Cybersecurity

NIST releases revised cyber requirements for controlled unclassified information

The proposed revisions will ideally serve as a “balanced, strong starting point” for agencies and contractors that deal with sensitive information, a NIST official said.

Artificial Intelligence

Commerce launches new safe AI center

The National Institute of Standards and Technology is slated to helm many of the new AI executive order’s guidance documents for safe and responsible development.

Artificial Intelligence

NIST plans new risk evaluation methods and standards tracking for AI

The associate director for emerging technology at the National Institute of Standards and Technology said the evaluations are designed to identify potential harms from AI systems before they are deployed.

Cybersecurity

NIST to issue cyber updates, introduce new security controls

The changes, which are open to public comment, focus on user identity management and protecting cryptographic keys, among other security protocols.

Emerging Tech

NIST releases draft standards for 3 post-quantum encryption algorithms

The National Institute of Standards and Technology wants feedback on its draft standardization guidelines as the agency ushers in post-quantum cryptographic migration.

Emerging Tech

New post-quantum cryptography guidance offers first steps toward migration

Several agencies partnered to release the first federal recommendations for organizations to begin upgrading their networks and systems to quantum cryptography-resilient security schemes. 

Cybersecurity

Updated NIST cyber framework focuses on on governance

The National Institute of Standards and Technology is seeking public feedback on its revamped Cybersecurity Framework, which includes guidance on operationalizing cyber best practices.

Acquisition

IOT cyber rule covering federal buyers about to take effect

A December deadline looms for agencies to implement cybersecurity requirements for Internet of Things devices.

Cybersecurity

NIST on tap to improve cybersecurity of water systems

The National Institute of Standards and Technology (NIST) hopes a new project will create a set of best practices to help the nation’s complex water and wastewater systems bolster their cybersecurity posture.

Cybersecurity

White House preps security controls for commercial software acquisition

The administration is attempting to leverage the procurement powers of the federal government to bolster software cybersecurity for the first time.

Cybersecurity

Are software bills of materials ready for prime time?

There's legislation afoot to require SBOMs in government procurement and industry is pushing back.

Cybersecurity

NIST promotes testbed to address threats targeting ML systems

Dioptra, an experimentation testbed fielded by the National Institute of Standards and Technology, allows researchers to better understand the techniques that can help protect their products and systems against an increasing number of attacks targeting machine learning algorithms.

Cybersecurity

NIST defines 'critical software' under the cyber EO

The National Institute of Standards and Technology's new definition of "critical software" is foundational to new federal efforts to exert more control over the code supply chain.

Digital Government

NIST framework focuses on election cybersecurity

The new draft framework combining election security and cybersecurity is the first of its kind for NIST.

Cybersecurity

What cyber risks will Biden's supply chain EO uncover?

The administration has ordered a wide-ranging assessment of the risks to manufacturing and technology supply chains. Analysts, former government officials and industry say a large workforce gap and problematic frameworks are among the threats cybersecurity poses to the country's supply chains.

Cybersecurity

Under new law, NIST looks to map out vulnerability disclosure policies for government

Lawmakers in December tasked NIST with to developing processes that would ensure software vulnerability reports flow to the appropriate government offices and the issues are promptly fixed.

Cybersecurity

NIST offers tools to defend against nation state cyber threats

The National Institute of Standards and Technology cites a 2018 hack of a Navy contractor as inspiration for a new publication on cyber defense, but security analysts say the tools are just as relevant to SolarWinds Orion.

Acquisition

IoT cyber law signed amid growing vulnerabilities

The passage of the IoT Cybersecurity Improvement Act of 2020 means that NIST will start to address the gap in post-market guidance to help organizations adequately address newly discovered vulnerabilities in devices already on their networks.

Acquisition

Senate passes IoT cybersecurity bill

The legislation mandates minimum security requirements on internet of things devices bought by the federal government.

Cybersecurity

House votes for new rules on federal IOT acquisition

Legislation from congressional tech stalwarts would add security requirements for connected devices purchased by the federal government.