Cybersecurity

Biden adds cyber, data, supply chain risks to CFIUS reviews

The Committee on Foreign Investment in the United States will be required to consider five new sets of national security concerns – including cybersecurity – when reviewing foreign investments in the U.S. as part of a new executive order.

Digital Government

Industry Cautions on Software Security Regs in the Defense Bill

Trade groups want Congress to remove a provision in the House-passed defense policy bill mandating software bills of materials in some federal acquisition.

Cybersecurity

Industry cautions on software security regs in the defense bill

Trade groups want Congress to remove a provision in the House-passed defense policy bill mandating software bills of materials in some federal acquisition.

Cybersecurity

Cyber criminals increasingly relying on ransomware-as-a-service, report says

A new report reveals threat actors are using the same ransomware as in previous years – but relying on new malware-free intrusion methods and ransomware-as-a-service offerings to evade popular mitigation techniques.

Acquisition

GSA plans to scale up e-commerce program

The General Services Administration wants to offer government buyers more online platforms to conduct small-scale acquisitions following a reportedly well-liked pilot program involving Amazon, according to a new request for proposals.

Cybersecurity

Maritime cybersecurity is front and center in Coast Guard reauthorization bill

A new Coast Guard reauthorization bill would provide some of the first cybersecurity protections and data management requirements for the U.S. Marine Transportation System in federal law.

Cybersecurity

CISA seeks public input on cybersecurity incident reporting rules

The nation’s cyber defense agency will embark on a cross-country listening tour to better understand what key stakeholders are hoping to see in new mandatory cyber incident reporting requirements featured in the recently-passed Cyber Incident Reporting for Critical Infrastructure Act of 2022.

Cybersecurity

How NSA plans to shield high-impact systems against quantum threats

The National Security Agency started the clock on a long-planned transition to quantum-resistant algorithms in key national security systems.

Cybersecurity

CISA teases strategy to protect critical infrastructure

The Cybersecurity and Infrastructure Security Agency will soon release a sweeping plan to bolster cybersecurity protections for the nation's critical infrastructure industries.

Cybersecurity

NSA, CISA and ODNI release new software supply chain guidelines for developers

An interagency, public-private working group “strongly encouraged” software developers to begin implementing a suite of best practices aimed at further securing the software development lifecycle.

Modernization

Audit finds trouble in SSA's agile software development

A new report said the Social Security Administration failed to implement key best practices in agile development.

People

White House seeks input on federal evidence agenda for LGBTQI+ equity

The White House Office of Science and Technology Policy wants to know about possible blind spots preventing agencies from understanding what disparities are impacting the LGBTQI+ community nationwide, from accessing healthcare to housing.

Digital Government

Executive order will guide $52 billion in CHIPS Act funding

The White House is establishing a steering council to direct the implementation of nearly $52 billion in semiconductor research and development featured in the recently passed CHIPS and Science Act.

Cybersecurity

The present and future of FedRAMP

The acting director of the General Services Administration's Federal Risk and Authorization Management Program (FedRAMP) said his team is focusing on a future of automation.

People

National Archives recovered more than 100 classified documents from Trump in January

The more than 700 pages of classified material included documents relating to special access programs – some of the nation's most closely held secrets.

Digital Government

New report warns of growing 'data divide'

The Center for Data Innovation says a lack of collection and use of data across demographics is leading to disparities in access to critical services.

Digital Government

CISA's Cyber Info Sharing Program Didn't Always Deliver, Watchdog Says

The Cybersecurity and Infrastructure Security Agency did not always provide more than 300 participants of a public-private cyber threat partnership with actionable information to address potential vulnerabilities, according to an oversight report.

Cybersecurity

CISA's cyber info sharing program didn't always deliver, watchdog says

The Cybersecurity and Infrastructure Security Agency did not always provide more than 300 participants of a public-private cyber threat partnership with actionable information to address potential vulnerabilities, according to an oversight report.

Cybersecurity

Russia-linked cyber groups used commercial security tools to target Ukraine, report states

Infamous cybercriminal organizations like Cozy Bear have been involved in a string of cyberattacks targeting Ukrainian government agencies, according to new research.

Policy

What does the federal government buy from data brokers?

The chairmen of two House committees want federal agencies to explain what they are doing with "billions of data points on hundreds of millions of Americans" acquired from data brokers.