House passes NDAA, OMB issues FISMA guidance, TSA requires 24-hour cyber incident reporting for rail operators, NIST releases IoT guidance, and more.