American Cyber - Spring 2018 ACWire Newsletter

Wire



merican Cyber


SOLUTIONS WITH VELOCITY TM

Volume 13, Issue 2 Spring 2018


American Cyber Makes Virginia Chamber of Commerce

Fantastic 50 List for Third Consecutive Year


American Cyber is proud to
announce it has been selected by
the Virginia Chamber of Commerce
for its Virginia Fantastic 50 award
for a third consecutive year. This
year American Cyber was ranked
as number 20 of the 50 fastest
growing companies in the state.
The award was presented to
Gary Winkler during a glittering
awards banquet Thursday, April
26th, at the Westfields Marriott in
Chantilly, Virginia.
The Fantastic 50 Awards
recognize the fastest growing
companies in Virginia and touts the
honor roll of winners in both local
and state media, providing well- American Cyber employees posing with the Fantastic 50 award
deserved publicity for their success. are from left to right: Nancy Self, Communications Manager; Tom
Buesing, Facility Security Officer; Laurie Winkler, CEO & Board
Gary Winkler, President Chairwoman; Gary Winkler, President; Amy Martin, Director
of Finance and Administration; and James Wheeler, Project
of American Cyber, accepted Management Office Administrator.
the award during ceremonies
Thursday evening celebrating the worked simultaneously to ensure
entrepreneurial success of Virginia’s quality customer support while also contribution to Virginia’s economic
fastest growing companies who are establishing company policies and vitality. Companies are judged on
contributing greatly to the growing processes necessary to seamlessly four-year sales revenue history and
Virginia business economy. As to scale the business across the globe.” must have demonstrated a positive
what this success is attributed to, With nearly 500 attendees, revenue growth and net income in
Winkler said, “both our corporate the winners were saluted for its most recent fiscal year over the
staff and delivery teams have their entrepreneurial success and previous year.


CONTENTS
American Cyber Makes Virginia Chamber American Cyber Participates Employee Recognition ...................................... 7
of Commerce Fantastic 50 List for Third at Industry Days ................................................. 3 Happy Birthdays .................................................8
Consecutive Year .................................................1 CMMI for Services Level 3 Vacation Reminder ............................................8
American Cyber Implements Its Customer Appraisal Complete! ..........................................4
Satisfaction Survey............................................ 2 American Cyber Heads to AFCEA TechNet....4 Payroll/Holiday Schedule ................................8
Board of Director’s Corner ............................... 2 Reporting the Threat ......................................... 5 June–August 2018—Other Days of Note .....8
More on American Cyber’s Profit Welcome New Employees ............................... 7
Sharing Program ................................................ 3

SOLUTIONS WITH VELOCITY TM




investment of this program resulted
Board of Director’s Corner in us having a corporate loss for
2017, we believe it is the right thing
to do for the long run. At least we
didn’t have to pay any corporate
Happy Springtime to all American associated with our strategic and income taxes since we took a loss
Cyber employees, friends and operational plans. Additionally, this in 2017! As our company celebrated
partners. Although we seem to CMMI Level 3 for Services rating its 7th birthday, we now have built
have had an extended Winter, provides us with a competitive a very solid foundation to grow
we were all warm and toasty advantage when bidding on at a more rapid rate. Resultantly,
from working so hard throughout additional work. Lastly, this rating that is now our focus. Accelerated
the cool weather. Last Fall we also complements our current growth will provide our employees
embarked upon our CMMI Level ISO Certifications for Quality with more career opportunities as
3 rating for delivering services to Management, Information Security we expand into new specialties,
our customers. I am very happy to Management, and Information customer organizations, and
say that, thanks to Scott Findley’s Technology Service Management. geographic locations. We are very
leadership and our corporate staff As we look at our books for proud of our team at American
team’s commitment and efforts, the final close-out of 2017, we note Cyber, where everyone functions in
we achieved this industry-leading that we have been growing our their respective roles as a very highly
rating in April, just as we had revenue at a steady linear rate for respected and valued professional on
planned. The internal processes the past 5 years. This is consistent their current team. Keep up the great
that we established as part of with our plan and approach where work, and we will keep you informed
this maturity rating represent we are constantly reinvesting in of our progress and current events!
another step in the evolution of the company and our employees. The future is looking great!
American Cyber and our ability to In 2017, we initiated a Profit —Laurie M. Winkler,
easily accommodate the growth Sharing program, and although the CEO and Board Chair

