To print this article, all you need is to be registered or login on Mondaq.com.
In response to increasing cybersecurity threats, including
the SolarWinds and Colonial Pipeline attacks, President
Biden issued an Executive Order on May 12, 2021, that enhances
cybersecurity requirements for federal contractors. The Executive
Order applies to contractors that provide government-procured
software and those that operate the vital machinery that
ensures our safety. Sections 2 and 4 of the Executive Order
will have the greatest impact on contractors due to the new
requirements discussed below.
Sharing Threat Information Between the Public and Private
Sectors
Section 2 aims to remove barriers to sharing information about
Last week, the White House issued a new Executive Order (the “EO” or “Order”) on cybersecurity. The EO responds to ever-increasing malicious cyber campaigns threatening the public and.
Advertisement
In the Wake of Solar Winds Compromise, CISA and NIST Issue Guidance for Preventing, Defending and Mitigating Software Supply Chain Attacks Thursday, May 20, 2021
The Cybersecurity & Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology (NIST) jointly published a new resource as part of their ongoing efforts to promote awareness of, and help organizations defend against, supply chain risks. The publication,
Defending Against Software Supply Chain Attacks, provides recommendations for software customers and vendors as well as key steps for prevention, mitigation and resilience of software supply chain attacks.
Software supply chain attacks occur when a cyber threat actor infiltrates a software vendor’s network and employs malicious code to compromise the software before the vendor sends it to their customers. A software supply chain attack can occur at any phase of the supply chain, including design, development an
On May 12, 2021, President Biden signed an executive order (EO) mandating that the federal government significantly improve cybersecurity within its networks and modernize federal cyber.
The Cybersecurity & Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology (NIST) jointly published a new resource as part of their ongoing efforts.