Digital Government

GSA Makes a Case for Login.gov on Capitol Hill After Scathing Report

General Services Administration officials addressed allegations that the agency misrepresented identity proofing standards of Login.gov at a hearing Wednesday, as lawmakers pondered the potential for fraudsters in the system.

Modernization

IRS Plans to Approve Use of Login-dot-gov as Tax Day Nears

The tax agency intends to add Login this filing season—and as early as next week—as the integration is in final rounds of testing.

Cybersecurity

CISA Tells Agencies What to Prioritize to Meet Cybersecurity Log Mandate

The guidance document also explains how CISA and the FBI will work with agencies to investigate cybersecurity incidents.

Modernization

TMF Invests Over $40M to Improve Cybersecurity and Digital Services

The Technology Modernization Fund’s most recent investments will go to the Social Security Administration, the Treasury Department and the U.S. Agency for Global Media.

Cybersecurity

Zero Trust Presents 'Doable' Cybersecurity Goals, State Department's CIO Says 

To shore up its cyber defenses, State is identifying potential vulnerabilities across its many disparate systems and working to boost its use of multifactor authentication.

Digital Government

Watchdog: Most Agencies Behind on Personal Data Disclosure Guidance

The Government Accountability Office found that only one out of 17 agencies implemented guidance from the Office of Management and Budget.

Cybersecurity

GAO Highlights Interoperability Challenges With Zero Trust

A cybersecurity specialist from the watchdog is ready to dive into related policy implications, but says work on agencies’ implementation is the more immediate concern.

Ideas

Zero Trust Doesn’t Come in a Box

Three no-nonsense tips to simplify the zero trust journey for federal agencies.

Podcasts

Critical Update: Safeguarding Data From Outside Intrusion

The VA is in the process of implementing a zero-trust cybersecurity model to better secure veterans’ sensitive personal data.

Cybersecurity

Secret Service’s Zero Trust Plan Must Account for OMB Guidance, Watchdog Says

The Secret Service’s plan for adopting a zero trust architecture model across the agency’s systems has not been updated since the Office of Management and Budget released new guidance in January.

Cybersecurity

High-Tech Financial Crimes Warrant Coordinated Digital Identity Efforts, FinCEN Warns

Leaders at the Financial Crimes Enforcement Network noted that stronger authentication measures are critical and spurred by emerging technologies.

Modernization

FTC's Tech and Cyber Modernization Sees Success and Ongoing Challenges

The agency’s report indicated that the Federal Trade Commission was on track and making progress towards most of its tech-related goals, while offering a plan for future goals.

Cybersecurity

OMB Memo Places Zero Trust at the Top of Civilian Agency Priorities

The memorandum sets up budget expectations for previously established cyber goals.

Cybersecurity

Report: Government Implementing Zero Trust Architecture Faster than Corporations

Government’s speedy zero trust implementation is noteworthy for an institution that is “not usually ahead of the curve,” according to a report.

Cybersecurity

NIST, CISA Finalizing Guidance for Identity and Access Management Post-SolarWinds

The epic intrusion campaign has turned up the brights on vendors providing authentication services, but agencies will still need to be actively engaged for effective implementation.

Emerging Tech

Key Lawmaker: Digital Passport Only Way to Deter Crypto Use for Ransomware Attacks

The House Science subcommittee chairman—a REAL ID enthusiast—is probing the viability of “privacy enhancing technologies” for biometric data such as facial-feature mappings.

Modernization

VA Enables Login.gov for Three Major Veteran Portals

Officials said the agency plans to add more services later this year, though Login.gov credentials won’t be mandatory until all veterans are transitioned.

Cybersecurity

FBI, DOJ Seize Website Addresses, Associated Illegal Data Sales, Hacking Services

International law enforcement targeted and confiscated three internet domain names that sell cyberattacks and personal information.