S2E10: Shane Barney

Federal Zero Trust, Cloud, and DevSecOps

In this episode of Resilient Cyber, Chris Hughes and Dr. Nikki Robinson chat with Shane Barney, Chief Information Security Officer (CISO) for the U.S. Citizenship and Immigration Services (USCIS). Shane shares his insights on the challenges and opportunities in adopting Zero Trust in the federal government, leveraging cloud technologies, and integrating DevSecOps principles. ☁️

🔑 Key Highlights:

  • USCIS's journey as a cloud-forward, DevSecOps-driven federal agency

  • The challenges of adopting Zero Trust in the federal government and why the term might be misleading

  • How automation and security as code are vital to USCIS’s security posture

  • Lessons learned from integrating cloud security and building resilient systems

  • Addressing misconceptions around cloud security versus on-prem security

  • The importance of identity and API security in Zero Trust architectures

  • Tips on embedding security officers in agile, fast-moving development teams

  • Why federal agencies must move beyond compliance-focused security and embrace proactive, threat-hunting approaches

Shane also shares practical advice on building security programs that are flexible, resilient, and ready to respond to future challenges. Tune in for a deep dive into cybersecurity at the intersection of federal innovation and modern security practices!