American Cyber Implements Its Customer Satisfaction Survey


American Cyber initiated its first Respondents also have the information integral to improving
web-based customer satisfaction option to provide additional performance and processes.
survey in late April. The semi- feedback by way of written As a reminder,
annual survey asks respondents observations and were the professionalism
to rate American Cyber service complimentary of the service and of American Cyber
on a scale of “0” to “5” in four staff with comments such as, “The employees is rated
categories: performance, working individuals provided by American by the customer.
relationships, management and Cyber are outstanding—team This includes
overall satisfaction. focused, willing to assist at all times refraining from
Officials at the Army’s and pleasant to work with.” personal activities
Technology Applications Office The survey will allow American in the office during work
(TAO) at Ft. Detrick, Md., were the Cyber to closely monitor each hours, upholding a professional
first Government clients to take customer’s satisfaction over time appearance and keeping volumes
the survey and consistently gave and identify any areas that would at a level in which they do not
American Cyber five stars, the top benefit from changes. Such in- disturb others.
rating, in each of the four areas. depth data will provide valuable


2 American Cyber Wire Volume 13, Issue 2

SOLUTIONS WITH VELOCITY TM



More on American Cyber’s Profit Sharing Program


In March, American Cyber show up in your accounts during Lois Session, at
announced the launch of its Profit the fourth quarter of 2017. For more (202) 577-9573
Sharing Program for the 2017 details, read the “American Cyber or lsession@
corporate tax year. The program, Launches Profit Sharing” article americancyber.com.
managed by Slavic 401K, offers in the Winter 2018 issue of the You may also contact
a bonus of over 3% of your total company newsletter. Slavic 401K at
2017 compensation. The deposits If you have questions, you (800) 356-3009.
occurred in five increments and may contact our HR Specialist,


American Cyber Participates at Industry Days


Systems (PEO EIS), project Attendance at the event included
managers, directors, and executives “who’s who” in the DoD IT arena with
spoke at town halls, breakout numerous senior executives speaking
sessions and on panels about their including Lieutenant General Bruce
projects, providing attendees a look T. Crawford, Army Chief Information
at future IT requirements. Officer/G-6; Essye Miller, Acting DoD
“It was a very successful event Chief Information Officer; Chérie
for us,” explained Gary Winkler. “PEO Smith, Program Executive Officer
EIS is our largest customer so having Enterprise Information Systems;
American Cyber President Gary Winkler (right) and the PMs provide their vision for David Kim, Chief Technology Officer
Major General Garrett Yee, Director of Operations each project enables us to tailor our & Director, Technical Warfare Center,
and Architecture (OA) and Acting Director of
Cyber Security and Information Assurance for the solutions to their future challenges.” ARCYBER; and Robert Foster, Deputy
Department of the Army, discuss cyber issues at
the AFCEA Belvoir Industry Days Conference at Gary Winkler, American Director & Chief Information Officer,
the Gaylord, National Harbor, Md., in early April. Cyber President; Nancy Self, Defense Logistics Agency.
Photo Courtesy of AFCEA Belvoir
Communications
More than 1,000 Government Manager;
employees, military service members and James
and contractors gathered at National Wheeler, Project
Harbor April 2nd through the 4th for Management Office
the Armed Forces Communications Administrator,
and Electronics Association (AFCEA) staffed the booth,
Belvoir Chapter Industry Days. meeting with
“Enabling Information Government
Dominance and Cyber Readiness and contractor
Today While Preparing for the attendees
Challenges of Tomorrow” was the interested in
theme for the three-day event which American Cyber
focused on military requirements for capabilities and
cyber technology to maintain its role distributing
in the international arena. company
More than 30 Program Executive marketing Gary Winkler, American Cyber President (Left), and James Wheeler,
Office Enterprise Information materials. Project Management Office Administrator, staffed the American Cyber
exhibit booth at the AFCEA Belvoir Industry Days Conference in early April.

Spring 2018 American Cyber Wire 3

SOLUTIONS WITH VELOCITY TM



CMMI for Services Level 3 Appraisal Complete!


We did it! After nearly eight months (18 in all) are aligned with the CMMI
of preparation and a week of for Services framework, well defined,
interviews during our CMMI SCAMPI understood, and adhered to. Exp. 2021-04-18 / Appraisal #32349
A appraisal in April, American Cyber This is a significant at https://sas.cmmiinstitute.com/
has officially received a CMMI for accomplishment for American Cyber pars/pars_detail.aspx?a=32349.
Services rating at level three. and a great addition to our set We are now listed in the
CMMI is a capability improvement of process related accreditations CMMI register at https://sas.
framework that provides organiza- (ISO 9001, 20000, and 27001). The cmmiinstitute.com/pars/pars.aspx.
tions with the essential elements of certificates for these achievements Congratulations to our
effective processes that ultimately can be seen on our website. Compliance Manager, Scott Findley,
improve their performance. Along with the CMMI rating, who led the effort, our appraisal
A CMMI for Service rating at level we now have an official CMMI for team members Amy Martin,
three indicates that we have demon- Services at level three logo. Laurie Freeman and Lois Session,
strated to a recognized appraiser that Our appraisal information has our Sponsor Gary Winkler, and
American Cyber’s service processes been posted on the CMMI website everyone who supported the effort!


