The Government Accountability Office found that missing or vague cybersecurity requirements in acquisitions contracts for weapons systems often led to DOD getting a system that didn t meet its security needs.
By Justin Katz
Mar 10, 2021
To design a software vulnerability program for the federal government, the National Institute of Standards and Technology is reviewing work done by the Defense and Homeland Security Departments.
The Internet of Things Cybersecurity Improvement Act of 2020, passed in December, tasks the NIST director with publishing guidelines for receiving, reporting, coordinating and publishing information related to security vulnerabilities not limited to IoT devices in agency systems as well as the resolving those issues.
DOD published its vulnerability disclosure policy in 2016, and in September 2020 DHS issued Binding Operational Directive 20-01, “Improving Vulnerability Identification, Management, and Remediation.”
By Justin Katz
Mar 10, 2021
The Pentagon has ordered its agencies and commands to take actions in line with the emergency directive recently issued by the Cybersecurity and Infrastructure Security Agency in response to vulnerabilities found in Microsoft s Exchange software. Joint Force Headquarters - DODIN coordinated with the Cybersecurity and Infrastructure Security Agency and then issued a Cyber Tasking Order in line with CISA s emergency directive to all DOD agencies and commands directing them to take actions necessary to protect DoD networks and IT systems, Russell Goemaere, a Pentagon spokesman, told FCW Tuesday.
Goemaere added the Defense Department is also coordinating with the National Security Agency on further steps to protect its networks.
Colin Kahl, the Biden administration s pick to be the undersecretary of defense for policy, talked cyber and defense while dodging critiques on past social media posts.
The Defense Innovation Unit issued 56 prototype other transaction agreements in 2020, according to a recent report, bringing the total number of OTAs issued to 208 since its inception in 2015.