Automation Can Help Navigate Security Framework Roadmap
Implementation of either STIGs or CIS benchmarks can be a challenge due to the disparate requirements and configurations of networks. Keep Reading
Some Hurdles for Facial Recognition Technology: Bad Photos, Aging Faces, Twins
Department of Homeland Security Science and Technology Directorate program manager notes that there is often a rift "between expectations and where technology really is." Keep Reading
Agencies Continue to Benefit from the NIST Cybersecurity Framework
CSF recently celebrated its fifth birthday. By the end of next year, Gartner estimates that 50 percent of organizations will have implemented the NIST Framework. Keep Reading
Bipartisan Bill Would Require Security Standards From IoT Vendors
The bill, introduced in the Senate by Mark Warner (D-Va.) and Cory Gardner (R-Colo.) and in the House by Reps. Will Hurd (R-Texas) and Robin Kelly (D-Ill.), hopes to use the federal government's power as a large consumer to raise security standards in the IoT ecosystem as a whole. Keep Reading
HSTRisk: To Confront the Cybersecurity Skills Shortage, Prioritize
Having an inaccurate top-risk list is symptomatic of a deeper problem that affects resource needs. Keep Reading
Draft NIST Report Focuses on Helping Agencies and Industry Manage IoT Cybersecurity
Cybersecurity and privacy risks for IoT devices can be thought of in terms of high-level 209 risk mitigation goals – protecting device security, protecting data security, and protecting individuals’ privacy. Keep Reading
HSTRisk: Finding the Right Path with the Cyber Risk Management Cheshire Cat
Take every practical step to ensure government can apply its limited cybersecurity resources as cost-effectively as possible. Keep Reading
PERSPECTIVE: Harnessing Nature’s Randomness to Guide Cybersecurity
CQC uses the natural physics of our world to translate the randomness of how light scatters into a method for creating and testing randomness in the generation of numbers for cryptography. Keep Reading
PERSPECTIVE: Hackers Shut Down Gas Pipeline Infrastructure Through Third Party
A wake-up call to critical infrastructure operators that attackers are continuously probing our networks for weaknesses. Keep Reading
GAO: DHS Needs to Enhance Efforts to Improve Network Security
GAO reported in 2016 that DHS's National Cybersecurity Protection System (NCPS) had only partially met its stated system objectives of detecting and preventing intrusions, analyzing malicious content, and sharing information. Keep Reading
