The Fiscal Year 2019 audit of the Treasury Department found enough control issues with the department’s government-wide cash management and Federal debt IT systems to warrant a management report on the deficiencies from Treasury’s inspector general and auditor KPMG. […]
Tags
Cybersecurity
For agencies pursuing new ways to share and manage data, Government Accountability Office (GAO) Director of IT and Cybersecurity Nick Marinos recommends focusing on the agency’s mission and incorporating security early on in the process. […]
New research shows that email is still a weak link in U.S. election infrastructure, with only five percent of the nation’s largest counties protecting election officials from impersonation attempts. […]
The Department of Justice (DoJ) updated its Policy on the Use of Unmanned Aircraft Systems (UAS), placing an emphasis on cybersecurity and mitigating supply chain risks that may come from drones. […]
The General Service Administration’s (GSA’s) Office of the Inspector General (OIG) released its semiannual report to Congress on November 27, recommending $79 million in cost savings for the time period. […]
The Department of Energy’s (DoE) Office of the Inspector General (OIG) reported numerous cybersecurity weaknesses at DoE and issued 54 recommendations to the agency throughout Fiscal Year 2019, according to a report released on Nov. 19. […]
An Office of the Inspector General (OIG) report cites prosecuting cybercrime in the age of encryption, maintaining election security, and protecting its own IT systems as areas of top management and performance challenges facing the Department of Justice (DOJ). […]
An annual report issued by the Department of Homeland Security’s (DHS) Office of Inspector General (OIG) flags leadership stability and cybersecurity issues among the “most serious management and performance challenges” facing the agency currently. […]
To improve the future of cybersecurity posture for the United States, experts agree that improving on basic security measures and shifting culture to compete with industry in the workforce are essential elements. […]
An audit of the finances of the Small Business Administration highlighted the need for improved cybersecurity and internal controls over IT systems. […]
Attacks by nation-state actors and exploits targeting supply chains are among top cybersecurity concerns of IT officials, a report by CrowdStrike released on Nov. 19 reported. […]
Rep. Jim Langevin, D-R.I., a co-chair of the House Cybersecurity Caucus and one of the few widely acknowledged experts in Congress on cybersecurity, said on Nov. 14 that a lack of data “baselines” on security issues continues to hamper efforts in Congress – and the nation as a whole – to improve security. […]
Rep. Bennie Thompson, D-Miss., chairman of the House Homeland Security Committee, suggested on Nov. 14 that Congress and the Trump administration could get more done to improve Federal cybersecurity if more agencies critical to that effort were headed by Senate-confirmed secretaries, rather than acting secretaries. […]
The National Aeronautics and Space Administration (NASA) is a target for cybercriminals, but the agency is failing to adequately protect itself, according to a Nov. 13 report by the NASA Office of the Inspector General (OIG). […]
A Cybersecurity Infrastructure and Security Agency (CISA) interagency workgroup – focused at least in part on supply chain and control systems security issues – aims to have an executive committee meeting early next year to discuss cybersecurity challenges in both the public and private sectors. […]
A new study suggests that organizations should shift their cybersecurity focus to defending non-Windows infrastructure, such as Linux, while deemphasizing attribution of Advanced Persistent Threats (APTs) to any particular nation-state. […]
The global shortage for cybersecurity professionals reached 4.07 million and the U.S. gap nears 500,000, according to last week’s report by the non-profit membership association for information security leaders, (ISC)2. […]
As the National Aeronautics and Space Administration (NASA) focuses on returning to the moon by 2024, cyber resiliency belongs in every step of the process, according to NASA CIO Renee Wynn. […]
The Department of Energy (DOE) supports legislative efforts in Congress to fund more investment in power grid cybersecurity nationwide, DOE Assistant Secretary Daniel Simmons testified at a Nov. 6 Senate Subcommittee on Energy hearing about current legislation. […]
A new bill backed by a bipartisan group of leaders on the Senate Commerce, Science, and Transportation Committee aims to boost the Federal cybersecurity workforce with new guidelines for agencies, clearer career paths for the workforce, and improved coordination between agencies. […]
The Treasury Department received mixed results on its fiscal year 2019 FISMA audit, with few weak spots identified but still falling below the level of effective, according to the audit released October 25 by the department’s inspector general. […]
The Federal Maritime Commission (FMC), the agency regulating U.S. international ocean transportation, is not responding to cybersecurity vulnerabilities in a timely manner, according to a FISMA audit from its Office of the Inspector General (OIG). […]
The Defense Information Systems Agency (DISA) released a request for information on artificial intelligence (AI) and machine learning (ML) technologies that can detect and combat cyberattacks as they occur. […]
In a Friday letter to President Trump’s acting Chief of Staff Mick Mulvaney, Rep. Ted Lieu, D-Calif., demanded answers about recent departures from the administration of key Federal cybersecurity officials. […]
The Social Security Administration did not remediate multiple known vulnerabilities for over one year, according to a summary of a report from SSA’s inspector general, released October 24. […]
The National Institute of Standards and Technology (NIST) is tackling managed service provider (MSPs) cybersecurity by developing a customizable reference model that MSPs can adapt to fit their program needs. […]
The Department of Veterans Affairs (VA) mitigated security threats and met security standards in most domains of mobile device management, according to a report from VA’s inspector general released October 22. […]
There’s a government and national responsibility in communicating the minimum standards for cyber security engineering, according to Chief of Missions for the Department of Defense’s (DoD) Joint Artificial Intelligence Center (JAIC) Col. Stoney Trent. […]
A new report from think tank New America warns of the risks to patient safety posed by increasing adoption of technology in healthcare and the associated cyber risks. […]
The Department of the Treasury’s inspector general added IT acquisition and project management as one of the agency’s top challenges and kept cybersecurity on the list of the most serious management and performance challenges facing the department. […]