Data-centric, automated security is only as good as the cyber data feeding tools, dashboards, and driving alerts for operators to act.  As systems modernize and increase in complexity, cyber data will increase alongside those systems.  Pair this with AI tools lowering the barrier for bad actors to create malware and we have a scenario where the speed, volume, and complexity of cyber data will overwhelm current DAF infrastructure.

There are many resources across the DAF that can be leveraged to address this problem. Platform One (SBOM API), Cloud One (app cyber data, network telemetry), ELICSAR (analysis) but how do you make this plethora of data available to power tools, dashboards, and alerts?  How do you do this at the enterprise in a secure, scalable manner so when the next zero day vulnerability rears its head, disparate applications, cyber defense teams, and mission systems can rapidly identify affected assets, correlate activity across environments, and drive automated response actions such as updated detections, access restrictions, or quarantine workflows.  

The DAF CDAO Data Mesh Environment (DME) is solving this problem by making data available at the scale of the enterprise.  With data being discoverable, access being structured and repeatable, and data products (in this case cyber) being reusable across that disparate ecosystem to power those tools, dashboards, and alerts for action. Come join as we show how to power automated, secure cyber operations.