Cybersecurity

NSA Chief: Cyber Command Did 9 International Missions Last Year

The dual-hatted head of the spy agency and military command has been conducting proactive missions to diffuse cyber threats to U.S. elections and other critical infrastructure and stressed the importance of artificial intelligence to advance those efforts.

Cybersecurity

Microsoft, DoD Partners Celebrate Cooperative Research and Development Agreement

The company may have the chance to negotiate exclusive intellectual property rights—with an exception for the government—to innovations emerging from the collaboration.

Cybersecurity

CISA Points to Water Sector in Seeking $80 Million More for FEMA Grants

CISA and FEMA are currently rolling out the first of $1 billion the Homeland Security agencies got in Rescue Act funding to help state and local entities improve their cybersecurity.

Cybersecurity

NIST Official: Revised Cybersecurity Supply-Chain Guidance Imminent

The software Industry wants agencies to show their ‘use’ of the NIST Cybersecurity Framework, which it says should be mapped to the revised supply chain guidance.

Cybersecurity

Telecom Group Wants NIST to Map Performance Goals to the Cybersecurity Framework

But, in general, the industry wants NIST to avoid making any changes at all to the choose-your-own-adventure document that has guided risk management and U.S. cybersecurity policy for almost a decade.

Cybersecurity

CISA’s Newest Advisor Could Soon Have Agencies Asking: 'Does This Spark Joy?'

Another CISA advisor has referred to Bob Lord as a “digital Marie Kondo,” tidying up the Democratic National Committee by throwing out old software and unused tech.

Cybersecurity

Cybersecurity Pros Signal Regulatory Challenge for Securing Industrial Control Systems

A studious adversary may be hellbent on destruction, and a comprehensive approach is needed to successfully govern the protection of critical infrastructure, specialists say.

Cybersecurity

Energy to Fund Development of Climate-Friendly Grid Security and Resilience

The effort reflects a commitment to clean energy while aiming to mitigate supply-chain threats.

Cybersecurity

CISA Adds Industrial Control System Specialists to Joint Cyber Defense Collaborative

Companies in the space are trying to shape public policy and push for money agencies can use to—among other things—track their devices and other assets.

Cybersecurity

CISA Seeks Comment on Visibility Effort Being Piloted with Cloud Service Providers

The agency is starting to spend the $690 million it got through the American Rescue Act to monitor security and respond to incidents across federal civilian networks.

Cybersecurity

Lawmakers Weighing Critical Infrastructure Designation for Major Cloud Service Providers

Rep. Jim Langevin and others are working on bipartisan legislation to be introduced this summer that truly reflects the Solarium Commission’s agreement on benefits and burdens for systemically important private-sector entities.

Cybersecurity

What CISA Wants Critical Infrastructure Partners to Report on Cyber Incidents

A new guide provides clues into how the agency might be thinking of crucial details, such as what should count as an “incident” under a new law.

Cybersecurity

Industry Groups Butt Heads on SEC’s Incident Reporting Rules

A major trade association for relevant financial-sector entities is asking the regulatory agency to hold off in favor of incident reporting rules being implemented at the non-regulatory Cybersecurity and Infrastructure Security Agency.

Cybersecurity

Joint Alert Warns Advanced Hackers Have Developed Tool Targeting Industrial Control Systems

The design of the tool, which allows full system access to certain operational technology in environments such as power plants and water treatment facilities, can also be used by less sophisticated attackers.

Cybersecurity

FCC Chair Claims Cybersecurity Role Congress Crafted for CISA

The commission is joining the fray in a budding turf fight at the Cybersecurity and Infrastructure Security Agency that also involves sector risk management agencies like the Department of Energy.

Cybersecurity

GAO Promotes Need for Public-Private ‘Partnerships’ in Cybersecurity Policy

A Government Accountability Office official says the watchdog agency consulted with private sector entities in producing a report of 12 areas it’s planning to focus on in the next decade.