SolarWinds breach

• TIC 3.0, format preserving encryption of data gives agencies hope against cyber attacks

  John Fanguy, the federal chief technology officer for cybersecurity at Micro Focus Government Solutions, said agencies can prepare for the next cyber attack and ensure their missions are resilient by taking several important steps, starting with implementing Trusted Internet Connections (TIC) 3.0.

  Innovation in Government

  May 07, 2021
• Warner says Senate committee working on bill to require mandatory reporting for cyber threats

  The legislation would grant limited immunity to give companies an incentive to report, and require these disclosures to anonymize personally identifiable information. Warner said these disclosures would provide an “early warning system” across government and private-sector owners of critical infrastructure.

  Cybersecurity

  April 30, 2021
• Federal IT acquisition and security stuck on High Risk List

  Kevin Walsh, a director on the Government Accountability Office's IT and cybersecurity team, had the latest on GAO's High Risk List on Federal Drive with Tom Temin. 

  Acquisition

  April 28, 2021
• Pentagon believes it escaped unscathed from SolarWinds, Microsoft hacks

  Although vulnerabilities stemming from both companies software were present on hundreds of DoD systems, officials say there's no evidence that cyber adversaries actually exploited them.

  Cybersecurity

  April 15, 2021
• SolarWinds attack and the importance of a risk-based approach to cybersecurity

  The threats will only become more sophisticated, multifaceted, and well-orchestrated. Organizations must do the same with their security postures.

  Commentary

  April 01, 2021
• Acronis SCS: Helping your agency protect its data

  Neil Proctor, vice president of Engineering R&D at Acronis SCS, joins host John Gilroy on this week's Federal Tech Talk to discuss how his company can help a federal agency accomplish the goal of resiliency.

  Federal Tech Talk

  March 22, 2021
• Congress gives four agencies 10 days to report on SolarWinds damage

  In today's Federal Newscast, Congress is asking four agencies about SolarWinds-sustained damage and more.

  Federal Newscast

  March 19, 2021
• CISA’s four-part plan to spend $650M on cyber protections

  House Appropriations Subcommittee on Homeland Security members questioned CISA leaders about plans to improve federal cybersecurity efforts.

  Cybersecurity

  March 11, 2021
• SolarWinds fallout sparks calls for mandatory incident reporting, repercussions after cyber attacks

  In the wake of the SolarWinds breach, the Senate Intelligence Committee turned to industry for recommendations on how to ensure that kind of incident doesn’t happen again.

  Cybersecurity

  February 24, 2021
• Agencies ‘building back better’ after SolarWinds breach, top Biden cyber official says

  Anne Neuberger, the administration’s deputy national security advisor for cybersecurity and emerging technology, said in a White House press briefing that the breach compromised the networks of nine agencies and about 100 private-sector companies.

  Cybersecurity

  February 18, 2021
• Experts laud SolarWinds post-attack efforts, but why’d it take a massive cyber incident to make changes?

  SolarWinds officials are trying to make their case to agencies that they are creating more rigor and security in their development and testing processes.

  Reporter's Notebook

  February 09, 2021
• Can the SolarWinds incident spur more action, less talk about supply chain security?

  NIST will finalize new publication NISTIR 8276 that will include eight key principles for protecting IT supply chains and release the draft to update SP 800-161, which will includes specific steps for agencies.

  Reporter's Notebook

  January 25, 2021
• As cloud use grows, agencies must refocus cyber efforts on network detection, response

  Brian Varine, the associate director of Guidehouse Advanced Cyber Solutions, said the SolarWinds breach highlighted gaps in agency cyber environments both from an operational and a visibility perspective.

  Federal Insights

  January 15, 2021
• Can agencies comply with CISA’s demands?

  Federal agencies - and there are several of them at least - affected by the SolarWinds cybersecurity fiasco are under a new deadline.

  Cybersecurity

  January 14, 2021