Cybersecurity

CMMC training registration opens, but implementation worries persist

The first cadre of DOD cybersecurity assessors is expected to graduate by early August, but concerns loom over Cybersecurity Maturity Model Certification.

Cybersecurity

Data exchange and cybersecurity

Ensuring different software systems can easily communicate and exchange data is as much about people and process as it is technology.

Cybersecurity

NIST official says post-quantum environment still years away

Despite industry claims of quantum supremacy, a NIST official said there's no danger in the near future that modern tools will be able break current encryption methods.

People

Strategies for finding and keeping new feds

Federal agencies are getting creative as they look to replace retiring employees with new hires.

Cybersecurity

NIST looking for partners to secure energy IoT

The agency is looking for new methods for secure connected devices in the U.S. energy industrial sector, from sensors attached to machinery and vehicles to insecure devices that help transmit data from distribution control systems.

Cybersecurity

NIST seeks comment on privacy framework

The latest version comes with a number of notable additions, such as increased flexibility for organizations and a concerted effort to align the agency's privacy and cybersecurity efforts.

Cybersecurity

DHS supply chain risk assessment set for White House review

The chair of the Supply Chain Task Force told a government advisory panel that a taxonomy of IT and communications sector risks is in the final stages of approval.

Cybersecurity

With defense contractors in the crosshairs, NIST rolls out new cyber guidelines

Foreign countries are targeting and compromising U.S. contractors so frequently that the Department of Defense asked NIST to develop custom security guidance.

Cybersecurity

Federal networks escaped harm in DNS tampering campaign, official says

A DHS official said there are still "a handful" of agencies who have yet to fully comply with a January 2019 emergency directive on DNS tampering and gave insight on a budget request for new tech to detect such threats earlier.

Cybersecurity

NIST pushes new encryption protocols for quantum, connected devices

The National Institute of Standards and Technology is inching closer to developing two new encryption standards to protect the federal government from new and emerging cybersecurity threats.

Digital Government

Senate passes plan to invest $1.2 billion in quantum research

The Senate has cleared the way for the president to approve implementation of a 10-year plan to accelerate quantum computing research and development.

Digital Government

Quantum Consortium aims to keep U.S. research on pace

The new group allows participating companies to communicate with the National Institute of Standards and Technology about research needs without revealing proprietary secrets.

Digital Government

A necessary plan for managing privacy risk

As a well-engineered blueprint, NIST's privacy framework will provide voluntary guidelines for managing privacy risk, furthering protections and delivering practical tools that still allow for continued U.S. innovation.

Cybersecurity

IoT poses special cyber risks

Internet-connected devices pose special risks for federal agencies, and the National Institute of Standards and Technology is developing guidance to meet the need.

Digital Government

Quantum lag: Experts fret that the U.S. risks falling behind in computing power

Quantum computing could upend current cryptography standards, and experts are urging government to take an interest in the technology as it develops.

Cybersecurity

NIST pushes on next version of Risk Management Framework

The National Institute of Standards and Technology looks to release the final version of RMF 2.0 early next year.

Cybersecurity

Regulators grapple with supply chain security

The government wants to crack down on cybersecurity threats and counterfeits in the global tech supply chain without harming U.S. companies.

Acquisition

Senate bill looks to secure the IT supply chain

A new bipartisan bill looks to build capacity inside the federal government to evaluate supply chain risks with an eye to making sure the government buys secure tech.