r/AskNetsec • u/Abn0890 • 6d ago

Analysis DIB CS Program/DCISE3

Just wanted to know if anyone has bought into this voluntary program from the DoD Cyber Crime Center that provides an extra layer of security for DoD suppliers network. Any reviews from implementation and its effectiveness?

5 Upvotes

78% Upvoted

8 comments sorted by

2

u/Few-Cardiologist8430 6d ago

Haven't done it myself but watched a neighbouring shop go through it, the biggest headache was mapping all their external assets properly before the scanning even started. Once that was sorted it was pretty smooth and they caught a few exposed services nobody realized were still live

The reports are detailed but not overwhelming, you actually get actionable stuff instead of a firehose of noise

1

u/Skamba-Deak 5d ago

the asset mapping part being the bottleneck makes total sense, thats always where things get messy

1

u/amorfati00 5d ago

Good program, been around for years. I worked there a little over a decade ago.

1

u/V_Trautwein 4d ago

Haven’t implemented it myself

1

u/Duchet_Odinaka51 18h ago

tbh the effectiveness comes down to how automated your current ingestion is. Getting the STIX/TAXII feeds set up is straightforward, but if nobody is tuning the alerts on your end it just becomes another noisy feed to ignore.