The Department of Defense needs to find a way to bring foreign vendors into the Cybersecurity Maturity Model Certification program as the agency looks to implement the requirement in all contracts by 2023. Stacy Bostjanick, chief of defense industrial base cybersecurity and deputy chief information officer for cybersecurity at the DOD, said during a PreVeil […]
Brett Baker, inspector general for the U.S. Archives and Records Administration, did not agree with the Office of Management and Budget’s memorandum that introduces a self-attestation security policy for software purchased by federal agencies. Baker, a member of the National Institute of Standards and Technology’s Information Security Privacy Advisory Board, believes agencies should not rely […]
Zetra Batiste, the enterprise chief information security officer for cybersecurity supply chain risk management at the Department of State, spoke with Federal News Network about government efforts to kickstart the use of software bills of materials, which are records of program components and their sources and dependencies. The State Department is in the process of […]
The White House has expanded the Industrial Control Systems Cybersecurity Initiative to include the chemical sector. Under the expanded effort, the Cybersecurity and Infrastructure Security Agency worked with chemical companies to create the Chemical Action Plan, which promotes higher cybersecurity standards across the industry. The Chemical Action Plan will focus on facilities that present chemical […]
Companies that participate in public alert systems, including broadcasters and cable providers, must report unauthorized access to their emergency alert system equipment within 72 hours under the latest rules proposed by the Federal Communications Commission. The FCC issued a notice of proposed rulemaking after the Federal Emergency Management Agency discovered during the DEF CON hacking […]
Kiran Ahuja, the director of the Office of Personnel Management, revealed in an email to FCW that multiple federal agencies have proposed a special salary rate that would “unify” and raise wages for information technology management personnel, particularly for those in entry-level positions. She added that OPM has not set a deadline for a decision, […]
The Department of Homeland Security has added the Forward Enterprise platform to the Continuous Diagnostics and Mitigation program’s Approved Products List. Forward Networks’ offering was authorized for functional capabilities in the management of assets, network security and data protection, including incident response, ongoing authorization and data breach mitigation. According to Zack Zimmerman, the company’s government […]
The commissioner of the General Services Acquisition‘s Federal Acquisition Service said the federal IT community must focus on identifying critical software components as it works to address supply chain risks. Speaking at the ACT-IAC’s Imagine Nation ELC event, Sonny Hashmi said organizations must work to identify code that may impact national security even as the […]
The Cybersecurity Assessor and Instructor Certification Organization has launched an exam designed to assess the Cybersecurity Maturity Model Certification framework knowledge of qualified CMMC assessor candidates. CAICO put the Certified CMMC Professional exam under beta test from August to September to ensure exam items can verify whether candidates understand how the cybersecurity certification system should […]
The Department of Energy has posted a request for information for the Rural and Municipal Utility Advanced Cybersecurity Grant and Technical Assistance Program, a five-year initiative intended to direct $250 million in Bipartisan Infrastructure Law funds toward electric plants outside urban areas. Input is being sought from cybersecurity entities on incident readiness, response and information […]
