During a House Judiciary Committee hearing on securing elections, witnesses from law enforcement agencies were asked a litany of questions related to the security of U.S. elections for 2020, including what kind of new measures were being taken during this cycle. […]
Officials from the Departments of Defense (DoD), Veterans Affairs (VA), and the Cybersecurity and Infrastructure Security Agency (CISA) are bootstrapping an effort to further clarify and detail roles and career paths of the Federal cybersecurity workforce, the officials said Oct. 21 at the ACT-IAC Imagine Nation 2019 conference. […]
The Congressional Budget Office (CBO) said in an Oct. 11 report that H.R. 1975, the Cybersecurity Advisory Committee Authorization Act of 2019, would cost $2 million dollars over the next five years to implement. […]
The Department of Homeland Security’s (DHS) .gov Cybersecurity Architecture Review program (.govCAR) has been looking at its mobile environment for capabilities and cybersecurity posture. […]
While large-scale IT projects can spell success for Federal agencies in the longer term, smaller and shorter-duration projects may provide a better solution to advance the cause of IT modernization, Federal officials said today. […]
Now seven years from the launch of the Department of Homeland Security’s (DHS) Continuous Diagnostics and Mitigation (CDM) program, aimed at engineering lasting improvement in Federal agency network security, the move from legacy to cloud-based infrastructure is accelerating rapidly toward the next world of managed services. […]
The Cybersecurity and Infrastructure Security Agency (CISA) remains highly confident in the agency’s efforts to defend against nation-state cyber threats including those targeting U.S. elections and supply chains, a senior CISA official said today. […]
The House of Representatives has approved the Cybersecurity Vulnerability Remediation Act (H.R. 3710), which would increase the Department of Homeland Security’s (DHS) responsibilities in addressing a variety of cybersecurity vulnerabilities. […]
The Department of Homeland Security (DHS) needs to improve its cyber workforce planning to meet Congressional mandates and improve the department’s capabilities, according to a report from DHS’ inspector general, released September 23. […]
The House Homeland Security Committee approved legislation on Sept. 25 a cyber committee within the Department of Homeland Security’s (DHS) Cybersecurity and Infrastructure Security Agency (CISA). […]
With the upcoming release of the Federal Data Strategy’s final action plan on the horizon, Federal chief data officers (CDOs) agreed on Sept. 25 that the strategy holds plenty of promising features to advance their work, including an official CDO council that will help them share ideas and experiences. […]
The Department of Homeland Security (DHS) improved its performance on the department’s FISMA (Federal Information Security Modernization Act) audit, going from Level 3 in Fiscal Year 2017 to Level 4 in FY2018, an agency inspector general’s report issued this month shows. […]
The U.S. Department of Homeland Security’s (DHS Cybersecurity and Infrastructure Security Agency (CISA) released the Information and Communications Technology (ICT) Supply Chain Risk Management Task Force’s first interim report, which details the groups’ progress since its formation. […]
Federal cyber officials from the Office of Management and Budget (OMB), National Institute of Standards and Technology (NIST), and the Cybersecurity of Infrastructure Security Agency (CISA) highlighted today that IT modernization and implementing OMB’s guidance are some of their biggest priorities. […]
As the 2020 election cycle revs up, Cybersecurity and Infrastructure Security Agency (CISA) Director Christopher Krebs said today that he believes new National Security Advisor Robert O’Brien will take security seriously and will allow CISA a great opportunity to continue improving cybersecurity efforts. […]
Federal cybersecurity officials spoke about the strategies they’re pursuing to address workforce issues within their agencies during a Sept. 18 Cybersecurity and Infrastructure Security Agency (CISA) Cybersecurity Summit panel. […]
The head of the Cybersecurity and Infrastructure Security Agency (CISA) said today that the spate of ransomware attacks that hit school systems in Texas and Louisiana over the past month “got pretty close” to qualifying as a “large-scale cyber event,” which he said begs the need to further develop Federal doctrine about how to respond to major events. […]
On Sept. 13, the Cybersecurity and Infrastructure Security Agency (CISA) and government and industry members on the Information and Communications Technology (ICT) Supply Chain Risk Management (SCRM) Task Force voted to approve the recommendations of three of the four constituent Working Groups. […]
Cybersecurity and Infrastructure Security Agency (CISA) Director Christopher Krebs announced the agency’s strategic intent last month at Auburn University, but what does that strategy look like in action? […]
The United States continues efforts to improve election security and cybersecurity posture, but adversarial threats are still present and evolving, experts agree. […]
Kevin Cox, program manager for the Department of Homeland Security’s (DHS) Continuous Diagnostics and Mitigation (CDM) program, today detailed several priorities for the program office in FY2020 that begins next month. Those include focus on the Agency-Wide Adaptive Risk Enumeration (AWARE) algorithm, the new dashboard ecosystem, enterprise mobility management, cloud security, and protection of high-value assets. […]
Reps. John Ratcliffe, R-Texas, and Ro Khana, D-Calif., announced today that they will formally introduce the Advancing Continuous Diagnostics Mitigation (CDM) Act later this week. The House bill, which was dropped off on the House floor today, is identical to its Senate companion bill which was introduced on July 30. […]
Kevin Cox, Program Manager for the Department of Homeland Security’s Continuous Diagnostics and Mitigation (CDM) Program, sat down with MeriTalk in June to talk about a range of new and ongoing program activities that are vital to improving Federal agency security. […]
Legacy IT systems and limited authority for the agency’s CIO slowed the Federal Emergency Management Agency’s (FEMA) emergency response activities in 2017, according to an audit by the Department of Homeland Security’s (DHS’) Office of the Inspector General (OIG) released August 27. […]
Running a customer-facing business with monetary transactions is stressful enough without the stress of threat actors E-Skimming by hacking your business networks system. […]
The Department of Homeland Security Science and Technology Directorate (S&T) released a study today that reveals how integrating enterprise mobility management (EMM) capabilities with mobile app vetting tools can improve mobile device security. […]
The Department of Homeland Security (DHS) is creating a standing form to allow industry, academia, and other private sector entities to report vulnerabilities on its networks, an upcoming Federal Register post says. […]
The Department of Homeland Security (DHS) is taking a cross-component agency approach in securing DHS’ 17 Security Operations Centers (SOCs), DHS CIO John Zangardi explained in an interview with GovernmentCIO released this week. […]
MeriTalk sat down in June with Kevin Cox, Program Manager for the Department of Homeland Security’s Continuous Diagnostics and Mitigation (CDM) Program, to get the latest on program priorities for the coming months and beyond. […]
As physical and cybersecurity threats converge to create multi-faceted challenges, organizations need to better plan for security and address all threat vectors, said Brian Harrell, assistant director for infrastructure security at the Cybersecurity and Infrastructure Security Agency (CISA). […]






















