Senate package bill would update FISMA, new Cyber Safety Review Board examines Log4j, CMMC program moves under DoD CIO, and more.