Even though 90 percent of cybersecurity threats are coming through email only a fraction of security budget are dedicated to securing email.
Current analysis shows about 60 percent of federal agencies are compliant with BOD 18-01 DMARC requirements one year after the directive was issued.
Russian cyber experts appear to be omni-hackers; they’re willing to target both Republicans and Democrats. Conservative think tanks are the latest targets.
With less than two months before the Homeland Security Department’s Oct. 16 deadline, the number of agency domains still not using the DMARC protocol is more than 200.
Federal agencies are under orders to configure their email systems to the domain message authentication and reporting conformance DMARC standard.
OMB’s 2017 FISMA report to Congress highlighted several areas where agencies have improved the security of their data and networks.
The Domain-Based Message Authentication, Reporting and Conformance standard (DMARC) is designed to lower the risk of phishing attacks.
As National Cybersecurity Assessment and Technology Services lead at the Homeland Security Department’s National Protection and Programs Directorate, Cameron Dixon has been close to the six Binding Operational Directives coming from DHS in recent years.
It may not be a household word, but a set of standards called DMARC can really improve email security by cutting out the possibility of fakery.
For Sean Lang, chief information security officer for the Library of Congress, email security is both an internal and external matter.