Inside Cybersecurity

May 20, 2024

Home Page

Home Page

By Sara Friedman

A proposed rule to amend the Defense Department’s acquisition policies for the Cybersecurity Maturity Model Certification program has entered the Office of Management and Budget review process.

By Sara Friedman

The House Financial Services Committee has approved along party lines a resolution from Rep. Andrew Garbarino (R-NY) to roll back a controversial Securities and Exchange Commission rulemaking that went into effect in December to require publicly traded companies to disclose cyber incidents.

By Jacob Livesay

The Cybersecurity and Infrastructure Security Agency will convene Software Bill of Materials stakeholders in September for updates on community-led workstreams and potential ways to automate software transparency efforts, on the heels of restructuring how the agency is facilitating work to foster greater SBOM adoption.

By Sara Friedman

A notice of proposed rulemaking to be considered at the Federal Communications Commission’s June meeting considers establishing requirements where large broadband providers would need to submit information on their plans to secure internet routing traffic and address potential cyber risks.

By Jacob Livesay

National Cyber Director Harry Coker discusses the White House’s efforts under the updated implementation plan for the national cyber strategy this week at a think tank event, while National Institute of Standards and Technology Director Laurie Locascio testifies on the agency’s priorities for 2025 in front of the House Science Committee.

By Sara Friedman

Republican commissioners on the Securities and Exchange Commission are supportive of a final rule to establish cyber requirements for broker-dealers, investment companies and advisors, while expressing concern over the potential volume of breach reports and highlighting changes to the rulemaking.

By Jacob Livesay

The federal government can effectively leverage its role as a procurer of software to produce positive security outcomes across the tech ecosystem, according to NIST Information Security and Privacy Advisory Board Chair Steve Lipner, who argues that the establishment of tort-based liability protections would impose unnecessary costs on manufacturers.

Topics