Page 7 - Continuous Diagnostics News Today

Federal CISO DeRusha Says CDM Crucial to Zero Trust, Backs FISMA Reform Federal Chief Information Security Officer Chris DeRusha explained today that the foundational elements of the Continuous Diagnostics and Mitigation (CDM) program are fundamental to moving Federal government network security to zero trust concepts and that implementation of the program only becomes more important as cyber threats increase. Delivering a keynote address at MeriTalk’s CDM Central: the Age of Cyber Defenders ...

By Justin Katz   Department of Energy Secretary Jennifer Granholm on Thursday said cybersecurity research and development will be a top priority for DOE technology programs in the agencys fiscal year 2022 budget and rebutted suggestions that the administration was not sufficiently prioritizing cybersecurity in the wake of multiple high-profile intrusions. "I know from our industry partners that I have spoken to that they are totally focused on it and I am completely committed to getting them,...

(L-R) FireEye CEO Kevin Mandia, SolarWinds CEO Sudhakar Ramakrishna and Microsoft President Brad Smith testify during a Senate Intelligence Committee hearing on Capitol Hill on February 23, 2021 in Washington, D.C. The hearing focused on the 2020 cyberattack that resulted in a series of data breaches in government agencies and private companies. (Photo by Drew Angerer/Getty Images) From a certain vantage point, the cybersecurity industry has never been healthier. Businesses and other organizati...

2 hours ago The contract, awarded through a large federal systems integrator via the Axonius GSA Schedule 70 listing with IntelliPeak Solutions, Inc., will provide cybersecurity asset management to more than 70 federal agencies NEW YORK–(BUSINESS WIRE)–#assetmanagement–Axonius, the leader in cybersecurity asset management, today announced it secured a contract to provide services to the Department of Homeland Security (DHS) Continuous Diagnostics and Mitiga...

Top Homeland Security Senators Want Details on Agencies Hit in SolarWinds, Microsoft Intrusions BlackJack3D/iStock.com email April 6, 2021 02:24 PM ET Sens. Gary Peters and Rob Portman also request more information on key defensive programs and federal cyber leadership. The top two senators on the Homeland Security and Governmental Affairs Committee are looking for documents showing which information systems, individuals, teams and programs at federal agencies w...

By Justin Katz   The top two senators on a committee overseeing the Department of Homeland Security are calling on the agency to provide documents that would highlight the capabilities and limitations of the federal governments flagship cybersecurity programs. Sens. Gary Peters (D-Mich.) and Rob Portman (R-Ohio) want the Cybersecurity and Infrastructure Security Agency to provide "documents sufficient to show" the technical capabilities and any planned improvements of Einstein and the Continuo...

CISA Orders Agencies to Conduct Fresh Scans of Microsoft Exchange Servers dem10/iStock.com email March 31, 2021 04:32 PM ET The agency issued supplemental guidance requiring new tests with Microsoft-provided tools and measures to harden the attractive target. The Cybersecurity and Infrastructure Security Agency set deadlines for federal agencies to implement supplemental actions under an emergency directive it issued following the abuse of vulnerabilities iden...

By Stephen Kovac   As agencies modernize networks in the work-from-anywhere world, they must eliminate traditional on-premise "castle and moat" security models. Modern security approaches are needed to protect hybrid and multi-cloud architectures -- and modern networks. Weve traditionally labelled network traffic as east to west or north to south. This is no longer relevant as more and more government users connect from devices outside the network perimeter. The network traffic compass used fo...

Addressing years-old cybersecurity failures could have helped the government catch the SolarWinds hack sooner, the GAO head says.

A look into strengthening and automating the country's cyber protections