Cybersecurity

Outgoing Official Pushes for CISA Shift from Risk Advisor to Risk Reducer

After almost a decade and a series of massive intrusion campaigns, government and industry may finally be ready to have the crucial talk about cybersecurity metrics they’ve been avoiding.

Cybersecurity

Education's CISO Anticipates FedRAMP Evolution for ‘Zero-Trust’ Alignment

The Education Department’s Chief Information Security Officer co–chairs the Federal CISO Council, a channel for the administration’s implementation of Executive Order 14028.

Cybersecurity

Federal Agencies Lean On Multifactor Authentication As Key Security Component

Public sector officials discussed how strong identity verification technology plays a key role in supporting agency collaboration and data protections. 

Cybersecurity

Cyber-Incident Reporting Legislation Clears House in Bipartisan Spending Bill

The bill, attached to government funding legislation, now moves to the Senate, which recently passed the same incident reporting provisions separately by unanimous consent.

Cybersecurity

SEC proposes mandatory breach reporting for publicly traded companies

The Securities and Exchange Commission is proposing new rules requiring companies to disclose to investors material cybersecurity incidents within four business days.

Cybersecurity

House Committee Approves Cybersecurity Training Bill 

The legislation advances in the House after clearing the Senate in March, and would offer new cybersecurity training to federal and state governments.

Cybersecurity

CISA Warns of Ransomware Gang, Issues Indicators of Compromise

Processes spurring from the Ragnar Locker Ransomware have affected at least 52 critical infrastructure victims since January, but will terminate if it encounters systems in certain Russian and near-Russian locations.

Cybersecurity

White House reminds agencies to adopt NIST's software supply chain security framework

The Office of Management and Budget pressed federal agencies on a deadline to adopt the software supply chain best practices as directed under last year's White House cybersecurity executive order.

Cybersecurity

U.S.-Spain Summit Aims to Promote Tech Advancement in Nations That Don't 'Diminish Freedom’

The first U.S.-Spain Cybersecurity Seminar emphasized a transatlantic partnership against cybercrimes, set against Russia’s invasion of Ukraine. 

Podcasts

Critical Update: Flashback to the Government’s Cloud Anxiety, Even Before SolarWinds

Re-writing the law for agencies to procure more secure cloud services is now mandated by executive order.

Cybersecurity

The Federal CISO's Approach to Cybersecurity in a Post–SolarWinds World   

The federal chief information security officer is moving ahead with congressional priorities for the .gov enterprise, as lawmakers fail to pass bipartisan incident reporting legislation and other changes to the Federal Information Security Modernization Act.

Cybersecurity

Insurance Policies May Tighten Amid U.S.-Russia Tensions, Cyber Pros Warn

What a recent court decision means for insurers’ attempts to avoid payouts associated with “acts of war” and breaches where nation-state actors may have played a role.

Ideas

The Ukrainian War Could Usher in Quantum Arms Race

Just as nuclear weapons remain a threat in the physical space, quantum-powered capabilities could become a threat in cyberspace.

Cybersecurity

Putin Lost the Digital War Abroad. Will He Lose at Home?

Its diplomatic efforts in tatters, its agencies beset by cyber vigilantes, the Russian government is still choking off the information that fuels its homegrown protest movement.

Cybersecurity

NSA Stresses Vendor Diversification in Guidance on Network Segmentation

Robust firewalls within and around a network are especially important in environments incorporating industrial control systems, which have been targeted in Russian state-sponsored operations.