Cybersecurity

CISA Leaning Toward Lower Threshold for Mandatory Cyber Incident Reporting

The agency has started to receive feedback from some key stakeholders for its rulemaking process on the issue.

Policy

Election Misinformation Targeting Diverse Communities Drives Calls for Collaboration

Nonprofit groups have stated that federal officials need to do more to directly engage with their efforts on the ground. 

Cybersecurity

CISA Director: Big Tech Shouldn’t Charge Extra for Event Logging

The agency has promised to measure the success of efforts to steer major software providers toward the inclusion of logging and other basic security features in their products “by default,” but has said little about how it actually intends to do that.

Cybersecurity

CISA Seeks Feedback on Baseline Measures to Secure Cloud Configuration

Initial baselines address Microsoft services, and baselines for configuring rival services from Google are up next. 

Cybersecurity

TSA Opens Registration for Public Meeting on Cybersecurity Regulations

The agency’s advisory committee typically meets behind closed doors, but they are required to hold at least one public meeting per year. 

Cybersecurity

CISA to Focus on Water, Education and Health Sectors Over the Next Year 

The agency contributed to the release of security requirements for the transportation sector this week and is expected to issue cross-sector performance goals for critical infrastructure companies’ voluntary adoption next week.

Modernization

New ‘More Flexible’ TSA Screening Systems Debut in Las Vegas

A collaboration between the TSA and Homeland’s Science & Technology Directorate yields compact baggage screening.

Cybersecurity

Commercial Availability, Consequences Best Approach for Post-Quantum Transition

Ann Cox, the lead at the Department of Homeland Security’s research office, emphasized community engagement and technological needs for a successful quantum-resilient future.

Cybersecurity

Why CISA Won’t Release ‘Public’ Comments on Upcoming Performance Goals

CISA officials often stress their non-regulatory role, but Congress keeps trying to give the agency regulatory responsibilities.

Digital Government

CISA Names Acting Head of National Risk Management Center to Permanent Role

Mona Harrington, who previously served as the executive director of the Election Assistance Commission, has been the acting assistant director of CISA’s NRMC since March. 

Cybersecurity

CISA Announces DC Event for Public Input on Incident Reporting Regulations

The effort aims to give officials a greater understanding of cyber threats and the ability to defend U.S. critical infrastructure against cascading impacts when attacks occur.

Cybersecurity

CISA and FBI Say Malicious Cyber Activity is Unlikely to Compromise Election Infrastructure

The joint public service announcement said “extensive safeguards in place” make it difficult for bad actors to interfere in upcoming midterm elections.

Cybersecurity

National Cybersecurity Review Begins for All Levels of Government

Answering the survey—based on the National Institute of Standards and Technology’s cybersecurity framework—is mandatory for certain grant recipients.

Cybersecurity

Treasury Seeks Comment on How to Structure a Cyber Insurance Program

The Department’s Federal Insurance Office—together with the Cybersecurity and Infrastructure Security Agency—is soliciting feedback in preparation for a report to Congress.

Cybersecurity

Coast Guard Must Address Cyber Workforce Needs, Watchdog Says

The agency is only fully implementing seven out of 12 best practices, according to the Government Accountability Office.

Cybersecurity

CISA, NSA Guidance Tries to Reduce Alternatives for Securing Industrial Control Systems

Policymakers in Congress and the administration are grappling with how to set a performance bar for companies' mitigation of cyber threats against critical infrastructure they own, while allowing flexibility the companies say is needed to run their operations.

Modernization

DHS to Begin Electric Vehicle Adoption for Law Enforcement

The Mustang Mach-E model is currently undergoing cybersecurity risk tests.

Cybersecurity

CISA Plans to Measure the Effect of Coming Standards on Industry’s Cybersecurity

But big companies want to avoid agencies’ use of related performance goals in new regulation.

Cybersecurity

Whole-of-Government Effort Targets Iranian Hackers

An unsealed indictment from the Department of Justice accompanied  sanctions and an advisory with international allies warning against government-linked Iranian hackers.

Ideas

Border Agency Deactivates Regional Twitter Account that Promoted Homophobic Tweet

The agency shut down the Twitter account for its West Texas regional office, saying “unauthorized and inappropriate content” was posted on the account on Saturday.