The proposed fiscal year 2023 National Defense Authorization Act contains provisions that require the Cybersecurity and Infrastructure Security Agency and National Security Agency to study a potential cyber information collaboration environment and report the findings to the armed services committees in Congress by Apr. 30, 2023. The NDAA called for a single platform for cybersecurity-related […]
The Cyber AB has authorized Raleigh, North Carolina-based accounting firm Cherry Bekaert as a CMMC third-party assessment organization. As a C3PAO, Cherry Bekaert will be allowed to assess Department of Defense contractors under the Joint Surveillance Voluntary Assessments program in partnership with the Defense Industrial Base Cybersecurity Assessment Center. The company can offer services to […]
Jen Easterly, director of the Cybersecurity and Infrastructure Security Agency, headed the fifth Cybersecurity Advisory Committee on Tuesday to formulate its strategic direction for 2023. The 2022 Wash100 awardee said that the group will continue to work toward building U.S. cyber resilience and addressing cyberspace challenges. According to Tom Fanning, chair of CSAC and chairman, […]
The Joint Authorization Board of the Federal Risk and Authorization Management Program has prioritized IronNet’s application for a provisional authority to operate at the high impact level, which would allow the company to deploy its Collective Defense platform to more federal agencies. Collective Defense, powered by Amazon Web Services, offers protection of sensitive, unclassified data […]
Lt. Gen. Robert Skinner, the director of the Defense Information Systems Agency, said Thursday at the 2022 Government Identity Security Virtual Summit that a study on the relationship between cybersecurity and user experience is underway. He explained that DISA aims to strike a balance between ease of data access and security requirements. The study is […]
The Department of Homeland Security’s Cyber Safety Review Board will review recent attacks that are linked to the global extortion-focused hacking group Lapsus$. According to the DHS, Lapsus$ used various techniques to bypass commonly used security controls and was able to infiltrate several companies worldwide. Following the investigations, CSRB will develop recommendations on how organizations […]
The collection of data by China and other countries through cyberattacks and other methods was among the concerns raised by senior U.S. military and civilian leaders during the Reagan National Defense Forum on Saturday. Avril Haines, director of national intelligence, said China may have access to data of U.S. citizens without their knowledge through the […]
The Department of Defense has awarded an Enterprise Software Initiative cybersecurity blanket purchase agreement to Appgate for the SDP platform, which is intended to provide zero trust network access capabilities from any device. Appgate SDP streamlines and secures access controls for federal agencies’ hybrid infrastructures and is compatible with software-as-a-service, DevSecOps, comply-to-connect and other frameworks. […]
The Federal Risk and Authorization Management Program has granted moderate authorization to the Zscaler Private Access cloud-based zero trust network access platform. ZPA is the latest cloud security service in the Zscaler Zero Trust Exchange portfolio that achieved FedRAMP designation. All core solutions in the Zero Trust Exchange platform are now authorized at high and […]
A report from a cybersecurity firm found that a majority of defense contractors are failing to meet the cybersecurity requirements set in the Defense Federal Acquisition Regulation Supplement. According to CyberSheath’s report, most of the defense contractors surveyed lack critical components to their cybersecurity infrastructures. Around 73 percent failed to implement an endpoint detection system […]
