Sara Friedman

The National Institute of Standards and Technology analyzes security challenges in using multi-cloud architectures in a new draft report out for public comment, which collects findings from a public-private working group exploring private, community and public clouds.

Rep. James Walkinshaw (D-VA) and other Democrats on the House Homeland Security Committee are asking the Government Accountability Office to conduct a review of the Cybersecurity and Infrastructure Security Agency’s workforce cuts under the second Trump administration.

The Information Technology Industry Council outlines a plan for the Defense Department to formally reach reciprocity between the Pentagon’s Cybersecurity Maturity Model Certification program and the General Services Administration’s FedRAMP program, as work gets underway to make reforms to the CMMC initiative.

An intelligence summit hosted by two trade associations features cyber officials from CISA, the Office of the National Cyber Director, the Defense Department and the Office of Management and Budget, while CISA hosts a webinar this week to review a June directive on vulnerability management.

The Treasury Department has stood up a task force to assist the financial sector with the move to quantum-safe technology in collaboration with the private sector, in a move intended to align with the President Trump’s June 22 executive order on post-quantum cryptography.

The Alliance for Digital Innovation offers options in a recent filing to reduce costs for small businesses who will need to get an assessment under the Pentagon’s Cybersecurity Maturity Model Certification program, including the creation of a government-funded enclave and the ability to recover costs for some assessments.

The defense industrial base should be looking at how to comply with revision three of NIST Special Publication 800-171, the government’s latest update to the standard for protecting controlled unclassified information, according to industry stakeholders who presented during a webinar hosted by the National Defense Industrial Association on preparing for the Pentagon’s cyber certification program.

President Trump has declared a national emergency to secure U.S. bulk power systems, signing an executive order which focuses on prohibiting certain transactions with foreign nationals who pose a threat to national security.

OpenAI and Anthropic are proposing in an open letter a set of principles and specific actions different stakeholders should take to prepare for cyber attacks enabled by artificial intelligence, in partnership with firms in the technology and financial sectors.

The National Institute of Standards and Technology is pulling back the curtain on findings that will inform an upcoming project on artificial intelligence agents and identity considerations, in a recent blog post exploring challenges in credential sharing and relying on human-in-the-loop controls.