Cybersecurity

Congressman floats 'FITARA-like' scorecard to measure security clearance process

A significant reduction in the backlog of security clearance investigations over the past two years has contractors feeling more optimistic, but concerns about lengthy adjudications and reciprocity between federal agencies still linger.

Ideas

Keeping Up with Compliance in the Digital Age 

Late adopters to the Homeland Security Department’s Continuous Diagnostics and Mitigation program can still benefit.

Cybersecurity

Schumer to TSA: Delete your (TikTok) account

The Pentagon and the Department of Homeland Security, TSA's parent agency, have already banned the video-sharing app from federally owned devices, citing risks associated with TikTok's Chinese ownership.

Cybersecurity

Industry: Include Agencies’ Approval of Cloud Service Providers in FISMA Metrics

GSA is working to measure timeline for agencies getting through the FedRAMP process, according to an official.

Digital Government

NIST Expects to Create Privacy Guidelines for Smaller Organizations

National Institute of Standards and Technology Director Walter Copan offered insights in how the agency’s privacy framework came together and its future.

Cybersecurity

DISA Confirms Data Breach Affecting 200,000 People

Defense officials provided few details but said the affected systems have since been secured.

Cybersecurity

Presidential Advisers Set Timeline for Report on Options to Secure 5G Networks

Officials reaffirmed the administration’s view that software-defined networking is the best way to secure next-gen telecommunications.

Cybersecurity

MITRE Piloting Evaluations to Validate Cybersecurity Firms’ Protection Claims 

The group will assess which firms can best detect and defend from adversaries that target banking transfers and ATMs.

Cybersecurity

TIC 3.0 and zero-trust networking

Commentators on the new Trusted Internet Connection policy have noted that "zero-trust" strategies might not be a perfect fit.

Cybersecurity

House Subcommittee Knocking at Amazon’s Door Over Ring Data

The chairman of a House Oversight panel wants a briefing with Amazon officials about the consumer security tool.

Cybersecurity

Navy 2021 budget shows IT, cyber adjustments

The Navy has realigned cyber spending into a new category that includes the Joint Regional Security Stacks program.

Cybersecurity

TSA to roll out strategic plan for insider threats next month

Acting Deputy TSA Administrator Patricia Cogswell said that as screening tech has improved, insider threats have become an increasingly attractive attack vector for bad actors.

Cybersecurity

CISA Shares Details About Ransomware that Shut Down Pipeline Operator

One cybersecurity firm links the incident to a December attack on the Coast Guard.

Digital Government

One Month Out, Watchdog Warns About Census IT and Cybersecurity Challenges

The Census Bureau this month switched the internet response system that respondents will use to complete the 2020 census questionnaire. The last-minute change worries the Government Accountability Office.

Emerging Tech

Border Patrol Needs Automated Sensors to Cover Watery Blindspots

Homeland Security is looking for a technical solution to give border agents situational awareness about illegal watercraft and the potential risks of interdiction.

Cybersecurity

Air Force touts Digital U tech reskilling effort

Micro-credentialing and new data projects are being used to reward airmen, the Air Force's deputy CIO says.

Modernization

TIC 3 Commenters Put Faith in Zero Trust over CISA’s Trust Zones

The draft policy creates a new framework for secure network boundaries at a time when the tech sector is moving away from boundaries altogether. 

Cybersecurity

DHS waives contracting rules for border wall

Acting Secretary Chad Wolf announced plans to use special authority to build sections of the planned border wall without the use of competitive bidding.

Ideas

To Protect Data, Organizations Must Stop Being ‘Cloud Dumb’

The first thing executives need to understand is that the cloud providers aren’t responsible for protecting data.

Cybersecurity

CISA, FBI and DOD Issue Warning on North Korea-Linked Malware

New threat variants allow Hidden Cobra to remotely access and control systems—and banks should look sharp.