American Cyber Heads to AFCEA TechNet



















American Cyber will join the Armed and networking as well as to discuss service members; foreign military
Forces Communications and procurement challenges the military, officers; and signal and cyber
Electronics Association (AFCEA) government and industry face students attended the conference.
for its annual TechNet conference during a time of uncertain budgets In addition, the AFCEA Augusta-Ft.
August 20th through the 23rd. and runaway technology advances. Gordon chapter hosted engineering,
This year’s theme—“Cyber The conference is being held in cyber security and computer science
Electromagnetic Activities for Augusta, Ga., which is co-located students from local colleges and
Unified Land Operations”—focuses with Fort Gordon and home of secondary schools, enabling them to
on the intricacies of the cyber the U.S. Army Cyber Center of display experiments and projects as
domain. Senior military leaders, Excellence, the Army Signal Corps well as have a firsthand look at the
cyber and industry experts, and Headquarters and the Signal School, most current technologies.
signal students will come together providing a convenient opportunity American Cyber officials
to discuss challenges of integrating for a large number of Army cyber will participate in the dozens of
cyber capabilities into every aspect and signal experts and students to workshops, educational sessions
of land operations. The conference participate in the three-day event. and senior official presentations,
provides the opportunity to enhance Last year more than 3,200 senior as well as hosting the company’s
communication, problem solving, DoD, Army, and Industry leaders; promotional booth.


4 American Cyber Wire Volume 13, Issue 2

SOLUTIONS WITH VELOCITY TM



Reporting the Threat
WHAT TO REPORT
 Mishandling of Classified Information
 Misuse of Computer Systems
 Suspicious Cyber Incidents
 Foreign Influence
 Suspicious Contacts
 Suspicious Financial Activity
 Recording Devices


DEFENSE SECURITY SERVICE
NATIONAL COUNTERINTELLIGENCE AND SECURITY CENTER
REPORTING THE THREAT




>> MISHANDLING OF CLASSIFIED INFORMATION  Unauthorized transmissions of classified or controlled
unclassified information
 Removing or sending classified material out of
secured areas without proper authorization  Data exfiltrated to unauthorized domains affecting
classified information, systems or cleared individuals
 Unauthorized copying, printing, faxing, emailing, or
transmitting classified material  Actual or attempted unauthorized access into U.S.
automated information systems
 Transmitting or transporting classified information by
unsecured or unauthorized means  Tampering with or introducing unauthorized
elements into information systems
 Unauthorized storage of classified material, including
storage at home  Unexplained user accounts, administrator accounts,
and expansion of network privileges
 Reading or discussing classified information in an
unauthorized area or over a non-secure >> SUSPICIOUS CYBER INCIDENTS
communication device
 Advanced techniques and/or advanced evasion
 Improperly removing or changing classification techniques, which imply a sophisticated adversary
markings
 Pre-intrusion aggressive port scanning
 Attempting to expand access to classified information
by volunteering for assignments or duties beyond the  Denial-of-service attacks or suspicious network
normal scope of responsibilities communication failures
 Social engineering, electronic elicitation, email
>> MISUSE OF COMPUTER SYSTEMS spoofing, spear phishing, whale phishing, or direct

 Unauthorized network access questioning, such as through social networking sites
 Unauthorized email traffic to foreign destinations  Malicious codes or blended threats such as viruses,
worms, trojans, logic bombs, malware, spyware, or
 Password cracking, key logging, encryption, browser hijackers, especially those used for
steganography, privilege escalation, and account clandestine data exfiltration
masquerading
 Any credible anomaly, finding, observation, or
 Use of DoD account credentials by unauthorized indicator associated with other activity or behavior
parties that may also be an indicator of terrorism or

 Unexplained storage of encrypted data espionage
 Network spillage incidents or information  Any cyber activity linked to the law enforcement or
compromise counterintelligence suspicious indicators provided by
the FBI, DSS, Defense Intelligence Agency or by any
other cyber centers




