No agencies are known to have been compromised yet, but they have until Dec. 24 to use available patches for the "Log4J" vulnerability.
Michael Speca, president of Ardalyst, joins host John Gilroy on this week's Federal Tech Talk to give us an update on the CMMC initiative from the Department of Defense.
The review found concerns over compliance, cost, reciprocity and more, issues that aren't going away as the Pentagon overhauls the program.
In today's Federal Newscast, the Cybersecurity and Infrastructure Security Agency has new guidance for how to secure agencies' Twitter, Instagram and other social media accounts.
Bill Wright is the senior director of North American Government Affairs at Splunk, joins host John Gilroy on this week's Federal Tech Talk to discuss how his company can help federal technology leaders need to ingest, monitor, analyze and search their agency's data.
The Cybersecurity and Infrastructure Security Agency has the task of helping industry ensure resilience. But the Government Accountability Office said the agency should do a little more navel-gazing.
Modernization can be a great thing, but government agencies must understand how these initiatives can expand an organization’s threat surface and leave solutions, once thought to be highly secure, vulnerable.
Cyber incident reporting requirements for critical infrastructure companies and other federal cybersecurity provisions were left out of this year's NDAA.
The Office of Management and Budget released the annual Federal Information Security Management Act (FISMA) guidance with a focus on risk-based, data-drive decisions.
DHS is setting minimum cybersecurity standards for critical companies in the transportation sector, with potentially more requirements on the way.
As government agencies shift to the zero trust model to combat evolving cyber threats, a primary focus should be on removing data silos
John Simms, the deputy branch chief of the Cybersecurity Assurance Branch in CISA, said all the guidance is helping agencies shift their cyber thinking away from the network and closer to the data.
The ransomware threat has spooked nearly everyone. A big unknown is how vulnerable your organization actually is to ransomware attacks.
The advisor positions were created two years ago, but they're just now starting to make their mark on the military services' cyberspace budgets and force designs.
Computer World Services Corp. prevailed in its protest of NITAAC’s CIO-SP4 solicitation after arguing that certain past performance requirements were restrictive and unfair.