ZRA

Posting the latest updates on #cybersecurity legislation, regulation, policy, and liability developments.

[ZRA @ZeichnerRisk]

The DFARS rule has a 60-day public comment period. This is a key step in the ongoing evolution of the CMMC program. #Cybersecurity https://t.co/dm94ldLp3p

[ZRA @ZeichnerRisk]

The new rule amends the Defense Federal Acquisition Regulation Supplement (DFARS), following the first proposed rule published in Dec. 2021. The CMMC 2.0 was announced after a thorough internal review. #Cybersecurity https://t.co/dm94ldLp3p

[ZRA @ZeichnerRisk]

@DeptofDefense has released proposed acquisition requirements for the Cybersecurity Maturity Model (CMMC) 2.0 program. This is part of a two-step process to implement the latest version through rulemaking. #Cybersecurity https://t.co/dm94ldLp3p

[ZRA @ZeichnerRisk]

By creating metrics for global competitiveness in QIST, NSTC aims to help the U.S. and its allies lead in developing quantum technologies. #technology https://t.co/YUGBs5qQeg

[ZRA @ZeichnerRisk]

NSTC recommends that the U.S. government establish long-term funding for international QIST collaboration and improve interagency and global coordination. #technology https://t.co/YUGBs5qQeg

[ZRA @ZeichnerRisk]

The National Science and Technology Council (NSTC) has released a report on advancing quantum information science and technology (QIST) in the U.S. #technology https://t.co/YUGBs5qQeg

[ZRA @ZeichnerRisk]

@FedRAMP’s draft policy emphasizes the use of approved cryptography, prioritizing vulnerability patches, and ensuring federal information isn’t left unencrypted. Submit your feedback by September 9, 2024. #Security https://t.co/8JfyQnZTiM

[ZRA @ZeichnerRisk]

@FedRamp is seeking feedback on its draft “FedRAMP Policy for Cryptographic Module Selection and Use” by September 9, 2024. The policy focuses on improving cloud service security through approved cryptography and timely vulnerability patches. #Security https://t.co/8JfyQnZTiM

[ZRA @ZeichnerRisk]

@FedRAMP, in coordination with GSA, DOD, DHS, and other agencies, will manage continuous monitoring for existing authorizations and prioritize new cloud services during the modernization process. #Cybersecurity https://t.co/INu1HRk3yh

[ZRA @ZeichnerRisk]

@FedRAMP will transition to a single “FedRAMP Authorized” designation as part of the changes outlined in M-24-15. This new process will streamline cloud service authorizations. #Security https://t.co/INu1HRk3yh

[ZRA @ZeichnerRisk]

@NIST is encouraging computer system admins to start transitioning to NIST’s new post-quantum cryptography (PQC) standards now. #Cybersecurity https://t.co/jwAjvuv5Z0

[ZRA @ZeichnerRisk]

@NIST has released its first complete standards from the post-quantum cryptography (PQC) project. The new standards include encryption algorithms, implementation instructions, and intended uses. #technology https://t.co/jwAjvuv5Z0

[ZRA @ZeichnerRisk]

Panelists include Bill Fisher (NIST), Nick Lozano (Council of Insurance Agents & Brokers), Stephanie Walker (FBI), and Dr. Ann Westerheim (Ekaru). Don’t miss insights on ransomware risk management and reducing your vulnerability. #CyberSecurity https://t.co/NXYgUjj7QY

[ZRA @ZeichnerRisk]

@NIST’s webinar on August 15, 2:00-3:00 EDT, “Ransomware Prevention, Detection, Response, and Recovery,” will feature experts discussing ransomware delivery methods, challenges for small businesses, attack signs, and response steps. #Cybersecurity https://t.co/NXYgUjjFGw

[ZRA @ZeichnerRisk]

The Coast Guard's National Maritime Security Advisory Committee will meet on August 13 (2:45-4:45 PST) and August 14 (9:00-10:00 PST) to discuss ongoing tasks, including proposed cybersecurity rules for the Marine Transportation System. #Cybersecurity https://t.co/ijXW3M3nmM

[ZRA @ZeichnerRisk]

To support these priorities, @USAGov aims to foster a strategic stakeholder community, develop agile standards, conduct R&D, ensure swift deployment, manage supply chain risks, build workforce capacity, and mitigate systemic risks. #security https://t.co/boaGLGCddl

[ZRA @ZeichnerRisk]

@WhiteHouse published a fact sheet outlining five priority cyber-enabled technologies for energy transition: Batteries & Management Systems, Inverter Controls, Distributed Control Systems, Building Energy Management, and EVs & Supply Equipment. #technology https://t.co/boaGLGCL2T

[ZRA @ZeichnerRisk]

The report supports the Open-Source Software Prevalence Initiative (OSSPI) to enhance understanding of open-source software use in critical infrastructure, aiming to bolster security across the ecosystem. #technology https://t.co/QjDYuFexcd

[ZRA @ZeichnerRisk]

@ONCD released a summary report and Fact Sheet on the Open-Source Software Security RFI, consolidating community feedback received since the August 10, 2023, RFI. #Cybersecurity https://t.co/QjDYuFdZmF

[ZRA @ZeichnerRisk]

CISA announced that the NSTAC will meet on August 27, 2:00-3:00 EDT, to discuss current activities and updates on cybersecurity and National Security/Emergency Preparedness, including the Cloud Service Providers Security Study. #Cybersecurity https://t.co/wMtEVnaWzR