Cybersecurity

OMB wants feedback on new ICAM policies

A draft memorandum to strengthen governmentwide identity, credential and access management calls for modernization and more adoption of shared ICAM services.

Cybersecurity

IG: DHS still can't account for expired PIV cards

The Department of Homeland Security still lacks effective protocols to ensure old contractors don't retain access to their facilities and systems.

Acquisition

Budget, workforce challenge CDM implementation

Vendors say the Continuous Diagnostics and Mitigation program must evolve to deal with emerging threats.

Cybersecurity

Agencies don't know where attacks are coming from

A risk report being produced under the cybersecurity executive order suggests that agencies need to get a better handle on where attacks are originating.

Acquisition

IRS suspends Equifax contract

After a tough congressional hearing and news of more infosec woes at Equifax, the IRS suspended a $7.2 million contract with the credit monitoring agency.

Cybersecurity

Vets.gov offers new login security for users

The Department of Veterans Affairs is authenticating users at Vets.gov via a new commercial standard as it seeks to transform the way vets access their services.

Cybersecurity

DOD pushes toward CAC replacement

Defense officials hope the Common Access Card's days are numbered as they continue to test new identity management solutions.

Digital Government

Federal student loan data targeted in fraud

Officials have declined to prosecute in a case where employees at a private firm tampered with a federal student loan database.

Cybersecurity

Figuring out multifactor authentication

With NIST now restricting the use of Short Message Service, what are the authentication options for federal agencies?

Cybersecurity

Social Security takes a second crack at two-factor authentication

Almost a year after rolling back a mobile phone-based authentication plan for its public beneficiary services, the Social Security Administration unveils a new approach.

Cybersecurity

Agencies need to talk IT, intel for supply chain

As supply chain management has become a key insider threat, agencies need to reach out to industry for help, said experts.

Cybersecurity

A rare piece of good news for federal cybersecurity

The author argues that government could eliminate identity-based breaches by 2021, if agencies leverage advances in identity management under CDM.

Cybersecurity

The identity threat

To provide a robust defense and protect the identity-based perimeter, government agencies must consider new thinking and approaches.

Digital Government

Login.gov moving ahead

The bid to establish a single login for accessing government services is moving again on the last full day of the Obama presidency.

Cybersecurity

Watchdog: DOD needs to improve cybersecurity

Despite taking steps to improve cybersecurity, the Department of Defense reportedly is still coming up short on securing its cyber networks, systems and infrastructure.

Acquisition

GSA adds data security solutions to Schedule 70

The agency says Adobe’s electronic signature solutions and other tools will help agencies manage a broad list of federal security requirements.

Digital Government

ID management without the Big Brother baggage

The government has been trying for years to balance privacy, convenience and security for agencies' online customers. Can the latest efforts finally get traction?

Digital Government

Social Security rolls back two-factor mandate

The Social Security Administration is relaxing a recent security directive for beneficiaries, because of potential user inconvenience.

Cybersecurity

DHS turns to small businesses to tap blockchain tech

DHS has awarded $100,000 each to four small innovators to explore the use of blockchain for identity management.

Cybersecurity

DOD IT is killing CACs

Pentagon CIO Terry Halvorsen plans to eliminate Common Access Cards from IT systems within two years, while moving to a mix of better authentication methods.