Spring 2018 American Cyber Wire 5

SOLUTIONS WITH VELOCITY TM





>> FOREIGN INFLUENCE Increased awareness of the targeted information and
 Undisclosed visits to foreign diplomatic facilities methods of operation used by foreign entities is critical to
improving our ability to identify and thwart collection
 Trips to foreign countries inconsistent with an attempts.
individual’s financial ability
Timely and accurate reporting from cleared industry is the
 Foreign entities targeting employees traveling primary tool DSS uses to identify and mitigate collection
overseas via airport screening or hotel room efforts targeting information and technology resident in
incursions cleared industry.
 Unreported close and continuing contact with a Immediately report suspicious activities, behaviors, and
foreign national, including intimate contacts, shared contacts to your facility security officer.
living quarters, or marriage
REPORTING REQUIREMENTS FOR CLEARED
>> SUSPICIOUS CONTACTS COMPANIES
 Requests for information that make an individual
suspicious, including questionable contacts or Report any incidents that meet the thresholds of NISPOM
interaction paragraphs 1-301, or 1-302a. or b.
These lists are not all inclusive. Some of the examples are
>> SUSPICIOUS FINANCIAL ACTIVITY also considered security violations or personnel security
 Unexplained expensive purchases not reasonably issues, which should be handled in accordance with
supported by the individual’s income applicable procedures.
 Sudden unexplained reversal of a negative financial Cleared contractors must also report actual, probable, or
situation or repayment of large debts possible espionage, sabotage, terrorism, or subversion
promptly to the Federal Bureau of Investigation (FBI) and
>> RECORDING DEVICES DSS (NISPOM 1-301).
 Unauthorized possession of cameras or recording or Although this requirement is not directed to unclassified
communication devices in classified areas
information or systems, contractors must report activities
 Discovery of suspected surveillance devices in that otherwise meet the threshold for reporting, including
classified areas activities that may have occurred on its unclassified
information systems. (See Industrial Security Letter 2013-
CLEARED INDUSTRY’S ROLE 05)
The technology and information resident in U.S. cleared
industry is under constant and pervasive threat from
foreign intelligence entities seeking to gain the Security Tip
technological edge.
When you detect suspicious actions that

Immediately report suspicious activities, behaviors, require reporting, contact the American
and contacts to your Facility Security Officer: Cyber Facility Security Officer, Tom
Thomas Buesing, 703-869-8348 Buesing, [email protected],
(703) 869-8348 to file your initial report
quickly, and provide more specific details
in follow-on reporting.






DEFENSE SECURITY SERVICE
www.dss.mil

NATIONAL COUNTERINTELLIGENCE AND SECURITY CENTER
www.ncsc.gov



6 American Cyber Wire Volume 13, Issue 2

SOLUTIONS WITH VELOCITY TM



Welcome Employee Recognition

New Employees American Cyber is pleased to Kudos to Joe Kim, a

American Cyber added three recognize the following employees Multi-Function
new employees during the past for outstanding service: System
quarter. Let’s welcome these new On the Spot Administrator for
employees to the team! the Medical
Amy Wilson, an Communications
Steve Zimmerman On-Boarding for Combat
Steve Zimmerman Specialist/Analyst, Casualty Care (MC4) at Joint Base
brings five years’ received an Lewis—McChord, Wa. Joe is being
experience to the American Cyber recognized for his work as the
American Cyber On the Spot award Instructor Training Lead. Since
team as a Computer for her support for the Integrated assuming this responsibility, Joe
Help Desk Technician Personnel and Pay System—Army developed exceptional Instructor/Key
at JSP in Ft. Detrick, Md. Steve (IPPS-A) Common Access Cards
has obtained a Regent Bachelor’s Personnel Training which enables
Degree from Shepherd University (CAC) renewal project in Alexandria, new employees to learn MC4
and is working to obtain a Master’s Va. Amy was cited for ensuring applications so thoroughly, they are
Degree in Information Science the project was kept on a tight able to teach them to other
Technology at Wilmington University. schedule, personnel informed employees. Joe employs real-world
of current responsibilities, and deployment scenarios in the training
Stephen documents prepared in a timely environment to better prepare
Asante-Kusi manner during a transition between student for upcoming deployments.
Stephen Asante- Government personnel. Joe is credited with being an excellent
Kusi joined the mentor who is never too busy to help
American Cyber customers or fellow employees.
team as an
Information New PMP
Assurance Engineer for PEO-EIS, Julie Kuritz
PM I3C2 DCO at Ft. Belvoir, Va. is American
Before joining the team, he provided Cyber’s newest
support as an Information Assurance certified Project
Specialist at the Pentagon for Army Kudos to Phillip Stone and Brian Management
CIO/G6. He resides in Woodbridge, Neumaier, Help Desk Technicians
Va., and enjoys watching movies and for the Defense Information Professional
reading in his free time. Systems Agency’s (DISA) Joint (PMP). Julie, a Project Manager for
Service Provider (JSP) at Ft. Detrick, the Army’s Technology Applications
Glen Gulyas Md. Brian and Phil received Office (TAO) at Ft. Detrick, Md.,
Glen Gulyas, CEO American Cyber On the Spot awards passed the grueling four-hour exam
and Co-Founder of for their excellent work, flexibility, in late March on her first attempt
Onclave Networks, and willingness to assist on any to earn her PMP. The certification
Inc., has joined the is an internationally recognized
American Cyber project during the past several professional designation from the
staff as a Research months, which were extremely busy Project Management Institute
Analyst. Glen has a background at JSP. JSP provides IT support to (PMI), demonstrating a manager’s
in starting, building and exiting tens of thousands of Government knowledge of the tenets of project
multiple start-ups in the technology and contractor personnel in the management. Great job Julie.
area and has served in multiple roles Pentagon and national
in other organizations including CEO, Capitol Region. Congratulations to all! Well done!
COO, Board Director and Consultant. Recognition continued on page 7


