Cybersecurity

Private Sector Player Urges DOD to Screen 5G Technology for Cybersecurity

The Pentagon is offering cash prizes for hardware or software ideas to make various components of fifth-generation networking technology interoperable across various manufacturers.

Cybersecurity

Partisan Rift Stalls Efforts to Secure Critical Infrastructure from Cyberattack

U.S. Cybersecurity Policy heads back to square one as a public-private bargain that emerged from the Congressionally mandated Solarium Commission breaks down.

Cybersecurity

White House Asserts Micromanagement Critique Was About a Previous Administration

Debate is heating up over the role of sector-risk management agencies in shoring up security of the nation’s critical infrastructure.

Podcasts

Critical Update: The Call for Greater Software Transparency is Louder than Ever

Agencies will soon be required to ask vendors for a software bill of materials—or SBOM—to help manage vulnerabilities like those found in the Log4J library, but much of its contents could still be open to negotiation.

Acquisition

Google surveys feds in fight with Microsoft for government market

The survey report tried to associate heavy reliance on Microsoft’s products with greater susceptibility to cyberattacks.

Cybersecurity

Google Surveys Federal Employees in Fight with Microsoft for Government Market

The survey report tried to associate heavy reliance on Microsoft’s products with greater susceptibility to cyberattacks.

Cybersecurity

Key Lawmaker Defends SEC’s Cyber Incident Reporting Proposal 

Rep. Jim Langevin was responding to an industry assertion that the SEC proposal undercuts the will of Congress, given recently enacted legislation.

Cybersecurity

Treasury Wants to Know How the Government Might Grow Cyber Insurance Market

The department is in a bit of an awkward position, tasked with supporting the industry while cautioning against ransomware payouts.

Cybersecurity

6 Takeaways On Cybersecurity Policy from the President’s FY 2023 Budget

The administration expects CISA to grow by just under 300 full-time employees over the next year, for example.

Digital Government

Executive Order Coming to Facilitate European Input on U.S. Government Surveillance 

Major U.S. information technology companies are hoping to charm the European Union’s high court with a third attempt to clear their way in moving data across borders where laws governing privacy and data security have been fundamentally different.

Cybersecurity

CISA Director Details Growing Threat to Maritime Transportation Sector 

Cybersecurity professionals are noting the possibility of Russia reprising a watershed attack on the shipping industry to hit back against the U.S. economy.

Cybersecurity

White House Warns of Potential Russian Cyberattack Based on New Intel

Officials, distressed by the continued lack of cybersecurity basics implemented in the private sector, issued “a call to action.”

Cybersecurity

CISA, FBI Warn of Russian Threat to Satellite Networks

Organizations are asked to report incidents they might ordinarily consider inconsequential to the government.

Cybersecurity

Financial Regulator Says Use of Crypto Helps—not Hurts—Ransomware Investigations

Senators left and right are using the Colonial Pipeline hack and Russia’s invasion of Ukraine as reasons to both regulate and avoid regulating cryptocurrencies.

Cybersecurity

Cybersecurity Leader: Deterrence Policy for Hacks Can’t Mirror That for Nukes

The Cyberspace Solarium Commission emerged due to the late John McCain’s  frustration with current U.S. doctrine on what should trigger a “use of force.”

Cybersecurity

NIST Releases Guidance for Assessing Compliance with Core Cybersecurity Publication 

The document is targeted at auditors—internal and external to an organization—who are set to play a central role in cybersecurity policy under a May executive order and initiatives like the Pentagon’s Cybersecurity Maturity Model Certification program.

Cybersecurity

Senator Touts Liability Protections in Recently Passed Cyber Incident Reporting Bill 

Agencies designated for managing risk in particular sectors have work ahead of them to hammer out details with the Cybersecurity and Infrastructure Security Agency.

Cybersecurity

Outgoing Official Pushes for CISA Shift from Risk Advisor to Risk Reducer

After almost a decade and a series of massive intrusion campaigns, government and industry may finally be ready to have the crucial talk about cybersecurity metrics they’ve been avoiding.

Cybersecurity

Education's CISO Anticipates FedRAMP Evolution for ‘Zero-Trust’ Alignment

The Education Department’s Chief Information Security Officer co–chairs the Federal CISO Council, a channel for the administration’s implementation of Executive Order 14028.

Cybersecurity

Cyber-Incident Reporting Legislation Clears House in Bipartisan Spending Bill

The bill, attached to government funding legislation, now moves to the Senate, which recently passed the same incident reporting provisions separately by unanimous consent.