Cybersecurity
White House Memo Orders Agencies to Identify Critical Software
The memo follows up President Joe Biden’s executive order in May.
Cybersecurity
NIST Updates Cyber Resiliency Guide to Account for Increasingly Sophisticated Threats
Public feedback on the more than 200-page document will be considered in the near future.
Ideas
How the Energy Department Can Improve Cybersecurity in the Energy Industry
The Energy Department has an obligation to protect both public and private energy interests on critical infrastructure.
Cybersecurity
White House Asks CISA, NIST to Set Performance Goals for Critical Infrastructure Operators
The initiative will not result in mandatory measures for the private sector, but the administration hopes to signal its commitment to cybersecurity and maybe get a little help from Congress on that front.
Cybersecurity
TSA, Transportation Officials Give Insight into New Cybersecurity Mandates for Pipeline Operators
Agency leaders expressed a commitment to avoiding duplication of their efforts as lines blur between cyber and physical security.
Cybersecurity
Energy Updates Assessment Tool for Administration’s 100-Day Cybersecurity Sprint
The update comes as lawmakers jostle for jurisdiction over cybersecurity across multiple critical infrastructure sectors with a slew of bills advancing in both chambers of Congress.
Cybersecurity
Senators Promote Cybersecurity Measures in Core Bipartisan Infrastructure Framework
Congressional leaders of the Cyberspace Solarium Commission stressed a need to focus specifically on water treatment systems.
Cybersecurity
TSA’s New Cybersecurity Rules for Pipelines to Be Kept on Need-to-Know Basis
The details of a second set of security regulations will not be released publicly.
Cybersecurity
U.S., Russian Officials to Meet Following Kaseya Ransomware Attack
President Joe Biden also plans to meet with U.S. officials on measures to address ransomware.
Ideas
Colonial Pipeline Didn’t Have Multifactor Authentication in Place—And Most Defense Contractors Don’t Either
Most businesses don’t take cybersecurity seriously until it’s too late.
Cybersecurity
CISA Starts Cataloging Bad Practices in Cybersecurity
The agency plans to keep updating the narrow list based on feedback from cybersecurity professionals.
Emerging Tech
Feds Aim to Standardize Geographic Information Systems Across the 911 Landscape
A new solicitation offers a glimpse into the next generation of 911.
Cybersecurity
National Lab Recommends Energy Department Test Electric Utility Vendors for Cybersecurity
A broad spectrum of organizations are calling on regulators to improve suppliers instead of simply banning foreign companies.
Cybersecurity
White House Official Briefed State AGs on Private-Sector Role Battling Ransomware
The deputy national security advisor for cyber and emerging tech emphasized the responsibility of the private sector at home as President Biden prepares to work the White House strategy abroad.
Cybersecurity
Colonial Pipeline CEO: Cybersecurity Mandates From TSA Might Help
Hackers breached the company after gaining access to a virtual private network not protected by multifactor authentication.
Cybersecurity
Pipeline Companies Have One Week to Identify Cybersecurity Coordinators Under TSA Directive
The directive now mandates incident reporting and reviews described in the administration’s voluntary guidelines for the sector.
Cybersecurity
White House Advisers Consider Workforce Requirements for Critical Infrastructure Providers
The National Security Council asked the private-sector led National Infrastructure Advisory Council to focus a critical-infrastructure workforce study on cybersecurity and to speed delivery of its recommendations.
Cybersecurity
House Panel Passes Bill to Explore Bringing State and Local Cybersecurity Workers into CISA
The Homeland Security Committee cleared several bills to address cybersecurity following the attack on Colonial Pipeline.
Ideas
The Cybersecurity Executive Order Is a Missed Opportunity
This executive order is designed to strengthen federal cybersecurity, not that of the private sector, including critical infrastructure providers.
Cybersecurity