The Department of Homeland Security has developed a service designed to hire and manage cybersecurity professionals outside traditional civil service requirements. The DHS Cybersecurity Service is part of the Cyber Talent Management System, which seeks to address the department’s “historical and ongoing challenges” in hiring and retaining professionals with the necessary skills to assist the […]
Jen Easterly, the new director of the Cybersecurity and Infrastructure Security Agency, wants to be more proactive in dealing with cyber incidents and break the cycle of cleaning up after big hacks. Easterly, who recently spoke with CyberScoop, expressed disappointment in the reactive approach to cyber intrusions, arguing that federal and private sector organizations are […]
The U.S. Cybersecurity and Infrastructure Security Agency has expanded its technological cooperation with Singapore’s Cyber Security Agency. CISA Director Jen Easterly and CSA Chief Executive David Koh signed a memorandum of understanding to collaborate on critical technologies and research and development. The memorandum also strengthens information sharing, international cybersecurity exchanges and cooperation through joint exercises, […]
The U.S. Agency for International Development has been asked by its inspector general to improve its ways of handling personally identifiable information. In an audit published earlier this month, the IG identified various failures, including the reliance of USAID on outdated data loss procedures and insufficient role-based privacy training. The oversight body also took note […]
Matt Travis, CEO of the Cybersecurity Maturity Model Certification Accreditation Body, said training and IT access to the Department of Defense Enterprise Mission Assurance Support Service application needs to be finalized before CMMC third-party organizations can perform cyber assessments. Travis, previously the deputy director of the Cybersecurity and Infrastructure Security Agency, said the CMMC-AB and […]
The Cybersecurity and Infrastructure Security Agency has issued a request for information in support of the 2021 President’s Cup Cybersecurity Competition. CISA is looking for contractors that can provide support services to the PCCC national event aimed at identifying, challenging and rewarding the best cybersecurity talent in the federal workforce based on the elements of […]
The Cybersecurity and Infrastructure Security Agency has released new guidance to help organizations protect sensitive and personal information from ransomware-caused data breaches. The guidance recognizes the shift in ransomware tactics, with malicious actors abandoning their previous passive approach of rendering devices unusable until the ransom is paid. Now, attackers threaten to sell or leak sensitive […]
The Federal Deposit Insurance Corporation does not have adequate security authorizations for a tool designed to create secure, temporary Wi-Fi networks, according to the agency’s inspector general. In a memorandum released Tuesday, the IG cited “Concerns Related to the FDIC’s Pending Authorization to Operate Its External Wireless Network Solution Cloud Service,” emphasizing that the wireless […]
The Census Bureau could have done better in mitigating a cybersecurity incident that affected its servers in January 2020, according to a federal auditor. Hackers targetted the bureau’s remote access servers, which staffers use to access production, development and lab networks. System personnel said the servers are not linked to the ones used for the […]
The National Institute of Standards and Technology considers President Joe Biden’s cyber executive order as a “necessary shock to the system” to drive network security efforts. The EO, released in May, requires agencies to enact Biden’s plan to revamp the federal government’s cybersecurity under timelines as short as within 30 days after the order’s signing. […]
