Cybersecurity

Military Branches Losing Expensive Cyber Talent to the Private Sector, Watchdog Says

The Government Accountability Office found that the lack of required service time commitments within some of the military branches is making it difficult to retain personnel who have completed expensive and advanced cyber courses.

Digital Government

Lawmakers Highlight Cyber, New Tech and Space in Proposed Spending Bill

The $1.7 trillion omnibus introduced by lawmakers on Tuesday would spur on investments in cutting-edge technologies, cyber defense and space during the 2023 fiscal year.

Cybersecurity

Cyber Director’s Preview of National Strategy Highlights Federal Software Procurement

The national cyber director also indicated plans to rely on feedback from members of the software industry who are working on recommendations for “streamlining” sector-specific regulations.

Cybersecurity

DHS Seeks Ideas for Automated Cyberattack Detectors in Annual Notice

The annual solicitation from the Small Business Innovation Research program seeks proposals for addressing seven different technology issues facing the Department of Homeland Security.

Cybersecurity

GAO Highlights Interoperability Challenges With Zero Trust

A cybersecurity specialist from the watchdog is ready to dive into related policy implications, but says work on agencies’ implementation is the more immediate concern.

Cybersecurity

FERC Chairman Wants to Update Cybersecurity Requirements

Discussion of potential changes centered on a need for software transparency and independent supply-chain assessments.

Ideas

Zero Trust Doesn’t Come in a Box

Three no-nonsense tips to simplify the zero trust journey for federal agencies.

Modernization

Census Targets Data Modernization, Cybersecurity Ahead of 2030 Rollout

Officials at the Census Bureau want to give the agency’s operations a strong, data-centric approach to collecting and securing American demographic information.

Cybersecurity

Latest Guidance Outlines Customer Responsibilities for Software Security

The guide provides recommendations throughout the product lifecycle, from procurement to deployment.

Cybersecurity

White House Begins to Push Federal Post-Quantum Cryptography Migration

The Office of Management and Budget released new guidance to begin the governmentwide effort to safeguard digital infrastructure from quantum attacks.

Cybersecurity

Secret Service’s Zero Trust Plan Must Account for OMB Guidance, Watchdog Says

The Secret Service’s plan for adopting a zero trust architecture model across the agency’s systems has not been updated since the Office of Management and Budget released new guidance in January.

Cybersecurity

CISA Issues Vulnerability-Management Tools Dependent on Industry Action

Federal agencies are under a binding operational directive to address exploitable security vulnerabilities in their software, but the success of CISA’s effort relies on the cooperation of software vendors.

Cybersecurity

NATO Allies Double Down on Cybersecurity in Warfighting Ops

U.S. and Italian officials convened the 2022 Cyber Defence Pledge Conference, focused on supporting Ukraine and investing in new technology for all member nations.

Cybersecurity

How Federal Agencies are Using Innovative Tech to Protect Critical Infrastructure Cybersecurity

Officials from CISA and DARPA spoke about their initiatives to support cybersecurity operations across critical infrastructure networks.

Cybersecurity

NIST Official Warns Against Device-only Approach to Securing IoT

Federal agencies’ implementation of NIST’s guidelines on the issue—under direction from Congress—is coinciding with industry resistance to the comprehensive approach stakeholders agree is necessary.

Cybersecurity

CISA, NSA and Industry Outline Security Responsibilities of Software Suppliers

New guidance from the federal agencies—and major companies serving the government—tries to distinguish between the security duties of software developers, suppliers and consumers.

Cybersecurity

FCC Proposes to Strengthen Cybersecurity of Emergency Alert Systems

The notice of proposed rulemaking would require emergency alert system participants to disclose cyber breaches within 72 hours of discovery.