Cyber Defense

Lawmaker advocates 'all-of-the-above' approach to fix cyber worker shortage

The chairman of the House Homeland Security Committee’s cybersecurity panel said a greater focus on cyber education in K-12 schools could help fill the roughly 700,000 vacant cyber jobs across the country.

Public sector apps face widespread security challenges, report reveals

A new study found alarming security vulnerabilities across the vast majority of public applications over the last year.

Experts call for overhaul of 'outdated' critical infrastructure cyber policy

A new report analyzes the federal government’s approach to infrastructure cybersecurity as a key strategy document is getting a rewrite.

NARA publishes first update to cybersecurity records rules since 2014

The agency is issuing an update to the General Records Schedule, including new rules for packet capture and cybersecurity incident logs.

What should the government do in 2023 to fill its cyber workforce shortage?

The threat of cyberattacks makes filling these positions critical, experts say.

NIST, CISA finalizing guidance for identity and access management post-SolarWinds

The epic intrusion campaign has turned up the brights on vendors providing authentication services, but agencies will still need to be actively engaged for effective implementation.

NIST revises cybersecurity guidelines specifically for HIPAA

NIST will accept comments on the updated draft publication regarding HIPAA’s Security Rule until September 21. 

NSA chief: Cyber Command did 9 international missions last year

Gen. Paul Nakasone acknowledged proactive missions to diffuse cyber threats to U.S. elections and other critical infrastructure and stressed the importance of artificial intelligence to advance such efforts.

Air Force leaders tout cyber capabilities

Cyber warfare isn't a new domain anymore, but it still takes time to prepare for it, top Air Force officials said.

Cyber executive order close, Napolitano says

DHS head defends the need for executive action on cybersecurity, but says it won't include some things that 'only legislation can do.'

Federal data breaches: How long is too long to inform victims?

Informing potential victims of a data breach as early as possible seems like a sensible policy, but it's not that easy.

DISA strategic plan focuses on enterprise, cybersecurity and efficiencies

The latest document is part of a new, multi-layered planning methodology for DISA.

The bright side of budget cuts

Fiscal pressures are forcing the military branches to collaborate and share, potentially leading to smarter, better IT projects, leaders say.

Is the government dropping the ball on cybersecurity?

Despite the potential danger of the cyber threat and a rising chorus of voices urging action, the government seems to be making only halting progress. There are several reasons for that, and no easy solutions.

US not ready for cyberattack, NSA director warns

Legislation, partnership with industry are critical to bolster underpowered U.S. cyber defenses, according to the Cyber Command's chief.

Budget cuts, veto risk complicate defense appropriations bill

The House is getting ready to pass the 2013 defense appropriations bill, but the specter of sequestration -- and a possible veto -- loom over the funding plan.

Cyber warfare: New battlefield, new rules

The old rules of war don’t apply in cyberspace, so the federal government is writing a new book for the new age of combat.