Cybersecurity

House FISMA draft codifies federal CISO role, looks to shared services

The House Oversight Committee is considering the first updates to the Federal Information Security Modernization Act in seven years, amid increasingly sophisticated cyber risks and threats.

Acquisition

GAO uses uses covert testing scheme to assess SBA screening processes

The Government Accountability Office sent applications from four fake firms to the Small Business Administration's 8(a) program to see whether SBA had made progress addressing long-standing oversight issues.

Cybersecurity

FTC warns of legal risks of failing on Log4j mitigation

The Federal Trade Commission issued a warning this week urging companies to take "reasonable steps" to mitigate known software vulnerabilities or face potential legal consequences, recalling the $700 million settlement Equifax paid for a major breach in 2017.

Cybersecurity

CISA, FBI issue new guidance on addressing Log4j risks

The Cybersecurity and Infrastructure Security Agency and its partners are providing new ways to identify Log4j risks and mitigate possible exploitation.

Acquisition

USAID plans new ‘Digital Front Door’ portal for contractors

The U.S. Agency for International Development is seeking public feedback on a plan to streamline data reporting requirements for contractors by establishing a single portal for all digital information.

Cybersecurity

CISA issues emergency directive to patch Log4j flaw

The Cybersecurity and Infrastructure Security Agency released an emergency directive on Friday ordering all federal agencies to take immediate action against a critical security flaw with potential long-term consequences for public and private infrastructure.

Acquisition

GSA preps draft solicitations for major cloud BPA

The General Services Administration released new details this week about an upcoming multiple-award blanket purchase agreement to help speed up enterprisewide modernization initiatives and meet increased demand for secure commercial cloud products and services.

Cybersecurity

DHS scales up bug bounty program

Department of Homeland Security Secretary Alejandro Mayorkas announced a plan to pay vetted cybersecurity researchers between $500 and $5,000 for identifying cybersecurity vulnerabilities within agency systems.

Acquisition

Government watchdog calls out TMF for low rate of cost recovery

The Government Accountability Office said its previous recommendations for the Technology Modernization Fund have not been followed, leading to unrecovered operating costs and unreliable proposal cost estimates for new projects.

Acquisition

Biden executive order calls for 65% drop in federal government emissions by 2030

A new White House executive order looks to leverage the purchasing power of the federal government to support clean energy goals, and sets ambitious targets for a carbon neutral government by 2050.

Acquisition

Federal court blocks contractor vaccination mandate

A nationwide injunction from a federal court blocks the Biden administration from enforcing its vaccination mandate for the federal contract workforce.

People

White House presses for improved agency-IG cooperation

The White House has called for increased collaboration between federal agencies and inspectors general after conducting a review which revealed some agency leaders had not fully communicated their endorsement of IG policies and whistleblower protections to staff.

Acquisition

White House instructs agencies on contracting equity goals

The Biden administration detailed policy pivots needed to fulfill a commitment to steer $100 billion in federal contracting opportunities to small disadvantaged businesses over the next five years.

Acquisition

Trade group warns of contractor workforce shortfall over vaccine mandate

A Professional Services Council (PSC) committee has forecasted potential workforce issues and billions of dollars in lost IT spend as the White House battles legal challenges to enforce a vaccine mandate for federal contractors.

Modernization

Senate inches closer to FedRAMP legislation

Senators expressed concerns over potential conflicts of interest, high costs and inconsistent review processes during a roundtable meeting with federal officials and IT experts overseeing the General Service Administration’s cloud security authorization program.

Cybersecurity

CISA mulls plan to safeguard federal civilian email

According to contracting documents, the Cybersecurity and Infrastructure Security Agency is looking to take a leading role in identifying and defending against threats against federal civilian executive branch email systems and networks.

People

Biden to nominate Shalanda Young as OMB director

The Biden administration is looking to elevate the acting director of the Office of Management and Budget into the top job on a permanent basis.

People

Emily Murphy joins GMU

Emily Murphy, who headed the General Services Administration during the Trump presidency, is joining the George Mason University Center for Government Contracting as a senior research fellow.

Cybersecurity

Federal government still in the dark on ransomware

Information on the majority of ransomware attacks targeting American companies and civilian agencies remains unreported to the Department of Homeland Security, a top cyber official told lawmakers.

Cybersecurity

FBI wants in on cyber reporting legislation

A top FBI cyber official told lawmakers on Tuesday that the bureau could face significant challenges addressing cyberattacks and ransomware incidents if it was not included in breach disclosure requirements being considered in legislation.