The Cybersecurity and Infrastructure Security Agency said it has concluded a three-day cyber exercise involving more than 2,000 participants across 200 organizations from the private and public sectors. Cyber Storm VIII saw participants respond to a simulated cybersecurity crisis affecting U.S. critical infrastructure. The exercise was intended to test the cybersecurity community’s preparedness, incident response […]
The National Institute of Standards and Technology has provided guidance on how agencies can evaluate how well they protect controlled unclassified information. According to NIST, controlled unclassified information can directly impact the federal government’s ability to conduct critical missions and functions. NIST’s new Special Publication 800-172A specifically includes steps for assessing the implementation of SP […]
The Cybersecurity and Infrastructure Security Agency wants federal organizations to be more proactive in enforcing multi-factor authentication, an expert from the agency said. Ross Foard, an information technology specialist with CISA’s Continuous Diagnostics and Mitigation program, said that the government is ahead of most industries in the requirement of multi-factor authentication, Nextgov reported. He said […]
Lauren Boas Hayes, senior adviser for technology and innovation at the Cybersecurity and Infrastructure Security Agency, said health care organizations must have better communication and threat sharing capabilities with the agency to improve the sector’s cyber posture. Speaking at the 2022 ViVE event, Boas Hayes said investing in cybersecurity for the health care system is […]
The Senate on Thursday passed a measure designating the Cybersecurity and Infrastructure Security Agency as the mandatory recipient of industry reports about major cyber incidents, while at the same time giving the agency a 22 percent budget increase over its 2021’s appropriation. The allocation of more power and financial resources to CISA was spurred by […]
The semiconductor shortage poses national security risks to the United States, a Department of Defense official told the House Intelligence Committee in a private session. Gen. Paul Nakasone, head of the U.S. Cyber Command and the National Security Agency, brought up the risks posed by the U.S. relying on other countries to manufacture its semiconductor […]
House lawmakers have passed a piece of legislation that would require private companies to report cybersecurity incidents to the Cybersecurity and Infrastructure Security Agency as part of an omnibus spending bill. Leaders from the House Homeland Security Committee said in a press release that reporting attacks to CISA would give the government a clearer picture […]
St. Mary’s University in San Antonio, Texas, announced that it has been designated as a National Center for Academic Excellence in Cyber Defense by the National Security Agency and the Department of Homeland Security. After a multi-year selection process, the two agencies applied the designation to validate institutions with a comprehensive and robust cybersecurity program, St. […]
The Federal Bureau of Investigation is pushing Congress to require critical infrastructure organizations to report cyber incidents to the bureau in a more timely fashion and create stronger liability protections for businesses. Commenting on the potential impact of the Cyber Incident Reporting Act, which was recently passed by the Senate, FBI Director Christopher Wray told […]
The White House’s Office of Management and Budget has directed agencies to implement the National Institute of Standards and Technology’s guidance on software security. NIST recently published an updated version of its Secure Software Development Framework, which is intended to address the lack of software development life cycle models that address security in detail. SSDF […]
