White House issues draft guidance on cybersecurity for federal contractors

The Obama administration has published new draft guidance aimed at improving cybersecurity for the federal acquisition process and will collect public comments on the proposal through Sept. 10.

The guidance – released online at https://policy.cio.gov/ by the White House’s Office of Management and Budget – discusses security controls (including requirements based on standards from the National Institute of Standards and Technology), cyber incident reporting, information security assessments, information security continuous monitoring and business due diligence.

“Timely contractor reporting of...