The guide provides recommendations throughout the product lifecycle, from procurement to deployment. Several agencies published the last part in a series about securing the software supply chain, this...
Federal agencies’ implementation of NIST’s guidelines on the issue—under direction from Congress—is coinciding with industry resistance to the comprehensive approach stakeholders agree is necessary. As federal...
Officials from CISA and DARPA spoke about their initiatives to support cybersecurity operations across critical infrastructure networks. A Wednesday meeting of the President’s Council of Advisors...
U.S. and Italian officials convened the 2022 Cyber Defence Pledge Conference, focused on supporting Ukraine and investing in new technology for all member nations. U.S. and...
Federal agencies are under a binding operational directive to address exploitable security vulnerabilities in their software, but the success of CISA’s effort relies on the cooperation...
New guidance from the federal agencies—and major companies serving the government—tries to distinguish between the security duties of software developers, suppliers and consumers. Software suppliers have...
The notice of proposed rulemaking would require emergency alert system participants to disclose cyber breaches within 72 hours of discovery. The Federal Communications Commission recently voted...
Influence from major industry threatens once again to thwart lawmakers’ attempts to realize their policymaking goals through the annual defense authorization bill. The most ambitious recommendations...
The agency has promised to measure the success of efforts to steer major software providers toward the inclusion of logging and other basic security features in...
NIST advisors debating the merits of OMB’s policy on software vendors’ “self-attestation” to secure development practices found common ground on a need for audits and testing....
Recent Comments