Auditors from accounting firm KPMG have spotted 45 control deficiencies and other issues with the Department of Labor’s information security and continuous monitoring controls. According to KPMG’s Labor Department audit for the fiscal year 2021, the issues are related to the department’s cybersecurity function maturity levels. Using the CyberScope web-based tool, auditors tested security controls […]
The Cybersecurity and Infrastructure Security Agency has added eight new entries to its list of known exploited cybersecurity vulnerabilities. Government agencies are required to patch the software flaws in accordance with Binding Operations Directive 22-01, which legally compels agencies to protect government information and information systems, CISA said. The agency issued the binding operational directive […]
The National Academy of Public Administration has recommended putting the White House’s newly established Office of the National Cyber Director in charge of expanding the cybersecurity workforce. Congress confirmed Chris Inglis as the first national cyber director in 2021, tasking him with leading the government’s response to cybersecurity threats and execution of critical cyber policy […]
The Department of Defense is not training its cybersecurity workforce to a degree that is commensurate with the sophistication of its cyber technologies, a top weapons testing official said in an annual report. “There is no cyber defense without cyber defenders,” the Office of the Director, Operational Test and Evaluation said. The department should account […]
The Federal Communications Commission has disallowed China Unicom Americas from providing telecommunications services across the U.S. due to data security concerns. FCC Chairwoman Jessica Rosenworcel said during a committee meeting that it revoked China Unicom’s permit to operate pursuant to the organization’s Section 214 authority, which focuses on carriers providing international services. The same laws […]
IBM will continue its ongoing information-sharing partnership with the Cybersecurity and Infrastructure Security Agency as an Alliance Partner in the Joint Cyber Defense Collaborative. CISA launched the collaboration with private industry to establish a collective and coordinated defense against cybercrime, IBM said Thursday. In a statement, the American computer hardware company said that in recent […]
The White House’s Office of Management and Budget has released a memorandum requiring government agencies to meet certain cybersecurity goals by fiscal year 2024. The federal zero trust architecture strategy was developed in response to the increasing sophistication of the cyber threats faced by the government, OMB acting Director Shalanda Young said in the memo […]
The National Institute of Standards and Technology told journalists that it has issued its newest and final copy of guidance for organizations to assess their internal security information technology systems, following a draft copy and comment period. Titled “Assessing Security and Privacy Controls in Information Systems and Organizations,” the document focuses on helping entities manage […]
The Air Force’s 837th Cyberspace Operations Squadron recently lent its expertise in cloud defense to improve the skills of international partners and the other services. The squadron conducted a cyber exercise in a cloud-based simulation where operators had to protect the medical data of fictional citizens from malicious attacks, C4ISRNET reported Friday. Cyber Dome, a […]
The Department of Homeland Security warned against possible Russian cyberattacks against the U.S. as tensions grow at the Russia-Ukraine border. According to a DHS bulletin, Moscow could execute a cyberattack if it believes that a U.S. or NATO response would threaten its national security. The announcement also noted that the Kremlin has several cyber offensive […]