Spring 2018 American Cyber Wire 7

SOLUTIONS WITH VELOCITY TM




Recognition continued from page 8
Newest Family Members

Welcome to American Cyber’s newest family members.
Spring has seen a lot of changes for Stephen Asante-Kusi,
an Information Assurance Engineer at the Defense Cyber
Operations organization at Ft. Belvoir, Va. Stephen joined
Happy Birthdays American Cyber in March and on April 13th, he and his
wife welcomed their 7 pound, 9 ounce daughter, Amaris
Kusi, to the family.
June
Steve Wildasin—Jun 6 Jaime Sanchez, a System Administrator for the Medical
Kriston Myers—Jun 16 Communications for Combat Casualty Care (MC4) at
Brian Neumaier—Jun 19 Ft. Sam Houston, Tx., and his wife welcomed their new
James Wheeler—Jun 26
son, Jaime Sanchez, Jr., weighing 6 pounds 2 ounces on
July March 21st. Welcome and congratulations to the
Katelyn Winkler—July 2 new parents!
Kimberly Crawford—Jul 4
Julie Kuritz—Jul 5
Tracy Brothers—Jul 7 Vacation Reminder
Alan Kravitz—Jul 8 Vacation season is finally here! When planning to take time off, remember
Jonathan Pagonis—Jul 11
Laurie Winkler—Jul 12 to obtain approval from your site supervisor first and then notify your
Jaime Sanchez—Jul 19 American Cyber supervisor and the HR Department. If your travel
Charles Simpson—Jul 21 will take you out of the country, please notify our FSO, Tom Buesing
at [email protected]. You should also check the State
August Department’s Alerts and Warnings for the countries you will be visiting at:
Kelly Matthews—Aug 2 https://travel.state.gov/content/travel/en/international-travel/International-
Laurie Freeman—Aug 6 Travel-Country-Information-Pages.html.
Steven Burkhalter—Aug 12 How much PTO do you have? You can always check your balance on
Paul Lavigne—Aug 20
the C2 web site www.c2connection.com. If you need help please contact
September our HR Specialist, Lois Session, at [email protected] or
Jasmin Garland—Sept 5 (202) 577-9573.
Staci Speierman—Sept 9
Karen Bloomfield—Sept 10 June-August 2018 Payroll/Holiday Schedule
Dave Buesing—Sept 18
Gary Winkler—Sept 20 LEGEND:  Payroll  Holidays
June July August
Reminder about optional monthly Su Mo Tu We Th Fr Sa Su Mo Tu We Th Fr Sa Su Mo Tu We Th Fr Sa
staff calls on the second Tuesday of 1 2 1 2 3 4 5 6 7 1 2 3 4
every month. Next call: June 12th. 3 4 5 6 7 8 9 8 9 10 11 12 13 14 5 6 7 8 9 10 11
10 11 12 13 14 15 16 15 16 17 18 19 20 21 12 13 14 15 16 17 18
Like us on Facebook! 17 18 19 20 21 22 23 22 23 24 25 26 27 28 19 20 21 22 23 24 25
Don’t forget to check us 24 25 26 27 28 29 30 29 30 31 26 27 28 29 30 31
out on Facebook! Stay
current on the latest June–August 2018—Other Days of Note
news and events on our
page! https://facebook. Flag Day ............... Thursday, June 14 Father’s Day .............. Sunday, June 17
Eid al-Adha ............ Monday, August 20
Eid al-Fitr ................. Friday, June 15
com/americancyber.
8 American Cyber Wire Volume 13, Issue 2