Skip to content
Today
Sections

Topic

US Federal Cybersecurity Policy

The executive orders, standards and agency guidance that set security requirements for US government systems and the contractors that serve them.

Current stories

securityConfirmed3 publishers

OT coalition urges CISA to make every federal agency name an owner for OT security

OT Cybersecurity Coalition urges CISA to issue a binding directive requiring each federal agency to name an OT security owner and meet minimum practices. The push follows GAO's finding that most civilian agencies have not enacted OMB's 2023 IoT and OT requirements.

Publishers:cyberscoop.com infosecurity-magazine.com therecord.media

Perspective Coverage

3 publishers
Builder
Builder 22%
Operator
Operator 62%
Investor
Investor 16%

Reality

Evidence70
Adoption10
Hype gap+5
Incentives60
Confidence68
securityConfirmed3 publishers

NIST concedes manual NVD enrichment no longer scales, and gives 62 days to argue about the fix

A Federal Register RFI calls periodic scanning, static prioritization and manual remediation increasingly inadequate. Comments on redesigning the feed close October 13.

Publishers:cyberscoop.com infosecurity-magazine.com thecyberexpress.com

Perspective Coverage

3 publishers
Builder
Builder 35%
Operator
Operator 55%
Investor
Investor 10%

Reality

Evidence72
Adoption
Not scored
Hype gap+10
Incentives
Not scored
Confidence70
scienceOne report1 publisher

NIST and CISA finalise token-protection guidance citing a single stolen signing key

NIST and CISA have finalised implementation guidance for the identity tokens behind single sign-on, written for federal agencies and their cloud providers. The case the announcement rests on is one cited attack.

Publishers:nist.gov

Reality

Evidence58
Adoption16
Hype gap+12
Incentives45
Confidence60