Senate Report Highlights Agencies’ Inability to Protect Sensitive Data

The Senate Homeland Security and Governmental Affairs Committee has published a report highlighting federal agencies’ cybersecurity weaknesses, specifically their inability to protect sensitive information. The findings were drawn from 2020 audits conducted by inspectors general for the departments of Homeland Security, State, Transportation, Housing and Urban Development, Agriculture, Health and Human Services, Education and the […]
Posted on by Adrian Rosenberg

CISA Launches Vulnerability Disclosure Policy Platform for Civilian Agencies

The Cybersecurity and Infrastructure Security Agency has released its Vulnerability Disclosure Policy Platform for federal civilian agencies. CISA said the VDP Platform serves as a centrally managed online website that government agencies can use to list systems covered by their vulnerability disclosure policies. Security researchers and members of the public may analyze the items listed […]
Posted on by Robert Johnson

Biden Administration Pushes for Cybersecurity Baselines in Critical Infrastructure Sectors

The White House has released a memo pushing government agencies and the private sector to enhance critical infrastructure cybersecurity. President Joe Biden directed the Department of Homeland Security to work with the National Institute of Standards and Technology to establish baseline cybersecurity goals and practices for critical infrastructure operators. According to the White House, such […]
Posted on by Robert Johnson

DOJ Officials Push for Approval of Cyber Incident Reporting Law

Top officials from the Department of Justice have urged lawmakers to pass legislation requiring companies to notify federal authorities of data breach incidents, including ransomware attacks. Richard Downing, deputy assistant attorney general for the DOJ’s criminal division, told the Senate Judiciary committee that the lack of prompt cyber incident reporting hinders the federal government from […]
Posted on by Adrian Rosenberg

TSA Head Explains Cybersecurity Directive for Pipeline Operators

One of the Transportation Security Agency’s recent directives required pipeline operators to adopt cybersecurity best practices, the agency’s top official said. TSA Administrator David Pekoske said that while the directive provides some flexibility to operators, it also enforces a cybersecurity mandate for most critical pipeline systems, Nextgov reported Tuesday. “The whole idea behind the second […]
Posted on by Robert Johnson

Senators Seek Oversight, Public-Private Partnerships in Information Warfare Push

The Senate Armed Services Committee is adding new provisions to the annual defense policy bill to allow for greater oversight of the Department of Defense’s information warfare enterprise. Senators are currently focusing on all aspects of the program, including cyber, electromagnetic spectrum operations and information operations, a committee document revealed. A recently-released summary of the […]
Posted on by Michael Hill