Cybersecurity

CMMC board's training lead resigns

Ben Tchoubineh, the CMMC accreditation body's chair for training and CMMC board member Nicole Dean, the chief information security officer for Accenture, have voluntarily resigned, FCW has learned.

Cybersecurity

CISA: No Federal Agencies Compromised Through Microsoft Exchange Servers

Investigations remain ongoing, Cybersecurity and Infrastructure Security Agency leaders said at a hearing on modernizing the federal government’s approach to cybersecurity.

Cybersecurity

Defense Task Force Will Focus on Legislative Solutions for Supply Chain Chokepoints

Reps. Elissa Slotkin, D-Mich., and Mike Gallagher, R-Wisc., are leading the three-month task force.

Cybersecurity

House passes Rescue package with TMF funding

The $1.9 trillion bill is aimed at Americans suffering financial hardships from the pandemic, but in the federal IT community, the bill will be remembered for the dramatic expansion of the Technology Modernization Fund.

Cybersecurity

Bill Would Eliminate Immunity for Foreign Hackers

The Homeland and Cyber Threat Act would amend the Foreign Sovereign Immunities Act to give Americans legal recourse for damages caused by foreign hackers.

Cybersecurity

CISA: No federal agencies compromised by Exchange hack so far

Two seniors officials at the Cybersecurity and Infrastructure Security Agency told House lawmakers today the attacks in recent months demonstrate the fact the federal government "must raise our game" in cybersecurity.

Cybersecurity

Splitting NSA, CyberCom Now Could Reduce Military Access to Intelligence, Milley Says

The Joint Chiefs chairman says the organizations have not yet worked out how to keep the data flowing after the long-awaited split.

Cybersecurity

Pentagon issues cyber tasking order in response to Exchange hack

The Pentagon's new order to its agencies and commands aligns with the recent emergency directive issued by the Cybersecurity and Infrastructure Security Agency.

Cybersecurity

Cybersecurity Agency Takes Over Management of .Gov Domain

The official domain for .gov websites shifted from the government’s landlord to the government’s central cybersecurity shop.

Cybersecurity

Air Force Only Service to Develop Cybersecurity Requirements for Weapon Systems Contracts, GAO Says

The audit found the Defense Department has improved weapon systems cybersecurity in recent years, but detailed requirements must make it into contracts.

Cybersecurity

Hafnium hack poses new long-term threat for already overtaxed cyber workers

Federal agencies still reeling from the effects of a massive hack involving SolarWinds may face a new challenge of evicting any adversaries that breached their networks through recently discovered vulnerabilities in Microsoft's Exchange software.

Modernization

Justice Department Warns of Fake Unemployment Benefit Websites

It’s one more issue for jobless Americans and state workforce agencies to be concerned about.

Cybersecurity

House Armed Services Chair Calls for Focus on Information Systems Over Arbitrary Metrics

Rep. Adam Smith, D-Wash., suggested a 500-ship Navy is inadequate if adversaries are able to disrupt command and control systems.

Cybersecurity

Vague contract language hampers cybersecurity for weapons systems, GAO says

The Government Accountability Office found that missing or vague cybersecurity requirements in acquisitions contracts for weapons systems often led to DOD getting a system that didn't meet its security needs.

Ideas

Debunking Three Myths about Hardware Security

The federal government should consider hardware-enabled security approaches.

Digital Government

9 Government Tech Trends That Mattered in 2020

The federal government turned to technology during an unprecedented 2020 marked by the COVID-19 pandemic.

Cybersecurity

Why the network compass is obsolete

Old labels for network traffic are out of date with government users connecting from devices outside traditional perimeters, but TIC 3.0 offers a new map.

Cybersecurity

White House Is Developing a Plan to Secure Industrial Control Systems

An upcoming executive order in response to the hacking campaign that involved SolarWinds will include standards to improve software transparency.

Cybersecurity

DHS Wants Help Restructuring Pay and Bonuses for Cybersecurity Pros

The agency is looking for a vendor to help lay out a plan to recruit and retain top talent needed to meet its cybersecurity missions.

Ideas

It’s Time for a Cybersecurity Quid Pro Quo

Require companies to disclose breaches to the government in exchange for legal liability limitations.