before self, and Excellence in all that we do!\u00a0 I believe these values are critical components to the stability and growth of any organization and are important to me as an individual.<\/p>\n <\/p>\n 3. To add to the previous question, what are some of the biggest industry changes or developments you\u2019ve identified over the last 20 + years<\/strong><\/p>\n We have seen many advances of course, but I would say the most consequential have been in the areas of network-perimeter security, malware detection, and Multi-Factor Authentication.\u00a0 Two decades ago, network perimeter devices, while improving, were comparatively basic gatekeepers and not very sophisticated.\u00a0 Today, next-generation firewalls combine the functionality of their predecessors with advanced functions such as deep packet inspection, TLS\/SSL encrypted traffic inspection, intrusion prevention, website filtering, and many other features; all working in concert protect the perimeter.<\/p>\n Malware protection has leaped light years from the first antivirus program call \u201cReaper,\u201d which develop in response to \u201cCreeper,\u201d the first know computer virus, that was detected on ARPANET, the predecessor to the Internet.\u00a0 Modern versions have moved beyond alerting to signatures of known malware to behavior and AI based detection which alerts to and quarantines unusual or suspect files and code.\u00a0 Additionally, these detection capabilities are deployed across network devices and computer systems, providing robust detection and protection against malware.<\/p>\n Finally, the advent and implementation of Multi-Factor Authentication (MFA) has been a significant improvement over using just passwords for authentication.\u00a0 While not perfect, Microsoft asserts that according to its studies, that one\u2019s account is 99% less likely to be compromised if MFA is implemented.<\/p>\n <\/p>\n 4. Where do you see the IT compliance and cyber-security going in the next few years?<\/strong><\/p>\n Compliance mandates continue to proliferate globally and in the United States.\u00a0 We should expect to see industry react in several ways to this, however, at some point we are likely to see specialized versions of operating systems, devices and software pre-configured out of the box to be compliant with various sets of common controls from across different compliance frameworks.\u00a0 We will likely see this at some future point at which compliance requirements become so ubiquitous that an economy of scale is reached.<\/p>\n Zero Trust Architecture is quickly being adopted.\u00a0 Its growth is largely predicated on two factors.\u00a0 The first is the capability to move resources to the cloud with confidence that data will be safe residing there; and the second being MFA, which provides that confidence. In general, the concept of zero trust is that \u201cthe network\u201d is not considered secure and that all resources must be protected at a more granular level.\u00a0 This includes devices, applications and endpoint. Beyond the cloud this architecture can be integration with traditional on-premise networks and resources.<\/p>\n <\/p>\n 5. You\u2019ve been with TSI for just under 6 months now; What drove your decision to work at TSI? What do you like most about your experience thus far?<\/strong><\/p>\n TSI is a growing company with a vision to help SMBs become more secure, which helps our country become more secure.\u00a0 This is especially true regarding Defense Industrial Base (DIB) contractors and the relatively new Cybersecurity Certification Maturity Model (CCMC) requirements that DoD requires of them.<\/p>\n Leadership at TSI has a sincere passion for the mission and the TSI family.\u00a0 I sensed this during my initial conversation with Chis and Brian, and this has not changed.<\/p>\n <\/p>\n 6. How do you gauge success? What is your favorite part of working within the SMB space?<\/strong><\/p>\n Working within the MSP space, success can only be gauged by client satisfaction, and it bring me great joy to be able to helps our clients.<\/p>\n <\/p>\n 7. What are some of your hobbies outside of work?<\/strong><\/p>\n Hiking, biking, racquetball and reading.<\/p>\n <\/p>\n 8. What\u2019s your favorite food?<\/strong><\/p>\n My wife\u2019s.<\/p>\n <\/p>\n 9. What is your favorite quote and why?<\/strong><\/p>\n Luck is where preparation meets opportunity.\u00a0 Because it is true.<\/p>\n <\/p>\n 10. What celebrity or historical figure- past or present- would you like to meet over a cup of coffee and why?<\/strong><\/p>\n Ronald Regan.\u00a0 He is one of my heroes and played a major role in freeing millions of people, providing them an opportunity for a better life.<\/p>\n <\/p>\n 11. What is something that most people don\u2019t know about you?<\/strong><\/p>\n That is a secret.<\/p>\n","protected":false},"excerpt":{"rendered":" John Bermingham joined the team in 2020 as TSI\u2019s resident cybersecurity and compliance expert. Throughout his twenty-five years in the IT and cybersecurity industry as a US Airman and later on as a contractor, John has worked with a wide variety of government agencies and companies to include ACS Defense Inc., Lockheed Martin Corp., Northrop…<\/p>\n","protected":false},"author":7,"featured_media":9938,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_links_to":"","_links_to_target":""},"categories":[20,368],"tags":[],"acf":[],"yoast_head":"\n