Government
Government | News, how-tos, features, reviews, and videos
UK NCSC updates Cyber Essentials technical controls requirements and pricing structure
Technical controls update includes revisions surrounding the use of cloud services, multi-factor authentication, and password management. New pricing structure better reflects organisational size and complexity.
China's Personal Information Protection Law (PIPL) presents challenges for CISOs
PIPL's data localization mandate places unique requirements on businesses operating in China, and regulators have great leeway to assess fines.
California state CISO: the goal is “operating as a whole government”
Partnerships with other state entities elevate security capabilities and enhance information sharing to provide better security overall, says California state CISO Vitaliy Panych.
TSA to issue cybersecurity requirements for US rail, aviation sectors
New rules include reporting incidents to CISA and naming cybersecurity leads, but experts and industry representatives cite lack of input.
Telos, Splunk, and StackArmor streamline ATO compliance on AWS
The FASTTR initiative from the three cloud and security companies aims to help regulated defense contractors and software providers navigate through complex government security regulations including FedRAMP, CMMC, FISMA, and...
Software cybersecurity labels face practical, cost challenges
The federal government wants consumer software to have cybersecurity labels; experts question the feasibility of the mandate.
![A gavel rests on open law book. [law / regulation / compliance / legal liability]](https://images.idgesg.net/images/article/2020/09/gavel_mallett_rests_on_open_law_book_legal_liability_risk_regulations_compliance_by_andreypopov_gettyimages-1021544574_2400x1600-100860121-small.3x2.jpg?auto=webp&quality=85,70)
Security and privacy laws, regulations, and compliance: The complete guide
This handy directory provides summaries and links to the full text of each security or privacy law and regulation.
9 notable government cybersecurity initiatives of 2021
Governments are increasingly taking on cybersecurity threats, as these nine government-led initiatives from around the globe show.
China's PIPL privacy law imposes new data handling requirements
The Personal Information Protection Law will force global companies doing business in China to be more careful with cross-border flow of personal information.
CISA’s Joint Cyber Defense Collaborative: Why it just might work
New CISA director Jen Easterly is tasked with implementing the JCDC, which promises to make US critical infrastructure more resilient to cyberattacks. Her history makes her the right person for the job.
Data sovereignty laws place new burdens on CISOs
More than 100 countries now require data on their citizens be stored or processed within their boundaries, presenting new data protection challenges.
GAO report faults CIOs, OMB for slow adoption of cybersecurity recommendations
The US agency highlight four areas where cybersecurity gaps in federal agencies threaten national security. Cites OMB for not helping CIOs get available funds.
Biden memo, infrastructure deal deliver cybersecurity performance goals and money
The White House initiatives and expected passage of the US infrastructure plan will set new cybersecurity standards for critical infrastructure, provide money to state and local governments.
18 new cybersecurity bills introduced as US congressional interest heats up
The new bills, many with bi-partisan support, aim to increase cybersecurity funding, improve breach reporting, investigate cryptocurrencies, and more.
EU takes aim at ransomware with plans to make Bitcoin traceable, prohibit anonymity
The European Commission has set out new legislative proposals to make crypto transfers more traceable. While the plans will close some existing loopholes, the impact on cybercrime is likely to be minimal, experts say.
TSA issues second cybersecurity directive for pipeline companies
Experts applaud the agency's new, detailed security requirements for US pipeline operators but question how they will be enforced or monitored.
Ransomware talks: How Biden could push Putin to the table
Under pressure to end the ransomware scourge, the White House faces strong headwinds. The problem: Putin has no motivation to change the status quo.
How to protect PII under GDPR
The EU's General Data Protection Regulation requires companies to protect the privacy of their EU customers. That means keeping personally identifiable information (PII) safe. Here's what you need to know.
-
Sponsor Article
Sponsored -
White Paper
-
eGuide
Sponsored -
White Paper
-
White Paper
