Sara Friedman

The Defense Department is moving forward with an interim final rule to accelerate adoption of revision three of NIST Special Publication 800-171 for the Cybersecurity Maturity Model Certification program, advancing new rules that were expected to go through a formal rulemaking process with the opportunity for public comment before finalization.

A coalition of industry groups representing federal contractors is asking the Pentagon to make changes to a proposed rule setting up a process for companies to disclose foreign ownership to the Defense Counterintelligence and Security Agency, in a joint submission which brings up national security concerns. The rulemaking would require defense contractors and subcontractors to provide information on “beneficial ownership and whether they are under foreign ownership, control, or influence (FOCI).” The Defense Department was required to issue the...

The Treasury Department has crafted a policy document that satisfies a key deadline for establishing a clearinghouse to address software patching under a June 2 artificial intelligence executive order, according to a banking industry source who provided a progress update on implementing the EO’s directives.

Lawmakers on both sides of the aisle remain optimistic over CISA’s upcoming final rule to implement a mandatory incident reporting regime required under a 2022 law, despite another delay in publishing the regulation, but warn that the rulemaking should meet congressional intent and address their concerns from CISA’s proposed approach.

The Department of Homeland Security has announced election security requirements as a condition of receiving grants through a significant source of federal funding for state and local governments distributed through the Federal Emergency Management Agency.

A report from the Congressional Research Services identifies opportunities for lawmakers to consider legislation to help meet the directives of a June 2 executive order on frontier artificial intelligence models and cybersecurity vulnerabilities.

The Defense Department is delaying the launch of the second phase of its Cybersecurity Maturity Model Certification program, which includes third party assessments, and is standing up a task force to review the initiative and next steps.

The accreditation body for the Pentagon’s Cybersecurity Maturity Model Certification program, the Small Business Administration and a large trade association for the defense industrial base are among the stakeholders weighing in on the Defense Department’s pause in implementation of CMMC phase two, which would have required third party assessments.

The Defense Department is asking for public comments to inform updates to its Cybersecurity Maturity Model Certification program through a request for information, as the Pentagon works to stand up a task force amid a pause on phase two of program implementation.

The White House has formally launched a clearinghouse leveraging artificial intelligence to address cybersecurity vulnerabilities, as required under a June executive order on frontier AI models.